From 7ba6b81eee5f0c5381129e2d46dd41026c83f02f Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 14:37:42 -0400
Subject: [PATCH 01/46] Fix Cargo hosted workspace redirects

Resolve inherited dependency aliases through their workspace definitions
and match local lockfile owners by both package name and version. This
allows valid workspace patches while refusing consumers outside the
editable project.

Read quoted dependency values and annotated registry tables consistently
so repeated application cannot leave an alias unpatched or create an
invalid duplicate TOML table.

Validated with 70 Cargo redirect unit tests and real service-backed
hosted, vendored service, and vendored build installs using fresh Cargo
caches, locked offline builds, integrity rejection, and revert.

Assisted-by: Codex:gpt-6-astra
---
 .../src/patch/redirect/mod.rs                 | 563 +++++++++++++++---
 1 file changed, 471 insertions(+), 92 deletions(-)

diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index ebcd2fab..b22fe03e 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -765,11 +765,13 @@ fn rewrite_cargo(
     for (path, text) in manifests.iter_mut() {
         *text = to_lf(path, std::mem::take(text));
     }
-    // Each manifest's own `[package] name` — how Cargo.lock names the
-    // source-less (workspace / path) package it declares.
-    let manifest_packages: Vec<Option<String>> = manifests
+    let workspace_version = files
+        .get("Cargo.toml")
+        .and_then(|text| text.parse::<toml_edit::DocumentMut>().ok())
+        .and_then(|doc| cargo_workspace_package_version(&doc).map(str::to_string));
+    let manifest_packages: Vec<Option<(String, String)>> = manifests
         .iter()
-        .map(|(_, text)| cargo_manifest_package_name(text))
+        .map(|(path, text)| cargo_manifest_package_id(text, path, workspace_version.as_deref()))
         .collect();
     let edits_before = result.edits.len();
     let mut changed_manifests: std::collections::BTreeSet<String> =
@@ -950,9 +952,10 @@ fn rewrite_cargo(
         // a symlink) — keeps resolving it from crates.io, so the repointed
         // lock is unsatisfiable and that consumer compiles the unpatched copy.
         if let Some(lock_text) = cargo_lock.as_deref() {
-            let pinned_packages: std::collections::BTreeSet<&str> = toml_plans
+            let pinned_packages: std::collections::BTreeSet<(&str, &str)> = toml_plans
                 .iter()
-                .filter_map(|(i, _)| manifest_packages[*i].as_deref())
+                .filter_map(|(i, _)| manifest_packages[*i].as_ref())
+                .map(|(name, version)| (name.as_str(), version.as_str()))
                 .collect();
             let blocking =
                 cargo_unpinnable_dependents(lock_text, &dep.name, &dep.version, &pinned_packages);
@@ -1187,14 +1190,44 @@ fn cargo_requirement_excludes_detail(
     )
 }
 
-/// The `[package] name` a manifest declares (`None` for a virtual workspace
-/// root or an unparseable file).
-fn cargo_manifest_package_name(text: &str) -> Option<String> {
-    let doc = text.parse::<toml_edit::DocumentMut>().ok()?;
-    doc.get("package")?
-        .get("name")?
+fn cargo_workspace_package_version(doc: &toml_edit::DocumentMut) -> Option<&str> {
+    doc.get("workspace")?
+        .get("package")?
+        .get("version")?
         .as_str()
-        .map(str::to_string)
+}
+
+fn cargo_manifest_package_id(
+    text: &str,
+    path: &str,
+    workspace_version: Option<&str>,
+) -> Option<(String, String)> {
+    let doc = text.parse::<toml_edit::DocumentMut>().ok()?;
+    let package = doc.get("package")?;
+    let name = package.get("name")?.as_str()?;
+    let version = match package.get("version") {
+        None => "0.0.0",
+        Some(version) => match version.as_str() {
+            Some(version) => version,
+            None if version.get("workspace").and_then(toml_edit::Item::as_bool) == Some(true) => {
+                if doc.get("workspace").is_some() {
+                    cargo_workspace_package_version(&doc)?
+                } else {
+                    if let Some(workspace) = package.get("workspace") {
+                        let dir = path.strip_suffix("/Cargo.toml").unwrap_or("");
+                        if crate::utils::cargo_workspace::normalize_rel(dir, workspace.as_str()?)
+                            .is_none_or(|workspace| !workspace.is_empty())
+                        {
+                            return None;
+                        }
+                    }
+                    workspace_version?
+                }
+            }
+            None => return None,
+        },
+    };
+    Some((name.to_string(), version.to_string()))
 }
 
 /// The Cargo.lock packages that depend on `crate_name@version` and that a
@@ -1208,7 +1241,7 @@ fn cargo_unpinnable_dependents(
     lock: &str,
     crate_name: &str,
     version: &str,
-    pinned_packages: &std::collections::BTreeSet<&str>,
+    pinned_packages: &std::collections::BTreeSet<(&str, &str)>,
 ) -> Vec<String> {
     let Ok(doc) = lock.parse::<toml_edit::DocumentMut>() else {
         return vec!["Cargo.lock (it does not parse as TOML)".to_string()];
@@ -1246,7 +1279,7 @@ fn cargo_unpinnable_dependents(
                 };
                 out.push(format!("{name} {pkg_version} ({kind})"));
             }
-            None if !pinned_packages.contains(name) => {
+            None if !pinned_packages.contains(&(name, pkg_version)) => {
                 out.push(format!(
                     "{name} {pkg_version} (a path package whose Cargo.toml is outside the \
                      project or not rewritable)"
@@ -1477,12 +1510,6 @@ fn is_socket_patch_registry_name(value: &str) -> bool {
 /// the inline spelling and read the other three as "not redirected".
 pub(crate) fn cargo_socket_registry_pin(content: &str, crate_name: &str) -> Option<String> {
     let lines: Vec<&str> = content.split('\n').collect();
-    let socket_value = |text: &str| -> Option<String> {
-        CARGO_TOML_REGISTRY_VAL_RE
-            .captures(text)
-            .map(|c| c[1].to_string())
-            .filter(|v| is_socket_patch_registry_name(v))
-    };
     let mut section = CargoTomlSection::Other;
     for (idx, raw) in lines.iter().enumerate() {
         let trimmed = raw.trim_start();
@@ -1517,13 +1544,7 @@ pub(crate) fn cargo_socket_registry_pin(content: &str, crate_name: &str) -> Opti
                     if k != name {
                         return None;
                     }
-                    let v = rest.trim_start().strip_prefix('=')?.trim();
-                    Some(
-                        v.strip_prefix('"')
-                            .and_then(|s| s.split('"').next())
-                            .unwrap_or(v)
-                            .to_string(),
-                    )
+                    cargo_toml_string(rest.trim_start().strip_prefix('=')?)
                 })
             };
             let is_ours = match value_of("package") {
@@ -1548,11 +1569,14 @@ pub(crate) fn cargo_socket_registry_pin(content: &str, crate_name: &str) -> Opti
         if let Some(dotted) = rest_trim.strip_prefix('.') {
             // `<crate>.registry = "socket-patch-…"`: a spelling this rewriter
             // refuses to write, but a hand edit can leave one behind.
-            if key == crate_name
-                && parse_cargo_entry_key(dotted).is_some_and(|(k, _)| k == "registry")
-            {
-                if let Some(reg) = socket_value(trimmed) {
-                    return Some(reg);
+            if key == crate_name {
+                let registry = parse_cargo_entry_key(dotted)
+                    .filter(|(key, _)| key == "registry")
+                    .and_then(|(_, rest)| rest.trim_start().strip_prefix('='))
+                    .and_then(cargo_toml_string)
+                    .filter(|registry| is_socket_patch_registry_name(registry));
+                if registry.is_some() {
+                    return registry;
                 }
             }
             continue;
@@ -1567,12 +1591,14 @@ pub(crate) fn cargo_socket_registry_pin(content: &str, crate_name: &str) -> Opti
             continue;
         };
         let inner = &value[1..close];
-        let is_ours = match CARGO_TOML_PACKAGE_RE.captures(inner) {
-            Some(c) => c[1] == *crate_name,
+        let is_ours = match cargo_toml_inline_string(inner, "package") {
+            Some(package) => package == crate_name,
             None => key == crate_name,
         };
         if is_ours {
-            if let Some(reg) = socket_value(inner) {
+            if let Some(reg) = cargo_toml_inline_string(inner, "registry")
+                .filter(|registry| is_socket_patch_registry_name(registry))
+            {
                 return Some(reg);
             }
         }
@@ -1695,6 +1721,25 @@ fn parse_cargo_entry_key(line: &str) -> Option<(String, &str)> {
     }
 }
 
+fn cargo_toml_string(value: &str) -> Option<String> {
+    let document = format!("value = {value}")
+        .parse::<toml_edit::DocumentMut>()
+        .ok()?;
+    document.get("value")?.as_str().map(str::to_string)
+}
+
+fn cargo_toml_inline_string(inner: &str, key: &str) -> Option<String> {
+    let document = format!("dependency = {{{inner}}}")
+        .parse::<toml_edit::DocumentMut>()
+        .ok()?;
+    document
+        .get("dependency")?
+        .as_inline_table()?
+        .get(key)?
+        .as_str()
+        .map(str::to_string)
+}
+
 struct CargoTomlPlan {
     content: String,
     edits: Vec<FileEdit>,
@@ -1740,11 +1785,9 @@ enum CargoTomlAction {
 static CARGO_TOML_HEADER_RE: LazyLock<Regex> = LazyLock::new(|| {
     Regex::new(r"^\[([^\]]+)\]\s*(?:#.*)?$").expect("static section-header regex is valid")
 });
-static CARGO_TOML_PACKAGE_RE: LazyLock<Regex> = LazyLock::new(|| {
-    Regex::new(r#"\bpackage\s*=\s*"([^"]*)""#).expect("static package-key regex is valid")
-});
 static CARGO_TOML_REGISTRY_VAL_RE: LazyLock<Regex> = LazyLock::new(|| {
-    Regex::new(r#"\bregistry\s*=\s*"([^"]*)""#).expect("static registry-value regex is valid")
+    Regex::new(r#"(?:\bregistry|"registry"|'registry')\s*=\s*(?:"[^"]*"|'[^']*')"#)
+        .expect("static registry-value regex is valid")
 });
 static CARGO_TOML_REGISTRY_KEY_RE: LazyLock<Regex> = LazyLock::new(|| {
     Regex::new(r"\bregistry\s*=").expect("static registry-key probe regex is valid")
@@ -1759,10 +1802,6 @@ static CARGO_TOML_PATH_GIT_RE: LazyLock<Regex> = LazyLock::new(|| {
     Regex::new(r"\b(?:path|git)\s*=").expect("static path/git probe regex is valid")
 });
 
-static CARGO_TOML_VERSION_VAL_RE: LazyLock<Regex> = LazyLock::new(|| {
-    Regex::new(r#"\bversion\s*=\s*"([^"]*)""#).expect("static version-value regex is valid")
-});
-
 /// Whether one declaration's version requirement selects the patched
 /// version. Cargo resolves a declaration to ONE version, so a project that
 /// locks several versions of a crate (`cfg-if = "1"` beside a renamed
@@ -1817,6 +1856,7 @@ enum CargoWorkspaceEntry {
     Pinned,
     /// The entry names the crate at another version.
     OtherVersion,
+    OtherPackage,
 }
 
 /// Every version of `crate_name` a Cargo.lock holds other than `version`.
@@ -1853,13 +1893,11 @@ fn plan_cargo_toml(
 ) -> Result<CargoTomlPlan, String> {
     let lines: Vec<&str> = content.split('\n').collect();
     let header_re: &Regex = &CARGO_TOML_HEADER_RE;
-    let package_re: &Regex = &CARGO_TOML_PACKAGE_RE;
     let registry_val_re: &Regex = &CARGO_TOML_REGISTRY_VAL_RE;
     let registry_key_re: &Regex = &CARGO_TOML_REGISTRY_KEY_RE;
     let registry_index_re: &Regex = &CARGO_TOML_REGISTRY_INDEX_RE;
     let workspace_key_re: &Regex = &CARGO_TOML_WORKSPACE_KEY_RE;
     let path_git_re: &Regex = &CARGO_TOML_PATH_GIT_RE;
-    let version_val_re: &Regex = &CARGO_TOML_VERSION_VAL_RE;
     let ambiguous =
         || format!("its version requirement also matches another locked version of {crate_name}");
 
@@ -1913,39 +1951,37 @@ fn plan_cargo_toml(
                             if k == key_name {
                                 let rest = rest.trim_start();
                                 if let Some(v) = rest.strip_prefix('=') {
-                                    let v = v.trim();
-                                    let v = v
-                                        .strip_prefix('"')
-                                        .and_then(|s| s.split('"').next())
-                                        .unwrap_or(v);
-                                    return Some((*j, v.to_string()));
+                                    return cargo_toml_string(v).map(|value| (*j, value));
                                 }
                             }
                         }
                     }
                     None
                 };
+                let has = |name: &str| {
+                    block.iter().any(|(_, t)| {
+                        parse_cargo_entry_key(t).is_some_and(|(k, rest)| {
+                            k == name && rest.trim_start().starts_with('=')
+                        })
+                    })
+                };
+                if has("workspace") {
+                    pending.push(Pending::NeedsWorkspacePin(key.clone()));
+                    continue;
+                }
                 let package_val = find_value("package").map(|(_, v)| v);
                 let is_ours = match &package_val {
                     Some(p) => p == crate_name,
                     None => key == crate_name,
                 };
                 if !is_ours {
+                    if ws {
+                        ws_entries.insert(key.clone(), CargoWorkspaceEntry::OtherPackage);
+                    }
                     continue;
                 }
-                let has = |name: &str| {
-                    block.iter().any(|(_, t)| {
-                        parse_cargo_entry_key(t).is_some_and(|(k, rest)| {
-                            k == name && rest.trim_start().starts_with('=')
-                        })
-                    })
-                };
                 let req = find_value("version").map(|(_, v)| v);
-                let selects = if has("workspace") {
-                    CargoReqMatch::Ours
-                } else {
-                    cargo_req_selects(req.as_deref(), version, other_versions)
-                };
+                let selects = cargo_req_selects(req.as_deref(), version, other_versions);
                 if selects == CargoReqMatch::NotOurs {
                     excluded.extend(req);
                     if ws {
@@ -1953,9 +1989,7 @@ fn plan_cargo_toml(
                     }
                     continue;
                 }
-                if has("workspace") {
-                    pending.push(Pending::NeedsWorkspacePin(key.clone()));
-                } else if selects == CargoReqMatch::Ambiguous {
+                if selects == CargoReqMatch::Ambiguous {
                     pending.push(Pending::Refuse(ambiguous()));
                 } else if has("path") || has("git") {
                     pending.push(Pending::Refuse(
@@ -2012,19 +2046,19 @@ fn plan_cargo_toml(
         if let Some(dotted) = rest_trim.strip_prefix('.') {
             // Dotted entry (`serde.workspace = true`, `serde.version = "1"`,
             // `alias.package = "serde"`, …).
-            let sub = parse_cargo_entry_key(dotted).map(|(k, _)| k);
-            if key == crate_name {
-                if sub.as_deref() == Some("workspace") {
-                    pending.push(Pending::NeedsWorkspacePin(key.clone()));
-                } else {
-                    pending.push(Pending::Refuse(
-                        "declared with dotted keys this rewriter does not edit".to_string(),
-                    ));
-                }
-            } else if sub.as_deref() == Some("package")
-                && package_re
-                    .captures(trimmed)
-                    .is_some_and(|c| &c[1] == crate_name)
+            let sub = parse_cargo_entry_key(dotted);
+            if sub.as_ref().is_some_and(|(key, _)| key == "workspace") {
+                pending.push(Pending::NeedsWorkspacePin(key.clone()));
+            } else if key == crate_name {
+                pending.push(Pending::Refuse(
+                    "declared with dotted keys this rewriter does not edit".to_string(),
+                ));
+            } else if sub
+                .filter(|(key, _)| key == "package")
+                .and_then(|(_, rest)| rest.trim_start().strip_prefix('='))
+                .and_then(cargo_toml_string)
+                .as_deref()
+                == Some(crate_name)
             {
                 pending.push(Pending::Refuse(
                     "declared with dotted keys this rewriter does not edit".to_string(),
@@ -2049,19 +2083,22 @@ fn plan_cargo_toml(
                 continue;
             };
             let inner = &value[1..close];
-            let package_val = package_re.captures(inner).map(|c| c[1].to_string());
+            if workspace_key_re.is_match(inner) {
+                pending.push(Pending::NeedsWorkspacePin(key.clone()));
+                continue;
+            }
+            let package_val = cargo_toml_inline_string(inner, "package");
             let is_ours = match &package_val {
                 Some(p) => p == crate_name,
                 None => key == crate_name,
             };
             if !is_ours {
+                if workspace {
+                    ws_entries.insert(key.clone(), CargoWorkspaceEntry::OtherPackage);
+                }
                 continue;
             }
-            if workspace_key_re.is_match(inner) {
-                pending.push(Pending::NeedsWorkspacePin(key.clone()));
-                continue;
-            }
-            let req = version_val_re.captures(inner).map(|c| c[1].to_string());
+            let req = cargo_toml_inline_string(inner, "version");
             match cargo_req_selects(req.as_deref(), version, other_versions) {
                 CargoReqMatch::NotOurs => {
                     excluded.extend(req);
@@ -2080,8 +2117,7 @@ fn plan_cargo_toml(
                 pending.push(Pending::Refuse(
                     "declared as a path/git dependency".to_string(),
                 ));
-            } else if let Some(c) = registry_val_re.captures(inner) {
-                let value = c[1].to_string();
+            } else if let Some(value) = cargo_toml_inline_string(inner, "registry") {
                 if value == reg {
                     pending.push(Pending::Action(CargoTomlAction::Already));
                     if workspace {
@@ -2216,12 +2252,13 @@ fn plan_cargo_toml(
                     actions.push(CargoTomlAction::InheritsWorkspace);
                 }
                 // Inherits another version of the crate: not this dep.
-                Some(CargoWorkspaceEntry::OtherVersion) => {}
-                None => {
+                Some(CargoWorkspaceEntry::OtherVersion | CargoWorkspaceEntry::OtherPackage) => {}
+                None if key == crate_name => {
                     return Err("inherits from [workspace.dependencies] with no rewritable \
                                 entry for it"
                         .to_string());
                 }
+                None => {}
             },
             Pending::Refuse(reason) => return Err(reason),
         }
@@ -2570,7 +2607,19 @@ fn plan_cargo_config(
     let header = format!("[registries.{reg}]");
     let index_line = format!("index = \"{index_url}\"");
     let lines: Vec<&str> = config.split('\n').collect();
-    let header_idx = lines.iter().position(|l| l.trim() == header);
+    let header_idx = lines.iter().position(|line| {
+        if !line.trim_start().starts_with('[') {
+            return false;
+        }
+        let Ok(document) = line.parse::<toml_edit::DocumentMut>() else {
+            return false;
+        };
+        document
+            .get("registries")
+            .and_then(|registries| registries.get(reg))
+            .and_then(toml_edit::Item::as_table)
+            .is_some_and(|table| !table.is_implicit())
+    });
     if let Some(i) = header_idx {
         let mut end = lines.len();
         for (j, l) in lines.iter().enumerate().skip(i + 1) {
@@ -2583,7 +2632,17 @@ fn plan_cargo_config(
         while end > i + 1 && lines[end - 1].trim().is_empty() {
             end -= 1;
         }
-        let healthy = lines[i + 1..end].iter().any(|l| l.trim() == index_line);
+        let healthy = lines[i + 1..end]
+            .join("\n")
+            .parse::<toml_edit::DocumentMut>()
+            .ok()
+            .and_then(|document| {
+                document
+                    .get("index")
+                    .and_then(toml_edit::Item::as_str)
+                    .map(|index| index == index_url)
+            })
+            .unwrap_or(false);
         if healthy {
             return None;
         }
@@ -9011,6 +9070,83 @@ mod tests {
         assert!(r.confirmed_cargo_uuids.contains(CARGO_UUID));
     }
 
+    #[test]
+    fn cargo_dotted_literal_renames_refuse_every_declaration() {
+        for alias in ["alias", "\"alias\"", "'alias'"] {
+            for package_key in ["package", "\"package\"", "'package'"] {
+                let manifest = format!(
+                    "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+                     [dependencies]\nserde = \"1.0.190\"\n\
+                     {alias}.{package_key} = 'serde'\n{alias}.version = '1.0.190'\n"
+                );
+                assert!(manifest.parse::<toml_edit::DocumentMut>().is_ok());
+                let result =
+                    rewrite_registry_redirect(&cargo_files(&manifest), &[cargo_sparse_override()]);
+                assert!(result.files.is_empty(), "{manifest}");
+                assert!(result.edits.is_empty(), "{manifest}");
+                assert!(result.confirmed_cargo_uuids.is_empty(), "{manifest}");
+                assert!(result
+                    .warnings
+                    .iter()
+                    .any(|warning| warning.code == "redirect_cargo_toml_dep_unrewritable"));
+            }
+        }
+    }
+
+    #[test]
+    fn cargo_literal_renames_pin_inline_and_table_forms() {
+        for declaration in [
+            "[dependencies]\nalias = { package = 'serde', version = '1.0.190' }\n",
+            "[dependencies.alias]\npackage = 'serde'\nversion = '1.0.190'\n",
+            "[dependencies]\nalias = { 'package' = 'serde', 'version' = '1.0.190' }\n",
+            "[dependencies.'alias']\n'package' = 'serde'\n'version' = '1.0.190'\n",
+        ] {
+            let manifest =
+                format!("[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n{declaration}");
+            let files = cargo_files(&manifest);
+            let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+            assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+            assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+            let updated = &result.files["Cargo.toml"];
+            let document = updated.parse::<toml_edit::DocumentMut>().unwrap();
+            assert_eq!(
+                document["dependencies"]["alias"]["registry"].as_str(),
+                Some(cargo_reg().as_str())
+            );
+            assert_eq!(
+                cargo_socket_registry_pin(updated, "serde"),
+                Some(cargo_reg())
+            );
+            let mut rerun_files = files;
+            rerun_files.extend(result.files);
+            let rerun = rewrite_registry_redirect(&rerun_files, &[cargo_sparse_override()]);
+            assert!(rerun.files.is_empty());
+            assert!(rerun.warnings.is_empty(), "{:?}", rerun.warnings);
+            assert!(rerun.confirmed_cargo_uuids.contains(CARGO_UUID));
+        }
+    }
+
+    #[test]
+    fn cargo_literal_registry_pins_are_superseded() {
+        let previous = "socket-patch-11111111-1111-1111-1111-111111111111";
+        for declaration in [
+            format!("[dependencies]\nalias = {{ package = 'serde', version = '1.0.190', registry = '{previous}' }}\n"),
+            format!("[dependencies.alias]\npackage = 'serde'\nversion = '1.0.190'\nregistry = '{previous}' # previous pin\n"),
+            format!("[dependencies.alias]\npackage = 'serde'\nversion = '1.0.190'\n'registry' = '{previous}'\n"),
+        ] {
+            let manifest = format!(
+                "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n{declaration}"
+            );
+            let result = rewrite_registry_redirect(&cargo_files(&manifest), &[cargo_sparse_override()]);
+            assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+            let updated = &result.files["Cargo.toml"];
+            let document = updated.parse::<toml_edit::DocumentMut>().unwrap();
+            assert_eq!(document["dependencies"]["alias"]["registry"].as_str(), Some(cargo_reg().as_str()));
+            assert_eq!(cargo_socket_registry_pin(updated, "serde"), Some(cargo_reg()));
+            assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+        }
+    }
+
     /// AUDIT A5(a) alone: when the ONLY key match renames a different crate,
     /// the dep is genuinely not declared → not-found, and NOTHING is written
     /// (no config block, no lock repoint).
@@ -9267,6 +9403,54 @@ mod tests {
         assert!(second.confirmed_cargo_uuids.contains(CARGO_UUID));
     }
 
+    #[test]
+    fn cargo_config_quoted_commented_headers_are_reused() {
+        for header in [
+            format!("[registries.{}] # managed registry", cargo_reg()),
+            format!("[registries.\"{}\"]", cargo_reg()),
+            format!("['registries'.'{}'] # managed registry", cargo_reg()),
+            format!("[ \"registries\" . '{}' ]", cargo_reg()),
+        ] {
+            for index in [
+                format!("index = \"{}\" # current", cargo_index_url()),
+                format!("index = '{}'", cargo_index_url()),
+                format!("'index' = '{}' # current", cargo_index_url()),
+            ] {
+                let config = format!("{header}\n{index}\n\n[build]\njobs = 4\n");
+                assert!(config.parse::<toml_edit::DocumentMut>().is_ok());
+                assert!(
+                    plan_cargo_config(
+                        &config,
+                        ".cargo/config.toml",
+                        &cargo_reg(),
+                        &cargo_index_url()
+                    )
+                    .is_none(),
+                    "{config}"
+                );
+            }
+            let config =
+                format!("{header}\nindex = 'sparse+https://old.example/'\n\n[build]\njobs = 4\n");
+            let plan = plan_cargo_config(
+                &config,
+                ".cargo/config.toml",
+                &cargo_reg(),
+                &cargo_index_url(),
+            )
+            .expect("stale registry repaired");
+            let document = plan
+                .content
+                .parse::<toml_edit::DocumentMut>()
+                .expect("no duplicate tables");
+            assert_eq!(
+                document["registries"][&cargo_reg()]["index"].as_str(),
+                Some(cargo_index_url().as_str())
+            );
+            assert_eq!(document["build"]["jobs"].as_integer(), Some(4));
+            assert_eq!(plan.edit.action, "rewritten");
+        }
+    }
+
     /// A degraded managed block (header intact, index line commented or
     /// stale) is regenerated in place rather than trusted.
     #[test]
@@ -9710,6 +9894,96 @@ mod tests {
         assert!(r.confirmed_cargo_uuids.contains(CARGO_UUID));
     }
 
+    #[test]
+    fn cargo_workspace_member_inherits_renamed_dependency() {
+        for workspace_entry in [
+            "[workspace.dependencies]\nserial = { package = \"serde\", version = \"=1.0.190\", features = [\"std\"] }\n",
+            "[workspace.dependencies.serial]\npackage = \"serde\"\nversion = \"=1.0.190\"\nfeatures = [\"std\"]\n",
+        ] {
+            for declaration in [
+                "[dependencies]\nserial.workspace = true\n",
+                "[dependencies]\nserial = { workspace = true, features = [\"derive\"] }\n",
+                "[dependencies.serial]\nworkspace = true\n",
+                "[dev-dependencies]\nserial.workspace = true\n",
+                "[build-dependencies]\nserial = { workspace = true }\n",
+                "[target.'cfg(unix)'.dependencies.serial]\nworkspace = true\n",
+            ] {
+                let mut files = cargo_files(&format!(
+                    "[workspace]\nmembers = [\"consumer\"]\n\n{workspace_entry}"
+                ));
+                files.insert(
+                    "consumer/Cargo.toml".into(),
+                    format!(
+                        "[package]\nname = \"consumer\"\nversion = \"0.1.0\"\n\n{declaration}"
+                    ),
+                );
+                files.get_mut("Cargo.lock").unwrap().push_str(
+                    "\n[[package]]\nname = \"consumer\"\nversion = \"0.1.0\"\ndependencies = [\"serde\"]\n",
+                );
+
+                let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+                assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+                assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+                assert!(result.files["Cargo.toml"]
+                    .contains(&format!("registry = \"{}\"", cargo_reg())));
+                assert!(!result.files.contains_key("consumer/Cargo.toml"));
+                assert!(result.files["Cargo.lock"].contains(&cargo_index_url()));
+
+                files.extend(result.files);
+                let repeated = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+                assert!(repeated.warnings.is_empty(), "{:?}", repeated.warnings);
+                assert!(repeated.edits.is_empty() && repeated.files.is_empty());
+                assert!(repeated.confirmed_cargo_uuids.contains(CARGO_UUID));
+            }
+        }
+    }
+
+    #[test]
+    fn cargo_root_inherits_renamed_dependency_before_workspace_declaration() {
+        let files = cargo_files(
+            "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+             [dependencies]\nserial.workspace = true\n\n\
+             [workspace.dependencies]\nserial = { package = \"serde\", version = \"=1.0.190\" }\n",
+        );
+        let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+        assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+        assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+        assert!(result.files["Cargo.toml"].contains("serial.workspace = true"));
+        assert!(result.files["Cargo.toml"].contains(&format!(
+            "serial = {{ package = \"serde\", version = \"=1.0.190\", registry = \"{}\" }}",
+            cargo_reg()
+        )));
+    }
+
+    #[test]
+    fn cargo_workspace_inherited_key_renaming_another_package_is_ignored() {
+        for other_entry in [
+            "[workspace.dependencies]\nserde = { package = \"unrelated\", version = \"1\" }\n",
+            "[workspace.dependencies.serde]\npackage = \"unrelated\"\nversion = \"1\"\n",
+        ] {
+            let root = format!(
+                "[workspace]\nmembers = [\"consumer\"]\n\n\
+                 {other_entry}\n\
+                 [workspace.dependencies.serial]\npackage = \"serde\"\nversion = \"=1.0.190\"\n"
+            );
+            let mut files = cargo_files(&root);
+            files.insert(
+                "consumer/Cargo.toml".into(),
+                "[package]\nname = \"consumer\"\nversion = \"0.1.0\"\n\n\
+                 [dependencies]\nserde.workspace = true\nserial.workspace = true\n"
+                    .into(),
+            );
+            files.get_mut("Cargo.lock").unwrap().push_str(
+                "\n[[package]]\nname = \"consumer\"\nversion = \"0.1.0\"\ndependencies = [\"serde\"]\n",
+            );
+            let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+            assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+            assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+            assert!(result.files["Cargo.toml"].contains(other_entry));
+            assert!(!result.files.contains_key("consumer/Cargo.toml"));
+        }
+    }
+
     /// A member that cannot be pinned (a path dependency here) refuses the
     /// WHOLE dep: the root stays untouched too.
     #[test]
@@ -15072,6 +15346,111 @@ packages:
         );
     }
 
+    #[test]
+    fn cargo_source_less_dependents_match_both_name_and_version() {
+        let root = "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+                    [dependencies]\ninside = { package = \"foo\", path = \"inside\" }\n\
+                    outside = { package = \"foo\", path = \"../outside\" }\n";
+        let mut files = cargo_files(root);
+        files.insert(
+            "inside/Cargo.toml".into(),
+            "[package]\nname = \"foo\"\nversion = \"0.1.0\"\n\n\
+             [dependencies]\nserde = \"1.0.190\"\n"
+                .into(),
+        );
+        files.get_mut("Cargo.lock").unwrap().push_str(
+            "\n[[package]]\nname = \"app\"\nversion = \"0.1.0\"\n\
+             dependencies = [\"foo 0.1.0\", \"foo 0.2.0\"]\n\n\
+             [[package]]\nname = \"foo\"\nversion = \"0.1.0\"\ndependencies = [\"serde\"]\n\n\
+             [[package]]\nname = \"foo\"\nversion = \"0.2.0\"\ndependencies = [\"serde\"]\n",
+        );
+        let refused = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+        assert!(refused.files.is_empty() && refused.edits.is_empty());
+        assert!(refused.confirmed_cargo_uuids.is_empty());
+        assert_eq!(
+            warning_codes(&refused),
+            vec!["redirect_cargo_transitive_dependents"]
+        );
+        assert!(refused.warnings[0]
+            .detail
+            .contains("foo 0.2.0 (a path package"));
+
+        files.insert("Cargo.toml".into(), root.replace("../outside", "outside"));
+        files.insert(
+            "outside/Cargo.toml".into(),
+            "[package]\nname = \"foo\"\nversion = \"0.2.0\"\n\n\
+             [dependencies]\nserde = \"1.0.190\"\n"
+                .into(),
+        );
+        let accepted = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+        assert!(accepted.warnings.is_empty(), "{:?}", accepted.warnings);
+        assert!(accepted.confirmed_cargo_uuids.contains(CARGO_UUID));
+        assert!(accepted.files.contains_key("inside/Cargo.toml"));
+        assert!(accepted.files.contains_key("outside/Cargo.toml"));
+    }
+
+    #[test]
+    fn cargo_source_less_dependents_resolve_workspace_and_default_versions() {
+        for (version_field, locked_version) in [
+            ("version.workspace = true\n", "0.2.0"),
+            ("version = { workspace = true }\n", "0.2.0"),
+            ("version.workspace = true\nworkspace = \"..\"\n", "0.2.0"),
+            ("", "0.0.0"),
+        ] {
+            let mut files = cargo_files(
+                "[workspace]\nmembers = [\"consumer\"]\n\n\
+                 [workspace.package]\nversion = \"0.2.0\"\n",
+            );
+            files.insert(
+                "consumer/Cargo.toml".into(),
+                format!(
+                    "[package]\nname = \"consumer\"\n{version_field}\n\
+                     [dependencies]\nserde = \"1.0.190\"\n"
+                ),
+            );
+            files.get_mut("Cargo.lock").unwrap().push_str(&format!(
+                "\n[[package]]\nname = \"consumer\"\nversion = \"{locked_version}\"\n\
+                 dependencies = [\"serde\"]\n"
+            ));
+            let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+            assert!(
+                result.warnings.is_empty(),
+                "{version_field}: {:?}",
+                result.warnings
+            );
+            assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+        }
+    }
+
+    #[test]
+    fn cargo_package_identity_keeps_workspace_version_ownership() {
+        let manifest = "[package]\nname = \"consumer\"\nversion.workspace = true\n";
+        assert_eq!(
+            cargo_manifest_package_id(
+                &format!("{manifest}\n[workspace.package]\nversion = \"0.3.0\"\n"),
+                "consumer/Cargo.toml",
+                Some("0.2.0"),
+            ),
+            Some(("consumer".into(), "0.3.0".into())),
+        );
+        assert_eq!(
+            cargo_manifest_package_id(
+                &format!("{manifest}\n[workspace]\n"),
+                "consumer/Cargo.toml",
+                Some("0.2.0"),
+            ),
+            None,
+        );
+        assert_eq!(
+            cargo_manifest_package_id(
+                &format!("{manifest}workspace = \"../../other\"\n"),
+                "consumer/Cargo.toml",
+                Some("0.2.0"),
+            ),
+            None,
+        );
+    }
+
     /// A checksum-less entry whose `source` line ends the block (the
     /// trailing newline sits outside the block region) still gets its pin.
     #[test]

From a156d87f4e3246df9422bc930f622906d122203a Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 14:46:41 -0400
Subject: [PATCH 02/46] Refuse incomplete Cargo manifest redirects

Validate planned dependency pins against parsed TOML before writing any
files. Legal root and target dotted or inline declarations that the
source-preserving editor cannot rewrite now refuse the entire patch
instead of leaving a mixture of original and patched sources.

Validate unchanged member manifests too, while preserving workspace
inheritance and declarations for other package versions. Malformed TOML
is refused without changing the project.

Validated with 73 Cargo unit tests and the real converter/API/CLI matrix,
including an actual Cargo build proving the dotted manifest is valid
and remains byte-identical after refusal.

Assisted-by: Codex:gpt-6-astra
---
 .../src/patch/redirect/mod.rs                 | 240 +++++++++++++++---
 1 file changed, 198 insertions(+), 42 deletions(-)

diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index b22fe03e..f15515b7 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -894,6 +894,18 @@ fn rewrite_cargo(
                 &root_workspace,
             ) {
                 Ok(plan) => {
+                    if let Err(reason) = validate_cargo_toml_pins(
+                        &plan.content,
+                        &dep.name,
+                        &dep.version,
+                        &other_versions,
+                        &reg,
+                        &plan.workspace,
+                        &root_workspace,
+                    ) {
+                        refused = Some((path.clone(), reason));
+                        break;
+                    }
                     if path == "Cargo.toml" {
                         root_workspace = plan.workspace.clone();
                     }
@@ -1740,6 +1752,96 @@ fn cargo_toml_inline_string(inner: &str, key: &str) -> Option<String> {
         .map(str::to_string)
 }
 
+fn validate_cargo_toml_pins(
+    content: &str,
+    crate_name: &str,
+    version: &str,
+    other_versions: &[String],
+    registry: &str,
+    workspace: &BTreeMap<String, CargoWorkspaceEntry>,
+    inherited: &BTreeMap<String, CargoWorkspaceEntry>,
+) -> Result<(), String> {
+    let document = content
+        .parse::<toml_edit::DocumentMut>()
+        .map_err(|_| "the planned manifest does not parse as TOML".to_string())?;
+    let unpinned = |dependencies: &dyn toml_edit::TableLike| {
+        dependencies.iter().find_map(|(key, entry)| {
+            let table = entry.as_table_like();
+            let field = |name: &str| table.and_then(|table| table.get(name));
+            if field("workspace").and_then(toml_edit::Item::as_bool) == Some(true) {
+                return match workspace.get(key).or(inherited.get(key)) {
+                    Some(
+                        CargoWorkspaceEntry::Pinned
+                        | CargoWorkspaceEntry::OtherVersion
+                        | CargoWorkspaceEntry::OtherPackage,
+                    ) => None,
+                    None if key != crate_name => None,
+                    None => Some(key.to_string()),
+                };
+            }
+            let name = field("package")
+                .and_then(toml_edit::Item::as_str)
+                .unwrap_or(key);
+            if name != crate_name {
+                return None;
+            }
+            let requirement = entry
+                .as_str()
+                .or_else(|| field("version").and_then(toml_edit::Item::as_str));
+            match cargo_req_selects(requirement, version, other_versions) {
+                CargoReqMatch::NotOurs => return None,
+                CargoReqMatch::Ambiguous => return Some(key.to_string()),
+                CargoReqMatch::Ours => {}
+            }
+            let is_pinned = field("registry").and_then(toml_edit::Item::as_str) == Some(registry)
+                && field("path").is_none()
+                && field("git").is_none()
+                && field("registry-index").is_none();
+            (!is_pinned).then(|| key.to_string())
+        })
+    };
+    let mut scopes: Vec<&dyn toml_edit::TableLike> = vec![document.as_table()];
+    if let Some(targets) = document
+        .get("target")
+        .and_then(toml_edit::Item::as_table_like)
+    {
+        scopes.extend(
+            targets
+                .iter()
+                .filter_map(|(_, target)| target.as_table_like()),
+        );
+    }
+    for scope in scopes {
+        for kind in [
+            "dependencies",
+            "dev-dependencies",
+            "build-dependencies",
+            "dev_dependencies",
+            "build_dependencies",
+        ] {
+            if let Some(key) = scope
+                .get(kind)
+                .and_then(toml_edit::Item::as_table_like)
+                .and_then(&unpinned)
+            {
+                return Err(format!("dependency declaration {key} was not pinned"));
+            }
+        }
+    }
+    if let Some(key) = document
+        .get("workspace")
+        .and_then(toml_edit::Item::as_table_like)
+        .and_then(|workspace| workspace.get("dependencies"))
+        .and_then(toml_edit::Item::as_table_like)
+        .and_then(unpinned)
+    {
+        return Err(format!(
+            "workspace dependency declaration {key} was not pinned"
+        ));
+    }
+    Ok(())
+}
+
 struct CargoTomlPlan {
     content: String,
     edits: Vec<FileEdit>,
@@ -9070,6 +9172,86 @@ mod tests {
         assert!(r.confirmed_cargo_uuids.contains(CARGO_UUID));
     }
 
+    #[test]
+    fn cargo_root_dependency_forms_cannot_leave_partial_redirect() {
+        for dependency in [
+            "dependencies.serde = \"1.0.190\"",
+            "dependencies = { serde = \"1.0.190\" }",
+            "dependencies = { serde = { version = \"1.0.190\" } }",
+            "target.'cfg(unix)'.dependencies.serde = \"1.0.190\"",
+            "workspace.dependencies.serde = \"1.0.190\"",
+            "workspace = { dependencies = { serde = \"1.0.190\" } }",
+        ] {
+            let manifest = format!(
+                "{dependency}\n\n[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+                 [dev-dependencies]\nserde = \"1.0.190\"\n"
+            );
+            assert!(manifest.parse::<toml_edit::DocumentMut>().is_ok());
+            let result =
+                rewrite_registry_redirect(&cargo_files(&manifest), &[cargo_sparse_override()]);
+            assert!(result.files.is_empty(), "{manifest}: {:?}", result.files);
+            assert!(result.edits.is_empty(), "{manifest}");
+            assert!(result.confirmed_cargo_uuids.is_empty(), "{manifest}");
+            assert!(result
+                .warnings
+                .iter()
+                .any(|warning| warning.code == "redirect_cargo_toml_dep_unrewritable"));
+        }
+    }
+
+    #[test]
+    fn cargo_semantic_pin_guard_preserves_other_version_declarations() {
+        let manifest = "dependencies.serde = \"0.9\"\n\n\
+                        [package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+                        [dev-dependencies]\nserde = \"1.0.190\"\n";
+        let mut files = cargo_files(manifest);
+        files.get_mut("Cargo.lock").unwrap().push_str(&format!(
+            "\n[[package]]\nname = \"serde\"\nversion = \"0.9.15\"\n\
+             source = \"registry+https://github.com/rust-lang/crates.io-index\"\n\
+             checksum = \"{}\"\n",
+            "a".repeat(64)
+        ));
+        let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+        assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+        assert!(result.confirmed_cargo_uuids.contains(CARGO_UUID));
+        let document = result.files["Cargo.toml"]
+            .parse::<toml_edit::DocumentMut>()
+            .unwrap();
+        assert_eq!(document["dependencies"]["serde"].as_str(), Some("0.9"));
+        assert_eq!(
+            document["dev-dependencies"]["serde"]["registry"].as_str(),
+            Some(cargo_reg().as_str())
+        );
+    }
+
+    #[test]
+    fn cargo_semantic_pin_guard_checks_unchanged_members() {
+        let mut files = cargo_files(
+            "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
+             [workspace]\nmembers = [\"member\"]\n\n\
+             [dependencies]\nserde = \"1.0.190\"\n",
+        );
+        files.insert(
+            "member/Cargo.toml".to_string(),
+            "dependencies = { serde = \"1.0.190\" }\n\n\
+             [package]\nname = \"member\"\nversion = \"0.1.0\"\n"
+                .to_string(),
+        );
+        files.get_mut("Cargo.lock").unwrap().push_str(
+            "\n[[package]]\nname = \"member\"\nversion = \"0.1.0\"\n\
+             dependencies = [\"serde\"]\n",
+        );
+        let result = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
+        assert!(result.files.is_empty());
+        assert!(result.edits.is_empty());
+        assert!(result.confirmed_cargo_uuids.is_empty());
+        assert!(result.warnings.iter().any(|warning| {
+            warning.code == "redirect_cargo_toml_dep_unrewritable"
+                && warning.detail.contains("member/Cargo.toml")
+                && warning.detail.contains("was not pinned")
+        }));
+    }
+
     #[test]
     fn cargo_dotted_literal_renames_refuse_every_declaration() {
         for alias in ["alias", "\"alias\"", "'alias'"] {
@@ -16535,13 +16717,8 @@ packages:
     // tolerance legs, workspace-inheritance satisfaction, and the remaining
     // diagnosis spellings.
 
-    /// Malformed Cargo.toml section headers (unbalanced quote in a segment,
-    /// an unclosed `[dependencies`) must classify as non-dependency sections
-    /// — their entries stay byte-identical — and garbage lines inside the
-    /// real [dependencies] table are skipped while the real entry still
-    /// gains the pin.
     #[test]
-    fn cargo_malformed_headers_and_table_lines_are_skipped_not_fatal() {
+    fn cargo_malformed_manifest_headers_and_lines_refuse_redirect() {
         let files = cargo_files(
             "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
              [target.'cfg(unix).dependencies]\nserde = \"9.9.9\"\n\n\
@@ -16549,50 +16726,29 @@ packages:
              [dependencies]\n= \"junk\"\njunk\nserde = \"1.0.190\"\n",
         );
         let r = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
-        assert!(
-            r.warnings.is_empty(),
-            "garbage headers/lines are skipped, not refused: {:?}",
-            r.warnings
-        );
-        let toml = r.files.get("Cargo.toml").expect("Cargo.toml rewritten");
-        let pinned = format!(
-            "serde = {{ version = \"1.0.190\", registry = \"{}\" }}",
-            cargo_reg()
-        );
-        assert_eq!(
-            toml.matches(&pinned).count(),
-            1,
-            "only the real [dependencies] entry is pinned: {toml}"
-        );
-        assert!(
-            toml.contains("serde = \"9.9.9\"") && toml.contains("serde = \"8.8.8\""),
-            "entries under malformed headers stay byte-identical: {toml}"
-        );
-        assert!(
-            toml.contains("= \"junk\"\njunk\n"),
-            "garbage table lines survive untouched: {toml}"
-        );
+        assert!(r.files.is_empty());
+        assert!(r.edits.is_empty());
+        assert!(r.confirmed_cargo_uuids.is_empty());
+        assert!(r.warnings.iter().any(|warning| {
+            warning.code == "redirect_cargo_toml_dep_unrewritable"
+                && warning.detail.contains("does not parse as TOML")
+        }));
     }
 
-    /// Unparseable lines INSIDE a `[dependencies.<key>]` table block (a bare
-    /// `= …`, a key token with no `=`) are skipped by the block scanner while
-    /// the block still gains its `registry` pin right after the header.
     #[test]
-    fn cargo_dep_entry_block_garbage_lines_are_skipped() {
+    fn cargo_malformed_dep_entry_block_refuses_redirect() {
         let files = cargo_files(
             "[package]\nname = \"app\"\nversion = \"0.1.0\"\n\n\
              [dependencies.serde]\n= \"zap\"\npackage \"serde\"\nversion = \"1.0.190\"\n",
         );
         let r = rewrite_registry_redirect(&files, &[cargo_sparse_override()]);
-        assert!(r.warnings.is_empty(), "{:?}", r.warnings);
-        let toml = r.files.get("Cargo.toml").expect("Cargo.toml rewritten");
-        assert!(
-            toml.contains(&format!(
-                "[dependencies.serde]\nregistry = \"{}\"\n= \"zap\"\npackage \"serde\"\nversion = \"1.0.190\"",
-                cargo_reg()
-            )),
-            "registry pin inserted after the header, garbage lines untouched: {toml}"
-        );
+        assert!(r.files.is_empty());
+        assert!(r.edits.is_empty());
+        assert!(r.confirmed_cargo_uuids.is_empty());
+        assert!(r.warnings.iter().any(|warning| {
+            warning.code == "redirect_cargo_toml_dep_unrewritable"
+                && warning.detail.contains("does not parse as TOML")
+        }));
     }
 
     /// A `[workspace.dependencies]` entry ALREADY pinned to the managed

From 5b42bb173d41b9cc657bfb7523e5abc26735d5fa Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 15:19:01 -0400
Subject: [PATCH 03/46] Keep Cargo refusal checks lint-clean

Combine identical refusal branches for dotted dependencies without
changing which declarations are refused. Full workspace Clippy and all
73 Cargo redirect tests pass.

Assisted-by: Codex:gpt-6-astra
---
 .../socket-patch-core/src/patch/redirect/mod.rs | 17 +++++++----------
 1 file changed, 7 insertions(+), 10 deletions(-)

diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index f15515b7..ccfcadac 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -2151,16 +2151,13 @@ fn plan_cargo_toml(
             let sub = parse_cargo_entry_key(dotted);
             if sub.as_ref().is_some_and(|(key, _)| key == "workspace") {
                 pending.push(Pending::NeedsWorkspacePin(key.clone()));
-            } else if key == crate_name {
-                pending.push(Pending::Refuse(
-                    "declared with dotted keys this rewriter does not edit".to_string(),
-                ));
-            } else if sub
-                .filter(|(key, _)| key == "package")
-                .and_then(|(_, rest)| rest.trim_start().strip_prefix('='))
-                .and_then(cargo_toml_string)
-                .as_deref()
-                == Some(crate_name)
+            } else if key == crate_name
+                || sub
+                    .filter(|(key, _)| key == "package")
+                    .and_then(|(_, rest)| rest.trim_start().strip_prefix('='))
+                    .and_then(cargo_toml_string)
+                    .as_deref()
+                    == Some(crate_name)
             {
                 pending.push(Pending::Refuse(
                     "declared with dotted keys this rewriter does not edit".to_string(),

From 4c1f822ca03dde105bdd3d0071e1c90c94ec7301 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 19:29:19 -0400
Subject: [PATCH 04/46] Fail closed on ledger kinds this release lacks

A redirect ledger written by a newer socket-patch (for example a vlt
lock edit) could be half-reverted: rollback dropped the npm record and
left the lockfile it did not understand still pointing at the hosted
artifact, with nothing tracking it.

Now an unknown hosted edit kind holds every record in the ledger, and
rollback of one package, remove and the hosted-to-vendored takeover
refuse with nothing written when that edit names the package. repair
skips vendored npm entries whose flavor it does not know instead of
judging or rebuilding them with the wrong layout rules. The contract
and changelog say vlt ledgers need the release that adds vlt support.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  14 ++
 crates/socket-patch-cli/CLI_CONTRACT.md       |   5 +-
 .../src/commands/repair_vendor.rs             |  16 +++
 .../tests/in_process_rollback_hosted.rs       | 117 +++++++++++++++++
 .../tests/repair_vendor_flavors_e2e.rs        |  46 +++++++
 .../src/patch/redirect/replay.rs              | 102 +++++++++++++--
 .../src/patch/redirect/takeover.rs            | 122 ++++++++++++++++++
 .../src/vendor/npm_flavor.rs                  |  32 +++++
 crates/socket-patch-core/src/vendor/verify.rs |  36 ++++++
 9 files changed, 477 insertions(+), 13 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 21874c7e..f42adb9d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -627,6 +627,20 @@ into the new version's section — see docs/releasing.md.
 
 ### Fixed
 
+- **Ledgers written by a newer socket-patch are never half-reverted.**
+  A hosted redirect edit kind this release does not understand used to
+  let `rollback` drop the npm record beside it, leaving that lockfile
+  redirected with nothing tracking it. Such an edit now holds every
+  record in the redirect ledger, and `rollback <purl>`, `remove` and the
+  hosted-to-vendored takeover refuse, with nothing written, when it
+  names the purl ("the redirect ledger holds a {kind} edit this
+  socket-patch release does not understand; upgrade socket-patch").
+  `repair` skips vendored npm entries whose `flavor` it does not know
+  (`vendor_wiring_unknown_revert_blocked`) instead of rebuilding them
+  with the wrong layout rules. vlt ledgers (`redirect_vlt_lock_node`,
+  `flavor: "vlt"`) require the socket-patch release that adds vlt
+  support.
+
 - **Hosted Go redirects no longer claim patches that did not land.**
   `scan`/`get --mode hosted` counted a Go module as redirected (recorded
   it in the redirect ledger, so `vex` attested it) whenever any project
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index f6991b70..0583b606 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -923,7 +923,8 @@ Restore the system but keep the local patch state for a later re-apply: manifest
 
 * **Per-purl reverts** exist for **cargo, golang and the npm family** (`redirect_revert_supported`): staged, fail-closed on drift, and honoring `dry_run` (every inverse and drift check resolves like a wet run; nothing flushes and the ledger is untouched). npm purls on projects with bun-lock edits DEFER to the whole-ledger replay (below) whenever it will run — the scope covers every record, and the replay stages the bun group all-or-nothing. A SCOPED unwind (`rollback <purl>`, or `remove <purl>` while other hosted records remain) takes the per-purl revert instead: it claims that purl's `redirect_bun_lock_package` edits by the recorded line's spec (`<name>@<version>` registry spec, or a hosted URL whose tarball leaf is `<name>-<version>.tgz`) and replays them like the yarn/pnpm text kinds (whole-line fragments, CRLF-exact); a sibling version's edit is neither claimed nor a refusal; an edit that mentions the package but is not a bun packages-entry line refuses with the unscoped-`rollback` remedy. Pinned by `tests/in_process_vendor_bun_takeover.rs` (`bun_scoped_rollback_of_one_of_two_hosted_records_unwinds_only_that_purl` and the `remove` twin). Native binary `redirect_bun_lockb_package` snapshots follow the same scoped ownership rule and restore only the claimed package records; unrelated binary resolutions stay intact. yarn lock blocks (`redirect_yarn_berry_entry` / `redirect_yarn_classic_entry`) are recorded in the lock's on-disk line endings and replayed byte-exactly; when a `core.autocrlf` checkout has since flipped the lock's UNIFORM ending (LF ↔ CRLF — the committed ledger keeps its fragments verbatim), this per-purl revert and the whole-ledger replay below match the recorded blocks respelled in the live ending and restore in that ending (v5.0). A lock with mixed endings proves nothing and still refuses as drift.
 * **Whole-ledger reverse replay** (`revert_remaining_redirect_edits`, core `patch/redirect/replay.rs`) runs whenever the in-scope hosted record set equals the FULL ledger record set — however the scope was spelled (bare `rollback`, `rollback '**'`, an identifier set covering every record; `remove` reuses the same eligibility rule). It walks every remaining ledger edit in reverse write order through a **per-kind inverse table**, staged and committed **per ecosystem group, all-or-nothing**: one drifted, ambiguous (a fragment appearing more than once), or unhandled edit refuses the whole group byte-untouched while other groups proceed. This covers **gem, golang, pypi, composer, bun**, the yarn/pnpm text kinds (normally claimed by the per-purl npm revert first), and the **non-package rideshare edits** — the pnpm `trustLockfile` auto-config (a pristine created scaffold is deleted; a user-modified one keeps the file and loses only the `trustLockfile: true` line, warned as `redirect_pnpm_trust_scaffold_modified`) — plus a "last one out turns off the lights" pass: when the record map empties but non-package edits remain, they are replayed in the same persist, so the trust edit never strands. The npm `.npmrc` `allow-remote=all` auto-config (`redirect_npmrc_allow_remote`) replays in the `npm` group (a pristine created file is deleted; otherwise only the line is removed, warned as `redirect_npmrc_allow_remote_modified` for a modified created file) and is ALSO claimed by the per-purl npm revert of the last package-lock entry, so a scoped unwind never strands it.
-* **maven and nuget fail closed**: their structured-metadata kinds (`redirect_maven_repository` / `redirect_maven_dep_management` / `redirect_maven_config` / `redirect_maven_trusted_checksums`, `redirect_nuget_source` / `redirect_nuget_lock`) have no revert implementation, so any such edit refuses its whole group (the maven `<version>` suffix rewrite alone IS invertible, but it rides the same all-or-nothing group). The refusal keeps their records + edits in the ledger and names the remedy: re-run `scan --mode hosted` to normalize, or restore the lockfiles from version control. Unknown future kinds refuse the same way (forward-compat).
+* **maven and nuget fail closed**: their structured-metadata kinds (`redirect_maven_repository` / `redirect_maven_dep_management` / `redirect_maven_config` / `redirect_maven_trusted_checksums`, `redirect_nuget_source` / `redirect_nuget_lock`) have no revert implementation, so any such edit refuses its whole group (the maven `<version>` suffix rewrite alone IS invertible, but it rides the same all-or-nothing group). The refusal keeps their records + edits in the ledger and names the remedy: re-run `scan --mode hosted` to normalize, or restore the lockfiles from version control.
+* **Unknown edit kinds fail closed (forward compatibility).** A ledger edit kind this release has no inverse for (written by a newer socket-patch) refuses in the replay's reserved `unknown` group, and every record of every ecosystem is held while that group refuses, so no record is dropped beside an edit it may own. A per-purl revert (`rollback <purl>`, `remove`, the hosted→vendored takeover) refuses with nothing written when any unknown `redirect_*` edit's `key`, `original` or `new` contains the purl's `<name>@<version>`: "the redirect ledger holds a {kind} edit this socket-patch release does not understand; upgrade socket-patch". vlt ledgers (`redirect_vlt_lock_node` edits, vendored entries with `flavor: "vlt"`) require the socket-patch release that adds vlt support. The ledger `version` stays 1: compatibility is decided per kind.
 * **Scoped runs** (paths / identifiers / `--ecosystems`) that do NOT cover the full record set get per-purl reverts only; in-scope hosted purls of ecosystems without one fail closed — `rollback` reports them in `hosted.unsupported` (exit 1), `remove` as the top-level `hosted_revert_unsupported` error — with the remedy "run an unscoped `socket-patch rollback` to unwind ALL hosted redirects, or re-run `scan --mode hosted`".
 * **Ledger accounting**: exactly the replayed (or already-at-original) edits are dropped; a record is dropped only when every group its ecosystem writes ended clean, so refused groups keep both edits and records — the intermediate-but-coherent ledger a retry needs. The mutated ledger is persisted (delete-when-empty); a failed persist rides `hosted.failed` / `hosted_revert_failed`.
 
@@ -1221,7 +1222,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `already_vendored`        | `skipped`        | vendor: artifact + wiring already in sync for this patch uuid. |
 | `unsafe_coordinates`      | `failed`         | vendor: purl/uuid would escape `.socket/vendor/` (tampered manifest/state); refused before any write. |
 | `revert_failed`           | `failed`         | vendor --revert: a recorded entry could not be reverted. |
-| `vendor_wiring_unknown_revert_blocked` | `skipped` (beside the `failed`/`revert_failed` event) | vendor --revert: the ledger entry was reconstructed by `repair` without wiring records and the live lockfile still resolves through the artifact — the revert refuses (fail-closed) instead of deleting a tarball the lock points at. Recovery: `socket-patch repair`, then restore the pre-vendor lock (or re-lock without the override) and re-run the revert. |
+| `vendor_wiring_unknown_revert_blocked` | `skipped` (beside the `failed`/`revert_failed` event) | vendor --revert: the ledger entry was reconstructed by `repair` without wiring records and the live lockfile still resolves through the artifact — the revert refuses (fail-closed) instead of deleting a tarball the lock points at. Recovery: `socket-patch repair`, then restore the pre-vendor lock (or re-lock without the override) and re-run the revert. repair: an npm ledger entry whose `flavor` this release does not know (written by a newer socket-patch) is skipped, never health-checked or rebuilt, and the artifact, wiring and ledger stay as found (a lone `skipped` event; the run's exit is unaffected). Recovery: upgrade socket-patch. |
 | `ecosystem_not_setup`     | `skipped`        | vex: the patch is applied and byte-verified but its ecosystem has no install hook configured and is not declared in the manifest's `setup.manual`, so it is omitted from the document (Property 7). Previously invisible in `--json`. |
 | `stale_install`           | `skipped`        | vex (in-run `scan --mode hosted --vex`): a hosted stale-install probe found positively unpatched installed bytes, so the purl is omitted even under `--vex-no-verify` (see the gem / Python stale-install guards). |
 | `record_unavailable`      | `skipped`        | vex (manifest-less): a lockfile-wired patch has no local record (manifest, redirect ledger, vendor ledger) and none could be fetched — `--offline`, transport error, 404, or a refused (paid) patch. Omitted, never attested from the `socket-patch.vendor.json` marker. |
diff --git a/crates/socket-patch-cli/src/commands/repair_vendor.rs b/crates/socket-patch-cli/src/commands/repair_vendor.rs
index c283c8d3..8d03076c 100644
--- a/crates/socket-patch-cli/src/commands/repair_vendor.rs
+++ b/crates/socket-patch-cli/src/commands/repair_vendor.rs
@@ -876,6 +876,22 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                     format!("the ledger entry cannot be verified ({reason}); fix state.json"),
                 );
             }
+            ArtifactHealth::UnknownFlavor { flavor } => {
+                record_warning(
+                    env,
+                    purl,
+                    &VendorWarning::new(
+                        "vendor_wiring_unknown_revert_blocked",
+                        format!(
+                            "{} was vendored for the npm flavor `{flavor}`, which this \
+                             socket-patch release does not understand; left untouched — \
+                             upgrade socket-patch",
+                            normalize_purl(purl)
+                        ),
+                    ),
+                    common,
+                );
+            }
             health @ (ArtifactHealth::Missing | ArtifactHealth::Corrupt { .. }) => {
                 let reason = if matches!(health, ArtifactHealth::Missing) {
                     "vendor_artifact_missing"
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
index dcb3f171..e9b3d3ca 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
@@ -853,6 +853,123 @@ async fn scoped_unsupported_ecosystem_fails_closed() {
     );
 }
 
+/// A ledger written by a newer socket-patch carries a hosted edit kind this
+/// release has no revert for (`redirect_vlt_lock_node`). A scoped rollback
+/// of the purl it names must refuse with nothing written, and an unscoped
+/// one must keep the record while that edit survives.
+async fn write_vlt_ledger_fixture(root: &Path) -> String {
+    let vlt_new = format!(
+        "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-PATCHEDpatched==\",\"{LP_HOSTED_URL}\"]"
+    );
+    let vlt_lock = format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {vlt_new}\n  }},\n  \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.2.3 ~npm~left-pad@1.2.3\"\n  }}\n}}\n"
+    );
+    std::fs::write(root.join("vlt-lock.json"), &vlt_lock).unwrap();
+    std::fs::write(
+        root.join("yarn.lock"),
+        yarn_lock_content(&yarn_redirected_block()),
+    )
+    .unwrap();
+    std::fs::write(
+        root.join("Gemfile.lock"),
+        gemfile_lock_content(GEM_PATCH_REMOTE),
+    )
+    .unwrap();
+    write_hosted_ledger(
+        root,
+        vec![
+            (LP_PURL, patch_record(LP_UUID, "GHSA-lpad-aaaa-bbbb")),
+            (GEM_PURL, patch_record(GEM_UUID, "GHSA-gems-cccc-dddd")),
+        ],
+        vec![
+            yarn_classic_edit(),
+            gem_source_edit(),
+            FileEdit {
+                path: "vlt-lock.json".to_string(),
+                kind: "redirect_vlt_lock_node".to_string(),
+                action: "rewritten".to_string(),
+                key: Some("left-pad@1.2.3".to_string()),
+                original: Some(Value::String(
+                    "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-UPSTREAMupstream==\"]"
+                        .to_string(),
+                )),
+                new: Some(Value::String(vlt_new)),
+            },
+        ],
+    )
+    .await;
+    vlt_lock
+}
+
+#[tokio::test]
+#[serial]
+async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
+    let tmp = tempfile::tempdir().unwrap();
+    let vlt_lock = write_vlt_ledger_fixture(tmp.path()).await;
+    let ledger_before = std::fs::read(ledger_path(tmp.path())).unwrap();
+    let yarn_before = std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap();
+
+    let (code, envelope) = run_rollback_subprocess(tmp.path(), &[LP_PURL]);
+    assert_eq!(code, 1, "{envelope}");
+    assert_eq!(envelope["status"], "partial_failure", "{envelope}");
+    assert_eq!(
+        envelope["hosted"]["reverted"],
+        serde_json::json!([]),
+        "{envelope}"
+    );
+    let failed = envelope["hosted"]["failed"].as_array().unwrap();
+    assert_eq!(failed.len(), 1, "{envelope}");
+    assert_eq!(failed[0]["purl"], LP_PURL);
+    assert!(
+        failed[0]["error"]
+            .as_str()
+            .unwrap()
+            .contains("redirect_vlt_lock_node edit this socket-patch release does not understand"),
+        "{envelope}"
+    );
+    assert_eq!(
+        std::fs::read(ledger_path(tmp.path())).unwrap(),
+        ledger_before
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap(),
+        yarn_before
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
+        vlt_lock
+    );
+}
+
+#[tokio::test]
+#[serial]
+async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
+    let tmp = tempfile::tempdir().unwrap();
+    let vlt_lock = write_vlt_ledger_fixture(tmp.path()).await;
+
+    let code = rollback_in_process(tmp.path(), Vec::new(), false).await;
+    assert_eq!(
+        code, 1,
+        "an unknown edit kind must fail the rollback closed"
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
+        vlt_lock
+    );
+    let ledger: Value =
+        serde_json::from_slice(&std::fs::read(ledger_path(tmp.path())).unwrap()).unwrap();
+    assert!(ledger["records"].get(LP_PURL).is_some(), "{ledger}");
+    assert!(ledger["records"].get(GEM_PURL).is_some(), "{ledger}");
+    assert!(
+        ledger["edits"]
+            .as_array()
+            .unwrap()
+            .iter()
+            .any(|e| e["kind"] == "redirect_vlt_lock_node"),
+        "{ledger}"
+    );
+}
+
 // ---------------------------------------------------------------------------
 // 4. unscoped rollback replays the unsupported ecosystems
 // ---------------------------------------------------------------------------
diff --git a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
index 5e028045..c934abd4 100644
--- a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
+++ b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
@@ -601,6 +601,52 @@ async fn repair_rebuilds_corrupt_bun_tarball() {
     }
 }
 
+/// An entry stamped with a flavor this release has no backend for (written
+/// by a newer socket-patch, e.g. `vlt`) is never judged or rebuilt: repair
+/// warns `vendor_wiring_unknown_revert_blocked` and leaves the ledger, the
+/// lock and the (here deleted) artifact exactly as found.
+#[tokio::test]
+async fn repair_skips_an_entry_with_an_unknown_flavor() {
+    let flavor = Flavor::Pnpm;
+    let mock = MockServer::start().await;
+    mount_patch_api(&mock).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_fixture(tmp.path(), flavor);
+    let tgz = vendor_project(tmp.path(), &mock.uri(), flavor);
+    std::fs::remove_file(&tgz).unwrap();
+
+    let state_path = tmp.path().join(".socket/vendor/state.json");
+    let mut v: serde_json::Value =
+        serde_json::from_str(&std::fs::read_to_string(&state_path).unwrap()).unwrap();
+    v["entries"][PURL]["flavor"] = serde_json::json!("vlt");
+    std::fs::write(&state_path, serde_json::to_vec_pretty(&v).unwrap()).unwrap();
+    let state_before = std::fs::read(&state_path).unwrap();
+    let lock_before = std::fs::read(tmp.path().join(flavor.lock_name())).unwrap();
+
+    let (code, stdout, stderr) = run_cli(tmp.path(), &mock.uri(), &["repair"]);
+    assert_eq!(code, 0, "stdout={stdout} stderr={stderr}");
+    let env = parse_env(&stdout);
+    assert!(
+        !events_of(&env).iter().any(|e| e["action"] == "rebuilt"),
+        "{env}"
+    );
+    assert!(
+        events_of(&env).iter().any(|e| e["action"] == "skipped"
+            && e["purl"] == PURL
+            && e["errorCode"] == "vendor_wiring_unknown_revert_blocked"),
+        "{env}"
+    );
+    assert!(
+        !tgz.exists(),
+        "an unknown-flavor artifact must not be rebuilt"
+    );
+    assert_eq!(std::fs::read(&state_path).unwrap(), state_before);
+    assert_eq!(
+        std::fs::read(tmp.path().join(flavor.lock_name())).unwrap(),
+        lock_before
+    );
+}
+
 // ── (c) tampered ledger sha → fail-closed ──────────────────────────────────
 
 async fn tampered_ledger_fails_closed(flavor: Flavor) {
diff --git a/crates/socket-patch-core/src/patch/redirect/replay.rs b/crates/socket-patch-core/src/patch/redirect/replay.rs
index 324aa583..575a41d6 100644
--- a/crates/socket-patch-core/src/patch/redirect/replay.rs
+++ b/crates/socket-patch-core/src/patch/redirect/replay.rs
@@ -178,29 +178,36 @@ fn classify(kind: &str, action: &str) -> (&'static str, Inverse) {
     }
 }
 
+/// Is `kind` a hosted-redirect edit this release has no replay arm for
+/// (a newer socket-patch's writer)?
+pub(super) fn is_unclassified_kind(kind: &str, action: &str) -> bool {
+    classify(kind, action).0 == "unknown"
+}
+
 /// The replay groups a record's ecosystem can have written edits into —
 /// the drop rule holds a record while ANY of its groups refused. npm
-/// purls fan across every npm-family lock flavor.
+/// purls fan across every npm-family lock flavor. Every ecosystem also
+/// lists the reserved "unknown" group: an edit kind this release cannot
+/// classify may belong to any record (a newer release's writer for a new
+/// lock flavor), so dropping a record beside one would strand that edit.
 fn groups_for_record_purl(purl: &str) -> &'static [&'static str] {
     if purl.starts_with("pkg:npm/") {
-        &["npm", "yarn", "pnpm", "bun"]
+        &["npm", "yarn", "pnpm", "bun", "unknown"]
     } else if purl.starts_with("pkg:cargo/") {
-        &["cargo"]
+        &["cargo", "unknown"]
     } else if purl.starts_with("pkg:gem/") {
-        &["gem"]
+        &["gem", "unknown"]
     } else if purl.starts_with("pkg:pypi/") {
-        &["pypi"]
+        &["pypi", "unknown"]
     } else if purl.starts_with("pkg:composer/") {
-        &["composer"]
+        &["composer", "unknown"]
     } else if purl.starts_with("pkg:golang/") {
-        &["golang"]
+        &["golang", "unknown"]
     } else if purl.starts_with("pkg:maven/") {
-        &["maven"]
+        &["maven", "unknown"]
     } else if purl.starts_with("pkg:nuget/") {
-        &["nuget"]
+        &["nuget", "unknown"]
     } else {
-        // Unknown ecosystems fail closed: tie them to the reserved
-        // "unknown" group, which refuses whenever it holds edits.
         &["unknown"]
     }
 }
@@ -2020,6 +2027,79 @@ mod tests {
         assert_eq!(state.edits.len(), 1);
     }
 
+    const VLT_LOCK: &str = "{\n  \"lockfileVersion\": 0,\n  \"nodes\": {\n    \"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-p\",\"https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\"]\n  },\n  \"edges\": {}\n}\n";
+
+    fn vlt_lock_node_edit() -> FileEdit {
+        FileEdit {
+            key: Some("minimist@1.2.8".into()),
+            ..edit(
+                "vlt-lock.json",
+                "redirect_vlt_lock_node",
+                "rewritten",
+                Some("\"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-r\"]"),
+                Some(
+                    "\"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-p\",\
+                     \"https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\"]",
+                ),
+            )
+        }
+    }
+
+    #[tokio::test]
+    async fn unclassified_kind_holds_the_npm_record_and_every_other_record() {
+        for dry_run in [true, false] {
+            let dir = TempDir::new().unwrap();
+            write(dir.path(), "vlt-lock.json", VLT_LOCK).await;
+            write(dir.path(), "composer.lock", "https://patch.example/c\n").await;
+            let mut state = state_with(
+                vec![
+                    vlt_lock_node_edit(),
+                    edit(
+                        "composer.lock",
+                        "redirect_composer_dist",
+                        "rewritten",
+                        Some("https://packagist.example/c"),
+                        Some("https://patch.example/c"),
+                    ),
+                ],
+                &["pkg:npm/minimist@1.2.8", "pkg:composer/v/c@1.0.0"],
+            );
+            let out = revert_remaining_redirect_edits(dir.path(), &mut state, dry_run).await;
+            assert_eq!(out.refusals.len(), 1, "{out:?}");
+            assert_eq!(out.refusals[0].group, "unknown");
+            assert!(out.dropped_records.is_empty(), "{out:?}");
+            assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
+            assert!(state.records.contains_key("pkg:composer/v/c@1.0.0"));
+            assert_eq!(read(dir.path(), "vlt-lock.json").await, VLT_LOCK);
+            assert!(state
+                .edits
+                .iter()
+                .any(|e| e.kind == "redirect_vlt_lock_node"));
+        }
+    }
+
+    #[test]
+    fn every_ecosystem_group_list_includes_the_unknown_group() {
+        for purl in [
+            "pkg:npm/a@1",
+            "pkg:cargo/a@1",
+            "pkg:gem/a@1",
+            "pkg:pypi/a@1",
+            "pkg:composer/v/a@1",
+            "pkg:golang/example.com/a@v1.0.0",
+            "pkg:maven/g/a@1",
+            "pkg:nuget/A@1",
+            "pkg:hex/a@1",
+        ] {
+            assert!(groups_for_record_purl(purl).contains(&"unknown"), "{purl}");
+        }
+        assert!(is_unclassified_kind("redirect_vlt_lock_node", "rewritten"));
+        assert!(!is_unclassified_kind(
+            "redirect_bun_lock_package",
+            "rewritten"
+        ));
+    }
+
     #[tokio::test]
     async fn leftover_npm_json_edit_refuses_and_holds_every_npm_family_record() {
         let dir = TempDir::new().unwrap();
diff --git a/crates/socket-patch-core/src/patch/redirect/takeover.rs b/crates/socket-patch-core/src/patch/redirect/takeover.rs
index 5280cf91..a5fb403e 100644
--- a/crates/socket-patch-core/src/patch/redirect/takeover.rs
+++ b/crates/socket-patch-core/src/patch/redirect/takeover.rs
@@ -129,6 +129,36 @@ fn find_record_key(state: &RedirectState, purl: &str) -> Result<(String, String)
     Ok((record_key, strip_purl_qualifiers(purl).to_string()))
 }
 
+/// Refuse a per-purl claim while the ledger holds a `redirect_*` edit this
+/// release cannot classify that mentions `<name>@<version>`: claiming the
+/// rest and dropping the record would strand that edit (half a takeover).
+fn refuse_unclassified_edits(
+    state: &RedirectState,
+    name: &str,
+    version: &str,
+) -> Result<(), String> {
+    let needle = format!("{name}@{version}");
+    let mentions = |v: &Option<Value>| match v {
+        Some(Value::String(s)) => s.contains(&needle),
+        Some(other) => other.to_string().contains(&needle),
+        None => false,
+    };
+    match state.edits.iter().find(|e| {
+        e.kind.starts_with("redirect_")
+            && super::replay::is_unclassified_kind(&e.kind, &e.action)
+            && (e.key.as_deref().is_some_and(|k| k.contains(&needle))
+                || mentions(&e.original)
+                || mentions(&e.new))
+    }) {
+        Some(e) => Err(format!(
+            "the redirect ledger holds a {} edit this socket-patch release does not \
+             understand; upgrade socket-patch",
+            e.kind
+        )),
+        None => Ok(()),
+    }
+}
+
 /// Drop the claimed edits (by ledger index) and the purl's record from the
 /// ledger — only after every inverse applied cleanly. The caller persists.
 fn drop_claimed(state: &mut RedirectState, claimed: Vec<usize>, record_key: &str) {
@@ -224,6 +254,7 @@ pub async fn revert_cargo_redirect_purl(
         return Err(format!("not a cargo purl: {purl}"));
     };
     let (name, version) = (name.into_owned(), version.into_owned());
+    refuse_unclassified_edits(state, &name, &version)?;
     let lock_key = format!("{name}@{version}");
 
     // Manifest edits are keyed by crate NAME (the shared golden ledger
@@ -481,6 +512,7 @@ pub async fn revert_golang_redirect_purl(
         return Err(format!("not a golang purl: {purl}"));
     };
     let (module, version) = (module.into_owned(), version.into_owned());
+    refuse_unclassified_edits(state, &module, &version)?;
     let lhs = format!("{module} {version} =>");
     let is_replace_edit = |e: &FileEdit| {
         matches!(
@@ -761,6 +793,7 @@ pub async fn revert_npm_redirect_purl(
         return Err(format!("not an npm purl: {purl}"));
     };
     let (name, version) = (name.into_owned(), version.into_owned());
+    refuse_unclassified_edits(state, &name, &version)?;
     let lock_key = format!("{name}@{version}");
 
     // The package-lock/shrinkwrap files any `redirect_npm_lock_entry` edits
@@ -2451,6 +2484,95 @@ mod tests {
         assert!(state.edits.is_empty(), "edits dropped");
     }
 
+    fn vlt_lock_node_edit(name: &str, version: &str) -> FileEdit {
+        FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: "redirect_vlt_lock_node".into(),
+            action: "rewritten".into(),
+            key: Some(format!("{name}@{version}")),
+            original: Some(Value::String(format!(
+                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-r\"]"
+            ))),
+            new: Some(Value::String(format!(
+                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-p\",\"{NPM_URL}\"]"
+            ))),
+        }
+    }
+
+    #[tokio::test]
+    async fn npm_unclassified_edit_naming_the_purl_refuses_the_claim_untouched() {
+        for dry_run in [true, false] {
+            let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
+            let root = tmp.path();
+            state.edits.push(vlt_lock_node_edit("left-pad", "1.3.0"));
+            let wired = tokio::fs::read_to_string(root.join("yarn.lock"))
+                .await
+                .unwrap();
+            let before = state.clone();
+            let err = revert_redirect_purl(root, &mut state, NPM_PURL, dry_run)
+                .await
+                .unwrap_err();
+            assert_eq!(
+                err,
+                "the redirect ledger holds a redirect_vlt_lock_node edit this socket-patch \
+                 release does not understand; upgrade socket-patch"
+            );
+            assert_eq!(
+                serde_json::to_value(&state).unwrap(),
+                serde_json::to_value(&before).unwrap(),
+                "nothing claimed"
+            );
+            assert_eq!(
+                tokio::fs::read_to_string(root.join("yarn.lock"))
+                    .await
+                    .unwrap(),
+                wired
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn npm_unclassified_edit_for_another_package_does_not_block_the_claim() {
+        let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
+        let root = tmp.path();
+        state.edits.push(vlt_lock_node_edit("left-pad", "1.3.1"));
+        revert_redirect_purl(root, &mut state, NPM_PURL, false)
+            .await
+            .expect("revert succeeds");
+        assert_eq!(state.edits.len(), 1);
+        assert_eq!(state.edits[0].kind, "redirect_vlt_lock_node");
+    }
+
+    #[tokio::test]
+    async fn cargo_and_golang_claims_refuse_an_unclassified_edit_naming_them() {
+        let tmp = tempfile::tempdir().unwrap();
+        for (purl, name, version) in [
+            ("pkg:cargo/serde@1.0.0", "serde", "1.0.0"),
+            ("pkg:golang/example.com/m@v1.2.3", "example.com/m", "v1.2.3"),
+        ] {
+            let mut state = RedirectState::new();
+            state.records.insert(purl.into(), record());
+            state.edits.push(FileEdit {
+                path: "future.lock".into(),
+                kind: "redirect_future_lock_entry".into(),
+                action: "rewritten".into(),
+                key: None,
+                original: Some(serde_json::json!({ "id": format!("{name}@{version}") })),
+                new: Some(Value::String("x".into())),
+            });
+            let before = state.clone();
+            let err = revert_redirect_purl(tmp.path(), &mut state, purl, false)
+                .await
+                .unwrap_err();
+            assert!(err.contains("redirect_future_lock_entry edit"), "{err}");
+            assert_eq!(
+                serde_json::to_value(&state).unwrap(),
+                serde_json::to_value(&before).unwrap(),
+                "{purl}"
+            );
+        }
+    }
+
     #[tokio::test]
     async fn npm_berry_lock_round_trips_and_drops_ledger_entries() {
         let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &berry_pristine()).await;
diff --git a/crates/socket-patch-core/src/vendor/npm_flavor.rs b/crates/socket-patch-core/src/vendor/npm_flavor.rs
index 41176de7..46c4d08c 100644
--- a/crates/socket-patch-core/src/vendor/npm_flavor.rs
+++ b/crates/socket-patch-core/src/vendor/npm_flavor.rs
@@ -51,6 +51,15 @@ pub(crate) enum NpmLockFlavor {
 }
 
 impl NpmLockFlavor {
+    const ALL: [NpmLockFlavor; 6] = [
+        NpmLockFlavor::PackageLock,
+        NpmLockFlavor::YarnClassic,
+        NpmLockFlavor::YarnBerry,
+        NpmLockFlavor::Pnpm,
+        NpmLockFlavor::PnpmLegacy,
+        NpmLockFlavor::Bun,
+    ];
+
     /// The stable string recorded as [`VendorEntry::flavor`].
     fn as_str(self) -> &'static str {
         match self {
@@ -454,6 +463,14 @@ pub(super) async fn lock_text_mentions_uuid(
     any_readable.then_some(false)
 }
 
+/// Does this build have a backend for an npm entry's recorded flavor?
+/// `None` is a pre-flavor (package-lock) ledger. An unknown flavor was
+/// wired by a newer socket-patch, so health checks and rebuilds must not
+/// judge it by this build's layout rules.
+pub fn npm_flavor_is_known(flavor: Option<&str>) -> bool {
+    flavor.is_none_or(|f| NpmLockFlavor::ALL.iter().any(|known| known.as_str() == f))
+}
+
 /// Revert one recorded npm vendor entry through the flavor that wired it.
 /// Entries from before the flavor field existed (`None`) are package-lock
 /// wirings; an unknown flavor fails CLOSED (an older binary must not guess
@@ -554,6 +571,17 @@ mod tests {
 
     #[test]
     fn flavor_strings_are_stable() {
+        assert_eq!(
+            NpmLockFlavor::ALL.map(NpmLockFlavor::as_str),
+            [
+                "package-lock",
+                "yarn-classic",
+                "yarn-berry",
+                "pnpm",
+                "pnpm-legacy",
+                "bun"
+            ]
+        );
         assert_eq!(NpmLockFlavor::PackageLock.as_str(), "package-lock");
         assert_eq!(NpmLockFlavor::YarnClassic.as_str(), "yarn-classic");
         assert_eq!(NpmLockFlavor::Pnpm.as_str(), "pnpm");
@@ -1046,6 +1074,9 @@ mod tests {
         assert!(!outcome.success);
         assert!(outcome.error.as_deref().unwrap().contains("future-pm"));
 
+        assert!(!npm_flavor_is_known(Some("future-pm")));
+        assert!(!npm_flavor_is_known(Some("vlt")));
+
         // Every known flavor routes to its backend; with no wiring records and
         // nothing on disk each reverts trivially (None = a pre-flavor ledger).
         for flavor in [
@@ -1057,6 +1088,7 @@ mod tests {
             Some("pnpm-legacy".to_string()),
             Some("bun".to_string()),
         ] {
+            assert!(npm_flavor_is_known(flavor.as_deref()), "{flavor:?}");
             entry.flavor = flavor.clone();
             let outcome = revert_npm_any(&entry, tmp.path(), false).await;
             assert!(outcome.success, "flavor {flavor:?}: {:?}", outcome.error);
diff --git a/crates/socket-patch-core/src/vendor/verify.rs b/crates/socket-patch-core/src/vendor/verify.rs
index 32c0e58b..2b034320 100644
--- a/crates/socket-patch-core/src/vendor/verify.rs
+++ b/crates/socket-patch-core/src/vendor/verify.rs
@@ -438,6 +438,9 @@ pub enum ArtifactHealth {
     /// The entry can't be judged (poisoned path, empty record): fail
     /// closed, never rebuild from it.
     Unverifiable { reason: String },
+    /// An npm entry wired by a flavor this build has no backend for (a
+    /// newer socket-patch): its layout is not ours to judge or rebuild.
+    UnknownFlavor { flavor: String },
 }
 
 /// Health-check one vendored artifact against its patch record: the
@@ -453,6 +456,12 @@ pub async fn check_vendored_artifact(
     entry: &VendorEntry,
     record: &PatchRecord,
 ) -> ArtifactHealth {
+    if entry.ecosystem == "npm" && !super::npm_flavor::npm_flavor_is_known(entry.flavor.as_deref())
+    {
+        return ArtifactHealth::UnknownFlavor {
+            flavor: entry.flavor.clone().unwrap_or_default(),
+        };
+    }
     match verify_vendored_patch_record(project_root, entry, record).await {
         Err(tag) => {
             // A broken member copy must not hide a simultaneously corrupt
@@ -1432,6 +1441,33 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn unknown_npm_flavor_is_never_judged_by_this_builds_layout() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        tokio::fs::create_dir_all(root.join(&rel).join("node_modules"))
+            .await
+            .unwrap();
+        tokio::fs::write(root.join(&rel).join("index.js"), b"tampered")
+            .await
+            .unwrap();
+        let rec = record(UUID, "package/index.js");
+        let mut ent = entry("npm", UUID, &rel);
+        ent.flavor = Some("vlt".into());
+        assert_eq!(
+            check_vendored_artifact(root, &ent, &rec).await,
+            ArtifactHealth::UnknownFlavor {
+                flavor: "vlt".into()
+            }
+        );
+        ent.flavor = Some("bun".into());
+        assert!(matches!(
+            check_vendored_artifact(root, &ent, &rec).await,
+            ArtifactHealth::Corrupt { .. }
+        ));
+    }
+
     /// SECURITY: the zip entry-count cap fails a tampered wheel closed —
     /// one entry past the cap (even zero-byte entries) is rejected up
     /// front, while a wheel at exactly the cap still reads (no off-by-one

From 329c0404a8baf620374b37f0cb1f26b9eeb1e5c8 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 19:50:44 -0400
Subject: [PATCH 05/46] Keep unknown ledger edits out of vendor reconcile

The end-of-run hosted-to-vendored reconcile in `vendor` and
`scan --mode vendored` could still drop a redirect record together
with a ledger edit this release does not understand (for example a
vlt-lock.json edit), leaving that lockfile on the hosted URL with
nothing tracking it while reporting the migration as reconciled. It
now leaves such a package in the ledger and prints the manual cleanup
advisory instead.

An unknown edit now only blocks the package it actually names, so an
edit for left-pad or @scope/pad no longer refuses a rollback of pad.
Whole-ledger rollbacks that hit an unknown edit now say to upgrade
socket-patch rather than suggesting a rescan that cannot help. The
changelog and contract now say that such a rollback still unwinds the
lockfiles this release understands while keeping every record.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  13 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   2 +-
 .../tests/in_process_rollback_hosted.rs       | 120 +++++++----
 .../src/patch/redirect/replay.rs              |  39 +++-
 .../src/patch/redirect/state.rs               | 191 +++++++++++++++++-
 .../src/patch/redirect/takeover.rs            |  31 +--
 6 files changed, 322 insertions(+), 74 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f42adb9d..c3a2ca45 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -631,10 +631,15 @@ into the new version's section — see docs/releasing.md.
   A hosted redirect edit kind this release does not understand used to
   let `rollback` drop the npm record beside it, leaving that lockfile
   redirected with nothing tracking it. Such an edit now holds every
-  record in the redirect ledger, and `rollback <purl>`, `remove` and the
-  hosted-to-vendored takeover refuse, with nothing written, when it
-  names the purl ("the redirect ledger holds a {kind} edit this
-  socket-patch release does not understand; upgrade socket-patch").
+  record in the redirect ledger ("the redirect ledger holds a {kind}
+  edit this socket-patch release does not understand; upgrade
+  socket-patch"). When it names a purl, that purl's own revert in
+  `rollback <purl>`, `remove` and the hosted-to-vendored takeover
+  refuses with nothing written, and the takeover's ledger reconcile
+  leaves the purl for the manual cleanup. When the scope still covers
+  every hosted record, the whole-ledger replay goes on to unwind the
+  lockfiles this release understands, but keeps every record and the
+  unknown edit.
   `repair` skips vendored npm entries whose `flavor` it does not know
   (`vendor_wiring_unknown_revert_blocked`) instead of rebuilding them
   with the wrong layout rules. vlt ledgers (`redirect_vlt_lock_node`,
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 0583b606..bc130bdb 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -924,7 +924,7 @@ Restore the system but keep the local patch state for a later re-apply: manifest
 * **Per-purl reverts** exist for **cargo, golang and the npm family** (`redirect_revert_supported`): staged, fail-closed on drift, and honoring `dry_run` (every inverse and drift check resolves like a wet run; nothing flushes and the ledger is untouched). npm purls on projects with bun-lock edits DEFER to the whole-ledger replay (below) whenever it will run — the scope covers every record, and the replay stages the bun group all-or-nothing. A SCOPED unwind (`rollback <purl>`, or `remove <purl>` while other hosted records remain) takes the per-purl revert instead: it claims that purl's `redirect_bun_lock_package` edits by the recorded line's spec (`<name>@<version>` registry spec, or a hosted URL whose tarball leaf is `<name>-<version>.tgz`) and replays them like the yarn/pnpm text kinds (whole-line fragments, CRLF-exact); a sibling version's edit is neither claimed nor a refusal; an edit that mentions the package but is not a bun packages-entry line refuses with the unscoped-`rollback` remedy. Pinned by `tests/in_process_vendor_bun_takeover.rs` (`bun_scoped_rollback_of_one_of_two_hosted_records_unwinds_only_that_purl` and the `remove` twin). Native binary `redirect_bun_lockb_package` snapshots follow the same scoped ownership rule and restore only the claimed package records; unrelated binary resolutions stay intact. yarn lock blocks (`redirect_yarn_berry_entry` / `redirect_yarn_classic_entry`) are recorded in the lock's on-disk line endings and replayed byte-exactly; when a `core.autocrlf` checkout has since flipped the lock's UNIFORM ending (LF ↔ CRLF — the committed ledger keeps its fragments verbatim), this per-purl revert and the whole-ledger replay below match the recorded blocks respelled in the live ending and restore in that ending (v5.0). A lock with mixed endings proves nothing and still refuses as drift.
 * **Whole-ledger reverse replay** (`revert_remaining_redirect_edits`, core `patch/redirect/replay.rs`) runs whenever the in-scope hosted record set equals the FULL ledger record set — however the scope was spelled (bare `rollback`, `rollback '**'`, an identifier set covering every record; `remove` reuses the same eligibility rule). It walks every remaining ledger edit in reverse write order through a **per-kind inverse table**, staged and committed **per ecosystem group, all-or-nothing**: one drifted, ambiguous (a fragment appearing more than once), or unhandled edit refuses the whole group byte-untouched while other groups proceed. This covers **gem, golang, pypi, composer, bun**, the yarn/pnpm text kinds (normally claimed by the per-purl npm revert first), and the **non-package rideshare edits** — the pnpm `trustLockfile` auto-config (a pristine created scaffold is deleted; a user-modified one keeps the file and loses only the `trustLockfile: true` line, warned as `redirect_pnpm_trust_scaffold_modified`) — plus a "last one out turns off the lights" pass: when the record map empties but non-package edits remain, they are replayed in the same persist, so the trust edit never strands. The npm `.npmrc` `allow-remote=all` auto-config (`redirect_npmrc_allow_remote`) replays in the `npm` group (a pristine created file is deleted; otherwise only the line is removed, warned as `redirect_npmrc_allow_remote_modified` for a modified created file) and is ALSO claimed by the per-purl npm revert of the last package-lock entry, so a scoped unwind never strands it.
 * **maven and nuget fail closed**: their structured-metadata kinds (`redirect_maven_repository` / `redirect_maven_dep_management` / `redirect_maven_config` / `redirect_maven_trusted_checksums`, `redirect_nuget_source` / `redirect_nuget_lock`) have no revert implementation, so any such edit refuses its whole group (the maven `<version>` suffix rewrite alone IS invertible, but it rides the same all-or-nothing group). The refusal keeps their records + edits in the ledger and names the remedy: re-run `scan --mode hosted` to normalize, or restore the lockfiles from version control.
-* **Unknown edit kinds fail closed (forward compatibility).** A ledger edit kind this release has no inverse for (written by a newer socket-patch) refuses in the replay's reserved `unknown` group, and every record of every ecosystem is held while that group refuses, so no record is dropped beside an edit it may own. A per-purl revert (`rollback <purl>`, `remove`, the hosted→vendored takeover) refuses with nothing written when any unknown `redirect_*` edit's `key`, `original` or `new` contains the purl's `<name>@<version>`: "the redirect ledger holds a {kind} edit this socket-patch release does not understand; upgrade socket-patch". vlt ledgers (`redirect_vlt_lock_node` edits, vendored entries with `flavor: "vlt"`) require the socket-patch release that adds vlt support. The ledger `version` stays 1: compatibility is decided per kind.
+* **Unknown edit kinds fail closed (forward compatibility).** A ledger edit kind this release has no inverse for (written by a newer socket-patch) refuses in the replay's reserved `unknown` group with "the redirect ledger holds a {kind} edit this socket-patch release does not understand; upgrade socket-patch", and every record of every ecosystem is held while that group refuses, so no record is dropped beside an edit it may own. The other groups still unwind on disk and drop their edits; only their records wait until the unknown group clears. A per-purl revert (`rollback <purl>`, `remove`, the hosted→vendored takeover) refuses with the same text, and with nothing written, when any unknown `redirect_*` edit's `key`, `original` or `new` names the purl's `<name>@<version>` (at a package-name boundary: `left-pad@1.3.0` does not name `pad@1.3.0`, nor does `@scope/a@1.0.0` name `a@1.0.0`). When that scope covers every record, the whole-ledger replay above still runs after the refusal. The vendored flows' takeover reconcile (`vendor_supersedes_redirect`) drops nothing for such a purl and falls back to the manual advisory. vlt ledgers (`redirect_vlt_lock_node` edits, vendored entries with `flavor: "vlt"`) require the socket-patch release that adds vlt support. The ledger `version` stays 1: compatibility is decided per kind.
 * **Scoped runs** (paths / identifiers / `--ecosystems`) that do NOT cover the full record set get per-purl reverts only; in-scope hosted purls of ecosystems without one fail closed — `rollback` reports them in `hosted.unsupported` (exit 1), `remove` as the top-level `hosted_revert_unsupported` error — with the remedy "run an unscoped `socket-patch rollback` to unwind ALL hosted redirects, or re-run `scan --mode hosted`".
 * **Ledger accounting**: exactly the replayed (or already-at-original) edits are dropped; a record is dropped only when every group its ecosystem writes ended clean, so refused groups keep both edits and records — the intermediate-but-coherent ledger a retry needs. The mutated ledger is persisted (delete-when-empty); a failed persist rides `hosted.failed` / `hosted_revert_failed`.
 
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
index e9b3d3ca..bd177041 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
@@ -857,7 +857,7 @@ async fn scoped_unsupported_ecosystem_fails_closed() {
 /// release has no revert for (`redirect_vlt_lock_node`). A scoped rollback
 /// of the purl it names must refuse with nothing written, and an unscoped
 /// one must keep the record while that edit survives.
-async fn write_vlt_ledger_fixture(root: &Path) -> String {
+async fn write_vlt_ledger_fixture(root: &Path, with_gem: bool) -> String {
     let vlt_new = format!(
         "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-PATCHEDpatched==\",\"{LP_HOSTED_URL}\"]"
     );
@@ -870,42 +870,46 @@ async fn write_vlt_ledger_fixture(root: &Path) -> String {
         yarn_lock_content(&yarn_redirected_block()),
     )
     .unwrap();
-    std::fs::write(
-        root.join("Gemfile.lock"),
-        gemfile_lock_content(GEM_PATCH_REMOTE),
-    )
-    .unwrap();
-    write_hosted_ledger(
-        root,
-        vec![
-            (LP_PURL, patch_record(LP_UUID, "GHSA-lpad-aaaa-bbbb")),
-            (GEM_PURL, patch_record(GEM_UUID, "GHSA-gems-cccc-dddd")),
-        ],
-        vec![
-            yarn_classic_edit(),
-            gem_source_edit(),
-            FileEdit {
-                path: "vlt-lock.json".to_string(),
-                kind: "redirect_vlt_lock_node".to_string(),
-                action: "rewritten".to_string(),
-                key: Some("left-pad@1.2.3".to_string()),
-                original: Some(Value::String(
-                    "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-UPSTREAMupstream==\"]"
-                        .to_string(),
-                )),
-                new: Some(Value::String(vlt_new)),
-            },
-        ],
-    )
-    .await;
+    let mut records = vec![(LP_PURL, patch_record(LP_UUID, "GHSA-lpad-aaaa-bbbb"))];
+    let mut edits = vec![yarn_classic_edit()];
+    if with_gem {
+        std::fs::write(
+            root.join("Gemfile.lock"),
+            gemfile_lock_content(GEM_PATCH_REMOTE),
+        )
+        .unwrap();
+        records.push((GEM_PURL, patch_record(GEM_UUID, "GHSA-gems-cccc-dddd")));
+        edits.push(gem_source_edit());
+    }
+    edits.push(FileEdit {
+        path: "vlt-lock.json".to_string(),
+        kind: "redirect_vlt_lock_node".to_string(),
+        action: "rewritten".to_string(),
+        key: Some("left-pad@1.2.3".to_string()),
+        original: Some(Value::String(
+            "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-UPSTREAMupstream==\"]".to_string(),
+        )),
+        new: Some(Value::String(vlt_new)),
+    });
+    write_hosted_ledger(root, records, edits).await;
     vlt_lock
 }
 
+fn ledger_edit_kinds(root: &Path) -> Vec<String> {
+    let ledger: Value = serde_json::from_slice(&std::fs::read(ledger_path(root)).unwrap()).unwrap();
+    ledger["edits"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .map(|e| e["kind"].as_str().unwrap().to_string())
+        .collect()
+}
+
 #[tokio::test]
 #[serial]
 async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
     let tmp = tempfile::tempdir().unwrap();
-    let vlt_lock = write_vlt_ledger_fixture(tmp.path()).await;
+    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), true).await;
     let ledger_before = std::fs::read(ledger_path(tmp.path())).unwrap();
     let yarn_before = std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap();
 
@@ -945,7 +949,7 @@ async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
 #[serial]
 async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
     let tmp = tempfile::tempdir().unwrap();
-    let vlt_lock = write_vlt_ledger_fixture(tmp.path()).await;
+    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), true).await;
 
     let code = rollback_in_process(tmp.path(), Vec::new(), false).await;
     assert_eq!(
@@ -960,14 +964,54 @@ async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
         serde_json::from_slice(&std::fs::read(ledger_path(tmp.path())).unwrap()).unwrap();
     assert!(ledger["records"].get(LP_PURL).is_some(), "{ledger}");
     assert!(ledger["records"].get(GEM_PURL).is_some(), "{ledger}");
-    assert!(
-        ledger["edits"]
-            .as_array()
-            .unwrap()
-            .iter()
-            .any(|e| e["kind"] == "redirect_vlt_lock_node"),
-        "{ledger}"
+    // The groups this release understands still unwind on disk; their
+    // records wait for the unknown group to clear.
+    assert_eq!(ledger_edit_kinds(tmp.path()), ["redirect_vlt_lock_node"]);
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap(),
+        yarn_lock_content(&yarn_original_block())
     );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("Gemfile.lock")).unwrap(),
+        gemfile_lock_content(GEM_UPSTREAM_REMOTE)
+    );
+}
+
+/// With the purl as the only hosted record the scope covers the whole
+/// ledger: the per-purl claim refuses, then the replay still unwinds
+/// yarn.lock but holds the record and the unknown edit.
+#[tokio::test]
+#[serial]
+async fn scoped_rollback_of_the_only_record_holds_it_beside_an_unknown_edit_kind() {
+    let tmp = tempfile::tempdir().unwrap();
+    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), false).await;
+
+    let (code, envelope) = run_rollback_subprocess(tmp.path(), &[LP_PURL]);
+    assert_eq!(code, 1, "{envelope}");
+    assert_eq!(
+        envelope["hosted"]["reverted"],
+        serde_json::json!([]),
+        "{envelope}"
+    );
+    let failed: Vec<&str> = envelope["hosted"]["failed"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .map(|f| f["purl"].as_str().unwrap())
+        .collect();
+    assert_eq!(failed, [LP_PURL, "group:unknown"], "{envelope}");
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
+        vlt_lock
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap(),
+        yarn_lock_content(&yarn_original_block())
+    );
+    let ledger: Value =
+        serde_json::from_slice(&std::fs::read(ledger_path(tmp.path())).unwrap()).unwrap();
+    assert!(ledger["records"].get(LP_PURL).is_some(), "{ledger}");
+    assert_eq!(ledger_edit_kinds(tmp.path()), ["redirect_vlt_lock_node"]);
 }
 
 // ---------------------------------------------------------------------------
diff --git a/crates/socket-patch-core/src/patch/redirect/replay.rs b/crates/socket-patch-core/src/patch/redirect/replay.rs
index 575a41d6..f0c29b37 100644
--- a/crates/socket-patch-core/src/patch/redirect/replay.rs
+++ b/crates/socket-patch-core/src/patch/redirect/replay.rs
@@ -542,15 +542,21 @@ pub async fn revert_remaining_redirect_edits(
                     continue 'group;
                 }
                 Inverse::Unsupported => {
-                    refuse(
+                    let reason = if *group == "unknown" {
+                        format!(
+                            "the redirect ledger holds a {} edit this socket-patch release \
+                             does not understand; upgrade socket-patch",
+                            edit.kind
+                        )
+                    } else {
                         format!(
                             "no hosted-redirect revert implementation for {} — re-run \
                              `scan --mode hosted` to normalize, or restore the file from \
                              version control",
                             edit.kind
-                        ),
-                        &mut outcome,
-                    );
+                        )
+                    };
+                    refuse(reason, &mut outcome);
                     refused_groups.insert(group);
                     continue 'group;
                 }
@@ -2067,14 +2073,31 @@ mod tests {
             let out = revert_remaining_redirect_edits(dir.path(), &mut state, dry_run).await;
             assert_eq!(out.refusals.len(), 1, "{out:?}");
             assert_eq!(out.refusals[0].group, "unknown");
+            assert_eq!(
+                out.refusals[0].reason,
+                "the redirect ledger holds a redirect_vlt_lock_node edit this socket-patch \
+                 release does not understand; upgrade socket-patch"
+            );
             assert!(out.dropped_records.is_empty(), "{out:?}");
             assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
             assert!(state.records.contains_key("pkg:composer/v/c@1.0.0"));
             assert_eq!(read(dir.path(), "vlt-lock.json").await, VLT_LOCK);
-            assert!(state
-                .edits
-                .iter()
-                .any(|e| e.kind == "redirect_vlt_lock_node"));
+            let kinds: Vec<&str> = state.edits.iter().map(|e| e.kind.as_str()).collect();
+            // The composer group still unwinds on disk; only its record waits
+            // for the unknown group to clear.
+            if dry_run {
+                assert_eq!(
+                    read(dir.path(), "composer.lock").await,
+                    "https://patch.example/c\n"
+                );
+                assert_eq!(kinds, ["redirect_vlt_lock_node", "redirect_composer_dist"]);
+            } else {
+                assert_eq!(
+                    read(dir.path(), "composer.lock").await,
+                    "https://packagist.example/c\n"
+                );
+                assert_eq!(kinds, ["redirect_vlt_lock_node"]);
+            }
         }
     }
 
diff --git a/crates/socket-patch-core/src/patch/redirect/state.rs b/crates/socket-patch-core/src/patch/redirect/state.rs
index 129012a0..420ecde9 100644
--- a/crates/socket-patch-core/src/patch/redirect/state.rs
+++ b/crates/socket-patch-core/src/patch/redirect/state.rs
@@ -75,6 +75,59 @@ impl RedirectState {
             .cloned()
             .collect()
     }
+
+    /// The first `redirect_*` edit this release cannot classify (a newer
+    /// socket-patch's writer) whose `key`, `original` or `new` names
+    /// `<name>@<version>` at a package-name boundary. Anything that claims
+    /// that package's ledger data must refuse while one exists: dropping the
+    /// record or its known edits would strand the unknown one.
+    pub(crate) fn unclassified_edit_naming(&self, name: &str, version: &str) -> Option<&FileEdit> {
+        let needle = format!("{name}@{version}");
+        let scoped = name.starts_with('@');
+        let names = |v: &Option<serde_json::Value>| match v {
+            Some(serde_json::Value::String(s)) => names_at_boundary(s, &needle, scoped),
+            Some(other) => names_at_boundary(&other.to_string(), &needle, scoped),
+            None => false,
+        };
+        self.edits.iter().find(|e| {
+            is_unclassified_redirect_edit(e)
+                && (e
+                    .key
+                    .as_deref()
+                    .is_some_and(|k| names_at_boundary(k, &needle, scoped))
+                    || names(&e.original)
+                    || names(&e.new))
+        })
+    }
+}
+
+fn is_unclassified_redirect_edit(edit: &FileEdit) -> bool {
+    edit.kind.starts_with("redirect_")
+        && super::replay::is_unclassified_kind(&edit.kind, &edit.action)
+}
+
+fn is_name_char(c: char) -> bool {
+    c.is_ascii_alphanumeric() || matches!(c, '-' | '.' | '_')
+}
+
+/// Does `text` contain `needle` starting at a package-name boundary? A
+/// match glued to a longer name (`left-pad@…` for `pad@…`) or to a scope
+/// (`@scope/a@…` for an unscoped `a@…`) names a different package.
+fn names_at_boundary(text: &str, needle: &str, scoped: bool) -> bool {
+    text.match_indices(needle).any(|(at, _)| {
+        let before = &text[..at];
+        match before.chars().next_back() {
+            None => true,
+            Some('/') => {
+                scoped
+                    || !before[..before.len() - 1]
+                        .rsplit(|c: char| !(is_name_char(c) || c == '@'))
+                        .next()
+                        .is_some_and(|segment| segment.starts_with('@'))
+            }
+            Some(c) => !is_name_char(c),
+        }
+    })
 }
 
 impl Default for RedirectState {
@@ -280,6 +333,10 @@ pub async fn save_redirect_state(
 /// keyed `"trustLockfile"`) stay: they belong to the hosted flow's own
 /// config surface and other still-redirected package(s) may ride on them.
 ///
+/// A `redirect_*` edit kind this release cannot classify that names the
+/// purl or would be claimed by the rules above drops nothing and returns
+/// `false`: its lockfile may still resolve the hosted artifact.
+///
 /// Returns whether anything was removed. The caller persists the mutated
 /// ledger via [`persist_redirect_state`] (atomic; an emptied ledger is
 /// deleted).
@@ -293,6 +350,10 @@ pub fn drop_superseded_purl(state: &mut RedirectState, purl: &str) -> bool {
     };
     let (name, version) = (name.to_string(), version.to_string());
 
+    if state.unclassified_edit_naming(&name, &version).is_some() {
+        return false;
+    }
+
     let record_keys = state.record_keys_for(purl);
     // THIS purl's patch uuid(s), captured before the records are removed —
     // the artifact anchor (see the doc comment). Distinct purls (including
@@ -307,16 +368,12 @@ pub fn drop_superseded_purl(state: &mut RedirectState, purl: &str) -> bool {
         // revert data. Fail closed to the version-exact-only path instead.
         .filter(|u| !u.is_empty())
         .collect();
-    for key in &record_keys {
-        state.records.remove(key);
-    }
 
     let name_at_version = format!("{name}@{version}");
-    let edits_before = state.edits.len();
-    state.edits.retain(|e| {
+    let claims = |e: &FileEdit| {
         let Some(key) = e.key.as_deref() else {
             // No key ⇒ not attributable to any package; keep.
-            return true;
+            return false;
         };
         // Version-exact instance keys: `name@version`, pnpm v6 peer-suffixed
         // `name@version(peer…)`, pnpm v5 respelled `name@version_peer…`.
@@ -337,8 +394,21 @@ pub fn drop_superseded_purl(state: &mut RedirectState, purl: &str) -> bool {
                 };
                 uuids.iter().any(|uuid| text.contains(uuid.as_str()))
             });
-        !(version_exact || anchored)
-    });
+        version_exact || anchored
+    };
+    if state
+        .edits
+        .iter()
+        .any(|e| is_unclassified_redirect_edit(e) && claims(e))
+    {
+        return false;
+    }
+
+    for key in &record_keys {
+        state.records.remove(key);
+    }
+    let edits_before = state.edits.len();
+    state.edits.retain(|e| !claims(e));
 
     !record_keys.is_empty() || state.edits.len() != edits_before
 }
@@ -771,6 +841,111 @@ mod tests {
         );
     }
 
+    fn vlt_node_edit(name: &str, version: &str, url: &str) -> FileEdit {
+        FileEdit {
+            path: "vlt-lock.json".to_string(),
+            kind: "redirect_vlt_lock_node".to_string(),
+            action: "rewritten".to_string(),
+            key: Some(format!("{name}@{version}")),
+            original: Some(serde_json::json!(format!(
+                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-r\"]"
+            ))),
+            new: Some(serde_json::json!(format!(
+                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-p\",\"{url}\"]"
+            ))),
+        }
+    }
+
+    #[test]
+    fn drop_superseded_purl_drops_nothing_beside_an_unclassified_edit_naming_it() {
+        let url = hosted_url("left-pad", "1.3.0", SAMPLE_UUID);
+        let unanchored = hosted_url("left-pad", "1.3.0", "0e0e0e0e-0000-4000-8000-000000000000");
+        for (with_record, vlt_key, vlt_url) in [
+            (true, "left-pad@1.3.0", url.as_str()),
+            (false, "left-pad@1.3.0", url.as_str()),
+            (false, "left-pad@1.3.0~custom", unanchored.as_str()),
+        ] {
+            let mut state = RedirectState::new();
+            if with_record {
+                state
+                    .records
+                    .insert("pkg:npm/left-pad@1.3.0".to_string(), sample_record());
+            }
+            state.edits = vec![
+                edit_resolved(
+                    "yarn.lock",
+                    "redirect_yarn_classic_entry",
+                    "left-pad@1.3.0",
+                    &url,
+                ),
+                FileEdit {
+                    key: Some(vlt_key.to_string()),
+                    ..vlt_node_edit("left-pad", "1.3.0", vlt_url)
+                },
+            ];
+            let before = serde_json::to_value(&state).unwrap();
+            assert!(!drop_superseded_purl(&mut state, "pkg:npm/left-pad@1.3.0"));
+            assert_eq!(
+                serde_json::to_value(&state).unwrap(),
+                before,
+                "{with_record} {vlt_key}"
+            );
+        }
+    }
+
+    #[test]
+    fn drop_superseded_purl_drops_nothing_when_an_unclassified_edit_is_anchored() {
+        let mut state = RedirectState::new();
+        state
+            .records
+            .insert("pkg:npm/left-pad@1.3.0".to_string(), sample_record());
+        state.edits = vec![FileEdit {
+            key: Some("nodes/0".to_string()),
+            ..edit_resolved(
+                "future.lock",
+                "redirect_future_lock_entry",
+                "unused",
+                &hosted_url("left-pad", "1.3.0", SAMPLE_UUID),
+            )
+        }];
+        let before = serde_json::to_value(&state).unwrap();
+        assert!(!drop_superseded_purl(&mut state, "pkg:npm/left-pad@1.3.0"));
+        assert_eq!(serde_json::to_value(&state).unwrap(), before);
+    }
+
+    #[test]
+    fn drop_superseded_purl_ignores_an_unclassified_edit_for_another_package() {
+        let mut state = RedirectState::new();
+        state
+            .records
+            .insert("pkg:npm/pad@1.3.0".to_string(), sample_record());
+        state.edits = vec![
+            edit(
+                "pnpm-lock.yaml",
+                "redirect_pnpm_resolution",
+                Some("pad@1.3.0"),
+            ),
+            vlt_node_edit(
+                "left-pad",
+                "1.3.0",
+                &hosted_url("left-pad", "1.3.0", "0e0e0e0e-0000-4000-8000-000000000000"),
+            ),
+            vlt_node_edit(
+                "@scope/pad",
+                "1.3.0",
+                &hosted_url(
+                    "@scope/pad",
+                    "1.3.0",
+                    "1e1e1e1e-0000-4000-8000-000000000000",
+                ),
+            ),
+        ];
+        assert!(drop_superseded_purl(&mut state, "pkg:npm/pad@1.3.0"));
+        assert!(state.records.is_empty());
+        let kinds: Vec<&str> = state.edits.iter().map(|e| e.kind.as_str()).collect();
+        assert_eq!(kinds, ["redirect_vlt_lock_node", "redirect_vlt_lock_node"]);
+    }
+
     /// A version-boundary key (`left-pad@1.3.10`) and a different package
     /// whose name merely ends with the target's (`not-left-pad`) must never
     /// be claimed — the `/`-boundary and `(`-boundary checks are load-bearing.
diff --git a/crates/socket-patch-core/src/patch/redirect/takeover.rs b/crates/socket-patch-core/src/patch/redirect/takeover.rs
index a5fb403e..18d71993 100644
--- a/crates/socket-patch-core/src/patch/redirect/takeover.rs
+++ b/crates/socket-patch-core/src/patch/redirect/takeover.rs
@@ -130,26 +130,14 @@ fn find_record_key(state: &RedirectState, purl: &str) -> Result<(String, String)
 }
 
 /// Refuse a per-purl claim while the ledger holds a `redirect_*` edit this
-/// release cannot classify that mentions `<name>@<version>`: claiming the
-/// rest and dropping the record would strand that edit (half a takeover).
+/// release cannot classify that names `<name>@<version>`: claiming the rest
+/// and dropping the record would strand that edit (half a takeover).
 fn refuse_unclassified_edits(
     state: &RedirectState,
     name: &str,
     version: &str,
 ) -> Result<(), String> {
-    let needle = format!("{name}@{version}");
-    let mentions = |v: &Option<Value>| match v {
-        Some(Value::String(s)) => s.contains(&needle),
-        Some(other) => other.to_string().contains(&needle),
-        None => false,
-    };
-    match state.edits.iter().find(|e| {
-        e.kind.starts_with("redirect_")
-            && super::replay::is_unclassified_kind(&e.kind, &e.action)
-            && (e.key.as_deref().is_some_and(|k| k.contains(&needle))
-                || mentions(&e.original)
-                || mentions(&e.new))
-    }) {
+    match state.unclassified_edit_naming(name, version) {
         Some(e) => Err(format!(
             "the redirect ledger holds a {} edit this socket-patch release does not \
              understand; upgrade socket-patch",
@@ -2543,6 +2531,19 @@ mod tests {
         assert_eq!(state.edits[0].kind, "redirect_vlt_lock_node");
     }
 
+    #[tokio::test]
+    async fn npm_unclassified_edit_for_a_longer_or_scoped_name_does_not_block_the_claim() {
+        for other in ["long-left-pad", "@scope/left-pad"] {
+            let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
+            state.edits.push(vlt_lock_node_edit(other, "1.3.0"));
+            revert_redirect_purl(tmp.path(), &mut state, NPM_PURL, false)
+                .await
+                .unwrap_or_else(|e| panic!("{other}: {e}"));
+            assert_eq!(state.edits.len(), 1, "{other}");
+            assert_eq!(state.edits[0].kind, "redirect_vlt_lock_node", "{other}");
+        }
+    }
+
     #[tokio::test]
     async fn cargo_and_golang_claims_refuse_an_unclassified_edit_naming_them() {
         let tmp = tempfile::tempdir().unwrap();

From 8b578fce3773765c6405bcf4bbb4372a12704905 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 19:50:44 -0400
Subject: [PATCH 06/46] Route npm vendor flavors through one parser

repair and the vendored health check decide whether an npm flavor is
known from a hand-kept list that the revert dispatch did not share, so
a release adding a flavor could revert its entries yet still skip them
in repair as unknown. The known set, the revert routing and the in-use
probe now all come from a single string-to-flavor mapping with
exhaustive matches.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../src/vendor/npm_flavor.rs                  | 87 ++++++++++---------
 1 file changed, 48 insertions(+), 39 deletions(-)

diff --git a/crates/socket-patch-core/src/vendor/npm_flavor.rs b/crates/socket-patch-core/src/vendor/npm_flavor.rs
index 46c4d08c..1bb6a6b3 100644
--- a/crates/socket-patch-core/src/vendor/npm_flavor.rs
+++ b/crates/socket-patch-core/src/vendor/npm_flavor.rs
@@ -51,15 +51,6 @@ pub(crate) enum NpmLockFlavor {
 }
 
 impl NpmLockFlavor {
-    const ALL: [NpmLockFlavor; 6] = [
-        NpmLockFlavor::PackageLock,
-        NpmLockFlavor::YarnClassic,
-        NpmLockFlavor::YarnBerry,
-        NpmLockFlavor::Pnpm,
-        NpmLockFlavor::PnpmLegacy,
-        NpmLockFlavor::Bun,
-    ];
-
     /// The stable string recorded as [`VendorEntry::flavor`].
     fn as_str(self) -> &'static str {
         match self {
@@ -71,6 +62,22 @@ impl NpmLockFlavor {
             NpmLockFlavor::Bun => "bun",
         }
     }
+
+    /// The flavor a [`VendorEntry::flavor`] names, `None` for one this build
+    /// has no backend for. A pre-flavor ledger (`None`) is package-lock. The
+    /// revert and in-use dispatch go through this, so every flavor they can
+    /// route is known to [`npm_flavor_is_known`].
+    fn from_recorded(flavor: Option<&str>) -> Option<Self> {
+        match flavor {
+            None | Some("package-lock") => Some(NpmLockFlavor::PackageLock),
+            Some("yarn-classic") => Some(NpmLockFlavor::YarnClassic),
+            Some("yarn-berry") => Some(NpmLockFlavor::YarnBerry),
+            Some("pnpm") => Some(NpmLockFlavor::Pnpm),
+            Some(pnpm_lock_legacy::FLAVOR) => Some(NpmLockFlavor::PnpmLegacy),
+            Some("bun") => Some(NpmLockFlavor::Bun),
+            Some(_) => None,
+        }
+    }
 }
 
 /// Yarn berry Plug'n'Play loaders: packages live inside `.yarn/cache/` zips,
@@ -397,9 +404,9 @@ pub async fn vendor_npm_any(
 /// fail-safe. Detached entries are wired into the lock exactly like
 /// manifest-tracked ones, so the probe applies to every entry.
 pub async fn vendored_entry_in_use(entry: &VendorEntry, project_root: &Path) -> Option<bool> {
-    match entry.flavor.as_deref() {
-        Some("pnpm") => pnpm_lock::pnpm_entry_in_use(entry, project_root).await,
-        Some("pnpm-legacy") => {
+    match NpmLockFlavor::from_recorded(entry.flavor.as_deref())? {
+        NpmLockFlavor::Pnpm => pnpm_lock::pnpm_entry_in_use(entry, project_root).await,
+        NpmLockFlavor::PnpmLegacy => {
             pnpm_lock_legacy::pnpm_legacy_entry_in_use(entry, project_root).await
         }
         // The remaining flavors wire resolutions into the lock itself
@@ -408,13 +415,13 @@ pub async fn vendored_entry_in_use(entry: &VendorEntry, project_root: &Path) ->
         // resolution still points at the artifact. Both npm locks are
         // probed: npm <= 11 installs from the shrinkwrap, npm 12 from the
         // package-lock beside it.
-        None | Some("package-lock") => {
+        NpmLockFlavor::PackageLock => {
             lock_text_mentions_uuid(project_root, &NPM_LOCKS, &entry.uuid).await
         }
-        Some("yarn-classic") | Some("yarn-berry") => {
+        NpmLockFlavor::YarnClassic | NpmLockFlavor::YarnBerry => {
             lock_text_mentions_uuid(project_root, &["yarn.lock"], &entry.uuid).await
         }
-        Some("bun") => {
+        NpmLockFlavor::Bun => {
             if super::lock_inventory::bun::bun_text_lock_present(project_root).await {
                 return lock_text_mentions_uuid(project_root, &[BUN_LOCK], &entry.uuid).await;
             }
@@ -431,7 +438,6 @@ pub async fn vendored_entry_in_use(entry: &VendorEntry, project_root: &Path) ->
                     .any(|package| package.resolution.contains(&needle)),
             )
         }
-        Some(_) => None, // unknown flavor: cannot determine
     }
 }
 
@@ -468,7 +474,7 @@ pub(super) async fn lock_text_mentions_uuid(
 /// wired by a newer socket-patch, so health checks and rebuilds must not
 /// judge it by this build's layout rules.
 pub fn npm_flavor_is_known(flavor: Option<&str>) -> bool {
-    flavor.is_none_or(|f| NpmLockFlavor::ALL.iter().any(|known| known.as_str() == f))
+    NpmLockFlavor::from_recorded(flavor).is_some()
 }
 
 /// Revert one recorded npm vendor entry through the flavor that wired it.
@@ -490,23 +496,26 @@ pub async fn revert_npm_any_opts(
     project_root: &Path,
     opts: RevertOpts,
 ) -> RevertOutcome {
-    match entry.flavor.as_deref() {
-        None | Some("package-lock") => npm_lock::revert_npm_opts(entry, project_root, opts).await,
-        Some("yarn-classic") => {
+    let Some(flavor) = NpmLockFlavor::from_recorded(entry.flavor.as_deref()) else {
+        return RevertOutcome::failed(format!(
+            "this socket-patch build cannot revert npm vendor flavor `{}` — upgrade \
+             socket-patch and re-run",
+            entry.flavor.as_deref().unwrap_or_default()
+        ));
+    };
+    match flavor {
+        NpmLockFlavor::PackageLock => npm_lock::revert_npm_opts(entry, project_root, opts).await,
+        NpmLockFlavor::YarnClassic => {
             yarn_classic_lock::revert_yarn_classic_opts(entry, project_root, opts).await
         }
-        Some("yarn-berry") => {
+        NpmLockFlavor::YarnBerry => {
             yarn_berry_lock::revert_yarn_berry_opts(entry, project_root, opts).await
         }
-        Some("pnpm") => pnpm_lock::revert_pnpm_opts(entry, project_root, opts).await,
-        Some("pnpm-legacy") => {
+        NpmLockFlavor::Pnpm => pnpm_lock::revert_pnpm_opts(entry, project_root, opts).await,
+        NpmLockFlavor::PnpmLegacy => {
             pnpm_lock_legacy::revert_pnpm_legacy_opts(entry, project_root, opts).await
         }
-        Some("bun") => bun_lock::revert_bun_opts(entry, project_root, opts).await,
-        Some(other) => RevertOutcome::failed(format!(
-            "this socket-patch build cannot revert npm vendor flavor `{other}` — upgrade \
-             socket-patch and re-run"
-        )),
+        NpmLockFlavor::Bun => bun_lock::revert_bun_opts(entry, project_root, opts).await,
     }
 }
 
@@ -571,17 +580,17 @@ mod tests {
 
     #[test]
     fn flavor_strings_are_stable() {
-        assert_eq!(
-            NpmLockFlavor::ALL.map(NpmLockFlavor::as_str),
-            [
-                "package-lock",
-                "yarn-classic",
-                "yarn-berry",
-                "pnpm",
-                "pnpm-legacy",
-                "bun"
-            ]
-        );
+        use NpmLockFlavor::*;
+        for flavor in [PackageLock, YarnClassic, YarnBerry, Pnpm, PnpmLegacy, Bun] {
+            match flavor {
+                PackageLock | YarnClassic | YarnBerry | Pnpm | PnpmLegacy | Bun => {}
+            }
+            assert_eq!(
+                NpmLockFlavor::from_recorded(Some(flavor.as_str())),
+                Some(flavor)
+            );
+        }
+        assert_eq!(NpmLockFlavor::from_recorded(None), Some(PackageLock));
         assert_eq!(NpmLockFlavor::PackageLock.as_str(), "package-lock");
         assert_eq!(NpmLockFlavor::YarnClassic.as_str(), "yarn-classic");
         assert_eq!(NpmLockFlavor::Pnpm.as_str(), "pnpm");

From 4aa2d1dbf888ca5b41ce36dd442b8bc3fa3686d8 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 20:18:21 -0400
Subject: [PATCH 07/46] Add vlt lockfile text and DepID primitives

Lays the groundwork for vlt support without changing any behavior yet.
socket-patch can now decode vlt's package ids in both lockfile
encodings (vlt up to 1.0.0-rc.14 and every later release), recognize
vlt's default registry the way vlt does, read vlt-lock.json strictly
(a BOM, a non-object or an unknown lockfileVersion is refused, never
parsed around), and read and write its one-entry-per-line node and
edge lines without re-serializing the file.

It also reproduces vlt's own lockfile ordering, pinned by a golden
generated with Node's collator, so later vendored edits leave a lock
that vlt ci keeps byte-identical. Fixture directories that hold tables
rather than projects are kept out of the VEX golden corpus.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-core/src/constants.rs     |   15 +
 crates/socket-patch-core/src/vendor/mod.rs    |    2 +
 .../src/vendor/vlt_lock_text.rs               | 2321 +++++++++++++++++
 .../src/vex/discover/testing/golden.rs        |   14 +
 .../tests/fixtures/vlt/collation-golden.json  | 1675 ++++++++++++
 scripts/gen-vlt-collation-golden.mjs          |  244 ++
 6 files changed, 4271 insertions(+)
 create mode 100644 crates/socket-patch-core/src/vendor/vlt_lock_text.rs
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json
 create mode 100644 scripts/gen-vlt-collation-golden.mjs

diff --git a/crates/socket-patch-core/src/constants.rs b/crates/socket-patch-core/src/constants.rs
index c9009e80..8aa1a1ae 100644
--- a/crates/socket-patch-core/src/constants.rs
+++ b/crates/socket-patch-core/src/constants.rs
@@ -194,4 +194,19 @@ pub mod npm_family {
     pub const BUN_LOCK: &str = "bun.lock";
     /// Bun's binary lock.
     pub const BUN_LOCKB: &str = "bun.lockb";
+    /// vlt's committed lock (the root one only; a nested lock is its own
+    /// project).
+    pub const VLT_LOCK: &str = "vlt-lock.json";
+    /// vlt's project config, read-only for every mode.
+    pub const VLT_CONFIG: &str = "vlt.json";
+    /// vlt's hidden lock, the installed graph vlt trusts without re-checking.
+    pub const VLT_HIDDEN_LOCK_REL: &str = "node_modules/.vlt-lock.json";
+    /// vlt's per-project package store, one `<DepID>/` entry per node.
+    pub const VLT_STORE_DIR: &str = "node_modules/.vlt";
+    /// Workspace globs of vlt <= 0.0.0-12 (`{"packages": ...}`).
+    pub const VLT_LEGACY_WORKSPACES: &str = "vlt-workspaces.json";
+    /// Any one in the cwd makes setup treat the project as vlt's
+    /// (`VLT_STORE_DIR` only as a directory).
+    pub const VLT_SETUP_MARKERS: [&str; 4] =
+        [VLT_LOCK, VLT_CONFIG, VLT_HIDDEN_LOCK_REL, VLT_STORE_DIR];
 }
diff --git a/crates/socket-patch-core/src/vendor/mod.rs b/crates/socket-patch-core/src/vendor/mod.rs
index 0421c09a..da961b13 100644
--- a/crates/socket-patch-core/src/vendor/mod.rs
+++ b/crates/socket-patch-core/src/vendor/mod.rs
@@ -92,6 +92,8 @@ pub(crate) mod service_fetch;
 pub(crate) mod test_support;
 mod toml_surgery;
 pub(crate) mod verify;
+#[allow(dead_code)]
+pub(crate) mod vlt_lock_text;
 pub(crate) mod yarn_berry_lock;
 pub(crate) mod yarn_classic_lock;
 #[cfg(test)]
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
new file mode 100644
index 00000000..fc929a55
--- /dev/null
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -0,0 +1,2321 @@
+//! Text primitives for vlt's `vlt-lock.json`, shared by the hosted
+//! rewriter, the vendored backend, the crawler, lock inventory and VEX.
+//!
+//! vlt writes one node or edge per line (`save.ts` `extraFormat`), so every
+//! write is a line splice under the strict grammar here; nothing is
+//! re-serialized. DepIDs come in two encodings, decided by prefix only:
+//! legacy (`·`, `encodeURIComponent` with `@` raw and `/` as `§`, vlt ≤
+//! 1.0.0-rc.14) and tilde (`~`, `_X` escapes with `/` as `+`). The codec rows
+//! in the tests are shared verbatim with depscan's `vlt-dep-id.test.ts`.
+
+use std::cmp::Ordering;
+use std::sync::LazyLock;
+
+use regex::Regex;
+use serde_json::{Map, Value};
+
+use crate::patch::path_safety::is_canonical_uuid;
+use crate::utils::uri::encode_uri_component;
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) enum DepIdEra {
+    Legacy,
+    Tilde,
+}
+
+impl DepIdEra {
+    pub(crate) fn delimiter(self) -> char {
+        match self {
+            DepIdEra::Legacy => '·',
+            DepIdEra::Tilde => '~',
+        }
+    }
+
+    /// The grammar vlt uses for ids it writes into a lock of this version:
+    /// `1` is tilde, `0` and an absent version are legacy.
+    pub(crate) fn for_lockfile_version(version: Option<u64>) -> Self {
+        if version == Some(1) {
+            DepIdEra::Tilde
+        } else {
+            DepIdEra::Legacy
+        }
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) enum DepIdKind {
+    Registry,
+    Git,
+    File,
+    Remote,
+    Workspace,
+}
+
+const PREFIXED_KINDS: [(&str, DepIdKind); 4] = [
+    ("git", DepIdKind::Git),
+    ("file", DepIdKind::File),
+    ("remote", DepIdKind::Remote),
+    ("workspace", DepIdKind::Workspace),
+];
+
+/// A split DepID. `first` and `second` are decoded; `extra` is the raw
+/// fourth (registry, git) or third (file, remote, workspace) field, which
+/// must still decode.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct DepId {
+    pub(crate) era: DepIdEra,
+    pub(crate) kind: DepIdKind,
+    pub(crate) first: String,
+    pub(crate) second: Option<String>,
+    pub(crate) extra: Option<String>,
+}
+
+impl DepId {
+    /// `(name, version)` of a registry id, from any registry segment.
+    pub(crate) fn registry_identity(&self) -> Option<(&str, &str)> {
+        match (self.kind, self.second.as_deref()) {
+            (DepIdKind::Registry, Some(second)) => registry_name_version(second),
+            _ => None,
+        }
+    }
+}
+
+pub(crate) fn dep_id_era(id: &str) -> Option<DepIdEra> {
+    [DepIdEra::Legacy, DepIdEra::Tilde].into_iter().find(|era| {
+        let d = era.delimiter();
+        id.starts_with(d)
+            || PREFIXED_KINDS.iter().any(|(kind, _)| {
+                id.strip_prefix(kind)
+                    .is_some_and(|rest| rest.starts_with(d))
+            })
+    })
+}
+
+/// Split a DepID into its fields, following vlt's `isDepID` shape: registry
+/// and git ids carry two or three fields after the type, file, remote and
+/// workspace ids one or two. Any other shape, an empty required field or an
+/// undecodable segment is `None`, and an undecodable id never matches.
+pub(crate) fn split_dep_id(id: &str) -> Option<DepId> {
+    let era = dep_id_era(id)?;
+    let fields: Vec<&str> = id.split(era.delimiter()).collect();
+    let kind = match fields[0] {
+        "" => DepIdKind::Registry,
+        type_field => PREFIXED_KINDS
+            .iter()
+            .find(|(name, _)| *name == type_field)
+            .map(|(_, kind)| *kind)?,
+    };
+    let first = decode_segment(fields.get(1)?, era)?;
+    if kind != DepIdKind::Registry && first.is_empty() {
+        return None;
+    }
+    let (second, extra) = match kind {
+        DepIdKind::Registry | DepIdKind::Git => {
+            if !(3..=4).contains(&fields.len()) {
+                return None;
+            }
+            let second = decode_segment(fields[2], era).filter(|s| !s.is_empty())?;
+            (Some(second), fields.get(3))
+        }
+        DepIdKind::File | DepIdKind::Remote | DepIdKind::Workspace => {
+            if fields.len() > 3 {
+                return None;
+            }
+            (None, fields.get(2))
+        }
+    };
+    if let Some(extra) = extra {
+        decode_segment(extra, era)?;
+    }
+    Some(DepId {
+        era,
+        kind,
+        first,
+        second,
+        extra: extra.map(|e| (*e).to_string()),
+    })
+}
+
+/// The `file` DepID vlt writes for a project-relative directory.
+pub(crate) fn file_dep_id(path: &str, era: DepIdEra) -> String {
+    format!("file{}{}", era.delimiter(), encode_segment(path, era))
+}
+
+/// Encode one DepID segment the way vlt spells lock keys and `.vlt/<DepID>`
+/// store dir names.
+pub(crate) fn encode_segment(s: &str, era: DepIdEra) -> String {
+    match era {
+        DepIdEra::Tilde => encode_tilde(s),
+        DepIdEra::Legacy => encode_uri_component(s)
+            .replace("%40", "@")
+            .replace("%2F", "§"),
+    }
+}
+
+/// Decode one DepID segment; `None` when a legacy segment holds a malformed
+/// `%` escape or escapes that are not UTF-8 (`decodeURIComponent` throws).
+pub(crate) fn decode_segment(s: &str, era: DepIdEra) -> Option<String> {
+    match era {
+        DepIdEra::Tilde => Some(decode_tilde(s)),
+        DepIdEra::Legacy => decode_legacy(s),
+    }
+}
+
+fn tilde_escape(c: char) -> Option<&'static str> {
+    Some(match c {
+        '_' => "__",
+        '+' => "_p",
+        '\\' => "_b",
+        ':' => "_c",
+        '~' => "_t",
+        '<' => "_l",
+        '>' => "_g",
+        '"' => "_q",
+        '|' => "_i",
+        '?' => "_m",
+        '*' => "_a",
+        ' ' => "_s",
+        _ => return None,
+    })
+}
+
+fn tilde_unescape(c: char) -> Option<char> {
+    Some(match c {
+        '_' => '_',
+        'p' => '+',
+        'b' => '\\',
+        'c' => ':',
+        't' => '~',
+        'l' => '<',
+        'g' => '>',
+        'q' => '"',
+        'i' => '|',
+        'm' => '?',
+        'a' => '*',
+        'd' => '.',
+        's' => ' ',
+        _ => return None,
+    })
+}
+
+fn encode_tilde(s: &str) -> String {
+    let mut out = String::with_capacity(s.len());
+    for c in s.chars() {
+        if c == '/' {
+            out.push('+');
+        } else if let Some(escaped) = tilde_escape(c) {
+            out.push_str(escaped);
+        } else if (c as u32) <= 0x1f {
+            out.push_str(&format!("_{:02X}", c as u32));
+        } else {
+            out.push(c);
+        }
+    }
+    if out.ends_with('.') {
+        out.pop();
+        out.push_str("_d");
+    }
+    out
+}
+
+fn decode_tilde(s: &str) -> String {
+    let chars: Vec<char> = s.chars().collect();
+    let mut out = String::with_capacity(s.len());
+    let mut i = 0;
+    while i < chars.len() {
+        let c = chars[i];
+        if c == '+' {
+            out.push('/');
+            i += 1;
+            continue;
+        }
+        if c != '_' {
+            out.push(c);
+            i += 1;
+            continue;
+        }
+        if let Some(unescaped) = chars.get(i + 1).and_then(|n| tilde_unescape(*n)) {
+            out.push(unescaped);
+            i += 2;
+            continue;
+        }
+        if let (Some(high @ ('0' | '1')), Some(low)) = (chars.get(i + 1), chars.get(i + 2)) {
+            if let Some(low) = low.to_digit(16) {
+                let high = high.to_digit(16).unwrap_or_default();
+                out.push(char::from((high * 16 + low) as u8));
+                i += 3;
+                continue;
+            }
+        }
+        out.push('_');
+        i += 1;
+    }
+    out
+}
+
+/// `decodeURIComponent(s.replaceAll('@','%40').replaceAll('§','%2F'))`,
+/// validating every `%XX` itself: a lenient percent decoder would pass a
+/// malformed escape through where JS throws.
+fn decode_legacy(s: &str) -> Option<String> {
+    let s = s.replace('§', "%2F");
+    let bytes = s.as_bytes();
+    let mut out = Vec::with_capacity(bytes.len());
+    let mut i = 0;
+    while i < bytes.len() {
+        if bytes[i] == b'%' {
+            let high = char::from(*bytes.get(i + 1)?).to_digit(16)?;
+            let low = char::from(*bytes.get(i + 2)?).to_digit(16)?;
+            out.push((high * 16 + low) as u8);
+            i += 3;
+        } else {
+            out.push(bytes[i]);
+            i += 1;
+        }
+    }
+    String::from_utf8(out).ok()
+}
+
+static SEMVER_RE: LazyLock<Regex> = LazyLock::new(|| {
+    Regex::new(
+        r"^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:-((?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$",
+    )
+    .expect("semver regex")
+});
+
+const NPM_NAME_MAX_LENGTH: usize = 214;
+
+/// The semver.org 2.0.0 grammar exactly (build metadata allowed; no `v`,
+/// `=`, ranges or leading zeros), the same regex as the TS twin.
+pub(crate) fn is_strict_semver(version: &str) -> bool {
+    SEMVER_RE.is_match(version)
+}
+
+fn is_npm_name_part(part: &str) -> bool {
+    let unreserved = |c: char| c.is_ascii_alphanumeric() || "-~!*'()".contains(c);
+    let mut chars = part.chars();
+    chars.next().is_some_and(unreserved) && chars.all(|c| unreserved(c) || c == '.' || c == '_')
+}
+
+/// npm's name rule for existing packages: an optional `@scope/` plus a name,
+/// URL-safe characters only, no leading `.` or `_`, at most 214 chars.
+pub(crate) fn is_registry_package_name(name: &str) -> bool {
+    if name.len() > NPM_NAME_MAX_LENGTH {
+        return false;
+    }
+    match name.strip_prefix('@') {
+        None => is_npm_name_part(name),
+        Some(scoped) => scoped
+            .split_once('/')
+            .is_some_and(|(scope, bare)| is_npm_name_part(scope) && is_npm_name_part(bare)),
+    }
+}
+
+/// `(name, version)` from a registry id's decoded `name@version`, split at
+/// the last `@` past index 0. The DepID version is authoritative for
+/// identity, so a non-semver version gives `None`.
+pub(crate) fn registry_name_version(second: &str) -> Option<(&str, &str)> {
+    let at = second.rfind('@').filter(|&i| i > 0)?;
+    let (name, version) = (&second[..at], &second[at + 1..]);
+    (is_registry_package_name(name) && is_strict_semver(version)).then_some((name, version))
+}
+
+/// The store decoder: `(full name, version)` of a `.vlt/<DepID>` entry,
+/// from any registry segment (the store holds every installed copy) and
+/// ignoring the extra. Git, remote, file, workspace and undecodable ids are
+/// `None`; the crawler still probes those by package.json.
+pub(crate) fn decode_vlt_dep_id(dir_name: &str) -> Option<(String, String)> {
+    let id = split_dep_id(dir_name)?;
+    let (name, version) = id.registry_identity()?;
+    Some((name.to_string(), version.to_string()))
+}
+
+fn with_trailing_slash(url: &str) -> String {
+    if url.ends_with('/') {
+        url.to_string()
+    } else {
+        format!("{url}/")
+    }
+}
+
+/// Does a decoded registry segment name vlt's default registry, given the
+/// lock's `options` (vlt `usesDefaultRegistry`)? `''`, the default alias
+/// (`default-registry-alias`, else `npm`), an alias whose URL is
+/// `options.registry`, or `options.registry` itself as a URL segment.
+/// Every other segment (named aliases, scoped registries, jsr) is foreign.
+pub(crate) fn is_default_registry(segment: &str, options: Option<&Map<String, Value>>) -> bool {
+    if segment.is_empty() {
+        return true;
+    }
+    let alias = match options.and_then(|o| o.get("default-registry-alias")) {
+        None | Some(Value::Null) => Some("npm"),
+        Some(Value::String(alias)) => Some(alias.as_str()),
+        Some(_) => None,
+    };
+    if alias == Some(segment) {
+        return true;
+    }
+    let Some(registry) = options
+        .and_then(|o| o.get("registry"))
+        .and_then(Value::as_str)
+    else {
+        return false;
+    };
+    let registry = with_trailing_slash(registry);
+    let aliased = options
+        .and_then(|o| o.get("registries"))
+        .and_then(|r| r.get(segment))
+        .and_then(Value::as_str);
+    if aliased.is_some_and(|url| with_trailing_slash(url) == registry) {
+        return true;
+    }
+    reqwest::Url::parse(segment).is_ok_and(|url| matches!(url.scheme(), "http" | "https"))
+        && with_trailing_slash(segment) == registry
+}
+
+// ── lock-level sniff ─────────────────────────────────────────────────────
+
+/// A `vlt-lock.json` that parsed as a JSON object with a known version.
+#[derive(Debug, Clone)]
+pub(crate) struct ParsedLock {
+    /// `None` when `lockfileVersion` is absent (vlt ≤ 0.0.0-18).
+    pub(crate) version: Option<u64>,
+    pub(crate) json: Map<String, Value>,
+}
+
+impl ParsedLock {
+    pub(crate) fn options(&self) -> Option<&Map<String, Value>> {
+        self.json.get("options").and_then(Value::as_object)
+    }
+
+    pub(crate) fn nodes(&self) -> Option<&Map<String, Value>> {
+        self.json.get("nodes").and_then(Value::as_object)
+    }
+
+    pub(crate) fn edges(&self) -> Option<&Map<String, Value>> {
+        self.json.get("edges").and_then(Value::as_object)
+    }
+
+    /// The grammar for ids written into this lock.
+    pub(crate) fn new_id_era(&self) -> DepIdEra {
+        DepIdEra::for_lockfile_version(self.version)
+    }
+}
+
+/// What reading a `vlt-lock.json` found. vlt itself cannot read a BOM or a
+/// non-object, and fails on any version but `0` and `1`, so none of those
+/// is ever parsed around.
+#[derive(Debug, Clone)]
+pub(crate) enum LockSniff {
+    Readable(ParsedLock),
+    /// Starts with U+FEFF; never stripped.
+    Bom,
+    /// Not a JSON object. serde_json also refuses a lone surrogate escape,
+    /// which JS `JSON.parse` would accept.
+    NotJsonObject,
+    /// `lockfileVersion` is present but not the integer token `0` or `1`
+    /// (`1.0`, `1e0`, `"1"`, `2`, `null`, ...), rendered as JSON.
+    UnsupportedVersion(String),
+}
+
+pub(crate) fn sniff_lock(text: &str) -> LockSniff {
+    if text.starts_with('\u{feff}') {
+        return LockSniff::Bom;
+    }
+    let Ok(Value::Object(json)) = serde_json::from_str::<Value>(text) else {
+        return LockSniff::NotJsonObject;
+    };
+    let version = match json.get("lockfileVersion") {
+        None => None,
+        Some(v) => match v.as_u64() {
+            Some(n @ (0 | 1)) => Some(n),
+            _ => return LockSniff::UnsupportedVersion(v.to_string()),
+        },
+    };
+    LockSniff::Readable(ParsedLock { version, json })
+}
+
+// ── sections ─────────────────────────────────────────────────────────────
+
+/// The lines of a lock, split on `\n`; each keeps its own trailing `\r`,
+/// and joining with `\n` gives the text back.
+pub(crate) fn split_lines(text: &str) -> Vec<&str> {
+    text.split('\n').collect()
+}
+
+fn strip_cr(line: &str) -> (&str, bool) {
+    match line.strip_suffix('\r') {
+        Some(body) => (body, true),
+        None => (line, false),
+    }
+}
+
+/// Where a top-level `nodes` or `edges` section sits in the lock's lines.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) enum SectionSpan {
+    /// The one-line empty form `  "nodes": {},`.
+    Inline { line: usize },
+    /// `  "nodes": {` at `open`, entries strictly between, `  },` at `close`.
+    Block { open: usize, close: usize },
+}
+
+impl SectionSpan {
+    pub(crate) fn entry_lines(self) -> std::ops::Range<usize> {
+        match self {
+            SectionSpan::Inline { line } => line + 1..line + 1,
+            SectionSpan::Block { open, close } => open + 1..close,
+        }
+    }
+}
+
+fn locate_section(lines: &[&str], name: &str) -> Option<SectionSpan> {
+    let header = format!("  \"{name}\": {{");
+    let (open, rest) = lines.iter().enumerate().find_map(|(i, line)| {
+        let (body, _) = strip_cr(line);
+        body.strip_prefix(header.as_str()).map(|rest| (i, rest))
+    })?;
+    match rest {
+        "" => lines
+            .iter()
+            .enumerate()
+            .skip(open + 1)
+            .find(|(_, line)| matches!(strip_cr(line).0, "  }" | "  },"))
+            .map(|(close, _)| SectionSpan::Block { open, close }),
+        "}" | "}," => Some(SectionSpan::Inline { line: open }),
+        _ => None,
+    }
+}
+
+/// The nodes section in vlt's canonical layout. `None` when absent or laid
+/// out any other way; a caller whose parsed lock has nodes refuses then.
+pub(crate) fn nodes_block(lines: &[&str]) -> Option<SectionSpan> {
+    locate_section(lines, "nodes")
+}
+
+pub(crate) fn edges_block(lines: &[&str]) -> Option<SectionSpan> {
+    locate_section(lines, "edges")
+}
+
+// ── entry lines ──────────────────────────────────────────────────────────
+
+const ENTRY_INDENT: &str = "    ";
+
+/// Split entry text `"<key>": <value>` whose key has no JSON escapes.
+fn split_entry_text(text: &str) -> Option<(&str, &str)> {
+    let rest = text.strip_prefix('"')?;
+    let close = rest.find(['"', '\\'])?;
+    if rest.as_bytes()[close] != b'"' {
+        return None;
+    }
+    let value = rest[close + 1..].strip_prefix(": ")?;
+    Some((&rest[..close], value))
+}
+
+/// `(entry text, comma, cr)` of a 4-space-indented entry line.
+fn split_entry_line(line: &str) -> Option<(&str, bool, bool)> {
+    let (body, cr) = strip_cr(line);
+    let body = body.strip_prefix(ENTRY_INDENT)?;
+    if !body.starts_with('"') {
+        return None;
+    }
+    let (text, comma) = match body.strip_suffix(',') {
+        Some(text) => (text, true),
+        None => (body, false),
+    };
+    Some((text, comma, cr))
+}
+
+/// Render an entry line: 4-space indent, the entry text, a comma on every
+/// entry but a section's last, and the line's own `\r`.
+pub(crate) fn render_entry_line(entry_text: &str, comma: bool, cr: bool) -> String {
+    format!(
+        "{ENTRY_INDENT}{entry_text}{}{}",
+        if comma { "," } else { "" },
+        if cr { "\r" } else { "" }
+    )
+}
+
+pub(crate) fn entry_text(key: &str, raw_value: &str) -> String {
+    format!("\"{key}\": {raw_value}")
+}
+
+/// One node: `"<DepID>": [E0,E1,E2?,E3?,E4…]` with every element kept as
+/// its raw top-level slice.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct NodeEntry<'a> {
+    pub(crate) key: &'a str,
+    pub(crate) tuple: &'a str,
+    pub(crate) elems: Vec<&'a str>,
+}
+
+impl NodeEntry<'_> {
+    pub(crate) fn name(&self) -> Option<String> {
+        serde_json::from_str(self.elems[1]).ok()
+    }
+
+    /// `E2`/`E3` as raw slices; `None` when the tuple is shorter.
+    pub(crate) fn slot(&self, index: usize) -> Option<&str> {
+        self.elems.get(index).copied()
+    }
+
+    pub(crate) fn entry_text(&self) -> String {
+        entry_text(self.key, self.tuple)
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct NodeLine<'a> {
+    pub(crate) entry: NodeEntry<'a>,
+    pub(crate) comma: bool,
+    pub(crate) cr: bool,
+}
+
+pub(crate) fn parse_node_line(line: &str) -> Option<NodeLine<'_>> {
+    let (text, comma, cr) = split_entry_line(line)?;
+    Some(NodeLine {
+        entry: parse_node_entry_text(text)?,
+        comma,
+        cr,
+    })
+}
+
+/// Parse node entry text (a line minus indent, comma and `\r`), the form
+/// ledgers record.
+pub(crate) fn parse_node_entry_text(text: &str) -> Option<NodeEntry<'_>> {
+    let (key, tuple) = split_entry_text(text)?;
+    let elems = split_tuple_elements(tuple)?;
+    let is_string = |raw: &str| raw.starts_with('"') && serde_json::from_str::<String>(raw).is_ok();
+    let string_or_null = |raw: &&str| *raw == "null" || is_string(raw);
+    let well_formed = elems.len() >= 2
+        && matches!(elems[0], "0" | "1" | "2" | "3")
+        && is_string(elems[1])
+        && elems.get(2).is_none_or(string_or_null)
+        && elems.get(3).is_none_or(string_or_null);
+    well_formed.then_some(NodeEntry { key, tuple, elems })
+}
+
+/// Raw top-level elements of a tuple `[e0,e1,…]`: the text must parse as a
+/// JSON array, and elements are separated by exactly one `,` with no
+/// surrounding whitespace.
+pub(crate) fn split_tuple_elements(tuple: &str) -> Option<Vec<&str>> {
+    let parsed = serde_json::from_str::<Value>(tuple).ok()?;
+    let expected = parsed.as_array()?.len();
+    let interior = tuple.strip_prefix('[')?.strip_suffix(']')?;
+    let bytes = interior.as_bytes();
+    let mut elems = Vec::new();
+    let mut depth = 0usize;
+    let mut in_string = false;
+    let mut start = 0;
+    let mut i = 0;
+    while i < bytes.len() {
+        let b = bytes[i];
+        if in_string {
+            match b {
+                b'\\' => i += 1,
+                b'"' => in_string = false,
+                _ => {}
+            }
+        } else {
+            match b {
+                b'"' => in_string = true,
+                b'[' | b'{' => depth += 1,
+                b']' | b'}' => depth = depth.checked_sub(1)?,
+                b',' if depth == 0 => {
+                    elems.push(&interior[start..i]);
+                    start = i + 1;
+                }
+                _ => {}
+            }
+        }
+        i += 1;
+    }
+    if !interior.is_empty() {
+        elems.push(&interior[start..]);
+    }
+    let tight = |e: &&str| {
+        !e.is_empty()
+            && !e.starts_with(|c: char| c.is_ascii_whitespace())
+            && !e.ends_with(|c: char| c.is_ascii_whitespace())
+    };
+    (elems.len() == expected && elems.iter().all(tight)).then_some(elems)
+}
+
+/// A tuple with slots [2] and [3] replaced and `E0`, `E1`, `E4…` kept raw.
+/// An absent slot is `null` when a later element follows and is dropped
+/// otherwise, which is how vlt lays out unused slots.
+pub(crate) fn render_tuple_with_slots(
+    elems: &[&str],
+    slot2: Option<&str>,
+    slot3: Option<&str>,
+) -> String {
+    let tail = elems.get(4..).unwrap_or_default();
+    let mut out: Vec<&str> = elems.iter().take(2).copied().collect();
+    let slots = [slot2, slot3];
+    let kept = if tail.is_empty() {
+        slots.iter().rposition(Option::is_some).map_or(0, |i| i + 1)
+    } else {
+        2
+    };
+    out.extend(slots[..kept].iter().map(|s| s.unwrap_or("null")));
+    out.extend_from_slice(tail);
+    format!("[{}]", out.join(","))
+}
+
+pub(crate) const EDGE_TYPES: [&str; 5] = ["prod", "dev", "optional", "peer", "peerOptional"];
+
+/// One edge: `"<fromDepID> <depName>": "<type> <bareSpec> <toDepID|MISSING>"`.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct EdgeEntry<'a> {
+    pub(crate) key: &'a str,
+    pub(crate) raw_value: &'a str,
+    pub(crate) value: String,
+}
+
+impl EdgeEntry<'_> {
+    pub(crate) fn from(&self) -> &str {
+        self.key.split_once(' ').map_or(self.key, |(from, _)| from)
+    }
+
+    /// The dependency name (an alias when the spec is `npm:`).
+    pub(crate) fn dep_name(&self) -> &str {
+        self.key.split_once(' ').map_or("", |(_, name)| name)
+    }
+
+    pub(crate) fn edge_type(&self) -> &str {
+        self.value.split_once(' ').map_or("", |(ty, _)| ty)
+    }
+
+    /// The bare spec, which may itself contain spaces.
+    pub(crate) fn spec(&self) -> &str {
+        let (_, rest) = self.value.split_once(' ').unwrap_or_default();
+        rest.rsplit_once(' ').map_or("", |(spec, _)| spec)
+    }
+
+    /// The target DepID, or `MISSING`.
+    pub(crate) fn target(&self) -> &str {
+        self.value.rsplit_once(' ').map_or("", |(_, to)| to)
+    }
+
+    pub(crate) fn entry_text(&self) -> String {
+        entry_text(self.key, self.raw_value)
+    }
+
+    pub(crate) fn sort_key(&self) -> EdgeSortKey<'_> {
+        EdgeSortKey {
+            from: self.from(),
+            edge_type: self.edge_type(),
+            to: self.target(),
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct EdgeLine<'a> {
+    pub(crate) entry: EdgeEntry<'a>,
+    pub(crate) comma: bool,
+    pub(crate) cr: bool,
+}
+
+pub(crate) fn parse_edge_line(line: &str) -> Option<EdgeLine<'_>> {
+    let (text, comma, cr) = split_entry_line(line)?;
+    Some(EdgeLine {
+        entry: parse_edge_entry_text(text)?,
+        comma,
+        cr,
+    })
+}
+
+pub(crate) fn parse_edge_entry_text(text: &str) -> Option<EdgeEntry<'_>> {
+    let (key, raw_value) = split_entry_text(text)?;
+    let (from, name) = key.split_once(' ')?;
+    if from.is_empty()
+        || name.is_empty()
+        || !raw_value.starts_with('"')
+        || !raw_value.ends_with('"')
+    {
+        return None;
+    }
+    let value: String = serde_json::from_str(raw_value).ok()?;
+    let entry = EdgeEntry {
+        key,
+        raw_value,
+        value,
+    };
+    let (_, rest) = entry.value.split_once(' ')?;
+    let (spec, to) = rest.rsplit_once(' ')?;
+    let well_formed = EDGE_TYPES.contains(&entry.edge_type()) && !spec.is_empty() && !to.is_empty();
+    well_formed.then_some(entry)
+}
+
+/// Root (`file~_d`, `file·.`) and workspace (`workspace~…`, `workspace·…`)
+/// importers: edge sources that are never nodes.
+pub(crate) fn is_importer_dep_id(id: &str) -> bool {
+    id == "file~_d"
+        || id == "file·."
+        || id.strip_prefix("workspace~").is_some_and(|p| !p.is_empty())
+        || id.strip_prefix("workspace·").is_some_and(|p| !p.is_empty())
+}
+
+// ── ordering ─────────────────────────────────────────────────────────────
+
+/// The primary order of vlt's `localeCompare(…, 'en')` over the DepID
+/// alphabet (Node 24.21 ICU), lowest first; ASCII letters share a primary
+/// with their uppercase twin. Pinned by `tests/fixtures/vlt/collation-golden.json`.
+const COLLATION_PRIMARY: &str =
+    " _-,;:!?.·'\"()[]{}§@*/\\&#%`^+<=>|~$0123456789abcdefghijklmnopqrstuvwxyz";
+
+fn collation_weight(c: char) -> Option<(usize, bool)> {
+    let upper = c.is_ascii_uppercase();
+    let folded = c.to_ascii_lowercase();
+    COLLATION_PRIMARY
+        .chars()
+        .position(|p| p == folded)
+        .map(|primary| (primary, upper))
+}
+
+/// vlt's `a.localeCompare(b, 'en')`, restricted to the collation table:
+/// primary weights first (a shorter prefix sorts first), then case
+/// position by position, lowercase first. `None` is "Unknown": a character
+/// outside the table (a tilde-era `file:` path with non-ASCII, say), for
+/// which callers fall back to in-place placement.
+pub(crate) fn vlt_collate(a: &str, b: &str) -> Option<Ordering> {
+    let weigh = |s: &str| s.chars().map(collation_weight).collect::<Option<Vec<_>>>();
+    let (wa, wb) = (weigh(a)?, weigh(b)?);
+    let primary = wa.iter().map(|w| w.0).cmp(wb.iter().map(|w| w.0));
+    Some(primary.then_with(|| wa.iter().map(|w| w.1).cmp(wb.iter().map(|w| w.1))))
+}
+
+/// The fields vlt's `formatEdges` sorts by.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) struct EdgeSortKey<'a> {
+    pub(crate) from: &'a str,
+    pub(crate) edge_type: &'a str,
+    /// A target DepID or `MISSING`; vlt sorts a missing target as `''`.
+    pub(crate) to: &'a str,
+}
+
+fn missing_as_empty(to: &str) -> &str {
+    if to == "MISSING" {
+        ""
+    } else {
+        to
+    }
+}
+
+/// vlt's edge order: importer sources first, then `from`, `type` and `to`
+/// by [`vlt_collate`]. The edge name is not a key. `None` when a needed
+/// comparison is Unknown.
+pub(crate) fn vlt_edge_cmp(a: EdgeSortKey<'_>, b: EdgeSortKey<'_>) -> Option<Ordering> {
+    let importer = is_importer_dep_id(b.from).cmp(&is_importer_dep_id(a.from));
+    if importer != Ordering::Equal {
+        return Some(importer);
+    }
+    for (x, y) in [
+        (a.from, b.from),
+        (a.edge_type, b.edge_type),
+        (missing_as_empty(a.to), missing_as_empty(b.to)),
+    ] {
+        match vlt_collate(x, y)? {
+            Ordering::Equal => {}
+            decided => return Some(decided),
+        }
+    }
+    Some(Ordering::Equal)
+}
+
+// ── vendored path rule ───────────────────────────────────────────────────
+
+const VENDOR_NPM_PREFIX: &str = ".socket/vendor/npm/";
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub(crate) enum VendoredShape {
+    /// `<uuid>/[@s/]<bare>-<version>/node_modules/[@s/]<bare>`, the directory
+    /// artifact socket-patch writes for vlt.
+    Dir,
+    /// `<uuid>/[@s/]<bare>-<version>.tgz`, an npm-flavor artifact a user
+    /// installed with vlt (read-only recognition).
+    Tgz,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct VendoredPath {
+    pub(crate) uuid: String,
+    pub(crate) name: String,
+    pub(crate) version: String,
+    pub(crate) shape: VendoredShape,
+}
+
+fn leaf_version<'l>(bare: &str, leaf: &'l str) -> Option<&'l str> {
+    leaf.strip_prefix(bare)?
+        .strip_prefix('-')
+        .filter(|v| is_strict_semver(v))
+}
+
+/// A decoded `file` path of the vendored directory shape, with the name
+/// read from its `node_modules/` segments.
+pub(crate) fn parse_vendored_dir_path(path: &str) -> Option<VendoredPath> {
+    let segments: Vec<&str> = path.strip_prefix(VENDOR_NPM_PREFIX)?.split('/').collect();
+    let (uuid, scope, leaf, bare) = match segments.as_slice() {
+        [uuid, leaf, "node_modules", bare] => (*uuid, None, *leaf, *bare),
+        [uuid, scope, leaf, "node_modules", scope_again, bare] if scope == scope_again => {
+            (*uuid, Some(*scope), *leaf, *bare)
+        }
+        _ => return None,
+    };
+    let name = match scope {
+        Some(scope) if scope.starts_with('@') => format!("{scope}/{bare}"),
+        Some(_) => return None,
+        None => bare.to_string(),
+    };
+    if !is_canonical_uuid(uuid) || !is_registry_package_name(&name) {
+        return None;
+    }
+    Some(VendoredPath {
+        uuid: uuid.to_string(),
+        version: leaf_version(bare, leaf)?.to_string(),
+        name,
+        shape: VendoredShape::Dir,
+    })
+}
+
+/// The vendored path rule (hosted matching, vendored target analysis, VEX,
+/// depscan): is a decoded `file` path a vendored vlt artifact of `name`?
+pub(crate) fn parse_vendored_path(path: &str, name: &str) -> Option<VendoredPath> {
+    if let Some(dir) = parse_vendored_dir_path(path) {
+        return (dir.name == name).then_some(dir);
+    }
+    if !is_registry_package_name(name) {
+        return None;
+    }
+    let rest = path.strip_prefix(VENDOR_NPM_PREFIX)?.strip_suffix(".tgz")?;
+    let (uuid, leaf) = rest.split_once('/')?;
+    let (leaf_scope, leaf) = match leaf.split_once('/') {
+        Some((scope, leaf)) => (Some(scope), leaf),
+        None => (None, leaf),
+    };
+    let (name_scope, bare) = match name.split_once('/') {
+        Some((scope, bare)) => (Some(scope), bare),
+        None => (None, name),
+    };
+    if leaf_scope != name_scope || !is_canonical_uuid(uuid) {
+        return None;
+    }
+    Some(VendoredPath {
+        uuid: uuid.to_string(),
+        name: name.to_string(),
+        version: leaf_version(bare, leaf)?.to_string(),
+        shape: VendoredShape::Tgz,
+    })
+}
+
+/// `rel` of the vendored directory artifact:
+/// `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>/node_modules/<name>`.
+pub(crate) fn vendored_dir_rel(uuid: &str, name: &str, version: &str) -> String {
+    let leaf = match name.split_once('/') {
+        Some((scope, bare)) => format!("{scope}/{bare}-{version}"),
+        None => format!("{name}-{version}"),
+    };
+    format!("{VENDOR_NPM_PREFIX}{uuid}/{leaf}/node_modules/{name}")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    use crate::constants::npm_family::{
+        VLT_CONFIG, VLT_HIDDEN_LOCK_REL, VLT_LEGACY_WORKSPACES, VLT_LOCK, VLT_SETUP_MARKERS,
+        VLT_STORE_DIR,
+    };
+
+    const UUID: &str = "0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b";
+
+    use DepIdEra::{Legacy, Tilde};
+    use DepIdKind::{File, Git, Registry, Remote, Workspace};
+
+    type Split = (
+        DepIdEra,
+        DepIdKind,
+        &'static str,
+        Option<&'static str>,
+        Option<&'static str>,
+    );
+
+    struct CodecRow {
+        id: String,
+        split: Option<Split>,
+        identity: Option<(&'static str, &'static str)>,
+    }
+
+    fn row(
+        id: impl Into<String>,
+        split: Option<Split>,
+        identity: Option<(&'static str, &'static str)>,
+    ) -> CodecRow {
+        CodecRow {
+            id: id.into(),
+            split,
+            identity,
+        }
+    }
+
+    fn reg(era: DepIdEra, first: &'static str, second: &'static str) -> Option<Split> {
+        Some((era, Registry, first, Some(second), None))
+    }
+
+    fn reg_x(
+        era: DepIdEra,
+        first: &'static str,
+        second: &'static str,
+        extra: &'static str,
+    ) -> Option<Split> {
+        Some((era, Registry, first, Some(second), Some(extra)))
+    }
+
+    fn typed(era: DepIdEra, kind: DepIdKind, first: &'static str) -> Option<Split> {
+        Some((era, kind, first, None, None))
+    }
+
+    // Verbatim from depscan `workspaces/lib/src/socket-patch/vlt-dep-id.test.ts`
+    // CODEC_ROWS (cross-checked there against vlt 1.2.0 and rc.14
+    // `splitDepID`). Its lone-surrogate row has no Rust `&str` spelling.
+    fn codec_rows() -> Vec<CodecRow> {
+        let d19 = |base: &str| base.replace("<uuid>", UUID);
+        vec![
+            row("··ms@2.1.3", reg(Legacy, "", "ms@2.1.3"), Some(("ms", "2.1.3"))),
+            row(
+                "·npm·@isaacs§string-locale-compare@1.1.0",
+                reg(Legacy, "npm", "@isaacs/string-locale-compare@1.1.0"),
+                Some(("@isaacs/string-locale-compare", "1.1.0")),
+            ),
+            row(
+                "··@sindresorhus§is@4.6.0",
+                reg(Legacy, "", "@sindresorhus/is@4.6.0"),
+                Some(("@sindresorhus/is", "4.6.0")),
+            ),
+            row(
+                "·npm·u@1.0.0%2Bbuild.1",
+                reg(Legacy, "npm", "u@1.0.0+build.1"),
+                Some(("u", "1.0.0+build.1")),
+            ),
+            row(
+                "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+                reg_x(Legacy, "", "ms@2.1.3", "%3Aroot%20%3E%20%23debug%20%3E%20%23ms"),
+                Some(("ms", "2.1.3")),
+            ),
+            row(
+                "·npm·x@1.0.0·%E1%B9%97%3A3",
+                reg_x(Legacy, "npm", "x@1.0.0", "%E1%B9%97%3A3"),
+                Some(("x", "1.0.0")),
+            ),
+            row("~npm~@a+b@1.0.0", reg(Tilde, "npm", "@a/b@1.0.0"), Some(("@a/b", "1.0.0"))),
+            row("~npm~a__b@1.0.0", reg(Tilde, "npm", "a_b@1.0.0"), Some(("a_b", "1.0.0"))),
+            row(
+                "~npm~u@1.0.0_pbuild.1",
+                reg(Tilde, "npm", "u@1.0.0+build.1"),
+                Some(("u", "1.0.0+build.1")),
+            ),
+            row(
+                "~npm~is-number@6.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+                reg_x(
+                    Tilde,
+                    "npm",
+                    "is-number@6.0.0",
+                    "_croot_s_g_s#to-regex-range_s_g_s#is-number",
+                ),
+                Some(("is-number", "6.0.0")),
+            ),
+            row(
+                "~npm~react-dom@18.2.0~peer.ace93b147498ef7a",
+                reg_x(Tilde, "npm", "react-dom@18.2.0", "peer.ace93b147498ef7a"),
+                Some(("react-dom", "18.2.0")),
+            ),
+            row("~npm~x@1~peer.2", reg_x(Tilde, "npm", "x@1", "peer.2"), None),
+            row(
+                "~acme~left-pad@1.3.0",
+                reg(Tilde, "acme", "left-pad@1.3.0"),
+                Some(("left-pad", "1.3.0")),
+            ),
+            row(
+                "~http_c++127.0.0.1_c4873+~x@1.0.0",
+                reg(Tilde, "http://127.0.0.1:4873/", "x@1.0.0"),
+                Some(("x", "1.0.0")),
+            ),
+            row(
+                "~jsr~@jsr+std____semver@1.0.8",
+                reg(Tilde, "jsr", "@jsr/std__semver@1.0.8"),
+                Some(("@jsr/std__semver", "1.0.8")),
+            ),
+            row(
+                "git~github_cuser+proj~v1.0.0",
+                Some((Tilde, Git, "github:user/proj", Some("v1.0.0"), None)),
+                None,
+            ),
+            row("file~_d", typed(Tilde, File, "."), None),
+            row(
+                "remote~https_c++e.com+r-1.0.0.tgz",
+                typed(Tilde, Remote, "https://e.com/r-1.0.0.tgz"),
+                None,
+            ),
+            row("workspace~packages+a", typed(Tilde, Workspace, "packages/a"), None),
+            row("··foo@1.2.3", reg(Legacy, "", "foo@1.2.3"), Some(("foo", "1.2.3"))),
+            row("·npm·foo@1.2.3", reg(Legacy, "npm", "foo@1.2.3"), Some(("foo", "1.2.3"))),
+            row("~npm~foo@1.2.3", reg(Tilde, "npm", "foo@1.2.3"), Some(("foo", "1.2.3"))),
+            row(
+                "··@scope§bar@2.0.0",
+                reg(Legacy, "", "@scope/bar@2.0.0"),
+                Some(("@scope/bar", "2.0.0")),
+            ),
+            row(
+                "·npm·@scope§bar@2.0.0",
+                reg(Legacy, "npm", "@scope/bar@2.0.0"),
+                Some(("@scope/bar", "2.0.0")),
+            ),
+            row(
+                "~npm~@scope+bar@2.0.0",
+                reg(Tilde, "npm", "@scope/bar@2.0.0"),
+                Some(("@scope/bar", "2.0.0")),
+            ),
+            row(
+                "··u@1.0.0%2Bbuild.1",
+                reg(Legacy, "", "u@1.0.0+build.1"),
+                Some(("u", "1.0.0+build.1")),
+            ),
+            row("·acme·y@1.0.0", reg(Legacy, "acme", "y@1.0.0"), Some(("y", "1.0.0"))),
+            row("~acme~y@1.0.0", reg(Tilde, "acme", "y@1.0.0"), Some(("y", "1.0.0"))),
+            row(
+                "·http%3A§§127.0.0.1%3A4873§·x@1.0.0",
+                reg(Legacy, "http://127.0.0.1:4873/", "x@1.0.0"),
+                Some(("x", "1.0.0")),
+            ),
+            row(
+                "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+                reg_x(Legacy, "npm", "ms@2.1.3", "%3Aroot%20%3E%20%23debug%20%3E%20%23ms"),
+                Some(("ms", "2.1.3")),
+            ),
+            row(
+                "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+                reg_x(Tilde, "npm", "ms@2.1.3", "_croot_s_g_s#debug_s_g_s#ms"),
+                Some(("ms", "2.1.3")),
+            ),
+            row("·npm·x@1·%E1%B9%97%3A3", reg_x(Legacy, "npm", "x@1", "%E1%B9%97%3A3"), None),
+            row(
+                "~npm~x@1~peer.dbd5ca8b03a66489",
+                reg_x(Tilde, "npm", "x@1", "peer.dbd5ca8b03a66489"),
+                None,
+            ),
+            row(
+                d19("file·.socket§vendor§npm§<uuid>§left-pad-1.3.0§node_modules§left-pad"),
+                Some((
+                    Legacy,
+                    File,
+                    ".socket/vendor/npm/0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b/left-pad-1.3.0/node_modules/left-pad",
+                    None,
+                    None,
+                )),
+                None,
+            ),
+            row(
+                d19("file~.socket+vendor+npm+<uuid>+left-pad-1.3.0+node__modules+left-pad"),
+                Some((
+                    Tilde,
+                    File,
+                    ".socket/vendor/npm/0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b/left-pad-1.3.0/node_modules/left-pad",
+                    None,
+                    None,
+                )),
+                None,
+            ),
+            row(
+                d19("file·.socket§vendor§npm§<uuid>§@sc§pkg-1.0.0§node_modules§@sc§pkg"),
+                Some((
+                    Legacy,
+                    File,
+                    ".socket/vendor/npm/0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b/@sc/pkg-1.0.0/node_modules/@sc/pkg",
+                    None,
+                    None,
+                )),
+                None,
+            ),
+            row(
+                d19("file~.socket+vendor+npm+<uuid>+@sc+pkg-1.0.0+node__modules+@sc+pkg"),
+                Some((
+                    Tilde,
+                    File,
+                    ".socket/vendor/npm/0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b/@sc/pkg-1.0.0/node_modules/@sc/pkg",
+                    None,
+                    None,
+                )),
+                None,
+            ),
+            row("workspace·packages§a", typed(Legacy, Workspace, "packages/a"), None),
+            row(
+                "remote·https%3A§§e.com§r-1.0.0.tgz",
+                typed(Legacy, Remote, "https://e.com/r-1.0.0.tgz"),
+                None,
+            ),
+            row("file·.", typed(Legacy, File, "."), None),
+            row(
+                "git·github%3Auser§proj·v1.0.0",
+                Some((Legacy, Git, "github:user/proj", Some("v1.0.0"), None)),
+                None,
+            ),
+            row("file~.+packages+a", typed(Tilde, File, "./packages/a"), None),
+            row("file·.§packages§a", typed(Legacy, File, "./packages/a"), None),
+            row("file~a~peer.1", Some((Tilde, File, "a", None, Some("peer.1"))), None),
+            row(
+                "·jsr·@jsr§std__semver@1.0.8",
+                reg(Legacy, "jsr", "@jsr/std__semver@1.0.8"),
+                Some(("@jsr/std__semver", "1.0.8")),
+            ),
+            row(
+                "·https%3A§§npm.jsr.io§·@jsr§std__semver@1.0.8",
+                reg(Legacy, "https://npm.jsr.io/", "@jsr/std__semver@1.0.8"),
+                Some(("@jsr/std__semver", "1.0.8")),
+            ),
+            row("~~a@1.0.0", reg(Tilde, "", "a@1.0.0"), Some(("a", "1.0.0"))),
+            row("~npm~a@1.0.0~", reg_x(Tilde, "npm", "a@1.0.0", ""), Some(("a", "1.0.0"))),
+            row("·npm·a~b@1.0.0", reg(Legacy, "npm", "a~b@1.0.0"), Some(("a~b", "1.0.0"))),
+            row("~npm~a·b@1.0.0", reg(Tilde, "npm", "a·b@1.0.0"), None),
+            row("~npm~a_@1.0.0", reg(Tilde, "npm", "a_@1.0.0"), Some(("a_", "1.0.0"))),
+            row("~npm~_1f_0a_zz_@1.0.0", reg(Tilde, "npm", "\u{1f}\n_zz_@1.0.0"), None),
+            row("·npm·a@1.0.0%ZZ", None, None),
+            row("·npm·a@1.0.0%4", None, None),
+            row("·npm·a@1.0.0%C3", None, None),
+            row("·npm·a@1.0.0%ED%A0%80", None, None),
+            row("·npm%zz·a@1.0.0", None, None),
+            row("··ms@2.1.3·%ZZ", None, None),
+            row("file·.socket%2", None, None),
+            row("git·github%3Auser·v1%G0", None, None),
+            row("npm~foo@1.0.0", None, None),
+            row("foo@1.0.0", None, None),
+            row("link~x", None, None),
+            row("GIT~x~y", None, None),
+            row("~npm~a@1.0.0~extra~more", None, None),
+            row("file~a~b~c", None, None),
+            row("~npm", None, None),
+            row("~npm~", None, None),
+            row("file~", None, None),
+            row("git~~sel", None, None),
+        ]
+    }
+
+    fn as_split(id: &DepId) -> (DepIdEra, DepIdKind, &str, Option<&str>, Option<&str>) {
+        (
+            id.era,
+            id.kind,
+            id.first.as_str(),
+            id.second.as_deref(),
+            id.extra.as_deref(),
+        )
+    }
+
+    #[test]
+    fn splits_and_identifies_every_codec_row() {
+        for r in codec_rows() {
+            let split = split_dep_id(&r.id);
+            assert_eq!(split.as_ref().map(as_split), r.split, "split {}", r.id);
+            assert_eq!(
+                split.as_ref().and_then(DepId::registry_identity),
+                r.identity,
+                "identity {}",
+                r.id
+            );
+            assert_eq!(
+                decode_vlt_dep_id(&r.id),
+                r.identity.map(|(n, v)| (n.to_string(), v.to_string())),
+                "store decode {}",
+                r.id
+            );
+        }
+    }
+
+    #[test]
+    fn decides_the_era_by_prefix_only() {
+        assert_eq!(split_dep_id("~npm~a·b@1.0.0").map(|d| d.era), Some(Tilde));
+        assert_eq!(split_dep_id("·npm·a~b@1.0.0").map(|d| d.era), Some(Legacy));
+        assert_eq!(split_dep_id("file~a·b").map(|d| d.era), Some(Tilde));
+        assert_eq!(split_dep_id("file·a~b").map(|d| d.era), Some(Legacy));
+        assert_eq!(
+            split_dep_id("workspace·a~b~c").map(|d| d.first),
+            Some("a~b~c".to_string())
+        );
+        assert_eq!(dep_id_era("filex~a"), None);
+        assert_eq!(dep_id_era("Workspace~a"), None);
+        assert_eq!(dep_id_era(""), None);
+        assert_eq!(DepIdEra::for_lockfile_version(Some(1)), Tilde);
+        assert_eq!(DepIdEra::for_lockfile_version(Some(0)), Legacy);
+        assert_eq!(DepIdEra::for_lockfile_version(None), Legacy);
+    }
+
+    #[test]
+    fn recovers_name_and_version_from_a_registry_second() {
+        let long = format!("{}@1.0.0", "a".repeat(215));
+        let rows: Vec<(&str, Option<(&str, &str)>)> = vec![
+            ("a@1.0.0", Some(("a", "1.0.0"))),
+            ("@s/p@1.0.0-rc.1+b.2", Some(("@s/p", "1.0.0-rc.1+b.2"))),
+            ("JSONStream@1.3.5", Some(("JSONStream", "1.3.5"))),
+            ("a-b.c@0.0.0-0", Some(("a-b.c", "0.0.0-0"))),
+            ("@s/p", None),
+            ("p", None),
+            ("@1.0.0", None),
+            ("a@", None),
+            ("@s@1.0.0", None),
+            ("a@b@1.0.0", None),
+            ("a@v1.0.0", None),
+            ("a@=1.0.0", None),
+            ("a@01.0.0", None),
+            ("a@1.0", None),
+            ("a@1.0.0 ", None),
+            ("a@^1.0.0", None),
+            (".a@1.0.0", None),
+            ("_a@1.0.0", None),
+            ("@s/.p@1.0.0", None),
+            ("@_s/p@1.0.0", None),
+            ("a b@1.0.0", None),
+            ("a/b@1.0.0", None),
+            (long.as_str(), None),
+        ];
+        for (second, expected) in rows {
+            assert_eq!(registry_name_version(second), expected, "{second}");
+        }
+        assert!(is_strict_semver("99999999999999999999.0.0"));
+        assert!(is_strict_semver("1.0.0-0a.01b+001"));
+        assert!(!is_strict_semver("1.0.0-01"));
+        assert!(!is_strict_semver("1.0.0\n"));
+        assert!(!is_strict_semver("١.0.0"));
+    }
+
+    #[test]
+    fn encodes_segments_as_vlt_does_and_round_trips() {
+        let d19 = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let d19_tilde = format!(".socket+vendor+npm+{UUID}+left-pad-1.3.0+node__modules+left-pad");
+        let d19_legacy = format!(".socket§vendor§npm§{UUID}§left-pad-1.3.0§node_modules§left-pad");
+        let rows: Vec<(&str, &str, &str)> = vec![
+            (".", "_d", "."),
+            ("packages/my_lib", "packages+my__lib", "packages§my_lib"),
+            ("a b+c:d~e", "a_sb_pc_cd_te", "a%20b%2Bc%3Ad~e"),
+            ("trailing.", "trailing_d", "trailing."),
+            ("ctl\n\u{1f}\u{0}", "ctl_0A_1F_00", "ctl%0A%1F%00"),
+            ("@scope/pkg@1.0.0", "@scope+pkg@1.0.0", "@scope§pkg@1.0.0"),
+            ("1.0.0+build.1", "1.0.0_pbuild.1", "1.0.0%2Bbuild.1"),
+            (
+                ":root > #debug > #ms",
+                "_croot_s_g_s#debug_s_g_s#ms",
+                "%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            ),
+            ("ṗ:3", "ṗ_c3", "%E1%B9%97%3A3"),
+            (
+                "http://127.0.0.1:4873/",
+                "http_c++127.0.0.1_c4873+",
+                "http%3A§§127.0.0.1%3A4873§",
+            ),
+            (d19.as_str(), d19_tilde.as_str(), d19_legacy.as_str()),
+            (
+                "back\\slash<>\"|?*",
+                "back_bslash_l_g_q_i_m_a",
+                "back%5Cslash%3C%3E%22%7C%3F*",
+            ),
+            ("a·b§c", "a·b§c", "a%C2%B7b%C2%A7c"),
+            ("naïve", "naïve", "na%C3%AFve"),
+            ("\u{1F600}", "\u{1F600}", "%F0%9F%98%80"),
+            ("x_", "x__", "x_"),
+            ("_", "__", "_"),
+            ("", "", ""),
+        ];
+        for (raw, tilde, legacy) in rows {
+            for (era, expected) in [(Tilde, tilde), (Legacy, legacy)] {
+                assert_eq!(encode_segment(raw, era), expected, "{era:?} {raw}");
+                assert_eq!(
+                    decode_segment(expected, era).as_deref(),
+                    Some(raw),
+                    "{era:?} {raw} back"
+                );
+            }
+        }
+    }
+
+    #[test]
+    fn decodes_tilde_escapes_the_way_vlt_does() {
+        let rows = [
+            ("_", "_"),
+            ("a_", "a_"),
+            ("_z", "_z"),
+            ("_2A", "_2A"),
+            ("_1f", "\u{1f}"),
+            ("_0g", "_0g"),
+            ("___", "__"),
+            ("_d_d", ".."),
+        ];
+        for (encoded, decoded) in rows {
+            assert_eq!(
+                decode_segment(encoded, Tilde).as_deref(),
+                Some(decoded),
+                "{encoded}"
+            );
+        }
+    }
+
+    #[test]
+    fn legacy_decode_validates_every_percent_escape() {
+        for bad in [
+            "%ZZ",
+            "%4",
+            "%C3",
+            "%",
+            "a%2",
+            "%G0",
+            "%ED%A0%80",
+            "%C0%AF",
+            "%80",
+        ] {
+            assert_eq!(decode_segment(bad, Legacy), None, "{bad}");
+        }
+        assert_eq!(decode_segment("%ZZ", Tilde).as_deref(), Some("%ZZ"));
+        assert_eq!(decode_segment("%25%2f%2F", Legacy).as_deref(), Some("%//"));
+        assert_eq!(decode_segment("%C2%A7", Legacy).as_deref(), Some("§"));
+        assert_eq!(decode_segment("a§b@c", Legacy).as_deref(), Some("a/b@c"));
+    }
+
+    #[test]
+    fn file_dep_id_matches_the_lock_spelling() {
+        let rel = vendored_dir_rel(UUID, "@sc/pkg", "1.0.0");
+        assert_eq!(
+            file_dep_id(&rel, Tilde),
+            format!("file~.socket+vendor+npm+{UUID}+@sc+pkg-1.0.0+node__modules+@sc+pkg")
+        );
+        assert_eq!(
+            file_dep_id(&rel, Legacy),
+            format!("file·.socket§vendor§npm§{UUID}§@sc§pkg-1.0.0§node_modules§@sc§pkg")
+        );
+        assert_eq!(file_dep_id(".", Tilde), "file~_d");
+        assert_eq!(file_dep_id(".", Legacy), "file·.");
+    }
+
+    #[test]
+    fn test_decode_vlt_dep_id_store_entries() {
+        let owned = |n: &str, v: &str| Some((n.to_string(), v.to_string()));
+        let rows = [
+            ("··ms@2.1.3", owned("ms", "2.1.3")),
+            (
+                "·npm·@isaacs§string-locale-compare@1.1.0",
+                owned("@isaacs/string-locale-compare", "1.1.0"),
+            ),
+            (
+                "··@sindresorhus§is@4.6.0",
+                owned("@sindresorhus/is", "4.6.0"),
+            ),
+            ("·npm·u@1.0.0%2Bbuild.1", owned("u", "1.0.0+build.1")),
+            (
+                "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+                owned("ms", "2.1.3"),
+            ),
+            ("·npm·x@1.0.0·%E1%B9%97%3A3", owned("x", "1.0.0")),
+            ("~npm~@a+b@1.0.0", owned("@a/b", "1.0.0")),
+            ("~npm~a__b@1.0.0", owned("a_b", "1.0.0")),
+            ("~npm~u@1.0.0_pbuild.1", owned("u", "1.0.0+build.1")),
+            (
+                "~npm~is-number@6.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+                owned("is-number", "6.0.0"),
+            ),
+            (
+                "~npm~react-dom@18.2.0~peer.ace93b147498ef7a",
+                owned("react-dom", "18.2.0"),
+            ),
+            ("~npm~x@1~peer.2", None),
+            ("~npm~x@1.0.0~peer.2", owned("x", "1.0.0")),
+            ("~acme~left-pad@1.3.0", owned("left-pad", "1.3.0")),
+            ("~http_c++127.0.0.1_c4873+~x@1.0.0", owned("x", "1.0.0")),
+            (
+                "~jsr~@jsr+std____semver@1.0.8",
+                owned("@jsr/std__semver", "1.0.8"),
+            ),
+            ("git~github_cuser+proj~v1.0.0", None),
+            ("file~.socket+vendor+npm+x+a-1.0.0.tgz", None),
+            ("remote~https_c++e.com+r-1.0.0.tgz", None),
+            ("workspace~packages+a", None),
+            ("·npm·a@1.0.0%ZZ", None),
+            ("node_modules", None),
+            (".VLT.DELETE.1.~npm~ms@2.1.3", None),
+        ];
+        for (dir, expected) in rows {
+            assert_eq!(decode_vlt_dep_id(dir), expected, "{dir}");
+        }
+    }
+
+    fn options(json: &str) -> Map<String, Value> {
+        serde_json::from_str(json).expect("options json")
+    }
+
+    #[test]
+    fn default_registry_predicate() {
+        let none = None;
+        let empty = options("{}");
+        let scalar = options(r#"{"registry":"http://127.0.0.1:4873"}"#);
+        let scalar_slash = options(r#"{"registry":"http://127.0.0.1:4873/"}"#);
+        let alias = options(r#"{"default-registry-alias":"corp"}"#);
+        let alias_url = options(
+            r#"{"registry":"https://r.example/npm/","registries":{"corp":"https://r.example/npm","acme":"https://acme.example/"}}"#,
+        );
+        let odd_alias = options(r#"{"default-registry-alias":5}"#);
+        let null_alias = options(r#"{"default-registry-alias":null}"#);
+        type Case<'a> = (&'a str, Option<&'a Map<String, Value>>, bool);
+        let cases: Vec<Case<'_>> = vec![
+            ("", none, true),
+            ("npm", none, true),
+            ("npm", Some(&empty), true),
+            ("acme", Some(&empty), false),
+            ("jsr", Some(&empty), false),
+            ("https://npm.jsr.io/", Some(&empty), false),
+            ("http://127.0.0.1:4873/", none, false),
+            ("http://127.0.0.1:4873/", Some(&empty), false),
+            ("http://127.0.0.1:4873/", Some(&scalar), true),
+            ("http://127.0.0.1:4873", Some(&scalar), true),
+            ("http://127.0.0.1:4873/", Some(&scalar_slash), true),
+            ("http://127.0.0.1:4873", Some(&scalar_slash), true),
+            ("http://127.0.0.1:4874/", Some(&scalar), false),
+            ("https://127.0.0.1:4873/", Some(&scalar), false),
+            ("", Some(&scalar), true),
+            ("npm", Some(&scalar), true),
+            ("corp", Some(&alias), true),
+            ("npm", Some(&alias), false),
+            ("", Some(&alias), true),
+            ("corp", Some(&alias_url), true),
+            ("acme", Some(&alias_url), false),
+            ("https://r.example/npm", Some(&alias_url), true),
+            ("https://acme.example/", Some(&alias_url), false),
+            ("npm", Some(&odd_alias), false),
+            ("5", Some(&odd_alias), false),
+            ("npm", Some(&null_alias), true),
+        ];
+        for (segment, opts, expected) in cases {
+            assert_eq!(
+                is_default_registry(segment, opts),
+                expected,
+                "{segment:?} with {opts:?}"
+            );
+        }
+        let not_a_url = options(r#"{"registry":"corp"}"#);
+        assert!(!is_default_registry("corp", Some(&not_a_url)));
+    }
+
+    fn readable(text: &str) -> ParsedLock {
+        match sniff_lock(text) {
+            LockSniff::Readable(lock) => lock,
+            other => panic!("{text:?} sniffed as {other:?}"),
+        }
+    }
+
+    #[test]
+    fn sniff_decides_on_the_raw_version_token() {
+        assert_eq!(readable(r#"{"lockfileVersion":0}"#).version, Some(0));
+        assert_eq!(
+            readable(r#"{"lockfileVersion": 1, "nodes": {}}"#).version,
+            Some(1)
+        );
+        assert_eq!(readable(r#"{"nodes":{}}"#).version, None);
+        assert_eq!(readable(r#"{"lockfileVersion":1}"#).new_id_era(), Tilde);
+        assert_eq!(readable(r#"{"lockfileVersion":0}"#).new_id_era(), Legacy);
+        assert_eq!(readable("{}").new_id_era(), Legacy);
+        for (token, rendered) in [
+            ("1.0", "1.0"),
+            ("1e0", "1.0"),
+            ("1.0000000000000001", "1.0"),
+            ("\"1\"", "\"1\""),
+            ("2", "2"),
+            ("-1", "-1"),
+            ("-0", "-0.0"),
+            ("null", "null"),
+            ("true", "true"),
+        ] {
+            match sniff_lock(&format!("{{\"lockfileVersion\":{token}}}")) {
+                LockSniff::UnsupportedVersion(v) => assert_eq!(v, rendered, "{token}"),
+                other => panic!("{token} sniffed as {other:?}"),
+            }
+        }
+    }
+
+    #[test]
+    fn sniff_refuses_bom_non_objects_and_lone_surrogates() {
+        assert!(matches!(
+            sniff_lock("\u{feff}{\"lockfileVersion\":1}"),
+            LockSniff::Bom
+        ));
+        for text in [
+            "",
+            "[]",
+            "1",
+            "\"x\"",
+            "{",
+            "{\"a\":1,}",
+            r#"{"lockfileVersion":1,"nodes":{"\ud800":[0,"a"]}}"#,
+            r#"{"lockfileVersion":1,"x":"\udc00"}"#,
+        ] {
+            assert!(
+                matches!(sniff_lock(text), LockSniff::NotJsonObject),
+                "{text:?}"
+            );
+        }
+        let paired = readable(r#"{"lockfileVersion":1,"x":"😀"}"#);
+        assert_eq!(paired.json["x"], "\u{1F600}");
+    }
+
+    const CANONICAL: &str = concat!(
+        "{\n",
+        "  \"lockfileVersion\": 1,\n",
+        "  \"options\": {\n",
+        "    \"registries\": {\n",
+        "      \"npm\": \"https://registry.npmjs.org/\"\n",
+        "    }\n",
+        "  },\n",
+        "  \"nodes\": {\n",
+        "    \"~npm~a@1.0.0\": [0,\"a\",\"sha512-a\"],\n",
+        "    \"~npm~b@1.0.0\": [2,\"b\",\"sha512-b\",null,null,null,null,null,{  \"b\": \"cli.js\"}]\n",
+        "  },\n",
+        "  \"edges\": {\n",
+        "    \"file~_d a\": \"prod ^1.0.0 ~npm~a@1.0.0\",\n",
+        "    \"file~_d b\": \"dev >=1 <2 ~npm~b@1.0.0\"\n",
+        "  }\n",
+        "}\n",
+    );
+
+    #[test]
+    fn locates_canonical_sections() {
+        let lines = split_lines(CANONICAL);
+        assert_eq!(lines.join("\n"), CANONICAL);
+        let nodes = nodes_block(&lines).expect("nodes");
+        assert_eq!(nodes, SectionSpan::Block { open: 7, close: 10 });
+        assert_eq!(nodes.entry_lines(), 8..10);
+        let edges = edges_block(&lines).expect("edges");
+        assert_eq!(
+            edges,
+            SectionSpan::Block {
+                open: 11,
+                close: 14
+            }
+        );
+
+        let crlf = CANONICAL.replace('\n', "\r\n");
+        let crlf_lines = split_lines(&crlf);
+        assert_eq!(nodes_block(&crlf_lines), Some(nodes));
+        assert_eq!(edges_block(&crlf_lines), Some(edges));
+        assert_eq!(crlf_lines.join("\n"), crlf);
+
+        let empty = "{\n  \"nodes\": {},\n  \"edges\": {}\n}\n";
+        let lines = split_lines(empty);
+        assert_eq!(nodes_block(&lines), Some(SectionSpan::Inline { line: 1 }));
+        assert_eq!(edges_block(&lines), Some(SectionSpan::Inline { line: 2 }));
+        assert!(SectionSpan::Inline { line: 1 }.entry_lines().is_empty());
+    }
+
+    #[test]
+    fn non_canonical_sections_are_not_found() {
+        for text in [
+            "{\n\t\"nodes\": {\n    \"~npm~a@1.0.0\": [0,\"a\"]\n\t}\n}\n",
+            "{\n  \"nodes\" : {\n    \"~npm~a@1.0.0\": [0,\"a\"]\n  }\n}\n",
+            "{\n    \"nodes\": {\n    \"~npm~a@1.0.0\": [0,\"a\"]\n    }\n}\n",
+            "{\n  \"nodes\": {\n    \"~npm~a@1.0.0\": [0,\"a\"]\n",
+            "{\n  \"nodes\": { \"~npm~a@1.0.0\": [0,\"a\"] },\n}\n",
+            "{\"nodes\":{\"~npm~a@1.0.0\":[0,\"a\"]}}",
+        ] {
+            assert_eq!(nodes_block(&split_lines(text)), None, "{text:?}");
+        }
+    }
+
+    fn node(line: &str) -> NodeLine<'_> {
+        parse_node_line(line).unwrap_or_else(|| panic!("{line:?} is outside the grammar"))
+    }
+
+    #[test]
+    fn node_line_grammar_accepts_vlt_shapes() {
+        let plain = node("    \"~npm~a@1.0.0\": [0,\"a\",\"sha512-x\"],");
+        assert_eq!(plain.entry.key, "~npm~a@1.0.0");
+        assert_eq!(plain.entry.elems, ["0", "\"a\"", "\"sha512-x\""]);
+        assert_eq!(plain.entry.name().as_deref(), Some("a"));
+        assert!(plain.comma && !plain.cr);
+        assert_eq!(
+            plain.entry.entry_text(),
+            "\"~npm~a@1.0.0\": [0,\"a\",\"sha512-x\"]"
+        );
+        assert_eq!(plain.entry.slot(3), None);
+
+        let nested = node(concat!(
+            "    \"~npm~@esbuild+linux-x64@0.19.12\": [1,\"@esbuild/linux-x64\",\"sha512-A==\",",
+            "\"http://127.0.0.1:4873/x.tgz\",null,null,null,{  \"engines\": {    \"node\": \">=12\"  },",
+            "  \"os\": [    \"linux\"  ],  \"cpu\": [    \"x64\"  ]}]\r"
+        ));
+        assert_eq!(nested.entry.elems.len(), 8);
+        assert_eq!(nested.entry.slot(4), Some("null"));
+        assert!(nested.entry.elems[7].starts_with("{  \"engines\""));
+        assert!(!nested.comma && nested.cr);
+
+        let two = node("    \"file~.socket+vendor\": [3,\"x\"]");
+        assert_eq!(two.entry.elems, ["3", "\"x\""]);
+        let nulls = node("    \"~npm~a@1.0.0\": [0,\"a\",null,null,\"node_modules/.vlt/x\"]");
+        assert_eq!(nulls.entry.slot(2), Some("null"));
+        let escaped =
+            node("    \"~npm~a@1.0.0\": [0,\"a\\\"b\",\"s,]\\\\\",null,[1,[2]],{\"k\":[\",\"]}]");
+        assert_eq!(
+            escaped.entry.elems,
+            [
+                "0",
+                "\"a\\\"b\"",
+                "\"s,]\\\\\"",
+                "null",
+                "[1,[2]]",
+                "{\"k\":[\",\"]}"
+            ]
+        );
+        assert_eq!(escaped.entry.name().as_deref(), Some("a\"b"));
+    }
+
+    #[test]
+    fn node_line_grammar_rejects_deviations() {
+        for line in [
+            "     \"~npm~a@1.0.0\": [0,\"a\"]",
+            "   \"~npm~a@1.0.0\": [0,\"a\"]",
+            "\t\"~npm~a@1.0.0\": [0,\"a\"]",
+            "    \"~npm~a@1.0.0\" : [0,\"a\"]",
+            "    \"~npm~a@1.0.0\":[0,\"a\"]",
+            "    \"~npm~a@1.0.0\": [0, \"a\"]",
+            "    \"~npm~a@1.0.0\": [0 ,\"a\"]",
+            "    \"~npm~a@1.0.0\": [ 0,\"a\"]",
+            "    \"~npm~a@1.0.0\": [0,\"a\" ]",
+            "    \"~npm~a@1.0.0\": [0,\"a\"] ",
+            "    \"~npm~a@1.0.0\": [0,\"a\"],,",
+            "    \"~npm~a@1.0.0\": [0,\"a\"],\r\r",
+            "    \"~npm~a@1.0.0\": [0,\"a\",]",
+            "    \"~npm~a@1.0.0\": [0,,\"a\"]",
+            "    \"~npm~a@1.0.0\": []",
+            "    \"~npm~a@1.0.0\": [0]",
+            "    \"~npm~a@1.0.0\": [4,\"a\"]",
+            "    \"~npm~a@1.0.0\": [\"0\",\"a\"]",
+            "    \"~npm~a@1.0.0\": [0.0,\"a\"]",
+            "    \"~npm~a@1.0.0\": [0,null]",
+            "    \"~npm~a@1.0.0\": [0,\"a\",1]",
+            "    \"~npm~a@1.0.0\": [0,\"a\",null,{}]",
+            "    \"~npm~a@1.0.0\": {\"0\":\"a\"}",
+            "    \"~npm~a@1.0.0\": [0,\"a\"",
+            "    \"~npm~a@1.0.0\": [0,\"a\"]]",
+            "    \"~npm~a\\u0040.0.0\": [0,\"a\"]",
+            "    \"~npm~a@1.0.0: [0,\"a\"]",
+            "    ~npm~a@1.0.0: [0,\"a\"]",
+            "",
+            "  },",
+        ] {
+            assert_eq!(parse_node_line(line), None, "{line:?}");
+        }
+    }
+
+    #[test]
+    fn element_splitter_tracks_strings_and_nesting() {
+        assert_eq!(
+            split_tuple_elements("[\"a,b\",\"c\\\"]\",[1,{\"x\":[2,3]}],{}]"),
+            Some(vec!["\"a,b\"", "\"c\\\"]\"", "[1,{\"x\":[2,3]}]", "{}"])
+        );
+        assert_eq!(split_tuple_elements("[]"), Some(vec![]));
+        assert_eq!(
+            split_tuple_elements("[{  \"k\": 1}]"),
+            Some(vec!["{  \"k\": 1}"])
+        );
+        for bad in [
+            "[1, 2]", "[1,2 ]", "[\n1]", "[1,,2]", "[1,]", "{}", "1", "[1", "[1]x", " [1]",
+        ] {
+            assert_eq!(split_tuple_elements(bad), None, "{bad:?}");
+        }
+    }
+
+    #[test]
+    fn renders_tuples_with_slots() {
+        let three = ["0", "\"a\"", "\"sha512-old\""];
+        let four = ["0", "\"a\"", "\"sha512-new\"", "\"https://h/a.tgz\""];
+        let five = [
+            "2",
+            "\"a\"",
+            "\"sha512-new\"",
+            "\"https://h/a.tgz\"",
+            "null",
+            "null",
+            "null",
+            "null",
+            "{  \"a\": \"cli.js\"}",
+        ];
+        let s2 = Some("\"sha512-new\"");
+        let s3 = Some("\"https://h/a.tgz\"");
+        assert_eq!(
+            render_tuple_with_slots(&["0", "\"a\""], s2, s3),
+            "[0,\"a\",\"sha512-new\",\"https://h/a.tgz\"]"
+        );
+        assert_eq!(
+            render_tuple_with_slots(&three, s2, s3),
+            "[0,\"a\",\"sha512-new\",\"https://h/a.tgz\"]"
+        );
+        assert_eq!(
+            render_tuple_with_slots(&five[..6], Some("\"sha512-x\""), Some("\"u\"")),
+            "[2,\"a\",\"sha512-x\",\"u\",null,null]"
+        );
+        let old = Some("\"sha512-old\"");
+        assert_eq!(
+            render_tuple_with_slots(&four, old, None),
+            "[0,\"a\",\"sha512-old\"]"
+        );
+        assert_eq!(
+            render_tuple_with_slots(&five, old, None),
+            "[2,\"a\",\"sha512-old\",null,null,null,null,null,{  \"a\": \"cli.js\"}]"
+        );
+        assert_eq!(render_tuple_with_slots(&four, None, None), "[0,\"a\"]");
+        assert_eq!(
+            render_tuple_with_slots(&four, None, Some("\"rel\"")),
+            "[0,\"a\",null,\"rel\"]"
+        );
+        assert_eq!(
+            render_tuple_with_slots(&three, Some("null"), Some("\"rel\"")),
+            "[0,\"a\",null,\"rel\"]"
+        );
+    }
+
+    #[test]
+    fn entry_text_round_trips_through_lines() {
+        let text = "\"~npm~a@1.0.0\": [0,\"a\",\"sha512-x\"]";
+        let entry = parse_node_entry_text(text).expect("entry text");
+        assert_eq!(entry.entry_text(), text);
+        for (comma, cr) in [(false, false), (true, false), (false, true), (true, true)] {
+            let line = render_entry_line(text, comma, cr);
+            let parsed = node(&line);
+            assert_eq!((parsed.comma, parsed.cr), (comma, cr));
+            assert_eq!(parsed.entry, entry);
+        }
+        assert_eq!(
+            render_entry_line(text, true, true),
+            format!("    {text},\r")
+        );
+        assert_eq!(parse_node_entry_text(&format!("    {text}")), None);
+        assert_eq!(parse_node_entry_text(&format!("{text},")), None);
+        assert_eq!(entry_text("k", "\"v\""), "\"k\": \"v\"");
+    }
+
+    #[test]
+    fn edge_line_grammar() {
+        let line = "    \"~npm~loose-envify@1.4.0 js-tokens\": \"prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0\",\r";
+        let edge = parse_edge_line(line).expect("edge");
+        assert!(edge.comma && edge.cr);
+        assert_eq!(edge.entry.from(), "~npm~loose-envify@1.4.0");
+        assert_eq!(edge.entry.dep_name(), "js-tokens");
+        assert_eq!(edge.entry.edge_type(), "prod");
+        assert_eq!(edge.entry.spec(), "^3.0.0 || ^4.0.0");
+        assert_eq!(edge.entry.target(), "~npm~js-tokens@4.0.0");
+        assert_eq!(
+            edge.entry.entry_text(),
+            "\"~npm~loose-envify@1.4.0 js-tokens\": \"prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0\""
+        );
+        let missing = parse_edge_line("    \"~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc ts-node\": \"peerOptional >=8.5.2 MISSING\"")
+            .expect("missing edge");
+        assert_eq!(missing.entry.target(), "MISSING");
+        assert_eq!(missing.entry.sort_key().to, "MISSING");
+        let alias = parse_edge_line(
+            "    \"file·. my-alias\": \"prod npm:left-pad@^1.3.0 ·npm·left-pad@1.3.0\"",
+        )
+        .expect("alias edge");
+        assert_eq!(alias.entry.dep_name(), "my-alias");
+        assert_eq!(alias.entry.spec(), "npm:left-pad@^1.3.0");
+        let escaped =
+            parse_edge_line("    \"file~_d g\": \"prod github:a/b#\\\"x\\\" git~github_ca+b~x\"")
+                .expect("escaped edge");
+        assert_eq!(escaped.entry.spec(), "github:a/b#\"x\"");
+
+        for bad in [
+            "    \"file~_d a\": \"build ^1 ~npm~a@1.0.0\"",
+            "    \"file~_d a\": \"prod ~npm~a@1.0.0\"",
+            "    \"file~_d a\": \"prod\"",
+            "    \"file~_d\": \"prod ^1 ~npm~a@1.0.0\"",
+            "    \" a\": \"prod ^1 ~npm~a@1.0.0\"",
+            "    \"file~_d a\": [0,\"a\"]",
+            "    \"file~_d a\": \"prod ^1 ~npm~a@1.0.0\" ",
+            "    \"file~_d a\": \"prod ^1 ~npm~a@1.0.0\"x",
+            "    \"file~_d a\" : \"prod ^1 ~npm~a@1.0.0\"",
+        ] {
+            assert_eq!(parse_edge_line(bad), None, "{bad:?}");
+        }
+    }
+
+    #[test]
+    fn importer_sources() {
+        for id in [
+            "file~_d",
+            "file·.",
+            "workspace~packages+a",
+            "workspace·packages§a",
+        ] {
+            assert!(is_importer_dep_id(id), "{id}");
+        }
+        for id in [
+            "file~.",
+            "file·_d",
+            "file~packages+a",
+            "workspace~",
+            "~npm~a@1.0.0",
+            "file~_d~x",
+        ] {
+            assert!(!is_importer_dep_id(id), "{id}");
+        }
+    }
+
+    #[derive(serde::Deserialize)]
+    struct CollationGolden {
+        alphabet: String,
+        nodes: Vec<String>,
+        edges: Vec<(String, String)>,
+    }
+
+    fn collation_golden() -> CollationGolden {
+        let path = std::path::Path::new(env!("CARGO_MANIFEST_DIR"))
+            .join("tests/fixtures/vlt/collation-golden.json");
+        let text = std::fs::read_to_string(&path).expect("read collation golden");
+        serde_json::from_str(&text).expect("parse collation golden")
+    }
+
+    fn scrambled<T: Clone>(items: &[T]) -> Vec<T> {
+        let n = items.len();
+        (0..n).map(|i| items[(i * 7919 + 13) % n].clone()).collect()
+    }
+
+    #[test]
+    fn collation_matches_node_icu_golden() {
+        let golden = collation_golden();
+        let alphabet: Vec<char> = golden.alphabet.chars().collect();
+        assert_eq!(alphabet.len(), 97);
+        for pair in alphabet.windows(2) {
+            let (a, b) = (pair[0].to_string(), pair[1].to_string());
+            assert_eq!(vlt_collate(&a, &b), Some(Ordering::Less), "{a:?} < {b:?}");
+        }
+        for c in &alphabet {
+            assert!(collation_weight(*c).is_some(), "{c:?} in the table");
+        }
+
+        assert!(golden.nodes.len() >= 400);
+        let mut ids = scrambled(&golden.nodes);
+        assert_ne!(ids, golden.nodes);
+        ids.sort_by(|a, b| vlt_collate(a, b).expect("in-table ids"));
+        assert_eq!(ids, golden.nodes);
+        for pair in golden.nodes.windows(2) {
+            assert_eq!(vlt_collate(&pair[0], &pair[1]), Some(Ordering::Less));
+            assert_eq!(vlt_collate(&pair[1], &pair[0]), Some(Ordering::Greater));
+        }
+    }
+
+    #[test]
+    fn edge_comparator_matches_vlt_format_edges_golden() {
+        let golden = collation_golden();
+        assert!(golden.edges.len() >= 100);
+        let texts: Vec<String> = golden
+            .edges
+            .iter()
+            .map(|(k, v)| entry_text(k, &serde_json::to_string(v).expect("json value")))
+            .collect();
+        let entries: Vec<EdgeEntry<'_>> = texts
+            .iter()
+            .map(|t| parse_edge_entry_text(t).unwrap_or_else(|| panic!("{t} is an edge")))
+            .collect();
+        let mut sorted = scrambled(&entries);
+        sorted.sort_by(|a, b| vlt_edge_cmp(a.sort_key(), b.sort_key()).expect("in-table edges"));
+        assert_eq!(sorted, entries);
+        assert!(entries
+            .iter()
+            .any(|e| e.target() == "MISSING" && is_importer_dep_id(e.from())));
+    }
+
+    #[test]
+    fn edge_comparator_keys_and_unknown() {
+        let key = |from, edge_type, to| EdgeSortKey {
+            from,
+            edge_type,
+            to,
+        };
+        let root = key("file~_d", "prod", "~npm~z@1.0.0");
+        let member = key("workspace~packages+a", "dev", "~npm~a@1.0.0");
+        let node = key("~npm~a@1.0.0", "dev", "~npm~a@1.0.0");
+        assert_eq!(vlt_edge_cmp(root, node), Some(Ordering::Less));
+        assert_eq!(vlt_edge_cmp(node, member), Some(Ordering::Greater));
+        assert_eq!(vlt_edge_cmp(root, member), Some(Ordering::Less));
+        assert_eq!(
+            vlt_edge_cmp(
+                key("~npm~a@1.0.0", "peer", "~npm~z@1.0.0"),
+                key("~npm~a@1.0.0", "prod", "~npm~b@1.0.0")
+            ),
+            Some(Ordering::Less)
+        );
+        assert_eq!(
+            vlt_edge_cmp(
+                key("~npm~a@1.0.0", "prod", "MISSING"),
+                key("~npm~a@1.0.0", "prod", "~~a@1.0.0")
+            ),
+            Some(Ordering::Less)
+        );
+        assert_eq!(vlt_edge_cmp(node, node), Some(Ordering::Equal));
+
+        let unicode = key("file~packages+naïve", "prod", "~npm~a@1.0.0");
+        assert_eq!(vlt_edge_cmp(root, unicode), Some(Ordering::Less));
+        assert_eq!(vlt_edge_cmp(unicode, node), None);
+        let unknown_target = key("~npm~a@1.0.0", "dev", "file~ünï");
+        assert_eq!(
+            vlt_edge_cmp(unknown_target, key("~npm~a@1.0.0", "prod", "~npm~b@1.0.0")),
+            Some(Ordering::Less)
+        );
+        assert_eq!(vlt_edge_cmp(unknown_target, node), None);
+    }
+
+    #[test]
+    fn collate_is_unknown_outside_the_table() {
+        // Reachable from real locks: the tilde encoding leaves non-ASCII
+        // raw, so a `file:` or `remote` path with it lands in a node key.
+        let tilde_path = file_dep_id("packages/naïve", Tilde);
+        assert_eq!(tilde_path, "file~packages+naïve");
+        assert_eq!(vlt_collate(&tilde_path, "file~packages+a"), None);
+        assert_eq!(vlt_collate("~npm~a@1.0.0", &tilde_path), None);
+        // The legacy encoding percent-escapes it, so the same path is known.
+        let legacy_path = file_dep_id("packages/naïve", Legacy);
+        assert_eq!(
+            vlt_collate(&legacy_path, "file·packages§a"),
+            Some(Ordering::Greater)
+        );
+        assert_eq!(vlt_collate("a\tb", "a b"), None);
+        assert_eq!(vlt_collate("", ""), Some(Ordering::Equal));
+        assert_eq!(vlt_collate("", "a"), Some(Ordering::Less));
+    }
+
+    #[test]
+    fn collate_primary_then_case() {
+        let cases = [
+            ("a", "A", Ordering::Less),
+            ("aB", "Ab", Ordering::Less),
+            ("ab", "aB", Ordering::Less),
+            ("Ab", "b", Ordering::Less),
+            ("A", "a-b", Ordering::Less),
+            ("~npm~A@1.0.0", "~npm~a@1.0.0-rc.1", Ordering::Less),
+            ("~npm~a_b@1.0.0", "~npm~a-b@1.0.0", Ordering::Less),
+            ("~npm~a__b@1.0.0", "~npm~a_b@1.0.0", Ordering::Less),
+            ("··ms@2.1.3", "·npm·ms@2.1.3", Ordering::Less),
+            ("~npm~z@1.0.0", "file~_d", Ordering::Less),
+            ("file·x", "file~x", Ordering::Less),
+            (
+                "~npm~is-number@7.0.0",
+                "~npm~is-number@7.0.0~peer.1",
+                Ordering::Less,
+            ),
+        ];
+        for (a, b, expected) in cases {
+            assert_eq!(vlt_collate(a, b), Some(expected), "{a} vs {b}");
+            assert_eq!(vlt_collate(b, a), Some(expected.reverse()), "{b} vs {a}");
+        }
+    }
+
+    // Captured with vlt 1.2.0 and rc.14 (design probes peerprobe/t2 and
+    // e1c/base): every entry line is inside the grammar and both sections
+    // are in the order the comparators compute.
+    const CAPTURED_1_2_0: &str = r#"{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react-dom@18.2.0~peer.ace93b147498ef7a": [0,"react-dom","sha512-6IMTriUmvsjHUjNtEDudZfuDQUoWXVxKHhlEGSk81n4YFS+r/Kl99wXiwlVXtPBtJenozv2P+hxDsw9eA7Xo6g==","https://registry.npmjs.org/react-dom/-/react-dom-18.2.0.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==","https://registry.npmjs.org/react/-/react-18.3.1.tgz"],
+    "~npm~scheduler@0.23.2": [0,"scheduler","sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==","https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a react-dom": "prod 18.2.0 ~npm~react-dom@18.2.0~peer.ace93b147498ef7a",
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+b react-dom": "prod 18.2.0 ~npm~react-dom@18.2.0~peer.ace93b147498ef7a",
+    "workspace~packages+b react": "prod 18.3.1 ~npm~react@18.3.1",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react-dom@18.2.0~peer.ace93b147498ef7a react": "peer ^18.2.0 ~npm~react@18.2.0",
+    "~npm~react-dom@18.2.0~peer.ace93b147498ef7a loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~react-dom@18.2.0~peer.ace93b147498ef7a scheduler": "prod ^0.23.0 ~npm~scheduler@0.23.2",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~react@18.3.1 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~scheduler@0.23.2 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0"
+  }
+}
+"#;
+
+    const CAPTURED_RC_14: &str = r#"{
+  "lockfileVersion": 0,
+  "options": {
+    "registries": {}
+  },
+  "nodes": {
+    "·npm·d@1.0.2": [0,"d","sha512-MOqHvMWF9/9MX6nza0KgvFH4HpMU0EF5uUDXqX/BtxtU8NfB0QzRtJ8Oe/6SuS4kbhyzVJwjd97EA4PKrzJ8bw=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·es5-ext@0.10.64": [0,"es5-ext","sha512-p2snDhiLaXe6dahss1LddxqEm+SkuDvV8dnIQG0MWjyHpcMNfXKPE+/Cc0y+PhxJX3A4xGNeFCj5oc0BUh6deg=="],
+    "·npm·es6-iterator@2.0.3": [0,"es6-iterator","sha512-zw4SRzoUkd+cl+ZoE15A9o1oQd920Bb0iOJMQkQhl3jNc03YqVjAhG7scf9C5KWRU/R13Orf588uCC6525o02g=="],
+    "·npm·es6-symbol@3.1.4": [0,"es6-symbol","sha512-U9bFFjX8tFiATgtkJ1zg25+KviIXpgRvRHS8sau3GfhVzThRQrOeksPeT0BWW2MNZs1OEWJ1DPXOQMn0KKRkvg=="],
+    "·npm·esniff@2.0.1": [0,"esniff","sha512-kTUIGKQ/mDPFoJ0oVfcmyJn4iBDRptjNVIzwIFR7tqWXdVI9xfA2RMwY/gbSpJG3lkdWNEjLap/NqVHZiJsdfg=="],
+    "·npm·event-emitter@0.3.5": [0,"event-emitter","sha512-D9rRn9y7kLPnJ+hMq7S/nhvoKwwvVJahBi2BPmx3bvbsEdK3W9ii8cBSGjP+72/LnM4n6fo3+dkCX5FeTQruXA=="],
+    "·npm·ext@1.7.0": [0,"ext","sha512-6hxeJYaL110a9b5TEJSj0gojyHQAmA2ch5Os+ySCiA1QGdS697XWY1pzsrSjqA9LDEEgdB/KypIlR59RcLuHYw=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-bUnDPt4lr1/bnysTf7XK7sg0vTNA27PJ5/BNeRNBoU+h9u5ZY/USq4c/DoM4KWWXt7e08tO7bZbIEavJzyTjUg=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-/fZHSQ+GyiEzhN3UXH54WwVflJQXgI75oNXQa8ikM+rDUrERt2tYR9uliVbPIHf6XrOXwTpw+hkrMsC7MPhPgg=="],
+    "·npm·next-tick@1.1.0": [0,"next-tick","sha512-CXdUiJembsNjuToQvxayPZF9Vqht7hewsvy2sOWafLvi2awflj9mOC6bHIg50orX8IJvWKY9wYQ/zB2kogPslQ=="],
+    "·npm·type@2.7.3": [0,"type","sha512-8j+1QmAbPvLZow5Qpi6NCaN8FB60p/6x8/vfNqOk/hC+HuvFZhL4+WfekuhQLiqFZXOgQdrs3B+XxEmCc6b3FQ=="]
+  },
+  "edges": {
+    "file·. debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "file·. es5-ext": "prod 0.10.64 ·npm·es5-ext@0.10.64",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·d@1.0.2 es5-ext": "prod ^0.10.64 ·npm·es5-ext@0.10.64",
+    "·npm·d@1.0.2 type": "prod ^2.7.2 ·npm·type@2.7.3",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·es5-ext@0.10.64 es6-iterator": "prod ^2.0.3 ·npm·es6-iterator@2.0.3",
+    "·npm·es5-ext@0.10.64 es6-symbol": "prod ^3.1.3 ·npm·es6-symbol@3.1.4",
+    "·npm·es5-ext@0.10.64 esniff": "prod ^2.0.1 ·npm·esniff@2.0.1",
+    "·npm·es5-ext@0.10.64 next-tick": "prod ^1.1.0 ·npm·next-tick@1.1.0",
+    "·npm·es6-iterator@2.0.3 d": "prod 1 ·npm·d@1.0.2",
+    "·npm·es6-iterator@2.0.3 es5-ext": "prod ^0.10.35 ·npm·es5-ext@0.10.64",
+    "·npm·es6-iterator@2.0.3 es6-symbol": "prod ^3.1.1 ·npm·es6-symbol@3.1.4",
+    "·npm·es6-symbol@3.1.4 d": "prod ^1.0.2 ·npm·d@1.0.2",
+    "·npm·es6-symbol@3.1.4 ext": "prod ^1.7.0 ·npm·ext@1.7.0",
+    "·npm·esniff@2.0.1 d": "prod ^1.0.1 ·npm·d@1.0.2",
+    "·npm·esniff@2.0.1 es5-ext": "prod ^0.10.62 ·npm·es5-ext@0.10.64",
+    "·npm·esniff@2.0.1 event-emitter": "prod ^0.3.5 ·npm·event-emitter@0.3.5",
+    "·npm·esniff@2.0.1 type": "prod ^2.7.2 ·npm·type@2.7.3",
+    "·npm·event-emitter@0.3.5 d": "prod 1 ·npm·d@1.0.2",
+    "·npm·event-emitter@0.3.5 es5-ext": "prod ~0.10.14 ·npm·es5-ext@0.10.64",
+    "·npm·ext@1.7.0 type": "prod ^2.7.2 ·npm·type@2.7.3"
+  }
+}
+"#;
+
+    #[test]
+    fn captured_locks_parse_and_are_in_vlt_order() {
+        for (label, text, version) in [("1.2.0", CAPTURED_1_2_0, 1), ("rc.14", CAPTURED_RC_14, 0)] {
+            let lock = readable(text);
+            assert_eq!(lock.version, Some(version), "{label}");
+            let options = lock.options();
+            let lines = split_lines(text);
+
+            let span = nodes_block(&lines).expect("nodes block");
+            let nodes: Vec<NodeLine<'_>> = lines[span.entry_lines()]
+                .iter()
+                .map(|l| parse_node_line(l).unwrap_or_else(|| panic!("{label}: {l}")))
+                .collect();
+            let json_keys: Vec<&str> = lock
+                .nodes()
+                .expect("nodes")
+                .keys()
+                .map(String::as_str)
+                .collect();
+            assert_eq!(
+                nodes.iter().map(|n| n.entry.key).collect::<Vec<_>>(),
+                json_keys
+            );
+            assert!(nodes[..nodes.len() - 1].iter().all(|n| n.comma));
+            assert!(!nodes[nodes.len() - 1].comma);
+            for pair in nodes.windows(2) {
+                assert_eq!(
+                    vlt_collate(pair[0].entry.key, pair[1].entry.key),
+                    Some(Ordering::Less),
+                    "{label}"
+                );
+            }
+            for n in &nodes {
+                let id = split_dep_id(n.entry.key).expect("decodable");
+                let (name, _) = id.registry_identity().expect("registry node");
+                assert_eq!(n.entry.name().as_deref(), Some(name));
+                assert!(
+                    is_default_registry(&id.first, options),
+                    "{label} {}",
+                    n.entry.key
+                );
+                assert_eq!(id.era, DepIdEra::for_lockfile_version(lock.version));
+            }
+
+            let span = edges_block(&lines).expect("edges block");
+            let edges: Vec<EdgeLine<'_>> = lines[span.entry_lines()]
+                .iter()
+                .map(|l| parse_edge_line(l).unwrap_or_else(|| panic!("{label}: {l}")))
+                .collect();
+            assert_eq!(edges.len(), lock.edges().expect("edges").len());
+            for pair in edges.windows(2) {
+                assert_ne!(
+                    vlt_edge_cmp(pair[0].entry.sort_key(), pair[1].entry.sort_key()),
+                    Some(Ordering::Greater),
+                    "{label}: {} before {}",
+                    pair[0].entry.key,
+                    pair[1].entry.key
+                );
+            }
+        }
+    }
+
+    #[test]
+    fn vendored_path_rule() {
+        let dir = |p: &str| p.replace("<u>", UUID);
+        let expect = |path: &str, name: &str, version: &str, shape| {
+            let got = parse_vendored_path(path, name).unwrap_or_else(|| panic!("{path}"));
+            assert_eq!(
+                got,
+                VendoredPath {
+                    uuid: UUID.to_string(),
+                    name: name.to_string(),
+                    version: version.to_string(),
+                    shape,
+                }
+            );
+        };
+        let d = ".socket/vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad";
+        expect(&dir(d), "left-pad", "1.3.0", VendoredShape::Dir);
+        expect(
+            &dir(".socket/vendor/npm/<u>/@sc/pkg-1.0.0-rc.1+b/node_modules/@sc/pkg"),
+            "@sc/pkg",
+            "1.0.0-rc.1+b",
+            VendoredShape::Dir,
+        );
+        expect(
+            &dir(".socket/vendor/npm/<u>/a-1.0.0-1.0.0/node_modules/a-1.0.0"),
+            "a-1.0.0",
+            "1.0.0",
+            VendoredShape::Dir,
+        );
+        expect(
+            &dir(".socket/vendor/npm/<u>/left-pad-1.3.0.tgz"),
+            "left-pad",
+            "1.3.0",
+            VendoredShape::Tgz,
+        );
+        expect(
+            &dir(".socket/vendor/npm/<u>/@sindresorhus/is-4.6.0.tgz"),
+            "@sindresorhus/is",
+            "4.6.0",
+            VendoredShape::Tgz,
+        );
+        expect(
+            &dir(".socket/vendor/npm/<u>/pkg2-1.0.0-2.tgz"),
+            "pkg2",
+            "1.0.0-2",
+            VendoredShape::Tgz,
+        );
+        assert_eq!(
+            parse_vendored_dir_path(&dir(d)).map(|p| p.name),
+            Some("left-pad".to_string())
+        );
+
+        for (path, name) in [
+            (d, "right-pad"),
+            (
+                ".socket/vendor/npm/<u>/@a/pkg-1.0.0/node_modules/@b/pkg",
+                "@a/pkg",
+            ),
+            (
+                ".socket/vendor/npm/<u>/pkg-1.0.0/node_modules/@a/pkg",
+                "@a/pkg",
+            ),
+            (
+                ".socket/vendor/npm/<u>/@a/pkg-1.0.0/node_modules/pkg",
+                "pkg",
+            ),
+            (
+                ".socket/vendor/npm/<u>/sc/pkg-1.0.0/node_modules/sc/pkg",
+                "sc/pkg",
+            ),
+            (
+                ".socket/vendor/npm/<u>/left-pad-1.3/node_modules/left-pad",
+                "left-pad",
+            ),
+            (
+                ".socket/vendor/npm/<u>/left-pad-v1.3.0/node_modules/left-pad",
+                "left-pad",
+            ),
+            (
+                ".socket/vendor/npm/<u>/left-pad/node_modules/left-pad",
+                "left-pad",
+            ),
+            (
+                ".socket/vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad/",
+                "left-pad",
+            ),
+            (
+                ".socket/vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad/x",
+                "left-pad",
+            ),
+            (".socket/vendor/npm/<u>/left-pad-1.3.0/left-pad", "left-pad"),
+            (".socket/vendor/npm/<u>/left-pad-1.3.0", "left-pad"),
+            (".socket/vendor/npm/<u>/@sc/pkg-1.0.0.tgz", "pkg"),
+            (".socket/vendor/npm/<u>/pkg-1.0.0.tgz", "@sc/pkg"),
+            (".socket/vendor/npm/<u>/@x/pkg-1.0.0.tgz", "@sc/pkg"),
+            (".socket/vendor/npm/<u>/left-pad-1.3.tgz", "left-pad"),
+            (".socket/vendor/npm/<u>/x/left-pad-1.3.0.tgz", "left-pad"),
+            (
+                ".socket/vendor/cargo/<u>/left-pad-1.3.0/node_modules/left-pad",
+                "left-pad",
+            ),
+            (
+                "./.socket/vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad",
+                "left-pad",
+            ),
+            (".socket/vendor/npm/<u>/.a-1.0.0/node_modules/.a", ".a"),
+            (
+                "vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad",
+                "left-pad",
+            ),
+        ] {
+            assert_eq!(
+                parse_vendored_path(&dir(path), name),
+                None,
+                "{path} as {name}"
+            );
+        }
+        let upper = d.replace("<u>", &UUID.to_uppercase());
+        assert_eq!(parse_vendored_path(&upper, "left-pad"), None);
+        assert_eq!(
+            parse_vendored_path(&d.replace("<u>", "not-a-uuid"), "left-pad"),
+            None
+        );
+    }
+
+    #[test]
+    fn vendored_dir_rel_is_the_d19_layout() {
+        for (name, version) in [
+            ("left-pad", "1.3.0"),
+            ("@sc/pkg", "1.0.0-rc.1"),
+            ("a-1.0.0", "1.0.0"),
+        ] {
+            let rel = vendored_dir_rel(UUID, name, version);
+            let parsed = parse_vendored_dir_path(&rel).expect("round trip");
+            assert_eq!(
+                (parsed.name.as_str(), parsed.version.as_str()),
+                (name, version)
+            );
+            assert_eq!(parse_vendored_path(&rel, name), Some(parsed));
+            let tilde = file_dep_id(&rel, Tilde);
+            let legacy = file_dep_id(&rel, Legacy);
+            for id in [tilde, legacy] {
+                let split = split_dep_id(&id).expect("file id");
+                assert_eq!((split.kind, split.first.as_str()), (File, rel.as_str()));
+            }
+        }
+        assert_eq!(
+            vendored_dir_rel(UUID, "left-pad", "1.3.0"),
+            format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad")
+        );
+    }
+
+    #[test]
+    fn vlt_file_names_are_pinned() {
+        assert_eq!(VLT_LOCK, "vlt-lock.json");
+        assert_eq!(VLT_CONFIG, "vlt.json");
+        assert_eq!(VLT_HIDDEN_LOCK_REL, "node_modules/.vlt-lock.json");
+        assert_eq!(VLT_STORE_DIR, "node_modules/.vlt");
+        assert_eq!(VLT_LEGACY_WORKSPACES, "vlt-workspaces.json");
+        assert_eq!(
+            VLT_SETUP_MARKERS,
+            [
+                "vlt-lock.json",
+                "vlt.json",
+                "node_modules/.vlt-lock.json",
+                "node_modules/.vlt"
+            ]
+        );
+    }
+}
diff --git a/crates/socket-patch-core/src/vex/discover/testing/golden.rs b/crates/socket-patch-core/src/vex/discover/testing/golden.rs
index 1f84a93d..6aa760e3 100644
--- a/crates/socket-patch-core/src/vex/discover/testing/golden.rs
+++ b/crates/socket-patch-core/src/vex/discover/testing/golden.rs
@@ -276,6 +276,8 @@ fn corpus() -> Vec<CorpusEntry> {
         let name = top.file_name().unwrap().to_string_lossy().into_owned();
         match name.as_str() {
             GOLDEN_DIR => {}
+            // Tables and store listings, not projects.
+            "vlt" | "vlt-trees" | "vendor" => {}
             // Redirect cases: `<eco>/<flavor>/<case>/{input,expected}` —
             // each side is a project root (nested files included).
             "redirect" => {
@@ -477,6 +479,18 @@ mod tests {
         );
     }
 
+    #[test]
+    fn table_fixture_dirs_are_not_corpus_projects() {
+        let corpus = corpus();
+        for skipped in ["vlt/", "vlt-trees/", "vendor/"] {
+            assert!(
+                corpus.iter().all(|(name, _, _)| !name.starts_with(skipped)),
+                "{skipped} fixtures joined the corpus"
+            );
+        }
+        assert!(fixtures_root().join("vlt/collation-golden.json").is_file());
+    }
+
     #[test]
     fn families_group_redirect_cases_by_ecosystem() {
         assert_eq!(family("redirect/npm/bun/case/input"), "redirect-npm");
diff --git a/crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json b/crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json
new file mode 100644
index 00000000..35d1d9b3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json
@@ -0,0 +1,1675 @@
+{
+  "alphabet": " _-,;:!?.·'\"()[]{}§@*/\\&#%`^+<=>|~$0123456789aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ",
+  "nodes": [
+    "··@a§b@1.0.0",
+    "··@A§b@1.0.0",
+    "··@a§b@1.0.0-rc.1",
+    "··@A§b@1.0.0-rc.1",
+    "··@a§b@1.0.0%2Bbuild.1",
+    "··@A§b@1.0.0%2Bbuild.1",
+    "··@a§b@10.0.0",
+    "··@A§b@10.0.0",
+    "··@a§b@2.1.3",
+    "··@A§b@2.1.3",
+    "··@isaacs§string-locale-compare@1.0.0",
+    "··@isaacs§string-locale-compare@1.0.0-rc.1",
+    "··@isaacs§string-locale-compare@1.0.0%2Bbuild.1",
+    "··@isaacs§string-locale-compare@10.0.0",
+    "··@isaacs§string-locale-compare@2.1.3",
+    "··@jsr§std__semver@1.0.0",
+    "··@jsr§std__semver@1.0.0-rc.1",
+    "··@jsr§std__semver@1.0.0%2Bbuild.1",
+    "··@jsr§std__semver@10.0.0",
+    "··@jsr§std__semver@2.1.3",
+    "··@scope_x§bar@1.0.0",
+    "··@scope_x§bar@1.0.0-rc.1",
+    "··@scope_x§bar@1.0.0%2Bbuild.1",
+    "··@scope_x§bar@10.0.0",
+    "··@scope_x§bar@2.1.3",
+    "··@scope§bar-baz@1.0.0",
+    "··@scope§bar-baz@1.0.0-rc.1",
+    "··@scope§bar-baz@1.0.0%2Bbuild.1",
+    "··@scope§bar-baz@10.0.0",
+    "··@scope§bar-baz@2.1.3",
+    "··@scope§bar@1.0.0",
+    "··@scope§bar@1.0.0-rc.1",
+    "··@scope§bar@1.0.0%2Bbuild.1",
+    "··@scope§bar@10.0.0",
+    "··@scope§bar@2.1.3",
+    "··@sindresorhus§is@1.0.0",
+    "··@sindresorhus§is@1.0.0-rc.1",
+    "··@sindresorhus§is@1.0.0%2Bbuild.1",
+    "··@sindresorhus§is@10.0.0",
+    "··@sindresorhus§is@2.1.3",
+    "··0x@1.0.0",
+    "··0x@1.0.0-rc.1",
+    "··0x@1.0.0%2Bbuild.1",
+    "··0x@10.0.0",
+    "··0x@2.1.3",
+    "··a__b@1.0.0",
+    "··a__b@1.0.0-rc.1",
+    "··a__b@1.0.0%2Bbuild.1",
+    "··a__b@10.0.0",
+    "··a__b@2.1.3",
+    "··a_b@1.0.0",
+    "··a_b@1.0.0-rc.1",
+    "··a_b@1.0.0%2Bbuild.1",
+    "··a_b@10.0.0",
+    "··a_b@2.1.3",
+    "··a-b@1.0.0",
+    "··a-b@1.0.0-rc.1",
+    "··a-b@1.0.0%2Bbuild.1",
+    "··a-b@10.0.0",
+    "··a-b@2.1.3",
+    "··a.b@1.0.0",
+    "··a.b@1.0.0-rc.1",
+    "··a.b@1.0.0%2Bbuild.1",
+    "··a.b@10.0.0",
+    "··a.b@2.1.3",
+    "··a@1.0.0",
+    "··A@1.0.0",
+    "··a@1.0.0-rc.1",
+    "··A@1.0.0-rc.1",
+    "··a@1.0.0%2Bbuild.1",
+    "··A@1.0.0%2Bbuild.1",
+    "··a@10.0.0",
+    "··A@10.0.0",
+    "··a@2.1.3",
+    "··A@2.1.3",
+    "··a~b@1.0.0",
+    "··a~b@1.0.0-rc.1",
+    "··a~b@1.0.0%2Bbuild.1",
+    "··a~b@10.0.0",
+    "··a~b@2.1.3",
+    "··a1@1.0.0",
+    "··a1@1.0.0-rc.1",
+    "··a1@1.0.0%2Bbuild.1",
+    "··a1@10.0.0",
+    "··a1@2.1.3",
+    "··ab@1.0.0",
+    "··aB@1.0.0",
+    "··Ab@1.0.0",
+    "··ab@1.0.0-rc.1",
+    "··aB@1.0.0-rc.1",
+    "··Ab@1.0.0-rc.1",
+    "··ab@1.0.0%2Bbuild.1",
+    "··aB@1.0.0%2Bbuild.1",
+    "··Ab@1.0.0%2Bbuild.1",
+    "··ab@10.0.0",
+    "··aB@10.0.0",
+    "··Ab@10.0.0",
+    "··ab@2.1.3",
+    "··aB@2.1.3",
+    "··Ab@2.1.3",
+    "··is-number@1.0.0",
+    "··is-number@1.0.0-rc.1",
+    "··is-number@1.0.0%2Bbuild.1",
+    "··is-number@10.0.0",
+    "··is-number@2.1.3",
+    "··JSONStream@1.0.0",
+    "··JSONStream@1.0.0-rc.1",
+    "··JSONStream@1.0.0%2Bbuild.1",
+    "··JSONStream@10.0.0",
+    "··JSONStream@2.1.3",
+    "··left-pad@1.0.0",
+    "··left-pad@1.0.0-rc.1",
+    "··left-pad@1.0.0%2Bbuild.1",
+    "··left-pad@10.0.0",
+    "··left-pad@2.1.3",
+    "··ms@1.0.0",
+    "··MS@1.0.0",
+    "··ms@1.0.0-rc.1",
+    "··MS@1.0.0-rc.1",
+    "··ms@1.0.0%2Bbuild.1",
+    "··MS@1.0.0%2Bbuild.1",
+    "··ms@10.0.0",
+    "··MS@10.0.0",
+    "··ms@2.1.3",
+    "··MS@2.1.3",
+    "··react-dom@1.0.0",
+    "··react-dom@1.0.0-rc.1",
+    "··react-dom@1.0.0%2Bbuild.1",
+    "··react-dom@10.0.0",
+    "··react-dom@2.1.3",
+    "··react@1.0.0",
+    "··react@1.0.0-rc.1",
+    "··react@1.0.0%2Bbuild.1",
+    "··react@10.0.0",
+    "··react@2.1.3",
+    "··use-sync-external-store@1.0.0",
+    "··use-sync-external-store@1.0.0-rc.1",
+    "··use-sync-external-store@1.0.0%2Bbuild.1",
+    "··use-sync-external-store@10.0.0",
+    "··use-sync-external-store@2.1.3",
+    "··z@1.0.0",
+    "··z@1.0.0-rc.1",
+    "··z@1.0.0%2Bbuild.1",
+    "··z@10.0.0",
+    "··z@2.1.3",
+    "··zz@1.0.0",
+    "··zz@1.0.0-rc.1",
+    "··zz@1.0.0%2Bbuild.1",
+    "··zz@10.0.0",
+    "··zz@2.1.3",
+    "·acme·@a§b@1.0.0",
+    "·acme·@a§b@10.0.0",
+    "·acme·@A§b@2.1.3",
+    "·acme·@isaacs§string-locale-compare@2.1.3",
+    "·acme·@jsr§std__semver@1.0.0-rc.1",
+    "·acme·@scope_x§bar@1.0.0",
+    "·acme·@scope_x§bar@10.0.0",
+    "·acme·@scope§bar-baz@1.0.0-rc.1",
+    "·acme·@scope§bar@1.0.0%2Bbuild.1",
+    "·acme·@sindresorhus§is@1.0.0%2Bbuild.1",
+    "·acme·0x@2.1.3",
+    "·acme·a__b@2.1.3",
+    "·acme·a_b@1.0.0",
+    "·acme·a_b@10.0.0",
+    "·acme·a-b@1.0.0-rc.1",
+    "·acme·a.b@1.0.0%2Bbuild.1",
+    "·acme·A@1.0.0-rc.1",
+    "·acme·a@1.0.0%2Bbuild.1",
+    "·acme·a~b@1.0.0",
+    "·acme·a~b@10.0.0",
+    "·acme·a1@1.0.0-rc.1",
+    "·acme·ab@1.0.0",
+    "·acme·Ab@1.0.0%2Bbuild.1",
+    "·acme·ab@10.0.0",
+    "·acme·aB@2.1.3",
+    "·acme·is-number@1.0.0%2Bbuild.1",
+    "·acme·JSONStream@1.0.0%2Bbuild.1",
+    "·acme·left-pad@2.1.3",
+    "·acme·MS@1.0.0%2Bbuild.1",
+    "·acme·ms@2.1.3",
+    "·acme·react-dom@1.0.0-rc.1",
+    "·acme·react@1.0.0",
+    "·acme·react@10.0.0",
+    "·acme·use-sync-external-store@1.0.0-rc.1",
+    "·acme·z@1.0.0-rc.1",
+    "·acme·zz@1.0.0",
+    "·acme·zz@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·@a§b@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·@A§b@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·@isaacs§string-locale-compare@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·@isaacs§string-locale-compare@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·@jsr§std__semver@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·@scope_x§bar@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·@scope§bar-baz@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·@scope§bar@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·@sindresorhus§is@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·0x@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·0x@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·a__b@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·a__b@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·a_b@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·a-b@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·a.b@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·A@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·a@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·a~b@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·a1@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·aB@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·ab@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·aB@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·Ab@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·is-number@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·JSONStream@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·left-pad@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·left-pad@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·ms@1.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·ms@10.0.0",
+    "·http%3A§§127.0.0.1%3A4873§·MS@2.1.3",
+    "·http%3A§§127.0.0.1%3A4873§·react-dom@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·react@1.0.0-rc.1",
+    "·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·z@1.0.0%2Bbuild.1",
+    "·http%3A§§127.0.0.1%3A4873§·zz@1.0.0-rc.1",
+    "·npm·@a§b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@A§b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@A§b@1.0.0%2Bbuild.1",
+    "·npm·@a§b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@A§b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@a§b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@A§b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@a§b@2.1.3",
+    "·npm·@isaacs§string-locale-compare@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@isaacs§string-locale-compare@1.0.0%2Bbuild.1",
+    "·npm·@isaacs§string-locale-compare@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@isaacs§string-locale-compare@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@jsr§std__semver@1.0.0",
+    "·npm·@jsr§std__semver@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@jsr§std__semver@10.0.0",
+    "·npm·@jsr§std__semver@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope_x§bar@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope_x§bar@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@scope_x§bar@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope_x§bar@2.1.3",
+    "·npm·@scope§bar-baz@1.0.0",
+    "·npm·@scope§bar-baz@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope§bar-baz@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@scope§bar-baz@10.0.0",
+    "·npm·@scope§bar-baz@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope§bar@1.0.0-rc.1",
+    "·npm·@scope§bar@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@scope§bar@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@scope§bar@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@sindresorhus§is@1.0.0-rc.1",
+    "·npm·@sindresorhus§is@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·@sindresorhus§is@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·@sindresorhus§is@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·0x@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·0x@1.0.0%2Bbuild.1",
+    "·npm·0x@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·0x@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a__b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a__b@1.0.0%2Bbuild.1",
+    "·npm·a__b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a__b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a_b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a_b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a_b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a_b@2.1.3",
+    "·npm·a-b@1.0.0",
+    "·npm·a-b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a-b@10.0.0",
+    "·npm·a-b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a.b@1.0.0-rc.1",
+    "·npm·a.b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a.b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a.b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·A@1.0.0",
+    "·npm·a@1.0.0-rc.1",
+    "·npm·a@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·A@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·A@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·A@10.0.0",
+    "·npm·a@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·A@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a~b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a~b@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a~b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a~b@2.1.3",
+    "·npm·a1@1.0.0",
+    "·npm·a1@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·a1@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·a1@10.0.0",
+    "·npm·a1@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·Ab@1.0.0-rc.1",
+    "·npm·ab@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·aB@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·Ab@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·aB@1.0.0%2Bbuild.1",
+    "·npm·ab@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·aB@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·Ab@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·ab@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·Ab@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·ab@2.1.3",
+    "·npm·is-number@1.0.0-rc.1",
+    "·npm·is-number@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·is-number@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·is-number@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·JSONStream@1.0.0-rc.1",
+    "·npm·JSONStream@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·JSONStream@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·JSONStream@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·left-pad@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·left-pad@1.0.0%2Bbuild.1",
+    "·npm·left-pad@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·left-pad@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·MS@1.0.0-rc.1",
+    "·npm·ms@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·MS@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·ms@1.0.0%2Bbuild.1",
+    "·npm·ms@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·MS@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·ms@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·MS@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·react-dom@1.0.0",
+    "·npm·react-dom@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·react-dom@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·react-dom@10.0.0",
+    "·npm·react-dom@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·react@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·react@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·react@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·react@2.1.3",
+    "·npm·use-sync-external-store@1.0.0",
+    "·npm·use-sync-external-store@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·use-sync-external-store@10.0.0",
+    "·npm·use-sync-external-store@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·z@1.0.0",
+    "·npm·z@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·z@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·z@10.0.0",
+    "·npm·z@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·zz@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·zz@1.0.0%2Bbuild.1·%E1%B9%97%3A3",
+    "·npm·zz@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·zz@2.1.3",
+    "~acme~@A+b@1.0.0_pbuild.1",
+    "~acme~@A+b@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@a+b@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@A+b@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~@A+b@1.0.0~peer.2",
+    "~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~@A+b@10.0.0~peer.2",
+    "~acme~@a+b@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~@a+b@2.1.3",
+    "~acme~@a+b@2.1.3~peer.2",
+    "~acme~@isaacs+string-locale-compare@1.0.0_pbuild.1",
+    "~acme~@isaacs+string-locale-compare@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@isaacs+string-locale-compare@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~@isaacs+string-locale-compare@1.0.0~peer.2",
+    "~acme~@isaacs+string-locale-compare@10.0.0~peer.2",
+    "~acme~@jsr+std____semver@1.0.0",
+    "~acme~@jsr+std____semver@1.0.0_pbuild.1~peer.2",
+    "~acme~@jsr+std____semver@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@jsr+std____semver@10.0.0",
+    "~acme~@jsr+std____semver@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@jsr+std____semver@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~@scope__x+bar@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@scope__x+bar@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~@scope__x+bar@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~@scope__x+bar@2.1.3",
+    "~acme~@scope__x+bar@2.1.3~peer.2",
+    "~acme~@scope+bar-baz@1.0.0",
+    "~acme~@scope+bar-baz@1.0.0_pbuild.1~peer.2",
+    "~acme~@scope+bar-baz@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@scope+bar-baz@10.0.0",
+    "~acme~@scope+bar-baz@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@scope+bar-baz@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~@scope+bar@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~@scope+bar@1.0.0-rc.1",
+    "~acme~@scope+bar@1.0.0-rc.1~peer.2",
+    "~acme~@scope+bar@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~@sindresorhus+is@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~@sindresorhus+is@1.0.0-rc.1",
+    "~acme~@sindresorhus+is@1.0.0-rc.1~peer.2",
+    "~acme~@sindresorhus+is@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~0x@1.0.0_pbuild.1",
+    "~acme~0x@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~0x@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~0x@1.0.0~peer.2",
+    "~acme~0x@10.0.0~peer.2",
+    "~acme~a____b@1.0.0_pbuild.1",
+    "~acme~a____b@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a____b@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~a____b@1.0.0~peer.2",
+    "~acme~a____b@10.0.0~peer.2",
+    "~acme~a__b@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a__b@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~a__b@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~a__b@2.1.3",
+    "~acme~a__b@2.1.3~peer.2",
+    "~acme~a_tb@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a_tb@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~a_tb@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~a_tb@2.1.3",
+    "~acme~a_tb@2.1.3~peer.2",
+    "~acme~a-b@1.0.0",
+    "~acme~a-b@1.0.0_pbuild.1~peer.2",
+    "~acme~a-b@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a-b@10.0.0",
+    "~acme~a-b@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a-b@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~a.b@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~a.b@1.0.0-rc.1",
+    "~acme~a.b@1.0.0-rc.1~peer.2",
+    "~acme~a.b@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~A@1.0.0",
+    "~acme~A@1.0.0_pbuild.1~peer.2",
+    "~acme~a@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~a@1.0.0-rc.1",
+    "~acme~a@1.0.0-rc.1~peer.2",
+    "~acme~A@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~A@10.0.0",
+    "~acme~A@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~A@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~a1@1.0.0",
+    "~acme~a1@1.0.0_pbuild.1~peer.2",
+    "~acme~a1@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a1@10.0.0",
+    "~acme~a1@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~a1@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~aB@1.0.0_pbuild.1",
+    "~acme~aB@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~Ab@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~Ab@1.0.0-rc.1",
+    "~acme~ab@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~Ab@1.0.0-rc.1~peer.2",
+    "~acme~aB@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~aB@1.0.0~peer.2",
+    "~acme~ab@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~aB@10.0.0~peer.2",
+    "~acme~ab@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~ab@2.1.3",
+    "~acme~Ab@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~ab@2.1.3~peer.2",
+    "~acme~is-number@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~is-number@1.0.0-rc.1",
+    "~acme~is-number@1.0.0-rc.1~peer.2",
+    "~acme~is-number@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~JSONStream@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~JSONStream@1.0.0-rc.1",
+    "~acme~JSONStream@1.0.0-rc.1~peer.2",
+    "~acme~JSONStream@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~left-pad@1.0.0_pbuild.1",
+    "~acme~left-pad@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~left-pad@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~left-pad@1.0.0~peer.2",
+    "~acme~left-pad@10.0.0~peer.2",
+    "~acme~ms@1.0.0_pbuild.1",
+    "~acme~ms@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~MS@1.0.0_pbuild.1~peer.dbd5ca8b03a66489",
+    "~acme~MS@1.0.0-rc.1",
+    "~acme~MS@1.0.0-rc.1~peer.2",
+    "~acme~ms@1.0.0-rc.1~peer.dbd5ca8b03a66489",
+    "~acme~ms@1.0.0~peer.2",
+    "~acme~ms@10.0.0~peer.2",
+    "~acme~MS@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~react-dom@1.0.0",
+    "~acme~react-dom@1.0.0_pbuild.1~peer.2",
+    "~acme~react-dom@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~react-dom@10.0.0",
+    "~acme~react-dom@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~react-dom@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~react@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~react@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~react@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~react@2.1.3",
+    "~acme~react@2.1.3~peer.2",
+    "~acme~use-sync-external-store@1.0.0",
+    "~acme~use-sync-external-store@1.0.0_pbuild.1~peer.2",
+    "~acme~use-sync-external-store@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~use-sync-external-store@10.0.0",
+    "~acme~use-sync-external-store@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~use-sync-external-store@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~z@1.0.0",
+    "~acme~z@1.0.0_pbuild.1~peer.2",
+    "~acme~z@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~z@10.0.0",
+    "~acme~z@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~z@2.1.3~peer.dbd5ca8b03a66489",
+    "~acme~zz@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+    "~acme~zz@1.0.0~peer.dbd5ca8b03a66489",
+    "~acme~zz@10.0.0~peer.dbd5ca8b03a66489",
+    "~acme~zz@2.1.3",
+    "~acme~zz@2.1.3~peer.2",
+    "~https_c++registry.example.com+npm+~@A+b@1.0.0",
+    "~https_c++registry.example.com+npm+~@a+b@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~@A+b@10.0.0",
+    "~https_c++registry.example.com+npm+~@isaacs+string-locale-compare@1.0.0",
+    "~https_c++registry.example.com+npm+~@isaacs+string-locale-compare@10.0.0",
+    "~https_c++registry.example.com+npm+~@jsr+std____semver@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~@scope__x+bar@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~@scope+bar-baz@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~@scope+bar@2.1.3",
+    "~https_c++registry.example.com+npm+~@sindresorhus+is@2.1.3",
+    "~https_c++registry.example.com+npm+~0x@1.0.0",
+    "~https_c++registry.example.com+npm+~0x@10.0.0",
+    "~https_c++registry.example.com+npm+~a____b@1.0.0",
+    "~https_c++registry.example.com+npm+~a____b@10.0.0",
+    "~https_c++registry.example.com+npm+~a__b@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~a_tb@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~a-b@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~a.b@2.1.3",
+    "~https_c++registry.example.com+npm+~A@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~a@2.1.3",
+    "~https_c++registry.example.com+npm+~a1@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~aB@1.0.0",
+    "~https_c++registry.example.com+npm+~ab@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~aB@10.0.0",
+    "~https_c++registry.example.com+npm+~Ab@2.1.3",
+    "~https_c++registry.example.com+npm+~is-number@2.1.3",
+    "~https_c++registry.example.com+npm+~JSONStream@2.1.3",
+    "~https_c++registry.example.com+npm+~left-pad@1.0.0",
+    "~https_c++registry.example.com+npm+~left-pad@10.0.0",
+    "~https_c++registry.example.com+npm+~ms@1.0.0",
+    "~https_c++registry.example.com+npm+~ms@10.0.0",
+    "~https_c++registry.example.com+npm+~MS@2.1.3",
+    "~https_c++registry.example.com+npm+~react-dom@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~react@1.0.0-rc.1",
+    "~https_c++registry.example.com+npm+~use-sync-external-store@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~z@1.0.0_pbuild.1",
+    "~https_c++registry.example.com+npm+~zz@1.0.0-rc.1",
+    "~jsr~@a+b@1.0.0",
+    "~jsr~@a+b@10.0.0",
+    "~jsr~@A+b@2.1.3",
+    "~jsr~@isaacs+string-locale-compare@2.1.3",
+    "~jsr~@jsr+std____semver@1.0.0-rc.1",
+    "~jsr~@scope__x+bar@1.0.0",
+    "~jsr~@scope__x+bar@10.0.0",
+    "~jsr~@scope+bar-baz@1.0.0-rc.1",
+    "~jsr~@scope+bar@1.0.0_pbuild.1",
+    "~jsr~@sindresorhus+is@1.0.0_pbuild.1",
+    "~jsr~0x@2.1.3",
+    "~jsr~a____b@2.1.3",
+    "~jsr~a__b@1.0.0",
+    "~jsr~a__b@10.0.0",
+    "~jsr~a_tb@1.0.0",
+    "~jsr~a_tb@10.0.0",
+    "~jsr~a-b@1.0.0-rc.1",
+    "~jsr~a.b@1.0.0_pbuild.1",
+    "~jsr~a@1.0.0_pbuild.1",
+    "~jsr~A@1.0.0-rc.1",
+    "~jsr~a1@1.0.0-rc.1",
+    "~jsr~ab@1.0.0",
+    "~jsr~Ab@1.0.0_pbuild.1",
+    "~jsr~ab@10.0.0",
+    "~jsr~aB@2.1.3",
+    "~jsr~is-number@1.0.0_pbuild.1",
+    "~jsr~JSONStream@1.0.0_pbuild.1",
+    "~jsr~left-pad@2.1.3",
+    "~jsr~MS@1.0.0_pbuild.1",
+    "~jsr~ms@2.1.3",
+    "~jsr~react-dom@1.0.0-rc.1",
+    "~jsr~react@1.0.0",
+    "~jsr~react@10.0.0",
+    "~jsr~use-sync-external-store@1.0.0-rc.1",
+    "~jsr~z@1.0.0-rc.1",
+    "~jsr~zz@1.0.0",
+    "~jsr~zz@10.0.0",
+    "~npm~@a+b@1.0.0",
+    "~npm~@A+b@1.0.0",
+    "~npm~@a+b@1.0.0_pbuild.1",
+    "~npm~@A+b@1.0.0_pbuild.1",
+    "~npm~@a+b@1.0.0-rc.1",
+    "~npm~@A+b@1.0.0-rc.1",
+    "~npm~@a+b@10.0.0",
+    "~npm~@A+b@10.0.0",
+    "~npm~@a+b@2.1.3",
+    "~npm~@A+b@2.1.3",
+    "~npm~@isaacs+string-locale-compare@1.0.0",
+    "~npm~@isaacs+string-locale-compare@1.0.0_pbuild.1",
+    "~npm~@isaacs+string-locale-compare@1.0.0-rc.1",
+    "~npm~@isaacs+string-locale-compare@10.0.0",
+    "~npm~@isaacs+string-locale-compare@2.1.3",
+    "~npm~@jsr+std____semver@1.0.0",
+    "~npm~@jsr+std____semver@1.0.0_pbuild.1",
+    "~npm~@jsr+std____semver@1.0.0-rc.1",
+    "~npm~@jsr+std____semver@10.0.0",
+    "~npm~@jsr+std____semver@2.1.3",
+    "~npm~@scope__x+bar@1.0.0",
+    "~npm~@scope__x+bar@1.0.0_pbuild.1",
+    "~npm~@scope__x+bar@1.0.0-rc.1",
+    "~npm~@scope__x+bar@10.0.0",
+    "~npm~@scope__x+bar@2.1.3",
+    "~npm~@scope+bar-baz@1.0.0",
+    "~npm~@scope+bar-baz@1.0.0_pbuild.1",
+    "~npm~@scope+bar-baz@1.0.0-rc.1",
+    "~npm~@scope+bar-baz@10.0.0",
+    "~npm~@scope+bar-baz@2.1.3",
+    "~npm~@scope+bar@1.0.0",
+    "~npm~@scope+bar@1.0.0_pbuild.1",
+    "~npm~@scope+bar@1.0.0-rc.1",
+    "~npm~@scope+bar@10.0.0",
+    "~npm~@scope+bar@2.1.3",
+    "~npm~@sindresorhus+is@1.0.0",
+    "~npm~@sindresorhus+is@1.0.0_pbuild.1",
+    "~npm~@sindresorhus+is@1.0.0-rc.1",
+    "~npm~@sindresorhus+is@10.0.0",
+    "~npm~@sindresorhus+is@2.1.3",
+    "~npm~0x@1.0.0",
+    "~npm~0x@1.0.0_pbuild.1",
+    "~npm~0x@1.0.0-rc.1",
+    "~npm~0x@10.0.0",
+    "~npm~0x@2.1.3",
+    "~npm~a____b@1.0.0",
+    "~npm~a____b@1.0.0_pbuild.1",
+    "~npm~a____b@1.0.0-rc.1",
+    "~npm~a____b@10.0.0",
+    "~npm~a____b@2.1.3",
+    "~npm~a__b@1.0.0",
+    "~npm~a__b@1.0.0_pbuild.1",
+    "~npm~a__b@1.0.0-rc.1",
+    "~npm~a__b@10.0.0",
+    "~npm~a__b@2.1.3",
+    "~npm~a_tb@1.0.0",
+    "~npm~a_tb@1.0.0_pbuild.1",
+    "~npm~a_tb@1.0.0-rc.1",
+    "~npm~a_tb@10.0.0",
+    "~npm~a_tb@2.1.3",
+    "~npm~a-b@1.0.0",
+    "~npm~a-b@1.0.0_pbuild.1",
+    "~npm~a-b@1.0.0-rc.1",
+    "~npm~a-b@10.0.0",
+    "~npm~a-b@2.1.3",
+    "~npm~a.b@1.0.0",
+    "~npm~a.b@1.0.0_pbuild.1",
+    "~npm~a.b@1.0.0-rc.1",
+    "~npm~a.b@10.0.0",
+    "~npm~a.b@2.1.3",
+    "~npm~a@1.0.0",
+    "~npm~A@1.0.0",
+    "~npm~a@1.0.0_pbuild.1",
+    "~npm~A@1.0.0_pbuild.1",
+    "~npm~a@1.0.0-rc.1",
+    "~npm~A@1.0.0-rc.1",
+    "~npm~a@10.0.0",
+    "~npm~A@10.0.0",
+    "~npm~a@2.1.3",
+    "~npm~A@2.1.3",
+    "~npm~a1@1.0.0",
+    "~npm~a1@1.0.0_pbuild.1",
+    "~npm~a1@1.0.0-rc.1",
+    "~npm~a1@10.0.0",
+    "~npm~a1@2.1.3",
+    "~npm~ab@1.0.0",
+    "~npm~aB@1.0.0",
+    "~npm~Ab@1.0.0",
+    "~npm~ab@1.0.0_pbuild.1",
+    "~npm~aB@1.0.0_pbuild.1",
+    "~npm~Ab@1.0.0_pbuild.1",
+    "~npm~ab@1.0.0-rc.1",
+    "~npm~aB@1.0.0-rc.1",
+    "~npm~Ab@1.0.0-rc.1",
+    "~npm~ab@10.0.0",
+    "~npm~aB@10.0.0",
+    "~npm~Ab@10.0.0",
+    "~npm~ab@2.1.3",
+    "~npm~aB@2.1.3",
+    "~npm~Ab@2.1.3",
+    "~npm~is-number@1.0.0",
+    "~npm~is-number@1.0.0_pbuild.1",
+    "~npm~is-number@1.0.0-rc.1",
+    "~npm~is-number@10.0.0",
+    "~npm~is-number@2.1.3",
+    "~npm~JSONStream@1.0.0",
+    "~npm~JSONStream@1.0.0_pbuild.1",
+    "~npm~JSONStream@1.0.0-rc.1",
+    "~npm~JSONStream@10.0.0",
+    "~npm~JSONStream@2.1.3",
+    "~npm~left-pad@1.0.0",
+    "~npm~left-pad@1.0.0_pbuild.1",
+    "~npm~left-pad@1.0.0-rc.1",
+    "~npm~left-pad@10.0.0",
+    "~npm~left-pad@2.1.3",
+    "~npm~ms@1.0.0",
+    "~npm~MS@1.0.0",
+    "~npm~ms@1.0.0_pbuild.1",
+    "~npm~MS@1.0.0_pbuild.1",
+    "~npm~ms@1.0.0-rc.1",
+    "~npm~MS@1.0.0-rc.1",
+    "~npm~ms@10.0.0",
+    "~npm~MS@10.0.0",
+    "~npm~ms@2.1.3",
+    "~npm~MS@2.1.3",
+    "~npm~react-dom@1.0.0",
+    "~npm~react-dom@1.0.0_pbuild.1",
+    "~npm~react-dom@1.0.0-rc.1",
+    "~npm~react-dom@10.0.0",
+    "~npm~react-dom@2.1.3",
+    "~npm~react@1.0.0",
+    "~npm~react@1.0.0_pbuild.1",
+    "~npm~react@1.0.0-rc.1",
+    "~npm~react@10.0.0",
+    "~npm~react@2.1.3",
+    "~npm~use-sync-external-store@1.0.0",
+    "~npm~use-sync-external-store@1.0.0_pbuild.1",
+    "~npm~use-sync-external-store@1.0.0-rc.1",
+    "~npm~use-sync-external-store@10.0.0",
+    "~npm~use-sync-external-store@2.1.3",
+    "~npm~z@1.0.0",
+    "~npm~z@1.0.0_pbuild.1",
+    "~npm~z@1.0.0-rc.1",
+    "~npm~z@10.0.0",
+    "~npm~z@2.1.3",
+    "~npm~zz@1.0.0",
+    "~npm~zz@1.0.0_pbuild.1",
+    "~npm~zz@1.0.0-rc.1",
+    "~npm~zz@10.0.0",
+    "~npm~zz@2.1.3",
+    "file·.",
+    "file·..",
+    "file·..§x",
+    "file·.§packages§a",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§@isaacs§string-locale-compare-1.0.0%2Bbuild.1§node_modules§@isaacs§string-locale-compare",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§@scope§bar-10.0.0§node_modules§@scope§bar",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§0x-1.0.0§node_modules§0x",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§a_b-1.0.0-rc.1§node_modules§a_b",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§a-1.0.0§node_modules§a",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§a1-10.0.0§node_modules§a1",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§aB-2.1.3§node_modules§aB",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§MS-1.0.0%2Bbuild.1§node_modules§MS",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§react-2.1.3§node_modules§react",
+    "file·.socket§vendor§npm§0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b§use-sync-external-store-1.0.0-rc.1§node_modules§use-sync-external-store",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§@a§b-1.0.0%2Bbuild.1§node_modules§@a§b",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§@scope§bar-baz-1.0.0§node_modules§@scope§bar-baz",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§@sindresorhus§is-2.1.3§node_modules§@sindresorhus§is",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§a__b-1.0.0%2Bbuild.1§node_modules§a__b",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§A-1.0.0-rc.1§node_modules§A",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§a~b-1.0.0§node_modules§a~b",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§Ab-10.0.0§node_modules§Ab",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§is-number-1.0.0-rc.1§node_modules§is-number",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§left-pad-10.0.0§node_modules§left-pad",
+    "file·.socket§vendor§npm§80630680-4da6-45f9-bba8-b888e0ffd58c§z-2.1.3§node_modules§z",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§@A§b-2.1.3§node_modules§@A§b",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§@jsr§std__semver-10.0.0§node_modules§@jsr§std__semver",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§@scope_x§bar-1.0.0-rc.1§node_modules§@scope_x§bar",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§a-b-1.0.0§node_modules§a-b",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§a.b-2.1.3§node_modules§a.b",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§ab-1.0.0%2Bbuild.1§node_modules§ab",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§JSONStream-1.0.0§node_modules§JSONStream",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§ms-1.0.0-rc.1§node_modules§ms",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§react-dom-1.0.0%2Bbuild.1§node_modules§react-dom",
+    "file·.socket§vendor§npm§ffffffff-2222-4333-8444-555555555555§zz-10.0.0§node_modules§zz",
+    "file·a%20b§c",
+    "file·vendor§x",
+    "file·vendor§x.tgz",
+    "file~_d",
+    "file~._d",
+    "file~..+x",
+    "file~.+packages+a",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+@isaacs+string-locale-compare-1.0.0_pbuild.1+node__modules+@isaacs+string-locale-compare",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+@scope+bar-10.0.0+node__modules+@scope+bar",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+0x-1.0.0+node__modules+0x",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+a__b-1.0.0-rc.1+node__modules+a__b",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+a-1.0.0+node__modules+a",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+a1-10.0.0+node__modules+a1",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+aB-2.1.3+node__modules+aB",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+MS-1.0.0_pbuild.1+node__modules+MS",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+react-2.1.3+node__modules+react",
+    "file~.socket+vendor+npm+0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b+use-sync-external-store-1.0.0-rc.1+node__modules+use-sync-external-store",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+@a+b-1.0.0_pbuild.1+node__modules+@a+b",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+@scope+bar-baz-1.0.0+node__modules+@scope+bar-baz",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+@sindresorhus+is-2.1.3+node__modules+@sindresorhus+is",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+a____b-1.0.0_pbuild.1+node__modules+a____b",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+a_tb-1.0.0+node__modules+a_tb",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+A-1.0.0-rc.1+node__modules+A",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+Ab-10.0.0+node__modules+Ab",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+is-number-1.0.0-rc.1+node__modules+is-number",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+left-pad-10.0.0+node__modules+left-pad",
+    "file~.socket+vendor+npm+80630680-4da6-45f9-bba8-b888e0ffd58c+z-2.1.3+node__modules+z",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+@A+b-2.1.3+node__modules+@A+b",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+@jsr+std____semver-10.0.0+node__modules+@jsr+std____semver",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+@scope__x+bar-1.0.0-rc.1+node__modules+@scope__x+bar",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+a-b-1.0.0+node__modules+a-b",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+a.b-2.1.3+node__modules+a.b",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+ab-1.0.0_pbuild.1+node__modules+ab",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+JSONStream-1.0.0+node__modules+JSONStream",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+ms-1.0.0-rc.1+node__modules+ms",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+react-dom-1.0.0_pbuild.1+node__modules+react-dom",
+    "file~.socket+vendor+npm+ffffffff-2222-4333-8444-555555555555+zz-10.0.0+node__modules+zz",
+    "file~a_sb+c",
+    "file~vendor+x",
+    "file~vendor+x.tgz",
+    "git·git%2Bssh%3A§§git@host§x.git·main",
+    "git·github%3Auser§proj·semver%3A%5E1",
+    "git·github%3Auser§proj·v1.0.0",
+    "git~git_pssh_c++git@host+x.git~main",
+    "git~github_cuser+proj~semver_c^1",
+    "git~github_cuser+proj~v1.0.0",
+    "remote·http%3A§§h§x.tgz",
+    "remote·https%3A§§e.com§r-1.0.0.tgz",
+    "remote·https%3A§§e.com§R-1.0.0.tgz",
+    "remote~http_c++h+x.tgz",
+    "remote~https_c++e.com+r-1.0.0.tgz",
+    "remote~https_c++e.com+R-1.0.0.tgz",
+    "workspace·apps§web-1",
+    "workspace·packages§a",
+    "workspace·packages§b",
+    "workspace·packages§my_lib",
+    "workspace~apps+web-1",
+    "workspace~packages+a",
+    "workspace~packages+b",
+    "workspace~packages+my__lib"
+  ],
+  "edges": [
+    [
+      "file·. dep-0-1",
+      "dev ^1.0.0 || ^2 ··@isaacs§string-locale-compare@10.0.0"
+    ],
+    [
+      "file·. dep-0-2",
+      "optional 1.0.0 ··@scope§bar-baz@1.0.0-rc.1"
+    ],
+    [
+      "file·. dep-0-3",
+      "peer ^1.0.0 || ^2 ··@sindresorhus§is@2.1.3"
+    ],
+    [
+      "file·. dep-0-0",
+      "prod 1.0.0 MISSING"
+    ],
+    [
+      "file~_d dep-1-0",
+      "dev 1.0.0 ··@A§b@10.0.0"
+    ],
+    [
+      "file~_d dep-1-1",
+      "optional ^1.0.0 || ^2 ··@scope_x§bar@1.0.0"
+    ],
+    [
+      "file~_d dep-1-2",
+      "peer 1.0.0 ··@scope§bar@10.0.0"
+    ],
+    [
+      "file~_d dep-1-3",
+      "peerOptional ^1.0.0 || ^2 ··a__b@1.0.0-rc.1"
+    ],
+    [
+      "workspace·apps§web-1 dep-2-0",
+      "optional 1.0.0 ··@isaacs§string-locale-compare@2.1.3"
+    ],
+    [
+      "workspace·apps§web-1 dep-2-1",
+      "peer ^1.0.0 || ^2 ··@scope§bar-baz@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace·apps§web-1 dep-2-2",
+      "peerOptional 1.0.0 ··0x@1.0.0"
+    ],
+    [
+      "workspace·apps§web-1 dep-2-3",
+      "prod ^1.0.0 || ^2 ··a_b@10.0.0"
+    ],
+    [
+      "workspace·packages§a dep-3-3",
+      "dev ^1.0.0 || ^2 ··a.b@1.0.0"
+    ],
+    [
+      "workspace·packages§a dep-3-0",
+      "peer 1.0.0 ··@scope_x§bar@1.0.0-rc.1"
+    ],
+    [
+      "workspace·packages§a dep-3-1",
+      "peerOptional ^1.0.0 || ^2 ··@scope§bar@2.1.3"
+    ],
+    [
+      "workspace·packages§a dep-3-2",
+      "prod 1.0.0 ··a__b@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace·packages§b dep-4-2",
+      "dev 1.0.0 ··a_b@2.1.3"
+    ],
+    [
+      "workspace·packages§b dep-4-3",
+      "optional ^1.0.0 || ^2 ··a@1.0.0-rc.1"
+    ],
+    [
+      "workspace·packages§b dep-4-0",
+      "peerOptional 1.0.0 ··@scope§bar-baz@10.0.0"
+    ],
+    [
+      "workspace·packages§b dep-4-1",
+      "prod ^1.0.0 || ^2 ··0x@1.0.0-rc.1"
+    ],
+    [
+      "workspace·packages§my_lib dep-5-1",
+      "dev ^1.0.0 || ^2 ··a__b@10.0.0"
+    ],
+    [
+      "workspace·packages§my_lib dep-5-2",
+      "optional 1.0.0 ··a.b@1.0.0-rc.1"
+    ],
+    [
+      "workspace·packages§my_lib dep-5-3",
+      "peer ^1.0.0 || ^2 ··A@2.1.3"
+    ],
+    [
+      "workspace·packages§my_lib dep-5-0",
+      "prod 1.0.0 ··@sindresorhus§is@1.0.0"
+    ],
+    [
+      "workspace~apps+web-1 dep-6-0",
+      "dev 1.0.0 ··0x@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace~apps+web-1 dep-6-1",
+      "optional ^1.0.0 || ^2 ··a-b@1.0.0"
+    ],
+    [
+      "workspace~apps+web-1 dep-6-2",
+      "peer 1.0.0 ··A@1.0.0-rc.1"
+    ],
+    [
+      "workspace~apps+web-1 dep-6-3",
+      "peerOptional ^1.0.0 || ^2 ··a1@1.0.0-rc.1"
+    ],
+    [
+      "workspace~packages+a dep-7-0",
+      "optional 1.0.0 ··a__b@2.1.3"
+    ],
+    [
+      "workspace~packages+a dep-7-1",
+      "peer ^1.0.0 || ^2 ··a.b@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace~packages+a dep-7-2",
+      "peerOptional 1.0.0 ··a~b@1.0.0"
+    ],
+    [
+      "workspace~packages+a dep-7-3",
+      "prod ^1.0.0 || ^2 ··ab@1.0.0-rc.1"
+    ],
+    [
+      "workspace~packages+b dep-8-3",
+      "dev ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "workspace~packages+b dep-8-0",
+      "peer 1.0.0 ··a-b@1.0.0-rc.1"
+    ],
+    [
+      "workspace~packages+b dep-8-1",
+      "peerOptional ^1.0.0 || ^2 ··a@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace~packages+b dep-8-2",
+      "prod 1.0.0 ··a1@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace~packages+my__lib dep-9-2",
+      "dev 1.0.0 MISSING"
+    ],
+    [
+      "workspace~packages+my__lib dep-9-3",
+      "optional ^1.0.0 || ^2 ··is-number@1.0.0%2Bbuild.1"
+    ],
+    [
+      "workspace~packages+my__lib dep-9-0",
+      "peerOptional 1.0.0 ··a.b@10.0.0"
+    ],
+    [
+      "workspace~packages+my__lib dep-9-1",
+      "prod ^1.0.0 || ^2 ··a~b@1.0.0-rc.1"
+    ],
+    [
+      "··@a§b@1.0.0 dep-10-1",
+      "dev ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "··@a§b@1.0.0 dep-10-2",
+      "optional 1.0.0 ··Ab@10.0.0"
+    ],
+    [
+      "··@a§b@1.0.0 dep-10-3",
+      "peer ^1.0.0 || ^2 ··JSONStream@2.1.3"
+    ],
+    [
+      "··@a§b@1.0.0 dep-10-0",
+      "prod 1.0.0 ··A@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··@jsr§std__semver@1.0.0%2Bbuild.1 dep-11-0",
+      "dev 1.0.0 MISSING"
+    ],
+    [
+      "··@jsr§std__semver@1.0.0%2Bbuild.1 dep-11-1",
+      "optional ^1.0.0 || ^2 ··Ab@1.0.0-rc.1"
+    ],
+    [
+      "··@jsr§std__semver@1.0.0%2Bbuild.1 dep-11-2",
+      "peer 1.0.0 ··is-number@10.0.0"
+    ],
+    [
+      "··@jsr§std__semver@1.0.0%2Bbuild.1 dep-11-3",
+      "peerOptional ^1.0.0 || ^2 ··MS@1.0.0"
+    ],
+    [
+      "··@scope§bar@2.1.3 dep-12-0",
+      "optional 1.0.0 ··a1@2.1.3"
+    ],
+    [
+      "··@scope§bar@2.1.3 dep-12-1",
+      "peer ^1.0.0 || ^2 ··ab@2.1.3"
+    ],
+    [
+      "··@scope§bar@2.1.3 dep-12-2",
+      "peerOptional 1.0.0 ··left-pad@1.0.0"
+    ],
+    [
+      "··@scope§bar@2.1.3 dep-12-3",
+      "prod ^1.0.0 || ^2 ··ms@2.1.3"
+    ],
+    [
+      "··a_b@1.0.0-rc.1 dep-13-3",
+      "dev ^1.0.0 || ^2 ··react@1.0.0"
+    ],
+    [
+      "··a_b@1.0.0-rc.1 dep-13-0",
+      "peer 1.0.0 ··ab@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··a_b@1.0.0-rc.1 dep-13-1",
+      "peerOptional ^1.0.0 || ^2 ··is-number@2.1.3"
+    ],
+    [
+      "··a_b@1.0.0-rc.1 dep-13-2",
+      "prod 1.0.0 ··ms@1.0.0-rc.1"
+    ],
+    [
+      "··A@1.0.0-rc.1 dep-14-2",
+      "dev 1.0.0 ··MS@2.1.3"
+    ],
+    [
+      "··A@1.0.0-rc.1 dep-14-3",
+      "optional ^1.0.0 || ^2 ··use-sync-external-store@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··A@1.0.0-rc.1 dep-14-0",
+      "peerOptional 1.0.0 ··aB@2.1.3"
+    ],
+    [
+      "··A@1.0.0-rc.1 dep-14-1",
+      "prod ^1.0.0 || ^2 ··left-pad@1.0.0-rc.1"
+    ],
+    [
+      "··ab@1.0.0 dep-15-1",
+      "dev ^1.0.0 || ^2 ··MS@1.0.0-rc.1"
+    ],
+    [
+      "··ab@1.0.0 dep-15-2",
+      "optional 1.0.0 ··react@1.0.0-rc.1"
+    ],
+    [
+      "··ab@1.0.0 dep-15-3",
+      "peer ^1.0.0 || ^2 ··z@2.1.3"
+    ],
+    [
+      "··ab@1.0.0 dep-15-0",
+      "prod 1.0.0 ··JSONStream@1.0.0"
+    ],
+    [
+      "··is-number@1.0.0%2Bbuild.1 dep-16-0",
+      "dev 1.0.0 ··left-pad@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··is-number@1.0.0%2Bbuild.1 dep-16-1",
+      "optional ^1.0.0 || ^2 ··react-dom@1.0.0"
+    ],
+    [
+      "··is-number@1.0.0%2Bbuild.1 dep-16-2",
+      "peer 1.0.0 ··use-sync-external-store@10.0.0"
+    ],
+    [
+      "··is-number@1.0.0%2Bbuild.1 dep-16-3",
+      "peerOptional ^1.0.0 || ^2 ·acme·@a§b@10.0.0"
+    ],
+    [
+      "··ms@1.0.0%2Bbuild.1 dep-17-0",
+      "optional 1.0.0 ··ms@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··ms@1.0.0%2Bbuild.1 dep-17-1",
+      "peer ^1.0.0 || ^2 ··react@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··ms@1.0.0%2Bbuild.1 dep-17-2",
+      "peerOptional 1.0.0 ··zz@1.0.0"
+    ],
+    [
+      "··ms@1.0.0%2Bbuild.1 dep-17-3",
+      "prod ^1.0.0 || ^2 ·acme·@scope§bar@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··use-sync-external-store@1.0.0-rc.1 dep-18-3",
+      "dev ^1.0.0 || ^2 ·acme·a.b@1.0.0%2Bbuild.1"
+    ],
+    [
+      "··use-sync-external-store@1.0.0-rc.1 dep-18-0",
+      "peer 1.0.0 ··react-dom@1.0.0-rc.1"
+    ],
+    [
+      "··use-sync-external-store@1.0.0-rc.1 dep-18-1",
+      "peerOptional ^1.0.0 || ^2 ··use-sync-external-store@2.1.3"
+    ],
+    [
+      "··use-sync-external-store@1.0.0-rc.1 dep-18-2",
+      "prod 1.0.0 ·acme·@A§b@2.1.3"
+    ],
+    [
+      "·acme·@isaacs§string-locale-compare@2.1.3 dep-19-2",
+      "dev 1.0.0 ·acme·@sindresorhus§is@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·acme·@isaacs§string-locale-compare@2.1.3 dep-19-3",
+      "optional ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "·acme·@isaacs§string-locale-compare@2.1.3 dep-19-0",
+      "peerOptional 1.0.0 ··react@10.0.0"
+    ],
+    [
+      "·acme·@isaacs§string-locale-compare@2.1.3 dep-19-1",
+      "prod ^1.0.0 || ^2 ··zz@1.0.0-rc.1"
+    ],
+    [
+      "·acme·a1@1.0.0-rc.1 dep-20-1",
+      "dev ^1.0.0 || ^2 ·acme·@isaacs§string-locale-compare@2.1.3"
+    ],
+    [
+      "·acme·a1@1.0.0-rc.1 dep-20-2",
+      "optional 1.0.0 MISSING"
+    ],
+    [
+      "·acme·a1@1.0.0-rc.1 dep-20-3",
+      "peer ^1.0.0 || ^2 ·acme·ms@2.1.3"
+    ],
+    [
+      "·acme·a1@1.0.0-rc.1 dep-20-0",
+      "prod 1.0.0 ··z@1.0.0"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0 dep-21-0",
+      "dev 1.0.0 ··zz@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0 dep-21-1",
+      "optional ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0 dep-21-2",
+      "peer 1.0.0 ·acme·ab@10.0.0"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0 dep-21-3",
+      "peerOptional ^1.0.0 || ^2 ·acme·zz@10.0.0"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·A@1.0.0%2Bbuild.1 dep-22-0",
+      "optional 1.0.0 MISSING"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·A@1.0.0%2Bbuild.1 dep-22-1",
+      "peer ^1.0.0 || ^2 ·acme·a@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·A@1.0.0%2Bbuild.1 dep-22-2",
+      "peerOptional 1.0.0 ·acme·react-dom@1.0.0-rc.1"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·A@1.0.0%2Bbuild.1 dep-22-3",
+      "prod ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·@scope_x§bar@1.0.0-rc.1"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1 dep-23-3",
+      "dev ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·a__b@10.0.0"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1 dep-23-0",
+      "peer 1.0.0 ·acme·a__b@2.1.3"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1 dep-23-1",
+      "peerOptional ^1.0.0 || ^2 ·acme·aB@2.1.3"
+    ],
+    [
+      "·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1 dep-23-2",
+      "prod 1.0.0 ·http%3A§§127.0.0.1%3A4873§·@A§b@1.0.0"
+    ],
+    [
+      "·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-24-2",
+      "dev 1.0.0 ·http%3A§§127.0.0.1%3A4873§·@scope§bar-baz@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-24-3",
+      "optional ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·a1@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-24-0",
+      "peerOptional 1.0.0 ·acme·a~b@1.0.0"
+    ],
+    [
+      "·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-24-1",
+      "prod ^1.0.0 || ^2 ·acme·react@1.0.0"
+    ],
+    [
+      "·npm·@sindresorhus§is@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-25-1",
+      "dev ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·@a§b@1.0.0-rc.1"
+    ],
+    [
+      "·npm·@sindresorhus§is@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-25-2",
+      "optional 1.0.0 ·http%3A§§127.0.0.1%3A4873§·a_b@1.0.0-rc.1"
+    ],
+    [
+      "·npm·@sindresorhus§is@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-25-3",
+      "peer ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·left-pad@1.0.0"
+    ],
+    [
+      "·npm·@sindresorhus§is@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-25-0",
+      "prod 1.0.0 ·acme·is-number@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-26-0",
+      "dev 1.0.0 ·acme·react@10.0.0"
+    ],
+    [
+      "·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-26-1",
+      "optional ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·@scope§bar@2.1.3"
+    ],
+    [
+      "·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-26-2",
+      "peer 1.0.0 ·http%3A§§127.0.0.1%3A4873§·aB@1.0.0"
+    ],
+    [
+      "·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-26-3",
+      "peerOptional ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·use-sync-external-store@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·a~b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-27-0",
+      "optional 1.0.0 ·http%3A§§127.0.0.1%3A4873§·@A§b@10.0.0"
+    ],
+    [
+      "·npm·a~b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-27-1",
+      "peer ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·a-b@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·a~b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-27-2",
+      "peerOptional 1.0.0 ·http%3A§§127.0.0.1%3A4873§·left-pad@10.0.0"
+    ],
+    [
+      "·npm·a~b@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-27-3",
+      "prod ^1.0.0 || ^2 ·npm·@A§b@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-28-3",
+      "dev ^1.0.0 || ^2 ·npm·@isaacs§string-locale-compare@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-28-0",
+      "peer 1.0.0 ·http%3A§§127.0.0.1%3A4873§·@sindresorhus§is@2.1.3"
+    ],
+    [
+      "·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-28-1",
+      "peerOptional ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·ab@1.0.0-rc.1"
+    ],
+    [
+      "·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-28-2",
+      "prod 1.0.0 ·http%3A§§127.0.0.1%3A4873§·z@1.0.0%2Bbuild.1"
+    ],
+    [
+      "·npm·MS@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-29-2",
+      "dev 1.0.0 ·npm·@a§b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "·npm·MS@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-29-3",
+      "optional ^1.0.0 || ^2 ·npm·@scope_x§bar@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "·npm·MS@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-29-0",
+      "peerOptional 1.0.0 ·http%3A§§127.0.0.1%3A4873§·a.b@2.1.3"
+    ],
+    [
+      "·npm·MS@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms dep-29-1",
+      "prod ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·ms@1.0.0"
+    ],
+    [
+      "·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-30-1",
+      "dev ^1.0.0 || ^2 ·http%3A§§127.0.0.1%3A4873§·zz@1.0.0-rc.1"
+    ],
+    [
+      "·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-30-2",
+      "optional 1.0.0 ·npm·@jsr§std__semver@1.0.0"
+    ],
+    [
+      "·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-30-3",
+      "peer ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3 dep-30-0",
+      "prod 1.0.0 ·http%3A§§127.0.0.1%3A4873§·aB@10.0.0"
+    ],
+    [
+      "~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489 dep-31-0",
+      "dev 1.0.0 ·http%3A§§127.0.0.1%3A4873§·ms@10.0.0"
+    ],
+    [
+      "~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489 dep-31-1",
+      "optional ^1.0.0 || ^2 ·npm·@A§b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489 dep-31-2",
+      "peer 1.0.0 MISSING"
+    ],
+    [
+      "~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489 dep-31-3",
+      "peerOptional ^1.0.0 || ^2 ·npm·@sindresorhus§is@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~@scope__x+bar@1.0.0~peer.dbd5ca8b03a66489 dep-32-0",
+      "optional 1.0.0 ·npm·@a§b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~@scope__x+bar@1.0.0~peer.dbd5ca8b03a66489 dep-32-1",
+      "peer ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "~acme~@scope__x+bar@1.0.0~peer.dbd5ca8b03a66489 dep-32-2",
+      "peerOptional 1.0.0 ·npm·@scope§bar@1.0.0-rc.1"
+    ],
+    [
+      "~acme~@scope__x+bar@1.0.0~peer.dbd5ca8b03a66489 dep-32-3",
+      "prod ^1.0.0 || ^2 ·npm·a__b@1.0.0%2Bbuild.1"
+    ],
+    [
+      "~acme~@sindresorhus+is@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-33-3",
+      "dev ^1.0.0 || ^2 ·npm·a-b@1.0.0"
+    ],
+    [
+      "~acme~@sindresorhus+is@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-33-0",
+      "peer 1.0.0 MISSING"
+    ],
+    [
+      "~acme~@sindresorhus+is@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-33-1",
+      "peerOptional ^1.0.0 || ^2 ·npm·@scope_x§bar@2.1.3"
+    ],
+    [
+      "~acme~@sindresorhus+is@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-33-2",
+      "prod 1.0.0 ·npm·@sindresorhus§is@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~a_tb@1.0.0~peer.dbd5ca8b03a66489 dep-34-2",
+      "dev 1.0.0 ·npm·a__b@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~a_tb@1.0.0~peer.dbd5ca8b03a66489 dep-34-3",
+      "optional ^1.0.0 || ^2 ·npm·a.b@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~a_tb@1.0.0~peer.dbd5ca8b03a66489 dep-34-0",
+      "peerOptional 1.0.0 ·npm·@jsr§std__semver@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~a_tb@1.0.0~peer.dbd5ca8b03a66489 dep-34-1",
+      "prod ^1.0.0 || ^2 ·npm·@scope§bar@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~a@1.0.0-rc.1 dep-35-1",
+      "dev ^1.0.0 || ^2 ·npm·0x@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~a@1.0.0-rc.1 dep-35-2",
+      "optional 1.0.0 ·npm·a-b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~a@1.0.0-rc.1 dep-35-3",
+      "peer ^1.0.0 || ^2 ·npm·A@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~a@1.0.0-rc.1 dep-35-0",
+      "prod 1.0.0 ·npm·@scope§bar-baz@1.0.0"
+    ],
+    [
+      "~acme~ab@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-36-0",
+      "dev 1.0.0 ·npm·@scope§bar@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~ab@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-36-1",
+      "optional ^1.0.0 || ^2 ·npm·a__b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~ab@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-36-2",
+      "peer 1.0.0 ·npm·a.b@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~ab@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-36-3",
+      "peerOptional ^1.0.0 || ^2 ·npm·a~b@2.1.3"
+    ],
+    [
+      "~acme~JSONStream@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-37-0",
+      "optional 1.0.0 ·npm·0x@1.0.0%2Bbuild.1"
+    ],
+    [
+      "~acme~JSONStream@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-37-1",
+      "peer ^1.0.0 || ^2 ·npm·a-b@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~acme~JSONStream@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-37-2",
+      "peerOptional 1.0.0 ·npm·A@10.0.0"
+    ],
+    [
+      "~acme~JSONStream@2.1.3~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-37-3",
+      "prod ^1.0.0 || ^2 ·npm·ab@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~react-dom@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-38-3",
+      "dev ^1.0.0 || ^2 ·npm·ab@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~react-dom@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-38-0",
+      "peer 1.0.0 ·npm·a_b@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~react-dom@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-38-1",
+      "peerOptional ^1.0.0 || ^2 ·npm·A@1.0.0"
+    ],
+    [
+      "~acme~react-dom@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-38-2",
+      "prod 1.0.0 ·npm·a1@1.0.0"
+    ],
+    [
+      "~acme~z@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-39-2",
+      "dev 1.0.0 ·npm·aB@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~z@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-39-3",
+      "optional ^1.0.0 || ^2 ·npm·is-number@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~acme~z@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-39-0",
+      "peerOptional 1.0.0 ·npm·a-b@10.0.0"
+    ],
+    [
+      "~acme~z@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number dep-39-1",
+      "prod ^1.0.0 || ^2 ·npm·a@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~@scope+bar@2.1.3 dep-40-1",
+      "dev ^1.0.0 || ^2 ·npm·a1@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~@scope+bar@2.1.3 dep-40-2",
+      "optional 1.0.0 ·npm·aB@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~@scope+bar@2.1.3 dep-40-3",
+      "peer ^1.0.0 || ^2 ·npm·left-pad@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~@scope+bar@2.1.3 dep-40-0",
+      "prod 1.0.0 ·npm·a@1.0.0-rc.1"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~is-number@2.1.3 dep-41-0",
+      "dev 1.0.0 ·npm·A@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~is-number@2.1.3 dep-41-1",
+      "optional ^1.0.0 || ^2 ·npm·Ab@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~is-number@2.1.3 dep-41-2",
+      "peer 1.0.0 ·npm·JSONStream@1.0.0-rc.1"
+    ],
+    [
+      "~https_c++registry.example.com+npm+~is-number@2.1.3 dep-41-3",
+      "peerOptional ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "~jsr~@scope__x+bar@1.0.0 dep-42-0",
+      "optional 1.0.0 ·npm·a1@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~jsr~@scope__x+bar@1.0.0 dep-42-1",
+      "peer ^1.0.0 || ^2 ·npm·Ab@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~jsr~@scope__x+bar@1.0.0 dep-42-2",
+      "peerOptional 1.0.0 MISSING"
+    ],
+    [
+      "~jsr~@scope__x+bar@1.0.0 dep-42-3",
+      "prod ^1.0.0 || ^2 ·npm·react-dom@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~jsr~Ab@1.0.0_pbuild.1 dep-43-3",
+      "dev ^1.0.0 || ^2 ·npm·use-sync-external-store@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~jsr~Ab@1.0.0_pbuild.1 dep-43-0",
+      "peer 1.0.0 ·npm·aB@1.0.0%2Bbuild.1"
+    ],
+    [
+      "~jsr~Ab@1.0.0_pbuild.1 dep-43-1",
+      "peerOptional ^1.0.0 || ^2 MISSING"
+    ],
+    [
+      "~jsr~Ab@1.0.0_pbuild.1 dep-43-2",
+      "prod 1.0.0 ·npm·ms@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@a+b@1.0.0_pbuild.1 dep-44-2",
+      "dev 1.0.0 ·npm·react@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@a+b@1.0.0_pbuild.1 dep-44-3",
+      "optional ^1.0.0 || ^2 ·npm·z@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@a+b@1.0.0_pbuild.1 dep-44-0",
+      "peerOptional 1.0.0 MISSING"
+    ],
+    [
+      "~npm~@a+b@1.0.0_pbuild.1 dep-44-1",
+      "prod ^1.0.0 || ^2 ·npm·MS@1.0.0-rc.1"
+    ],
+    [
+      "~npm~@jsr+std____semver@2.1.3 dep-45-1",
+      "dev ^1.0.0 || ^2 ·npm·MS@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@jsr+std____semver@2.1.3 dep-45-2",
+      "optional 1.0.0 ·npm·use-sync-external-store@10.0.0"
+    ],
+    [
+      "~npm~@jsr+std____semver@2.1.3 dep-45-3",
+      "peer ^1.0.0 || ^2 ~acme~@a+b@1.0.0-rc.1~_croot_s_g_s#to-regex-range_s_g_s#is-number"
+    ],
+    [
+      "~npm~@jsr+std____semver@2.1.3 dep-45-0",
+      "prod 1.0.0 ·npm·JSONStream@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~npm~@sindresorhus+is@1.0.0_pbuild.1 dep-46-0",
+      "dev 1.0.0 ·npm·ms@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@sindresorhus+is@1.0.0_pbuild.1 dep-46-1",
+      "optional ^1.0.0 || ^2 ·npm·react@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~npm~@sindresorhus+is@1.0.0_pbuild.1 dep-46-2",
+      "peer 1.0.0 ·npm·zz@1.0.0-rc.1·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~@sindresorhus+is@1.0.0_pbuild.1 dep-46-3",
+      "peerOptional ^1.0.0 || ^2 ~acme~@a+b@2.1.3~peer.2"
+    ],
+    [
+      "~npm~a__b@10.0.0 dep-47-0",
+      "optional 1.0.0 ·npm·react-dom@1.0.0"
+    ],
+    [
+      "~npm~a__b@10.0.0 dep-47-1",
+      "peer ^1.0.0 || ^2 ·npm·use-sync-external-store@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~a__b@10.0.0 dep-47-2",
+      "peerOptional 1.0.0 ~acme~@A+b@1.0.0-rc.1~peer.dbd5ca8b03a66489"
+    ],
+    [
+      "~npm~a__b@10.0.0 dep-47-3",
+      "prod ^1.0.0 || ^2 ~acme~@jsr+std____semver@1.0.0_pbuild.1~peer.2"
+    ],
+    [
+      "~npm~a@1.0.0 dep-48-3",
+      "dev ^1.0.0 || ^2 ~acme~@scope__x+bar@10.0.0~peer.dbd5ca8b03a66489"
+    ],
+    [
+      "~npm~a@1.0.0 dep-48-0",
+      "peer 1.0.0 ·npm·react@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~a@1.0.0 dep-48-1",
+      "peerOptional ^1.0.0 || ^2 ·npm·zz@1.0.0%2Bbuild.1·%E1%B9%97%3A3"
+    ],
+    [
+      "~npm~a@1.0.0 dep-48-2",
+      "prod 1.0.0 ~acme~@isaacs+string-locale-compare@1.0.0_pbuild.1"
+    ],
+    [
+      "~npm~Ab@1.0.0 dep-49-2",
+      "dev 1.0.0 ~acme~@jsr+std____semver@1.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number"
+    ],
+    [
+      "~npm~Ab@1.0.0 dep-49-3",
+      "optional ^1.0.0 || ^2 ~acme~@scope+bar-baz@10.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number"
+    ],
+    [
+      "~npm~Ab@1.0.0 dep-49-0",
+      "peerOptional 1.0.0 ·npm·z@1.0.0"
+    ],
+    [
+      "~npm~Ab@1.0.0 dep-49-1",
+      "prod ^1.0.0 || ^2 ~acme~@A+b@1.0.0~peer.2"
+    ],
+    [
+      "~npm~is-number@2.1.3 dep-50-1",
+      "dev ^1.0.0 || ^2 ~acme~@isaacs+string-locale-compare@1.0.0_pbuild.1~_croot_s_g_s#to-regex-range_s_g_s#is-number"
+    ],
+    [
+      "~npm~is-number@2.1.3 dep-50-2",
+      "optional 1.0.0 ~acme~@scope__x+bar@2.1.3"
+    ],
+    [
+      "~npm~is-number@2.1.3 dep-50-3",
+      "peer ^1.0.0 || ^2 ~acme~@sindresorhus+is@1.0.0-rc.1"
+    ],
+    [
+      "~npm~is-number@2.1.3 dep-50-0",
+      "prod 1.0.0 ·npm·zz@10.0.0·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"
+    ],
+    [
+      "~npm~ms@10.0.0 dep-51-0",
+      "dev 1.0.0 ~acme~@a+b@1.0.0~peer.dbd5ca8b03a66489"
+    ],
+    [
+      "~npm~ms@10.0.0 dep-51-1",
+      "optional ^1.0.0 || ^2 ~acme~@jsr+std____semver@10.0.0"
+    ],
+    [
+      "~npm~ms@10.0.0 dep-51-2",
+      "peer 1.0.0 ~acme~@scope+bar-baz@2.1.3~peer.dbd5ca8b03a66489"
+    ],
+    [
+      "~npm~ms@10.0.0 dep-51-3",
+      "peerOptional ^1.0.0 || ^2 ~acme~0x@10.0.0~peer.2"
+    ],
+    [
+      "~npm~use-sync-external-store@10.0.0 dep-52-0",
+      "optional 1.0.0 ~acme~@isaacs+string-locale-compare@1.0.0-rc.1~peer.dbd5ca8b03a66489"
+    ],
+    [
+      "~npm~use-sync-external-store@10.0.0 dep-52-1",
+      "peer ^1.0.0 || ^2 ~acme~@scope__x+bar@2.1.3~peer.2"
+    ],
+    [
+      "~npm~use-sync-external-store@10.0.0 dep-52-2",
+      "peerOptional 1.0.0 ~acme~@sindresorhus+is@1.0.0-rc.1~peer.2"
+    ],
+    [
+      "~npm~use-sync-external-store@10.0.0 dep-52-3",
+      "prod ^1.0.0 || ^2 MISSING"
+    ]
+  ]
+}
diff --git a/scripts/gen-vlt-collation-golden.mjs b/scripts/gen-vlt-collation-golden.mjs
new file mode 100644
index 00000000..948bf83d
--- /dev/null
+++ b/scripts/gen-vlt-collation-golden.mjs
@@ -0,0 +1,244 @@
+#!/usr/bin/env node
+// Prints crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json:
+// vlt's lockfile orders (graph/src/lockfile/save.ts formatNodes/formatEdges)
+// over DepIDs of every era, computed by Node's ICU. Regenerate with Node
+// 24.21 under LANG=C LC_ALL=C:
+//
+//   node scripts/gen-vlt-collation-golden.mjs \
+//     > crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json
+
+const EXPECTED_NODE = '24.21.0'
+if (process.versions.node !== EXPECTED_NODE) {
+  process.stderr.write(
+    `warning: generated with Node ${process.versions.node}; the golden is pinned to ${EXPECTED_NODE}\n`,
+  )
+}
+
+const collate = (a, b) => a.localeCompare(b, 'en')
+
+const alphabet = []
+for (let c = 0x20; c < 0x7f; c++) {
+  alphabet.push(String.fromCharCode(c))
+}
+alphabet.push('·', '§')
+alphabet.sort(collate)
+const inTable = new Set(alphabet)
+
+const TILDE_ESCAPE = {
+  _: '__',
+  '+': '_p',
+  '\\': '_b',
+  ':': '_c',
+  '~': '_t',
+  '<': '_l',
+  '>': '_g',
+  '"': '_q',
+  '|': '_i',
+  '?': '_m',
+  '*': '_a',
+  ' ': '_s',
+}
+
+const encodeTilde = s => {
+  let out = ''
+  for (const ch of s) {
+    if (ch === '/') {
+      out += '+'
+    } else if (TILDE_ESCAPE[ch]) {
+      out += TILDE_ESCAPE[ch]
+    } else if (ch.charCodeAt(0) <= 0x1f) {
+      out += '_' + ch.charCodeAt(0).toString(16).toUpperCase().padStart(2, '0')
+    } else {
+      out += ch
+    }
+  }
+  return out.endsWith('.') ? `${out.slice(0, -1)}_d` : out
+}
+
+const encodeLegacy = s =>
+  encodeURIComponent(s).replaceAll('%40', '@').replaceAll('%2F', '§')
+
+const ERAS = {
+  legacy: { d: '·', enc: encodeLegacy, root: 'file·.' },
+  tilde: { d: '~', enc: encodeTilde, root: 'file~_d' },
+}
+
+const registryId = (era, segment, nameVersion, extra) => {
+  const { d, enc } = ERAS[era]
+  const tail = extra === undefined ? '' : `${d}${enc(extra)}`
+  return `${d}${enc(segment)}${d}${enc(nameVersion)}${tail}`
+}
+
+const typedId = (era, type, first, second) => {
+  const { d, enc } = ERAS[era]
+  const tail = second === undefined ? '' : `${d}${enc(second)}`
+  return `${type}${d}${enc(first)}${tail}`
+}
+
+const NAMES = [
+  'a',
+  'A',
+  'ab',
+  'aB',
+  'Ab',
+  'a-b',
+  'a_b',
+  'a__b',
+  'a.b',
+  'a1',
+  'a~b',
+  'ms',
+  'MS',
+  'z',
+  'zz',
+  '0x',
+  'is-number',
+  'react-dom',
+  'react',
+  'left-pad',
+  'JSONStream',
+  'use-sync-external-store',
+  '@a/b',
+  '@A/b',
+  '@scope/bar',
+  '@scope/bar-baz',
+  '@scope_x/bar',
+  '@isaacs/string-locale-compare',
+  '@sindresorhus/is',
+  '@jsr/std__semver',
+]
+const VERSIONS = ['1.0.0', '1.0.0-rc.1', '1.0.0+build.1', '2.1.3', '10.0.0']
+const SEGMENTS = {
+  legacy: ['', 'npm', 'acme', 'http://127.0.0.1:4873/'],
+  tilde: ['npm', 'acme', 'jsr', 'https://registry.example.com/npm/'],
+}
+const EXTRAS = {
+  legacy: [undefined, ':root > #debug > #ms', 'ṗ:3'],
+  tilde: [
+    undefined,
+    'peer.2',
+    'peer.dbd5ca8b03a66489',
+    ':root > #to-regex-range > #is-number',
+  ],
+}
+const UUIDS = [
+  '0b1f6e2a-3c4d-4e5f-8a9b-0c1d2e3f4a5b',
+  '80630680-4da6-45f9-bba8-b888e0ffd58c',
+  'ffffffff-2222-4333-8444-555555555555',
+]
+
+const vendoredDir = (uuid, name, version) => {
+  const slash = name.indexOf('/')
+  const leaf =
+    slash < 0 ? `${name}-${version}` : `${name.slice(0, slash)}/${name.slice(slash + 1)}-${version}`
+  return `.socket/vendor/npm/${uuid}/${leaf}/node_modules/${name}`
+}
+
+const ids = new Set()
+for (const era of Object.keys(ERAS)) {
+  NAMES.forEach((name, n) => {
+    VERSIONS.forEach((version, v) => {
+      const segment = SEGMENTS[era][(n + v) % SEGMENTS[era].length]
+      ids.add(registryId(era, segment, `${name}@${version}`))
+      ids.add(registryId(era, SEGMENTS[era][0], `${name}@${version}`))
+      const extra = EXTRAS[era][(n * 3 + v) % EXTRAS[era].length]
+      if (extra !== undefined) {
+        ids.add(registryId(era, SEGMENTS[era][1], `${name}@${version}`, extra))
+      }
+    })
+    const uuid = UUIDS[n % UUIDS.length]
+    ids.add(typedId(era, 'file', vendoredDir(uuid, name, VERSIONS[n % VERSIONS.length])))
+  })
+  const { root } = ERAS[era]
+  ids.add(root)
+  for (const path of ['packages/a', 'packages/b', 'packages/my_lib', 'apps/web-1']) {
+    ids.add(typedId(era, 'workspace', path))
+  }
+  for (const path of ['..', '../x', 'vendor/x', 'vendor/x.tgz', './packages/a', 'a b/c']) {
+    ids.add(typedId(era, 'file', path))
+  }
+  for (const url of ['https://e.com/r-1.0.0.tgz', 'https://e.com/R-1.0.0.tgz', 'http://h/x.tgz']) {
+    ids.add(typedId(era, 'remote', url))
+  }
+  for (const [remote, selector] of [
+    ['github:user/proj', 'v1.0.0'],
+    ['github:user/proj', 'semver:^1'],
+    ['git+ssh://git@host/x.git', 'main'],
+  ]) {
+    ids.add(typedId(era, 'git', remote, selector))
+  }
+}
+
+const nodes = [...ids]
+for (const id of nodes) {
+  for (const ch of id) {
+    if (!inTable.has(ch)) {
+      throw new Error(`${JSON.stringify(id)} holds ${JSON.stringify(ch)}, outside the table`)
+    }
+  }
+}
+if (nodes.length < 400) {
+  throw new Error(`only ${nodes.length} DepIDs`)
+}
+nodes.sort(collate)
+for (let i = 1; i < nodes.length; i++) {
+  if (collate(nodes[i - 1], nodes[i]) >= 0) {
+    throw new Error(`tie between ${nodes[i - 1]} and ${nodes[i]}`)
+  }
+}
+
+const isImporter = id =>
+  id === 'file~_d' ||
+  id === 'file·.' ||
+  /^workspace[~·]./.test(id)
+
+const TYPES = ['prod', 'dev', 'optional', 'peer', 'peerOptional']
+const registryNodes = nodes.filter(id => id.startsWith('~') || id.startsWith('·'))
+const importers = nodes.filter(isImporter)
+const sources = [...importers, ...registryNodes.filter((_, i) => i % 17 === 0)]
+const edges = []
+const seen = new Set()
+sources.forEach((from, f) => {
+  for (let k = 0; k < 4; k++) {
+    const type = TYPES[(f + k) % TYPES.length]
+    const to =
+      (f + k) % 11 === 0 ? 'MISSING' : registryNodes[(f * 7 + k * 13) % registryNodes.length]
+    const tieKey = `${from} ${type} ${to}`
+    if (seen.has(tieKey)) {
+      continue
+    }
+    seen.add(tieKey)
+    edges.push({ from, type, to, name: `dep-${f}-${k}`, spec: k % 2 ? '^1.0.0 || ^2' : '1.0.0' })
+  }
+})
+const toId = e => (e.to === 'MISSING' ? '' : e.to)
+edges.sort(
+  (a, b) =>
+    Number(isImporter(b.from)) - Number(isImporter(a.from)) ||
+    collate(a.from, b.from) ||
+    collate(a.type, b.type) ||
+    collate(toId(a), toId(b)),
+)
+for (let i = 1; i < edges.length; i++) {
+  const [a, b] = [edges[i - 1], edges[i]]
+  if (
+    isImporter(a.from) === isImporter(b.from) &&
+    collate(a.from, b.from) === 0 &&
+    collate(a.type, b.type) === 0 &&
+    collate(toId(a), toId(b)) === 0
+  ) {
+    throw new Error(`edge tie at ${i}`)
+  }
+}
+
+process.stdout.write(
+  `${JSON.stringify(
+    {
+      alphabet: alphabet.join(''),
+      nodes,
+      edges: edges.map(e => [`${e.from} ${e.name}`, `${e.type} ${e.spec} ${e.to}`]),
+    },
+    null,
+    2,
+  )}\n`,
+)

From 0575434d7cb397c5e605034ccfa56821be684646 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 20:36:56 -0400
Subject: [PATCH 08/46] Match depscan's npm name rule in vlt ids

vlt lock ids now give a package identity to every name npm still
accepts for existing packages, the same rule depscan uses. Scoped
names whose scope or name starts with "." or "_" (such as the
published @_koii/web3.js) and names over 214 characters were
refused before, so hosted redirects, VEX and vendored-copy checks
would have missed them while depscan patched them. Names npm
blocks (node_modules, favicon.ico) and versions too large for npm
to publish no longer get an identity.

A refused lockfileVersion is now reported exactly as it is written
in the lockfile (1e0 rather than 1.0), and tests now pin the
default-registry scheme check and the fixture-corpus skip of the
vlt tables.

Assisted-by: Claude Code:claude-opus-5-5
---
 Cargo.toml                                    |   2 +-
 .../src/vendor/vlt_lock_text.rs               | 209 ++++++++++++++----
 .../src/vex/discover/testing/golden.rs        |   7 +-
 3 files changed, 170 insertions(+), 48 deletions(-)

diff --git a/Cargo.toml b/Cargo.toml
index c1e95483..1a2b392f 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -15,7 +15,7 @@ repository = "https://github.com/SocketDev/socket-patch"
 socket-patch-core = { path = "crates/socket-patch-core", version = "=4.0.0" }
 clap = { version = "=4.5.60", features = ["derive", "env"] }
 serde = { version = "=1.0.228", features = ["derive"] }
-serde_json = { version = "=1.0.149", features = ["preserve_order"] }
+serde_json = { version = "=1.0.149", features = ["preserve_order", "raw_value"] }
 sha2 = "=0.10.9"
 sha1 = "=0.10.6"
 hex = "=0.4.3"
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
index fc929a55..187c66f1 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -9,9 +9,11 @@
 //! in the tests are shared verbatim with depscan's `vlt-dep-id.test.ts`.
 
 use std::cmp::Ordering;
+use std::collections::HashMap;
 use std::sync::LazyLock;
 
 use regex::Regex;
+use serde_json::value::RawValue;
 use serde_json::{Map, Value};
 
 use crate::patch::path_safety::is_canonical_uuid;
@@ -282,41 +284,51 @@ static SEMVER_RE: LazyLock<Regex> = LazyLock::new(|| {
     .expect("semver regex")
 });
 
-const NPM_NAME_MAX_LENGTH: usize = 214;
+const NPM_SAFE_INTEGER_MAX: u64 = 9_007_199_254_740_991;
+
+const NPM_BLOCKED_NAMES: [&str; 2] = ["node_modules", "favicon.ico"];
 
 /// The semver.org 2.0.0 grammar exactly (build metadata allowed; no `v`,
-/// `=`, ranges or leading zeros), the same regex as the TS twin.
-pub(crate) fn is_strict_semver(version: &str) -> bool {
-    SEMVER_RE.is_match(version)
+/// `=`, ranges or leading zeros) with major, minor and patch at most
+/// node-semver's `Number.MAX_SAFE_INTEGER`; the TS twin's `isNpmSemver`.
+/// A numeric prerelease identifier stays unbounded.
+pub(crate) fn is_npm_semver(version: &str) -> bool {
+    SEMVER_RE.captures(version).is_some_and(|caps| {
+        (1..=3).all(|i| {
+            caps[i]
+                .parse::<u64>()
+                .is_ok_and(|n| n <= NPM_SAFE_INTEGER_MAX)
+        })
+    })
 }
 
-fn is_npm_name_part(part: &str) -> bool {
-    let unreserved = |c: char| c.is_ascii_alphanumeric() || "-~!*'()".contains(c);
-    let mut chars = part.chars();
-    chars.next().is_some_and(unreserved) && chars.all(|c| unreserved(c) || c == '.' || c == '_')
+fn is_npm_url_safe(part: &str) -> bool {
+    !part.is_empty()
+        && part
+            .chars()
+            .all(|c| c.is_ascii_alphanumeric() || "-_.!~*'()".contains(c))
 }
 
-/// npm's name rule for existing packages: an optional `@scope/` plus a name,
-/// URL-safe characters only, no leading `.` or `_`, at most 214 chars.
+/// validate-npm-package-name's `validForOldPackages`, the TS twin's
+/// `isNpmPackageName`: `@<scope>/<pkg>` with both parts URL-safe, or a
+/// URL-safe name without a leading `.` or `_` that is not a blocked name.
+/// No length cap, since published packages exceed 214 chars.
 pub(crate) fn is_registry_package_name(name: &str) -> bool {
-    if name.len() > NPM_NAME_MAX_LENGTH {
-        return false;
-    }
-    match name.strip_prefix('@') {
-        None => is_npm_name_part(name),
-        Some(scoped) => scoped
-            .split_once('/')
-            .is_some_and(|(scope, bare)| is_npm_name_part(scope) && is_npm_name_part(bare)),
+    if let Some((scope, bare)) = name.strip_prefix('@').and_then(|s| s.split_once('/')) {
+        return is_npm_url_safe(scope) && is_npm_url_safe(bare);
     }
+    is_npm_url_safe(name)
+        && !name.starts_with(['.', '_'])
+        && !NPM_BLOCKED_NAMES.contains(&name.to_ascii_lowercase().as_str())
 }
 
 /// `(name, version)` from a registry id's decoded `name@version`, split at
 /// the last `@` past index 0. The DepID version is authoritative for
-/// identity, so a non-semver version gives `None`.
+/// identity, so a version npm could not have published gives `None`.
 pub(crate) fn registry_name_version(second: &str) -> Option<(&str, &str)> {
     let at = second.rfind('@').filter(|&i| i > 0)?;
     let (name, version) = (&second[..at], &second[at + 1..]);
-    (is_registry_package_name(name) && is_strict_semver(version)).then_some((name, version))
+    (is_registry_package_name(name) && is_npm_semver(version)).then_some((name, version))
 }
 
 /// The store decoder: `(full name, version)` of a `.vlt/<DepID>` entry,
@@ -413,10 +425,15 @@ pub(crate) enum LockSniff {
     /// which JS `JSON.parse` would accept.
     NotJsonObject,
     /// `lockfileVersion` is present but not the integer token `0` or `1`
-    /// (`1.0`, `1e0`, `"1"`, `2`, `null`, ...), rendered as JSON.
+    /// (`1.0`, `1e0`, `"1"`, `2`, `null`, ...), as its raw JSON token.
     UnsupportedVersion(String),
 }
 
+fn raw_top_level_token(text: &str, key: &str) -> Option<String> {
+    let members: HashMap<String, &RawValue> = serde_json::from_str(text).ok()?;
+    members.get(key).map(|raw| raw.get().to_string())
+}
+
 pub(crate) fn sniff_lock(text: &str) -> LockSniff {
     if text.starts_with('\u{feff}') {
         return LockSniff::Bom;
@@ -428,7 +445,10 @@ pub(crate) fn sniff_lock(text: &str) -> LockSniff {
         None => None,
         Some(v) => match v.as_u64() {
             Some(n @ (0 | 1)) => Some(n),
-            _ => return LockSniff::UnsupportedVersion(v.to_string()),
+            _ => {
+                let raw = raw_top_level_token(text, "lockfileVersion");
+                return LockSniff::UnsupportedVersion(raw.unwrap_or_else(|| v.to_string()));
+            }
         },
     };
     LockSniff::Readable(ParsedLock { version, json })
@@ -847,7 +867,7 @@ pub(crate) struct VendoredPath {
 fn leaf_version<'l>(bare: &str, leaf: &'l str) -> Option<&'l str> {
     leaf.strip_prefix(bare)?
         .strip_prefix('-')
-        .filter(|v| is_strict_semver(v))
+        .filter(|v| is_npm_semver(v))
 }
 
 /// A decoded `file` path of the vendored directory shape, with the name
@@ -1177,6 +1197,36 @@ mod tests {
             row("~npm~a·b@1.0.0", reg(Tilde, "npm", "a·b@1.0.0"), None),
             row("~npm~a_@1.0.0", reg(Tilde, "npm", "a_@1.0.0"), Some(("a_", "1.0.0"))),
             row("~npm~_1f_0a_zz_@1.0.0", reg(Tilde, "npm", "\u{1f}\n_zz_@1.0.0"), None),
+            row(
+                "~npm~@__koii+web3.js@0.1.11",
+                reg(Tilde, "npm", "@_koii/web3.js@0.1.11"),
+                Some(("@_koii/web3.js", "0.1.11")),
+            ),
+            row(
+                "·npm·@_koii§web3.js@0.1.11",
+                reg(Legacy, "npm", "@_koii/web3.js@0.1.11"),
+                Some(("@_koii/web3.js", "0.1.11")),
+            ),
+            row(
+                "git~github_cu+p~v1~peer.1",
+                Some((Tilde, Git, "github:u/p", Some("v1"), Some("peer.1"))),
+                None,
+            ),
+            row(
+                "git·github%3Au§p·v1·peer.1",
+                Some((Legacy, Git, "github:u/p", Some("v1"), Some("peer.1"))),
+                None,
+            ),
+            row(
+                "remote~https_c++e.com+r.tgz~peer.1",
+                Some((Tilde, Remote, "https://e.com/r.tgz", None, Some("peer.1"))),
+                None,
+            ),
+            row(
+                "workspace~packages+a~peer.1",
+                Some((Tilde, Workspace, "packages/a", None, Some("peer.1"))),
+                None,
+            ),
             row("·npm·a@1.0.0%ZZ", None, None),
             row("·npm·a@1.0.0%4", None, None),
             row("·npm·a@1.0.0%C3", None, None),
@@ -1184,6 +1234,9 @@ mod tests {
             row("·npm%zz·a@1.0.0", None, None),
             row("··ms@2.1.3·%ZZ", None, None),
             row("file·.socket%2", None, None),
+            row("file·a·%ZZ", None, None),
+            row("workspace·a·%ZZ", None, None),
+            row("remote·https%3A§§e.com§r.tgz·%ZZ", None, None),
             row("git·github%3Auser·v1%G0", None, None),
             row("npm~foo@1.0.0", None, None),
             row("foo@1.0.0", None, None),
@@ -1248,7 +1301,8 @@ mod tests {
 
     #[test]
     fn recovers_name_and_version_from_a_registry_second() {
-        let long = format!("{}@1.0.0", "a".repeat(215));
+        let long_name = "a".repeat(215);
+        let long = format!("{long_name}@1.0.0");
         let rows: Vec<(&str, Option<(&str, &str)>)> = vec![
             ("a@1.0.0", Some(("a", "1.0.0"))),
             ("@s/p@1.0.0-rc.1+b.2", Some(("@s/p", "1.0.0-rc.1+b.2"))),
@@ -1266,22 +1320,46 @@ mod tests {
             ("a@1.0", None),
             ("a@1.0.0 ", None),
             ("a@^1.0.0", None),
+            ("a@1.0.0-01", None),
+            (
+                "a@9007199254740991.0.0",
+                Some(("a", "9007199254740991.0.0")),
+            ),
+            ("a@9007199254740992.0.0", None),
+            ("a@99999999999999999999.0.0", None),
+            ("a@1.9007199254740992.0", None),
+            ("a@1.0.9007199254740992", None),
+            (
+                "a@1.0.0-99999999999999999999",
+                Some(("a", "1.0.0-99999999999999999999")),
+            ),
             (".a@1.0.0", None),
             ("_a@1.0.0", None),
-            ("@s/.p@1.0.0", None),
-            ("@_s/p@1.0.0", None),
+            ("@s/.p@1.0.0", Some(("@s/.p", "1.0.0"))),
+            ("@_s/p@1.0.0", Some(("@_s/p", "1.0.0"))),
+            ("@s/_p@1.0.0", Some(("@s/_p", "1.0.0"))),
+            ("@.s/p@1.0.0", Some(("@.s/p", "1.0.0"))),
+            ("@_koii/web3.js@0.1.11", Some(("@_koii/web3.js", "0.1.11"))),
+            ("a~'!()*@1.0.0", Some(("a~'!()*", "1.0.0"))),
+            ("node_modules@1.0.0", None),
+            ("Node_Modules@1.0.0", None),
+            ("favicon.ico@1.0.0", None),
+            ("@s/node_modules@1.0.0", Some(("@s/node_modules", "1.0.0"))),
+            ("@/p@1.0.0", None),
+            ("@s/@1.0.0", None),
+            ("@s/p/q@1.0.0", None),
+            ("@s/p q@1.0.0", None),
             ("a b@1.0.0", None),
             ("a/b@1.0.0", None),
-            (long.as_str(), None),
+            (long.as_str(), Some((long_name.as_str(), "1.0.0"))),
         ];
         for (second, expected) in rows {
             assert_eq!(registry_name_version(second), expected, "{second}");
         }
-        assert!(is_strict_semver("99999999999999999999.0.0"));
-        assert!(is_strict_semver("1.0.0-0a.01b+001"));
-        assert!(!is_strict_semver("1.0.0-01"));
-        assert!(!is_strict_semver("1.0.0\n"));
-        assert!(!is_strict_semver("١.0.0"));
+        assert!(is_npm_semver("1.0.0-0a.01b+001"));
+        assert!(!is_npm_semver("1.0.0\n"));
+        assert!(!is_npm_semver("١.0.0"));
+        assert!(!is_npm_semver("18446744073709551616.0.0"));
     }
 
     #[test]
@@ -1495,6 +1573,13 @@ mod tests {
         }
         let not_a_url = options(r#"{"registry":"corp"}"#);
         assert!(!is_default_registry("corp", Some(&not_a_url)));
+        for registry in ["file:///r/", "ftp://h/", "git+https://h/"] {
+            let not_http = options(&format!(r#"{{"registry":"{registry}"}}"#));
+            assert!(
+                !is_default_registry(registry, Some(&not_http)),
+                "{registry}"
+            );
+        }
     }
 
     fn readable(text: &str) -> ParsedLock {
@@ -1515,22 +1600,37 @@ mod tests {
         assert_eq!(readable(r#"{"lockfileVersion":1}"#).new_id_era(), Tilde);
         assert_eq!(readable(r#"{"lockfileVersion":0}"#).new_id_era(), Legacy);
         assert_eq!(readable("{}").new_id_era(), Legacy);
-        for (token, rendered) in [
-            ("1.0", "1.0"),
-            ("1e0", "1.0"),
-            ("1.0000000000000001", "1.0"),
-            ("\"1\"", "\"1\""),
-            ("2", "2"),
-            ("-1", "-1"),
-            ("-0", "-0.0"),
-            ("null", "null"),
-            ("true", "true"),
+        for token in [
+            "1.0",
+            "1e0",
+            "1E0",
+            "1.0000000000000001",
+            "\"1\"",
+            "\"\\u0031\"",
+            "2",
+            "-1",
+            "-0",
+            "null",
+            "true",
+            "[1]",
+            "{\"v\": 1}",
         ] {
-            match sniff_lock(&format!("{{\"lockfileVersion\":{token}}}")) {
-                LockSniff::UnsupportedVersion(v) => assert_eq!(v, rendered, "{token}"),
-                other => panic!("{token} sniffed as {other:?}"),
+            for text in [
+                format!("{{\"lockfileVersion\":{token}}}"),
+                format!("{{\n  \"lockfileVersion\" :  {token} ,\n  \"nodes\": {{}}\n}}"),
+                format!("{{\"options\":{{\"lockfileVersion\":1}},\"lockfileVersion\":{token}}}"),
+                format!("{{\"lockfileVersion\":1,\"lockfileVersion\":{token}}}"),
+            ] {
+                match sniff_lock(&text) {
+                    LockSniff::UnsupportedVersion(v) => assert_eq!(v, token, "{text}"),
+                    other => panic!("{text} sniffed as {other:?}"),
+                }
             }
         }
+        assert_eq!(
+            readable(r#"{"lockfileVersion":2,"lockfileVersion":1}"#).version,
+            Some(1)
+        );
     }
 
     #[test]
@@ -2178,6 +2278,12 @@ mod tests {
             "1.0.0",
             VendoredShape::Dir,
         );
+        expect(
+            &dir(".socket/vendor/npm/<u>/@_koii/web3.js-0.1.11/node_modules/@_koii/web3.js"),
+            "@_koii/web3.js",
+            "0.1.11",
+            VendoredShape::Dir,
+        );
         expect(
             &dir(".socket/vendor/npm/<u>/left-pad-1.3.0.tgz"),
             "left-pad",
@@ -2255,6 +2361,19 @@ mod tests {
                 "left-pad",
             ),
             (".socket/vendor/npm/<u>/.a-1.0.0/node_modules/.a", ".a"),
+            (
+                ".socket/vendor/npm/<u>/node_modules-1.0.0/node_modules/node_modules",
+                "node_modules",
+            ),
+            (
+                ".socket/vendor/npm/<u>/favicon.ico-1.0.0.tgz",
+                "favicon.ico",
+            ),
+            (
+                ".socket/vendor/npm/<u>/a-9007199254740992.0.0/node_modules/a",
+                "a",
+            ),
+            (".socket/vendor/npm/<u>/a-1.0.9007199254740992.tgz", "a"),
             (
                 "vendor/npm/<u>/left-pad-1.3.0/node_modules/left-pad",
                 "left-pad",
diff --git a/crates/socket-patch-core/src/vex/discover/testing/golden.rs b/crates/socket-patch-core/src/vex/discover/testing/golden.rs
index 6aa760e3..8af57ab9 100644
--- a/crates/socket-patch-core/src/vex/discover/testing/golden.rs
+++ b/crates/socket-patch-core/src/vex/discover/testing/golden.rs
@@ -482,9 +482,12 @@ mod tests {
     #[test]
     fn table_fixture_dirs_are_not_corpus_projects() {
         let corpus = corpus();
-        for skipped in ["vlt/", "vlt-trees/", "vendor/"] {
+        for skipped in ["vlt", "vlt-trees", "vendor"] {
+            let nested = format!("{skipped}/");
             assert!(
-                corpus.iter().all(|(name, _, _)| !name.starts_with(skipped)),
+                corpus
+                    .iter()
+                    .all(|(name, _, _)| name != skipped && !name.starts_with(&nested)),
                 "{skipped} fixtures joined the corpus"
             );
         }

From 56ee39071de3c9c3ae75c62b832ced7e1c229e3b Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 21:15:20 -0400
Subject: [PATCH 09/46] Patch vlt installs in agent mode

socket-patch now recognizes a project installed by vlt (the
node_modules/.vlt store or node_modules/.vlt-lock.json) ahead of any
sibling bun, pnpm, yarn or npm marker, and apply prints a vlt layout
note in human mode.

scan, get, apply, rollback and vex now find every package in vlt's
store in every DepID era: transitive-only packages, aliases, git,
remote and file: entries, and workspace members whose node_modules
hold only links. apply and rollback reach every store copy of a
patched package, including vlt's peer and modifier variants, and each
write replaces the file instead of writing through it, so vlt's
machine-wide store stays untouched. The store-copy failure note now
reads "store copy <path> failed to patch" for pnpm and vlt alike.

In a vlt project, --update suggests vlt install
@socketsecurity/socket-patch@latest, and in vlx's cache it suggests
re-running vlx with @latest.

The crawler tests stage real layouts captured from vlt 0.0.0-32,
1.0.0-rc.14, 1.0.10, 1.2.0 and a 1.0.0-rc.22 workspace.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   16 +
 crates/socket-patch-cli/CLI_CONTRACT.md       |    2 +-
 crates/socket-patch-cli/src/commands/apply.rs |   19 +-
 .../src/commands/vex_consumed.rs              |   62 +-
 .../src/ecosystem_dispatch.rs                 |   33 +
 .../tests/covgap_commands_apply.rs            |   57 +-
 .../tests/in_process_npm_multicopy.rs         |  120 +-
 .../src/crawlers/npm_crawler.rs               |  608 ++-
 .../src/crawlers/pkg_managers.rs              |  133 +-
 crates/socket-patch-core/src/patch/apply.rs   |   23 +-
 .../socket-patch-core/src/patch/rollback.rs   |   16 +-
 .../socket-patch-core/src/update/channel.rs   |  112 +-
 crates/socket-patch-core/src/utils/fs.rs      |  163 +
 .../tests/covgap_crawlers_npm_crawler.rs      |   75 +-
 .../tests/covgap_patch_apply.rs               |  116 +-
 .../tests/crawler_npm_e2e.rs                  |  718 +++
 .../fixtures/vlt-trees/0.0.0-32/README.md     |   21 +
 .../fixtures/vlt-trees/0.0.0-32/listing.json  | 4588 ++++++++++++++++
 .../fixtures/vlt-trees/1.0.0-rc.14/README.md  |   21 +
 .../vlt-trees/1.0.0-rc.14/listing.json        | 4596 +++++++++++++++++
 .../vlt-trees/1.0.0-rc.22-workspace/README.md |   14 +
 .../1.0.0-rc.22-workspace/listing.json        |  204 +
 .../tests/fixtures/vlt-trees/1.0.10/README.md |   21 +
 .../fixtures/vlt-trees/1.0.10/listing.json    | 4596 +++++++++++++++++
 .../tests/fixtures/vlt-trees/1.2.0/README.md  |   21 +
 .../fixtures/vlt-trees/1.2.0/listing.json     | 4596 +++++++++++++++++
 scripts/capture-vlt-tree.mjs                  |  137 +
 27 files changed, 20953 insertions(+), 135 deletions(-)
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/README.md
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/listing.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/README.md
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/listing.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/README.md
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/listing.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/README.md
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/listing.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/README.md
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/listing.json
 create mode 100644 scripts/capture-vlt-tree.mjs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c3a2ca45..6f192916 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -263,6 +263,22 @@ into the new version's section — see docs/releasing.md.
 
 ### Added
 
+- **`apply` and `rollback` patch vlt installs in place.** A project
+  installed by vlt (`node_modules/.vlt/` or `node_modules/.vlt-lock.json`)
+  is detected as vlt ahead of any sibling bun, pnpm, yarn or npm marker,
+  and `apply` prints `Note: vlt layout detected…` in human mode. `scan`,
+  `get`, `apply`, `rollback` and `vex` find every package in vlt's store
+  (`node_modules/.vlt/<DepID>/node_modules/<name>`) in every DepID era,
+  including transitive-only packages, aliases, git/remote/`file:` entries
+  and workspace members' link-only trees. `apply` and `rollback` reach
+  every store copy of a patched `name@version` (vlt's `~peer.<n>`,
+  hashed-peer and modifier variants, and the legacy `··` / `·npm·` pair),
+  and every write replaces the file rather than writing through it, so
+  vlt 1.2's machine-wide store (hardlinked on Linux) stays untouched. The
+  store-copy failure note is now `store copy <path> failed to patch` /
+  `failed to roll back` for pnpm and vlt alike. `--update` in a vlt
+  project suggests `vlt install @socketsecurity/socket-patch@latest`, and
+  in vlx's cache `vlx -y -- @socketsecurity/socket-patch@latest …`.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index bc130bdb..7e89f34f 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -967,7 +967,7 @@ Honored global flags: `--json`, `--silent` (errors only), `--yes` (skip the conf
 
 | Detected channel | Hint |
 |---|---|
-| npm (`node_modules` path component) | project-local (the directory holding the outermost `node_modules` has a `package.json`, and it is not directly under `lib`/`npm` or below a yarn/pnpm `global` store): `npm install @socketsecurity/socket-patch@latest`; otherwise global (including version-manager prefixes such as nvm-windows and fnm): `npm update -g @socketsecurity/socket-patch` |
+| npm (`node_modules` path component) | project-local (the directory holding the outermost `node_modules` has a `package.json`, and it is not directly under `lib`/`npm` or below a yarn/pnpm `global` store): `npm install @socketsecurity/socket-patch@latest`, or `vlt install @socketsecurity/socket-patch@latest` when that directory holds `vlt-lock.json`, or `vlx -y -- @socketsecurity/socket-patch@latest …` when its `package.json` is vlx's (`"name": "vlx"`, the vlx cache); otherwise global (including version-manager prefixes such as nvm-windows and fnm): `npm update -g @socketsecurity/socket-patch` |
 | PyPI wheel (`site-packages`/`dist-packages`) | `pip install --upgrade socket-patch` |
 | `cargo install` (`$CARGO_HOME/bin`, `~/.cargo/bin`) | `cargo install socket-patch-cli` |
 | gem launcher cache (`<cache>/socket-patch/bin/…`) | `gem update socket-patch` |
diff --git a/crates/socket-patch-cli/src/commands/apply.rs b/crates/socket-patch-cli/src/commands/apply.rs
index 3854401f..4b40c6f4 100644
--- a/crates/socket-patch-cli/src/commands/apply.rs
+++ b/crates/socket-patch-cli/src/commands/apply.rs
@@ -954,10 +954,10 @@ pub(crate) async fn run_locked(
     // `yarn patch` — but only when an npm patch is actually in scope:
     // a polyglot repo's pypi/gem/go patches apply fine under PnP, and a
     // global-tree or non-npm `--ecosystems` run never crawls this
-    // checkout's node_modules at all. pnpm gets an informational note;
-    // the substantive safety is core's rename-over write
-    // (`utils::fs::atomic_write_bytes` never touches the store's shared
-    // inode).
+    // checkout's node_modules at all. pnpm, bun and vlt get an
+    // informational note; the substantive safety is core's rename-over
+    // write (`utils::fs::atomic_write_bytes` never touches the store's
+    // shared inode).
     match detect_npm_pkg_manager(&args.common.cwd) {
         NpmPkgManager::YarnBerryPnP => {
             if eco_in_local_scope(&args.common, Ecosystem::Npm) && manifest_targets_npm(&manifest) {
@@ -984,6 +984,17 @@ pub(crate) async fn run_locked(
             // install cache by default. The rename-over write handles the
             // safety; this is informational only.
         }
+        NpmPkgManager::Vlt => {
+            if !args.common.json && !args.common.silent {
+                eprintln!(
+                    "Note: vlt layout detected. Copy-on-write keeps vlt's shared package store \
+                     (<vlt cache>/store/v1) untouched."
+                );
+            }
+            // vlt 1.2 hard-links store files from its machine-wide cache
+            // (the Linux default); the rename-over write gives every patched
+            // file a private inode, so this is informational only.
+        }
         // Exhaustive on purpose (no `_`): a new package-manager layout must
         // make an explicit appearance here — silence is a decision, not a
         // default.
diff --git a/crates/socket-patch-cli/src/commands/vex_consumed.rs b/crates/socket-patch-cli/src/commands/vex_consumed.rs
index b8319f4e..8b4dc668 100644
--- a/crates/socket-patch-cli/src/commands/vex_consumed.rs
+++ b/crates/socket-patch-cli/src/commands/vex_consumed.rs
@@ -23,7 +23,7 @@
 //! | golang | the REPLACEMENT module `$GOMODCACHE/patch.socket.dev/gopatch/<uuid>@<sver>` (the ref's `url`, else go.mod's hosted `replace`) | the original `M@v` |
 //! | cargo | `registry/src/<host>-<hash>/<name>-<version>` for the lock source's host; several such registries (one per patch uuid) are narrowed to the one whose cached `.crate` has the lock's pinned checksum. A `vendor/` source tree or `--global-prefix` is taken as given | crates.io's / any other registry's extraction |
 //! | maven | `<repo>/<g>/<a>/<base>-socket.<hex8>/` (the version the pom pins), its artifact files matched under the suffixed name | the `<base>` version dir |
-//! | npm | every `node_modules` copy the crawler finds, plus alias installs (`node_modules/<alias>` holding the package) in the root's and every workspace member's tree | — each serves some dependent: ALL must verify |
+//! | npm | every `node_modules` copy the crawler finds (pnpm and vlt store copies included), plus alias installs (`node_modules/<alias>` holding the package) in the root's and every workspace member's tree | — each serves some dependent: ALL must verify |
 //! | pypi | every copy in the crawler's environment set (the project's venvs when it has any, else the interpreters) | — any may be the one that runs the project: ALL must verify |
 //! | gem | every copy in bundler's gem path | — bundler loads whichever `Gem.path` home it hits first: ALL must verify |
 //!
@@ -153,11 +153,15 @@ const ALIAS_WALK_MAX_DIRS: usize = 200_000;
 /// (`packages/a/node_modules/lp`) unhashed whenever the root or a hoisted
 /// copy existed — the identity fallback only fills purls with NO copy —
 /// so a stale or tampered member alias attested from the good root copy.
-/// Hidden entries (`.bin`, pnpm's `.pnpm` store — the crawler probes it)
-/// and symlinks (pnpm's importer links, `npm link` targets) are not
-/// traversed. A plain `--global` run is not walked: its roots come from
-/// spawning every package manager again, and the identity fallback covers
-/// an alias that is the only global copy.
+/// Hidden entries (`.bin`, pnpm's `.pnpm` and vlt's `.vlt` stores — the
+/// crawler probes them) and symlinks (pnpm's and vlt's importer links,
+/// `npm link` targets) are not traversed. Under vlt EVERY importer entry,
+/// an alias included, is a link into `.vlt/<DepID>/node_modules/<name>`,
+/// so this walk finds no vlt alias at all: the store copy is named after
+/// the real package, and the crawler's store pass resolves it (the
+/// identity fallback covers the rest). A plain `--global` run is not
+/// walked: its roots come from spawning every package manager again, and
+/// the identity fallback covers an alias that is the only global copy.
 async fn npm_alias_copies(
     options: &CrawlerOptions,
     purls: &[String],
@@ -696,6 +700,52 @@ mod tests {
         assert!(npm_alias_copies(&global, &purls).await.is_empty());
     }
 
+    /// vlt twin of the `.pnpm` case: every importer entry is a link into
+    /// the `.vlt` store (the alias `lp` too), so the alias walk yields
+    /// nothing, while the crawler resolves the alias's package from its
+    /// store copy, which is named after the real package. That store copy
+    /// is the consumed evidence.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn vlt_alias_is_consumed_through_its_store_copy() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let nm = root.join("node_modules");
+        let store_copy = nm.join(".vlt/~npm~left-pad@1.1.3/node_modules/left-pad");
+        pkg(&store_copy, "left-pad", "1.1.3");
+        pkg(
+            &nm.join(".vlt/~npm~left-pad@1.3.0/node_modules/left-pad"),
+            "left-pad",
+            "1.3.0",
+        );
+        std::os::unix::fs::symlink(
+            ".vlt/~npm~left-pad@1.1.3/node_modules/left-pad",
+            nm.join("lp"),
+        )
+        .unwrap();
+        std::os::unix::fs::symlink(
+            ".vlt/~npm~left-pad@1.3.0/node_modules/left-pad",
+            nm.join("left-pad"),
+        )
+        .unwrap();
+
+        let purls = vec!["pkg:npm/left-pad@1.1.3".to_string()];
+        assert!(npm_alias_copies(&local(root), &purls).await.is_empty());
+
+        let found = NpmCrawler::new().find_by_purls(&nm, &purls).await.unwrap();
+        assert_eq!(
+            found["pkg:npm/left-pad@1.1.3"]
+                .iter()
+                .map(|p| p.path.clone())
+                .collect::<Vec<_>>(),
+            vec![store_copy.clone()]
+        );
+
+        let mut all: HashMap<String, Vec<PathBuf>> = HashMap::new();
+        npm_identity_fallback(Some(&purls), &local(root), &mut all, &HashMap::new()).await;
+        assert_eq!(all.get(&purls[0]), Some(&vec![nm.join("lp")]));
+    }
+
     #[test]
     fn cargo_registry_dirs_are_matched_by_host_and_hash_shape() {
         assert!(is_registry_dir_for_host(
diff --git a/crates/socket-patch-cli/src/ecosystem_dispatch.rs b/crates/socket-patch-cli/src/ecosystem_dispatch.rs
index da32594c..9219b201 100644
--- a/crates/socket-patch-cli/src/ecosystem_dispatch.rs
+++ b/crates/socket-patch-cli/src/ecosystem_dispatch.rs
@@ -1116,6 +1116,39 @@ mod tests {
         assert_eq!(out.get("pkg:npm/foo@1.0.0"), Some(&pkg_dir));
     }
 
+    /// The dispatch wiring over a vlt store: a direct dep resolves at its
+    /// importer link, a transitive-only dep at its `.vlt/<DepID>` store
+    /// copy (here a legacy-era modifier-extra id), and both come back keyed
+    /// by the exact PURLs handed in.
+    #[tokio::test]
+    async fn find_packages_for_purls_maps_npm_purl_to_vlt_store_dir() {
+        let tmp = tempfile::tempdir().unwrap();
+        let nm = tmp.path().join("node_modules");
+        let store = nm.join(".vlt");
+        let direct = write_npm_package(&store.join("~npm~foo@1.0.0"), "foo", "1.0.0");
+        let transitive = write_npm_package(
+            &store.join("··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms"),
+            "ms",
+            "2.1.3",
+        );
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(&direct, nm.join("foo")).unwrap();
+
+        let purls = [
+            "pkg:npm/foo@1.0.0".to_string(),
+            "pkg:npm/ms@2.1.3".to_string(),
+        ];
+        let partitioned = partition_purls(&purls, None);
+        let out =
+            find_packages_for_purls(&partitioned, &local_options(tmp.path().to_path_buf()), true)
+                .await;
+        #[cfg(unix)]
+        assert_eq!(out.get("pkg:npm/foo@1.0.0"), Some(&nm.join("foo")));
+        #[cfg(not(unix))]
+        assert_eq!(out.get("pkg:npm/foo@1.0.0"), Some(&direct));
+        assert_eq!(out.get("pkg:npm/ms@2.1.3"), Some(&transitive));
+    }
+
     /// Multi-copy P0 at the dispatch layer: `find_all_packages_for_purls`
     /// must carry EVERY physical copy of a duplicated npm PURL (a root copy
     /// plus a nested duplicate), root-copy-first — the second path the old
diff --git a/crates/socket-patch-cli/tests/covgap_commands_apply.rs b/crates/socket-patch-cli/tests/covgap_commands_apply.rs
index 1ec297bd..4f57dacf 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_apply.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_apply.rs
@@ -17,8 +17,9 @@
 //!      transient-stage failure warning;
 //!   5. human-mode output block: "No patches to apply.", the no-matching-
 //!      packages warning, the npm per-package failure line, the dry-run
-//!      "already patched" count, `--verbose` per-file labels, the pnpm/bun
-//!      layout notes, and the corrupt-manifest-under-PnP fall-through;
+//!      "already patched" count, `--verbose` per-file labels, the
+//!      pnpm/bun/vlt layout notes, and the corrupt-manifest-under-PnP
+//!      fall-through;
 //!   6. gem fallback-home skip surfacing on human stderr;
 //!   7. apply-loop wiring: a vendored release-variant base with its
 //!      installed tree PRESENT is skipped (not re-patched), and a qualified
@@ -774,6 +775,58 @@ fn bun_layout_prints_informational_note_in_human_mode() {
     assert!(stdout.contains("No patches to apply."), "stdout={stdout}");
 }
 
+/// A vlt install (the `node_modules/.vlt` store) prints its informational
+/// note in human mode and never refuses. vlt install state outranks a
+/// sibling `bun.lock`, so the bun note does not print.
+#[test]
+fn vlt_layout_prints_informational_note_in_human_mode() {
+    let tmp = tempfile::tempdir().unwrap();
+    write_manifest(tmp.path(), json!({}));
+    std::fs::create_dir_all(tmp.path().join("node_modules").join(".vlt")).unwrap();
+    std::fs::write(tmp.path().join("bun.lock"), "{}\n").unwrap();
+
+    let (code, stdout, stderr) = run_apply(tmp.path(), &["--offline"], &[]);
+    assert_eq!(
+        code, 0,
+        "the vlt note is informational only; stderr={stderr}"
+    );
+    assert!(
+        stderr.contains(
+            "Note: vlt layout detected. Copy-on-write keeps vlt's shared package store \
+             (<vlt cache>/store/v1) untouched."
+        ),
+        "the vlt layout note must print on human stderr; stderr={stderr}"
+    );
+    assert!(!stderr.contains("bun layout detected"), "stderr={stderr}");
+    assert!(stdout.contains("No patches to apply."), "stdout={stdout}");
+}
+
+/// The vlt note is human-only: `--json` and `--silent` runs (the install
+/// hook runs `apply --silent`) stay quiet. The hidden lock alone is vlt
+/// install state too.
+#[test]
+fn vlt_layout_note_is_muted_under_json_and_silent() {
+    let tmp = tempfile::tempdir().unwrap();
+    write_manifest(tmp.path(), json!({}));
+    std::fs::create_dir_all(tmp.path().join("node_modules")).unwrap();
+    std::fs::write(tmp.path().join("node_modules/.vlt-lock.json"), "{}").unwrap();
+
+    let (code, _stdout, stderr) = run_apply(tmp.path(), &["--offline"], &[]);
+    assert_eq!(code, 0, "stderr={stderr}");
+    assert!(
+        stderr.contains("Note: vlt layout detected."),
+        "stderr={stderr}"
+    );
+    for flag in ["--json", "--silent"] {
+        let (code, _stdout, stderr) = run_apply(tmp.path(), &["--offline", flag], &[]);
+        assert_eq!(code, 0, "{flag}: stderr={stderr}");
+        assert!(
+            !stderr.contains("layout detected"),
+            "{flag}: stderr={stderr}"
+        );
+    }
+}
+
 /// A corrupt manifest under a yarn-PnP layout must fall through to the
 /// ordinary manifest-unreadable error — NOT the misdirected
 /// `yarn_pnp_unsupported` refusal (`manifest_targets_npm`'s `_ => false`
diff --git a/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs b/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
index 9efe6588..35ab91da 100644
--- a/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
+++ b/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
@@ -225,7 +225,11 @@ fn rollback_restores_every_on_disk_copy_of_a_duplicated_package() {
     let (code, _v) = run_apply(&root);
     assert_eq!(code, 0);
     for f in [&index_a, &index_b] {
-        assert_eq!(std::fs::read(f).unwrap(), patched, "precondition: patched {f:?}");
+        assert_eq!(
+            std::fs::read(f).unwrap(),
+            patched,
+            "precondition: patched {f:?}"
+        );
     }
 
     // Now roll back and assert EVERY copy is restored to pristine bytes.
@@ -259,3 +263,117 @@ fn rollback_restores_every_on_disk_copy_of_a_duplicated_package() {
     // Guard against the fixture asserting nothing.
     assert_ne!(before_hash, after_hash);
 }
+
+/// vlt twin: rc.15–1.0.7 materialize one store entry per peer context
+/// (`.vlt/~npm~dupvuln@1.0.0~peer.2/` and `~peer.3/`), both real and
+/// runtime-loaded. The importer links ONE of them, so the resolver hands
+/// apply one primary and the store fan-out must reach the other; rollback
+/// restores both. Returns `(root, primary index.js, twin index.js)`.
+fn build_vlt_peer_variant_tree(tmp: &Path, link_importer: bool) -> (PathBuf, PathBuf, PathBuf) {
+    let name = "dupvuln";
+    let purl = "pkg:npm/dupvuln@1.0.0";
+    let original = b"module.exports = function(){ return 'VULNERABLE'; };\n";
+    let mut patched = original.to_vec();
+    patched.extend_from_slice(b"// SOCKET-PATCHED-MULTICOPY\n");
+    std::fs::write(
+        tmp.join("package.json"),
+        r#"{ "name": "vlt-root", "version": "0.0.0" }"#,
+    )
+    .unwrap();
+    std::fs::write(
+        tmp.join("vlt-lock.json"),
+        r#"{"lockfileVersion":1,"options":{},"nodes":{},"edges":{}}"#,
+    )
+    .unwrap();
+    let store = tmp.join("node_modules").join(".vlt");
+    let entry = |id: &str| store.join(id).join("node_modules").join(name);
+    let primary = write_copy(&entry("~npm~dupvuln@1.0.0~peer.2"), name, "1.0.0", original);
+    let twin = write_copy(&entry("~npm~dupvuln@1.0.0~peer.3"), name, "1.0.0", original);
+    std::fs::write(tmp.join("node_modules").join(".vlt-lock.json"), "{}").unwrap();
+    if link_importer {
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(
+            ".vlt/~npm~dupvuln@1.0.0~peer.2/node_modules/dupvuln",
+            tmp.join("node_modules").join(name),
+        )
+        .unwrap();
+    }
+    stage_manifest_and_blob(
+        tmp,
+        purl,
+        &git_sha256(original),
+        &git_sha256(&patched),
+        &patched,
+    );
+    std::fs::write(
+        tmp.join(".socket").join("blobs").join(git_sha256(original)),
+        original,
+    )
+    .unwrap();
+    (tmp.to_path_buf(), primary, twin)
+}
+
+fn run_rollback(root: &Path) -> (i32, serde_json::Value) {
+    let out = Command::new(binary())
+        .args([
+            "rollback",
+            "--json",
+            "--offline",
+            "--yes",
+            "--ecosystems",
+            "npm",
+            "--cwd",
+            root.to_str().unwrap(),
+        ])
+        .output()
+        .expect("run rollback");
+    let stdout = String::from_utf8_lossy(&out.stdout).to_string();
+    let v: serde_json::Value = serde_json::from_str(stdout.trim())
+        .unwrap_or_else(|e| panic!("rollback must emit JSON: {e}; stdout={stdout}"));
+    (out.status.code().unwrap_or(-1), v)
+}
+
+/// Each copy holds exactly the patched bytes (`patched`) or exactly the
+/// original bytes.
+fn assert_vlt_copies(copies: [&Path; 2], patched: bool, stage: &str) {
+    let mut want = b"module.exports = function(){ return 'VULNERABLE'; };\n".to_vec();
+    if patched {
+        want.extend_from_slice(b"// SOCKET-PATCHED-MULTICOPY\n");
+    }
+    for f in copies {
+        assert_eq!(std::fs::read(f).unwrap(), want, "{stage}: {f:?}");
+    }
+}
+
+#[cfg(unix)]
+#[test]
+fn apply_and_rollback_reach_both_vlt_peer_variant_copies_from_an_importer_link() {
+    let tmp = tempfile::tempdir().unwrap();
+    let (root, primary, twin) = build_vlt_peer_variant_tree(tmp.path(), true);
+
+    let (code, v) = run_apply(&root);
+    assert_eq!(code, 0, "apply must succeed; envelope={v}");
+    assert_eq!(v["status"], "success", "envelope={v}");
+    assert_vlt_copies([&primary, &twin], true, "after apply");
+
+    let (code, v) = run_rollback(&root);
+    assert_eq!(code, 0, "rollback must succeed; envelope={v}");
+    assert_vlt_copies([&primary, &twin], false, "after rollback");
+}
+
+/// Without an importer link (a transitive-only dependency) both store
+/// copies are found by the resolver itself; each is patched exactly once
+/// and both are restored.
+#[test]
+fn apply_and_rollback_reach_both_transitive_only_vlt_store_copies() {
+    let tmp = tempfile::tempdir().unwrap();
+    let (root, primary, twin) = build_vlt_peer_variant_tree(tmp.path(), false);
+
+    let (code, v) = run_apply(&root);
+    assert_eq!(code, 0, "apply must succeed; envelope={v}");
+    assert_vlt_copies([&primary, &twin], true, "after apply");
+
+    let (code, v) = run_rollback(&root);
+    assert_eq!(code, 0, "rollback must succeed; envelope={v}");
+    assert_vlt_copies([&primary, &twin], false, "after rollback");
+}
diff --git a/crates/socket-patch-core/src/crawlers/npm_crawler.rs b/crates/socket-patch-core/src/crawlers/npm_crawler.rs
index cb186fbb..f5263ec9 100644
--- a/crates/socket-patch-core/src/crawlers/npm_crawler.rs
+++ b/crates/socket-patch-core/src/crawlers/npm_crawler.rs
@@ -1,4 +1,5 @@
 use std::collections::{HashMap, HashSet, VecDeque};
+use std::ffi::{OsStr, OsString};
 use std::path::{Path, PathBuf};
 
 use serde::Deserialize;
@@ -7,6 +8,7 @@ use super::types::{CrawledPackage, CrawlerOptions};
 use crate::patch::path_safety;
 use crate::utils::fs::is_dir;
 use crate::utils::purl::{percent_decode_purl_component, strip_purl_qualifiers};
+use crate::vendor::vlt_lock_text::decode_vlt_dep_id;
 
 /// Directories to skip when searching for workspace node_modules.
 const SKIP_DIRS: &[&str] = &[
@@ -187,6 +189,49 @@ fn is_legacy_pnpm_store_dir_name(name: &str) -> bool {
     name.starts_with(".registry.")
 }
 
+/// The `node_modules` child that is vlt's per-project package store.
+const VLT_STORE_NAME: &str = ".vlt";
+
+/// `(name, version)` a `.vlt/<DepID>` entry name advertises: the vlt store
+/// decoder over the lossless name, `None` for git/file/remote/workspace
+/// ids and for anything undecodable (which stays probeable). The pnpm
+/// decoder must never see these names: it reads `··foo@1.0.0` as a package
+/// named `··foo`, so the pending-name filter would skip the real `foo`.
+fn decode_vlt_store_entry_name(entry_name: &OsStr) -> Option<(String, String)> {
+    entry_name.to_str().and_then(decode_vlt_dep_id)
+}
+
+/// One virtual-store entry (pnpm or vlt): the `node_modules` holding its
+/// package, and the `(name, version)` its dir name advertises. The
+/// advertisement is advisory (the package.json probe is the authority), and
+/// `None` means "unknowable from the name", never "empty".
+struct StoreEntry {
+    advertised: Option<(String, String)>,
+    node_modules: PathBuf,
+}
+
+impl StoreEntry {
+    fn pnpm(entries: Vec<(String, PathBuf)>) -> Vec<StoreEntry> {
+        entries
+            .into_iter()
+            .map(|(name, node_modules)| StoreEntry {
+                advertised: decode_pnpm_store_entry_name(&name),
+                node_modules,
+            })
+            .collect()
+    }
+
+    fn vlt(entries: Vec<(OsString, PathBuf)>) -> Vec<StoreEntry> {
+        entries
+            .into_iter()
+            .map(|(name, node_modules)| StoreEntry {
+                advertised: decode_vlt_store_entry_name(&name),
+                node_modules,
+            })
+            .collect()
+    }
+}
+
 // ---------------------------------------------------------------------------
 // Global prefix detection helpers
 // ---------------------------------------------------------------------------
@@ -399,13 +444,14 @@ struct Target {
 #[derive(Clone, Copy)]
 enum ScanPolicy<'a> {
     /// An importer's or package's `node_modules`: symlinked entries are
-    /// recorded (pnpm links direct deps; `npm link` targets) but never
-    /// traversed into, and a `.pnpm` child is the virtual store, scanned
-    /// in a deferred pass.
+    /// recorded (pnpm and vlt link direct deps; `npm link` targets) but
+    /// never traversed into, and a `.pnpm` or `.vlt` child is the virtual
+    /// store, scanned in a deferred pass.
     Importer,
-    /// One pnpm virtual-store entry's `node_modules`: only REAL
-    /// directories are inventoried — a symlinked entry here is the
-    /// package's dependency pointing at a sibling `.pnpm` store entry,
+    /// One pnpm or vlt store entry's `node_modules`: only REAL
+    /// directories are inventoried — a symlinked (or, on Windows,
+    /// junctioned) entry here is the package's dependency pointing at a
+    /// sibling store entry,
     /// which is inventoried via that entry; following it would record the
     /// same package under a path owned by a different store entry.
     /// `identity_seen` optionally carries the entry's own package name
@@ -476,10 +522,10 @@ impl NpmCrawler {
     /// that only need one representative (`vendor`, `vex`, `setup`) can take
     /// the first and preserve the old root-preference.
     ///
-    /// pnpm's virtual-store peer-variant copies are deliberately NOT
+    /// pnpm's and vlt's store peer-variant copies are deliberately NOT
     /// enumerated here for a copy already found in an importer tree (a
     /// symlinked direct dep): those are handled by the apply engine's
-    /// [`find_pnpm_peer_variant_copies`] fan-out. A transitive-only package
+    /// [`find_store_peer_variant_copies`] fan-out. A transitive-only package
     /// that lives ONLY in the store is still resolved (its store copies are
     /// probed because no importer-tree copy was found).
     pub async fn find_by_purls(
@@ -666,7 +712,25 @@ impl NpmCrawler {
                 }
                 let store_path = nm_path.join(&name);
                 let entries = Self::list_pnpm_store_entries(&store_path).await;
-                Self::enqueue_pending_store_entries(entries, pending_names, queue);
+                Self::enqueue_pending_store_entries(
+                    StoreEntry::pnpm(entries),
+                    pending_names,
+                    queue,
+                );
+                continue;
+            }
+            // vlt's store has the same transitive-only-home property: every
+            // package lives at `.vlt/<DepID>/node_modules/<name>` and the
+            // importer holds only links into it.
+            if name_str == VLT_STORE_NAME {
+                let Some(file_type) = crate::utils::fs::entry_file_type(&entry).await else {
+                    continue;
+                };
+                if !file_type.is_dir() {
+                    continue;
+                }
+                let entries = Self::list_vlt_store_entries(&nm_path.join(&name)).await;
+                Self::enqueue_pending_store_entries(StoreEntry::vlt(entries), pending_names, queue);
                 continue;
             }
             // pnpm <=3: the virtual store is a hidden `.<registry-host>` dir
@@ -684,7 +748,11 @@ impl NpmCrawler {
                 }
                 let mut entries = Vec::new();
                 Self::collect_nested_store_entries(&nm_path.join(&name), &mut entries).await;
-                Self::enqueue_pending_store_entries(entries, pending_names, queue);
+                Self::enqueue_pending_store_entries(
+                    StoreEntry::pnpm(entries),
+                    pending_names,
+                    queue,
+                );
                 continue;
             }
             if name_str.starts_with('.') || name_str == "node_modules" {
@@ -742,19 +810,18 @@ impl NpmCrawler {
     /// entry for exactly those. Both enumerators only yield entries whose
     /// `node_modules` exists, so no re-stat here.
     fn enqueue_pending_store_entries(
-        entries: Vec<(String, PathBuf)>,
+        entries: Vec<StoreEntry>,
         pending_names: Option<&HashSet<&str>>,
         queue: &mut VecDeque<PathBuf>,
     ) {
-        for (entry_name, entry_nm) in entries {
-            if let Some(filter) = pending_names {
-                if let Some((entry_pkg, _version)) = decode_pnpm_store_entry_name(&entry_name) {
-                    if !filter.contains(entry_pkg.as_str()) {
-                        continue;
-                    }
+        for entry in entries {
+            if let (Some(filter), Some((entry_pkg, _version))) = (pending_names, &entry.advertised)
+            {
+                if !filter.contains(entry_pkg.as_str()) {
+                    continue;
                 }
             }
-            queue.push_back(entry_nm);
+            queue.push_back(entry.node_modules);
         }
     }
 
@@ -902,6 +969,7 @@ impl NpmCrawler {
         Box::pin(async move {
             let mut results = Vec::new();
             let mut pnpm_store: Option<PathBuf> = None;
+            let mut vlt_store: Option<PathBuf> = None;
             let mut legacy_stores: Vec<PathBuf> = Vec::new();
             let (store_entry, identity_seen) = match policy {
                 ScanPolicy::Importer => (false, None),
@@ -932,6 +1000,18 @@ impl NpmCrawler {
                     continue;
                 }
 
+                // vlt's store, deferred for the same reason: importer links
+                // win the `seen` dedup at their importer-root paths.
+                if !store_entry && name_str == VLT_STORE_NAME {
+                    let Some(file_type) = crate::utils::fs::entry_file_type(&entry).await else {
+                        continue;
+                    };
+                    if file_type.is_dir() {
+                        vlt_store = Some(node_modules_path.join(&name_str));
+                    }
+                    continue;
+                }
+
                 // pnpm <=3 virtual store (a hidden `.<registry-host>` dir;
                 // no `.pnpm` exists on those layouts): same
                 // transitive-only-home property, same deferred scan so
@@ -1005,12 +1085,16 @@ impl NpmCrawler {
 
             if let Some(store_path) = pnpm_store {
                 let entries = Self::list_pnpm_store_entries(&store_path).await;
-                results.extend(Self::scan_store_entries(entries, seen).await);
+                results.extend(Self::scan_store_entries(StoreEntry::pnpm(entries), seen).await);
             }
             for store_path in legacy_stores {
                 let mut entries = Vec::new();
                 Self::collect_nested_store_entries(&store_path, &mut entries).await;
-                results.extend(Self::scan_store_entries(entries, seen).await);
+                results.extend(Self::scan_store_entries(StoreEntry::pnpm(entries), seen).await);
+            }
+            if let Some(store_path) = vlt_store {
+                let entries = Self::list_vlt_store_entries(&store_path).await;
+                results.extend(Self::scan_store_entries(StoreEntry::vlt(entries), seen).await);
             }
 
             results
@@ -1057,6 +1141,38 @@ impl NpmCrawler {
         entries
     }
 
+    /// Enumerate vlt's store (`node_modules/.vlt`), yielding the lossless
+    /// entry name and `<entry>/node_modules` for every REAL entry dir whose
+    /// `node_modules` is a real dir. Skipped: dot-names (store metadata and
+    /// the `.VLT.DELETE.<key>.<DepID>` rollback staging that lingers on
+    /// Windows), the `node_modules` child (vlt's internal hoist dir: links
+    /// plus real `@scope` dirs holding links), files (`vlt.json`) and links.
+    /// The store is always flat; every entry holds exactly one real package
+    /// dir named after the package (never the alias).
+    async fn list_vlt_store_entries(store_path: &Path) -> Vec<(OsString, PathBuf)> {
+        let mut entries = Vec::new();
+        for entry in crate::utils::fs::list_dir_entries(store_path).await {
+            let name = entry.file_name();
+            if name.as_encoded_bytes().starts_with(b".") || name == "node_modules" {
+                continue;
+            }
+            let Some(file_type) = crate::utils::fs::entry_file_type(&entry).await else {
+                continue;
+            };
+            if !file_type.is_dir() {
+                continue;
+            }
+            let entry_nm = store_path.join(&name).join("node_modules");
+            let real_nm = tokio::fs::symlink_metadata(&entry_nm)
+                .await
+                .is_ok_and(|m| m.is_dir());
+            if real_nm {
+                entries.push((name, entry_nm));
+            }
+        }
+        entries
+    }
+
     /// Descend a *nested* virtual-store host dir, yielding
     /// `(name@version, <version-dir>/node_modules)` for each package home
     /// found. Covers the two pre-flat layouts (both confirmed against
@@ -1128,21 +1244,26 @@ impl NpmCrawler {
     }
 
     /// Inventory the packages under each virtual-store entry's
-    /// `node_modules` (entries come from `list_pnpm_store_entries` or
-    /// `collect_nested_store_entries`). An entry whose name decodes to a
+    /// `node_modules` (entries come from `list_pnpm_store_entries`,
+    /// `collect_nested_store_entries` or `list_vlt_store_entries`). An entry
+    /// whose name decodes to a
     /// name@version the importer pass already inventoried (every
     /// root-linked direct dep) skips the redundant package.json re-read
     /// via `identity_seen` — the entry is still walked, because
     /// bundled/injected dependencies are real dirs that physically live
     /// only inside the store entry.
     async fn scan_store_entries(
-        entries: Vec<(String, PathBuf)>,
+        entries: Vec<StoreEntry>,
         seen: &mut HashSet<String>,
     ) -> Vec<CrawledPackage> {
         let mut results = Vec::new();
 
-        for (entry_name, entry_nm) in entries {
-            let identity_seen = decode_pnpm_store_entry_name(&entry_name)
+        for StoreEntry {
+            advertised,
+            node_modules: entry_nm,
+        } in entries
+        {
+            let identity_seen = advertised
                 .filter(|(full_name, version)| {
                     let (ns, bare) = parse_package_name(full_name);
                     seen.contains(&build_npm_purl(ns.as_deref(), &bare, version))
@@ -1306,15 +1427,24 @@ impl Default for NpmCrawler {
 }
 
 // ---------------------------------------------------------------------------
-// pnpm peer-variant duplicate discovery (used by the apply engine)
+// Store peer-variant duplicate discovery (used by the apply engine)
 // ---------------------------------------------------------------------------
 
+/// Which store layout a candidate store directory uses.
+#[derive(Clone, Copy, PartialEq, Eq)]
+enum StoreLayout {
+    Pnpm,
+    Vlt,
+}
+
 /// Find every OTHER physical copy of the package installed at `pkg_path`
-/// inside the pnpm virtual store(s) reachable from it.
+/// inside the pnpm or vlt store(s) reachable from it.
 ///
-/// pnpm materializes one store copy PER PEER COMBINATION:
-/// `.pnpm/foo@1.0.0(react@17…)/` and `.pnpm/foo@1.0.0(react@18…)/` are
-/// both real directories holding the same `foo@1.0.0`, and each is
+/// Both managers materialize one store copy PER PEER (or modifier)
+/// COMBINATION: `.pnpm/foo@1.0.0(react@17…)/` and `…(react@18…)/`, or
+/// `.vlt/~npm~foo@1.0.0~peer.2/` and `~peer.3/` (plus vlt's modifier
+/// `~_croot…` extras and the legacy `··foo@1.0.0` / `·npm·foo@1.0.0` pair),
+/// are all real directories holding the same `foo@1.0.0`, each
 /// runtime-loaded by whichever importer resolves to it. The purl-keyed
 /// resolver hands apply exactly ONE primary path (root-install-wins), so
 /// the apply engine calls this to fan every write out to the remaining
@@ -1323,48 +1453,62 @@ impl Default for NpmCrawler {
 ///
 /// Discovery, all bounded and read-only:
 /// 1. Candidate stores come from the ancestor chains of `pkg_path` AND of
-///    its canonicalized form (the root-linked primary is a symlink into
-///    the store, and in a workspace the store lives beside the ROOT
+///    its canonicalized form (the root-linked primary is a link into the
+///    store, and in a workspace the store lives beside the ROOT
 ///    `node_modules`, on the canonical chain only): any ancestor named
-///    `.pnpm`, plus any `node_modules` ancestor's `.pnpm` child. Non-pnpm
-///    layouts (npm/yarn trees, cargo/go/vendor dirs) have neither and
-///    return early — this is the cheap common case. pnpm <=3 legacy
-///    stores are keyed by plain `name/version` and cannot hold
+///    `.pnpm` or `.vlt`, plus any `node_modules` ancestor's `.pnpm` and
+///    `.vlt` children. Other layouts (npm/yarn trees, cargo/go/vendor dirs)
+///    have neither and return early — the cheap common case. pnpm <=3
+///    legacy stores are keyed by plain `name/version` and cannot hold
 ///    peer-variant duplicates, so they are deliberately not probed.
-/// 2. Store entries are enumerated with the shared layout walker
+/// 2. pnpm entries come from the shared layout walker
 ///    (`list_pnpm_store_entries`, flat + nested); an entry whose name
-///    decodes to a DIFFERENT name@version is skipped, an undecodable name
-///    stays probeable (decode is advisory), and the package.json probe is
-///    the authority — exactly the resolver's contract.
-/// 3. Only REAL directories count (a symlink inside a store entry is
-///    another entry's copy, already yielded via that entry), the copy
-///    `pkg_path` itself canonicalizes to is excluded, and results are
-///    deduped by canonical path.
+///    decodes to a DIFFERENT name@version is skipped and an undecodable
+///    name stays probeable. vlt entries come from `list_vlt_store_entries`
+///    and must decode to exactly the primary's name@version: an
+///    undecodable vlt id is a git/file/remote artifact with its own bytes,
+///    not a peer variant of the registry copy. The package.json probe is
+///    the authority either way.
+/// 3. Only REAL directories count (a link inside a store entry is another
+///    entry's copy, already yielded via that entry), the copy `pkg_path`
+///    itself canonicalizes to is excluded, and results are deduped by
+///    canonical path (both sides canonicalized, so Windows `\\?\` paths
+///    compare consistently).
 ///
 /// The returned paths are the copies' package roots (each in its own
 /// store entry). Callers write through the hardened per-file pipeline,
 /// which breaks content-store hardlinks per copy — CoW safety holds for
 /// every copy independently.
-pub async fn find_pnpm_peer_variant_copies(pkg_path: &Path) -> Vec<PathBuf> {
+pub async fn find_store_peer_variant_copies(pkg_path: &Path) -> Vec<PathBuf> {
     // 1. Candidate stores from both ancestor chains (cheap stats only —
     //    no file reads until a store is actually found).
     let canonical_pkg = tokio::fs::canonicalize(pkg_path).await.ok();
-    let mut stores: Vec<PathBuf> = Vec::new();
+    let mut stores: Vec<(StoreLayout, PathBuf)> = Vec::new();
     let mut seen_stores: HashSet<PathBuf> = HashSet::new();
     let chains = [Some(pkg_path), canonical_pkg.as_deref()];
     for start in chains.into_iter().flatten() {
         let mut cur = start.parent();
         while let Some(dir) = cur {
-            match dir.file_name().map(|n| n.to_string_lossy()) {
-                Some(name) if name == ".pnpm" => {
+            match dir.file_name().and_then(OsStr::to_str) {
+                Some(".pnpm") => {
                     if seen_stores.insert(dir.to_path_buf()) {
-                        stores.push(dir.to_path_buf());
+                        stores.push((StoreLayout::Pnpm, dir.to_path_buf()));
                     }
                 }
-                Some(name) if name == "node_modules" => {
-                    let store = dir.join(".pnpm");
-                    if is_dir(&store).await && seen_stores.insert(store.clone()) {
-                        stores.push(store);
+                Some(VLT_STORE_NAME) => {
+                    if seen_stores.insert(dir.to_path_buf()) {
+                        stores.push((StoreLayout::Vlt, dir.to_path_buf()));
+                    }
+                }
+                Some("node_modules") => {
+                    for (child, layout) in [
+                        (".pnpm", StoreLayout::Pnpm),
+                        (VLT_STORE_NAME, StoreLayout::Vlt),
+                    ] {
+                        let store = dir.join(child);
+                        if is_dir(&store).await && seen_stores.insert(store.clone()) {
+                            stores.push((layout, store));
+                        }
                     }
                 }
                 _ => {}
@@ -1386,18 +1530,29 @@ pub async fn find_pnpm_peer_variant_copies(pkg_path: &Path) -> Vec<PathBuf> {
 
     let mut copies: Vec<PathBuf> = Vec::new();
     let mut seen_copies: HashSet<PathBuf> = HashSet::new();
-    for store in stores {
-        for (entry_name, entry_nm) in NpmCrawler::list_pnpm_store_entries(&store).await {
-            // Fast advertisement filter; undecodable names stay probeable.
-            if let Some((n, v)) = decode_pnpm_store_entry_name(&entry_name) {
-                if n != full_name || v != version {
-                    continue;
-                }
+    for (layout, store) in stores {
+        let entries = match layout {
+            StoreLayout::Pnpm => {
+                StoreEntry::pnpm(NpmCrawler::list_pnpm_store_entries(&store).await)
+            }
+            StoreLayout::Vlt => StoreEntry::vlt(NpmCrawler::list_vlt_store_entries(&store).await),
+        };
+        for StoreEntry {
+            advertised,
+            node_modules: entry_nm,
+        } in entries
+        {
+            // Fast advertisement filter; undecodable pnpm names stay
+            // probeable, undecodable vlt ids are never variants.
+            match (advertised, layout) {
+                (Some((n, v)), _) if n != full_name || v != version => continue,
+                (None, StoreLayout::Vlt) => continue,
+                _ => {}
             }
             // `full_name` may be scoped (`@s/n`) — Path::join handles the
             // two-segment relative form.
             let candidate = entry_nm.join(&full_name);
-            // Real dirs only: a symlink here is another entry's physical
+            // Real dirs only: a link here is another entry's physical
             // copy, reached via that entry.
             let Ok(meta) = tokio::fs::symlink_metadata(&candidate).await else {
                 continue;
@@ -2305,4 +2460,335 @@ mod tests {
             "fnm layout must be discovered under $HOME; got {paths:?}"
         );
     }
+
+    /// §5.2 store decoder table: `(full name, version)` from any registry
+    /// segment in both eras, extras ignored; git, file, remote, workspace
+    /// and undecodable ids are `None` (still probed by package.json).
+    #[test]
+    fn test_decode_vlt_dep_id_table() {
+        let some = |n: &str, v: &str| Some((n.to_string(), v.to_string()));
+        let rows: &[(&str, Option<(String, String)>)] = &[
+            ("··ms@2.1.3", some("ms", "2.1.3")),
+            (
+                "·npm·@isaacs§string-locale-compare@1.1.0",
+                some("@isaacs/string-locale-compare", "1.1.0"),
+            ),
+            (
+                "··@sindresorhus§is@4.6.0",
+                some("@sindresorhus/is", "4.6.0"),
+            ),
+            ("·npm·u@1.0.0%2Bbuild.1", some("u", "1.0.0+build.1")),
+            (
+                "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+                some("ms", "2.1.3"),
+            ),
+            ("·npm·x@1.0.0·%E1%B9%97%3A3", some("x", "1.0.0")),
+            ("~npm~@a+b@1.0.0", some("@a/b", "1.0.0")),
+            ("~npm~a__b@1.0.0", some("a_b", "1.0.0")),
+            ("~npm~u@1.0.0_pbuild.1", some("u", "1.0.0+build.1")),
+            (
+                "~npm~is-number@6.0.0~_croot_s_g_s#to-regex-range_s_g_s#is-number",
+                some("is-number", "6.0.0"),
+            ),
+            (
+                "~npm~react-dom@18.2.0~peer.ace93b147498ef7a",
+                some("react-dom", "18.2.0"),
+            ),
+            ("~npm~x@1.0.0~peer.2", some("x", "1.0.0")),
+            ("~npm~x@1~peer.2", None),
+            ("~acme~left-pad@1.3.0", some("left-pad", "1.3.0")),
+            ("~http_c++127.0.0.1_c4873+~x@1.0.0", some("x", "1.0.0")),
+            ("·http%3A§§127.0.0.1%3A4873§·x@1.0.0", some("x", "1.0.0")),
+            (
+                "~jsr~@jsr+std____semver@1.0.8",
+                some("@jsr/std__semver", "1.0.8"),
+            ),
+            ("git~github_cisaacs+string-locale-compare~v1.1.0", None),
+            ("git·github%3Aisaacs§string-locale-compare·v1.1.0", None),
+            ("file~vendor+ms-2.1.2.tgz", None),
+            ("file·vendor§ms-2.1.2.tgz", None),
+            (
+                "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+                None,
+            ),
+            ("workspace~packages+a", None),
+            ("workspace·packages§a", None),
+            ("··m%ZZs@1.0.0", None),
+            ("·npm·ms@2.1.3·%4", None),
+            ("ms@2.1.3", None),
+            ("node_modules", None),
+        ];
+        for (id, want) in rows {
+            assert_eq!(&decode_vlt_store_entry_name(OsStr::new(id)), want, "{id}");
+        }
+    }
+
+    /// The hazard the separate decoders exist for: the pnpm decoder reads
+    /// legacy vlt names as packages named `··foo` / `·npm·@s§p`, so a vlt
+    /// entry run through it would be skipped by the pending-name filter.
+    /// vlt entries are advertised through the vlt decoder only.
+    #[test]
+    fn test_vlt_store_entries_never_reach_the_pnpm_decoder() {
+        assert_eq!(
+            decode_pnpm_store_entry_name("··foo@1.0.0"),
+            Some(("··foo".to_string(), "1.0.0".to_string()))
+        );
+        let entries = || {
+            vec![
+                (OsString::from("··foo@1.0.0"), PathBuf::from("a")),
+                (OsString::from("·npm·@s§p@2.0.0"), PathBuf::from("b")),
+                (OsString::from("~npm~@s+p@2.0.0~peer.1"), PathBuf::from("c")),
+            ]
+        };
+        let pending: HashSet<&str> = ["foo", "@s/p"].into_iter().collect();
+        let mut queue = VecDeque::new();
+        NpmCrawler::enqueue_pending_store_entries(
+            StoreEntry::vlt(entries()),
+            Some(&pending),
+            &mut queue,
+        );
+        assert_eq!(
+            queue,
+            VecDeque::from([PathBuf::from("a"), PathBuf::from("b"), PathBuf::from("c")])
+        );
+        let mut queue = VecDeque::new();
+        let as_pnpm = entries()
+            .into_iter()
+            .map(|(n, p)| (n.into_string().unwrap(), p))
+            .collect();
+        NpmCrawler::enqueue_pending_store_entries(
+            StoreEntry::pnpm(as_pnpm),
+            Some(&pending),
+            &mut queue,
+        );
+        assert!(
+            !queue.contains(&PathBuf::from("a")),
+            "the pnpm decoder misreads the legacy name"
+        );
+    }
+
+    #[test]
+    fn test_vlt_store_is_not_a_legacy_pnpm_store() {
+        for name in [".vlt", ".vlt-lock.json", ".VLT.DELETE.1.~npm~a@1.0.0"] {
+            assert!(!is_legacy_pnpm_store_dir_name(name), "{name}");
+        }
+    }
+
+    /// `list_vlt_store_entries` yields only real entry dirs with a real
+    /// `node_modules`, keeping the raw (legacy `·`/`§`) names.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn test_list_vlt_store_entries_skips_hoist_meta_links_and_files() {
+        let tmp = tempfile::tempdir().unwrap();
+        let store = tmp.path().join(".vlt");
+        for dir in [
+            "··ms@2.1.3/node_modules/ms",
+            "~npm~a@1.0.0/node_modules/a",
+            "node_modules/@scope",
+            ".VLT.DELETE.9.~npm~b@1.0.0/node_modules/b",
+            "~npm~no-nm@1.0.0/no-nm",
+            "elsewhere/node_modules",
+            "~npm~nm-link@1.0.0",
+        ] {
+            std::fs::create_dir_all(store.join(dir)).unwrap();
+        }
+        std::fs::write(store.join("vlt.json"), "{}").unwrap();
+        std::os::unix::fs::symlink(store.join("~npm~a@1.0.0"), store.join("~npm~linked@1.0.0"))
+            .unwrap();
+        std::os::unix::fs::symlink(
+            store.join("elsewhere/node_modules"),
+            store.join("~npm~nm-link@1.0.0/node_modules"),
+        )
+        .unwrap();
+
+        let mut got: Vec<(OsString, PathBuf)> = NpmCrawler::list_vlt_store_entries(&store).await;
+        got.sort();
+        assert_eq!(
+            got,
+            vec![
+                (
+                    OsString::from("elsewhere"),
+                    store.join("elsewhere/node_modules")
+                ),
+                (
+                    OsString::from("~npm~a@1.0.0"),
+                    store.join("~npm~a@1.0.0/node_modules")
+                ),
+                (
+                    OsString::from("··ms@2.1.3"),
+                    store.join("··ms@2.1.3/node_modules")
+                ),
+            ]
+        );
+    }
+
+    fn write_pkg(dir: &Path, name: &str, version: &str) {
+        std::fs::create_dir_all(dir).unwrap();
+        std::fs::write(
+            dir.join("package.json"),
+            format!(r#"{{"name":"{name}","version":"{version}"}}"#),
+        )
+        .unwrap();
+    }
+
+    /// A directory link the way vlt writes it: a symlink on Unix, an
+    /// absolute-target NTFS junction on Windows (vlt >= 1.0.0-rc.22).
+    fn link_dir(target: &Path, link: &Path) {
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(target, link).unwrap();
+        #[cfg(windows)]
+        {
+            let status = std::process::Command::new("cmd")
+                .args(["/C", "mklink", "/J"])
+                .arg(link)
+                .arg(target)
+                .status()
+                .unwrap();
+            assert!(status.success(), "mklink /J failed");
+        }
+    }
+
+    /// A small vlt tree on the host's own link kind (junctions on Windows):
+    /// the importer link resolves at the importer root, a dependency link
+    /// inside a store entry is an edge (never a second inventory entry),
+    /// the legacy `·npm·@scope§bar@2.0.0` name round-trips through the
+    /// filesystem, and the fan-out finds the peer twin from the link.
+    #[tokio::test]
+    async fn test_vlt_store_links_are_edges_on_every_platform() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root: PathBuf = tmp.path().components().collect();
+        let nm = root.join("node_modules");
+        let store = nm.join(".vlt");
+        let bar = store
+            .join("·npm·@scope§bar@2.0.0")
+            .join("node_modules")
+            .join("@scope")
+            .join("bar");
+        write_pkg(&bar, "@scope/bar", "2.0.0");
+        let foo_entry = store.join("~npm~foo@1.0.0~peer.2").join("node_modules");
+        write_pkg(&foo_entry.join("foo"), "foo", "1.0.0");
+        std::fs::create_dir_all(foo_entry.join("@scope")).unwrap();
+        link_dir(&bar, &foo_entry.join("@scope").join("bar"));
+        let twin = store
+            .join("~npm~foo@1.0.0~peer.3")
+            .join("node_modules")
+            .join("foo");
+        write_pkg(&twin, "foo", "1.0.0");
+        link_dir(&foo_entry.join("foo"), &nm.join("foo"));
+
+        let options = CrawlerOptions {
+            cwd: root.clone(),
+            global: false,
+            global_prefix: None,
+        };
+        let mut scanned: Vec<(String, PathBuf)> = NpmCrawler::new()
+            .crawl_all(&options)
+            .await
+            .into_iter()
+            .map(|p| (p.purl, p.path))
+            .collect();
+        scanned.sort();
+        assert_eq!(
+            scanned,
+            vec![
+                ("pkg:npm/@scope/bar@2.0.0".to_string(), bar.clone()),
+                ("pkg:npm/foo@1.0.0".to_string(), nm.join("foo")),
+            ]
+        );
+
+        let found = NpmCrawler::new()
+            .find_by_purls(&nm, &["pkg:npm/foo@1.0.0".to_string()])
+            .await
+            .unwrap();
+        let primary = &found["pkg:npm/foo@1.0.0"][0].path;
+        assert_eq!(primary, &nm.join("foo"));
+        assert_eq!(find_store_peer_variant_copies(primary).await, vec![twin]);
+    }
+
+    /// vlt fan-out gates: every real copy whose DepID decodes to the
+    /// primary's `name@version` (peer counters, hashed peers, modifier
+    /// extras, the legacy `··`/`·npm·` pair) is returned once; the primary,
+    /// dependency links, the hoist dir, rollback staging, an imposter
+    /// package.json and git/remote/file ids (distinct artifacts, not
+    /// variants) are not.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn test_find_store_peer_variant_copies_vlt_gates() {
+        let tmp = tempfile::tempdir().unwrap();
+        let nm = tmp.path().join("node_modules");
+        let store = nm.join(".vlt");
+        let copy = |id: &str| store.join(id).join("node_modules").join("foo");
+        let primary = copy("~npm~foo@1.0.0~peer.2");
+        let twins = [
+            copy("~npm~foo@1.0.0~peer.3"),
+            copy("~npm~foo@1.0.0~peer.dbd5ca8b03a66489"),
+            copy("~npm~foo@1.0.0~_croot_s_g_s#foo"),
+            copy("··foo@1.0.0"),
+            copy("·npm·foo@1.0.0"),
+        ];
+        for dir in std::iter::once(&primary).chain(&twins) {
+            write_pkg(dir, "foo", "1.0.0");
+        }
+        for id in [
+            "git~github_cu+foo~v1.0.0",
+            "remote~https_c++e.com+foo-1.0.0.tgz",
+            "file~vendor+foo-1.0.0.tgz",
+            ".VLT.DELETE.1.~npm~foo@1.0.0",
+        ] {
+            write_pkg(&copy(id), "foo", "1.0.0");
+        }
+        write_pkg(&copy("~npm~foo@1.0.0~peer.9"), "foo", "1.0.1");
+        write_pkg(&store.join("node_modules/foo"), "foo", "1.0.0");
+        let dependent = store.join("~npm~dep@1.0.0/node_modules");
+        write_pkg(&dependent.join("dep"), "dep", "1.0.0");
+        std::os::unix::fs::symlink(&twins[0], dependent.join("foo")).unwrap();
+        std::os::unix::fs::symlink(&primary, nm.join("foo")).unwrap();
+
+        for start in [primary.clone(), nm.join("foo")] {
+            let mut got = find_store_peer_variant_copies(&start).await;
+            got.sort();
+            let mut want = twins.to_vec();
+            want.sort();
+            assert_eq!(got, want, "from {}", start.display());
+        }
+    }
+
+    /// D19: a vendored copy's `.socket/vendor/npm/<uuid>/<leaf>/node_modules`
+    /// is never a crawl root (hidden dirs are skipped), so the only
+    /// inventory entry is the importer link that points at it.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn test_socket_vendor_node_modules_is_never_crawled() {
+        let tmp = tempfile::tempdir().unwrap();
+        let vendored = tmp.path().join(
+            ".socket/vendor/npm/0b6f8a1e-2c3d-4e5f-8a9b-0c1d2e3f4a5b/left-pad-1.3.0/node_modules/left-pad",
+        );
+        write_pkg(&vendored, "left-pad", "1.3.0");
+        write_pkg(&vendored.join("node_modules/inner"), "inner", "1.0.0");
+        let nm = tmp.path().join("node_modules");
+        std::fs::create_dir_all(nm.join(".vlt")).unwrap();
+        std::os::unix::fs::symlink(&vendored, nm.join("left-pad")).unwrap();
+        let options = CrawlerOptions {
+            cwd: tmp.path().to_path_buf(),
+            global: false,
+            global_prefix: None,
+        };
+        assert_eq!(
+            NpmCrawler::new()
+                .get_node_modules_paths(&options)
+                .await
+                .unwrap(),
+            vec![nm.clone()]
+        );
+        let scanned: Vec<(String, PathBuf)> = NpmCrawler::new()
+            .crawl_all(&options)
+            .await
+            .into_iter()
+            .map(|p| (p.purl, p.path))
+            .collect();
+        assert_eq!(
+            scanned,
+            vec![("pkg:npm/left-pad@1.3.0".to_string(), nm.join("left-pad"))]
+        );
+    }
 }
diff --git a/crates/socket-patch-core/src/crawlers/pkg_managers.rs b/crates/socket-patch-core/src/crawlers/pkg_managers.rs
index 7498a56c..f2528a5b 100644
--- a/crates/socket-patch-core/src/crawlers/pkg_managers.rs
+++ b/crates/socket-patch-core/src/crawlers/pkg_managers.rs
@@ -1,5 +1,6 @@
 //! Detect which Node.js package manager produced the layout in a
-//! project root (`npm`, `pnpm`, `yarn` classic, or yarn-berry PnP).
+//! project root (`npm`, `pnpm`, `vlt`, `bun`, `yarn` classic, or yarn-berry
+//! PnP).
 //!
 //! The apply pipeline cares about this for two reasons:
 //!
@@ -21,6 +22,12 @@
 //!    move is to refuse with a clear error and point the user at
 //!    `yarn patch <pkg>`.
 //!
+//! vlt keeps every installed package in a per-project store
+//! (`node_modules/.vlt/<DepID>/node_modules/<name>`, hardlinked from vlt's
+//! machine-wide cache on Linux) and links importers into it, which is the
+//! pnpm situation again: the rename-over write keeps the shared cache
+//! untouched and the detector only drives the CLI's notice.
+//!
 //! Classic yarn (`yarn.lock` + a real `node_modules/`) behaves like
 //! npm at the filesystem level, so no special handling is needed.
 
@@ -51,6 +58,11 @@ pub enum NpmPkgManager {
     /// The operator gets a heads-up event so it's clear which package
     /// manager the patch landed against.
     Bun,
+    /// vlt install state: the `node_modules/.vlt/` store directory or the
+    /// hidden `node_modules/.vlt-lock.json`. Every package lives in the
+    /// store, one real copy per DepID; a committed `vlt-lock.json` alone
+    /// does not count, since another manager may have installed the tree.
+    Vlt,
     /// No discernible package manager — empty or non-Node project.
     Unknown,
 }
@@ -65,13 +77,17 @@ pub enum NpmPkgManager {
 ///    unless the tree is pnpm's own `node-linker=pnp` layout (see
 ///    [`pnpm_pnp_layout`]), which also writes a `.pnp.cjs` but keeps
 ///    real package dirs in the pnpm virtual store → pnpm.
-/// 2. `bun.lock` or `bun.lockb` (+ `node_modules/`) → bun.
-/// 3. `node_modules/.modules.yaml` or `node_modules/.pnpm/` → pnpm.
-/// 4. `yarn.lock` (without PnP markers) + `node_modules/` → yarn classic.
-/// 5. `node_modules/` exists → npm.
-/// 6. Otherwise → unknown.
+/// 2. `node_modules/.vlt/` is a directory, or `node_modules/.vlt-lock.json`
+///    is a file → vlt.
+/// 3. `bun.lock` or `bun.lockb` (+ `node_modules/`) → bun.
+/// 4. `node_modules/.modules.yaml` or `node_modules/.pnpm/` → pnpm.
+/// 5. `yarn.lock` (without PnP markers) + `node_modules/` → yarn classic.
+/// 6. `node_modules/` exists → npm.
+/// 7. Otherwise → unknown.
 ///
-/// Bun comes before pnpm in the precedence because bun's isolated
+/// vlt wins over every other lockfile or store marker: its install state
+/// only exists after a vlt install, while a sibling `bun.lock`,
+/// `pnpm-lock.yaml` or `yarn.lock` may be stale. Bun comes before pnpm in the precedence because bun's isolated
 /// linker (v1.3.2+ default) populates `node_modules/.bun/` which
 /// superficially resembles pnpm's `.pnpm/` content store. The
 /// lockfile filename disambiguates cleanly.
@@ -101,7 +117,17 @@ pub fn detect_npm_pkg_manager(project_root: &Path) -> NpmPkgManager {
         return NpmPkgManager::YarnBerryPnP;
     }
 
-    // 2. bun — `bun.lock` (text, current default in v1.2+) or
+    if project_root
+        .join(crate::constants::npm_family::VLT_STORE_DIR)
+        .is_dir()
+        || project_root
+            .join(crate::constants::npm_family::VLT_HIDDEN_LOCK_REL)
+            .is_file()
+    {
+        return NpmPkgManager::Vlt;
+    }
+
+    // 3. bun — `bun.lock` (text, current default in v1.2+) or
     //    `bun.lockb` (binary, legacy). Like the yarn-classic check
     //    below, we require `node_modules/` to actually exist —
     //    a bare lockfile without an install is a fresh checkout.
@@ -112,12 +138,12 @@ pub fn detect_npm_pkg_manager(project_root: &Path) -> NpmPkgManager {
         return NpmPkgManager::Bun;
     }
 
-    // 3. pnpm — markers live inside node_modules/.
+    // 4. pnpm — markers live inside node_modules/.
     if node_modules.join(".modules.yaml").is_file() || node_modules.join(".pnpm").is_dir() {
         return NpmPkgManager::Pnpm;
     }
 
-    // 4. yarn classic — yarn.lock + node_modules. We only return
+    // 5. yarn classic — yarn.lock + node_modules. We only return
     //    YarnClassic if node_modules actually exists, because a bare
     //    yarn.lock without node_modules is a fresh checkout where
     //    nothing has been installed yet.
@@ -125,7 +151,7 @@ pub fn detect_npm_pkg_manager(project_root: &Path) -> NpmPkgManager {
         return NpmPkgManager::YarnClassic;
     }
 
-    // 5. npm — any node_modules/ at all.
+    // 6. npm — any node_modules/ at all.
     if node_modules.is_dir() {
         return NpmPkgManager::Npm;
     }
@@ -521,4 +547,89 @@ mod tests {
         std::fs::write(d.path().join("yarn.lock"), "").unwrap();
         assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::YarnClassic);
     }
+
+    #[test]
+    fn vlt_via_store_dir() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::create_dir_all(d.path().join("node_modules/.vlt")).unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Vlt);
+    }
+
+    #[test]
+    fn vlt_via_hidden_lock() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::create_dir_all(d.path().join("node_modules")).unwrap();
+        std::fs::write(d.path().join("node_modules/.vlt-lock.json"), "{}").unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Vlt);
+    }
+
+    /// A committed `vlt-lock.json` is not install state: the tree beside it
+    /// was installed by something else (here npm), or not at all.
+    #[test]
+    fn vlt_lockfile_without_vlt_install_state_falls_through() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::write(d.path().join("vlt-lock.json"), "{}").unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Unknown);
+
+        std::fs::create_dir_all(d.path().join("node_modules")).unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Npm);
+
+        std::fs::create_dir_all(d.path().join("node_modules/.pnpm")).unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Pnpm);
+    }
+
+    #[test]
+    fn yarn_berry_pnp_priority_over_vlt() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::write(d.path().join(".pnp.cjs"), "").unwrap();
+        std::fs::create_dir_all(d.path().join("node_modules/.vlt")).unwrap();
+        std::fs::write(d.path().join("node_modules/.vlt-lock.json"), "{}").unwrap();
+        assert_eq!(
+            detect_npm_pkg_manager(d.path()),
+            NpmPkgManager::YarnBerryPnP
+        );
+    }
+
+    /// vlt install state outranks every sibling lockfile and store marker,
+    /// each of which may be left over from another manager.
+    #[test]
+    fn vlt_priority_over_bun_pnpm_yarn_npm() {
+        for marker in ["node_modules/.vlt", "node_modules/.vlt-lock.json"] {
+            let d = tempfile::tempdir().unwrap();
+            std::fs::create_dir_all(d.path().join("node_modules/.pnpm")).unwrap();
+            std::fs::write(d.path().join("node_modules/.modules.yaml"), "").unwrap();
+            for lock in ["bun.lock", "bun.lockb", "yarn.lock", "package-lock.json"] {
+                std::fs::write(d.path().join(lock), "").unwrap();
+            }
+            if marker.ends_with(".json") {
+                std::fs::write(d.path().join(marker), "{}").unwrap();
+            } else {
+                std::fs::create_dir_all(d.path().join(marker)).unwrap();
+            }
+            assert_eq!(
+                detect_npm_pkg_manager(d.path()),
+                NpmPkgManager::Vlt,
+                "{marker}"
+            );
+        }
+    }
+
+    #[test]
+    fn node_modules_as_file_is_not_misclassified_vlt() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::write(d.path().join("node_modules"), "not a dir").unwrap();
+        std::fs::write(d.path().join("vlt-lock.json"), "{}").unwrap();
+        std::fs::write(d.path().join("vlt.json"), "{}").unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Unknown);
+    }
+
+    /// Robustness: `.vlt` as a regular file, and the hidden lock as a
+    /// directory, are not vlt install state.
+    #[test]
+    fn store_dir_as_file_is_not_vlt() {
+        let d = tempfile::tempdir().unwrap();
+        std::fs::create_dir_all(d.path().join("node_modules/.vlt-lock.json")).unwrap();
+        std::fs::write(d.path().join("node_modules/.vlt"), "not a dir").unwrap();
+        assert_eq!(detect_npm_pkg_manager(d.path()), NpmPkgManager::Npm);
+    }
 }
diff --git a/crates/socket-patch-core/src/patch/apply.rs b/crates/socket-patch-core/src/patch/apply.rs
index 5072f4a0..72a81f3f 100644
--- a/crates/socket-patch-core/src/patch/apply.rs
+++ b/crates/socket-patch-core/src/patch/apply.rs
@@ -725,9 +725,10 @@ async fn chown_blocking(
 /// pipeline to per-file blobs only — equivalent to pre-2.2 behavior.
 ///
 /// For npm packages, one on-disk `pkg_path` is not necessarily the only
-/// physical home of `package@version`: pnpm materializes a separate
-/// virtual-store copy per peer-dependency combination
-/// (`.pnpm/foo@1.0.0(react@17…)/` and `…(react@18…)/` are both real,
+/// physical home of `package@version`: pnpm and vlt materialize a separate
+/// store copy per peer-dependency (or vlt modifier) combination
+/// (`.pnpm/foo@1.0.0(react@17…)/` and `…(react@18…)/`, or
+/// `.vlt/~npm~foo@1.0.0~peer.2/` and `~peer.3/`, are all real,
 /// runtime-loaded dirs), and the purl-keyed resolver hands apply exactly
 /// one primary path. After the primary succeeds, the same verify+patch
 /// pipeline is re-run against every other physical copy — including when
@@ -749,10 +750,10 @@ pub async fn apply_package_patch(
 ) -> ApplyResult {
     let mut result =
         apply_package_patch_at(package_key, pkg_path, files, sources, uuid, dry_run, policy).await;
-    // Only npm purls can name pnpm store copies; everything else skips the
+    // Only npm purls can name pnpm or vlt store copies; everything else skips the
     // (already cheap) discovery outright.
     if result.success && package_key.starts_with("pkg:npm/") {
-        for copy in crate::crawlers::npm_crawler::find_pnpm_peer_variant_copies(pkg_path).await {
+        for copy in crate::crawlers::npm_crawler::find_store_peer_variant_copies(pkg_path).await {
             let copy_result =
                 apply_package_patch_at(package_key, &copy, files, sources, uuid, dry_run, policy)
                     .await;
@@ -762,8 +763,8 @@ pub async fn apply_package_patch(
     result
 }
 
-/// Merge one pnpm store copy's result into the primary's. A failed copy
-/// fails the whole result with a `pnpm store copy <path> failed to patch: …`
+/// Merge one pnpm or vlt store copy's result into the primary's. A failed
+/// copy fails the whole result with a `store copy <path> failed to patch: …`
 /// note. A copy that patched fine but could not put file ownership back
 /// (`success: true, error: Some("<path>: patched, but ownership could not
 /// be restored…")`) keeps `success` and appends that advisory verbatim (it
@@ -780,7 +781,7 @@ fn fold_copy_result(result: &mut ApplyResult, copy: &Path, copy_result: ApplyRes
     } else {
         result.success = false;
         format!(
-            "pnpm store copy {} failed to patch: {}",
+            "store copy {} failed to patch: {}",
             copy.display(),
             copy_result
                 .error
@@ -3573,8 +3574,8 @@ mod tests {
         );
     }
 
-    /// The pnpm fan-out merge: a failed copy fails the whole result with the
-    /// `pnpm store copy … failed to patch` note; a copy that patched fine but
+    /// The store fan-out merge: a failed copy fails the whole result with the
+    /// `store copy … failed to patch` note; a copy that patched fine but
     /// could not restore ownership keeps `success` and appends the advisory
     /// verbatim (it already names the copy's file path); a copy's `--force`
     /// all-skipped note is NOT carried (it describes the copy alone).
@@ -3638,7 +3639,7 @@ mod tests {
         assert!(!primary.success);
         assert_eq!(
             primary.error.as_deref(),
-            Some("pnpm store copy /store/pkg@1.0.0_peer failed to patch: boom")
+            Some("store copy /store/pkg@1.0.0_peer failed to patch: boom")
         );
     }
 }
diff --git a/crates/socket-patch-core/src/patch/rollback.rs b/crates/socket-patch-core/src/patch/rollback.rs
index 31526e2e..d2eb720e 100644
--- a/crates/socket-patch-core/src/patch/rollback.rs
+++ b/crates/socket-patch-core/src/patch/rollback.rs
@@ -351,10 +351,10 @@ pub async fn rollback_package_patch(
 ) -> RollbackResult {
     let mut result =
         rollback_package_patch_at(package_key, pkg_path, files, blobs_path, dry_run).await;
-    // Only npm purls can name pnpm store copies; everything else skips the
+    // Only npm purls can name pnpm or vlt store copies; everything else skips the
     // (already cheap) discovery outright.
     if result.success && package_key.starts_with("pkg:npm/") {
-        for copy in crate::crawlers::npm_crawler::find_pnpm_peer_variant_copies(pkg_path).await {
+        for copy in crate::crawlers::npm_crawler::find_store_peer_variant_copies(pkg_path).await {
             let copy_result =
                 rollback_package_patch_at(package_key, &copy, files, blobs_path, dry_run).await;
             fold_copy_result(&mut result, &copy, copy_result);
@@ -363,8 +363,8 @@ pub async fn rollback_package_patch(
     result
 }
 
-/// Merge one pnpm store copy's result into the primary's. A failed copy
-/// fails the whole result with a `pnpm store copy <path> failed to roll
+/// Merge one pnpm or vlt store copy's result into the primary's. A failed
+/// copy fails the whole result with a `store copy <path> failed to roll
 /// back: …` note; a copy that restored fine but carries an advisory
 /// (`success: true, error: Some(…)` — e.g. "…ownership could not be
 /// restored…") keeps `success` and appends the advisory verbatim, so the
@@ -379,7 +379,7 @@ fn fold_copy_result(result: &mut RollbackResult, copy: &Path, copy_result: Rollb
     } else {
         result.success = false;
         format!(
-            "pnpm store copy {} failed to roll back: {}",
+            "store copy {} failed to roll back: {}",
             copy.display(),
             copy_result
                 .error
@@ -1996,8 +1996,8 @@ mod tests {
         );
     }
 
-    /// The pnpm fan-out merge: a failed copy fails the whole result with the
-    /// `pnpm store copy … failed to roll back` note; a copy that restored fine
+    /// The store fan-out merge: a failed copy fails the whole result with the
+    /// `store copy … failed to roll back` note; a copy that restored fine
     /// but carries an ownership advisory keeps `success` and appends the
     /// advisory verbatim (it already names the copy's file path); a clean copy
     /// changes nothing.
@@ -2046,7 +2046,7 @@ mod tests {
         assert!(!primary.success);
         assert_eq!(
             primary.error.as_deref(),
-            Some("first; pnpm store copy /store/pkg@1.0.0_peer failed to roll back: boom")
+            Some("first; store copy /store/pkg@1.0.0_peer failed to roll back: boom")
         );
     }
 
diff --git a/crates/socket-patch-core/src/update/channel.rs b/crates/socket-patch-core/src/update/channel.rs
index 7e823da8..18f768dc 100644
--- a/crates/socket-patch-core/src/update/channel.rs
+++ b/crates/socket-patch-core/src/update/channel.rs
@@ -118,14 +118,46 @@ pub fn upgrade_hint(channel: InstallChannel) -> &'static str {
 /// nvm-windows' `%APPDATA%\nvm\v20.11.0\node_modules`), where
 /// `npm update -g` is right, or a project dependency
 /// (`<project>/node_modules`), where `-g` would update some other copy and
-/// leave this one alone.
+/// leave this one alone. A project that vlt installed (its root holds
+/// `vlt-lock.json`) upgrades through vlt, and vlx's cache dir (a project
+/// whose `package.json` is named `vlx`, under `$XDG_DATA_HOME/vlt/vlx/`)
+/// is refreshed by running vlx with `@latest`.
 pub fn upgrade_hint_for(channel: InstallChannel, canonical_exe: &Path) -> &'static str {
     if channel == InstallChannel::Npm && !is_global_npm_install(canonical_exe) {
+        let holder = outermost_node_modules_holder(canonical_exe);
+        if holder.is_some_and(is_vlx_cache_dir) {
+            return "vlx -y -- @socketsecurity/socket-patch@latest …";
+        }
+        if holder.is_some_and(|dir| dir.join(crate::constants::npm_family::VLT_LOCK).is_file()) {
+            return "vlt install @socketsecurity/socket-patch@latest";
+        }
         return "npm install @socketsecurity/socket-patch@latest";
     }
     upgrade_hint(channel)
 }
 
+/// vlx installs each package into its own project dir whose generated
+/// `package.json` is named `vlx`.
+fn is_vlx_cache_dir(dir: &Path) -> bool {
+    crate::utils::fs::read_regular_to_string_sync(&dir.join("package.json"))
+        .ok()
+        .and_then(|text| {
+            serde_json::from_str::<serde_json::Value>(crate::package_json::detect::strip_bom(&text))
+                .ok()
+        })
+        .is_some_and(|pkg| pkg.get("name").and_then(|n| n.as_str()) == Some("vlx"))
+}
+
+/// The directory holding the outermost `node_modules` of `path`, keeping
+/// the path's own prefix (drive, root). `ancestors` walks innermost-first,
+/// so the LAST `node_modules` is the outermost one.
+fn outermost_node_modules_holder(path: &Path) -> Option<&Path> {
+    path.ancestors()
+        .filter(|a| a.file_name().is_some_and(|n| n == "node_modules"))
+        .last()
+        .and_then(Path::parent)
+}
+
 /// Whether the outermost `node_modules` of `path` belongs to a global
 /// install. The well-known global layouts (directly under `lib` on a Unix
 /// prefix or `npm` on Windows, or anywhere below a yarn/pnpm `global`
@@ -153,14 +185,7 @@ fn is_global_npm_install(path: &Path) -> bool {
     {
         return true;
     }
-    // `ancestors` walks innermost-first, so the LAST `node_modules` is the
-    // outermost one; its parent keeps the path's own prefix (drive, root).
-    let holder = path
-        .ancestors()
-        .filter(|a| a.file_name().is_some_and(|n| n == "node_modules"))
-        .last()
-        .and_then(Path::parent);
-    match holder {
+    match outermost_node_modules_holder(path) {
         Some(dir) => !dir.join("package.json").is_file(),
         None => true,
     }
@@ -546,6 +571,75 @@ mod tests {
         );
     }
 
+    /// A vlt project install lives in the project's own store
+    /// (`node_modules/.vlt/<DepID>/node_modules/…`), so the outermost
+    /// `node_modules` holder is the project root and its `vlt-lock.json`
+    /// routes the hint to vlt. vlx's cache dir is also a vlt project (it
+    /// carries a lock too) whose generated `package.json` is named `vlx`;
+    /// re-running vlx with `@latest` is what refreshes it.
+    #[test]
+    fn vlt_project_and_vlx_cache_hints() {
+        let bin = "node_modules/.vlt/~npm~@socketsecurity+socket-patch-linux-x64@2.0.0/\
+                   node_modules/@socketsecurity/socket-patch-linux-x64/bin/socket-patch";
+
+        let project = tempfile::tempdir().unwrap();
+        std::fs::write(project.path().join("package.json"), r#"{"name":"app"}"#).unwrap();
+        let exe = project.path().join(bin);
+        assert_eq!(
+            upgrade_hint_for(InstallChannel::Npm, &exe),
+            "npm install @socketsecurity/socket-patch@latest",
+            "no vlt-lock.json: an npm project"
+        );
+        std::fs::write(project.path().join("vlt-lock.json"), "{}").unwrap();
+        assert_eq!(
+            upgrade_hint_for(InstallChannel::Npm, &exe),
+            "vlt install @socketsecurity/socket-patch@latest"
+        );
+        // A lock in a nested dir between the holder and the binary is not
+        // the holder's.
+        let nested = tempfile::tempdir().unwrap();
+        std::fs::write(nested.path().join("package.json"), "{}").unwrap();
+        std::fs::create_dir_all(nested.path().join("node_modules/.vlt")).unwrap();
+        std::fs::write(nested.path().join("node_modules/.vlt/vlt-lock.json"), "{}").unwrap();
+        assert_eq!(
+            upgrade_hint_for(InstallChannel::Npm, &nested.path().join(bin)),
+            "npm install @socketsecurity/socket-patch@latest"
+        );
+
+        let data = tempfile::tempdir().unwrap();
+        let vlx = data
+            .path()
+            .join("vlt/vlx/@socketsecurity+socket-patch-b040b66d");
+        std::fs::create_dir_all(&vlx).unwrap();
+        std::fs::write(
+            vlx.join("package.json"),
+            "\u{feff}{\"name\":\"vlx\",\"dependencies\":{}}",
+        )
+        .unwrap();
+        std::fs::write(vlx.join("vlt-lock.json"), "{}").unwrap();
+        assert_eq!(
+            upgrade_hint_for(InstallChannel::Npm, &vlx.join(bin)),
+            "vlx -y -- @socketsecurity/socket-patch@latest …"
+        );
+        // A project merely named like vlx's dir but with another name is a
+        // vlt project, not the vlx cache.
+        std::fs::write(vlx.join("package.json"), r#"{"name":"vlxx"}"#).unwrap();
+        assert_eq!(
+            upgrade_hint_for(InstallChannel::Npm, &vlx.join(bin)),
+            "vlt install @socketsecurity/socket-patch@latest"
+        );
+        // Global installs keep the global hint whatever vlt files exist.
+        assert_eq!(
+            upgrade_hint_for(
+                InstallChannel::Npm,
+                Path::new(
+                    "/usr/local/lib/node_modules/@socketsecurity/socket-patch/bin/socket-patch"
+                )
+            ),
+            "npm update -g @socketsecurity/socket-patch"
+        );
+    }
+
     #[cfg(windows)]
     #[test]
     fn npm_hint_windows_global_prefix() {
diff --git a/crates/socket-patch-core/src/utils/fs.rs b/crates/socket-patch-core/src/utils/fs.rs
index b2ef02d0..6b10102e 100644
--- a/crates/socket-patch-core/src/utils/fs.rs
+++ b/crates/socket-patch-core/src/utils/fs.rs
@@ -252,6 +252,32 @@ pub async fn first_symlink<'a>(
     None
 }
 
+/// Remove the link at `path` itself — never its target. A symlink (file or
+/// directory) on Unix, and a directory symlink or NTFS junction (which
+/// `FileType` reports as `is_symlink()`; vlt and pnpm link packages with
+/// junctions) on Windows, where the directory flavors need `remove_dir`
+/// (`RemoveDirectoryW` deletes the reparse point and leaves the target) and
+/// `remove_file` fails. Anything that is not a link fails with
+/// `InvalidInput` and nothing is removed, so a caller that expected a link
+/// never deletes a real file or directory in its place.
+pub async fn remove_link(path: &Path) -> std::io::Result<()> {
+    let file_type = tokio::fs::symlink_metadata(path).await?.file_type();
+    if !file_type.is_symlink() {
+        return Err(std::io::Error::new(
+            std::io::ErrorKind::InvalidInput,
+            format!("{} is not a link", path.display()),
+        ));
+    }
+    #[cfg(windows)]
+    {
+        use std::os::windows::fs::FileTypeExt as _;
+        if file_type.is_symlink_dir() {
+            return tokio::fs::remove_dir(path).await;
+        }
+    }
+    tokio::fs::remove_file(path).await
+}
+
 /// Return the raw `FileType` for `entry`, swallowing stat errors.
 ///
 /// Use this instead of `entry_is_dir` when the caller needs to
@@ -1116,4 +1142,141 @@ mod tests {
             "a dangling link is still a link the rename would replace"
         );
     }
+
+    /// `remove_link` deletes the link and never its target; a real file or
+    /// directory in its place is refused and kept.
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn remove_link_removes_only_links() {
+        let tmp = tempfile::tempdir().unwrap();
+        let dir = tmp.path().join("store/pkg");
+        tokio::fs::create_dir_all(&dir).await.unwrap();
+        tokio::fs::write(dir.join("index.js"), b"x").await.unwrap();
+        let file = tmp.path().join("file.txt");
+        tokio::fs::write(&file, b"y").await.unwrap();
+
+        let dir_link = tmp.path().join("dir_link");
+        tokio::fs::symlink("store/pkg", &dir_link).await.unwrap();
+        let file_link = tmp.path().join("file_link");
+        tokio::fs::symlink(&file, &file_link).await.unwrap();
+        let dangling = tmp.path().join("dangling");
+        tokio::fs::symlink(tmp.path().join("absent"), &dangling)
+            .await
+            .unwrap();
+
+        for link in [&dir_link, &file_link, &dangling] {
+            remove_link(link).await.unwrap();
+            assert!(tokio::fs::symlink_metadata(link).await.is_err(), "{link:?}");
+        }
+        assert_eq!(tokio::fs::read(dir.join("index.js")).await.unwrap(), b"x");
+        assert_eq!(tokio::fs::read(&file).await.unwrap(), b"y");
+
+        for real in [&dir, &file] {
+            let err = remove_link(real).await.unwrap_err();
+            assert_eq!(err.kind(), std::io::ErrorKind::InvalidInput, "{real:?}");
+            assert!(tokio::fs::symlink_metadata(real).await.is_ok(), "{real:?}");
+        }
+        let err = remove_link(&tmp.path().join("absent")).await.unwrap_err();
+        assert_eq!(err.kind(), std::io::ErrorKind::NotFound);
+    }
+
+    /// Windows link shapes vlt produces: junctions (absolute targets, vlt
+    /// >= 1.0.0-rc.22 and pnpm) and directory symlinks (older vlt). Both
+    /// read as links through `entry_file_type` and `symlink_metadata`, are
+    /// followed by `is_dir`, report their target through `read_link`, and    /// `remove_link` deletes them while the target survives.
+    #[cfg(windows)]
+    async fn assert_windows_dir_link(tmp: &Path, link: &Path, target: &Path) {
+        let entry = list_dir_entries(tmp)
+            .await
+            .into_iter()
+            .find(|e| e.path() == link)
+            .expect("link entry listed");
+        let ft = entry_file_type(&entry).await.expect("file_type available");
+        assert!(ft.is_symlink() && !ft.is_dir(), "{link:?}");
+        assert!(is_dir(link).await, "is_dir follows the link");
+        let meta = tokio::fs::symlink_metadata(link).await.unwrap();
+        assert!(meta.file_type().is_symlink() && !meta.is_dir());
+
+        let read = std::fs::read_link(link).unwrap();
+        let resolved = if read.is_absolute() {
+            read
+        } else {
+            link.parent().unwrap().join(read)
+        };
+        assert_eq!(
+            std::fs::canonicalize(resolved).unwrap(),
+            std::fs::canonicalize(target).unwrap()
+        );
+        assert_eq!(
+            std::fs::canonicalize(link).unwrap(),
+            std::fs::canonicalize(target).unwrap()
+        );
+
+        remove_link(link).await.unwrap();
+        assert!(tokio::fs::symlink_metadata(link).await.is_err());
+        assert_eq!(
+            tokio::fs::read(target.join("package.json")).await.unwrap(),
+            b"{}"
+        );
+    }
+
+    #[cfg(windows)]
+    #[tokio::test]
+    async fn windows_junction_is_a_link_and_remove_link_keeps_target() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target = tmp.path().join("store").join("pkg");
+        std::fs::create_dir_all(&target).unwrap();
+        std::fs::write(target.join("package.json"), b"{}").unwrap();
+        let link = tmp.path().join("junction");
+        let status = std::process::Command::new("cmd")
+            .args(["/C", "mklink", "/J"])
+            .arg(&link)
+            .arg(&target)
+            .status()
+            .unwrap();
+        assert!(status.success(), "mklink /J failed");
+        assert!(
+            std::fs::read_link(&link).unwrap().is_absolute(),
+            "junction targets are absolute"
+        );
+        assert_windows_dir_link(tmp.path(), &link, &target).await;
+
+        std::fs::remove_dir_all(tmp.path().join("store")).unwrap();
+        assert!(!tmp.path().join("store").exists());
+    }
+
+    #[cfg(windows)]
+    #[tokio::test]
+    async fn windows_dir_symlink_is_a_link_and_remove_link_keeps_target() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target = tmp.path().join("store").join("pkg");
+        std::fs::create_dir_all(&target).unwrap();
+        std::fs::write(target.join("package.json"), b"{}").unwrap();
+        let link = tmp.path().join("dir_symlink");
+        std::os::windows::fs::symlink_dir(&target, &link).unwrap();
+        assert_windows_dir_link(tmp.path(), &link, &target).await;
+    }
+
+    /// `remove_dir_all` on a tree holding a junction removes the junction
+    /// without traversing into its target (what deleting a vlt store entry
+    /// relies on).
+    #[cfg(windows)]
+    #[test]
+    fn windows_remove_dir_all_does_not_follow_junctions() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target = tmp.path().join("sibling").join("pkg");
+        std::fs::create_dir_all(&target).unwrap();
+        std::fs::write(target.join("package.json"), b"{}").unwrap();
+        let entry_nm = tmp.path().join("entry").join("node_modules");
+        std::fs::create_dir_all(&entry_nm).unwrap();
+        let status = std::process::Command::new("cmd")
+            .args(["/C", "mklink", "/J"])
+            .arg(entry_nm.join("pkg"))
+            .arg(&target)
+            .status()
+            .unwrap();
+        assert!(status.success(), "mklink /J failed");
+        std::fs::remove_dir_all(tmp.path().join("entry")).unwrap();
+        assert_eq!(std::fs::read(target.join("package.json")).unwrap(), b"{}");
+    }
 }
diff --git a/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs b/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
index 3c668444..8aadafc9 100644
--- a/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
+++ b/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
@@ -2,14 +2,14 @@
 //! never-executed skip/fallback regions of the store walkers
 //! (`collect_nested_node_modules`, `collect_nested_store_entries`,
 //! `scan_scoped_packages`) and every reject/fallback gate of
-//! `find_pnpm_peer_variant_copies`. Each test stages the real on-disk shape
+//! `find_store_peer_variant_copies` (pnpm and vlt stores). Each test stages the real on-disk shape
 //! that reaches its region and asserts resolver/scan OUTPUT, not just
 //! survival. Companion to `crawler_npm_e2e.rs` (helpers mirrored from
 //! there).
 
 use std::path::Path;
 
-use socket_patch_core::crawlers::npm_crawler::find_pnpm_peer_variant_copies;
+use socket_patch_core::crawlers::npm_crawler::find_store_peer_variant_copies;
 use socket_patch_core::crawlers::types::CrawlerOptions;
 use socket_patch_core::crawlers::NpmCrawler;
 
@@ -188,7 +188,7 @@ async fn crawl_all_dedups_scoped_root_linked_pnpm_direct_dep_and_skips_symlink_d
     );
 }
 
-// ── find_pnpm_peer_variant_copies: probe gates ─────────────────
+// ── find_store_peer_variant_copies: pnpm probe gates ────────────
 
 /// All four reject/fallback gates of the peer-variant store probe, in one
 /// staged store:
@@ -203,7 +203,7 @@ async fn crawl_all_dedups_scoped_root_linked_pnpm_direct_dep_and_skips_symlink_d
 #[cfg(unix)]
 #[tokio::test]
 #[serial_test::parallel]
-async fn find_pnpm_peer_variant_copies_probe_gates() {
+async fn find_store_peer_variant_copies_probe_gates() {
     use std::os::unix::fs::symlink;
 
     let tmp = tempfile::tempdir().unwrap();
@@ -258,7 +258,7 @@ async fn find_pnpm_peer_variant_copies_probe_gates() {
     )
     .await;
 
-    let copies = find_pnpm_peer_variant_copies(&primary).await;
+    let copies = find_store_peer_variant_copies(&primary).await;
 
     let got: std::collections::HashSet<_> = copies.iter().cloned().collect();
     let want: std::collections::HashSet<_> = [twin.clone(), undecodable_copy.clone()]
@@ -277,7 +277,7 @@ async fn find_pnpm_peer_variant_copies_probe_gates() {
 /// still handled by the caller).
 #[tokio::test]
 #[serial_test::parallel]
-async fn find_pnpm_peer_variant_copies_unreadable_primary_returns_empty() {
+async fn find_store_peer_variant_copies_unreadable_primary_returns_empty() {
     let tmp = tempfile::tempdir().unwrap();
     let nm = tmp.path().join("node_modules");
     let store = nm.join(".pnpm");
@@ -294,13 +294,74 @@ async fn find_pnpm_peer_variant_copies_unreadable_primary_returns_empty() {
     )
     .await;
 
-    let copies = find_pnpm_peer_variant_copies(&primary).await;
+    let copies = find_store_peer_variant_copies(&primary).await;
     assert!(
         copies.is_empty(),
         "unreadable primary identity ⇒ no twins reported; got {copies:?}"
     );
 }
 
+// ── find_store_peer_variant_copies: vlt probe gates ─────────────
+
+/// vlt's fan-out from a workspace member's link: the store lives beside
+/// the ROOT `node_modules`, reachable only on the link's canonical chain.
+/// Real copies whose DepID decodes to the primary's `name@version` are
+/// returned (a `~peer.<n>` twin); a git dependency of the same
+/// `name@version` is a different artifact (its own bytes), never a
+/// variant, and a store entry reached through a link is not a store entry.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_store_peer_variant_copies_vlt_member_link_and_git_copy() {
+    use std::os::unix::fs::symlink;
+
+    let tmp = tempfile::tempdir().unwrap();
+    let store = tmp.path().join("node_modules").join(".vlt");
+    let entry = |id: &str| store.join(id).join("node_modules");
+    stage_npm_pkg(&entry("~npm~foo@1.0.0~peer.2"), "foo", "1.0.0").await;
+    stage_npm_pkg(&entry("~npm~foo@1.0.0~peer.3"), "foo", "1.0.0").await;
+    stage_npm_pkg(&entry("git~github_cu+foo~v1.0.0"), "foo", "1.0.0").await;
+    let elsewhere = tempfile::tempdir().unwrap();
+    stage_npm_pkg(&elsewhere.path().join("node_modules"), "foo", "1.0.0").await;
+    symlink(elsewhere.path(), store.join("~npm~foo@1.0.0~peer.4")).unwrap();
+
+    let member_nm = tmp.path().join("packages/a/node_modules");
+    tokio::fs::create_dir_all(&member_nm).await.unwrap();
+    symlink(
+        "../../../node_modules/.vlt/~npm~foo@1.0.0~peer.2/node_modules/foo",
+        member_nm.join("foo"),
+    )
+    .unwrap();
+
+    let copies = find_store_peer_variant_copies(&member_nm.join("foo")).await;
+    assert_eq!(
+        copies
+            .iter()
+            .map(|p| std::fs::canonicalize(p).unwrap())
+            .collect::<Vec<_>>(),
+        vec![std::fs::canonicalize(entry("~npm~foo@1.0.0~peer.3").join("foo")).unwrap()],
+        "exactly the peer twin; got {copies:?}"
+    );
+}
+
+/// Fail-safe gate on the vlt side too: an unreadable primary identity
+/// reports no twins.
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_store_peer_variant_copies_vlt_unreadable_primary_returns_empty() {
+    let tmp = tempfile::tempdir().unwrap();
+    let store = tmp.path().join("node_modules").join(".vlt");
+    let primary = store.join("~npm~foo@1.0.0~peer.2/node_modules/foo");
+    tokio::fs::create_dir_all(&primary).await.unwrap();
+    stage_npm_pkg(
+        &store.join("~npm~foo@1.0.0~peer.3").join("node_modules"),
+        "foo",
+        "1.0.0",
+    )
+    .await;
+    assert!(find_store_peer_variant_copies(&primary).await.is_empty());
+}
+
 // ── pnpm<=3 legacy store: stray node_modules + depth-1 home ────
 
 /// Two edge shapes of the nested legacy-store walk:
diff --git a/crates/socket-patch-core/tests/covgap_patch_apply.rs b/crates/socket-patch-core/tests/covgap_patch_apply.rs
index b4339c17..e04849ce 100644
--- a/crates/socket-patch-core/tests/covgap_patch_apply.rs
+++ b/crates/socket-patch-core/tests/covgap_patch_apply.rs
@@ -1,10 +1,11 @@
-//! Coverage-gap integration tests for `patch::apply`: the pnpm
-//! peer-variant copy FAILURE aggregation in `apply_package_patch`.
+//! Coverage-gap integration tests for `patch::apply`: the pnpm and vlt
+//! peer-variant copy FAILURE aggregation in `apply_package_patch`, and the
+//! copy-on-write guard for hardlinked store files.
 //!
 //! The success half (patching/healing every twin) lives in
 //! `crawler_npm_e2e.rs`; these exercise the fail-closed branch — a copy
 //! that cannot be patched must flip the whole result to failure with a
-//! "pnpm store copy ... failed to patch: ..." note, never report the CVE
+//! "store copy ... failed to patch: ..." note, never report the CVE
 //! fixed while a physical twin stays divergent.
 
 use std::collections::HashMap;
@@ -17,7 +18,7 @@ use socket_patch_core::patch::apply::{apply_package_patch, MismatchPolicy, Patch
 const ORIGINAL: &[u8] = b"module.exports = 'vulnerable';\n";
 const PATCHED: &[u8] = b"module.exports = 'fixed';\n";
 
-/// Stage one pnpm store entry `.pnpm/<entry>/node_modules/foo` holding a
+/// Stage one store entry `<store>/<entry>/node_modules/foo` holding a
 /// package.json and, when `index_content` is `Some`, an `index.js`.
 /// Returns the staged package root.
 async fn stage_store_entry(store: &Path, entry: &str, index_content: Option<&[u8]>) -> PathBuf {
@@ -30,23 +31,24 @@ async fn stage_store_entry(store: &Path, entry: &str, index_content: Option<&[u8
     .await
     .unwrap();
     if let Some(content) = index_content {
-        tokio::fs::write(pkg.join("index.js"), content).await.unwrap();
+        tokio::fs::write(pkg.join("index.js"), content)
+            .await
+            .unwrap();
     }
     pkg
 }
 
 /// Shared apply invocation: blob-only sources staged under `root`, one
 /// patched file `package/index.js` (ORIGINAL → PATCHED), Warn policy.
-async fn apply_foo(
-    root: &Path,
-    primary: &Path,
-) -> socket_patch_core::patch::apply::ApplyResult {
+async fn apply_foo(root: &Path, primary: &Path) -> socket_patch_core::patch::apply::ApplyResult {
     let before_hash = compute_git_sha256_from_bytes(ORIGINAL);
     let after_hash = compute_git_sha256_from_bytes(PATCHED);
 
     let blobs = root.join("blobs");
     tokio::fs::create_dir_all(&blobs).await.unwrap();
-    tokio::fs::write(blobs.join(&after_hash), PATCHED).await.unwrap();
+    tokio::fs::write(blobs.join(&after_hash), PATCHED)
+        .await
+        .unwrap();
 
     let mut files = HashMap::new();
     files.insert(
@@ -77,7 +79,7 @@ async fn apply_foo(
 /// Fail-closed invariant: after the primary store copy patches cleanly, a
 /// peer-variant twin whose pre-existing file is MISSING (a hard error
 /// under Warn) must flip the whole result to failure and surface the
-/// aggregated "pnpm store copy ... failed to patch" note — never claim
+/// aggregated "store copy ... failed to patch" note — never claim
 /// the CVE fixed with a divergent twin left behind.
 #[tokio::test]
 #[serial_test::parallel]
@@ -99,7 +101,7 @@ async fn pnpm_twin_copy_failure_fails_whole_apply_fail_closed() {
     );
     let err = result.error.as_deref().expect("aggregated error present");
     assert!(
-        err.contains("pnpm store copy"),
+        err.contains("store copy"),
         "error must carry the store-copy note: {err}"
     );
     assert!(
@@ -128,7 +130,7 @@ async fn pnpm_twin_copy_failure_fails_whole_apply_fail_closed() {
 }
 
 /// Two failing twins: the second note must be CONCATENATED onto the first
-/// (`"...; pnpm store copy ..."`), naming both twin paths.
+/// (`"...; store copy ..."`), naming both twin paths.
 #[tokio::test]
 #[serial_test::parallel]
 async fn pnpm_multiple_twin_copy_failures_aggregate_with_semicolon() {
@@ -144,7 +146,7 @@ async fn pnpm_multiple_twin_copy_failures_aggregate_with_semicolon() {
     assert!(!result.success, "two failed twins must fail the apply");
     let err = result.error.as_deref().expect("aggregated error present");
     assert!(
-        err.contains("; pnpm store copy"),
+        err.contains("; store copy"),
         "second failure must be joined onto the first with '; ': {err}"
     );
     assert!(
@@ -157,3 +159,89 @@ async fn pnpm_multiple_twin_copy_failures_aggregate_with_semicolon() {
         PATCHED
     );
 }
+
+/// The vlt twin of the fail-closed invariant: a `~peer.3` copy that cannot
+/// be patched fails the whole apply, naming that copy.
+#[tokio::test]
+#[serial_test::parallel]
+async fn vlt_twin_copy_failure_fails_whole_apply_fail_closed() {
+    let tmp = tempfile::tempdir().unwrap();
+    let store = tmp.path().join("node_modules").join(".vlt");
+
+    let primary = stage_store_entry(&store, "~npm~foo@1.0.0~peer.2", Some(ORIGINAL)).await;
+    let twin = stage_store_entry(&store, "~npm~foo@1.0.0~peer.3", None).await;
+
+    let result = apply_foo(tmp.path(), &primary).await;
+
+    assert!(!result.success, "error: {:?}", result.error);
+    let err = result.error.as_deref().expect("aggregated error present");
+    assert!(
+        err.starts_with("store copy ") && err.contains("~peer.3"),
+        "the note names the failing vlt copy: {err}"
+    );
+    assert_eq!(
+        tokio::fs::read(primary.join("index.js")).await.unwrap(),
+        PATCHED
+    );
+    assert!(!twin.join("index.js").exists());
+}
+
+/// Copy-on-write security invariant (vlt 1.2.0 hardlinks store files from
+/// `<cache>/store/v1/<hex>/` on Linux): patching a target that shares its
+/// inode with the machine-wide cache must replace the target's directory
+/// entry and never write through the shared inode. The cache link keeps
+/// its bytes and its inode; the target ends up on a private inode. Any
+/// in-place write (open for write, truncate, append, chmod before the
+/// rename) fails this test.
+#[tokio::test]
+#[serial_test::parallel]
+async fn apply_breaks_hardlink_to_shared_store_file() {
+    let tmp = tempfile::tempdir().unwrap();
+    let store = tmp.path().join("node_modules").join(".vlt");
+    let primary = stage_store_entry(&store, "~npm~foo@1.0.0", None).await;
+    let cache = tmp.path().join("cache/store/v1/0a1b2c/index.js");
+    tokio::fs::create_dir_all(cache.parent().unwrap())
+        .await
+        .unwrap();
+    tokio::fs::write(&cache, ORIGINAL).await.unwrap();
+    std::fs::hard_link(&cache, primary.join("index.js")).unwrap();
+    #[cfg(unix)]
+    let (cache_ino, cache_mode) = {
+        use std::os::unix::fs::MetadataExt as _;
+        let meta = std::fs::metadata(&cache).unwrap();
+        assert_eq!(meta.nlink(), 2, "precondition: the target is a hardlink");
+        (meta.ino(), meta.mode())
+    };
+
+    let result = apply_foo(tmp.path(), &primary).await;
+    assert!(result.success, "{:?}", result.error);
+
+    assert_eq!(
+        tokio::fs::read(primary.join("index.js")).await.unwrap(),
+        PATCHED
+    );
+    assert_eq!(
+        tokio::fs::read(&cache).await.unwrap(),
+        ORIGINAL,
+        "the shared store file must never be written through"
+    );
+    #[cfg(unix)]
+    {
+        use std::os::unix::fs::MetadataExt as _;
+        let cache_meta = std::fs::metadata(&cache).unwrap();
+        let target_meta = std::fs::metadata(primary.join("index.js")).unwrap();
+        assert_eq!(cache_meta.ino(), cache_ino, "the cache keeps its inode");
+        assert_eq!(cache_meta.mode(), cache_mode, "the cache keeps its mode");
+        assert_eq!(
+            cache_meta.nlink(),
+            1,
+            "the target no longer links the cache"
+        );
+        assert_ne!(
+            target_meta.ino(),
+            cache_ino,
+            "the target is a private inode"
+        );
+        assert_eq!(target_meta.nlink(), 1);
+    }
+}
diff --git a/crates/socket-patch-core/tests/crawler_npm_e2e.rs b/crates/socket-patch-core/tests/crawler_npm_e2e.rs
index baad09c2..d70475a9 100644
--- a/crates/socket-patch-core/tests/crawler_npm_e2e.rs
+++ b/crates/socket-patch-core/tests/crawler_npm_e2e.rs
@@ -2346,3 +2346,721 @@ async fn find_by_purls_resolves_bundled_only_target_via_fallback_pass() {
         host_nm.join("host").join("node_modules").join("leaf")
     );
 }
+
+// ── vlt store (.vlt), staged from captured real layouts ────────
+
+/// The eras with a captured `vlt install` layout under
+/// `tests/fixtures/vlt-trees/<version>/listing.json`: legacy `··` (0.0.0-32),
+/// legacy `·npm·` with `ṗ` peers (rc.14), and tilde with hashed peers
+/// (1.0.10, 1.2.0).
+#[cfg(unix)]
+const VLT_TREES: [&str; 4] = ["0.0.0-32", "1.0.0-rc.14", "1.0.10", "1.2.0"];
+
+#[cfg(unix)]
+fn vlt_listing(tree: &str) -> serde_json::Value {
+    let path = Path::new(env!("CARGO_MANIFEST_DIR"))
+        .join("tests/fixtures/vlt-trees")
+        .join(tree)
+        .join("listing.json");
+    serde_json::from_slice(&std::fs::read(&path).unwrap()).unwrap()
+}
+
+/// `(path relative to the entry's node_modules, name, version)` of every
+/// real package dir in a listed `node_modules`.
+#[cfg(unix)]
+fn listed_packages(modules: &serde_json::Value) -> Vec<(String, String, String)> {
+    modules
+        .as_object()
+        .unwrap()
+        .iter()
+        .filter_map(|(rel, desc)| {
+            let pkg = desc.get("pkg")?;
+            Some((
+                rel.clone(),
+                pkg["name"].as_str().unwrap().to_string(),
+                pkg["version"].as_str().unwrap().to_string(),
+            ))
+        })
+        .collect()
+}
+
+/// Recreate one listed `node_modules`: real package dirs (a package.json
+/// with the captured identity), other real dirs, and the captured relative
+/// links, byte for byte.
+#[cfg(unix)]
+async fn stage_listed_modules(nm: &Path, modules: &serde_json::Value) {
+    tokio::fs::create_dir_all(nm).await.unwrap();
+    for (rel, desc) in modules.as_object().unwrap() {
+        let path = nm.join(rel);
+        tokio::fs::create_dir_all(path.parent().unwrap())
+            .await
+            .unwrap();
+        if let Some(pkg) = desc.get("pkg") {
+            stage_pkg_dir(
+                &path,
+                pkg["name"].as_str().unwrap(),
+                pkg["version"].as_str().unwrap(),
+            )
+            .await;
+        } else if let Some(target) = desc.get("link").and_then(|t| t.as_str()) {
+            std::os::unix::fs::symlink(target, &path).unwrap();
+        } else if desc.get("dir").is_some() {
+            tokio::fs::create_dir_all(&path).await.unwrap();
+        } else {
+            tokio::fs::write(&path, b"").await.unwrap();
+        }
+    }
+}
+
+#[cfg(unix)]
+async fn stage_pkg_dir(dir: &Path, name: &str, version: &str) {
+    tokio::fs::create_dir_all(dir).await.unwrap();
+    tokio::fs::write(
+        dir.join("package.json"),
+        format!(r#"{{"name":"{name}","version":"{version}"}}"#),
+    )
+    .await
+    .unwrap();
+}
+
+/// Stage a captured vlt layout under `root` and return its root
+/// `node_modules`: the `.vlt` store (entries, hoist dir, `vlt.json`), the
+/// hidden lock, the importer links, workspace members' link-only
+/// `node_modules`, and the non-store dirs importer links point at.
+#[cfg(unix)]
+async fn stage_vlt_tree(root: &Path, listing: &serde_json::Value) -> std::path::PathBuf {
+    let nm = root.join("node_modules");
+    let store = nm.join(".vlt");
+    tokio::fs::create_dir_all(&store).await.unwrap();
+    tokio::fs::write(nm.join(".vlt-lock.json"), b"{}")
+        .await
+        .unwrap();
+    for file in listing["storeFiles"].as_array().unwrap() {
+        tokio::fs::write(store.join(file.as_str().unwrap()), b"{}")
+            .await
+            .unwrap();
+    }
+    stage_listed_modules(&store.join("node_modules"), &listing["hoist"]).await;
+    for entry in listing["store"].as_array().unwrap() {
+        let id = entry["id"].as_str().unwrap();
+        stage_listed_modules(&store.join(id).join("node_modules"), &entry["node_modules"]).await;
+    }
+    stage_listed_modules(&nm, &listing["importers"]).await;
+    for (member, modules) in listing["members"].as_object().unwrap() {
+        stage_listed_modules(&root.join(member).join("node_modules"), modules).await;
+    }
+    for (dir, pkg) in listing["linkTargets"].as_object().unwrap() {
+        stage_pkg_dir(
+            &root.join(dir),
+            pkg["name"].as_str().unwrap(),
+            pkg["version"].as_str().unwrap(),
+        )
+        .await;
+    }
+    nm
+}
+
+#[cfg(unix)]
+fn npm_purl(name: &str, version: &str) -> String {
+    format!("pkg:npm/{name}@{version}")
+}
+
+/// Every real package dir of a staged listing, keyed by purl: the store
+/// copies (`.vlt/<DepID>/node_modules/<name>`) and the non-store link
+/// targets (`file:` directory deps, workspace members).
+#[cfg(unix)]
+fn vlt_real_copies(
+    root: &Path,
+    listing: &serde_json::Value,
+) -> std::collections::BTreeMap<String, Vec<std::path::PathBuf>> {
+    let store = root.join("node_modules/.vlt");
+    let mut out: std::collections::BTreeMap<String, Vec<std::path::PathBuf>> =
+        std::collections::BTreeMap::new();
+    for entry in listing["store"].as_array().unwrap() {
+        let entry_nm = store
+            .join(entry["id"].as_str().unwrap())
+            .join("node_modules");
+        for (rel, name, version) in listed_packages(&entry["node_modules"]) {
+            out.entry(npm_purl(&name, &version))
+                .or_default()
+                .push(entry_nm.join(rel));
+        }
+    }
+    for (dir, pkg) in listing["linkTargets"].as_object().unwrap() {
+        out.entry(npm_purl(
+            pkg["name"].as_str().unwrap(),
+            pkg["version"].as_str().unwrap(),
+        ))
+        .or_default()
+        .push(root.join(dir));
+    }
+    out
+}
+
+/// The importer-root key an importer link for `purl` is installed under,
+/// when its key IS the package name (aliases like `lp-alias` are not).
+#[cfg(unix)]
+fn vlt_importer_key(listing: &serde_json::Value, root: &Path, purl: &str) -> Option<String> {
+    let nm = root.join("node_modules");
+    listing["importers"]
+        .as_object()
+        .unwrap()
+        .keys()
+        .find(|key| {
+            let Ok(text) = std::fs::read_to_string(nm.join(key).join("package.json")) else {
+                return false;
+            };
+            let pkg: serde_json::Value = serde_json::from_str(&text).unwrap();
+            let (name, version) = (
+                pkg["name"].as_str().unwrap(),
+                pkg["version"].as_str().unwrap(),
+            );
+            name == key.as_str() && npm_purl(name, version) == purl
+        })
+        .cloned()
+}
+
+#[cfg(unix)]
+fn canonical(path: &Path) -> std::path::PathBuf {
+    std::fs::canonicalize(path).unwrap_or_else(|e| panic!("{}: {e}", path.display()))
+}
+
+/// Every installed package of every captured era resolves: direct deps at
+/// their importer-root link (BFS root-first), transitive-only packages
+/// (`ms` under `debug`, the whole git dependency's dev tree) at their store
+/// copy, aliases (`lp-alias` → `left-pad@1.1.3`) through the store entry
+/// named after the real package, and each resolved path is a real copy of
+/// exactly that `name@version`.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_resolves_vlt_store_transitives() {
+    for tree in VLT_TREES {
+        let tmp = tempfile::tempdir().unwrap();
+        let listing = vlt_listing(tree);
+        let nm = stage_vlt_tree(tmp.path(), &listing).await;
+        let copies = vlt_real_copies(tmp.path(), &listing);
+        let purls: Vec<String> = copies.keys().cloned().collect();
+        assert!(purls.len() > 200, "{tree}: the capture is the full tree");
+
+        let result = NpmCrawler.find_by_purls(&nm, &purls).await.unwrap();
+        for purl in &purls {
+            let found = result
+                .get(purl)
+                .unwrap_or_else(|| panic!("{tree}: {purl} must resolve"));
+            let allowed: Vec<_> = copies[purl].iter().map(|p| canonical(p)).collect();
+            for pkg in found {
+                assert!(
+                    allowed.contains(&canonical(&pkg.path)),
+                    "{tree}: {purl} resolved to {} which is no copy of it",
+                    pkg.path.display()
+                );
+            }
+            if let Some(key) = vlt_importer_key(&listing, tmp.path(), purl) {
+                assert_eq!(
+                    found[0].path,
+                    nm.join(&key),
+                    "{tree}: the importer link wins for {purl}"
+                );
+            }
+        }
+        let ms = &result["pkg:npm/ms@2.1.3"];
+        assert!(
+            ms.iter().any(|p| p
+                .path
+                .strip_prefix(nm.join(".vlt"))
+                .is_ok_and(|rel| rel.to_string_lossy().contains("debug"))),
+            "{tree}: the modifier-extra ms entry must resolve; got {ms:?}"
+        );
+        let alias = &result["pkg:npm/left-pad@1.1.3"];
+        assert_eq!(
+            alias[0].path.parent().unwrap().parent().unwrap().parent(),
+            Some(nm.join(".vlt").as_path()),
+            "{tree}: the alias resolves through its own store entry"
+        );
+    }
+}
+
+/// Scan twin: `crawl_all` inventories every package of every captured era
+/// exactly once. Importer links win the `seen` dedup at their importer
+/// path, everything else is recorded at its REAL store dir (a dependency
+/// link inside another entry never double-counts), and the internal hoist
+/// dir never contributes a path.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn crawl_all_inventories_vlt_store_exactly_once() {
+    for tree in VLT_TREES {
+        let tmp = tempfile::tempdir().unwrap();
+        let listing = vlt_listing(tree);
+        let nm = stage_vlt_tree(tmp.path(), &listing).await;
+        let copies = vlt_real_copies(tmp.path(), &listing);
+
+        let result = NpmCrawler.crawl_all(&options_at(tmp.path())).await;
+        let mut purls: Vec<&str> = result.iter().map(|p| p.purl.as_str()).collect();
+        purls.sort_unstable();
+        let before = purls.len();
+        purls.dedup();
+        assert_eq!(before, purls.len(), "{tree}: every purl once");
+        assert_eq!(
+            purls,
+            copies.keys().map(String::as_str).collect::<Vec<_>>(),
+            "{tree}: exactly the installed packages"
+        );
+
+        let importer_links: Vec<std::path::PathBuf> = listing["importers"]
+            .as_object()
+            .unwrap()
+            .keys()
+            .map(|key| nm.join(key))
+            .collect();
+        for pkg in &result {
+            assert!(
+                !pkg.path.starts_with(nm.join(".vlt/node_modules")),
+                "{tree}: the hoist dir is never scanned: {}",
+                pkg.path.display()
+            );
+            if importer_links.contains(&pkg.path) {
+                continue;
+            }
+            assert!(
+                copies[&pkg.purl].contains(&pkg.path),
+                "{tree}: {} must be recorded at a real copy, got {}",
+                pkg.purl,
+                pkg.path.display()
+            );
+        }
+    }
+}
+
+/// Store entries whose DepID carries an extra (a modifier `%3Aroot…` /
+/// `~_croot…`, a legacy `ṗ` peer `%E1%B9%97%3A<n>`, a hashed `~peer.<hex>`)
+/// decode to their package and resolve for a transitive-only target.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_resolves_vlt_store_entry_with_peer_extra() {
+    for tree in VLT_TREES {
+        let tmp = tempfile::tempdir().unwrap();
+        let listing = vlt_listing(tree);
+        let nm = stage_vlt_tree(tmp.path(), &listing).await;
+        let delimiter = if listing["lockfileVersion"] == 1 {
+            '~'
+        } else {
+            '·'
+        };
+
+        let mut checked = 0;
+        for entry in listing["store"].as_array().unwrap() {
+            let id = entry["id"].as_str().unwrap();
+            if !id.starts_with(delimiter) || id.split(delimiter).count() != 4 {
+                continue;
+            }
+            for (rel, name, version) in listed_packages(&entry["node_modules"]) {
+                let purl = npm_purl(&name, &version);
+                if vlt_importer_key(&listing, tmp.path(), &purl).is_some() {
+                    continue;
+                }
+                let result = NpmCrawler
+                    .find_by_purls(&nm, std::slice::from_ref(&purl))
+                    .await
+                    .unwrap();
+                let want = nm.join(".vlt").join(id).join("node_modules").join(rel);
+                assert!(
+                    result
+                        .get(&purl)
+                        .is_some_and(|found| found.iter().any(|p| p.path == want)),
+                    "{tree}: {purl} must resolve to {}; got {result:?}",
+                    want.display()
+                );
+                checked += 1;
+            }
+        }
+        assert!(
+            checked > 0,
+            "{tree}: the capture holds extra-bearing entries"
+        );
+    }
+}
+
+/// git, remote and `file:` tarball store entries (`git~…`, `remote·…`,
+/// `file~vendor+ms-2.1.2.tgz`) and a registry-shaped id that does not
+/// decode (`%ZZ`) reveal no identity from their names, so they stay
+/// probeable and the package inside resolves by its package.json.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_probes_undecodable_vlt_store_entry() {
+    for tree in VLT_TREES {
+        let tmp = tempfile::tempdir().unwrap();
+        let listing = vlt_listing(tree);
+        let nm = stage_vlt_tree(tmp.path(), &listing).await;
+        let store = nm.join(".vlt");
+        let bad = store.join("·npm·wanted%ZZ@1.0.0").join("node_modules");
+        stage_pkg_dir(&bad.join("wanted"), "wanted", "1.0.0").await;
+
+        let find = |purl: &'static str| {
+            let nm = nm.clone();
+            async move {
+                NpmCrawler
+                    .find_by_purls(&nm, &[purl.to_string()])
+                    .await
+                    .unwrap()
+                    .remove(purl)
+                    .unwrap_or_default()
+            }
+        };
+        let remote = find("pkg:npm/left-pad@1.2.0").await;
+        assert!(
+            remote
+                .iter()
+                .any(|p| p.path.to_string_lossy().contains("remote")),
+            "{tree}: the remote tarball entry must be probed; got {remote:?}"
+        );
+        let file = find("pkg:npm/ms@2.1.2").await;
+        assert!(
+            file.iter()
+                .any(|p| p.path.to_string_lossy().contains("ms-2.1.2.tgz")),
+            "{tree}: the file: tarball entry must be probed; got {file:?}"
+        );
+        let wanted = find("pkg:npm/wanted@1.0.0").await;
+        assert_eq!(
+            wanted.iter().map(|p| p.path.clone()).collect::<Vec<_>>(),
+            vec![bad.join("wanted")],
+            "{tree}: an undecodable id stays probeable"
+        );
+    }
+}
+
+/// What the traversal must never read inside `.vlt`: the hoist dir
+/// `node_modules` (links plus real `@scope` dirs), the `vlt.json` file,
+/// `.VLT.DELETE.<key>.<DepID>` rollback staging, an entry dir without its
+/// own `node_modules`, an entry reached through a link, and an entry's
+/// `.bin`. Decoy packages sit in each; none may resolve or be scanned.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_and_crawl_all_skip_vlt_hoist_dir_and_vlt_json_and_delete_staging() {
+    let tmp = tempfile::tempdir().unwrap();
+    let listing = vlt_listing("1.2.0");
+    let nm = stage_vlt_tree(tmp.path(), &listing).await;
+    let store = nm.join(".vlt");
+    assert!(store.join("vlt.json").is_file());
+    assert!(store.join("node_modules/@babel").is_dir());
+
+    stage_pkg_dir(
+        &store.join("node_modules/hoist-decoy"),
+        "hoist-decoy",
+        "9.9.9",
+    )
+    .await;
+    stage_pkg_dir(
+        &store.join("node_modules/@babel/scoped-decoy"),
+        "@babel/scoped-decoy",
+        "9.9.9",
+    )
+    .await;
+    stage_pkg_dir(
+        &store.join(".VLT.DELETE.4f2a.~npm~ghost@1.0.0/node_modules/ghost"),
+        "ghost",
+        "1.0.0",
+    )
+    .await;
+    stage_pkg_dir(&store.join("~npm~bare@1.0.0/bare"), "bare", "1.0.0").await;
+    let outside = tempfile::tempdir().unwrap();
+    stage_pkg_dir(
+        &outside.path().join("node_modules/linked"),
+        "linked",
+        "1.0.0",
+    )
+    .await;
+    std::os::unix::fs::symlink(outside.path(), store.join("~npm~linked@1.0.0")).unwrap();
+    stage_pkg_dir(
+        &store.join("~npm~left-pad@1.3.0/node_modules/.bin/bin-decoy"),
+        "bin-decoy",
+        "9.9.9",
+    )
+    .await;
+
+    let decoys = [
+        "pkg:npm/hoist-decoy@9.9.9",
+        "pkg:npm/@babel/scoped-decoy@9.9.9",
+        "pkg:npm/ghost@1.0.0",
+        "pkg:npm/bare@1.0.0",
+        "pkg:npm/linked@1.0.0",
+        "pkg:npm/bin-decoy@9.9.9",
+    ];
+    let purls: Vec<String> = decoys.iter().map(|p| p.to_string()).collect();
+    let result = NpmCrawler.find_by_purls(&nm, &purls).await.unwrap();
+    assert!(result.is_empty(), "no decoy resolves; got {result:?}");
+
+    let scanned = NpmCrawler.crawl_all(&options_at(tmp.path())).await;
+    for decoy in decoys {
+        assert!(
+            !scanned.iter().any(|p| p.purl == decoy),
+            "{decoy} must not be scanned"
+        );
+    }
+    assert_eq!(
+        scanned.len(),
+        vlt_real_copies(tmp.path(), &listing).len(),
+        "the real packages are still all scanned"
+    );
+}
+
+/// A vlt workspace (rc.22 capture): the root store is scanned once, and
+/// the members' `node_modules` (links only, found by the unchanged
+/// workspace walk) add only what the root does not link: the
+/// workspace-to-workspace link `@scope/b`.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn crawl_all_inventories_vlt_workspace_root_store_once() {
+    let tmp = tempfile::tempdir().unwrap();
+    let listing = vlt_listing("1.0.0-rc.22-workspace");
+    let nm = stage_vlt_tree(tmp.path(), &listing).await;
+
+    let mut roots = NpmCrawler
+        .get_node_modules_paths(&options_at(tmp.path()))
+        .await
+        .unwrap();
+    roots.sort();
+    assert_eq!(
+        roots,
+        vec![
+            nm.clone(),
+            tmp.path().join("packages/a/node_modules"),
+            tmp.path().join("packages/b/node_modules"),
+        ]
+    );
+
+    let result = NpmCrawler.crawl_all(&options_at(tmp.path())).await;
+    let mut purls: Vec<&str> = result.iter().map(|p| p.purl.as_str()).collect();
+    purls.sort_unstable();
+    let copies = vlt_real_copies(tmp.path(), &listing);
+    assert_eq!(purls, copies.keys().map(String::as_str).collect::<Vec<_>>());
+    let b = result
+        .iter()
+        .find(|p| p.purl == "pkg:npm/@scope/b@1.0.0")
+        .unwrap();
+    assert_eq!(b.path, tmp.path().join("packages/a/node_modules/@scope/b"));
+    let react17 = result
+        .iter()
+        .find(|p| p.purl == "pkg:npm/react@17.0.2")
+        .unwrap();
+    assert_eq!(
+        react17.path,
+        nm.join(".vlt/~npm~react@17.0.2/node_modules/react"),
+        "store copies are scanned once, from the root store"
+    );
+}
+
+/// The apply fixture shared by the vlt fan-out tests: one patched file
+/// `package/index.js` and the blobs to apply and roll it back.
+#[cfg(unix)]
+struct VltPatch {
+    files: std::collections::HashMap<String, socket_patch_core::manifest::schema::PatchFileInfo>,
+    blobs: std::path::PathBuf,
+}
+
+#[cfg(unix)]
+const VLT_ORIGINAL: &[u8] = b"module.exports = 'vulnerable';\n";
+#[cfg(unix)]
+const VLT_PATCHED: &[u8] = b"module.exports = 'fixed';\n";
+
+#[cfg(unix)]
+async fn vlt_patch(root: &Path) -> VltPatch {
+    use socket_patch_core::hash::git_sha256::compute_git_sha256_from_bytes;
+    use socket_patch_core::manifest::schema::PatchFileInfo;
+
+    let before_hash = compute_git_sha256_from_bytes(VLT_ORIGINAL);
+    let after_hash = compute_git_sha256_from_bytes(VLT_PATCHED);
+    let blobs = root.join("blobs");
+    tokio::fs::create_dir_all(&blobs).await.unwrap();
+    tokio::fs::write(blobs.join(&after_hash), VLT_PATCHED)
+        .await
+        .unwrap();
+    tokio::fs::write(blobs.join(&before_hash), VLT_ORIGINAL)
+        .await
+        .unwrap();
+    let files = std::collections::HashMap::from([(
+        "package/index.js".to_string(),
+        PatchFileInfo {
+            before_hash,
+            after_hash,
+        },
+    )]);
+    VltPatch { files, blobs }
+}
+
+#[cfg(unix)]
+async fn vlt_apply(
+    purl: &str,
+    primary: &Path,
+    patch: &VltPatch,
+) -> socket_patch_core::patch::apply::ApplyResult {
+    use socket_patch_core::patch::apply::{apply_package_patch, MismatchPolicy, PatchSources};
+    let sources = PatchSources {
+        blobs_path: &patch.blobs,
+        packages_path: None,
+        diffs_path: None,
+        mem_blobs: None,
+    };
+    apply_package_patch(
+        purl,
+        primary,
+        &patch.files,
+        &sources,
+        None,
+        false,
+        MismatchPolicy::Warn,
+    )
+    .await
+}
+
+/// Every physical store copy of one `name@version` is patched and rolled
+/// back from a single primary: the rc.22 capture's real `~peer.2` /
+/// `~peer.3` entries of use-sync-external-store (primary = the member's
+/// link), a legacy-era `··left-pad@1.3.0` / `·npm·left-pad@1.3.0` pair
+/// (vlt #1328), and a modifier twin of `ms@2.1.3` beside the captured
+/// `~_croot…` entry. Every copy hardlinks one "global store" file, which
+/// must never change (copy-on-write per copy).
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn apply_and_rollback_reach_every_vlt_variant_copy() {
+    use socket_patch_core::patch::rollback::rollback_package_patch;
+
+    struct Case {
+        tree: &'static str,
+        purl: &'static str,
+        name: &'static str,
+        primary: &'static str,
+        twins: &'static [&'static str],
+    }
+    let cases = [
+        Case {
+            tree: "1.0.0-rc.22-workspace",
+            purl: "pkg:npm/use-sync-external-store@1.2.0",
+            name: "use-sync-external-store",
+            primary: "packages/a/node_modules/use-sync-external-store",
+            twins: &[],
+        },
+        Case {
+            tree: "0.0.0-32",
+            purl: "pkg:npm/left-pad@1.3.0",
+            name: "left-pad",
+            primary: "node_modules/left-pad",
+            twins: &["·npm·left-pad@1.3.0"],
+        },
+        Case {
+            tree: "1.2.0",
+            purl: "pkg:npm/ms@2.1.3",
+            name: "ms",
+            primary: "node_modules/.vlt/~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms/node_modules/ms",
+            twins: &["~npm~ms@2.1.3"],
+        },
+    ];
+    for case in cases {
+        let tmp = tempfile::tempdir().unwrap();
+        let listing = vlt_listing(case.tree);
+        let nm = stage_vlt_tree(tmp.path(), &listing).await;
+        let version = case.purl.rsplit_once('@').unwrap().1;
+        for twin in case.twins {
+            stage_pkg_dir(
+                &nm.join(".vlt")
+                    .join(twin)
+                    .join("node_modules")
+                    .join(case.name),
+                case.name,
+                version,
+            )
+            .await;
+        }
+        let copies = vlt_real_copies(tmp.path(), &listing)[case.purl].clone();
+        let mut copies: Vec<_> = copies
+            .into_iter()
+            .chain(
+                case.twins
+                    .iter()
+                    .map(|t| nm.join(".vlt").join(t).join("node_modules").join(case.name)),
+            )
+            .collect();
+        copies.retain(|c| c.starts_with(nm.join(".vlt")));
+        assert!(copies.len() >= 2, "{}: several copies", case.tree);
+
+        let cas = tmp.path().join("cas-index.js");
+        tokio::fs::write(&cas, VLT_ORIGINAL).await.unwrap();
+        for copy in &copies {
+            std::fs::hard_link(&cas, copy.join("index.js")).unwrap();
+        }
+        let patch = vlt_patch(tmp.path()).await;
+        let primary = tmp.path().join(case.primary);
+        assert!(primary.join("package.json").is_file(), "{}", case.tree);
+
+        let result = vlt_apply(case.purl, &primary, &patch).await;
+        assert!(result.success, "{}: {:?}", case.tree, result.error);
+        for copy in &copies {
+            assert_eq!(
+                tokio::fs::read(copy.join("index.js")).await.unwrap(),
+                VLT_PATCHED,
+                "{}: every store copy is patched ({})",
+                case.tree,
+                copy.display()
+            );
+        }
+        assert_eq!(tokio::fs::read(&cas).await.unwrap(), VLT_ORIGINAL);
+
+        let rb =
+            rollback_package_patch(case.purl, &primary, &patch.files, &patch.blobs, false).await;
+        assert!(rb.success, "{}: {:?}", case.tree, rb.error);
+        for copy in &copies {
+            assert_eq!(
+                tokio::fs::read(copy.join("index.js")).await.unwrap(),
+                VLT_ORIGINAL,
+                "{}: every store copy is restored ({})",
+                case.tree,
+                copy.display()
+            );
+        }
+        assert_eq!(tokio::fs::read(&cas).await.unwrap(), VLT_ORIGINAL);
+    }
+}
+
+/// Healing half: an earlier single-copy apply left the `~peer.2` primary
+/// patched and the `~peer.3` twin vulnerable. The rerun reports the primary
+/// AlreadyPatched and must still patch the twin.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn apply_heals_unpatched_vlt_twin_when_primary_already_patched() {
+    let tmp = tempfile::tempdir().unwrap();
+    let listing = vlt_listing("1.0.0-rc.22-workspace");
+    let nm = stage_vlt_tree(tmp.path(), &listing).await;
+    let store = nm.join(".vlt");
+    let primary_copy = store
+        .join("~npm~use-sync-external-store@1.2.0~peer.2/node_modules/use-sync-external-store");
+    let twin = store
+        .join("~npm~use-sync-external-store@1.2.0~peer.3/node_modules/use-sync-external-store");
+    tokio::fs::write(primary_copy.join("index.js"), VLT_PATCHED)
+        .await
+        .unwrap();
+    tokio::fs::write(twin.join("index.js"), VLT_ORIGINAL)
+        .await
+        .unwrap();
+    let patch = vlt_patch(tmp.path()).await;
+
+    let result = vlt_apply(
+        "pkg:npm/use-sync-external-store@1.2.0",
+        &tmp.path()
+            .join("packages/a/node_modules/use-sync-external-store"),
+        &patch,
+    )
+    .await;
+    assert!(result.success, "{:?}", result.error);
+    assert_eq!(
+        tokio::fs::read(twin.join("index.js")).await.unwrap(),
+        VLT_PATCHED,
+        "an AlreadyPatched primary must not mask a still-vulnerable twin"
+    );
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/README.md b/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/README.md
new file mode 100644
index 00000000..98718a53
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/README.md
@@ -0,0 +1,21 @@
+# vlt 0.0.0-32 installed layout
+
+`listing.json` is the on-disk layout real vlt 0.0.0-32 produced, captured with
+`scripts/capture-vlt-tree.mjs` right after a cold `vlt install` (isolated
+XDG dirs and VLT_CACHE, VLT_TELEMETRY=0, LANG=C, no lockfile). Store entry
+names are byte-exact; the crawler tests in `crawler_npm_e2e.rs` stage the
+listing as real directories, package.json files and relative symlinks.
+
+Project (`package.json` dependencies):
+
+- "left-pad": "1.3.0", "debug": "4.3.4", "@isaacs/string-locale-compare": "1.1.0"
+- "react": "18.2.0", "use-sync-external-store": "1.2.0"
+- "lp-alias": "npm:left-pad@1.1.3", "semver_x": "npm:semver@7.6.0"
+- "slc-git": "github:isaacs/string-locale-compare#v1.1.0"
+- "lp-remote": "https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz"
+- "ms-tgz": "file:./vendor/ms-2.1.2.tgz"
+- (no "localdir": 0.0.0-32 cannot link a file: directory dependency)
+
+`vlt.json`: `{"config": {"registries": {}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}`.
+
+The git dependency's devDependencies account for most store entries.
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/listing.json b/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/listing.json
new file mode 100644
index 00000000..559c45a5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/0.0.0-32/listing.json
@@ -0,0 +1,4588 @@
+{
+ "vlt": "0.0.0-32",
+ "lockfileVersion": 0,
+ "storeFiles": [
+  "vlt.json"
+ ],
+ "hoist": {
+  "@babel/code-frame": {
+   "link": "../../··@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+  },
+  "@babel/compat-data": {
+   "link": "../../··@babel§compat-data@7.29.7/node_modules/@babel/compat-data"
+  },
+  "@babel/core": {
+   "link": "../../··@babel§core@7.29.7/node_modules/@babel/core"
+  },
+  "@babel/generator": {
+   "link": "../../··@babel§generator@7.29.8/node_modules/@babel/generator"
+  },
+  "@babel/helper-compilation-targets": {
+   "link": "../../··@babel§helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+  },
+  "@babel/helper-globals": {
+   "link": "../../··@babel§helper-globals@7.29.7/node_modules/@babel/helper-globals"
+  },
+  "@babel/helper-module-imports": {
+   "link": "../../··@babel§helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+  },
+  "@babel/helper-module-transforms": {
+   "link": "../../··@babel§helper-module-transforms@7.29.7/node_modules/@babel/helper-module-transforms"
+  },
+  "@babel/helper-string-parser": {
+   "link": "../../··@babel§helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+  },
+  "@babel/helper-validator-identifier": {
+   "link": "../../··@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+  },
+  "@babel/helper-validator-option": {
+   "link": "../../··@babel§helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+  },
+  "@babel/helpers": {
+   "link": "../../··@babel§helpers@7.29.7/node_modules/@babel/helpers"
+  },
+  "@babel/parser": {
+   "link": "../../··@babel§parser@7.29.9/node_modules/@babel/parser"
+  },
+  "@babel/template": {
+   "link": "../../··@babel§template@7.29.7/node_modules/@babel/template"
+  },
+  "@babel/traverse": {
+   "link": "../../··@babel§traverse@7.29.8/node_modules/@babel/traverse"
+  },
+  "@babel/types": {
+   "link": "../../··@babel§types@7.29.8/node_modules/@babel/types"
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../../··@isaacs§string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "@istanbuljs/load-nyc-config": {
+   "link": "../../··@istanbuljs§load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+  },
+  "@istanbuljs/schema": {
+   "link": "../../··@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+  },
+  "@jridgewell/gen-mapping": {
+   "link": "../../··@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+  },
+  "@jridgewell/remapping": {
+   "link": "../../··@jridgewell§remapping@2.3.5/node_modules/@jridgewell/remapping"
+  },
+  "@jridgewell/resolve-uri": {
+   "link": "../../··@jridgewell§resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+  },
+  "@jridgewell/sourcemap-codec": {
+   "link": "../../··@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+  },
+  "@jridgewell/trace-mapping": {
+   "link": "../../··@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+  },
+  "aggregate-error": {
+   "link": "../··aggregate-error@3.1.0/node_modules/aggregate-error"
+  },
+  "ajv": {
+   "link": "../··ajv@6.15.0/node_modules/ajv"
+  },
+  "ansi-regex": {
+   "link": "../··ansi-regex@5.0.1/node_modules/ansi-regex"
+  },
+  "ansi-styles": {
+   "link": "../··ansi-styles@4.3.0/node_modules/ansi-styles"
+  },
+  "anymatch": {
+   "link": "../··anymatch@3.1.3/node_modules/anymatch"
+  },
+  "append-transform": {
+   "link": "../··append-transform@2.0.0/node_modules/append-transform"
+  },
+  "archy": {
+   "link": "../··archy@1.0.0/node_modules/archy"
+  },
+  "argparse": {
+   "link": "../··argparse@1.0.10/node_modules/argparse"
+  },
+  "asn1": {
+   "link": "../··asn1@0.2.6/node_modules/asn1"
+  },
+  "assert-plus": {
+   "link": "../··assert-plus@1.0.0/node_modules/assert-plus"
+  },
+  "async-hook-domain": {
+   "link": "../··async-hook-domain@2.0.4/node_modules/async-hook-domain"
+  },
+  "asynckit": {
+   "link": "../··asynckit@0.4.0/node_modules/asynckit"
+  },
+  "aws-sign2": {
+   "link": "../··aws-sign2@0.7.0/node_modules/aws-sign2"
+  },
+  "aws4": {
+   "link": "../··aws4@1.13.2/node_modules/aws4"
+  },
+  "balanced-match": {
+   "link": "../··balanced-match@1.0.2/node_modules/balanced-match"
+  },
+  "baseline-browser-mapping": {
+   "link": "../··baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+  },
+  "bcrypt-pbkdf": {
+   "link": "../··bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+  },
+  "binary-extensions": {
+   "link": "../··binary-extensions@2.3.0/node_modules/binary-extensions"
+  },
+  "bind-obj-methods": {
+   "link": "../··bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+  },
+  "brace-expansion": {
+   "link": "../··brace-expansion@1.1.21/node_modules/brace-expansion"
+  },
+  "braces": {
+   "link": "../··braces@3.0.3/node_modules/braces"
+  },
+  "browserslist": {
+   "link": "../··browserslist@4.29.1/node_modules/browserslist"
+  },
+  "buffer-from": {
+   "link": "../··buffer-from@1.1.2/node_modules/buffer-from"
+  },
+  "caching-transform": {
+   "link": "../··caching-transform@4.0.0/node_modules/caching-transform"
+  },
+  "camelcase": {
+   "link": "../··camelcase@5.3.1/node_modules/camelcase"
+  },
+  "caniuse-lite": {
+   "link": "../··caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+  },
+  "caseless": {
+   "link": "../··caseless@0.12.0/node_modules/caseless"
+  },
+  "chokidar": {
+   "link": "../··chokidar@3.6.0/node_modules/chokidar"
+  },
+  "clean-stack": {
+   "link": "../··clean-stack@2.2.0/node_modules/clean-stack"
+  },
+  "cliui": {
+   "link": "../··cliui@7.0.4/node_modules/cliui"
+  },
+  "color-convert": {
+   "link": "../··color-convert@2.0.1/node_modules/color-convert"
+  },
+  "color-name": {
+   "link": "../··color-name@1.1.4/node_modules/color-name"
+  },
+  "color-support": {
+   "link": "../··color-support@1.1.3/node_modules/color-support"
+  },
+  "combined-stream": {
+   "link": "../··combined-stream@1.0.8/node_modules/combined-stream"
+  },
+  "commondir": {
+   "link": "../··commondir@1.0.1/node_modules/commondir"
+  },
+  "concat-map": {
+   "link": "../··concat-map@0.0.1/node_modules/concat-map"
+  },
+  "convert-source-map": {
+   "link": "../··convert-source-map@2.0.0/node_modules/convert-source-map"
+  },
+  "core-util-is": {
+   "link": "../··core-util-is@1.0.2/node_modules/core-util-is"
+  },
+  "coveralls": {
+   "link": "../··coveralls@3.1.1/node_modules/coveralls"
+  },
+  "cross-spawn": {
+   "link": "../··cross-spawn@7.0.6/node_modules/cross-spawn"
+  },
+  "dashdash": {
+   "link": "../··dashdash@1.14.1/node_modules/dashdash"
+  },
+  "debug": {
+   "link": "../··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+  },
+  "decamelize": {
+   "link": "../··decamelize@1.2.0/node_modules/decamelize"
+  },
+  "default-require-extensions": {
+   "link": "../··default-require-extensions@3.0.1/node_modules/default-require-extensions"
+  },
+  "delayed-stream": {
+   "link": "../··delayed-stream@1.0.0/node_modules/delayed-stream"
+  },
+  "diff": {
+   "link": "../··diff@4.0.4/node_modules/diff"
+  },
+  "ecc-jsbn": {
+   "link": "../··ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+  },
+  "electron-to-chromium": {
+   "link": "../··electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+  },
+  "emoji-regex": {
+   "link": "../··emoji-regex@8.0.0/node_modules/emoji-regex"
+  },
+  "es6-error": {
+   "link": "../··es6-error@4.1.1/node_modules/es6-error"
+  },
+  "escalade": {
+   "link": "../··escalade@3.2.0/node_modules/escalade"
+  },
+  "escape-string-regexp": {
+   "link": "../··escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+  },
+  "esprima": {
+   "link": "../··esprima@4.0.1/node_modules/esprima"
+  },
+  "events-to-array": {
+   "link": "../··events-to-array@1.1.2/node_modules/events-to-array"
+  },
+  "extend": {
+   "link": "../··extend@3.0.2/node_modules/extend"
+  },
+  "extsprintf": {
+   "link": "../··extsprintf@1.3.0/node_modules/extsprintf"
+  },
+  "fast-deep-equal": {
+   "link": "../··fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+  },
+  "fast-json-stable-stringify": {
+   "link": "../··fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+  },
+  "fill-range": {
+   "link": "../··fill-range@7.1.1/node_modules/fill-range"
+  },
+  "find-cache-dir": {
+   "link": "../··find-cache-dir@3.3.2/node_modules/find-cache-dir"
+  },
+  "find-up": {
+   "link": "../··find-up@4.1.0/node_modules/find-up"
+  },
+  "findit": {
+   "link": "../··findit@2.0.0/node_modules/findit"
+  },
+  "foreground-child": {
+   "link": "../··foreground-child@2.0.0/node_modules/foreground-child"
+  },
+  "forever-agent": {
+   "link": "../··forever-agent@0.6.1/node_modules/forever-agent"
+  },
+  "form-data": {
+   "link": "../··form-data@2.3.3/node_modules/form-data"
+  },
+  "fromentries": {
+   "link": "../··fromentries@1.3.2/node_modules/fromentries"
+  },
+  "fs-exists-cached": {
+   "link": "../··fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+  },
+  "fs.realpath": {
+   "link": "../··fs.realpath@1.0.0/node_modules/fs.realpath"
+  },
+  "fsevents": {
+   "link": "../··fsevents@2.3.3/node_modules/fsevents"
+  },
+  "function-loop": {
+   "link": "../··function-loop@2.0.1/node_modules/function-loop"
+  },
+  "gensync": {
+   "link": "../··gensync@1.0.0-beta.2/node_modules/gensync"
+  },
+  "get-caller-file": {
+   "link": "../··get-caller-file@2.0.5/node_modules/get-caller-file"
+  },
+  "get-package-type": {
+   "link": "../··get-package-type@0.1.0/node_modules/get-package-type"
+  },
+  "getpass": {
+   "link": "../··getpass@0.1.7/node_modules/getpass"
+  },
+  "glob": {
+   "link": "../··glob@7.2.3/node_modules/glob"
+  },
+  "glob-parent": {
+   "link": "../··glob-parent@5.1.2/node_modules/glob-parent"
+  },
+  "graceful-fs": {
+   "link": "../··graceful-fs@4.2.11/node_modules/graceful-fs"
+  },
+  "har-schema": {
+   "link": "../··har-schema@2.0.0/node_modules/har-schema"
+  },
+  "har-validator": {
+   "link": "../··har-validator@5.1.5/node_modules/har-validator"
+  },
+  "has-flag": {
+   "link": "../··has-flag@4.0.0/node_modules/has-flag"
+  },
+  "hasha": {
+   "link": "../··hasha@5.2.2/node_modules/hasha"
+  },
+  "html-escaper": {
+   "link": "../··html-escaper@2.0.2/node_modules/html-escaper"
+  },
+  "http-signature": {
+   "link": "../··http-signature@1.2.0/node_modules/http-signature"
+  },
+  "imurmurhash": {
+   "link": "../··imurmurhash@0.1.4/node_modules/imurmurhash"
+  },
+  "indent-string": {
+   "link": "../··indent-string@4.0.0/node_modules/indent-string"
+  },
+  "inflight": {
+   "link": "../··inflight@1.0.6/node_modules/inflight"
+  },
+  "inherits": {
+   "link": "../··inherits@2.0.4/node_modules/inherits"
+  },
+  "is-binary-path": {
+   "link": "../··is-binary-path@2.1.0/node_modules/is-binary-path"
+  },
+  "is-extglob": {
+   "link": "../··is-extglob@2.1.1/node_modules/is-extglob"
+  },
+  "is-fullwidth-code-point": {
+   "link": "../··is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+  },
+  "is-glob": {
+   "link": "../··is-glob@4.0.3/node_modules/is-glob"
+  },
+  "is-number": {
+   "link": "../··is-number@7.0.0/node_modules/is-number"
+  },
+  "is-stream": {
+   "link": "../··is-stream@2.0.1/node_modules/is-stream"
+  },
+  "is-typedarray": {
+   "link": "../··is-typedarray@1.0.0/node_modules/is-typedarray"
+  },
+  "is-windows": {
+   "link": "../··is-windows@1.0.2/node_modules/is-windows"
+  },
+  "isexe": {
+   "link": "../··isexe@2.0.0/node_modules/isexe"
+  },
+  "isstream": {
+   "link": "../··isstream@0.1.2/node_modules/isstream"
+  },
+  "istanbul-lib-coverage": {
+   "link": "../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+  },
+  "istanbul-lib-hook": {
+   "link": "../··istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+  },
+  "istanbul-lib-instrument": {
+   "link": "../··istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+  },
+  "istanbul-lib-processinfo": {
+   "link": "../··istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+  },
+  "istanbul-lib-report": {
+   "link": "../··istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+  },
+  "istanbul-lib-source-maps": {
+   "link": "../··istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+  },
+  "istanbul-reports": {
+   "link": "../··istanbul-reports@3.2.0/node_modules/istanbul-reports"
+  },
+  "jackspeak": {
+   "link": "../··jackspeak@1.4.2/node_modules/jackspeak"
+  },
+  "js-tokens": {
+   "link": "../··js-tokens@4.0.0/node_modules/js-tokens"
+  },
+  "js-yaml": {
+   "link": "../··js-yaml@3.15.2/node_modules/js-yaml"
+  },
+  "jsbn": {
+   "link": "../··jsbn@0.1.1/node_modules/jsbn"
+  },
+  "jsesc": {
+   "link": "../··jsesc@3.1.0/node_modules/jsesc"
+  },
+  "json-schema": {
+   "link": "../··json-schema@0.4.0/node_modules/json-schema"
+  },
+  "json-schema-traverse": {
+   "link": "../··json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+  },
+  "json-stringify-safe": {
+   "link": "../··json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+  },
+  "json5": {
+   "link": "../··json5@2.2.3/node_modules/json5"
+  },
+  "jsprim": {
+   "link": "../··jsprim@1.4.2/node_modules/jsprim"
+  },
+  "lcov-parse": {
+   "link": "../··lcov-parse@1.0.0/node_modules/lcov-parse"
+  },
+  "left-pad": {
+   "link": "../··left-pad@1.3.0/node_modules/left-pad"
+  },
+  "libtap": {
+   "link": "../··libtap@1.4.1/node_modules/libtap"
+  },
+  "locate-path": {
+   "link": "../··locate-path@5.0.0/node_modules/locate-path"
+  },
+  "lodash.flattendeep": {
+   "link": "../··lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+  },
+  "log-driver": {
+   "link": "../··log-driver@1.2.7/node_modules/log-driver"
+  },
+  "loose-envify": {
+   "link": "../··loose-envify@1.4.0/node_modules/loose-envify"
+  },
+  "lru-cache": {
+   "link": "../··lru-cache@6.0.0/node_modules/lru-cache"
+  },
+  "make-dir": {
+   "link": "../··make-dir@4.0.0/node_modules/make-dir"
+  },
+  "mime-db": {
+   "link": "../··mime-db@1.52.0/node_modules/mime-db"
+  },
+  "mime-types": {
+   "link": "../··mime-types@2.1.35/node_modules/mime-types"
+  },
+  "minimatch": {
+   "link": "../··minimatch@3.1.5/node_modules/minimatch"
+  },
+  "minimist": {
+   "link": "../··minimist@1.2.8/node_modules/minimist"
+  },
+  "minipass": {
+   "link": "../··minipass@3.3.6/node_modules/minipass"
+  },
+  "mkdirp": {
+   "link": "../··mkdirp@1.0.4/node_modules/mkdirp"
+  },
+  "ms": {
+   "link": "../file·vendor§ms-2.1.2.tgz/node_modules/ms"
+  },
+  "node-preload": {
+   "link": "../··node-preload@0.2.1/node_modules/node-preload"
+  },
+  "node-releases": {
+   "link": "../··node-releases@2.0.57/node_modules/node-releases"
+  },
+  "normalize-path": {
+   "link": "../··normalize-path@3.0.0/node_modules/normalize-path"
+  },
+  "nyc": {
+   "link": "../··nyc@15.1.0/node_modules/nyc"
+  },
+  "oauth-sign": {
+   "link": "../··oauth-sign@0.9.0/node_modules/oauth-sign"
+  },
+  "once": {
+   "link": "../··once@1.4.0/node_modules/once"
+  },
+  "opener": {
+   "link": "../··opener@1.5.2/node_modules/opener"
+  },
+  "own-or": {
+   "link": "../··own-or@1.0.0/node_modules/own-or"
+  },
+  "own-or-env": {
+   "link": "../··own-or-env@1.0.2/node_modules/own-or-env"
+  },
+  "p-limit": {
+   "link": "../··p-limit@2.3.0/node_modules/p-limit"
+  },
+  "p-locate": {
+   "link": "../··p-locate@4.1.0/node_modules/p-locate"
+  },
+  "p-map": {
+   "link": "../··p-map@3.0.0/node_modules/p-map"
+  },
+  "p-try": {
+   "link": "../··p-try@2.2.0/node_modules/p-try"
+  },
+  "package-hash": {
+   "link": "../··package-hash@4.0.0/node_modules/package-hash"
+  },
+  "path-exists": {
+   "link": "../··path-exists@4.0.0/node_modules/path-exists"
+  },
+  "path-is-absolute": {
+   "link": "../··path-is-absolute@1.0.1/node_modules/path-is-absolute"
+  },
+  "path-key": {
+   "link": "../··path-key@3.1.1/node_modules/path-key"
+  },
+  "performance-now": {
+   "link": "../··performance-now@2.1.0/node_modules/performance-now"
+  },
+  "picocolors": {
+   "link": "../··picocolors@1.1.1/node_modules/picocolors"
+  },
+  "picomatch": {
+   "link": "../··picomatch@2.3.2/node_modules/picomatch"
+  },
+  "pkg-dir": {
+   "link": "../··pkg-dir@4.2.0/node_modules/pkg-dir"
+  },
+  "process-on-spawn": {
+   "link": "../··process-on-spawn@1.1.0/node_modules/process-on-spawn"
+  },
+  "psl": {
+   "link": "../··psl@1.15.0/node_modules/psl"
+  },
+  "punycode": {
+   "link": "../··punycode@2.3.1/node_modules/punycode"
+  },
+  "qs": {
+   "link": "../··qs@6.5.5/node_modules/qs"
+  },
+  "react": {
+   "link": "../··react@18.2.0/node_modules/react"
+  },
+  "readdirp": {
+   "link": "../··readdirp@3.6.0/node_modules/readdirp"
+  },
+  "release-zalgo": {
+   "link": "../··release-zalgo@1.0.0/node_modules/release-zalgo"
+  },
+  "request": {
+   "link": "../··request@2.88.2/node_modules/request"
+  },
+  "require-directory": {
+   "link": "../··require-directory@2.1.1/node_modules/require-directory"
+  },
+  "require-main-filename": {
+   "link": "../··require-main-filename@2.0.0/node_modules/require-main-filename"
+  },
+  "resolve-from": {
+   "link": "../··resolve-from@5.0.0/node_modules/resolve-from"
+  },
+  "rimraf": {
+   "link": "../··rimraf@3.0.2/node_modules/rimraf"
+  },
+  "safe-buffer": {
+   "link": "../··safe-buffer@5.2.1/node_modules/safe-buffer"
+  },
+  "safer-buffer": {
+   "link": "../··safer-buffer@2.1.2/node_modules/safer-buffer"
+  },
+  "semver": {
+   "link": "../·npm·semver@7.6.0/node_modules/semver"
+  },
+  "set-blocking": {
+   "link": "../··set-blocking@2.0.0/node_modules/set-blocking"
+  },
+  "shebang-command": {
+   "link": "../··shebang-command@2.0.0/node_modules/shebang-command"
+  },
+  "shebang-regex": {
+   "link": "../··shebang-regex@3.0.0/node_modules/shebang-regex"
+  },
+  "signal-exit": {
+   "link": "../··signal-exit@3.0.7/node_modules/signal-exit"
+  },
+  "source-map": {
+   "link": "../··source-map@0.6.1/node_modules/source-map"
+  },
+  "source-map-support": {
+   "link": "../··source-map-support@0.5.21/node_modules/source-map-support"
+  },
+  "spawn-wrap": {
+   "link": "../··spawn-wrap@2.0.0/node_modules/spawn-wrap"
+  },
+  "sprintf-js": {
+   "link": "../··sprintf-js@1.0.3/node_modules/sprintf-js"
+  },
+  "sshpk": {
+   "link": "../··sshpk@1.18.0/node_modules/sshpk"
+  },
+  "stack-utils": {
+   "link": "../··stack-utils@2.0.6/node_modules/stack-utils"
+  },
+  "string-width": {
+   "link": "../··string-width@4.2.3/node_modules/string-width"
+  },
+  "strip-ansi": {
+   "link": "../··strip-ansi@6.0.1/node_modules/strip-ansi"
+  },
+  "strip-bom": {
+   "link": "../··strip-bom@4.0.0/node_modules/strip-bom"
+  },
+  "supports-color": {
+   "link": "../··supports-color@7.2.0/node_modules/supports-color"
+  },
+  "tap": {
+   "link": "../··tap@15.2.3/node_modules/tap"
+  },
+  "tap-mocha-reporter": {
+   "link": "../··tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+  },
+  "tap-parser": {
+   "link": "../··tap-parser@11.0.2/node_modules/tap-parser"
+  },
+  "tap-yaml": {
+   "link": "../··tap-yaml@1.0.2/node_modules/tap-yaml"
+  },
+  "tcompare": {
+   "link": "../··tcompare@5.0.7/node_modules/tcompare"
+  },
+  "test-exclude": {
+   "link": "../··test-exclude@6.0.0/node_modules/test-exclude"
+  },
+  "to-regex-range": {
+   "link": "../··to-regex-range@5.0.1/node_modules/to-regex-range"
+  },
+  "tough-cookie": {
+   "link": "../··tough-cookie@2.5.0/node_modules/tough-cookie"
+  },
+  "trivial-deferred": {
+   "link": "../··trivial-deferred@1.1.2/node_modules/trivial-deferred"
+  },
+  "tunnel-agent": {
+   "link": "../··tunnel-agent@0.6.0/node_modules/tunnel-agent"
+  },
+  "tweetnacl": {
+   "link": "../··tweetnacl@0.14.5/node_modules/tweetnacl"
+  },
+  "type-fest": {
+   "link": "../··type-fest@0.8.1/node_modules/type-fest"
+  },
+  "typedarray-to-buffer": {
+   "link": "../··typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+  },
+  "unicode-length": {
+   "link": "../··unicode-length@2.1.0/node_modules/unicode-length"
+  },
+  "update-browserslist-db": {
+   "link": "../··update-browserslist-db@1.3.3/node_modules/update-browserslist-db"
+  },
+  "uri-js": {
+   "link": "../··uri-js@4.4.1/node_modules/uri-js"
+  },
+  "use-sync-external-store": {
+   "link": "../··use-sync-external-store@1.2.0/node_modules/use-sync-external-store"
+  },
+  "uuid": {
+   "link": "../··uuid@8.3.2/node_modules/uuid"
+  },
+  "verror": {
+   "link": "../··verror@1.10.0/node_modules/verror"
+  },
+  "which": {
+   "link": "../··which@2.0.2/node_modules/which"
+  },
+  "which-module": {
+   "link": "../··which-module@2.0.1/node_modules/which-module"
+  },
+  "wrap-ansi": {
+   "link": "../··wrap-ansi@7.0.0/node_modules/wrap-ansi"
+  },
+  "wrappy": {
+   "link": "../··wrappy@1.0.2/node_modules/wrappy"
+  },
+  "write-file-atomic": {
+   "link": "../··write-file-atomic@3.0.3/node_modules/write-file-atomic"
+  },
+  "y18n": {
+   "link": "../··y18n@4.0.3/node_modules/y18n"
+  },
+  "yallist": {
+   "link": "../··yallist@4.0.0/node_modules/yallist"
+  },
+  "yaml": {
+   "link": "../··yaml@1.10.3/node_modules/yaml"
+  },
+  "yargs": {
+   "link": "../··yargs@15.4.1/node_modules/yargs"
+  },
+  "yargs-parser": {
+   "link": "../··yargs-parser@18.1.3/node_modules/yargs-parser"
+  }
+ },
+ "store": [
+  {
+   "id": "file·vendor§ms-2.1.2.tgz",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "git·github%3Aisaacs§string-locale-compare·v1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    },
+    "tap": {
+     "link": "../../··tap@15.2.3/node_modules/tap"
+    }
+   }
+  },
+  {
+   "id": "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·left-pad@1.1.3",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·semver@7.6.0",
+   "node_modules": {
+    "lru-cache": {
+     "link": "../../··lru-cache@6.0.0/node_modules/lru-cache"
+    },
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "7.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§code-frame@7.29.7",
+   "node_modules": {
+    "@babel/code-frame": {
+     "pkg": {
+      "name": "@babel/code-frame",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../··@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "js-tokens": {
+     "link": "../../··js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "picocolors": {
+     "link": "../../··picocolors@1.1.1/node_modules/picocolors"
+    }
+   }
+  },
+  {
+   "id": "··@babel§compat-data@7.29.7",
+   "node_modules": {
+    "@babel/compat-data": {
+     "pkg": {
+      "name": "@babel/compat-data",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§core@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../··@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/core": {
+     "pkg": {
+      "name": "@babel/core",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/generator": {
+     "link": "../../../··@babel§generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-compilation-targets": {
+     "link": "../../../··@babel§helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+    },
+    "@babel/helper-module-transforms": {
+     "link": "../../../··@babel§helper-module-transforms@7.29.7/node_modules/@babel/helper-module-transforms"
+    },
+    "@babel/helpers": {
+     "link": "../../../··@babel§helpers@7.29.7/node_modules/@babel/helpers"
+    },
+    "@babel/parser": {
+     "link": "../../../··@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../··@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "link": "../../../··@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/remapping": {
+     "link": "../../../··@jridgewell§remapping@2.3.5/node_modules/@jridgewell/remapping"
+    },
+    "convert-source-map": {
+     "link": "../../··convert-source-map@2.0.0/node_modules/convert-source-map"
+    },
+    "debug": {
+     "link": "../../··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "gensync": {
+     "link": "../../··gensync@1.0.0-beta.2/node_modules/gensync"
+    },
+    "json5": {
+     "link": "../../··json5@2.2.3/node_modules/json5"
+    },
+    "semver": {
+     "link": "../../··semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "··@babel§generator@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/generator": {
+     "pkg": {
+      "name": "@babel/generator",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/parser": {
+     "link": "../../../··@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/gen-mapping": {
+     "link": "../../../··@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../··@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    },
+    "jsesc": {
+     "link": "../../··jsesc@3.1.0/node_modules/jsesc"
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-compilation-targets@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/compat-data": {
+     "link": "../../../··@babel§compat-data@7.29.7/node_modules/@babel/compat-data"
+    },
+    "@babel/helper-compilation-targets": {
+     "pkg": {
+      "name": "@babel/helper-compilation-targets",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-option": {
+     "link": "../../../··@babel§helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+    },
+    "browserslist": {
+     "link": "../../··browserslist@4.29.1/node_modules/browserslist"
+    },
+    "lru-cache": {
+     "link": "../../··lru-cache@5.1.1/node_modules/lru-cache"
+    },
+    "semver": {
+     "link": "../../··semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-globals@7.29.7",
+   "node_modules": {
+    "@babel/helper-globals": {
+     "pkg": {
+      "name": "@babel/helper-globals",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-module-imports@7.29.7",
+   "node_modules": {
+    "@babel/helper-module-imports": {
+     "pkg": {
+      "name": "@babel/helper-module-imports",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/traverse": {
+     "link": "../../../··@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-module-transforms@7.29.7",
+   "node_modules": {
+    "@babel/core": {
+     "link": "../../../··@babel§core@7.29.7/node_modules/@babel/core"
+    },
+    "@babel/helper-module-imports": {
+     "link": "../../../··@babel§helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+    },
+    "@babel/helper-module-transforms": {
+     "pkg": {
+      "name": "@babel/helper-module-transforms",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../··@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/traverse": {
+     "link": "../../../··@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-string-parser@7.29.7",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "pkg": {
+      "name": "@babel/helper-string-parser",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-validator-identifier@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-identifier": {
+     "pkg": {
+      "name": "@babel/helper-validator-identifier",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§helper-validator-option@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-option": {
+     "pkg": {
+      "name": "@babel/helper-validator-option",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@babel§helpers@7.29.7",
+   "node_modules": {
+    "@babel/helpers": {
+     "pkg": {
+      "name": "@babel/helpers",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/template": {
+     "link": "../../../··@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "··@babel§parser@7.29.9",
+   "node_modules": {
+    "@babel/parser": {
+     "pkg": {
+      "name": "@babel/parser",
+      "version": "7.29.9"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "··@babel§template@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../··@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/parser": {
+     "link": "../../../··@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "pkg": {
+      "name": "@babel/template",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "··@babel§traverse@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../··@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/generator": {
+     "link": "../../../··@babel§generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-globals": {
+     "link": "../../../··@babel§helper-globals@7.29.7/node_modules/@babel/helper-globals"
+    },
+    "@babel/parser": {
+     "link": "../../../··@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../··@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "pkg": {
+      "name": "@babel/traverse",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../··@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "debug": {
+     "link": "../../··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    }
+   }
+  },
+  {
+   "id": "··@babel§types@7.29.8",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "link": "../../../··@babel§helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../··@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/types": {
+     "pkg": {
+      "name": "@babel/types",
+      "version": "7.29.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@isaacs§string-locale-compare@1.1.0",
+   "node_modules": {
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@istanbuljs§load-nyc-config@1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "pkg": {
+      "name": "@istanbuljs/load-nyc-config",
+      "version": "1.1.0"
+     }
+    },
+    "camelcase": {
+     "link": "../../··camelcase@5.3.1/node_modules/camelcase"
+    },
+    "find-up": {
+     "link": "../../··find-up@4.1.0/node_modules/find-up"
+    },
+    "get-package-type": {
+     "link": "../../··get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "js-yaml": {
+     "link": "../../··js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "resolve-from": {
+     "link": "../../··resolve-from@5.0.0/node_modules/resolve-from"
+    }
+   }
+  },
+  {
+   "id": "··@istanbuljs§schema@0.1.6",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "pkg": {
+      "name": "@istanbuljs/schema",
+      "version": "0.1.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@jridgewell§gen-mapping@0.3.13",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "pkg": {
+      "name": "@jridgewell/gen-mapping",
+      "version": "0.3.13"
+     }
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../··@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../··@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "··@jridgewell§remapping@2.3.5",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "link": "../../../··@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/remapping": {
+     "pkg": {
+      "name": "@jridgewell/remapping",
+      "version": "2.3.5"
+     }
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../··@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "··@jridgewell§resolve-uri@3.1.2",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "pkg": {
+      "name": "@jridgewell/resolve-uri",
+      "version": "3.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@jridgewell§sourcemap-codec@1.6.0",
+   "node_modules": {
+    "@jridgewell/sourcemap-codec": {
+     "pkg": {
+      "name": "@jridgewell/sourcemap-codec",
+      "version": "1.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··@jridgewell§trace-mapping@0.3.31",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "link": "../../../··@jridgewell§resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../··@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "pkg": {
+      "name": "@jridgewell/trace-mapping",
+      "version": "0.3.31"
+     }
+    }
+   }
+  },
+  {
+   "id": "··aggregate-error@3.1.0",
+   "node_modules": {
+    "aggregate-error": {
+     "pkg": {
+      "name": "aggregate-error",
+      "version": "3.1.0"
+     }
+    },
+    "clean-stack": {
+     "link": "../../··clean-stack@2.2.0/node_modules/clean-stack"
+    },
+    "indent-string": {
+     "link": "../../··indent-string@4.0.0/node_modules/indent-string"
+    }
+   }
+  },
+  {
+   "id": "··ajv@6.15.0",
+   "node_modules": {
+    "ajv": {
+     "pkg": {
+      "name": "ajv",
+      "version": "6.15.0"
+     }
+    },
+    "fast-deep-equal": {
+     "link": "../../··fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+    },
+    "fast-json-stable-stringify": {
+     "link": "../../··fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+    },
+    "json-schema-traverse": {
+     "link": "../../··json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+    },
+    "uri-js": {
+     "link": "../../··uri-js@4.4.1/node_modules/uri-js"
+    }
+   }
+  },
+  {
+   "id": "··ansi-regex@5.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "pkg": {
+      "name": "ansi-regex",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··ansi-styles@4.3.0",
+   "node_modules": {
+    "ansi-styles": {
+     "pkg": {
+      "name": "ansi-styles",
+      "version": "4.3.0"
+     }
+    },
+    "color-convert": {
+     "link": "../../··color-convert@2.0.1/node_modules/color-convert"
+    }
+   }
+  },
+  {
+   "id": "··anymatch@3.1.3",
+   "node_modules": {
+    "anymatch": {
+     "pkg": {
+      "name": "anymatch",
+      "version": "3.1.3"
+     }
+    },
+    "normalize-path": {
+     "link": "../../··normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "picomatch": {
+     "link": "../../··picomatch@2.3.2/node_modules/picomatch"
+    }
+   }
+  },
+  {
+   "id": "··append-transform@2.0.0",
+   "node_modules": {
+    "append-transform": {
+     "pkg": {
+      "name": "append-transform",
+      "version": "2.0.0"
+     }
+    },
+    "default-require-extensions": {
+     "link": "../../··default-require-extensions@3.0.1/node_modules/default-require-extensions"
+    }
+   }
+  },
+  {
+   "id": "··archy@1.0.0",
+   "node_modules": {
+    "archy": {
+     "pkg": {
+      "name": "archy",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··argparse@1.0.10",
+   "node_modules": {
+    "argparse": {
+     "pkg": {
+      "name": "argparse",
+      "version": "1.0.10"
+     }
+    },
+    "sprintf-js": {
+     "link": "../../··sprintf-js@1.0.3/node_modules/sprintf-js"
+    }
+   }
+  },
+  {
+   "id": "··asn1@0.2.6",
+   "node_modules": {
+    "asn1": {
+     "pkg": {
+      "name": "asn1",
+      "version": "0.2.6"
+     }
+    },
+    "safer-buffer": {
+     "link": "../../··safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "··assert-plus@1.0.0",
+   "node_modules": {
+    "assert-plus": {
+     "pkg": {
+      "name": "assert-plus",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··async-hook-domain@2.0.4",
+   "node_modules": {
+    "async-hook-domain": {
+     "pkg": {
+      "name": "async-hook-domain",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··asynckit@0.4.0",
+   "node_modules": {
+    "asynckit": {
+     "pkg": {
+      "name": "asynckit",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··aws-sign2@0.7.0",
+   "node_modules": {
+    "aws-sign2": {
+     "pkg": {
+      "name": "aws-sign2",
+      "version": "0.7.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··aws4@1.13.2",
+   "node_modules": {
+    "aws4": {
+     "pkg": {
+      "name": "aws4",
+      "version": "1.13.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··balanced-match@1.0.2",
+   "node_modules": {
+    "balanced-match": {
+     "pkg": {
+      "name": "balanced-match",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··baseline-browser-mapping@2.11.26",
+   "node_modules": {
+    "baseline-browser-mapping": {
+     "pkg": {
+      "name": "baseline-browser-mapping",
+      "version": "2.11.26"
+     }
+    }
+   }
+  },
+  {
+   "id": "··bcrypt-pbkdf@1.0.2",
+   "node_modules": {
+    "bcrypt-pbkdf": {
+     "pkg": {
+      "name": "bcrypt-pbkdf",
+      "version": "1.0.2"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../··tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "··binary-extensions@2.3.0",
+   "node_modules": {
+    "binary-extensions": {
+     "pkg": {
+      "name": "binary-extensions",
+      "version": "2.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··bind-obj-methods@3.0.0",
+   "node_modules": {
+    "bind-obj-methods": {
+     "pkg": {
+      "name": "bind-obj-methods",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··brace-expansion@1.1.21",
+   "node_modules": {
+    "balanced-match": {
+     "link": "../../··balanced-match@1.0.2/node_modules/balanced-match"
+    },
+    "brace-expansion": {
+     "pkg": {
+      "name": "brace-expansion",
+      "version": "1.1.21"
+     }
+    },
+    "concat-map": {
+     "link": "../../··concat-map@0.0.1/node_modules/concat-map"
+    }
+   }
+  },
+  {
+   "id": "··braces@3.0.3",
+   "node_modules": {
+    "braces": {
+     "pkg": {
+      "name": "braces",
+      "version": "3.0.3"
+     }
+    },
+    "fill-range": {
+     "link": "../../··fill-range@7.1.1/node_modules/fill-range"
+    }
+   }
+  },
+  {
+   "id": "··browserslist@4.29.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "baseline-browser-mapping": {
+     "link": "../../··baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+    },
+    "browserslist": {
+     "pkg": {
+      "name": "browserslist",
+      "version": "4.29.1"
+     }
+    },
+    "caniuse-lite": {
+     "link": "../../··caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+    },
+    "electron-to-chromium": {
+     "link": "../../··electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+    },
+    "node-releases": {
+     "link": "../../··node-releases@2.0.57/node_modules/node-releases"
+    },
+    "update-browserslist-db": {
+     "link": "../../··update-browserslist-db@1.3.3/node_modules/update-browserslist-db"
+    }
+   }
+  },
+  {
+   "id": "··buffer-from@1.1.2",
+   "node_modules": {
+    "buffer-from": {
+     "pkg": {
+      "name": "buffer-from",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··caching-transform@4.0.0",
+   "node_modules": {
+    "caching-transform": {
+     "pkg": {
+      "name": "caching-transform",
+      "version": "4.0.0"
+     }
+    },
+    "hasha": {
+     "link": "../../··hasha@5.2.2/node_modules/hasha"
+    },
+    "make-dir": {
+     "link": "../../··make-dir@3.1.0/node_modules/make-dir"
+    },
+    "package-hash": {
+     "link": "../../··package-hash@4.0.0/node_modules/package-hash"
+    },
+    "write-file-atomic": {
+     "link": "../../··write-file-atomic@3.0.3/node_modules/write-file-atomic"
+    }
+   }
+  },
+  {
+   "id": "··camelcase@5.3.1",
+   "node_modules": {
+    "camelcase": {
+     "pkg": {
+      "name": "camelcase",
+      "version": "5.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··caniuse-lite@1.0.30001812",
+   "node_modules": {
+    "caniuse-lite": {
+     "pkg": {
+      "name": "caniuse-lite",
+      "version": "1.0.30001812"
+     }
+    }
+   }
+  },
+  {
+   "id": "··caseless@0.12.0",
+   "node_modules": {
+    "caseless": {
+     "pkg": {
+      "name": "caseless",
+      "version": "0.12.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··chokidar@3.6.0",
+   "node_modules": {
+    "anymatch": {
+     "link": "../../··anymatch@3.1.3/node_modules/anymatch"
+    },
+    "braces": {
+     "link": "../../··braces@3.0.3/node_modules/braces"
+    },
+    "chokidar": {
+     "pkg": {
+      "name": "chokidar",
+      "version": "3.6.0"
+     }
+    },
+    "fsevents": {
+     "link": "../../··fsevents@2.3.3/node_modules/fsevents"
+    },
+    "glob-parent": {
+     "link": "../../··glob-parent@5.1.2/node_modules/glob-parent"
+    },
+    "is-binary-path": {
+     "link": "../../··is-binary-path@2.1.0/node_modules/is-binary-path"
+    },
+    "is-glob": {
+     "link": "../../··is-glob@4.0.3/node_modules/is-glob"
+    },
+    "normalize-path": {
+     "link": "../../··normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "readdirp": {
+     "link": "../../··readdirp@3.6.0/node_modules/readdirp"
+    }
+   }
+  },
+  {
+   "id": "··clean-stack@2.2.0",
+   "node_modules": {
+    "clean-stack": {
+     "pkg": {
+      "name": "clean-stack",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··cliui@6.0.0",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "6.0.0"
+     }
+    },
+    "string-width": {
+     "link": "../../··string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../··strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../··wrap-ansi@6.2.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "··cliui@7.0.4",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "7.0.4"
+     }
+    },
+    "string-width": {
+     "link": "../../··string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../··strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../··wrap-ansi@7.0.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "··color-convert@2.0.1",
+   "node_modules": {
+    "color-convert": {
+     "pkg": {
+      "name": "color-convert",
+      "version": "2.0.1"
+     }
+    },
+    "color-name": {
+     "link": "../../··color-name@1.1.4/node_modules/color-name"
+    }
+   }
+  },
+  {
+   "id": "··color-name@1.1.4",
+   "node_modules": {
+    "color-name": {
+     "pkg": {
+      "name": "color-name",
+      "version": "1.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··color-support@1.1.3",
+   "node_modules": {
+    "color-support": {
+     "pkg": {
+      "name": "color-support",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··combined-stream@1.0.8",
+   "node_modules": {
+    "combined-stream": {
+     "pkg": {
+      "name": "combined-stream",
+      "version": "1.0.8"
+     }
+    },
+    "delayed-stream": {
+     "link": "../../··delayed-stream@1.0.0/node_modules/delayed-stream"
+    }
+   }
+  },
+  {
+   "id": "··commondir@1.0.1",
+   "node_modules": {
+    "commondir": {
+     "pkg": {
+      "name": "commondir",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··concat-map@0.0.1",
+   "node_modules": {
+    "concat-map": {
+     "pkg": {
+      "name": "concat-map",
+      "version": "0.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··convert-source-map@1.9.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "1.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··convert-source-map@2.0.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··core-util-is@1.0.2",
+   "node_modules": {
+    "core-util-is": {
+     "pkg": {
+      "name": "core-util-is",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··coveralls@3.1.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "coveralls": {
+     "pkg": {
+      "name": "coveralls",
+      "version": "3.1.1"
+     }
+    },
+    "js-yaml": {
+     "link": "../../··js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "lcov-parse": {
+     "link": "../../··lcov-parse@1.0.0/node_modules/lcov-parse"
+    },
+    "log-driver": {
+     "link": "../../··log-driver@1.2.7/node_modules/log-driver"
+    },
+    "minimist": {
+     "link": "../../··minimist@1.2.8/node_modules/minimist"
+    },
+    "request": {
+     "link": "../../··request@2.88.2/node_modules/request"
+    }
+   }
+  },
+  {
+   "id": "··cross-spawn@7.0.6",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "cross-spawn": {
+     "pkg": {
+      "name": "cross-spawn",
+      "version": "7.0.6"
+     }
+    },
+    "path-key": {
+     "link": "../../··path-key@3.1.1/node_modules/path-key"
+    },
+    "shebang-command": {
+     "link": "../../··shebang-command@2.0.0/node_modules/shebang-command"
+    },
+    "which": {
+     "link": "../../··which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "··dashdash@1.14.1",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "dashdash": {
+     "pkg": {
+      "name": "dashdash",
+      "version": "1.14.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+   "node_modules": {
+    "debug": {
+     "pkg": {
+      "name": "debug",
+      "version": "4.3.4"
+     }
+    },
+    "ms": {
+     "link": "../../··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/ms"
+    }
+   }
+  },
+  {
+   "id": "··decamelize@1.2.0",
+   "node_modules": {
+    "decamelize": {
+     "pkg": {
+      "name": "decamelize",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··default-require-extensions@3.0.1",
+   "node_modules": {
+    "default-require-extensions": {
+     "pkg": {
+      "name": "default-require-extensions",
+      "version": "3.0.1"
+     }
+    },
+    "strip-bom": {
+     "link": "../../··strip-bom@4.0.0/node_modules/strip-bom"
+    }
+   }
+  },
+  {
+   "id": "··delayed-stream@1.0.0",
+   "node_modules": {
+    "delayed-stream": {
+     "pkg": {
+      "name": "delayed-stream",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··diff@4.0.4",
+   "node_modules": {
+    "diff": {
+     "pkg": {
+      "name": "diff",
+      "version": "4.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··ecc-jsbn@0.1.2",
+   "node_modules": {
+    "ecc-jsbn": {
+     "pkg": {
+      "name": "ecc-jsbn",
+      "version": "0.1.2"
+     }
+    },
+    "jsbn": {
+     "link": "../../··jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../··safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "··electron-to-chromium@1.5.439",
+   "node_modules": {
+    "electron-to-chromium": {
+     "pkg": {
+      "name": "electron-to-chromium",
+      "version": "1.5.439"
+     }
+    }
+   }
+  },
+  {
+   "id": "··emoji-regex@8.0.0",
+   "node_modules": {
+    "emoji-regex": {
+     "pkg": {
+      "name": "emoji-regex",
+      "version": "8.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··es6-error@4.1.1",
+   "node_modules": {
+    "es6-error": {
+     "pkg": {
+      "name": "es6-error",
+      "version": "4.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··escalade@3.2.0",
+   "node_modules": {
+    "escalade": {
+     "pkg": {
+      "name": "escalade",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··escape-string-regexp@2.0.0",
+   "node_modules": {
+    "escape-string-regexp": {
+     "pkg": {
+      "name": "escape-string-regexp",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··esprima@4.0.1",
+   "node_modules": {
+    "esprima": {
+     "pkg": {
+      "name": "esprima",
+      "version": "4.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··events-to-array@1.1.2",
+   "node_modules": {
+    "events-to-array": {
+     "pkg": {
+      "name": "events-to-array",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··extend@3.0.2",
+   "node_modules": {
+    "extend": {
+     "pkg": {
+      "name": "extend",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··extsprintf@1.3.0",
+   "node_modules": {
+    "extsprintf": {
+     "pkg": {
+      "name": "extsprintf",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fast-deep-equal@3.1.3",
+   "node_modules": {
+    "fast-deep-equal": {
+     "pkg": {
+      "name": "fast-deep-equal",
+      "version": "3.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fast-json-stable-stringify@2.1.0",
+   "node_modules": {
+    "fast-json-stable-stringify": {
+     "pkg": {
+      "name": "fast-json-stable-stringify",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fill-range@7.1.1",
+   "node_modules": {
+    "fill-range": {
+     "pkg": {
+      "name": "fill-range",
+      "version": "7.1.1"
+     }
+    },
+    "to-regex-range": {
+     "link": "../../··to-regex-range@5.0.1/node_modules/to-regex-range"
+    }
+   }
+  },
+  {
+   "id": "··find-cache-dir@3.3.2",
+   "node_modules": {
+    "commondir": {
+     "link": "../../··commondir@1.0.1/node_modules/commondir"
+    },
+    "find-cache-dir": {
+     "pkg": {
+      "name": "find-cache-dir",
+      "version": "3.3.2"
+     }
+    },
+    "make-dir": {
+     "link": "../../··make-dir@3.1.0/node_modules/make-dir"
+    },
+    "pkg-dir": {
+     "link": "../../··pkg-dir@4.2.0/node_modules/pkg-dir"
+    }
+   }
+  },
+  {
+   "id": "··find-up@4.1.0",
+   "node_modules": {
+    "find-up": {
+     "pkg": {
+      "name": "find-up",
+      "version": "4.1.0"
+     }
+    },
+    "locate-path": {
+     "link": "../../··locate-path@5.0.0/node_modules/locate-path"
+    },
+    "path-exists": {
+     "link": "../../··path-exists@4.0.0/node_modules/path-exists"
+    }
+   }
+  },
+  {
+   "id": "··findit@2.0.0",
+   "node_modules": {
+    "findit": {
+     "pkg": {
+      "name": "findit",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··foreground-child@2.0.0",
+   "node_modules": {
+    "cross-spawn": {
+     "link": "../../··cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "foreground-child": {
+     "pkg": {
+      "name": "foreground-child",
+      "version": "2.0.0"
+     }
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    }
+   }
+  },
+  {
+   "id": "··forever-agent@0.6.1",
+   "node_modules": {
+    "forever-agent": {
+     "pkg": {
+      "name": "forever-agent",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··form-data@2.3.3",
+   "node_modules": {
+    "asynckit": {
+     "link": "../../··asynckit@0.4.0/node_modules/asynckit"
+    },
+    "combined-stream": {
+     "link": "../../··combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "form-data": {
+     "pkg": {
+      "name": "form-data",
+      "version": "2.3.3"
+     }
+    },
+    "mime-types": {
+     "link": "../../··mime-types@2.1.35/node_modules/mime-types"
+    }
+   }
+  },
+  {
+   "id": "··fromentries@1.3.2",
+   "node_modules": {
+    "fromentries": {
+     "pkg": {
+      "name": "fromentries",
+      "version": "1.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fs-exists-cached@1.0.0",
+   "node_modules": {
+    "fs-exists-cached": {
+     "pkg": {
+      "name": "fs-exists-cached",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fs.realpath@1.0.0",
+   "node_modules": {
+    "fs.realpath": {
+     "pkg": {
+      "name": "fs.realpath",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··fsevents@2.3.3",
+   "node_modules": {
+    "fsevents": {
+     "pkg": {
+      "name": "fsevents",
+      "version": "2.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··function-loop@2.0.1",
+   "node_modules": {
+    "function-loop": {
+     "pkg": {
+      "name": "function-loop",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··gensync@1.0.0-beta.2",
+   "node_modules": {
+    "gensync": {
+     "pkg": {
+      "name": "gensync",
+      "version": "1.0.0-beta.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··get-caller-file@2.0.5",
+   "node_modules": {
+    "get-caller-file": {
+     "pkg": {
+      "name": "get-caller-file",
+      "version": "2.0.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··get-package-type@0.1.0",
+   "node_modules": {
+    "get-package-type": {
+     "pkg": {
+      "name": "get-package-type",
+      "version": "0.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··getpass@0.1.7",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "getpass": {
+     "pkg": {
+      "name": "getpass",
+      "version": "0.1.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··glob-parent@5.1.2",
+   "node_modules": {
+    "glob-parent": {
+     "pkg": {
+      "name": "glob-parent",
+      "version": "5.1.2"
+     }
+    },
+    "is-glob": {
+     "link": "../../··is-glob@4.0.3/node_modules/is-glob"
+    }
+   }
+  },
+  {
+   "id": "··glob@7.2.3",
+   "node_modules": {
+    "fs.realpath": {
+     "link": "../../··fs.realpath@1.0.0/node_modules/fs.realpath"
+    },
+    "glob": {
+     "pkg": {
+      "name": "glob",
+      "version": "7.2.3"
+     }
+    },
+    "inflight": {
+     "link": "../../··inflight@1.0.6/node_modules/inflight"
+    },
+    "inherits": {
+     "link": "../../··inherits@2.0.4/node_modules/inherits"
+    },
+    "minimatch": {
+     "link": "../../··minimatch@3.1.5/node_modules/minimatch"
+    },
+    "once": {
+     "link": "../../··once@1.4.0/node_modules/once"
+    },
+    "path-is-absolute": {
+     "link": "../../··path-is-absolute@1.0.1/node_modules/path-is-absolute"
+    }
+   }
+  },
+  {
+   "id": "··graceful-fs@4.2.11",
+   "node_modules": {
+    "graceful-fs": {
+     "pkg": {
+      "name": "graceful-fs",
+      "version": "4.2.11"
+     }
+    }
+   }
+  },
+  {
+   "id": "··har-schema@2.0.0",
+   "node_modules": {
+    "har-schema": {
+     "pkg": {
+      "name": "har-schema",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··har-validator@5.1.5",
+   "node_modules": {
+    "ajv": {
+     "link": "../../··ajv@6.15.0/node_modules/ajv"
+    },
+    "har-schema": {
+     "link": "../../··har-schema@2.0.0/node_modules/har-schema"
+    },
+    "har-validator": {
+     "pkg": {
+      "name": "har-validator",
+      "version": "5.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··has-flag@4.0.0",
+   "node_modules": {
+    "has-flag": {
+     "pkg": {
+      "name": "has-flag",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··hasha@5.2.2",
+   "node_modules": {
+    "hasha": {
+     "pkg": {
+      "name": "hasha",
+      "version": "5.2.2"
+     }
+    },
+    "is-stream": {
+     "link": "../../··is-stream@2.0.1/node_modules/is-stream"
+    },
+    "type-fest": {
+     "link": "../../··type-fest@0.8.1/node_modules/type-fest"
+    }
+   }
+  },
+  {
+   "id": "··html-escaper@2.0.2",
+   "node_modules": {
+    "html-escaper": {
+     "pkg": {
+      "name": "html-escaper",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··http-signature@1.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "http-signature": {
+     "pkg": {
+      "name": "http-signature",
+      "version": "1.2.0"
+     }
+    },
+    "jsprim": {
+     "link": "../../··jsprim@1.4.2/node_modules/jsprim"
+    },
+    "sshpk": {
+     "link": "../../··sshpk@1.18.0/node_modules/sshpk"
+    }
+   }
+  },
+  {
+   "id": "··imurmurhash@0.1.4",
+   "node_modules": {
+    "imurmurhash": {
+     "pkg": {
+      "name": "imurmurhash",
+      "version": "0.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··indent-string@4.0.0",
+   "node_modules": {
+    "indent-string": {
+     "pkg": {
+      "name": "indent-string",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··inflight@1.0.6",
+   "node_modules": {
+    "inflight": {
+     "pkg": {
+      "name": "inflight",
+      "version": "1.0.6"
+     }
+    },
+    "once": {
+     "link": "../../··once@1.4.0/node_modules/once"
+    },
+    "wrappy": {
+     "link": "../../··wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "··inherits@2.0.4",
+   "node_modules": {
+    "inherits": {
+     "pkg": {
+      "name": "inherits",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-binary-path@2.1.0",
+   "node_modules": {
+    "binary-extensions": {
+     "link": "../../··binary-extensions@2.3.0/node_modules/binary-extensions"
+    },
+    "is-binary-path": {
+     "pkg": {
+      "name": "is-binary-path",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-extglob@2.1.1",
+   "node_modules": {
+    "is-extglob": {
+     "pkg": {
+      "name": "is-extglob",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-fullwidth-code-point@3.0.0",
+   "node_modules": {
+    "is-fullwidth-code-point": {
+     "pkg": {
+      "name": "is-fullwidth-code-point",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-glob@4.0.3",
+   "node_modules": {
+    "is-extglob": {
+     "link": "../../··is-extglob@2.1.1/node_modules/is-extglob"
+    },
+    "is-glob": {
+     "pkg": {
+      "name": "is-glob",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-number@7.0.0",
+   "node_modules": {
+    "is-number": {
+     "pkg": {
+      "name": "is-number",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-stream@2.0.1",
+   "node_modules": {
+    "is-stream": {
+     "pkg": {
+      "name": "is-stream",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-typedarray@1.0.0",
+   "node_modules": {
+    "is-typedarray": {
+     "pkg": {
+      "name": "is-typedarray",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··is-windows@1.0.2",
+   "node_modules": {
+    "is-windows": {
+     "pkg": {
+      "name": "is-windows",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··isexe@2.0.0",
+   "node_modules": {
+    "isexe": {
+     "pkg": {
+      "name": "isexe",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··isstream@0.1.2",
+   "node_modules": {
+    "isstream": {
+     "pkg": {
+      "name": "isstream",
+      "version": "0.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-coverage@3.2.2",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "pkg": {
+      "name": "istanbul-lib-coverage",
+      "version": "3.2.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-hook@3.0.0",
+   "node_modules": {
+    "append-transform": {
+     "link": "../../··append-transform@2.0.0/node_modules/append-transform"
+    },
+    "istanbul-lib-hook": {
+     "pkg": {
+      "name": "istanbul-lib-hook",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-instrument@4.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/core": {
+     "link": "../../../··@babel§core@7.29.7/node_modules/@babel/core"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../··@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-instrument": {
+     "pkg": {
+      "name": "istanbul-lib-instrument",
+      "version": "4.0.3"
+     }
+    },
+    "semver": {
+     "link": "../../··semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-processinfo@2.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "archy": {
+     "link": "../../··archy@1.0.0/node_modules/archy"
+    },
+    "cross-spawn": {
+     "link": "../../··cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-processinfo": {
+     "pkg": {
+      "name": "istanbul-lib-processinfo",
+      "version": "2.0.3"
+     }
+    },
+    "p-map": {
+     "link": "../../··p-map@3.0.0/node_modules/p-map"
+    },
+    "rimraf": {
+     "link": "../../··rimraf@3.0.2/node_modules/rimraf"
+    },
+    "uuid": {
+     "link": "../../··uuid@8.3.2/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-report@3.0.1",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "link": "../../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-report": {
+     "pkg": {
+      "name": "istanbul-lib-report",
+      "version": "3.0.1"
+     }
+    },
+    "make-dir": {
+     "link": "../../··make-dir@4.0.0/node_modules/make-dir"
+    },
+    "supports-color": {
+     "link": "../../··supports-color@7.2.0/node_modules/supports-color"
+    }
+   }
+  },
+  {
+   "id": "··istanbul-lib-source-maps@4.0.1",
+   "node_modules": {
+    "debug": {
+     "link": "../../··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-source-maps": {
+     "pkg": {
+      "name": "istanbul-lib-source-maps",
+      "version": "4.0.1"
+     }
+    },
+    "source-map": {
+     "link": "../../··source-map@0.6.1/node_modules/source-map"
+    }
+   }
+  },
+  {
+   "id": "··istanbul-reports@3.2.0",
+   "node_modules": {
+    "html-escaper": {
+     "link": "../../··html-escaper@2.0.2/node_modules/html-escaper"
+    },
+    "istanbul-lib-report": {
+     "link": "../../··istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-reports": {
+     "pkg": {
+      "name": "istanbul-reports",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··jackspeak@1.4.2",
+   "node_modules": {
+    "cliui": {
+     "link": "../../··cliui@7.0.4/node_modules/cliui"
+    },
+    "jackspeak": {
+     "pkg": {
+      "name": "jackspeak",
+      "version": "1.4.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··js-tokens@4.0.0",
+   "node_modules": {
+    "js-tokens": {
+     "pkg": {
+      "name": "js-tokens",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··js-yaml@3.15.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "argparse": {
+     "link": "../../··argparse@1.0.10/node_modules/argparse"
+    },
+    "esprima": {
+     "link": "../../··esprima@4.0.1/node_modules/esprima"
+    },
+    "js-yaml": {
+     "pkg": {
+      "name": "js-yaml",
+      "version": "3.15.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··jsbn@0.1.1",
+   "node_modules": {
+    "jsbn": {
+     "pkg": {
+      "name": "jsbn",
+      "version": "0.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··jsesc@3.1.0",
+   "node_modules": {
+    "jsesc": {
+     "pkg": {
+      "name": "jsesc",
+      "version": "3.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··json-schema-traverse@0.4.1",
+   "node_modules": {
+    "json-schema-traverse": {
+     "pkg": {
+      "name": "json-schema-traverse",
+      "version": "0.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··json-schema@0.4.0",
+   "node_modules": {
+    "json-schema": {
+     "pkg": {
+      "name": "json-schema",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··json-stringify-safe@5.0.1",
+   "node_modules": {
+    "json-stringify-safe": {
+     "pkg": {
+      "name": "json-stringify-safe",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··json5@2.2.3",
+   "node_modules": {
+    "json5": {
+     "pkg": {
+      "name": "json5",
+      "version": "2.2.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··jsprim@1.4.2",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "extsprintf": {
+     "link": "../../··extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "json-schema": {
+     "link": "../../··json-schema@0.4.0/node_modules/json-schema"
+    },
+    "jsprim": {
+     "pkg": {
+      "name": "jsprim",
+      "version": "1.4.2"
+     }
+    },
+    "verror": {
+     "link": "../../··verror@1.10.0/node_modules/verror"
+    }
+   }
+  },
+  {
+   "id": "··lcov-parse@1.0.0",
+   "node_modules": {
+    "lcov-parse": {
+     "pkg": {
+      "name": "lcov-parse",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··left-pad@1.3.0",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··libtap@1.4.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "async-hook-domain": {
+     "link": "../../··async-hook-domain@2.0.4/node_modules/async-hook-domain"
+    },
+    "bind-obj-methods": {
+     "link": "../../··bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+    },
+    "diff": {
+     "link": "../../··diff@4.0.4/node_modules/diff"
+    },
+    "function-loop": {
+     "link": "../../··function-loop@2.0.1/node_modules/function-loop"
+    },
+    "libtap": {
+     "pkg": {
+      "name": "libtap",
+      "version": "1.4.1"
+     }
+    },
+    "minipass": {
+     "link": "../../··minipass@3.3.6/node_modules/minipass"
+    },
+    "own-or": {
+     "link": "../../··own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "link": "../../··own-or-env@1.0.2/node_modules/own-or-env"
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "stack-utils": {
+     "link": "../../··stack-utils@2.0.6/node_modules/stack-utils"
+    },
+    "tap-parser": {
+     "link": "../../··tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../··tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../··tcompare@5.0.7/node_modules/tcompare"
+    },
+    "trivial-deferred": {
+     "link": "../../··trivial-deferred@1.1.2/node_modules/trivial-deferred"
+    }
+   }
+  },
+  {
+   "id": "··locate-path@5.0.0",
+   "node_modules": {
+    "locate-path": {
+     "pkg": {
+      "name": "locate-path",
+      "version": "5.0.0"
+     }
+    },
+    "p-locate": {
+     "link": "../../··p-locate@4.1.0/node_modules/p-locate"
+    }
+   }
+  },
+  {
+   "id": "··lodash.flattendeep@4.4.0",
+   "node_modules": {
+    "lodash.flattendeep": {
+     "pkg": {
+      "name": "lodash.flattendeep",
+      "version": "4.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··log-driver@1.2.7",
+   "node_modules": {
+    "log-driver": {
+     "pkg": {
+      "name": "log-driver",
+      "version": "1.2.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··loose-envify@1.4.0",
+   "node_modules": {
+    "js-tokens": {
+     "link": "../../··js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "loose-envify": {
+     "pkg": {
+      "name": "loose-envify",
+      "version": "1.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··lru-cache@5.1.1",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "5.1.1"
+     }
+    },
+    "yallist": {
+     "link": "../../··yallist@3.1.1/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "··lru-cache@6.0.0",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "6.0.0"
+     }
+    },
+    "yallist": {
+     "link": "../../··yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "··make-dir@3.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "3.1.0"
+     }
+    },
+    "semver": {
+     "link": "../../··semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "··make-dir@4.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "4.0.0"
+     }
+    },
+    "semver": {
+     "link": "../../·npm·semver@7.6.0/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "··mime-db@1.52.0",
+   "node_modules": {
+    "mime-db": {
+     "pkg": {
+      "name": "mime-db",
+      "version": "1.52.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··mime-types@2.1.35",
+   "node_modules": {
+    "mime-db": {
+     "link": "../../··mime-db@1.52.0/node_modules/mime-db"
+    },
+    "mime-types": {
+     "pkg": {
+      "name": "mime-types",
+      "version": "2.1.35"
+     }
+    }
+   }
+  },
+  {
+   "id": "··minimatch@3.1.5",
+   "node_modules": {
+    "brace-expansion": {
+     "link": "../../··brace-expansion@1.1.21/node_modules/brace-expansion"
+    },
+    "minimatch": {
+     "pkg": {
+      "name": "minimatch",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··minimist@1.2.8",
+   "node_modules": {
+    "minimist": {
+     "pkg": {
+      "name": "minimist",
+      "version": "1.2.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "··minipass@3.3.6",
+   "node_modules": {
+    "minipass": {
+     "pkg": {
+      "name": "minipass",
+      "version": "3.3.6"
+     }
+    },
+    "yallist": {
+     "link": "../../··yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "··mkdirp@1.0.4",
+   "node_modules": {
+    "mkdirp": {
+     "pkg": {
+      "name": "mkdirp",
+      "version": "1.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··node-preload@0.2.1",
+   "node_modules": {
+    "node-preload": {
+     "pkg": {
+      "name": "node-preload",
+      "version": "0.2.1"
+     }
+    },
+    "process-on-spawn": {
+     "link": "../../··process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    }
+   }
+  },
+  {
+   "id": "··node-releases@2.0.57",
+   "node_modules": {
+    "node-releases": {
+     "pkg": {
+      "name": "node-releases",
+      "version": "2.0.57"
+     }
+    }
+   }
+  },
+  {
+   "id": "··normalize-path@3.0.0",
+   "node_modules": {
+    "normalize-path": {
+     "pkg": {
+      "name": "normalize-path",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··nyc@15.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "link": "../../../··@istanbuljs§load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../··@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "caching-transform": {
+     "link": "../../··caching-transform@4.0.0/node_modules/caching-transform"
+    },
+    "convert-source-map": {
+     "link": "../../··convert-source-map@1.9.0/node_modules/convert-source-map"
+    },
+    "decamelize": {
+     "link": "../../··decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-cache-dir": {
+     "link": "../../··find-cache-dir@3.3.2/node_modules/find-cache-dir"
+    },
+    "find-up": {
+     "link": "../../··find-up@4.1.0/node_modules/find-up"
+    },
+    "foreground-child": {
+     "link": "../../··foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "get-package-type": {
+     "link": "../../··get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "glob": {
+     "link": "../../··glob@7.2.3/node_modules/glob"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../··istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-hook": {
+     "link": "../../··istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+    },
+    "istanbul-lib-instrument": {
+     "link": "../../··istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../··istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "istanbul-lib-report": {
+     "link": "../../··istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-lib-source-maps": {
+     "link": "../../··istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+    },
+    "istanbul-reports": {
+     "link": "../../··istanbul-reports@3.2.0/node_modules/istanbul-reports"
+    },
+    "make-dir": {
+     "link": "../../··make-dir@3.1.0/node_modules/make-dir"
+    },
+    "node-preload": {
+     "link": "../../··node-preload@0.2.1/node_modules/node-preload"
+    },
+    "nyc": {
+     "pkg": {
+      "name": "nyc",
+      "version": "15.1.0"
+     }
+    },
+    "p-map": {
+     "link": "../../··p-map@3.0.0/node_modules/p-map"
+    },
+    "process-on-spawn": {
+     "link": "../../··process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    },
+    "resolve-from": {
+     "link": "../../··resolve-from@5.0.0/node_modules/resolve-from"
+    },
+    "rimraf": {
+     "link": "../../··rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "link": "../../··spawn-wrap@2.0.0/node_modules/spawn-wrap"
+    },
+    "test-exclude": {
+     "link": "../../··test-exclude@6.0.0/node_modules/test-exclude"
+    },
+    "yargs": {
+     "link": "../../··yargs@15.4.1/node_modules/yargs"
+    }
+   }
+  },
+  {
+   "id": "··oauth-sign@0.9.0",
+   "node_modules": {
+    "oauth-sign": {
+     "pkg": {
+      "name": "oauth-sign",
+      "version": "0.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··once@1.4.0",
+   "node_modules": {
+    "once": {
+     "pkg": {
+      "name": "once",
+      "version": "1.4.0"
+     }
+    },
+    "wrappy": {
+     "link": "../../··wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "··opener@1.5.2",
+   "node_modules": {
+    "opener": {
+     "pkg": {
+      "name": "opener",
+      "version": "1.5.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··own-or-env@1.0.2",
+   "node_modules": {
+    "own-or": {
+     "link": "../../··own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "pkg": {
+      "name": "own-or-env",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··own-or@1.0.0",
+   "node_modules": {
+    "own-or": {
+     "pkg": {
+      "name": "own-or",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··p-limit@2.3.0",
+   "node_modules": {
+    "p-limit": {
+     "pkg": {
+      "name": "p-limit",
+      "version": "2.3.0"
+     }
+    },
+    "p-try": {
+     "link": "../../··p-try@2.2.0/node_modules/p-try"
+    }
+   }
+  },
+  {
+   "id": "··p-locate@4.1.0",
+   "node_modules": {
+    "p-limit": {
+     "link": "../../··p-limit@2.3.0/node_modules/p-limit"
+    },
+    "p-locate": {
+     "pkg": {
+      "name": "p-locate",
+      "version": "4.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··p-map@3.0.0",
+   "node_modules": {
+    "aggregate-error": {
+     "link": "../../··aggregate-error@3.1.0/node_modules/aggregate-error"
+    },
+    "p-map": {
+     "pkg": {
+      "name": "p-map",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··p-try@2.2.0",
+   "node_modules": {
+    "p-try": {
+     "pkg": {
+      "name": "p-try",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··package-hash@4.0.0",
+   "node_modules": {
+    "graceful-fs": {
+     "link": "../../··graceful-fs@4.2.11/node_modules/graceful-fs"
+    },
+    "hasha": {
+     "link": "../../··hasha@5.2.2/node_modules/hasha"
+    },
+    "lodash.flattendeep": {
+     "link": "../../··lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+    },
+    "package-hash": {
+     "pkg": {
+      "name": "package-hash",
+      "version": "4.0.0"
+     }
+    },
+    "release-zalgo": {
+     "link": "../../··release-zalgo@1.0.0/node_modules/release-zalgo"
+    }
+   }
+  },
+  {
+   "id": "··path-exists@4.0.0",
+   "node_modules": {
+    "path-exists": {
+     "pkg": {
+      "name": "path-exists",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··path-is-absolute@1.0.1",
+   "node_modules": {
+    "path-is-absolute": {
+     "pkg": {
+      "name": "path-is-absolute",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··path-key@3.1.1",
+   "node_modules": {
+    "path-key": {
+     "pkg": {
+      "name": "path-key",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··performance-now@2.1.0",
+   "node_modules": {
+    "performance-now": {
+     "pkg": {
+      "name": "performance-now",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··picocolors@1.1.1",
+   "node_modules": {
+    "picocolors": {
+     "pkg": {
+      "name": "picocolors",
+      "version": "1.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··picomatch@2.3.2",
+   "node_modules": {
+    "picomatch": {
+     "pkg": {
+      "name": "picomatch",
+      "version": "2.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··pkg-dir@4.2.0",
+   "node_modules": {
+    "find-up": {
+     "link": "../../··find-up@4.1.0/node_modules/find-up"
+    },
+    "pkg-dir": {
+     "pkg": {
+      "name": "pkg-dir",
+      "version": "4.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··process-on-spawn@1.1.0",
+   "node_modules": {
+    "fromentries": {
+     "link": "../../··fromentries@1.3.2/node_modules/fromentries"
+    },
+    "process-on-spawn": {
+     "pkg": {
+      "name": "process-on-spawn",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··psl@1.15.0",
+   "node_modules": {
+    "psl": {
+     "pkg": {
+      "name": "psl",
+      "version": "1.15.0"
+     }
+    },
+    "punycode": {
+     "link": "../../··punycode@2.3.1/node_modules/punycode"
+    }
+   }
+  },
+  {
+   "id": "··punycode@2.3.1",
+   "node_modules": {
+    "punycode": {
+     "pkg": {
+      "name": "punycode",
+      "version": "2.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··qs@6.5.5",
+   "node_modules": {
+    "qs": {
+     "pkg": {
+      "name": "qs",
+      "version": "6.5.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··react@18.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../··loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "18.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··readdirp@3.6.0",
+   "node_modules": {
+    "picomatch": {
+     "link": "../../··picomatch@2.3.2/node_modules/picomatch"
+    },
+    "readdirp": {
+     "pkg": {
+      "name": "readdirp",
+      "version": "3.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··release-zalgo@1.0.0",
+   "node_modules": {
+    "es6-error": {
+     "link": "../../··es6-error@4.1.1/node_modules/es6-error"
+    },
+    "release-zalgo": {
+     "pkg": {
+      "name": "release-zalgo",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··request@2.88.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "aws-sign2": {
+     "link": "../../··aws-sign2@0.7.0/node_modules/aws-sign2"
+    },
+    "aws4": {
+     "link": "../../··aws4@1.13.2/node_modules/aws4"
+    },
+    "caseless": {
+     "link": "../../··caseless@0.12.0/node_modules/caseless"
+    },
+    "combined-stream": {
+     "link": "../../··combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "extend": {
+     "link": "../../··extend@3.0.2/node_modules/extend"
+    },
+    "forever-agent": {
+     "link": "../../··forever-agent@0.6.1/node_modules/forever-agent"
+    },
+    "form-data": {
+     "link": "../../··form-data@2.3.3/node_modules/form-data"
+    },
+    "har-validator": {
+     "link": "../../··har-validator@5.1.5/node_modules/har-validator"
+    },
+    "http-signature": {
+     "link": "../../··http-signature@1.2.0/node_modules/http-signature"
+    },
+    "is-typedarray": {
+     "link": "../../··is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "isstream": {
+     "link": "../../··isstream@0.1.2/node_modules/isstream"
+    },
+    "json-stringify-safe": {
+     "link": "../../··json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+    },
+    "mime-types": {
+     "link": "../../··mime-types@2.1.35/node_modules/mime-types"
+    },
+    "oauth-sign": {
+     "link": "../../··oauth-sign@0.9.0/node_modules/oauth-sign"
+    },
+    "performance-now": {
+     "link": "../../··performance-now@2.1.0/node_modules/performance-now"
+    },
+    "qs": {
+     "link": "../../··qs@6.5.5/node_modules/qs"
+    },
+    "request": {
+     "pkg": {
+      "name": "request",
+      "version": "2.88.2"
+     }
+    },
+    "safe-buffer": {
+     "link": "../../··safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tough-cookie": {
+     "link": "../../··tough-cookie@2.5.0/node_modules/tough-cookie"
+    },
+    "tunnel-agent": {
+     "link": "../../··tunnel-agent@0.6.0/node_modules/tunnel-agent"
+    },
+    "uuid": {
+     "link": "../../··uuid@3.4.0/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "··require-directory@2.1.1",
+   "node_modules": {
+    "require-directory": {
+     "pkg": {
+      "name": "require-directory",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··require-main-filename@2.0.0",
+   "node_modules": {
+    "require-main-filename": {
+     "pkg": {
+      "name": "require-main-filename",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··resolve-from@5.0.0",
+   "node_modules": {
+    "resolve-from": {
+     "pkg": {
+      "name": "resolve-from",
+      "version": "5.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··rimraf@3.0.2",
+   "node_modules": {
+    "glob": {
+     "link": "../../··glob@7.2.3/node_modules/glob"
+    },
+    "rimraf": {
+     "pkg": {
+      "name": "rimraf",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··safe-buffer@5.2.1",
+   "node_modules": {
+    "safe-buffer": {
+     "pkg": {
+      "name": "safe-buffer",
+      "version": "5.2.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··safer-buffer@2.1.2",
+   "node_modules": {
+    "safer-buffer": {
+     "pkg": {
+      "name": "safer-buffer",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··semver@6.3.1",
+   "node_modules": {
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "6.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··set-blocking@2.0.0",
+   "node_modules": {
+    "set-blocking": {
+     "pkg": {
+      "name": "set-blocking",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··shebang-command@2.0.0",
+   "node_modules": {
+    "shebang-command": {
+     "pkg": {
+      "name": "shebang-command",
+      "version": "2.0.0"
+     }
+    },
+    "shebang-regex": {
+     "link": "../../··shebang-regex@3.0.0/node_modules/shebang-regex"
+    }
+   }
+  },
+  {
+   "id": "··shebang-regex@3.0.0",
+   "node_modules": {
+    "shebang-regex": {
+     "pkg": {
+      "name": "shebang-regex",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··signal-exit@3.0.7",
+   "node_modules": {
+    "signal-exit": {
+     "pkg": {
+      "name": "signal-exit",
+      "version": "3.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··source-map-support@0.5.21",
+   "node_modules": {
+    "buffer-from": {
+     "link": "../../··buffer-from@1.1.2/node_modules/buffer-from"
+    },
+    "source-map": {
+     "link": "../../··source-map@0.6.1/node_modules/source-map"
+    },
+    "source-map-support": {
+     "pkg": {
+      "name": "source-map-support",
+      "version": "0.5.21"
+     }
+    }
+   }
+  },
+  {
+   "id": "··source-map@0.6.1",
+   "node_modules": {
+    "source-map": {
+     "pkg": {
+      "name": "source-map",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··spawn-wrap@2.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "foreground-child": {
+     "link": "../../··foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "is-windows": {
+     "link": "../../··is-windows@1.0.2/node_modules/is-windows"
+    },
+    "make-dir": {
+     "link": "../../··make-dir@3.1.0/node_modules/make-dir"
+    },
+    "rimraf": {
+     "link": "../../··rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "pkg": {
+      "name": "spawn-wrap",
+      "version": "2.0.0"
+     }
+    },
+    "which": {
+     "link": "../../··which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "··sprintf-js@1.0.3",
+   "node_modules": {
+    "sprintf-js": {
+     "pkg": {
+      "name": "sprintf-js",
+      "version": "1.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··sshpk@1.18.0",
+   "node_modules": {
+    "asn1": {
+     "link": "../../··asn1@0.2.6/node_modules/asn1"
+    },
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "bcrypt-pbkdf": {
+     "link": "../../··bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+    },
+    "dashdash": {
+     "link": "../../··dashdash@1.14.1/node_modules/dashdash"
+    },
+    "ecc-jsbn": {
+     "link": "../../··ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+    },
+    "getpass": {
+     "link": "../../··getpass@0.1.7/node_modules/getpass"
+    },
+    "jsbn": {
+     "link": "../../··jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../··safer-buffer@2.1.2/node_modules/safer-buffer"
+    },
+    "sshpk": {
+     "pkg": {
+      "name": "sshpk",
+      "version": "1.18.0"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../··tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "··stack-utils@2.0.6",
+   "node_modules": {
+    "escape-string-regexp": {
+     "link": "../../··escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "stack-utils": {
+     "pkg": {
+      "name": "stack-utils",
+      "version": "2.0.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "··string-width@4.2.3",
+   "node_modules": {
+    "emoji-regex": {
+     "link": "../../··emoji-regex@8.0.0/node_modules/emoji-regex"
+    },
+    "is-fullwidth-code-point": {
+     "link": "../../··is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+    },
+    "string-width": {
+     "pkg": {
+      "name": "string-width",
+      "version": "4.2.3"
+     }
+    },
+    "strip-ansi": {
+     "link": "../../··strip-ansi@6.0.1/node_modules/strip-ansi"
+    }
+   }
+  },
+  {
+   "id": "··strip-ansi@6.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "link": "../../··ansi-regex@5.0.1/node_modules/ansi-regex"
+    },
+    "strip-ansi": {
+     "pkg": {
+      "name": "strip-ansi",
+      "version": "6.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··strip-bom@4.0.0",
+   "node_modules": {
+    "strip-bom": {
+     "pkg": {
+      "name": "strip-bom",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··supports-color@7.2.0",
+   "node_modules": {
+    "has-flag": {
+     "link": "../../··has-flag@4.0.0/node_modules/has-flag"
+    },
+    "supports-color": {
+     "pkg": {
+      "name": "supports-color",
+      "version": "7.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··tap-mocha-reporter@5.0.4",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "color-support": {
+     "link": "../../··color-support@1.1.3/node_modules/color-support"
+    },
+    "debug": {
+     "link": "../../··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "diff": {
+     "link": "../../··diff@4.0.4/node_modules/diff"
+    },
+    "escape-string-regexp": {
+     "link": "../../··escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "glob": {
+     "link": "../../··glob@7.2.3/node_modules/glob"
+    },
+    "tap-mocha-reporter": {
+     "pkg": {
+      "name": "tap-mocha-reporter",
+      "version": "5.0.4"
+     }
+    },
+    "tap-parser": {
+     "link": "../../··tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../··tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "unicode-length": {
+     "link": "../../··unicode-length@2.1.0/node_modules/unicode-length"
+    }
+   }
+  },
+  {
+   "id": "··tap-parser@11.0.2",
+   "node_modules": {
+    "events-to-array": {
+     "link": "../../··events-to-array@1.1.2/node_modules/events-to-array"
+    },
+    "minipass": {
+     "link": "../../··minipass@3.3.6/node_modules/minipass"
+    },
+    "tap-parser": {
+     "pkg": {
+      "name": "tap-parser",
+      "version": "11.0.2"
+     }
+    },
+    "tap-yaml": {
+     "link": "../../··tap-yaml@1.0.2/node_modules/tap-yaml"
+    }
+   }
+  },
+  {
+   "id": "··tap-yaml@1.0.2",
+   "node_modules": {
+    "tap-yaml": {
+     "pkg": {
+      "name": "tap-yaml",
+      "version": "1.0.2"
+     }
+    },
+    "yaml": {
+     "link": "../../··yaml@1.10.3/node_modules/yaml"
+    }
+   }
+  },
+  {
+   "id": "··tap@15.2.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "chokidar": {
+     "link": "../../··chokidar@3.6.0/node_modules/chokidar"
+    },
+    "coveralls": {
+     "link": "../../··coveralls@3.1.1/node_modules/coveralls"
+    },
+    "findit": {
+     "link": "../../··findit@2.0.0/node_modules/findit"
+    },
+    "foreground-child": {
+     "link": "../../··foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "fs-exists-cached": {
+     "link": "../../··fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+    },
+    "glob": {
+     "link": "../../··glob@7.2.3/node_modules/glob"
+    },
+    "isexe": {
+     "link": "../../··isexe@2.0.0/node_modules/isexe"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../··istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "jackspeak": {
+     "link": "../../··jackspeak@1.4.2/node_modules/jackspeak"
+    },
+    "libtap": {
+     "link": "../../··libtap@1.4.1/node_modules/libtap"
+    },
+    "minipass": {
+     "link": "../../··minipass@3.3.6/node_modules/minipass"
+    },
+    "mkdirp": {
+     "link": "../../··mkdirp@1.0.4/node_modules/mkdirp"
+    },
+    "nyc": {
+     "link": "../../··nyc@15.1.0/node_modules/nyc"
+    },
+    "opener": {
+     "link": "../../··opener@1.5.2/node_modules/opener"
+    },
+    "rimraf": {
+     "link": "../../··rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "source-map-support": {
+     "link": "../../··source-map-support@0.5.21/node_modules/source-map-support"
+    },
+    "tap": {
+     "pkg": {
+      "name": "tap",
+      "version": "15.2.3"
+     }
+    },
+    "tap-mocha-reporter": {
+     "link": "../../··tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+    },
+    "tap-parser": {
+     "link": "../../··tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../··tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../··tcompare@5.0.7/node_modules/tcompare"
+    },
+    "which": {
+     "link": "../../··which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "··tcompare@5.0.7",
+   "node_modules": {
+    "diff": {
+     "link": "../../··diff@4.0.4/node_modules/diff"
+    },
+    "tcompare": {
+     "pkg": {
+      "name": "tcompare",
+      "version": "5.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "··test-exclude@6.0.0",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "link": "../../../··@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "glob": {
+     "link": "../../··glob@7.2.3/node_modules/glob"
+    },
+    "minimatch": {
+     "link": "../../··minimatch@3.1.5/node_modules/minimatch"
+    },
+    "test-exclude": {
+     "pkg": {
+      "name": "test-exclude",
+      "version": "6.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··to-regex-range@5.0.1",
+   "node_modules": {
+    "is-number": {
+     "link": "../../··is-number@7.0.0/node_modules/is-number"
+    },
+    "to-regex-range": {
+     "pkg": {
+      "name": "to-regex-range",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··tough-cookie@2.5.0",
+   "node_modules": {
+    "psl": {
+     "link": "../../··psl@1.15.0/node_modules/psl"
+    },
+    "punycode": {
+     "link": "../../··punycode@2.3.1/node_modules/punycode"
+    },
+    "tough-cookie": {
+     "pkg": {
+      "name": "tough-cookie",
+      "version": "2.5.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··trivial-deferred@1.1.2",
+   "node_modules": {
+    "trivial-deferred": {
+     "pkg": {
+      "name": "trivial-deferred",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··tunnel-agent@0.6.0",
+   "node_modules": {
+    "safe-buffer": {
+     "link": "../../··safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tunnel-agent": {
+     "pkg": {
+      "name": "tunnel-agent",
+      "version": "0.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··tweetnacl@0.14.5",
+   "node_modules": {
+    "tweetnacl": {
+     "pkg": {
+      "name": "tweetnacl",
+      "version": "0.14.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··type-fest@0.8.1",
+   "node_modules": {
+    "type-fest": {
+     "pkg": {
+      "name": "type-fest",
+      "version": "0.8.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··typedarray-to-buffer@3.1.5",
+   "node_modules": {
+    "is-typedarray": {
+     "link": "../../··is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "typedarray-to-buffer": {
+     "pkg": {
+      "name": "typedarray-to-buffer",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "··unicode-length@2.1.0",
+   "node_modules": {
+    "punycode": {
+     "link": "../../··punycode@2.3.1/node_modules/punycode"
+    },
+    "unicode-length": {
+     "pkg": {
+      "name": "unicode-length",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··update-browserslist-db@1.3.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "browserslist": {
+     "link": "../../··browserslist@4.29.1/node_modules/browserslist"
+    },
+    "escalade": {
+     "link": "../../··escalade@3.2.0/node_modules/escalade"
+    },
+    "picocolors": {
+     "link": "../../··picocolors@1.1.1/node_modules/picocolors"
+    },
+    "update-browserslist-db": {
+     "pkg": {
+      "name": "update-browserslist-db",
+      "version": "1.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··uri-js@4.4.1",
+   "node_modules": {
+    "punycode": {
+     "link": "../../··punycode@2.3.1/node_modules/punycode"
+    },
+    "uri-js": {
+     "pkg": {
+      "name": "uri-js",
+      "version": "4.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··use-sync-external-store@1.2.0",
+   "node_modules": {
+    "react": {
+     "link": "../../··react@18.2.0/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··uuid@3.4.0",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "3.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··uuid@8.3.2",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "8.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··verror@1.10.0",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../··assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "core-util-is": {
+     "link": "../../··core-util-is@1.0.2/node_modules/core-util-is"
+    },
+    "extsprintf": {
+     "link": "../../··extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "verror": {
+     "pkg": {
+      "name": "verror",
+      "version": "1.10.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··which-module@2.0.1",
+   "node_modules": {
+    "which-module": {
+     "pkg": {
+      "name": "which-module",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··which@2.0.2",
+   "node_modules": {
+    "isexe": {
+     "link": "../../··isexe@2.0.0/node_modules/isexe"
+    },
+    "which": {
+     "pkg": {
+      "name": "which",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··wrap-ansi@6.2.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../··ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../··string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../··strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "6.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··wrap-ansi@7.0.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../··ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../··string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../··strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··wrappy@1.0.2",
+   "node_modules": {
+    "wrappy": {
+     "pkg": {
+      "name": "wrappy",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "··write-file-atomic@3.0.3",
+   "node_modules": {
+    "imurmurhash": {
+     "link": "../../··imurmurhash@0.1.4/node_modules/imurmurhash"
+    },
+    "is-typedarray": {
+     "link": "../../··is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "signal-exit": {
+     "link": "../../··signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "typedarray-to-buffer": {
+     "link": "../../··typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+    },
+    "write-file-atomic": {
+     "pkg": {
+      "name": "write-file-atomic",
+      "version": "3.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··y18n@4.0.3",
+   "node_modules": {
+    "y18n": {
+     "pkg": {
+      "name": "y18n",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··yallist@3.1.1",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "··yallist@4.0.0",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "··yaml@1.10.3",
+   "node_modules": {
+    "yaml": {
+     "pkg": {
+      "name": "yaml",
+      "version": "1.10.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··yargs-parser@18.1.3",
+   "node_modules": {
+    "camelcase": {
+     "link": "../../··camelcase@5.3.1/node_modules/camelcase"
+    },
+    "decamelize": {
+     "link": "../../··decamelize@1.2.0/node_modules/decamelize"
+    },
+    "yargs-parser": {
+     "pkg": {
+      "name": "yargs-parser",
+      "version": "18.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "··yargs@15.4.1",
+   "node_modules": {
+    "cliui": {
+     "link": "../../··cliui@6.0.0/node_modules/cliui"
+    },
+    "decamelize": {
+     "link": "../../··decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-up": {
+     "link": "../../··find-up@4.1.0/node_modules/find-up"
+    },
+    "get-caller-file": {
+     "link": "../../··get-caller-file@2.0.5/node_modules/get-caller-file"
+    },
+    "require-directory": {
+     "link": "../../··require-directory@2.1.1/node_modules/require-directory"
+    },
+    "require-main-filename": {
+     "link": "../../··require-main-filename@2.0.0/node_modules/require-main-filename"
+    },
+    "set-blocking": {
+     "link": "../../··set-blocking@2.0.0/node_modules/set-blocking"
+    },
+    "string-width": {
+     "link": "../../··string-width@4.2.3/node_modules/string-width"
+    },
+    "which-module": {
+     "link": "../../··which-module@2.0.1/node_modules/which-module"
+    },
+    "y18n": {
+     "link": "../../··y18n@4.0.3/node_modules/y18n"
+    },
+    "yargs": {
+     "pkg": {
+      "name": "yargs",
+      "version": "15.4.1"
+     }
+    },
+    "yargs-parser": {
+     "link": "../../··yargs-parser@18.1.3/node_modules/yargs-parser"
+    }
+   }
+  }
+ ],
+ "importers": {
+  ".bin": {
+   "dir": true
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../.vlt/··@isaacs§string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "debug": {
+   "link": ".vlt/··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+  },
+  "left-pad": {
+   "link": ".vlt/··left-pad@1.3.0/node_modules/left-pad"
+  },
+  "lp-alias": {
+   "link": ".vlt/·npm·left-pad@1.1.3/node_modules/left-pad"
+  },
+  "lp-remote": {
+   "link": ".vlt/remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz/node_modules/left-pad"
+  },
+  "ms-tgz": {
+   "link": ".vlt/file·vendor§ms-2.1.2.tgz/node_modules/ms"
+  },
+  "react": {
+   "link": ".vlt/··react@18.2.0/node_modules/react"
+  },
+  "semver_x": {
+   "link": ".vlt/·npm·semver@7.6.0/node_modules/semver"
+  },
+  "slc-git": {
+   "link": ".vlt/git·github%3Aisaacs§string-locale-compare·v1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "use-sync-external-store": {
+   "link": ".vlt/··use-sync-external-store@1.2.0/node_modules/use-sync-external-store"
+  }
+ },
+ "members": {},
+ "linkTargets": {}
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/README.md b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/README.md
new file mode 100644
index 00000000..3f345794
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/README.md
@@ -0,0 +1,21 @@
+# vlt 1.0.0-rc.14 installed layout
+
+`listing.json` is the on-disk layout real vlt 1.0.0-rc.14 produced, captured with
+`scripts/capture-vlt-tree.mjs` right after a cold `vlt install` (isolated
+XDG dirs and VLT_CACHE, VLT_TELEMETRY=0, LANG=C, no lockfile). Store entry
+names are byte-exact; the crawler tests in `crawler_npm_e2e.rs` stage the
+listing as real directories, package.json files and relative symlinks.
+
+Project (`package.json` dependencies):
+
+- "left-pad": "1.3.0", "debug": "4.3.4", "@isaacs/string-locale-compare": "1.1.0"
+- "react": "18.2.0", "use-sync-external-store": "1.2.0"
+- "lp-alias": "npm:left-pad@1.1.3", "semver_x": "npm:semver@7.6.0"
+- "slc-git": "github:isaacs/string-locale-compare#v1.1.0"
+- "lp-remote": "https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz"
+- "ms-tgz": "file:./vendor/ms-2.1.2.tgz"
+- "localdir": "file:./vendor/localdir" (a left-pad@1.3.0 copy renamed localdir)
+
+`vlt.json`: `{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}`.
+
+The git dependency's devDependencies account for most store entries.
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/listing.json b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/listing.json
new file mode 100644
index 00000000..6383b3bc
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.14/listing.json
@@ -0,0 +1,4596 @@
+{
+ "vlt": "1.0.0-rc.14",
+ "lockfileVersion": 0,
+ "storeFiles": [
+  "vlt.json"
+ ],
+ "hoist": {
+  "@babel/code-frame": {
+   "link": "../../·npm·@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+  },
+  "@babel/compat-data": {
+   "link": "../../·npm·@babel§compat-data@7.29.7/node_modules/@babel/compat-data"
+  },
+  "@babel/core": {
+   "link": "../../·npm·@babel§core@7.29.7/node_modules/@babel/core"
+  },
+  "@babel/generator": {
+   "link": "../../·npm·@babel§generator@7.29.8/node_modules/@babel/generator"
+  },
+  "@babel/helper-compilation-targets": {
+   "link": "../../·npm·@babel§helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+  },
+  "@babel/helper-globals": {
+   "link": "../../·npm·@babel§helper-globals@7.29.7/node_modules/@babel/helper-globals"
+  },
+  "@babel/helper-module-imports": {
+   "link": "../../·npm·@babel§helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+  },
+  "@babel/helper-module-transforms": {
+   "link": "../../·npm·@babel§helper-module-transforms@7.29.7·%E1%B9%97%3A3/node_modules/@babel/helper-module-transforms"
+  },
+  "@babel/helper-string-parser": {
+   "link": "../../·npm·@babel§helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+  },
+  "@babel/helper-validator-identifier": {
+   "link": "../../·npm·@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+  },
+  "@babel/helper-validator-option": {
+   "link": "../../·npm·@babel§helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+  },
+  "@babel/helpers": {
+   "link": "../../·npm·@babel§helpers@7.29.7/node_modules/@babel/helpers"
+  },
+  "@babel/parser": {
+   "link": "../../·npm·@babel§parser@7.29.9/node_modules/@babel/parser"
+  },
+  "@babel/template": {
+   "link": "../../·npm·@babel§template@7.29.7/node_modules/@babel/template"
+  },
+  "@babel/traverse": {
+   "link": "../../·npm·@babel§traverse@7.29.8/node_modules/@babel/traverse"
+  },
+  "@babel/types": {
+   "link": "../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../../·npm·@isaacs§string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "@istanbuljs/load-nyc-config": {
+   "link": "../../·npm·@istanbuljs§load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+  },
+  "@istanbuljs/schema": {
+   "link": "../../·npm·@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+  },
+  "@jridgewell/gen-mapping": {
+   "link": "../../·npm·@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+  },
+  "@jridgewell/remapping": {
+   "link": "../../·npm·@jridgewell§remapping@2.3.5/node_modules/@jridgewell/remapping"
+  },
+  "@jridgewell/resolve-uri": {
+   "link": "../../·npm·@jridgewell§resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+  },
+  "@jridgewell/sourcemap-codec": {
+   "link": "../../·npm·@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+  },
+  "@jridgewell/trace-mapping": {
+   "link": "../../·npm·@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+  },
+  "aggregate-error": {
+   "link": "../·npm·aggregate-error@3.1.0/node_modules/aggregate-error"
+  },
+  "ajv": {
+   "link": "../·npm·ajv@6.15.0/node_modules/ajv"
+  },
+  "ansi-regex": {
+   "link": "../·npm·ansi-regex@5.0.1/node_modules/ansi-regex"
+  },
+  "ansi-styles": {
+   "link": "../·npm·ansi-styles@4.3.0/node_modules/ansi-styles"
+  },
+  "anymatch": {
+   "link": "../·npm·anymatch@3.1.3/node_modules/anymatch"
+  },
+  "append-transform": {
+   "link": "../·npm·append-transform@2.0.0/node_modules/append-transform"
+  },
+  "archy": {
+   "link": "../·npm·archy@1.0.0/node_modules/archy"
+  },
+  "argparse": {
+   "link": "../·npm·argparse@1.0.10/node_modules/argparse"
+  },
+  "asn1": {
+   "link": "../·npm·asn1@0.2.6/node_modules/asn1"
+  },
+  "assert-plus": {
+   "link": "../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+  },
+  "async-hook-domain": {
+   "link": "../·npm·async-hook-domain@2.0.4/node_modules/async-hook-domain"
+  },
+  "asynckit": {
+   "link": "../·npm·asynckit@0.4.0/node_modules/asynckit"
+  },
+  "aws-sign2": {
+   "link": "../·npm·aws-sign2@0.7.0/node_modules/aws-sign2"
+  },
+  "aws4": {
+   "link": "../·npm·aws4@1.13.2/node_modules/aws4"
+  },
+  "balanced-match": {
+   "link": "../·npm·balanced-match@1.0.2/node_modules/balanced-match"
+  },
+  "baseline-browser-mapping": {
+   "link": "../·npm·baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+  },
+  "bcrypt-pbkdf": {
+   "link": "../·npm·bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+  },
+  "binary-extensions": {
+   "link": "../·npm·binary-extensions@2.3.0/node_modules/binary-extensions"
+  },
+  "bind-obj-methods": {
+   "link": "../·npm·bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+  },
+  "brace-expansion": {
+   "link": "../·npm·brace-expansion@1.1.21/node_modules/brace-expansion"
+  },
+  "braces": {
+   "link": "../·npm·braces@3.0.3/node_modules/braces"
+  },
+  "browserslist": {
+   "link": "../·npm·browserslist@4.29.1/node_modules/browserslist"
+  },
+  "buffer-from": {
+   "link": "../·npm·buffer-from@1.1.2/node_modules/buffer-from"
+  },
+  "caching-transform": {
+   "link": "../·npm·caching-transform@4.0.0/node_modules/caching-transform"
+  },
+  "camelcase": {
+   "link": "../·npm·camelcase@5.3.1/node_modules/camelcase"
+  },
+  "caniuse-lite": {
+   "link": "../·npm·caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+  },
+  "caseless": {
+   "link": "../·npm·caseless@0.12.0/node_modules/caseless"
+  },
+  "chokidar": {
+   "link": "../·npm·chokidar@3.6.0/node_modules/chokidar"
+  },
+  "clean-stack": {
+   "link": "../·npm·clean-stack@2.2.0/node_modules/clean-stack"
+  },
+  "cliui": {
+   "link": "../·npm·cliui@7.0.4/node_modules/cliui"
+  },
+  "color-convert": {
+   "link": "../·npm·color-convert@2.0.1/node_modules/color-convert"
+  },
+  "color-name": {
+   "link": "../·npm·color-name@1.1.4/node_modules/color-name"
+  },
+  "color-support": {
+   "link": "../·npm·color-support@1.1.3/node_modules/color-support"
+  },
+  "combined-stream": {
+   "link": "../·npm·combined-stream@1.0.8/node_modules/combined-stream"
+  },
+  "commondir": {
+   "link": "../·npm·commondir@1.0.1/node_modules/commondir"
+  },
+  "concat-map": {
+   "link": "../·npm·concat-map@0.0.1/node_modules/concat-map"
+  },
+  "convert-source-map": {
+   "link": "../·npm·convert-source-map@2.0.0/node_modules/convert-source-map"
+  },
+  "core-util-is": {
+   "link": "../·npm·core-util-is@1.0.2/node_modules/core-util-is"
+  },
+  "coveralls": {
+   "link": "../·npm·coveralls@3.1.1/node_modules/coveralls"
+  },
+  "cross-spawn": {
+   "link": "../·npm·cross-spawn@7.0.6/node_modules/cross-spawn"
+  },
+  "dashdash": {
+   "link": "../·npm·dashdash@1.14.1/node_modules/dashdash"
+  },
+  "debug": {
+   "link": "../·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+  },
+  "decamelize": {
+   "link": "../·npm·decamelize@1.2.0/node_modules/decamelize"
+  },
+  "default-require-extensions": {
+   "link": "../·npm·default-require-extensions@3.0.1/node_modules/default-require-extensions"
+  },
+  "delayed-stream": {
+   "link": "../·npm·delayed-stream@1.0.0/node_modules/delayed-stream"
+  },
+  "diff": {
+   "link": "../·npm·diff@4.0.4/node_modules/diff"
+  },
+  "ecc-jsbn": {
+   "link": "../·npm·ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+  },
+  "electron-to-chromium": {
+   "link": "../·npm·electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+  },
+  "emoji-regex": {
+   "link": "../·npm·emoji-regex@8.0.0/node_modules/emoji-regex"
+  },
+  "es6-error": {
+   "link": "../·npm·es6-error@4.1.1/node_modules/es6-error"
+  },
+  "escalade": {
+   "link": "../·npm·escalade@3.2.0/node_modules/escalade"
+  },
+  "escape-string-regexp": {
+   "link": "../·npm·escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+  },
+  "esprima": {
+   "link": "../·npm·esprima@4.0.1/node_modules/esprima"
+  },
+  "events-to-array": {
+   "link": "../·npm·events-to-array@1.1.2/node_modules/events-to-array"
+  },
+  "extend": {
+   "link": "../·npm·extend@3.0.2/node_modules/extend"
+  },
+  "extsprintf": {
+   "link": "../·npm·extsprintf@1.3.0/node_modules/extsprintf"
+  },
+  "fast-deep-equal": {
+   "link": "../·npm·fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+  },
+  "fast-json-stable-stringify": {
+   "link": "../·npm·fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+  },
+  "fill-range": {
+   "link": "../·npm·fill-range@7.1.1/node_modules/fill-range"
+  },
+  "find-cache-dir": {
+   "link": "../·npm·find-cache-dir@3.3.2/node_modules/find-cache-dir"
+  },
+  "find-up": {
+   "link": "../·npm·find-up@4.1.0/node_modules/find-up"
+  },
+  "findit": {
+   "link": "../·npm·findit@2.0.0/node_modules/findit"
+  },
+  "foreground-child": {
+   "link": "../·npm·foreground-child@2.0.0/node_modules/foreground-child"
+  },
+  "forever-agent": {
+   "link": "../·npm·forever-agent@0.6.1/node_modules/forever-agent"
+  },
+  "form-data": {
+   "link": "../·npm·form-data@2.3.3/node_modules/form-data"
+  },
+  "fromentries": {
+   "link": "../·npm·fromentries@1.3.2/node_modules/fromentries"
+  },
+  "fs-exists-cached": {
+   "link": "../·npm·fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+  },
+  "fs.realpath": {
+   "link": "../·npm·fs.realpath@1.0.0/node_modules/fs.realpath"
+  },
+  "fsevents": {
+   "link": "../·npm·fsevents@2.3.3/node_modules/fsevents"
+  },
+  "function-loop": {
+   "link": "../·npm·function-loop@2.0.1/node_modules/function-loop"
+  },
+  "gensync": {
+   "link": "../·npm·gensync@1.0.0-beta.2/node_modules/gensync"
+  },
+  "get-caller-file": {
+   "link": "../·npm·get-caller-file@2.0.5/node_modules/get-caller-file"
+  },
+  "get-package-type": {
+   "link": "../·npm·get-package-type@0.1.0/node_modules/get-package-type"
+  },
+  "getpass": {
+   "link": "../·npm·getpass@0.1.7/node_modules/getpass"
+  },
+  "glob": {
+   "link": "../·npm·glob@7.2.3/node_modules/glob"
+  },
+  "glob-parent": {
+   "link": "../·npm·glob-parent@5.1.2/node_modules/glob-parent"
+  },
+  "graceful-fs": {
+   "link": "../·npm·graceful-fs@4.2.11/node_modules/graceful-fs"
+  },
+  "har-schema": {
+   "link": "../·npm·har-schema@2.0.0/node_modules/har-schema"
+  },
+  "har-validator": {
+   "link": "../·npm·har-validator@5.1.5/node_modules/har-validator"
+  },
+  "has-flag": {
+   "link": "../·npm·has-flag@4.0.0/node_modules/has-flag"
+  },
+  "hasha": {
+   "link": "../·npm·hasha@5.2.2/node_modules/hasha"
+  },
+  "html-escaper": {
+   "link": "../·npm·html-escaper@2.0.2/node_modules/html-escaper"
+  },
+  "http-signature": {
+   "link": "../·npm·http-signature@1.2.0/node_modules/http-signature"
+  },
+  "imurmurhash": {
+   "link": "../·npm·imurmurhash@0.1.4/node_modules/imurmurhash"
+  },
+  "indent-string": {
+   "link": "../·npm·indent-string@4.0.0/node_modules/indent-string"
+  },
+  "inflight": {
+   "link": "../·npm·inflight@1.0.6/node_modules/inflight"
+  },
+  "inherits": {
+   "link": "../·npm·inherits@2.0.4/node_modules/inherits"
+  },
+  "is-binary-path": {
+   "link": "../·npm·is-binary-path@2.1.0/node_modules/is-binary-path"
+  },
+  "is-extglob": {
+   "link": "../·npm·is-extglob@2.1.1/node_modules/is-extglob"
+  },
+  "is-fullwidth-code-point": {
+   "link": "../·npm·is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+  },
+  "is-glob": {
+   "link": "../·npm·is-glob@4.0.3/node_modules/is-glob"
+  },
+  "is-number": {
+   "link": "../·npm·is-number@7.0.0/node_modules/is-number"
+  },
+  "is-stream": {
+   "link": "../·npm·is-stream@2.0.1/node_modules/is-stream"
+  },
+  "is-typedarray": {
+   "link": "../·npm·is-typedarray@1.0.0/node_modules/is-typedarray"
+  },
+  "is-windows": {
+   "link": "../·npm·is-windows@1.0.2/node_modules/is-windows"
+  },
+  "isexe": {
+   "link": "../·npm·isexe@2.0.0/node_modules/isexe"
+  },
+  "isstream": {
+   "link": "../·npm·isstream@0.1.2/node_modules/isstream"
+  },
+  "istanbul-lib-coverage": {
+   "link": "../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+  },
+  "istanbul-lib-hook": {
+   "link": "../·npm·istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+  },
+  "istanbul-lib-instrument": {
+   "link": "../·npm·istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+  },
+  "istanbul-lib-processinfo": {
+   "link": "../·npm·istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+  },
+  "istanbul-lib-report": {
+   "link": "../·npm·istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+  },
+  "istanbul-lib-source-maps": {
+   "link": "../·npm·istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+  },
+  "istanbul-reports": {
+   "link": "../·npm·istanbul-reports@3.2.0/node_modules/istanbul-reports"
+  },
+  "jackspeak": {
+   "link": "../·npm·jackspeak@1.4.2/node_modules/jackspeak"
+  },
+  "js-tokens": {
+   "link": "../·npm·js-tokens@4.0.0/node_modules/js-tokens"
+  },
+  "js-yaml": {
+   "link": "../·npm·js-yaml@3.15.2/node_modules/js-yaml"
+  },
+  "jsbn": {
+   "link": "../·npm·jsbn@0.1.1/node_modules/jsbn"
+  },
+  "jsesc": {
+   "link": "../·npm·jsesc@3.1.0/node_modules/jsesc"
+  },
+  "json-schema": {
+   "link": "../·npm·json-schema@0.4.0/node_modules/json-schema"
+  },
+  "json-schema-traverse": {
+   "link": "../·npm·json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+  },
+  "json-stringify-safe": {
+   "link": "../·npm·json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+  },
+  "json5": {
+   "link": "../·npm·json5@2.2.3/node_modules/json5"
+  },
+  "jsprim": {
+   "link": "../·npm·jsprim@1.4.2/node_modules/jsprim"
+  },
+  "lcov-parse": {
+   "link": "../·npm·lcov-parse@1.0.0/node_modules/lcov-parse"
+  },
+  "left-pad": {
+   "link": "../·npm·left-pad@1.3.0/node_modules/left-pad"
+  },
+  "libtap": {
+   "link": "../·npm·libtap@1.4.1/node_modules/libtap"
+  },
+  "locate-path": {
+   "link": "../·npm·locate-path@5.0.0/node_modules/locate-path"
+  },
+  "lodash.flattendeep": {
+   "link": "../·npm·lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+  },
+  "log-driver": {
+   "link": "../·npm·log-driver@1.2.7/node_modules/log-driver"
+  },
+  "loose-envify": {
+   "link": "../·npm·loose-envify@1.4.0/node_modules/loose-envify"
+  },
+  "lru-cache": {
+   "link": "../·npm·lru-cache@6.0.0/node_modules/lru-cache"
+  },
+  "make-dir": {
+   "link": "../·npm·make-dir@4.0.0/node_modules/make-dir"
+  },
+  "mime-db": {
+   "link": "../·npm·mime-db@1.52.0/node_modules/mime-db"
+  },
+  "mime-types": {
+   "link": "../·npm·mime-types@2.1.35/node_modules/mime-types"
+  },
+  "minimatch": {
+   "link": "../·npm·minimatch@3.1.5/node_modules/minimatch"
+  },
+  "minimist": {
+   "link": "../·npm·minimist@1.2.8/node_modules/minimist"
+  },
+  "minipass": {
+   "link": "../·npm·minipass@3.3.6/node_modules/minipass"
+  },
+  "mkdirp": {
+   "link": "../·npm·mkdirp@1.0.4/node_modules/mkdirp"
+  },
+  "ms-tgz": {
+   "link": "../file·vendor§ms-2.1.2.tgz/node_modules/ms"
+  },
+  "node-preload": {
+   "link": "../·npm·node-preload@0.2.1/node_modules/node-preload"
+  },
+  "node-releases": {
+   "link": "../·npm·node-releases@2.0.57/node_modules/node-releases"
+  },
+  "normalize-path": {
+   "link": "../·npm·normalize-path@3.0.0/node_modules/normalize-path"
+  },
+  "nyc": {
+   "link": "../·npm·nyc@15.1.0/node_modules/nyc"
+  },
+  "oauth-sign": {
+   "link": "../·npm·oauth-sign@0.9.0/node_modules/oauth-sign"
+  },
+  "once": {
+   "link": "../·npm·once@1.4.0/node_modules/once"
+  },
+  "opener": {
+   "link": "../·npm·opener@1.5.2/node_modules/opener"
+  },
+  "own-or": {
+   "link": "../·npm·own-or@1.0.0/node_modules/own-or"
+  },
+  "own-or-env": {
+   "link": "../·npm·own-or-env@1.0.2/node_modules/own-or-env"
+  },
+  "p-limit": {
+   "link": "../·npm·p-limit@2.3.0/node_modules/p-limit"
+  },
+  "p-locate": {
+   "link": "../·npm·p-locate@4.1.0/node_modules/p-locate"
+  },
+  "p-map": {
+   "link": "../·npm·p-map@3.0.0/node_modules/p-map"
+  },
+  "p-try": {
+   "link": "../·npm·p-try@2.2.0/node_modules/p-try"
+  },
+  "package-hash": {
+   "link": "../·npm·package-hash@4.0.0/node_modules/package-hash"
+  },
+  "path-exists": {
+   "link": "../·npm·path-exists@4.0.0/node_modules/path-exists"
+  },
+  "path-is-absolute": {
+   "link": "../·npm·path-is-absolute@1.0.1/node_modules/path-is-absolute"
+  },
+  "path-key": {
+   "link": "../·npm·path-key@3.1.1/node_modules/path-key"
+  },
+  "performance-now": {
+   "link": "../·npm·performance-now@2.1.0/node_modules/performance-now"
+  },
+  "picocolors": {
+   "link": "../·npm·picocolors@1.1.1/node_modules/picocolors"
+  },
+  "picomatch": {
+   "link": "../·npm·picomatch@2.3.2/node_modules/picomatch"
+  },
+  "pkg-dir": {
+   "link": "../·npm·pkg-dir@4.2.0/node_modules/pkg-dir"
+  },
+  "process-on-spawn": {
+   "link": "../·npm·process-on-spawn@1.1.0/node_modules/process-on-spawn"
+  },
+  "psl": {
+   "link": "../·npm·psl@1.15.0/node_modules/psl"
+  },
+  "punycode": {
+   "link": "../·npm·punycode@2.3.1/node_modules/punycode"
+  },
+  "qs": {
+   "link": "../·npm·qs@6.5.5/node_modules/qs"
+  },
+  "react": {
+   "link": "../·npm·react@18.2.0/node_modules/react"
+  },
+  "readdirp": {
+   "link": "../·npm·readdirp@3.6.0/node_modules/readdirp"
+  },
+  "release-zalgo": {
+   "link": "../·npm·release-zalgo@1.0.0/node_modules/release-zalgo"
+  },
+  "request": {
+   "link": "../·npm·request@2.88.2/node_modules/request"
+  },
+  "require-directory": {
+   "link": "../·npm·require-directory@2.1.1/node_modules/require-directory"
+  },
+  "require-main-filename": {
+   "link": "../·npm·require-main-filename@2.0.0/node_modules/require-main-filename"
+  },
+  "resolve-from": {
+   "link": "../·npm·resolve-from@5.0.0/node_modules/resolve-from"
+  },
+  "rimraf": {
+   "link": "../·npm·rimraf@3.0.2/node_modules/rimraf"
+  },
+  "safe-buffer": {
+   "link": "../·npm·safe-buffer@5.2.1/node_modules/safe-buffer"
+  },
+  "safer-buffer": {
+   "link": "../·npm·safer-buffer@2.1.2/node_modules/safer-buffer"
+  },
+  "semver_x": {
+   "link": "../·npm·semver@7.6.0/node_modules/semver"
+  },
+  "set-blocking": {
+   "link": "../·npm·set-blocking@2.0.0/node_modules/set-blocking"
+  },
+  "shebang-command": {
+   "link": "../·npm·shebang-command@2.0.0/node_modules/shebang-command"
+  },
+  "shebang-regex": {
+   "link": "../·npm·shebang-regex@3.0.0/node_modules/shebang-regex"
+  },
+  "signal-exit": {
+   "link": "../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+  },
+  "source-map": {
+   "link": "../·npm·source-map@0.6.1/node_modules/source-map"
+  },
+  "source-map-support": {
+   "link": "../·npm·source-map-support@0.5.21/node_modules/source-map-support"
+  },
+  "spawn-wrap": {
+   "link": "../·npm·spawn-wrap@2.0.0/node_modules/spawn-wrap"
+  },
+  "sprintf-js": {
+   "link": "../·npm·sprintf-js@1.0.3/node_modules/sprintf-js"
+  },
+  "sshpk": {
+   "link": "../·npm·sshpk@1.18.0/node_modules/sshpk"
+  },
+  "stack-utils": {
+   "link": "../·npm·stack-utils@2.0.6/node_modules/stack-utils"
+  },
+  "string-width": {
+   "link": "../·npm·string-width@4.2.3/node_modules/string-width"
+  },
+  "strip-ansi": {
+   "link": "../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+  },
+  "strip-bom": {
+   "link": "../·npm·strip-bom@4.0.0/node_modules/strip-bom"
+  },
+  "supports-color": {
+   "link": "../·npm·supports-color@7.2.0/node_modules/supports-color"
+  },
+  "tap": {
+   "link": "../·npm·tap@15.2.3/node_modules/tap"
+  },
+  "tap-mocha-reporter": {
+   "link": "../·npm·tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+  },
+  "tap-parser": {
+   "link": "../·npm·tap-parser@11.0.2/node_modules/tap-parser"
+  },
+  "tap-yaml": {
+   "link": "../·npm·tap-yaml@1.0.2/node_modules/tap-yaml"
+  },
+  "tcompare": {
+   "link": "../·npm·tcompare@5.0.7/node_modules/tcompare"
+  },
+  "test-exclude": {
+   "link": "../·npm·test-exclude@6.0.0/node_modules/test-exclude"
+  },
+  "to-regex-range": {
+   "link": "../·npm·to-regex-range@5.0.1/node_modules/to-regex-range"
+  },
+  "tough-cookie": {
+   "link": "../·npm·tough-cookie@2.5.0/node_modules/tough-cookie"
+  },
+  "trivial-deferred": {
+   "link": "../·npm·trivial-deferred@1.1.2/node_modules/trivial-deferred"
+  },
+  "tunnel-agent": {
+   "link": "../·npm·tunnel-agent@0.6.0/node_modules/tunnel-agent"
+  },
+  "tweetnacl": {
+   "link": "../·npm·tweetnacl@0.14.5/node_modules/tweetnacl"
+  },
+  "type-fest": {
+   "link": "../·npm·type-fest@0.8.1/node_modules/type-fest"
+  },
+  "typedarray-to-buffer": {
+   "link": "../·npm·typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+  },
+  "unicode-length": {
+   "link": "../·npm·unicode-length@2.1.0/node_modules/unicode-length"
+  },
+  "update-browserslist-db": {
+   "link": "../·npm·update-browserslist-db@1.3.3·%E1%B9%97%3A6/node_modules/update-browserslist-db"
+  },
+  "uri-js": {
+   "link": "../·npm·uri-js@4.4.1/node_modules/uri-js"
+  },
+  "use-sync-external-store": {
+   "link": "../·npm·use-sync-external-store@1.2.0/node_modules/use-sync-external-store"
+  },
+  "uuid": {
+   "link": "../·npm·uuid@8.3.2/node_modules/uuid"
+  },
+  "verror": {
+   "link": "../·npm·verror@1.10.0/node_modules/verror"
+  },
+  "which": {
+   "link": "../·npm·which@2.0.2/node_modules/which"
+  },
+  "which-module": {
+   "link": "../·npm·which-module@2.0.1/node_modules/which-module"
+  },
+  "wrap-ansi": {
+   "link": "../·npm·wrap-ansi@7.0.0/node_modules/wrap-ansi"
+  },
+  "wrappy": {
+   "link": "../·npm·wrappy@1.0.2/node_modules/wrappy"
+  },
+  "write-file-atomic": {
+   "link": "../·npm·write-file-atomic@3.0.3/node_modules/write-file-atomic"
+  },
+  "y18n": {
+   "link": "../·npm·y18n@4.0.3/node_modules/y18n"
+  },
+  "yallist": {
+   "link": "../·npm·yallist@4.0.0/node_modules/yallist"
+  },
+  "yaml": {
+   "link": "../·npm·yaml@1.10.3/node_modules/yaml"
+  },
+  "yargs": {
+   "link": "../·npm·yargs@15.4.1/node_modules/yargs"
+  },
+  "yargs-parser": {
+   "link": "../·npm·yargs-parser@18.1.3/node_modules/yargs-parser"
+  }
+ },
+ "store": [
+  {
+   "id": "file·vendor§ms-2.1.2.tgz",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "git·github%3Aisaacs§string-locale-compare·v1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    },
+    "tap": {
+     "link": "../../·npm·tap@15.2.3/node_modules/tap"
+    }
+   }
+  },
+  {
+   "id": "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§code-frame@7.29.7",
+   "node_modules": {
+    "@babel/code-frame": {
+     "pkg": {
+      "name": "@babel/code-frame",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../·npm·@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "js-tokens": {
+     "link": "../../·npm·js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "picocolors": {
+     "link": "../../·npm·picocolors@1.1.1/node_modules/picocolors"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§compat-data@7.29.7",
+   "node_modules": {
+    "@babel/compat-data": {
+     "pkg": {
+      "name": "@babel/compat-data",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§core@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../·npm·@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/core": {
+     "pkg": {
+      "name": "@babel/core",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/generator": {
+     "link": "../../../·npm·@babel§generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-compilation-targets": {
+     "link": "../../../·npm·@babel§helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+    },
+    "@babel/helper-module-transforms": {
+     "link": "../../../·npm·@babel§helper-module-transforms@7.29.7·%E1%B9%97%3A3/node_modules/@babel/helper-module-transforms"
+    },
+    "@babel/helpers": {
+     "link": "../../../·npm·@babel§helpers@7.29.7/node_modules/@babel/helpers"
+    },
+    "@babel/parser": {
+     "link": "../../../·npm·@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../·npm·@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "link": "../../../·npm·@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/remapping": {
+     "link": "../../../·npm·@jridgewell§remapping@2.3.5/node_modules/@jridgewell/remapping"
+    },
+    "convert-source-map": {
+     "link": "../../·npm·convert-source-map@2.0.0/node_modules/convert-source-map"
+    },
+    "debug": {
+     "link": "../../·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "gensync": {
+     "link": "../../·npm·gensync@1.0.0-beta.2/node_modules/gensync"
+    },
+    "json5": {
+     "link": "../../·npm·json5@2.2.3/node_modules/json5"
+    },
+    "semver": {
+     "link": "../../·npm·semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§generator@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/generator": {
+     "pkg": {
+      "name": "@babel/generator",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/parser": {
+     "link": "../../../·npm·@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/gen-mapping": {
+     "link": "../../../·npm·@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../·npm·@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    },
+    "jsesc": {
+     "link": "../../·npm·jsesc@3.1.0/node_modules/jsesc"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-compilation-targets@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/compat-data": {
+     "link": "../../../·npm·@babel§compat-data@7.29.7/node_modules/@babel/compat-data"
+    },
+    "@babel/helper-compilation-targets": {
+     "pkg": {
+      "name": "@babel/helper-compilation-targets",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-option": {
+     "link": "../../../·npm·@babel§helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+    },
+    "browserslist": {
+     "link": "../../·npm·browserslist@4.29.1/node_modules/browserslist"
+    },
+    "lru-cache": {
+     "link": "../../·npm·lru-cache@5.1.1/node_modules/lru-cache"
+    },
+    "semver": {
+     "link": "../../·npm·semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-globals@7.29.7",
+   "node_modules": {
+    "@babel/helper-globals": {
+     "pkg": {
+      "name": "@babel/helper-globals",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-module-imports@7.29.7",
+   "node_modules": {
+    "@babel/helper-module-imports": {
+     "pkg": {
+      "name": "@babel/helper-module-imports",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/traverse": {
+     "link": "../../../·npm·@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-module-transforms@7.29.7·%E1%B9%97%3A3",
+   "node_modules": {
+    "@babel/core": {
+     "link": "../../../·npm·@babel§core@7.29.7/node_modules/@babel/core"
+    },
+    "@babel/helper-module-imports": {
+     "link": "../../../·npm·@babel§helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+    },
+    "@babel/helper-module-transforms": {
+     "pkg": {
+      "name": "@babel/helper-module-transforms",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../·npm·@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/traverse": {
+     "link": "../../../·npm·@babel§traverse@7.29.8/node_modules/@babel/traverse"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-string-parser@7.29.7",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "pkg": {
+      "name": "@babel/helper-string-parser",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-validator-identifier@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-identifier": {
+     "pkg": {
+      "name": "@babel/helper-validator-identifier",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helper-validator-option@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-option": {
+     "pkg": {
+      "name": "@babel/helper-validator-option",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§helpers@7.29.7",
+   "node_modules": {
+    "@babel/helpers": {
+     "pkg": {
+      "name": "@babel/helpers",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/template": {
+     "link": "../../../·npm·@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§parser@7.29.9",
+   "node_modules": {
+    "@babel/parser": {
+     "pkg": {
+      "name": "@babel/parser",
+      "version": "7.29.9"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§template@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../·npm·@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/parser": {
+     "link": "../../../·npm·@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "pkg": {
+      "name": "@babel/template",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§traverse@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../·npm·@babel§code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/generator": {
+     "link": "../../../·npm·@babel§generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-globals": {
+     "link": "../../../·npm·@babel§helper-globals@7.29.7/node_modules/@babel/helper-globals"
+    },
+    "@babel/parser": {
+     "link": "../../../·npm·@babel§parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../·npm·@babel§template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "pkg": {
+      "name": "@babel/traverse",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../·npm·@babel§types@7.29.8/node_modules/@babel/types"
+    },
+    "debug": {
+     "link": "../../·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    }
+   }
+  },
+  {
+   "id": "·npm·@babel§types@7.29.8",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "link": "../../../·npm·@babel§helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../·npm·@babel§helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/types": {
+     "pkg": {
+      "name": "@babel/types",
+      "version": "7.29.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@isaacs§string-locale-compare@1.1.0",
+   "node_modules": {
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@istanbuljs§load-nyc-config@1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "pkg": {
+      "name": "@istanbuljs/load-nyc-config",
+      "version": "1.1.0"
+     }
+    },
+    "camelcase": {
+     "link": "../../·npm·camelcase@5.3.1/node_modules/camelcase"
+    },
+    "find-up": {
+     "link": "../../·npm·find-up@4.1.0/node_modules/find-up"
+    },
+    "get-package-type": {
+     "link": "../../·npm·get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "js-yaml": {
+     "link": "../../·npm·js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "resolve-from": {
+     "link": "../../·npm·resolve-from@5.0.0/node_modules/resolve-from"
+    }
+   }
+  },
+  {
+   "id": "·npm·@istanbuljs§schema@0.1.6",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "pkg": {
+      "name": "@istanbuljs/schema",
+      "version": "0.1.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@jridgewell§gen-mapping@0.3.13",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "pkg": {
+      "name": "@jridgewell/gen-mapping",
+      "version": "0.3.13"
+     }
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../·npm·@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../·npm·@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "·npm·@jridgewell§remapping@2.3.5",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "link": "../../../·npm·@jridgewell§gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/remapping": {
+     "pkg": {
+      "name": "@jridgewell/remapping",
+      "version": "2.3.5"
+     }
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../·npm·@jridgewell§trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "·npm·@jridgewell§resolve-uri@3.1.2",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "pkg": {
+      "name": "@jridgewell/resolve-uri",
+      "version": "3.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@jridgewell§sourcemap-codec@1.6.0",
+   "node_modules": {
+    "@jridgewell/sourcemap-codec": {
+     "pkg": {
+      "name": "@jridgewell/sourcemap-codec",
+      "version": "1.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·@jridgewell§trace-mapping@0.3.31",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "link": "../../../·npm·@jridgewell§resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../·npm·@jridgewell§sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "pkg": {
+      "name": "@jridgewell/trace-mapping",
+      "version": "0.3.31"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·aggregate-error@3.1.0",
+   "node_modules": {
+    "aggregate-error": {
+     "pkg": {
+      "name": "aggregate-error",
+      "version": "3.1.0"
+     }
+    },
+    "clean-stack": {
+     "link": "../../·npm·clean-stack@2.2.0/node_modules/clean-stack"
+    },
+    "indent-string": {
+     "link": "../../·npm·indent-string@4.0.0/node_modules/indent-string"
+    }
+   }
+  },
+  {
+   "id": "·npm·ajv@6.15.0",
+   "node_modules": {
+    "ajv": {
+     "pkg": {
+      "name": "ajv",
+      "version": "6.15.0"
+     }
+    },
+    "fast-deep-equal": {
+     "link": "../../·npm·fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+    },
+    "fast-json-stable-stringify": {
+     "link": "../../·npm·fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+    },
+    "json-schema-traverse": {
+     "link": "../../·npm·json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+    },
+    "uri-js": {
+     "link": "../../·npm·uri-js@4.4.1/node_modules/uri-js"
+    }
+   }
+  },
+  {
+   "id": "·npm·ansi-regex@5.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "pkg": {
+      "name": "ansi-regex",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·ansi-styles@4.3.0",
+   "node_modules": {
+    "ansi-styles": {
+     "pkg": {
+      "name": "ansi-styles",
+      "version": "4.3.0"
+     }
+    },
+    "color-convert": {
+     "link": "../../·npm·color-convert@2.0.1/node_modules/color-convert"
+    }
+   }
+  },
+  {
+   "id": "·npm·anymatch@3.1.3",
+   "node_modules": {
+    "anymatch": {
+     "pkg": {
+      "name": "anymatch",
+      "version": "3.1.3"
+     }
+    },
+    "normalize-path": {
+     "link": "../../·npm·normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "picomatch": {
+     "link": "../../·npm·picomatch@2.3.2/node_modules/picomatch"
+    }
+   }
+  },
+  {
+   "id": "·npm·append-transform@2.0.0",
+   "node_modules": {
+    "append-transform": {
+     "pkg": {
+      "name": "append-transform",
+      "version": "2.0.0"
+     }
+    },
+    "default-require-extensions": {
+     "link": "../../·npm·default-require-extensions@3.0.1/node_modules/default-require-extensions"
+    }
+   }
+  },
+  {
+   "id": "·npm·archy@1.0.0",
+   "node_modules": {
+    "archy": {
+     "pkg": {
+      "name": "archy",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·argparse@1.0.10",
+   "node_modules": {
+    "argparse": {
+     "pkg": {
+      "name": "argparse",
+      "version": "1.0.10"
+     }
+    },
+    "sprintf-js": {
+     "link": "../../·npm·sprintf-js@1.0.3/node_modules/sprintf-js"
+    }
+   }
+  },
+  {
+   "id": "·npm·asn1@0.2.6",
+   "node_modules": {
+    "asn1": {
+     "pkg": {
+      "name": "asn1",
+      "version": "0.2.6"
+     }
+    },
+    "safer-buffer": {
+     "link": "../../·npm·safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "·npm·assert-plus@1.0.0",
+   "node_modules": {
+    "assert-plus": {
+     "pkg": {
+      "name": "assert-plus",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·async-hook-domain@2.0.4",
+   "node_modules": {
+    "async-hook-domain": {
+     "pkg": {
+      "name": "async-hook-domain",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·asynckit@0.4.0",
+   "node_modules": {
+    "asynckit": {
+     "pkg": {
+      "name": "asynckit",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·aws-sign2@0.7.0",
+   "node_modules": {
+    "aws-sign2": {
+     "pkg": {
+      "name": "aws-sign2",
+      "version": "0.7.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·aws4@1.13.2",
+   "node_modules": {
+    "aws4": {
+     "pkg": {
+      "name": "aws4",
+      "version": "1.13.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·balanced-match@1.0.2",
+   "node_modules": {
+    "balanced-match": {
+     "pkg": {
+      "name": "balanced-match",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·baseline-browser-mapping@2.11.26",
+   "node_modules": {
+    "baseline-browser-mapping": {
+     "pkg": {
+      "name": "baseline-browser-mapping",
+      "version": "2.11.26"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·bcrypt-pbkdf@1.0.2",
+   "node_modules": {
+    "bcrypt-pbkdf": {
+     "pkg": {
+      "name": "bcrypt-pbkdf",
+      "version": "1.0.2"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../·npm·tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "·npm·binary-extensions@2.3.0",
+   "node_modules": {
+    "binary-extensions": {
+     "pkg": {
+      "name": "binary-extensions",
+      "version": "2.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·bind-obj-methods@3.0.0",
+   "node_modules": {
+    "bind-obj-methods": {
+     "pkg": {
+      "name": "bind-obj-methods",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·brace-expansion@1.1.21",
+   "node_modules": {
+    "balanced-match": {
+     "link": "../../·npm·balanced-match@1.0.2/node_modules/balanced-match"
+    },
+    "brace-expansion": {
+     "pkg": {
+      "name": "brace-expansion",
+      "version": "1.1.21"
+     }
+    },
+    "concat-map": {
+     "link": "../../·npm·concat-map@0.0.1/node_modules/concat-map"
+    }
+   }
+  },
+  {
+   "id": "·npm·braces@3.0.3",
+   "node_modules": {
+    "braces": {
+     "pkg": {
+      "name": "braces",
+      "version": "3.0.3"
+     }
+    },
+    "fill-range": {
+     "link": "../../·npm·fill-range@7.1.1/node_modules/fill-range"
+    }
+   }
+  },
+  {
+   "id": "·npm·browserslist@4.29.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "baseline-browser-mapping": {
+     "link": "../../·npm·baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+    },
+    "browserslist": {
+     "pkg": {
+      "name": "browserslist",
+      "version": "4.29.1"
+     }
+    },
+    "caniuse-lite": {
+     "link": "../../·npm·caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+    },
+    "electron-to-chromium": {
+     "link": "../../·npm·electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+    },
+    "node-releases": {
+     "link": "../../·npm·node-releases@2.0.57/node_modules/node-releases"
+    },
+    "update-browserslist-db": {
+     "link": "../../·npm·update-browserslist-db@1.3.3·%E1%B9%97%3A6/node_modules/update-browserslist-db"
+    }
+   }
+  },
+  {
+   "id": "·npm·buffer-from@1.1.2",
+   "node_modules": {
+    "buffer-from": {
+     "pkg": {
+      "name": "buffer-from",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·caching-transform@4.0.0",
+   "node_modules": {
+    "caching-transform": {
+     "pkg": {
+      "name": "caching-transform",
+      "version": "4.0.0"
+     }
+    },
+    "hasha": {
+     "link": "../../·npm·hasha@5.2.2/node_modules/hasha"
+    },
+    "make-dir": {
+     "link": "../../·npm·make-dir@3.1.0/node_modules/make-dir"
+    },
+    "package-hash": {
+     "link": "../../·npm·package-hash@4.0.0/node_modules/package-hash"
+    },
+    "write-file-atomic": {
+     "link": "../../·npm·write-file-atomic@3.0.3/node_modules/write-file-atomic"
+    }
+   }
+  },
+  {
+   "id": "·npm·camelcase@5.3.1",
+   "node_modules": {
+    "camelcase": {
+     "pkg": {
+      "name": "camelcase",
+      "version": "5.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·caniuse-lite@1.0.30001812",
+   "node_modules": {
+    "caniuse-lite": {
+     "pkg": {
+      "name": "caniuse-lite",
+      "version": "1.0.30001812"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·caseless@0.12.0",
+   "node_modules": {
+    "caseless": {
+     "pkg": {
+      "name": "caseless",
+      "version": "0.12.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·chokidar@3.6.0",
+   "node_modules": {
+    "anymatch": {
+     "link": "../../·npm·anymatch@3.1.3/node_modules/anymatch"
+    },
+    "braces": {
+     "link": "../../·npm·braces@3.0.3/node_modules/braces"
+    },
+    "chokidar": {
+     "pkg": {
+      "name": "chokidar",
+      "version": "3.6.0"
+     }
+    },
+    "fsevents": {
+     "link": "../../·npm·fsevents@2.3.3/node_modules/fsevents"
+    },
+    "glob-parent": {
+     "link": "../../·npm·glob-parent@5.1.2/node_modules/glob-parent"
+    },
+    "is-binary-path": {
+     "link": "../../·npm·is-binary-path@2.1.0/node_modules/is-binary-path"
+    },
+    "is-glob": {
+     "link": "../../·npm·is-glob@4.0.3/node_modules/is-glob"
+    },
+    "normalize-path": {
+     "link": "../../·npm·normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "readdirp": {
+     "link": "../../·npm·readdirp@3.6.0/node_modules/readdirp"
+    }
+   }
+  },
+  {
+   "id": "·npm·clean-stack@2.2.0",
+   "node_modules": {
+    "clean-stack": {
+     "pkg": {
+      "name": "clean-stack",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·cliui@6.0.0",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "6.0.0"
+     }
+    },
+    "string-width": {
+     "link": "../../·npm·string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../·npm·wrap-ansi@6.2.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "·npm·cliui@7.0.4",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "7.0.4"
+     }
+    },
+    "string-width": {
+     "link": "../../·npm·string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../·npm·wrap-ansi@7.0.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "·npm·color-convert@2.0.1",
+   "node_modules": {
+    "color-convert": {
+     "pkg": {
+      "name": "color-convert",
+      "version": "2.0.1"
+     }
+    },
+    "color-name": {
+     "link": "../../·npm·color-name@1.1.4/node_modules/color-name"
+    }
+   }
+  },
+  {
+   "id": "·npm·color-name@1.1.4",
+   "node_modules": {
+    "color-name": {
+     "pkg": {
+      "name": "color-name",
+      "version": "1.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·color-support@1.1.3",
+   "node_modules": {
+    "color-support": {
+     "pkg": {
+      "name": "color-support",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·combined-stream@1.0.8",
+   "node_modules": {
+    "combined-stream": {
+     "pkg": {
+      "name": "combined-stream",
+      "version": "1.0.8"
+     }
+    },
+    "delayed-stream": {
+     "link": "../../·npm·delayed-stream@1.0.0/node_modules/delayed-stream"
+    }
+   }
+  },
+  {
+   "id": "·npm·commondir@1.0.1",
+   "node_modules": {
+    "commondir": {
+     "pkg": {
+      "name": "commondir",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·concat-map@0.0.1",
+   "node_modules": {
+    "concat-map": {
+     "pkg": {
+      "name": "concat-map",
+      "version": "0.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·convert-source-map@1.9.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "1.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·convert-source-map@2.0.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·core-util-is@1.0.2",
+   "node_modules": {
+    "core-util-is": {
+     "pkg": {
+      "name": "core-util-is",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·coveralls@3.1.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "coveralls": {
+     "pkg": {
+      "name": "coveralls",
+      "version": "3.1.1"
+     }
+    },
+    "js-yaml": {
+     "link": "../../·npm·js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "lcov-parse": {
+     "link": "../../·npm·lcov-parse@1.0.0/node_modules/lcov-parse"
+    },
+    "log-driver": {
+     "link": "../../·npm·log-driver@1.2.7/node_modules/log-driver"
+    },
+    "minimist": {
+     "link": "../../·npm·minimist@1.2.8/node_modules/minimist"
+    },
+    "request": {
+     "link": "../../·npm·request@2.88.2/node_modules/request"
+    }
+   }
+  },
+  {
+   "id": "·npm·cross-spawn@7.0.6",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "cross-spawn": {
+     "pkg": {
+      "name": "cross-spawn",
+      "version": "7.0.6"
+     }
+    },
+    "path-key": {
+     "link": "../../·npm·path-key@3.1.1/node_modules/path-key"
+    },
+    "shebang-command": {
+     "link": "../../·npm·shebang-command@2.0.0/node_modules/shebang-command"
+    },
+    "which": {
+     "link": "../../·npm·which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "·npm·dashdash@1.14.1",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "dashdash": {
+     "pkg": {
+      "name": "dashdash",
+      "version": "1.14.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+   "node_modules": {
+    "debug": {
+     "pkg": {
+      "name": "debug",
+      "version": "4.3.4"
+     }
+    },
+    "ms": {
+     "link": "../../·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/ms"
+    }
+   }
+  },
+  {
+   "id": "·npm·decamelize@1.2.0",
+   "node_modules": {
+    "decamelize": {
+     "pkg": {
+      "name": "decamelize",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·default-require-extensions@3.0.1",
+   "node_modules": {
+    "default-require-extensions": {
+     "pkg": {
+      "name": "default-require-extensions",
+      "version": "3.0.1"
+     }
+    },
+    "strip-bom": {
+     "link": "../../·npm·strip-bom@4.0.0/node_modules/strip-bom"
+    }
+   }
+  },
+  {
+   "id": "·npm·delayed-stream@1.0.0",
+   "node_modules": {
+    "delayed-stream": {
+     "pkg": {
+      "name": "delayed-stream",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·diff@4.0.4",
+   "node_modules": {
+    "diff": {
+     "pkg": {
+      "name": "diff",
+      "version": "4.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·ecc-jsbn@0.1.2",
+   "node_modules": {
+    "ecc-jsbn": {
+     "pkg": {
+      "name": "ecc-jsbn",
+      "version": "0.1.2"
+     }
+    },
+    "jsbn": {
+     "link": "../../·npm·jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../·npm·safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "·npm·electron-to-chromium@1.5.439",
+   "node_modules": {
+    "electron-to-chromium": {
+     "pkg": {
+      "name": "electron-to-chromium",
+      "version": "1.5.439"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·emoji-regex@8.0.0",
+   "node_modules": {
+    "emoji-regex": {
+     "pkg": {
+      "name": "emoji-regex",
+      "version": "8.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·es6-error@4.1.1",
+   "node_modules": {
+    "es6-error": {
+     "pkg": {
+      "name": "es6-error",
+      "version": "4.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·escalade@3.2.0",
+   "node_modules": {
+    "escalade": {
+     "pkg": {
+      "name": "escalade",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·escape-string-regexp@2.0.0",
+   "node_modules": {
+    "escape-string-regexp": {
+     "pkg": {
+      "name": "escape-string-regexp",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·esprima@4.0.1",
+   "node_modules": {
+    "esprima": {
+     "pkg": {
+      "name": "esprima",
+      "version": "4.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·events-to-array@1.1.2",
+   "node_modules": {
+    "events-to-array": {
+     "pkg": {
+      "name": "events-to-array",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·extend@3.0.2",
+   "node_modules": {
+    "extend": {
+     "pkg": {
+      "name": "extend",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·extsprintf@1.3.0",
+   "node_modules": {
+    "extsprintf": {
+     "pkg": {
+      "name": "extsprintf",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fast-deep-equal@3.1.3",
+   "node_modules": {
+    "fast-deep-equal": {
+     "pkg": {
+      "name": "fast-deep-equal",
+      "version": "3.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fast-json-stable-stringify@2.1.0",
+   "node_modules": {
+    "fast-json-stable-stringify": {
+     "pkg": {
+      "name": "fast-json-stable-stringify",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fill-range@7.1.1",
+   "node_modules": {
+    "fill-range": {
+     "pkg": {
+      "name": "fill-range",
+      "version": "7.1.1"
+     }
+    },
+    "to-regex-range": {
+     "link": "../../·npm·to-regex-range@5.0.1/node_modules/to-regex-range"
+    }
+   }
+  },
+  {
+   "id": "·npm·find-cache-dir@3.3.2",
+   "node_modules": {
+    "commondir": {
+     "link": "../../·npm·commondir@1.0.1/node_modules/commondir"
+    },
+    "find-cache-dir": {
+     "pkg": {
+      "name": "find-cache-dir",
+      "version": "3.3.2"
+     }
+    },
+    "make-dir": {
+     "link": "../../·npm·make-dir@3.1.0/node_modules/make-dir"
+    },
+    "pkg-dir": {
+     "link": "../../·npm·pkg-dir@4.2.0/node_modules/pkg-dir"
+    }
+   }
+  },
+  {
+   "id": "·npm·find-up@4.1.0",
+   "node_modules": {
+    "find-up": {
+     "pkg": {
+      "name": "find-up",
+      "version": "4.1.0"
+     }
+    },
+    "locate-path": {
+     "link": "../../·npm·locate-path@5.0.0/node_modules/locate-path"
+    },
+    "path-exists": {
+     "link": "../../·npm·path-exists@4.0.0/node_modules/path-exists"
+    }
+   }
+  },
+  {
+   "id": "·npm·findit@2.0.0",
+   "node_modules": {
+    "findit": {
+     "pkg": {
+      "name": "findit",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·foreground-child@2.0.0",
+   "node_modules": {
+    "cross-spawn": {
+     "link": "../../·npm·cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "foreground-child": {
+     "pkg": {
+      "name": "foreground-child",
+      "version": "2.0.0"
+     }
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    }
+   }
+  },
+  {
+   "id": "·npm·forever-agent@0.6.1",
+   "node_modules": {
+    "forever-agent": {
+     "pkg": {
+      "name": "forever-agent",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·form-data@2.3.3",
+   "node_modules": {
+    "asynckit": {
+     "link": "../../·npm·asynckit@0.4.0/node_modules/asynckit"
+    },
+    "combined-stream": {
+     "link": "../../·npm·combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "form-data": {
+     "pkg": {
+      "name": "form-data",
+      "version": "2.3.3"
+     }
+    },
+    "mime-types": {
+     "link": "../../·npm·mime-types@2.1.35/node_modules/mime-types"
+    }
+   }
+  },
+  {
+   "id": "·npm·fromentries@1.3.2",
+   "node_modules": {
+    "fromentries": {
+     "pkg": {
+      "name": "fromentries",
+      "version": "1.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fs-exists-cached@1.0.0",
+   "node_modules": {
+    "fs-exists-cached": {
+     "pkg": {
+      "name": "fs-exists-cached",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fs.realpath@1.0.0",
+   "node_modules": {
+    "fs.realpath": {
+     "pkg": {
+      "name": "fs.realpath",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·fsevents@2.3.3",
+   "node_modules": {
+    "fsevents": {
+     "pkg": {
+      "name": "fsevents",
+      "version": "2.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·function-loop@2.0.1",
+   "node_modules": {
+    "function-loop": {
+     "pkg": {
+      "name": "function-loop",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·gensync@1.0.0-beta.2",
+   "node_modules": {
+    "gensync": {
+     "pkg": {
+      "name": "gensync",
+      "version": "1.0.0-beta.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·get-caller-file@2.0.5",
+   "node_modules": {
+    "get-caller-file": {
+     "pkg": {
+      "name": "get-caller-file",
+      "version": "2.0.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·get-package-type@0.1.0",
+   "node_modules": {
+    "get-package-type": {
+     "pkg": {
+      "name": "get-package-type",
+      "version": "0.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·getpass@0.1.7",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "getpass": {
+     "pkg": {
+      "name": "getpass",
+      "version": "0.1.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·glob-parent@5.1.2",
+   "node_modules": {
+    "glob-parent": {
+     "pkg": {
+      "name": "glob-parent",
+      "version": "5.1.2"
+     }
+    },
+    "is-glob": {
+     "link": "../../·npm·is-glob@4.0.3/node_modules/is-glob"
+    }
+   }
+  },
+  {
+   "id": "·npm·glob@7.2.3",
+   "node_modules": {
+    "fs.realpath": {
+     "link": "../../·npm·fs.realpath@1.0.0/node_modules/fs.realpath"
+    },
+    "glob": {
+     "pkg": {
+      "name": "glob",
+      "version": "7.2.3"
+     }
+    },
+    "inflight": {
+     "link": "../../·npm·inflight@1.0.6/node_modules/inflight"
+    },
+    "inherits": {
+     "link": "../../·npm·inherits@2.0.4/node_modules/inherits"
+    },
+    "minimatch": {
+     "link": "../../·npm·minimatch@3.1.5/node_modules/minimatch"
+    },
+    "once": {
+     "link": "../../·npm·once@1.4.0/node_modules/once"
+    },
+    "path-is-absolute": {
+     "link": "../../·npm·path-is-absolute@1.0.1/node_modules/path-is-absolute"
+    }
+   }
+  },
+  {
+   "id": "·npm·graceful-fs@4.2.11",
+   "node_modules": {
+    "graceful-fs": {
+     "pkg": {
+      "name": "graceful-fs",
+      "version": "4.2.11"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·har-schema@2.0.0",
+   "node_modules": {
+    "har-schema": {
+     "pkg": {
+      "name": "har-schema",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·har-validator@5.1.5",
+   "node_modules": {
+    "ajv": {
+     "link": "../../·npm·ajv@6.15.0/node_modules/ajv"
+    },
+    "har-schema": {
+     "link": "../../·npm·har-schema@2.0.0/node_modules/har-schema"
+    },
+    "har-validator": {
+     "pkg": {
+      "name": "har-validator",
+      "version": "5.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·has-flag@4.0.0",
+   "node_modules": {
+    "has-flag": {
+     "pkg": {
+      "name": "has-flag",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·hasha@5.2.2",
+   "node_modules": {
+    "hasha": {
+     "pkg": {
+      "name": "hasha",
+      "version": "5.2.2"
+     }
+    },
+    "is-stream": {
+     "link": "../../·npm·is-stream@2.0.1/node_modules/is-stream"
+    },
+    "type-fest": {
+     "link": "../../·npm·type-fest@0.8.1/node_modules/type-fest"
+    }
+   }
+  },
+  {
+   "id": "·npm·html-escaper@2.0.2",
+   "node_modules": {
+    "html-escaper": {
+     "pkg": {
+      "name": "html-escaper",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·http-signature@1.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "http-signature": {
+     "pkg": {
+      "name": "http-signature",
+      "version": "1.2.0"
+     }
+    },
+    "jsprim": {
+     "link": "../../·npm·jsprim@1.4.2/node_modules/jsprim"
+    },
+    "sshpk": {
+     "link": "../../·npm·sshpk@1.18.0/node_modules/sshpk"
+    }
+   }
+  },
+  {
+   "id": "·npm·imurmurhash@0.1.4",
+   "node_modules": {
+    "imurmurhash": {
+     "pkg": {
+      "name": "imurmurhash",
+      "version": "0.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·indent-string@4.0.0",
+   "node_modules": {
+    "indent-string": {
+     "pkg": {
+      "name": "indent-string",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·inflight@1.0.6",
+   "node_modules": {
+    "inflight": {
+     "pkg": {
+      "name": "inflight",
+      "version": "1.0.6"
+     }
+    },
+    "once": {
+     "link": "../../·npm·once@1.4.0/node_modules/once"
+    },
+    "wrappy": {
+     "link": "../../·npm·wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "·npm·inherits@2.0.4",
+   "node_modules": {
+    "inherits": {
+     "pkg": {
+      "name": "inherits",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-binary-path@2.1.0",
+   "node_modules": {
+    "binary-extensions": {
+     "link": "../../·npm·binary-extensions@2.3.0/node_modules/binary-extensions"
+    },
+    "is-binary-path": {
+     "pkg": {
+      "name": "is-binary-path",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-extglob@2.1.1",
+   "node_modules": {
+    "is-extglob": {
+     "pkg": {
+      "name": "is-extglob",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-fullwidth-code-point@3.0.0",
+   "node_modules": {
+    "is-fullwidth-code-point": {
+     "pkg": {
+      "name": "is-fullwidth-code-point",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-glob@4.0.3",
+   "node_modules": {
+    "is-extglob": {
+     "link": "../../·npm·is-extglob@2.1.1/node_modules/is-extglob"
+    },
+    "is-glob": {
+     "pkg": {
+      "name": "is-glob",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-number@7.0.0",
+   "node_modules": {
+    "is-number": {
+     "pkg": {
+      "name": "is-number",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-stream@2.0.1",
+   "node_modules": {
+    "is-stream": {
+     "pkg": {
+      "name": "is-stream",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-typedarray@1.0.0",
+   "node_modules": {
+    "is-typedarray": {
+     "pkg": {
+      "name": "is-typedarray",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·is-windows@1.0.2",
+   "node_modules": {
+    "is-windows": {
+     "pkg": {
+      "name": "is-windows",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·isexe@2.0.0",
+   "node_modules": {
+    "isexe": {
+     "pkg": {
+      "name": "isexe",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·isstream@0.1.2",
+   "node_modules": {
+    "isstream": {
+     "pkg": {
+      "name": "isstream",
+      "version": "0.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-coverage@3.2.2",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "pkg": {
+      "name": "istanbul-lib-coverage",
+      "version": "3.2.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-hook@3.0.0",
+   "node_modules": {
+    "append-transform": {
+     "link": "../../·npm·append-transform@2.0.0/node_modules/append-transform"
+    },
+    "istanbul-lib-hook": {
+     "pkg": {
+      "name": "istanbul-lib-hook",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-instrument@4.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/core": {
+     "link": "../../../·npm·@babel§core@7.29.7/node_modules/@babel/core"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../·npm·@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-instrument": {
+     "pkg": {
+      "name": "istanbul-lib-instrument",
+      "version": "4.0.3"
+     }
+    },
+    "semver": {
+     "link": "../../·npm·semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-processinfo@2.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "archy": {
+     "link": "../../·npm·archy@1.0.0/node_modules/archy"
+    },
+    "cross-spawn": {
+     "link": "../../·npm·cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-processinfo": {
+     "pkg": {
+      "name": "istanbul-lib-processinfo",
+      "version": "2.0.3"
+     }
+    },
+    "p-map": {
+     "link": "../../·npm·p-map@3.0.0/node_modules/p-map"
+    },
+    "rimraf": {
+     "link": "../../·npm·rimraf@3.0.2/node_modules/rimraf"
+    },
+    "uuid": {
+     "link": "../../·npm·uuid@8.3.2/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-report@3.0.1",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "link": "../../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-report": {
+     "pkg": {
+      "name": "istanbul-lib-report",
+      "version": "3.0.1"
+     }
+    },
+    "make-dir": {
+     "link": "../../·npm·make-dir@4.0.0/node_modules/make-dir"
+    },
+    "supports-color": {
+     "link": "../../·npm·supports-color@7.2.0/node_modules/supports-color"
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-lib-source-maps@4.0.1",
+   "node_modules": {
+    "debug": {
+     "link": "../../·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-source-maps": {
+     "pkg": {
+      "name": "istanbul-lib-source-maps",
+      "version": "4.0.1"
+     }
+    },
+    "source-map": {
+     "link": "../../·npm·source-map@0.6.1/node_modules/source-map"
+    }
+   }
+  },
+  {
+   "id": "·npm·istanbul-reports@3.2.0",
+   "node_modules": {
+    "html-escaper": {
+     "link": "../../·npm·html-escaper@2.0.2/node_modules/html-escaper"
+    },
+    "istanbul-lib-report": {
+     "link": "../../·npm·istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-reports": {
+     "pkg": {
+      "name": "istanbul-reports",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·jackspeak@1.4.2",
+   "node_modules": {
+    "cliui": {
+     "link": "../../·npm·cliui@7.0.4/node_modules/cliui"
+    },
+    "jackspeak": {
+     "pkg": {
+      "name": "jackspeak",
+      "version": "1.4.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·js-tokens@4.0.0",
+   "node_modules": {
+    "js-tokens": {
+     "pkg": {
+      "name": "js-tokens",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·js-yaml@3.15.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "argparse": {
+     "link": "../../·npm·argparse@1.0.10/node_modules/argparse"
+    },
+    "esprima": {
+     "link": "../../·npm·esprima@4.0.1/node_modules/esprima"
+    },
+    "js-yaml": {
+     "pkg": {
+      "name": "js-yaml",
+      "version": "3.15.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·jsbn@0.1.1",
+   "node_modules": {
+    "jsbn": {
+     "pkg": {
+      "name": "jsbn",
+      "version": "0.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·jsesc@3.1.0",
+   "node_modules": {
+    "jsesc": {
+     "pkg": {
+      "name": "jsesc",
+      "version": "3.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·json-schema-traverse@0.4.1",
+   "node_modules": {
+    "json-schema-traverse": {
+     "pkg": {
+      "name": "json-schema-traverse",
+      "version": "0.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·json-schema@0.4.0",
+   "node_modules": {
+    "json-schema": {
+     "pkg": {
+      "name": "json-schema",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·json-stringify-safe@5.0.1",
+   "node_modules": {
+    "json-stringify-safe": {
+     "pkg": {
+      "name": "json-stringify-safe",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·json5@2.2.3",
+   "node_modules": {
+    "json5": {
+     "pkg": {
+      "name": "json5",
+      "version": "2.2.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·jsprim@1.4.2",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "extsprintf": {
+     "link": "../../·npm·extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "json-schema": {
+     "link": "../../·npm·json-schema@0.4.0/node_modules/json-schema"
+    },
+    "jsprim": {
+     "pkg": {
+      "name": "jsprim",
+      "version": "1.4.2"
+     }
+    },
+    "verror": {
+     "link": "../../·npm·verror@1.10.0/node_modules/verror"
+    }
+   }
+  },
+  {
+   "id": "·npm·lcov-parse@1.0.0",
+   "node_modules": {
+    "lcov-parse": {
+     "pkg": {
+      "name": "lcov-parse",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·left-pad@1.1.3",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·left-pad@1.3.0",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·libtap@1.4.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "async-hook-domain": {
+     "link": "../../·npm·async-hook-domain@2.0.4/node_modules/async-hook-domain"
+    },
+    "bind-obj-methods": {
+     "link": "../../·npm·bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+    },
+    "diff": {
+     "link": "../../·npm·diff@4.0.4/node_modules/diff"
+    },
+    "function-loop": {
+     "link": "../../·npm·function-loop@2.0.1/node_modules/function-loop"
+    },
+    "libtap": {
+     "pkg": {
+      "name": "libtap",
+      "version": "1.4.1"
+     }
+    },
+    "minipass": {
+     "link": "../../·npm·minipass@3.3.6/node_modules/minipass"
+    },
+    "own-or": {
+     "link": "../../·npm·own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "link": "../../·npm·own-or-env@1.0.2/node_modules/own-or-env"
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "stack-utils": {
+     "link": "../../·npm·stack-utils@2.0.6/node_modules/stack-utils"
+    },
+    "tap-parser": {
+     "link": "../../·npm·tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../·npm·tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../·npm·tcompare@5.0.7/node_modules/tcompare"
+    },
+    "trivial-deferred": {
+     "link": "../../·npm·trivial-deferred@1.1.2/node_modules/trivial-deferred"
+    }
+   }
+  },
+  {
+   "id": "·npm·locate-path@5.0.0",
+   "node_modules": {
+    "locate-path": {
+     "pkg": {
+      "name": "locate-path",
+      "version": "5.0.0"
+     }
+    },
+    "p-locate": {
+     "link": "../../·npm·p-locate@4.1.0/node_modules/p-locate"
+    }
+   }
+  },
+  {
+   "id": "·npm·lodash.flattendeep@4.4.0",
+   "node_modules": {
+    "lodash.flattendeep": {
+     "pkg": {
+      "name": "lodash.flattendeep",
+      "version": "4.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·log-driver@1.2.7",
+   "node_modules": {
+    "log-driver": {
+     "pkg": {
+      "name": "log-driver",
+      "version": "1.2.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·loose-envify@1.4.0",
+   "node_modules": {
+    "js-tokens": {
+     "link": "../../·npm·js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "loose-envify": {
+     "pkg": {
+      "name": "loose-envify",
+      "version": "1.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·lru-cache@5.1.1",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "5.1.1"
+     }
+    },
+    "yallist": {
+     "link": "../../·npm·yallist@3.1.1/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "·npm·lru-cache@6.0.0",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "6.0.0"
+     }
+    },
+    "yallist": {
+     "link": "../../·npm·yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "·npm·make-dir@3.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "3.1.0"
+     }
+    },
+    "semver": {
+     "link": "../../·npm·semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "·npm·make-dir@4.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "4.0.0"
+     }
+    },
+    "semver": {
+     "link": "../../·npm·semver@7.6.0/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "·npm·mime-db@1.52.0",
+   "node_modules": {
+    "mime-db": {
+     "pkg": {
+      "name": "mime-db",
+      "version": "1.52.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·mime-types@2.1.35",
+   "node_modules": {
+    "mime-db": {
+     "link": "../../·npm·mime-db@1.52.0/node_modules/mime-db"
+    },
+    "mime-types": {
+     "pkg": {
+      "name": "mime-types",
+      "version": "2.1.35"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·minimatch@3.1.5",
+   "node_modules": {
+    "brace-expansion": {
+     "link": "../../·npm·brace-expansion@1.1.21/node_modules/brace-expansion"
+    },
+    "minimatch": {
+     "pkg": {
+      "name": "minimatch",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·minimist@1.2.8",
+   "node_modules": {
+    "minimist": {
+     "pkg": {
+      "name": "minimist",
+      "version": "1.2.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·minipass@3.3.6",
+   "node_modules": {
+    "minipass": {
+     "pkg": {
+      "name": "minipass",
+      "version": "3.3.6"
+     }
+    },
+    "yallist": {
+     "link": "../../·npm·yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "·npm·mkdirp@1.0.4",
+   "node_modules": {
+    "mkdirp": {
+     "pkg": {
+      "name": "mkdirp",
+      "version": "1.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·node-preload@0.2.1",
+   "node_modules": {
+    "node-preload": {
+     "pkg": {
+      "name": "node-preload",
+      "version": "0.2.1"
+     }
+    },
+    "process-on-spawn": {
+     "link": "../../·npm·process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    }
+   }
+  },
+  {
+   "id": "·npm·node-releases@2.0.57",
+   "node_modules": {
+    "node-releases": {
+     "pkg": {
+      "name": "node-releases",
+      "version": "2.0.57"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·normalize-path@3.0.0",
+   "node_modules": {
+    "normalize-path": {
+     "pkg": {
+      "name": "normalize-path",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·nyc@15.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "link": "../../../·npm·@istanbuljs§load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../·npm·@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "caching-transform": {
+     "link": "../../·npm·caching-transform@4.0.0/node_modules/caching-transform"
+    },
+    "convert-source-map": {
+     "link": "../../·npm·convert-source-map@1.9.0/node_modules/convert-source-map"
+    },
+    "decamelize": {
+     "link": "../../·npm·decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-cache-dir": {
+     "link": "../../·npm·find-cache-dir@3.3.2/node_modules/find-cache-dir"
+    },
+    "find-up": {
+     "link": "../../·npm·find-up@4.1.0/node_modules/find-up"
+    },
+    "foreground-child": {
+     "link": "../../·npm·foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "get-package-type": {
+     "link": "../../·npm·get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "glob": {
+     "link": "../../·npm·glob@7.2.3/node_modules/glob"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../·npm·istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-hook": {
+     "link": "../../·npm·istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+    },
+    "istanbul-lib-instrument": {
+     "link": "../../·npm·istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../·npm·istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "istanbul-lib-report": {
+     "link": "../../·npm·istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-lib-source-maps": {
+     "link": "../../·npm·istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+    },
+    "istanbul-reports": {
+     "link": "../../·npm·istanbul-reports@3.2.0/node_modules/istanbul-reports"
+    },
+    "make-dir": {
+     "link": "../../·npm·make-dir@3.1.0/node_modules/make-dir"
+    },
+    "node-preload": {
+     "link": "../../·npm·node-preload@0.2.1/node_modules/node-preload"
+    },
+    "nyc": {
+     "pkg": {
+      "name": "nyc",
+      "version": "15.1.0"
+     }
+    },
+    "p-map": {
+     "link": "../../·npm·p-map@3.0.0/node_modules/p-map"
+    },
+    "process-on-spawn": {
+     "link": "../../·npm·process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    },
+    "resolve-from": {
+     "link": "../../·npm·resolve-from@5.0.0/node_modules/resolve-from"
+    },
+    "rimraf": {
+     "link": "../../·npm·rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "link": "../../·npm·spawn-wrap@2.0.0/node_modules/spawn-wrap"
+    },
+    "test-exclude": {
+     "link": "../../·npm·test-exclude@6.0.0/node_modules/test-exclude"
+    },
+    "yargs": {
+     "link": "../../·npm·yargs@15.4.1/node_modules/yargs"
+    }
+   }
+  },
+  {
+   "id": "·npm·oauth-sign@0.9.0",
+   "node_modules": {
+    "oauth-sign": {
+     "pkg": {
+      "name": "oauth-sign",
+      "version": "0.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·once@1.4.0",
+   "node_modules": {
+    "once": {
+     "pkg": {
+      "name": "once",
+      "version": "1.4.0"
+     }
+    },
+    "wrappy": {
+     "link": "../../·npm·wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "·npm·opener@1.5.2",
+   "node_modules": {
+    "opener": {
+     "pkg": {
+      "name": "opener",
+      "version": "1.5.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·own-or-env@1.0.2",
+   "node_modules": {
+    "own-or": {
+     "link": "../../·npm·own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "pkg": {
+      "name": "own-or-env",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·own-or@1.0.0",
+   "node_modules": {
+    "own-or": {
+     "pkg": {
+      "name": "own-or",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·p-limit@2.3.0",
+   "node_modules": {
+    "p-limit": {
+     "pkg": {
+      "name": "p-limit",
+      "version": "2.3.0"
+     }
+    },
+    "p-try": {
+     "link": "../../·npm·p-try@2.2.0/node_modules/p-try"
+    }
+   }
+  },
+  {
+   "id": "·npm·p-locate@4.1.0",
+   "node_modules": {
+    "p-limit": {
+     "link": "../../·npm·p-limit@2.3.0/node_modules/p-limit"
+    },
+    "p-locate": {
+     "pkg": {
+      "name": "p-locate",
+      "version": "4.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·p-map@3.0.0",
+   "node_modules": {
+    "aggregate-error": {
+     "link": "../../·npm·aggregate-error@3.1.0/node_modules/aggregate-error"
+    },
+    "p-map": {
+     "pkg": {
+      "name": "p-map",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·p-try@2.2.0",
+   "node_modules": {
+    "p-try": {
+     "pkg": {
+      "name": "p-try",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·package-hash@4.0.0",
+   "node_modules": {
+    "graceful-fs": {
+     "link": "../../·npm·graceful-fs@4.2.11/node_modules/graceful-fs"
+    },
+    "hasha": {
+     "link": "../../·npm·hasha@5.2.2/node_modules/hasha"
+    },
+    "lodash.flattendeep": {
+     "link": "../../·npm·lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+    },
+    "package-hash": {
+     "pkg": {
+      "name": "package-hash",
+      "version": "4.0.0"
+     }
+    },
+    "release-zalgo": {
+     "link": "../../·npm·release-zalgo@1.0.0/node_modules/release-zalgo"
+    }
+   }
+  },
+  {
+   "id": "·npm·path-exists@4.0.0",
+   "node_modules": {
+    "path-exists": {
+     "pkg": {
+      "name": "path-exists",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·path-is-absolute@1.0.1",
+   "node_modules": {
+    "path-is-absolute": {
+     "pkg": {
+      "name": "path-is-absolute",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·path-key@3.1.1",
+   "node_modules": {
+    "path-key": {
+     "pkg": {
+      "name": "path-key",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·performance-now@2.1.0",
+   "node_modules": {
+    "performance-now": {
+     "pkg": {
+      "name": "performance-now",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·picocolors@1.1.1",
+   "node_modules": {
+    "picocolors": {
+     "pkg": {
+      "name": "picocolors",
+      "version": "1.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·picomatch@2.3.2",
+   "node_modules": {
+    "picomatch": {
+     "pkg": {
+      "name": "picomatch",
+      "version": "2.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·pkg-dir@4.2.0",
+   "node_modules": {
+    "find-up": {
+     "link": "../../·npm·find-up@4.1.0/node_modules/find-up"
+    },
+    "pkg-dir": {
+     "pkg": {
+      "name": "pkg-dir",
+      "version": "4.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·process-on-spawn@1.1.0",
+   "node_modules": {
+    "fromentries": {
+     "link": "../../·npm·fromentries@1.3.2/node_modules/fromentries"
+    },
+    "process-on-spawn": {
+     "pkg": {
+      "name": "process-on-spawn",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·psl@1.15.0",
+   "node_modules": {
+    "psl": {
+     "pkg": {
+      "name": "psl",
+      "version": "1.15.0"
+     }
+    },
+    "punycode": {
+     "link": "../../·npm·punycode@2.3.1/node_modules/punycode"
+    }
+   }
+  },
+  {
+   "id": "·npm·punycode@2.3.1",
+   "node_modules": {
+    "punycode": {
+     "pkg": {
+      "name": "punycode",
+      "version": "2.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·qs@6.5.5",
+   "node_modules": {
+    "qs": {
+     "pkg": {
+      "name": "qs",
+      "version": "6.5.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·react@18.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../·npm·loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "18.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·readdirp@3.6.0",
+   "node_modules": {
+    "picomatch": {
+     "link": "../../·npm·picomatch@2.3.2/node_modules/picomatch"
+    },
+    "readdirp": {
+     "pkg": {
+      "name": "readdirp",
+      "version": "3.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·release-zalgo@1.0.0",
+   "node_modules": {
+    "es6-error": {
+     "link": "../../·npm·es6-error@4.1.1/node_modules/es6-error"
+    },
+    "release-zalgo": {
+     "pkg": {
+      "name": "release-zalgo",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·request@2.88.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "aws-sign2": {
+     "link": "../../·npm·aws-sign2@0.7.0/node_modules/aws-sign2"
+    },
+    "aws4": {
+     "link": "../../·npm·aws4@1.13.2/node_modules/aws4"
+    },
+    "caseless": {
+     "link": "../../·npm·caseless@0.12.0/node_modules/caseless"
+    },
+    "combined-stream": {
+     "link": "../../·npm·combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "extend": {
+     "link": "../../·npm·extend@3.0.2/node_modules/extend"
+    },
+    "forever-agent": {
+     "link": "../../·npm·forever-agent@0.6.1/node_modules/forever-agent"
+    },
+    "form-data": {
+     "link": "../../·npm·form-data@2.3.3/node_modules/form-data"
+    },
+    "har-validator": {
+     "link": "../../·npm·har-validator@5.1.5/node_modules/har-validator"
+    },
+    "http-signature": {
+     "link": "../../·npm·http-signature@1.2.0/node_modules/http-signature"
+    },
+    "is-typedarray": {
+     "link": "../../·npm·is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "isstream": {
+     "link": "../../·npm·isstream@0.1.2/node_modules/isstream"
+    },
+    "json-stringify-safe": {
+     "link": "../../·npm·json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+    },
+    "mime-types": {
+     "link": "../../·npm·mime-types@2.1.35/node_modules/mime-types"
+    },
+    "oauth-sign": {
+     "link": "../../·npm·oauth-sign@0.9.0/node_modules/oauth-sign"
+    },
+    "performance-now": {
+     "link": "../../·npm·performance-now@2.1.0/node_modules/performance-now"
+    },
+    "qs": {
+     "link": "../../·npm·qs@6.5.5/node_modules/qs"
+    },
+    "request": {
+     "pkg": {
+      "name": "request",
+      "version": "2.88.2"
+     }
+    },
+    "safe-buffer": {
+     "link": "../../·npm·safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tough-cookie": {
+     "link": "../../·npm·tough-cookie@2.5.0/node_modules/tough-cookie"
+    },
+    "tunnel-agent": {
+     "link": "../../·npm·tunnel-agent@0.6.0/node_modules/tunnel-agent"
+    },
+    "uuid": {
+     "link": "../../·npm·uuid@3.4.0/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "·npm·require-directory@2.1.1",
+   "node_modules": {
+    "require-directory": {
+     "pkg": {
+      "name": "require-directory",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·require-main-filename@2.0.0",
+   "node_modules": {
+    "require-main-filename": {
+     "pkg": {
+      "name": "require-main-filename",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·resolve-from@5.0.0",
+   "node_modules": {
+    "resolve-from": {
+     "pkg": {
+      "name": "resolve-from",
+      "version": "5.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·rimraf@3.0.2",
+   "node_modules": {
+    "glob": {
+     "link": "../../·npm·glob@7.2.3/node_modules/glob"
+    },
+    "rimraf": {
+     "pkg": {
+      "name": "rimraf",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·safe-buffer@5.2.1",
+   "node_modules": {
+    "safe-buffer": {
+     "pkg": {
+      "name": "safe-buffer",
+      "version": "5.2.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·safer-buffer@2.1.2",
+   "node_modules": {
+    "safer-buffer": {
+     "pkg": {
+      "name": "safer-buffer",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·semver@6.3.1",
+   "node_modules": {
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "6.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·semver@7.6.0",
+   "node_modules": {
+    "lru-cache": {
+     "link": "../../·npm·lru-cache@6.0.0/node_modules/lru-cache"
+    },
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "7.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·set-blocking@2.0.0",
+   "node_modules": {
+    "set-blocking": {
+     "pkg": {
+      "name": "set-blocking",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·shebang-command@2.0.0",
+   "node_modules": {
+    "shebang-command": {
+     "pkg": {
+      "name": "shebang-command",
+      "version": "2.0.0"
+     }
+    },
+    "shebang-regex": {
+     "link": "../../·npm·shebang-regex@3.0.0/node_modules/shebang-regex"
+    }
+   }
+  },
+  {
+   "id": "·npm·shebang-regex@3.0.0",
+   "node_modules": {
+    "shebang-regex": {
+     "pkg": {
+      "name": "shebang-regex",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·signal-exit@3.0.7",
+   "node_modules": {
+    "signal-exit": {
+     "pkg": {
+      "name": "signal-exit",
+      "version": "3.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·source-map-support@0.5.21",
+   "node_modules": {
+    "buffer-from": {
+     "link": "../../·npm·buffer-from@1.1.2/node_modules/buffer-from"
+    },
+    "source-map": {
+     "link": "../../·npm·source-map@0.6.1/node_modules/source-map"
+    },
+    "source-map-support": {
+     "pkg": {
+      "name": "source-map-support",
+      "version": "0.5.21"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·source-map@0.6.1",
+   "node_modules": {
+    "source-map": {
+     "pkg": {
+      "name": "source-map",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·spawn-wrap@2.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "foreground-child": {
+     "link": "../../·npm·foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "is-windows": {
+     "link": "../../·npm·is-windows@1.0.2/node_modules/is-windows"
+    },
+    "make-dir": {
+     "link": "../../·npm·make-dir@3.1.0/node_modules/make-dir"
+    },
+    "rimraf": {
+     "link": "../../·npm·rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "pkg": {
+      "name": "spawn-wrap",
+      "version": "2.0.0"
+     }
+    },
+    "which": {
+     "link": "../../·npm·which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "·npm·sprintf-js@1.0.3",
+   "node_modules": {
+    "sprintf-js": {
+     "pkg": {
+      "name": "sprintf-js",
+      "version": "1.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·sshpk@1.18.0",
+   "node_modules": {
+    "asn1": {
+     "link": "../../·npm·asn1@0.2.6/node_modules/asn1"
+    },
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "bcrypt-pbkdf": {
+     "link": "../../·npm·bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+    },
+    "dashdash": {
+     "link": "../../·npm·dashdash@1.14.1/node_modules/dashdash"
+    },
+    "ecc-jsbn": {
+     "link": "../../·npm·ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+    },
+    "getpass": {
+     "link": "../../·npm·getpass@0.1.7/node_modules/getpass"
+    },
+    "jsbn": {
+     "link": "../../·npm·jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../·npm·safer-buffer@2.1.2/node_modules/safer-buffer"
+    },
+    "sshpk": {
+     "pkg": {
+      "name": "sshpk",
+      "version": "1.18.0"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../·npm·tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "·npm·stack-utils@2.0.6",
+   "node_modules": {
+    "escape-string-regexp": {
+     "link": "../../·npm·escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "stack-utils": {
+     "pkg": {
+      "name": "stack-utils",
+      "version": "2.0.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·string-width@4.2.3",
+   "node_modules": {
+    "emoji-regex": {
+     "link": "../../·npm·emoji-regex@8.0.0/node_modules/emoji-regex"
+    },
+    "is-fullwidth-code-point": {
+     "link": "../../·npm·is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+    },
+    "string-width": {
+     "pkg": {
+      "name": "string-width",
+      "version": "4.2.3"
+     }
+    },
+    "strip-ansi": {
+     "link": "../../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+    }
+   }
+  },
+  {
+   "id": "·npm·strip-ansi@6.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "link": "../../·npm·ansi-regex@5.0.1/node_modules/ansi-regex"
+    },
+    "strip-ansi": {
+     "pkg": {
+      "name": "strip-ansi",
+      "version": "6.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·strip-bom@4.0.0",
+   "node_modules": {
+    "strip-bom": {
+     "pkg": {
+      "name": "strip-bom",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·supports-color@7.2.0",
+   "node_modules": {
+    "has-flag": {
+     "link": "../../·npm·has-flag@4.0.0/node_modules/has-flag"
+    },
+    "supports-color": {
+     "pkg": {
+      "name": "supports-color",
+      "version": "7.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·tap-mocha-reporter@5.0.4",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "color-support": {
+     "link": "../../·npm·color-support@1.1.3/node_modules/color-support"
+    },
+    "debug": {
+     "link": "../../·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+    },
+    "diff": {
+     "link": "../../·npm·diff@4.0.4/node_modules/diff"
+    },
+    "escape-string-regexp": {
+     "link": "../../·npm·escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "glob": {
+     "link": "../../·npm·glob@7.2.3/node_modules/glob"
+    },
+    "tap-mocha-reporter": {
+     "pkg": {
+      "name": "tap-mocha-reporter",
+      "version": "5.0.4"
+     }
+    },
+    "tap-parser": {
+     "link": "../../·npm·tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../·npm·tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "unicode-length": {
+     "link": "../../·npm·unicode-length@2.1.0/node_modules/unicode-length"
+    }
+   }
+  },
+  {
+   "id": "·npm·tap-parser@11.0.2",
+   "node_modules": {
+    "events-to-array": {
+     "link": "../../·npm·events-to-array@1.1.2/node_modules/events-to-array"
+    },
+    "minipass": {
+     "link": "../../·npm·minipass@3.3.6/node_modules/minipass"
+    },
+    "tap-parser": {
+     "pkg": {
+      "name": "tap-parser",
+      "version": "11.0.2"
+     }
+    },
+    "tap-yaml": {
+     "link": "../../·npm·tap-yaml@1.0.2/node_modules/tap-yaml"
+    }
+   }
+  },
+  {
+   "id": "·npm·tap-yaml@1.0.2",
+   "node_modules": {
+    "tap-yaml": {
+     "pkg": {
+      "name": "tap-yaml",
+      "version": "1.0.2"
+     }
+    },
+    "yaml": {
+     "link": "../../·npm·yaml@1.10.3/node_modules/yaml"
+    }
+   }
+  },
+  {
+   "id": "·npm·tap@15.2.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "chokidar": {
+     "link": "../../·npm·chokidar@3.6.0/node_modules/chokidar"
+    },
+    "coveralls": {
+     "link": "../../·npm·coveralls@3.1.1/node_modules/coveralls"
+    },
+    "findit": {
+     "link": "../../·npm·findit@2.0.0/node_modules/findit"
+    },
+    "foreground-child": {
+     "link": "../../·npm·foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "fs-exists-cached": {
+     "link": "../../·npm·fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+    },
+    "glob": {
+     "link": "../../·npm·glob@7.2.3/node_modules/glob"
+    },
+    "isexe": {
+     "link": "../../·npm·isexe@2.0.0/node_modules/isexe"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../·npm·istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "jackspeak": {
+     "link": "../../·npm·jackspeak@1.4.2/node_modules/jackspeak"
+    },
+    "libtap": {
+     "link": "../../·npm·libtap@1.4.1/node_modules/libtap"
+    },
+    "minipass": {
+     "link": "../../·npm·minipass@3.3.6/node_modules/minipass"
+    },
+    "mkdirp": {
+     "link": "../../·npm·mkdirp@1.0.4/node_modules/mkdirp"
+    },
+    "nyc": {
+     "link": "../../·npm·nyc@15.1.0/node_modules/nyc"
+    },
+    "opener": {
+     "link": "../../·npm·opener@1.5.2/node_modules/opener"
+    },
+    "rimraf": {
+     "link": "../../·npm·rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "source-map-support": {
+     "link": "../../·npm·source-map-support@0.5.21/node_modules/source-map-support"
+    },
+    "tap": {
+     "pkg": {
+      "name": "tap",
+      "version": "15.2.3"
+     }
+    },
+    "tap-mocha-reporter": {
+     "link": "../../·npm·tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+    },
+    "tap-parser": {
+     "link": "../../·npm·tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../·npm·tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../·npm·tcompare@5.0.7/node_modules/tcompare"
+    },
+    "which": {
+     "link": "../../·npm·which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "·npm·tcompare@5.0.7",
+   "node_modules": {
+    "diff": {
+     "link": "../../·npm·diff@4.0.4/node_modules/diff"
+    },
+    "tcompare": {
+     "pkg": {
+      "name": "tcompare",
+      "version": "5.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·test-exclude@6.0.0",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "link": "../../../·npm·@istanbuljs§schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "glob": {
+     "link": "../../·npm·glob@7.2.3/node_modules/glob"
+    },
+    "minimatch": {
+     "link": "../../·npm·minimatch@3.1.5/node_modules/minimatch"
+    },
+    "test-exclude": {
+     "pkg": {
+      "name": "test-exclude",
+      "version": "6.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·to-regex-range@5.0.1",
+   "node_modules": {
+    "is-number": {
+     "link": "../../·npm·is-number@7.0.0/node_modules/is-number"
+    },
+    "to-regex-range": {
+     "pkg": {
+      "name": "to-regex-range",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·tough-cookie@2.5.0",
+   "node_modules": {
+    "psl": {
+     "link": "../../·npm·psl@1.15.0/node_modules/psl"
+    },
+    "punycode": {
+     "link": "../../·npm·punycode@2.3.1/node_modules/punycode"
+    },
+    "tough-cookie": {
+     "pkg": {
+      "name": "tough-cookie",
+      "version": "2.5.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·trivial-deferred@1.1.2",
+   "node_modules": {
+    "trivial-deferred": {
+     "pkg": {
+      "name": "trivial-deferred",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·tunnel-agent@0.6.0",
+   "node_modules": {
+    "safe-buffer": {
+     "link": "../../·npm·safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tunnel-agent": {
+     "pkg": {
+      "name": "tunnel-agent",
+      "version": "0.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·tweetnacl@0.14.5",
+   "node_modules": {
+    "tweetnacl": {
+     "pkg": {
+      "name": "tweetnacl",
+      "version": "0.14.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·type-fest@0.8.1",
+   "node_modules": {
+    "type-fest": {
+     "pkg": {
+      "name": "type-fest",
+      "version": "0.8.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·typedarray-to-buffer@3.1.5",
+   "node_modules": {
+    "is-typedarray": {
+     "link": "../../·npm·is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "typedarray-to-buffer": {
+     "pkg": {
+      "name": "typedarray-to-buffer",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·unicode-length@2.1.0",
+   "node_modules": {
+    "punycode": {
+     "link": "../../·npm·punycode@2.3.1/node_modules/punycode"
+    },
+    "unicode-length": {
+     "pkg": {
+      "name": "unicode-length",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·update-browserslist-db@1.3.3·%E1%B9%97%3A6",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "browserslist": {
+     "link": "../../·npm·browserslist@4.29.1/node_modules/browserslist"
+    },
+    "escalade": {
+     "link": "../../·npm·escalade@3.2.0/node_modules/escalade"
+    },
+    "picocolors": {
+     "link": "../../·npm·picocolors@1.1.1/node_modules/picocolors"
+    },
+    "update-browserslist-db": {
+     "pkg": {
+      "name": "update-browserslist-db",
+      "version": "1.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·uri-js@4.4.1",
+   "node_modules": {
+    "punycode": {
+     "link": "../../·npm·punycode@2.3.1/node_modules/punycode"
+    },
+    "uri-js": {
+     "pkg": {
+      "name": "uri-js",
+      "version": "4.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·use-sync-external-store@1.2.0",
+   "node_modules": {
+    "react": {
+     "link": "../../·npm·react@18.2.0/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·uuid@3.4.0",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "3.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·uuid@8.3.2",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "8.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·verror@1.10.0",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../·npm·assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "core-util-is": {
+     "link": "../../·npm·core-util-is@1.0.2/node_modules/core-util-is"
+    },
+    "extsprintf": {
+     "link": "../../·npm·extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "verror": {
+     "pkg": {
+      "name": "verror",
+      "version": "1.10.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·which-module@2.0.1",
+   "node_modules": {
+    "which-module": {
+     "pkg": {
+      "name": "which-module",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·which@2.0.2",
+   "node_modules": {
+    "isexe": {
+     "link": "../../·npm·isexe@2.0.0/node_modules/isexe"
+    },
+    "which": {
+     "pkg": {
+      "name": "which",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·wrap-ansi@6.2.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../·npm·ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../·npm·string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "6.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·wrap-ansi@7.0.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../·npm·ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../·npm·string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../·npm·strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·wrappy@1.0.2",
+   "node_modules": {
+    "wrappy": {
+     "pkg": {
+      "name": "wrappy",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·write-file-atomic@3.0.3",
+   "node_modules": {
+    "imurmurhash": {
+     "link": "../../·npm·imurmurhash@0.1.4/node_modules/imurmurhash"
+    },
+    "is-typedarray": {
+     "link": "../../·npm·is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "signal-exit": {
+     "link": "../../·npm·signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "typedarray-to-buffer": {
+     "link": "../../·npm·typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+    },
+    "write-file-atomic": {
+     "pkg": {
+      "name": "write-file-atomic",
+      "version": "3.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·y18n@4.0.3",
+   "node_modules": {
+    "y18n": {
+     "pkg": {
+      "name": "y18n",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·yallist@3.1.1",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·yallist@4.0.0",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·yaml@1.10.3",
+   "node_modules": {
+    "yaml": {
+     "pkg": {
+      "name": "yaml",
+      "version": "1.10.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·yargs-parser@18.1.3",
+   "node_modules": {
+    "camelcase": {
+     "link": "../../·npm·camelcase@5.3.1/node_modules/camelcase"
+    },
+    "decamelize": {
+     "link": "../../·npm·decamelize@1.2.0/node_modules/decamelize"
+    },
+    "yargs-parser": {
+     "pkg": {
+      "name": "yargs-parser",
+      "version": "18.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "·npm·yargs@15.4.1",
+   "node_modules": {
+    "cliui": {
+     "link": "../../·npm·cliui@6.0.0/node_modules/cliui"
+    },
+    "decamelize": {
+     "link": "../../·npm·decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-up": {
+     "link": "../../·npm·find-up@4.1.0/node_modules/find-up"
+    },
+    "get-caller-file": {
+     "link": "../../·npm·get-caller-file@2.0.5/node_modules/get-caller-file"
+    },
+    "require-directory": {
+     "link": "../../·npm·require-directory@2.1.1/node_modules/require-directory"
+    },
+    "require-main-filename": {
+     "link": "../../·npm·require-main-filename@2.0.0/node_modules/require-main-filename"
+    },
+    "set-blocking": {
+     "link": "../../·npm·set-blocking@2.0.0/node_modules/set-blocking"
+    },
+    "string-width": {
+     "link": "../../·npm·string-width@4.2.3/node_modules/string-width"
+    },
+    "which-module": {
+     "link": "../../·npm·which-module@2.0.1/node_modules/which-module"
+    },
+    "y18n": {
+     "link": "../../·npm·y18n@4.0.3/node_modules/y18n"
+    },
+    "yargs": {
+     "pkg": {
+      "name": "yargs",
+      "version": "15.4.1"
+     }
+    },
+    "yargs-parser": {
+     "link": "../../·npm·yargs-parser@18.1.3/node_modules/yargs-parser"
+    }
+   }
+  }
+ ],
+ "importers": {
+  ".bin": {
+   "dir": true
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../.vlt/·npm·@isaacs§string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "debug": {
+   "link": ".vlt/·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms/node_modules/debug"
+  },
+  "left-pad": {
+   "link": ".vlt/·npm·left-pad@1.3.0/node_modules/left-pad"
+  },
+  "localdir": {
+   "link": "../vendor/localdir"
+  },
+  "lp-alias": {
+   "link": ".vlt/·npm·left-pad@1.1.3/node_modules/left-pad"
+  },
+  "lp-remote": {
+   "link": ".vlt/remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz/node_modules/left-pad"
+  },
+  "ms-tgz": {
+   "link": ".vlt/file·vendor§ms-2.1.2.tgz/node_modules/ms"
+  },
+  "react": {
+   "link": ".vlt/·npm·react@18.2.0/node_modules/react"
+  },
+  "semver_x": {
+   "link": ".vlt/·npm·semver@7.6.0/node_modules/semver"
+  },
+  "slc-git": {
+   "link": ".vlt/git·github%3Aisaacs§string-locale-compare·v1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "use-sync-external-store": {
+   "link": ".vlt/·npm·use-sync-external-store@1.2.0/node_modules/use-sync-external-store"
+  }
+ },
+ "members": {},
+ "linkTargets": {
+  "vendor/localdir": {
+   "name": "localdir",
+   "version": "1.3.0"
+  }
+ }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/README.md b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/README.md
new file mode 100644
index 00000000..111eb812
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/README.md
@@ -0,0 +1,14 @@
+# vlt 1.0.0-rc.22 workspace layout
+
+`listing.json` is the on-disk layout real vlt 1.0.0-rc.22 produced for a
+two-member workspace, captured with `scripts/capture-vlt-tree.mjs` after a
+cold `vlt install` (isolated XDG dirs and VLT_CACHE, VLT_TELEMETRY=0,
+LANG=C). rc.15 through 1.0.7 split peer contexts into numbered store
+entries, so `use-sync-external-store@1.2.0` has two real copies,
+`~peer.2` (react 18) and `~peer.3` (react 17). Members hold only links
+into the root store.
+
+- root `package.json`: `{"dependencies": {"debug": "4.3.4", "ms": "2.1.3"}}`
+- `vlt.json`: `{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "workspaces": "packages/*"}`
+- `packages/a` (`@scope/a`): react 18.2.0, use-sync-external-store 1.2.0, `@scope/b: workspace:*`
+- `packages/b` (`@scope/b`): react 17.0.2, use-sync-external-store 1.2.0
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/listing.json b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/listing.json
new file mode 100644
index 00000000..5a58d52a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.0-rc.22-workspace/listing.json
@@ -0,0 +1,204 @@
+{
+ "vlt": "1.0.0-rc.22",
+ "lockfileVersion": 1,
+ "storeFiles": [
+  "vlt.json"
+ ],
+ "hoist": {
+  "debug": {
+   "link": "../~npm~debug@4.3.4/node_modules/debug"
+  },
+  "js-tokens": {
+   "link": "../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+  },
+  "loose-envify": {
+   "link": "../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+  },
+  "ms": {
+   "link": "../~npm~ms@2.1.3/node_modules/ms"
+  },
+  "object-assign": {
+   "link": "../~npm~object-assign@4.1.1/node_modules/object-assign"
+  },
+  "react": {
+   "link": "../~npm~react@18.2.0/node_modules/react"
+  },
+  "use-sync-external-store": {
+   "link": "../~npm~use-sync-external-store@1.2.0~peer.2/node_modules/use-sync-external-store"
+  }
+ },
+ "store": [
+  {
+   "id": "~npm~debug@4.3.4",
+   "node_modules": {
+    "debug": {
+     "pkg": {
+      "name": "debug",
+      "version": "4.3.4"
+     }
+    },
+    "ms": {
+     "link": "../../~npm~ms@2.1.2/node_modules/ms"
+    }
+   }
+  },
+  {
+   "id": "~npm~js-tokens@4.0.0",
+   "node_modules": {
+    "js-tokens": {
+     "pkg": {
+      "name": "js-tokens",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~loose-envify@1.4.0",
+   "node_modules": {
+    "js-tokens": {
+     "link": "../../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "loose-envify": {
+     "pkg": {
+      "name": "loose-envify",
+      "version": "1.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ms@2.1.2",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ms@2.1.3",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~object-assign@4.1.1",
+   "node_modules": {
+    "object-assign": {
+     "pkg": {
+      "name": "object-assign",
+      "version": "4.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~react@17.0.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "object-assign": {
+     "link": "../../~npm~object-assign@4.1.1/node_modules/object-assign"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "17.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~react@18.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "18.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~use-sync-external-store@1.2.0~peer.2",
+   "node_modules": {
+    "react": {
+     "link": "../../~npm~react@18.2.0/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~use-sync-external-store@1.2.0~peer.3",
+   "node_modules": {
+    "react": {
+     "link": "../../~npm~react@17.0.2/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  }
+ ],
+ "importers": {
+  "debug": {
+   "link": ".vlt/~npm~debug@4.3.4/node_modules/debug"
+  },
+  "ms": {
+   "link": ".vlt/~npm~ms@2.1.3/node_modules/ms"
+  }
+ },
+ "members": {
+  "packages/a": {
+   "@scope/b": {
+    "link": "../../../b"
+   },
+   "react": {
+    "link": "../../../node_modules/.vlt/~npm~react@18.2.0/node_modules/react"
+   },
+   "use-sync-external-store": {
+    "link": "../../../node_modules/.vlt/~npm~use-sync-external-store@1.2.0~peer.2/node_modules/use-sync-external-store"
+   }
+  },
+  "packages/b": {
+   "react": {
+    "link": "../../../node_modules/.vlt/~npm~react@17.0.2/node_modules/react"
+   },
+   "use-sync-external-store": {
+    "link": "../../../node_modules/.vlt/~npm~use-sync-external-store@1.2.0~peer.3/node_modules/use-sync-external-store"
+   }
+  }
+ },
+ "linkTargets": {
+  "packages/b": {
+   "name": "@scope/b",
+   "version": "1.0.0"
+  }
+ }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/README.md b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/README.md
new file mode 100644
index 00000000..a5ccc6da
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/README.md
@@ -0,0 +1,21 @@
+# vlt 1.0.10 installed layout
+
+`listing.json` is the on-disk layout real vlt 1.0.10 produced, captured with
+`scripts/capture-vlt-tree.mjs` right after a cold `vlt install` (isolated
+XDG dirs and VLT_CACHE, VLT_TELEMETRY=0, LANG=C, no lockfile). Store entry
+names are byte-exact; the crawler tests in `crawler_npm_e2e.rs` stage the
+listing as real directories, package.json files and relative symlinks.
+
+Project (`package.json` dependencies):
+
+- "left-pad": "1.3.0", "debug": "4.3.4", "@isaacs/string-locale-compare": "1.1.0"
+- "react": "18.2.0", "use-sync-external-store": "1.2.0"
+- "lp-alias": "npm:left-pad@1.1.3", "semver_x": "npm:semver@7.6.0"
+- "slc-git": "git+https://github.com/isaacs/string-locale-compare.git#v1.1.0"
+- "lp-remote": "https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz"
+- "ms-tgz": "file:./vendor/ms-2.1.2.tgz"
+- "localdir": "file:./vendor/localdir" (a left-pad@1.3.0 copy renamed localdir)
+
+`vlt.json`: `{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}`.
+
+The git dependency's devDependencies account for most store entries.
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/listing.json b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/listing.json
new file mode 100644
index 00000000..42ca81ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.0.10/listing.json
@@ -0,0 +1,4596 @@
+{
+ "vlt": "1.0.10",
+ "lockfileVersion": 1,
+ "storeFiles": [
+  "vlt.json"
+ ],
+ "hoist": {
+  "@babel/code-frame": {
+   "link": "../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+  },
+  "@babel/compat-data": {
+   "link": "../../~npm~@babel+compat-data@7.29.7/node_modules/@babel/compat-data"
+  },
+  "@babel/core": {
+   "link": "../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+  },
+  "@babel/generator": {
+   "link": "../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+  },
+  "@babel/helper-compilation-targets": {
+   "link": "../../~npm~@babel+helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+  },
+  "@babel/helper-globals": {
+   "link": "../../~npm~@babel+helper-globals@7.29.7/node_modules/@babel/helper-globals"
+  },
+  "@babel/helper-module-imports": {
+   "link": "../../~npm~@babel+helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+  },
+  "@babel/helper-module-transforms": {
+   "link": "../../~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8/node_modules/@babel/helper-module-transforms"
+  },
+  "@babel/helper-string-parser": {
+   "link": "../../~npm~@babel+helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+  },
+  "@babel/helper-validator-identifier": {
+   "link": "../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+  },
+  "@babel/helper-validator-option": {
+   "link": "../../~npm~@babel+helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+  },
+  "@babel/helpers": {
+   "link": "../../~npm~@babel+helpers@7.29.7/node_modules/@babel/helpers"
+  },
+  "@babel/parser": {
+   "link": "../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+  },
+  "@babel/template": {
+   "link": "../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+  },
+  "@babel/traverse": {
+   "link": "../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+  },
+  "@babel/types": {
+   "link": "../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../../~npm~@isaacs+string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "@istanbuljs/load-nyc-config": {
+   "link": "../../~npm~@istanbuljs+load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+  },
+  "@istanbuljs/schema": {
+   "link": "../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+  },
+  "@jridgewell/gen-mapping": {
+   "link": "../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+  },
+  "@jridgewell/remapping": {
+   "link": "../../~npm~@jridgewell+remapping@2.3.5/node_modules/@jridgewell/remapping"
+  },
+  "@jridgewell/resolve-uri": {
+   "link": "../../~npm~@jridgewell+resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+  },
+  "@jridgewell/sourcemap-codec": {
+   "link": "../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+  },
+  "@jridgewell/trace-mapping": {
+   "link": "../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+  },
+  "aggregate-error": {
+   "link": "../~npm~aggregate-error@3.1.0/node_modules/aggregate-error"
+  },
+  "ajv": {
+   "link": "../~npm~ajv@6.15.0/node_modules/ajv"
+  },
+  "ansi-regex": {
+   "link": "../~npm~ansi-regex@5.0.1/node_modules/ansi-regex"
+  },
+  "ansi-styles": {
+   "link": "../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+  },
+  "anymatch": {
+   "link": "../~npm~anymatch@3.1.3/node_modules/anymatch"
+  },
+  "append-transform": {
+   "link": "../~npm~append-transform@2.0.0/node_modules/append-transform"
+  },
+  "archy": {
+   "link": "../~npm~archy@1.0.0/node_modules/archy"
+  },
+  "argparse": {
+   "link": "../~npm~argparse@1.0.10/node_modules/argparse"
+  },
+  "asn1": {
+   "link": "../~npm~asn1@0.2.6/node_modules/asn1"
+  },
+  "assert-plus": {
+   "link": "../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+  },
+  "async-hook-domain": {
+   "link": "../~npm~async-hook-domain@2.0.4/node_modules/async-hook-domain"
+  },
+  "asynckit": {
+   "link": "../~npm~asynckit@0.4.0/node_modules/asynckit"
+  },
+  "aws-sign2": {
+   "link": "../~npm~aws-sign2@0.7.0/node_modules/aws-sign2"
+  },
+  "aws4": {
+   "link": "../~npm~aws4@1.13.2/node_modules/aws4"
+  },
+  "balanced-match": {
+   "link": "../~npm~balanced-match@1.0.2/node_modules/balanced-match"
+  },
+  "baseline-browser-mapping": {
+   "link": "../~npm~baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+  },
+  "bcrypt-pbkdf": {
+   "link": "../~npm~bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+  },
+  "binary-extensions": {
+   "link": "../~npm~binary-extensions@2.3.0/node_modules/binary-extensions"
+  },
+  "bind-obj-methods": {
+   "link": "../~npm~bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+  },
+  "brace-expansion": {
+   "link": "../~npm~brace-expansion@1.1.21/node_modules/brace-expansion"
+  },
+  "braces": {
+   "link": "../~npm~braces@3.0.3/node_modules/braces"
+  },
+  "browserslist": {
+   "link": "../~npm~browserslist@4.29.1/node_modules/browserslist"
+  },
+  "buffer-from": {
+   "link": "../~npm~buffer-from@1.1.2/node_modules/buffer-from"
+  },
+  "caching-transform": {
+   "link": "../~npm~caching-transform@4.0.0/node_modules/caching-transform"
+  },
+  "camelcase": {
+   "link": "../~npm~camelcase@5.3.1/node_modules/camelcase"
+  },
+  "caniuse-lite": {
+   "link": "../~npm~caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+  },
+  "caseless": {
+   "link": "../~npm~caseless@0.12.0/node_modules/caseless"
+  },
+  "chokidar": {
+   "link": "../~npm~chokidar@3.6.0/node_modules/chokidar"
+  },
+  "clean-stack": {
+   "link": "../~npm~clean-stack@2.2.0/node_modules/clean-stack"
+  },
+  "cliui": {
+   "link": "../~npm~cliui@7.0.4/node_modules/cliui"
+  },
+  "color-convert": {
+   "link": "../~npm~color-convert@2.0.1/node_modules/color-convert"
+  },
+  "color-name": {
+   "link": "../~npm~color-name@1.1.4/node_modules/color-name"
+  },
+  "color-support": {
+   "link": "../~npm~color-support@1.1.3/node_modules/color-support"
+  },
+  "combined-stream": {
+   "link": "../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+  },
+  "commondir": {
+   "link": "../~npm~commondir@1.0.1/node_modules/commondir"
+  },
+  "concat-map": {
+   "link": "../~npm~concat-map@0.0.1/node_modules/concat-map"
+  },
+  "convert-source-map": {
+   "link": "../~npm~convert-source-map@2.0.0/node_modules/convert-source-map"
+  },
+  "core-util-is": {
+   "link": "../~npm~core-util-is@1.0.2/node_modules/core-util-is"
+  },
+  "coveralls": {
+   "link": "../~npm~coveralls@3.1.1/node_modules/coveralls"
+  },
+  "cross-spawn": {
+   "link": "../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+  },
+  "dashdash": {
+   "link": "../~npm~dashdash@1.14.1/node_modules/dashdash"
+  },
+  "debug": {
+   "link": "../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+  },
+  "decamelize": {
+   "link": "../~npm~decamelize@1.2.0/node_modules/decamelize"
+  },
+  "default-require-extensions": {
+   "link": "../~npm~default-require-extensions@3.0.1/node_modules/default-require-extensions"
+  },
+  "delayed-stream": {
+   "link": "../~npm~delayed-stream@1.0.0/node_modules/delayed-stream"
+  },
+  "diff": {
+   "link": "../~npm~diff@4.0.4/node_modules/diff"
+  },
+  "ecc-jsbn": {
+   "link": "../~npm~ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+  },
+  "electron-to-chromium": {
+   "link": "../~npm~electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+  },
+  "emoji-regex": {
+   "link": "../~npm~emoji-regex@8.0.0/node_modules/emoji-regex"
+  },
+  "es6-error": {
+   "link": "../~npm~es6-error@4.1.1/node_modules/es6-error"
+  },
+  "escalade": {
+   "link": "../~npm~escalade@3.2.0/node_modules/escalade"
+  },
+  "escape-string-regexp": {
+   "link": "../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+  },
+  "esprima": {
+   "link": "../~npm~esprima@4.0.1/node_modules/esprima"
+  },
+  "events-to-array": {
+   "link": "../~npm~events-to-array@1.1.2/node_modules/events-to-array"
+  },
+  "extend": {
+   "link": "../~npm~extend@3.0.2/node_modules/extend"
+  },
+  "extsprintf": {
+   "link": "../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+  },
+  "fast-deep-equal": {
+   "link": "../~npm~fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+  },
+  "fast-json-stable-stringify": {
+   "link": "../~npm~fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+  },
+  "fill-range": {
+   "link": "../~npm~fill-range@7.1.1/node_modules/fill-range"
+  },
+  "find-cache-dir": {
+   "link": "../~npm~find-cache-dir@3.3.2/node_modules/find-cache-dir"
+  },
+  "find-up": {
+   "link": "../~npm~find-up@4.1.0/node_modules/find-up"
+  },
+  "findit": {
+   "link": "../~npm~findit@2.0.0/node_modules/findit"
+  },
+  "foreground-child": {
+   "link": "../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+  },
+  "forever-agent": {
+   "link": "../~npm~forever-agent@0.6.1/node_modules/forever-agent"
+  },
+  "form-data": {
+   "link": "../~npm~form-data@2.3.3/node_modules/form-data"
+  },
+  "fromentries": {
+   "link": "../~npm~fromentries@1.3.2/node_modules/fromentries"
+  },
+  "fs-exists-cached": {
+   "link": "../~npm~fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+  },
+  "fs.realpath": {
+   "link": "../~npm~fs.realpath@1.0.0/node_modules/fs.realpath"
+  },
+  "fsevents": {
+   "link": "../~npm~fsevents@2.3.3/node_modules/fsevents"
+  },
+  "function-loop": {
+   "link": "../~npm~function-loop@2.0.1/node_modules/function-loop"
+  },
+  "gensync": {
+   "link": "../~npm~gensync@1.0.0-beta.2/node_modules/gensync"
+  },
+  "get-caller-file": {
+   "link": "../~npm~get-caller-file@2.0.5/node_modules/get-caller-file"
+  },
+  "get-package-type": {
+   "link": "../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+  },
+  "getpass": {
+   "link": "../~npm~getpass@0.1.7/node_modules/getpass"
+  },
+  "glob": {
+   "link": "../~npm~glob@7.2.3/node_modules/glob"
+  },
+  "glob-parent": {
+   "link": "../~npm~glob-parent@5.1.2/node_modules/glob-parent"
+  },
+  "graceful-fs": {
+   "link": "../~npm~graceful-fs@4.2.11/node_modules/graceful-fs"
+  },
+  "har-schema": {
+   "link": "../~npm~har-schema@2.0.0/node_modules/har-schema"
+  },
+  "har-validator": {
+   "link": "../~npm~har-validator@5.1.5/node_modules/har-validator"
+  },
+  "has-flag": {
+   "link": "../~npm~has-flag@4.0.0/node_modules/has-flag"
+  },
+  "hasha": {
+   "link": "../~npm~hasha@5.2.2/node_modules/hasha"
+  },
+  "html-escaper": {
+   "link": "../~npm~html-escaper@2.0.2/node_modules/html-escaper"
+  },
+  "http-signature": {
+   "link": "../~npm~http-signature@1.2.0/node_modules/http-signature"
+  },
+  "imurmurhash": {
+   "link": "../~npm~imurmurhash@0.1.4/node_modules/imurmurhash"
+  },
+  "indent-string": {
+   "link": "../~npm~indent-string@4.0.0/node_modules/indent-string"
+  },
+  "inflight": {
+   "link": "../~npm~inflight@1.0.6/node_modules/inflight"
+  },
+  "inherits": {
+   "link": "../~npm~inherits@2.0.4/node_modules/inherits"
+  },
+  "is-binary-path": {
+   "link": "../~npm~is-binary-path@2.1.0/node_modules/is-binary-path"
+  },
+  "is-extglob": {
+   "link": "../~npm~is-extglob@2.1.1/node_modules/is-extglob"
+  },
+  "is-fullwidth-code-point": {
+   "link": "../~npm~is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+  },
+  "is-glob": {
+   "link": "../~npm~is-glob@4.0.3/node_modules/is-glob"
+  },
+  "is-number": {
+   "link": "../~npm~is-number@7.0.0/node_modules/is-number"
+  },
+  "is-stream": {
+   "link": "../~npm~is-stream@2.0.1/node_modules/is-stream"
+  },
+  "is-typedarray": {
+   "link": "../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+  },
+  "is-windows": {
+   "link": "../~npm~is-windows@1.0.2/node_modules/is-windows"
+  },
+  "isexe": {
+   "link": "../~npm~isexe@2.0.0/node_modules/isexe"
+  },
+  "isstream": {
+   "link": "../~npm~isstream@0.1.2/node_modules/isstream"
+  },
+  "istanbul-lib-coverage": {
+   "link": "../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+  },
+  "istanbul-lib-hook": {
+   "link": "../~npm~istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+  },
+  "istanbul-lib-instrument": {
+   "link": "../~npm~istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+  },
+  "istanbul-lib-processinfo": {
+   "link": "../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+  },
+  "istanbul-lib-report": {
+   "link": "../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+  },
+  "istanbul-lib-source-maps": {
+   "link": "../~npm~istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+  },
+  "istanbul-reports": {
+   "link": "../~npm~istanbul-reports@3.2.0/node_modules/istanbul-reports"
+  },
+  "jackspeak": {
+   "link": "../~npm~jackspeak@1.4.2/node_modules/jackspeak"
+  },
+  "js-tokens": {
+   "link": "../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+  },
+  "js-yaml": {
+   "link": "../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+  },
+  "jsbn": {
+   "link": "../~npm~jsbn@0.1.1/node_modules/jsbn"
+  },
+  "jsesc": {
+   "link": "../~npm~jsesc@3.1.0/node_modules/jsesc"
+  },
+  "json-schema": {
+   "link": "../~npm~json-schema@0.4.0/node_modules/json-schema"
+  },
+  "json-schema-traverse": {
+   "link": "../~npm~json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+  },
+  "json-stringify-safe": {
+   "link": "../~npm~json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+  },
+  "json5": {
+   "link": "../~npm~json5@2.2.3/node_modules/json5"
+  },
+  "jsprim": {
+   "link": "../~npm~jsprim@1.4.2/node_modules/jsprim"
+  },
+  "lcov-parse": {
+   "link": "../~npm~lcov-parse@1.0.0/node_modules/lcov-parse"
+  },
+  "left-pad": {
+   "link": "../~npm~left-pad@1.3.0/node_modules/left-pad"
+  },
+  "libtap": {
+   "link": "../~npm~libtap@1.4.1/node_modules/libtap"
+  },
+  "locate-path": {
+   "link": "../~npm~locate-path@5.0.0/node_modules/locate-path"
+  },
+  "lodash.flattendeep": {
+   "link": "../~npm~lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+  },
+  "log-driver": {
+   "link": "../~npm~log-driver@1.2.7/node_modules/log-driver"
+  },
+  "loose-envify": {
+   "link": "../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+  },
+  "lru-cache": {
+   "link": "../~npm~lru-cache@6.0.0/node_modules/lru-cache"
+  },
+  "make-dir": {
+   "link": "../~npm~make-dir@4.0.0/node_modules/make-dir"
+  },
+  "mime-db": {
+   "link": "../~npm~mime-db@1.52.0/node_modules/mime-db"
+  },
+  "mime-types": {
+   "link": "../~npm~mime-types@2.1.35/node_modules/mime-types"
+  },
+  "minimatch": {
+   "link": "../~npm~minimatch@3.1.5/node_modules/minimatch"
+  },
+  "minimist": {
+   "link": "../~npm~minimist@1.2.8/node_modules/minimist"
+  },
+  "minipass": {
+   "link": "../~npm~minipass@3.3.6/node_modules/minipass"
+  },
+  "mkdirp": {
+   "link": "../~npm~mkdirp@1.0.4/node_modules/mkdirp"
+  },
+  "ms-tgz": {
+   "link": "../file~vendor+ms-2.1.2.tgz/node_modules/ms"
+  },
+  "node-preload": {
+   "link": "../~npm~node-preload@0.2.1/node_modules/node-preload"
+  },
+  "node-releases": {
+   "link": "../~npm~node-releases@2.0.57/node_modules/node-releases"
+  },
+  "normalize-path": {
+   "link": "../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+  },
+  "nyc": {
+   "link": "../~npm~nyc@15.1.0/node_modules/nyc"
+  },
+  "oauth-sign": {
+   "link": "../~npm~oauth-sign@0.9.0/node_modules/oauth-sign"
+  },
+  "once": {
+   "link": "../~npm~once@1.4.0/node_modules/once"
+  },
+  "opener": {
+   "link": "../~npm~opener@1.5.2/node_modules/opener"
+  },
+  "own-or": {
+   "link": "../~npm~own-or@1.0.0/node_modules/own-or"
+  },
+  "own-or-env": {
+   "link": "../~npm~own-or-env@1.0.2/node_modules/own-or-env"
+  },
+  "p-limit": {
+   "link": "../~npm~p-limit@2.3.0/node_modules/p-limit"
+  },
+  "p-locate": {
+   "link": "../~npm~p-locate@4.1.0/node_modules/p-locate"
+  },
+  "p-map": {
+   "link": "../~npm~p-map@3.0.0/node_modules/p-map"
+  },
+  "p-try": {
+   "link": "../~npm~p-try@2.2.0/node_modules/p-try"
+  },
+  "package-hash": {
+   "link": "../~npm~package-hash@4.0.0/node_modules/package-hash"
+  },
+  "path-exists": {
+   "link": "../~npm~path-exists@4.0.0/node_modules/path-exists"
+  },
+  "path-is-absolute": {
+   "link": "../~npm~path-is-absolute@1.0.1/node_modules/path-is-absolute"
+  },
+  "path-key": {
+   "link": "../~npm~path-key@3.1.1/node_modules/path-key"
+  },
+  "performance-now": {
+   "link": "../~npm~performance-now@2.1.0/node_modules/performance-now"
+  },
+  "picocolors": {
+   "link": "../~npm~picocolors@1.1.1/node_modules/picocolors"
+  },
+  "picomatch": {
+   "link": "../~npm~picomatch@2.3.2/node_modules/picomatch"
+  },
+  "pkg-dir": {
+   "link": "../~npm~pkg-dir@4.2.0/node_modules/pkg-dir"
+  },
+  "process-on-spawn": {
+   "link": "../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+  },
+  "psl": {
+   "link": "../~npm~psl@1.15.0/node_modules/psl"
+  },
+  "punycode": {
+   "link": "../~npm~punycode@2.3.1/node_modules/punycode"
+  },
+  "qs": {
+   "link": "../~npm~qs@6.5.5/node_modules/qs"
+  },
+  "react": {
+   "link": "../~npm~react@18.2.0/node_modules/react"
+  },
+  "readdirp": {
+   "link": "../~npm~readdirp@3.6.0/node_modules/readdirp"
+  },
+  "release-zalgo": {
+   "link": "../~npm~release-zalgo@1.0.0/node_modules/release-zalgo"
+  },
+  "request": {
+   "link": "../~npm~request@2.88.2/node_modules/request"
+  },
+  "require-directory": {
+   "link": "../~npm~require-directory@2.1.1/node_modules/require-directory"
+  },
+  "require-main-filename": {
+   "link": "../~npm~require-main-filename@2.0.0/node_modules/require-main-filename"
+  },
+  "resolve-from": {
+   "link": "../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+  },
+  "rimraf": {
+   "link": "../~npm~rimraf@3.0.2/node_modules/rimraf"
+  },
+  "safe-buffer": {
+   "link": "../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+  },
+  "safer-buffer": {
+   "link": "../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+  },
+  "semver_x": {
+   "link": "../~npm~semver@7.6.0/node_modules/semver"
+  },
+  "set-blocking": {
+   "link": "../~npm~set-blocking@2.0.0/node_modules/set-blocking"
+  },
+  "shebang-command": {
+   "link": "../~npm~shebang-command@2.0.0/node_modules/shebang-command"
+  },
+  "shebang-regex": {
+   "link": "../~npm~shebang-regex@3.0.0/node_modules/shebang-regex"
+  },
+  "signal-exit": {
+   "link": "../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+  },
+  "source-map": {
+   "link": "../~npm~source-map@0.6.1/node_modules/source-map"
+  },
+  "source-map-support": {
+   "link": "../~npm~source-map-support@0.5.21/node_modules/source-map-support"
+  },
+  "spawn-wrap": {
+   "link": "../~npm~spawn-wrap@2.0.0/node_modules/spawn-wrap"
+  },
+  "sprintf-js": {
+   "link": "../~npm~sprintf-js@1.0.3/node_modules/sprintf-js"
+  },
+  "sshpk": {
+   "link": "../~npm~sshpk@1.18.0/node_modules/sshpk"
+  },
+  "stack-utils": {
+   "link": "../~npm~stack-utils@2.0.6/node_modules/stack-utils"
+  },
+  "string-width": {
+   "link": "../~npm~string-width@4.2.3/node_modules/string-width"
+  },
+  "strip-ansi": {
+   "link": "../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+  },
+  "strip-bom": {
+   "link": "../~npm~strip-bom@4.0.0/node_modules/strip-bom"
+  },
+  "supports-color": {
+   "link": "../~npm~supports-color@7.2.0/node_modules/supports-color"
+  },
+  "tap": {
+   "link": "../~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc/node_modules/tap"
+  },
+  "tap-mocha-reporter": {
+   "link": "../~npm~tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+  },
+  "tap-parser": {
+   "link": "../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+  },
+  "tap-yaml": {
+   "link": "../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+  },
+  "tcompare": {
+   "link": "../~npm~tcompare@5.0.7/node_modules/tcompare"
+  },
+  "test-exclude": {
+   "link": "../~npm~test-exclude@6.0.0/node_modules/test-exclude"
+  },
+  "to-regex-range": {
+   "link": "../~npm~to-regex-range@5.0.1/node_modules/to-regex-range"
+  },
+  "tough-cookie": {
+   "link": "../~npm~tough-cookie@2.5.0/node_modules/tough-cookie"
+  },
+  "trivial-deferred": {
+   "link": "../~npm~trivial-deferred@1.1.2/node_modules/trivial-deferred"
+  },
+  "tunnel-agent": {
+   "link": "../~npm~tunnel-agent@0.6.0/node_modules/tunnel-agent"
+  },
+  "tweetnacl": {
+   "link": "../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+  },
+  "type-fest": {
+   "link": "../~npm~type-fest@0.8.1/node_modules/type-fest"
+  },
+  "typedarray-to-buffer": {
+   "link": "../~npm~typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+  },
+  "unicode-length": {
+   "link": "../~npm~unicode-length@2.1.0/node_modules/unicode-length"
+  },
+  "update-browserslist-db": {
+   "link": "../~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae/node_modules/update-browserslist-db"
+  },
+  "uri-js": {
+   "link": "../~npm~uri-js@4.4.1/node_modules/uri-js"
+  },
+  "use-sync-external-store": {
+   "link": "../~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba/node_modules/use-sync-external-store"
+  },
+  "uuid": {
+   "link": "../~npm~uuid@8.3.2/node_modules/uuid"
+  },
+  "verror": {
+   "link": "../~npm~verror@1.10.0/node_modules/verror"
+  },
+  "which": {
+   "link": "../~npm~which@2.0.2/node_modules/which"
+  },
+  "which-module": {
+   "link": "../~npm~which-module@2.0.1/node_modules/which-module"
+  },
+  "wrap-ansi": {
+   "link": "../~npm~wrap-ansi@7.0.0/node_modules/wrap-ansi"
+  },
+  "wrappy": {
+   "link": "../~npm~wrappy@1.0.2/node_modules/wrappy"
+  },
+  "write-file-atomic": {
+   "link": "../~npm~write-file-atomic@3.0.3/node_modules/write-file-atomic"
+  },
+  "y18n": {
+   "link": "../~npm~y18n@4.0.3/node_modules/y18n"
+  },
+  "yallist": {
+   "link": "../~npm~yallist@4.0.0/node_modules/yallist"
+  },
+  "yaml": {
+   "link": "../~npm~yaml@1.10.3/node_modules/yaml"
+  },
+  "yargs": {
+   "link": "../~npm~yargs@15.4.1/node_modules/yargs"
+  },
+  "yargs-parser": {
+   "link": "../~npm~yargs-parser@18.1.3/node_modules/yargs-parser"
+  }
+ },
+ "store": [
+  {
+   "id": "file~vendor+ms-2.1.2.tgz",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "git~git_phttps_c++github.com+isaacs+string-locale-compare.git~v1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    },
+    "tap": {
+     "link": "../../~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc/node_modules/tap"
+    }
+   }
+  },
+  {
+   "id": "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+code-frame@7.29.7",
+   "node_modules": {
+    "@babel/code-frame": {
+     "pkg": {
+      "name": "@babel/code-frame",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "js-tokens": {
+     "link": "../../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "picocolors": {
+     "link": "../../~npm~picocolors@1.1.1/node_modules/picocolors"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+compat-data@7.29.7",
+   "node_modules": {
+    "@babel/compat-data": {
+     "pkg": {
+      "name": "@babel/compat-data",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+core@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/core": {
+     "pkg": {
+      "name": "@babel/core",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/generator": {
+     "link": "../../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-compilation-targets": {
+     "link": "../../../~npm~@babel+helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+    },
+    "@babel/helper-module-transforms": {
+     "link": "../../../~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8/node_modules/@babel/helper-module-transforms"
+    },
+    "@babel/helpers": {
+     "link": "../../../~npm~@babel+helpers@7.29.7/node_modules/@babel/helpers"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/remapping": {
+     "link": "../../../~npm~@jridgewell+remapping@2.3.5/node_modules/@jridgewell/remapping"
+    },
+    "convert-source-map": {
+     "link": "../../~npm~convert-source-map@2.0.0/node_modules/convert-source-map"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "gensync": {
+     "link": "../../~npm~gensync@1.0.0-beta.2/node_modules/gensync"
+    },
+    "json5": {
+     "link": "../../~npm~json5@2.2.3/node_modules/json5"
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+generator@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/generator": {
+     "pkg": {
+      "name": "@babel/generator",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/gen-mapping": {
+     "link": "../../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    },
+    "jsesc": {
+     "link": "../../~npm~jsesc@3.1.0/node_modules/jsesc"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-compilation-targets@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/compat-data": {
+     "link": "../../../~npm~@babel+compat-data@7.29.7/node_modules/@babel/compat-data"
+    },
+    "@babel/helper-compilation-targets": {
+     "pkg": {
+      "name": "@babel/helper-compilation-targets",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-option": {
+     "link": "../../../~npm~@babel+helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+    },
+    "browserslist": {
+     "link": "../../~npm~browserslist@4.29.1/node_modules/browserslist"
+    },
+    "lru-cache": {
+     "link": "../../~npm~lru-cache@5.1.1/node_modules/lru-cache"
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-globals@7.29.7",
+   "node_modules": {
+    "@babel/helper-globals": {
+     "pkg": {
+      "name": "@babel/helper-globals",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-module-imports@7.29.7",
+   "node_modules": {
+    "@babel/helper-module-imports": {
+     "pkg": {
+      "name": "@babel/helper-module-imports",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8",
+   "node_modules": {
+    "@babel/core": {
+     "link": "../../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+    },
+    "@babel/helper-module-imports": {
+     "link": "../../../~npm~@babel+helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+    },
+    "@babel/helper-module-transforms": {
+     "pkg": {
+      "name": "@babel/helper-module-transforms",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-string-parser@7.29.7",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "pkg": {
+      "name": "@babel/helper-string-parser",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-validator-identifier@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-identifier": {
+     "pkg": {
+      "name": "@babel/helper-validator-identifier",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-validator-option@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-option": {
+     "pkg": {
+      "name": "@babel/helper-validator-option",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helpers@7.29.7",
+   "node_modules": {
+    "@babel/helpers": {
+     "pkg": {
+      "name": "@babel/helpers",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+parser@7.29.9",
+   "node_modules": {
+    "@babel/parser": {
+     "pkg": {
+      "name": "@babel/parser",
+      "version": "7.29.9"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+template@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "pkg": {
+      "name": "@babel/template",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+traverse@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/generator": {
+     "link": "../../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-globals": {
+     "link": "../../../~npm~@babel+helper-globals@7.29.7/node_modules/@babel/helper-globals"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "pkg": {
+      "name": "@babel/traverse",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+types@7.29.8",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "link": "../../../~npm~@babel+helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/types": {
+     "pkg": {
+      "name": "@babel/types",
+      "version": "7.29.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@isaacs+string-locale-compare@1.1.0",
+   "node_modules": {
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@istanbuljs+load-nyc-config@1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "pkg": {
+      "name": "@istanbuljs/load-nyc-config",
+      "version": "1.1.0"
+     }
+    },
+    "camelcase": {
+     "link": "../../~npm~camelcase@5.3.1/node_modules/camelcase"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "get-package-type": {
+     "link": "../../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "js-yaml": {
+     "link": "../../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "resolve-from": {
+     "link": "../../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+    }
+   }
+  },
+  {
+   "id": "~npm~@istanbuljs+schema@0.1.6",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "pkg": {
+      "name": "@istanbuljs/schema",
+      "version": "0.1.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+gen-mapping@0.3.13",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "pkg": {
+      "name": "@jridgewell/gen-mapping",
+      "version": "0.3.13"
+     }
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+remapping@2.3.5",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "link": "../../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/remapping": {
+     "pkg": {
+      "name": "@jridgewell/remapping",
+      "version": "2.3.5"
+     }
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+resolve-uri@3.1.2",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "pkg": {
+      "name": "@jridgewell/resolve-uri",
+      "version": "3.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+sourcemap-codec@1.6.0",
+   "node_modules": {
+    "@jridgewell/sourcemap-codec": {
+     "pkg": {
+      "name": "@jridgewell/sourcemap-codec",
+      "version": "1.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+trace-mapping@0.3.31",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "link": "../../../~npm~@jridgewell+resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "pkg": {
+      "name": "@jridgewell/trace-mapping",
+      "version": "0.3.31"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aggregate-error@3.1.0",
+   "node_modules": {
+    "aggregate-error": {
+     "pkg": {
+      "name": "aggregate-error",
+      "version": "3.1.0"
+     }
+    },
+    "clean-stack": {
+     "link": "../../~npm~clean-stack@2.2.0/node_modules/clean-stack"
+    },
+    "indent-string": {
+     "link": "../../~npm~indent-string@4.0.0/node_modules/indent-string"
+    }
+   }
+  },
+  {
+   "id": "~npm~ajv@6.15.0",
+   "node_modules": {
+    "ajv": {
+     "pkg": {
+      "name": "ajv",
+      "version": "6.15.0"
+     }
+    },
+    "fast-deep-equal": {
+     "link": "../../~npm~fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+    },
+    "fast-json-stable-stringify": {
+     "link": "../../~npm~fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+    },
+    "json-schema-traverse": {
+     "link": "../../~npm~json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+    },
+    "uri-js": {
+     "link": "../../~npm~uri-js@4.4.1/node_modules/uri-js"
+    }
+   }
+  },
+  {
+   "id": "~npm~ansi-regex@5.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "pkg": {
+      "name": "ansi-regex",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ansi-styles@4.3.0",
+   "node_modules": {
+    "ansi-styles": {
+     "pkg": {
+      "name": "ansi-styles",
+      "version": "4.3.0"
+     }
+    },
+    "color-convert": {
+     "link": "../../~npm~color-convert@2.0.1/node_modules/color-convert"
+    }
+   }
+  },
+  {
+   "id": "~npm~anymatch@3.1.3",
+   "node_modules": {
+    "anymatch": {
+     "pkg": {
+      "name": "anymatch",
+      "version": "3.1.3"
+     }
+    },
+    "normalize-path": {
+     "link": "../../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "picomatch": {
+     "link": "../../~npm~picomatch@2.3.2/node_modules/picomatch"
+    }
+   }
+  },
+  {
+   "id": "~npm~append-transform@2.0.0",
+   "node_modules": {
+    "append-transform": {
+     "pkg": {
+      "name": "append-transform",
+      "version": "2.0.0"
+     }
+    },
+    "default-require-extensions": {
+     "link": "../../~npm~default-require-extensions@3.0.1/node_modules/default-require-extensions"
+    }
+   }
+  },
+  {
+   "id": "~npm~archy@1.0.0",
+   "node_modules": {
+    "archy": {
+     "pkg": {
+      "name": "archy",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~argparse@1.0.10",
+   "node_modules": {
+    "argparse": {
+     "pkg": {
+      "name": "argparse",
+      "version": "1.0.10"
+     }
+    },
+    "sprintf-js": {
+     "link": "../../~npm~sprintf-js@1.0.3/node_modules/sprintf-js"
+    }
+   }
+  },
+  {
+   "id": "~npm~asn1@0.2.6",
+   "node_modules": {
+    "asn1": {
+     "pkg": {
+      "name": "asn1",
+      "version": "0.2.6"
+     }
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "~npm~assert-plus@1.0.0",
+   "node_modules": {
+    "assert-plus": {
+     "pkg": {
+      "name": "assert-plus",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~async-hook-domain@2.0.4",
+   "node_modules": {
+    "async-hook-domain": {
+     "pkg": {
+      "name": "async-hook-domain",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~asynckit@0.4.0",
+   "node_modules": {
+    "asynckit": {
+     "pkg": {
+      "name": "asynckit",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aws-sign2@0.7.0",
+   "node_modules": {
+    "aws-sign2": {
+     "pkg": {
+      "name": "aws-sign2",
+      "version": "0.7.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aws4@1.13.2",
+   "node_modules": {
+    "aws4": {
+     "pkg": {
+      "name": "aws4",
+      "version": "1.13.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~balanced-match@1.0.2",
+   "node_modules": {
+    "balanced-match": {
+     "pkg": {
+      "name": "balanced-match",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~baseline-browser-mapping@2.11.26",
+   "node_modules": {
+    "baseline-browser-mapping": {
+     "pkg": {
+      "name": "baseline-browser-mapping",
+      "version": "2.11.26"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~bcrypt-pbkdf@1.0.2",
+   "node_modules": {
+    "bcrypt-pbkdf": {
+     "pkg": {
+      "name": "bcrypt-pbkdf",
+      "version": "1.0.2"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "~npm~binary-extensions@2.3.0",
+   "node_modules": {
+    "binary-extensions": {
+     "pkg": {
+      "name": "binary-extensions",
+      "version": "2.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~bind-obj-methods@3.0.0",
+   "node_modules": {
+    "bind-obj-methods": {
+     "pkg": {
+      "name": "bind-obj-methods",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~brace-expansion@1.1.21",
+   "node_modules": {
+    "balanced-match": {
+     "link": "../../~npm~balanced-match@1.0.2/node_modules/balanced-match"
+    },
+    "brace-expansion": {
+     "pkg": {
+      "name": "brace-expansion",
+      "version": "1.1.21"
+     }
+    },
+    "concat-map": {
+     "link": "../../~npm~concat-map@0.0.1/node_modules/concat-map"
+    }
+   }
+  },
+  {
+   "id": "~npm~braces@3.0.3",
+   "node_modules": {
+    "braces": {
+     "pkg": {
+      "name": "braces",
+      "version": "3.0.3"
+     }
+    },
+    "fill-range": {
+     "link": "../../~npm~fill-range@7.1.1/node_modules/fill-range"
+    }
+   }
+  },
+  {
+   "id": "~npm~browserslist@4.29.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "baseline-browser-mapping": {
+     "link": "../../~npm~baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+    },
+    "browserslist": {
+     "pkg": {
+      "name": "browserslist",
+      "version": "4.29.1"
+     }
+    },
+    "caniuse-lite": {
+     "link": "../../~npm~caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+    },
+    "electron-to-chromium": {
+     "link": "../../~npm~electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+    },
+    "node-releases": {
+     "link": "../../~npm~node-releases@2.0.57/node_modules/node-releases"
+    },
+    "update-browserslist-db": {
+     "link": "../../~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae/node_modules/update-browserslist-db"
+    }
+   }
+  },
+  {
+   "id": "~npm~buffer-from@1.1.2",
+   "node_modules": {
+    "buffer-from": {
+     "pkg": {
+      "name": "buffer-from",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caching-transform@4.0.0",
+   "node_modules": {
+    "caching-transform": {
+     "pkg": {
+      "name": "caching-transform",
+      "version": "4.0.0"
+     }
+    },
+    "hasha": {
+     "link": "../../~npm~hasha@5.2.2/node_modules/hasha"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "package-hash": {
+     "link": "../../~npm~package-hash@4.0.0/node_modules/package-hash"
+    },
+    "write-file-atomic": {
+     "link": "../../~npm~write-file-atomic@3.0.3/node_modules/write-file-atomic"
+    }
+   }
+  },
+  {
+   "id": "~npm~camelcase@5.3.1",
+   "node_modules": {
+    "camelcase": {
+     "pkg": {
+      "name": "camelcase",
+      "version": "5.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caniuse-lite@1.0.30001812",
+   "node_modules": {
+    "caniuse-lite": {
+     "pkg": {
+      "name": "caniuse-lite",
+      "version": "1.0.30001812"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caseless@0.12.0",
+   "node_modules": {
+    "caseless": {
+     "pkg": {
+      "name": "caseless",
+      "version": "0.12.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~chokidar@3.6.0",
+   "node_modules": {
+    "anymatch": {
+     "link": "../../~npm~anymatch@3.1.3/node_modules/anymatch"
+    },
+    "braces": {
+     "link": "../../~npm~braces@3.0.3/node_modules/braces"
+    },
+    "chokidar": {
+     "pkg": {
+      "name": "chokidar",
+      "version": "3.6.0"
+     }
+    },
+    "fsevents": {
+     "link": "../../~npm~fsevents@2.3.3/node_modules/fsevents"
+    },
+    "glob-parent": {
+     "link": "../../~npm~glob-parent@5.1.2/node_modules/glob-parent"
+    },
+    "is-binary-path": {
+     "link": "../../~npm~is-binary-path@2.1.0/node_modules/is-binary-path"
+    },
+    "is-glob": {
+     "link": "../../~npm~is-glob@4.0.3/node_modules/is-glob"
+    },
+    "normalize-path": {
+     "link": "../../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "readdirp": {
+     "link": "../../~npm~readdirp@3.6.0/node_modules/readdirp"
+    }
+   }
+  },
+  {
+   "id": "~npm~clean-stack@2.2.0",
+   "node_modules": {
+    "clean-stack": {
+     "pkg": {
+      "name": "clean-stack",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~cliui@6.0.0",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "6.0.0"
+     }
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../~npm~wrap-ansi@6.2.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~cliui@7.0.4",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "7.0.4"
+     }
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../~npm~wrap-ansi@7.0.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~color-convert@2.0.1",
+   "node_modules": {
+    "color-convert": {
+     "pkg": {
+      "name": "color-convert",
+      "version": "2.0.1"
+     }
+    },
+    "color-name": {
+     "link": "../../~npm~color-name@1.1.4/node_modules/color-name"
+    }
+   }
+  },
+  {
+   "id": "~npm~color-name@1.1.4",
+   "node_modules": {
+    "color-name": {
+     "pkg": {
+      "name": "color-name",
+      "version": "1.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~color-support@1.1.3",
+   "node_modules": {
+    "color-support": {
+     "pkg": {
+      "name": "color-support",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~combined-stream@1.0.8",
+   "node_modules": {
+    "combined-stream": {
+     "pkg": {
+      "name": "combined-stream",
+      "version": "1.0.8"
+     }
+    },
+    "delayed-stream": {
+     "link": "../../~npm~delayed-stream@1.0.0/node_modules/delayed-stream"
+    }
+   }
+  },
+  {
+   "id": "~npm~commondir@1.0.1",
+   "node_modules": {
+    "commondir": {
+     "pkg": {
+      "name": "commondir",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~concat-map@0.0.1",
+   "node_modules": {
+    "concat-map": {
+     "pkg": {
+      "name": "concat-map",
+      "version": "0.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~convert-source-map@1.9.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "1.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~convert-source-map@2.0.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~core-util-is@1.0.2",
+   "node_modules": {
+    "core-util-is": {
+     "pkg": {
+      "name": "core-util-is",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~coveralls@3.1.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "coveralls": {
+     "pkg": {
+      "name": "coveralls",
+      "version": "3.1.1"
+     }
+    },
+    "js-yaml": {
+     "link": "../../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "lcov-parse": {
+     "link": "../../~npm~lcov-parse@1.0.0/node_modules/lcov-parse"
+    },
+    "log-driver": {
+     "link": "../../~npm~log-driver@1.2.7/node_modules/log-driver"
+    },
+    "minimist": {
+     "link": "../../~npm~minimist@1.2.8/node_modules/minimist"
+    },
+    "request": {
+     "link": "../../~npm~request@2.88.2/node_modules/request"
+    }
+   }
+  },
+  {
+   "id": "~npm~cross-spawn@7.0.6",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "cross-spawn": {
+     "pkg": {
+      "name": "cross-spawn",
+      "version": "7.0.6"
+     }
+    },
+    "path-key": {
+     "link": "../../~npm~path-key@3.1.1/node_modules/path-key"
+    },
+    "shebang-command": {
+     "link": "../../~npm~shebang-command@2.0.0/node_modules/shebang-command"
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~dashdash@1.14.1",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "dashdash": {
+     "pkg": {
+      "name": "dashdash",
+      "version": "1.14.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+   "node_modules": {
+    "debug": {
+     "pkg": {
+      "name": "debug",
+      "version": "4.3.4"
+     }
+    },
+    "ms": {
+     "link": "../../~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms/node_modules/ms"
+    }
+   }
+  },
+  {
+   "id": "~npm~decamelize@1.2.0",
+   "node_modules": {
+    "decamelize": {
+     "pkg": {
+      "name": "decamelize",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~default-require-extensions@3.0.1",
+   "node_modules": {
+    "default-require-extensions": {
+     "pkg": {
+      "name": "default-require-extensions",
+      "version": "3.0.1"
+     }
+    },
+    "strip-bom": {
+     "link": "../../~npm~strip-bom@4.0.0/node_modules/strip-bom"
+    }
+   }
+  },
+  {
+   "id": "~npm~delayed-stream@1.0.0",
+   "node_modules": {
+    "delayed-stream": {
+     "pkg": {
+      "name": "delayed-stream",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~diff@4.0.4",
+   "node_modules": {
+    "diff": {
+     "pkg": {
+      "name": "diff",
+      "version": "4.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ecc-jsbn@0.1.2",
+   "node_modules": {
+    "ecc-jsbn": {
+     "pkg": {
+      "name": "ecc-jsbn",
+      "version": "0.1.2"
+     }
+    },
+    "jsbn": {
+     "link": "../../~npm~jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "~npm~electron-to-chromium@1.5.439",
+   "node_modules": {
+    "electron-to-chromium": {
+     "pkg": {
+      "name": "electron-to-chromium",
+      "version": "1.5.439"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~emoji-regex@8.0.0",
+   "node_modules": {
+    "emoji-regex": {
+     "pkg": {
+      "name": "emoji-regex",
+      "version": "8.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~es6-error@4.1.1",
+   "node_modules": {
+    "es6-error": {
+     "pkg": {
+      "name": "es6-error",
+      "version": "4.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~escalade@3.2.0",
+   "node_modules": {
+    "escalade": {
+     "pkg": {
+      "name": "escalade",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~escape-string-regexp@2.0.0",
+   "node_modules": {
+    "escape-string-regexp": {
+     "pkg": {
+      "name": "escape-string-regexp",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~esprima@4.0.1",
+   "node_modules": {
+    "esprima": {
+     "pkg": {
+      "name": "esprima",
+      "version": "4.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~events-to-array@1.1.2",
+   "node_modules": {
+    "events-to-array": {
+     "pkg": {
+      "name": "events-to-array",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~extend@3.0.2",
+   "node_modules": {
+    "extend": {
+     "pkg": {
+      "name": "extend",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~extsprintf@1.3.0",
+   "node_modules": {
+    "extsprintf": {
+     "pkg": {
+      "name": "extsprintf",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fast-deep-equal@3.1.3",
+   "node_modules": {
+    "fast-deep-equal": {
+     "pkg": {
+      "name": "fast-deep-equal",
+      "version": "3.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fast-json-stable-stringify@2.1.0",
+   "node_modules": {
+    "fast-json-stable-stringify": {
+     "pkg": {
+      "name": "fast-json-stable-stringify",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fill-range@7.1.1",
+   "node_modules": {
+    "fill-range": {
+     "pkg": {
+      "name": "fill-range",
+      "version": "7.1.1"
+     }
+    },
+    "to-regex-range": {
+     "link": "../../~npm~to-regex-range@5.0.1/node_modules/to-regex-range"
+    }
+   }
+  },
+  {
+   "id": "~npm~find-cache-dir@3.3.2",
+   "node_modules": {
+    "commondir": {
+     "link": "../../~npm~commondir@1.0.1/node_modules/commondir"
+    },
+    "find-cache-dir": {
+     "pkg": {
+      "name": "find-cache-dir",
+      "version": "3.3.2"
+     }
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "pkg-dir": {
+     "link": "../../~npm~pkg-dir@4.2.0/node_modules/pkg-dir"
+    }
+   }
+  },
+  {
+   "id": "~npm~find-up@4.1.0",
+   "node_modules": {
+    "find-up": {
+     "pkg": {
+      "name": "find-up",
+      "version": "4.1.0"
+     }
+    },
+    "locate-path": {
+     "link": "../../~npm~locate-path@5.0.0/node_modules/locate-path"
+    },
+    "path-exists": {
+     "link": "../../~npm~path-exists@4.0.0/node_modules/path-exists"
+    }
+   }
+  },
+  {
+   "id": "~npm~findit@2.0.0",
+   "node_modules": {
+    "findit": {
+     "pkg": {
+      "name": "findit",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~foreground-child@2.0.0",
+   "node_modules": {
+    "cross-spawn": {
+     "link": "../../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "foreground-child": {
+     "pkg": {
+      "name": "foreground-child",
+      "version": "2.0.0"
+     }
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    }
+   }
+  },
+  {
+   "id": "~npm~forever-agent@0.6.1",
+   "node_modules": {
+    "forever-agent": {
+     "pkg": {
+      "name": "forever-agent",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~form-data@2.3.3",
+   "node_modules": {
+    "asynckit": {
+     "link": "../../~npm~asynckit@0.4.0/node_modules/asynckit"
+    },
+    "combined-stream": {
+     "link": "../../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "form-data": {
+     "pkg": {
+      "name": "form-data",
+      "version": "2.3.3"
+     }
+    },
+    "mime-types": {
+     "link": "../../~npm~mime-types@2.1.35/node_modules/mime-types"
+    }
+   }
+  },
+  {
+   "id": "~npm~fromentries@1.3.2",
+   "node_modules": {
+    "fromentries": {
+     "pkg": {
+      "name": "fromentries",
+      "version": "1.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fs-exists-cached@1.0.0",
+   "node_modules": {
+    "fs-exists-cached": {
+     "pkg": {
+      "name": "fs-exists-cached",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fs.realpath@1.0.0",
+   "node_modules": {
+    "fs.realpath": {
+     "pkg": {
+      "name": "fs.realpath",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fsevents@2.3.3",
+   "node_modules": {
+    "fsevents": {
+     "pkg": {
+      "name": "fsevents",
+      "version": "2.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~function-loop@2.0.1",
+   "node_modules": {
+    "function-loop": {
+     "pkg": {
+      "name": "function-loop",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~gensync@1.0.0-beta.2",
+   "node_modules": {
+    "gensync": {
+     "pkg": {
+      "name": "gensync",
+      "version": "1.0.0-beta.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~get-caller-file@2.0.5",
+   "node_modules": {
+    "get-caller-file": {
+     "pkg": {
+      "name": "get-caller-file",
+      "version": "2.0.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~get-package-type@0.1.0",
+   "node_modules": {
+    "get-package-type": {
+     "pkg": {
+      "name": "get-package-type",
+      "version": "0.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~getpass@0.1.7",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "getpass": {
+     "pkg": {
+      "name": "getpass",
+      "version": "0.1.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~glob-parent@5.1.2",
+   "node_modules": {
+    "glob-parent": {
+     "pkg": {
+      "name": "glob-parent",
+      "version": "5.1.2"
+     }
+    },
+    "is-glob": {
+     "link": "../../~npm~is-glob@4.0.3/node_modules/is-glob"
+    }
+   }
+  },
+  {
+   "id": "~npm~glob@7.2.3",
+   "node_modules": {
+    "fs.realpath": {
+     "link": "../../~npm~fs.realpath@1.0.0/node_modules/fs.realpath"
+    },
+    "glob": {
+     "pkg": {
+      "name": "glob",
+      "version": "7.2.3"
+     }
+    },
+    "inflight": {
+     "link": "../../~npm~inflight@1.0.6/node_modules/inflight"
+    },
+    "inherits": {
+     "link": "../../~npm~inherits@2.0.4/node_modules/inherits"
+    },
+    "minimatch": {
+     "link": "../../~npm~minimatch@3.1.5/node_modules/minimatch"
+    },
+    "once": {
+     "link": "../../~npm~once@1.4.0/node_modules/once"
+    },
+    "path-is-absolute": {
+     "link": "../../~npm~path-is-absolute@1.0.1/node_modules/path-is-absolute"
+    }
+   }
+  },
+  {
+   "id": "~npm~graceful-fs@4.2.11",
+   "node_modules": {
+    "graceful-fs": {
+     "pkg": {
+      "name": "graceful-fs",
+      "version": "4.2.11"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~har-schema@2.0.0",
+   "node_modules": {
+    "har-schema": {
+     "pkg": {
+      "name": "har-schema",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~har-validator@5.1.5",
+   "node_modules": {
+    "ajv": {
+     "link": "../../~npm~ajv@6.15.0/node_modules/ajv"
+    },
+    "har-schema": {
+     "link": "../../~npm~har-schema@2.0.0/node_modules/har-schema"
+    },
+    "har-validator": {
+     "pkg": {
+      "name": "har-validator",
+      "version": "5.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~has-flag@4.0.0",
+   "node_modules": {
+    "has-flag": {
+     "pkg": {
+      "name": "has-flag",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~hasha@5.2.2",
+   "node_modules": {
+    "hasha": {
+     "pkg": {
+      "name": "hasha",
+      "version": "5.2.2"
+     }
+    },
+    "is-stream": {
+     "link": "../../~npm~is-stream@2.0.1/node_modules/is-stream"
+    },
+    "type-fest": {
+     "link": "../../~npm~type-fest@0.8.1/node_modules/type-fest"
+    }
+   }
+  },
+  {
+   "id": "~npm~html-escaper@2.0.2",
+   "node_modules": {
+    "html-escaper": {
+     "pkg": {
+      "name": "html-escaper",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~http-signature@1.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "http-signature": {
+     "pkg": {
+      "name": "http-signature",
+      "version": "1.2.0"
+     }
+    },
+    "jsprim": {
+     "link": "../../~npm~jsprim@1.4.2/node_modules/jsprim"
+    },
+    "sshpk": {
+     "link": "../../~npm~sshpk@1.18.0/node_modules/sshpk"
+    }
+   }
+  },
+  {
+   "id": "~npm~imurmurhash@0.1.4",
+   "node_modules": {
+    "imurmurhash": {
+     "pkg": {
+      "name": "imurmurhash",
+      "version": "0.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~indent-string@4.0.0",
+   "node_modules": {
+    "indent-string": {
+     "pkg": {
+      "name": "indent-string",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~inflight@1.0.6",
+   "node_modules": {
+    "inflight": {
+     "pkg": {
+      "name": "inflight",
+      "version": "1.0.6"
+     }
+    },
+    "once": {
+     "link": "../../~npm~once@1.4.0/node_modules/once"
+    },
+    "wrappy": {
+     "link": "../../~npm~wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "~npm~inherits@2.0.4",
+   "node_modules": {
+    "inherits": {
+     "pkg": {
+      "name": "inherits",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-binary-path@2.1.0",
+   "node_modules": {
+    "binary-extensions": {
+     "link": "../../~npm~binary-extensions@2.3.0/node_modules/binary-extensions"
+    },
+    "is-binary-path": {
+     "pkg": {
+      "name": "is-binary-path",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-extglob@2.1.1",
+   "node_modules": {
+    "is-extglob": {
+     "pkg": {
+      "name": "is-extglob",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-fullwidth-code-point@3.0.0",
+   "node_modules": {
+    "is-fullwidth-code-point": {
+     "pkg": {
+      "name": "is-fullwidth-code-point",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-glob@4.0.3",
+   "node_modules": {
+    "is-extglob": {
+     "link": "../../~npm~is-extglob@2.1.1/node_modules/is-extglob"
+    },
+    "is-glob": {
+     "pkg": {
+      "name": "is-glob",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-number@7.0.0",
+   "node_modules": {
+    "is-number": {
+     "pkg": {
+      "name": "is-number",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-stream@2.0.1",
+   "node_modules": {
+    "is-stream": {
+     "pkg": {
+      "name": "is-stream",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-typedarray@1.0.0",
+   "node_modules": {
+    "is-typedarray": {
+     "pkg": {
+      "name": "is-typedarray",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-windows@1.0.2",
+   "node_modules": {
+    "is-windows": {
+     "pkg": {
+      "name": "is-windows",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~isexe@2.0.0",
+   "node_modules": {
+    "isexe": {
+     "pkg": {
+      "name": "isexe",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~isstream@0.1.2",
+   "node_modules": {
+    "isstream": {
+     "pkg": {
+      "name": "isstream",
+      "version": "0.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-coverage@3.2.2",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "pkg": {
+      "name": "istanbul-lib-coverage",
+      "version": "3.2.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-hook@3.0.0",
+   "node_modules": {
+    "append-transform": {
+     "link": "../../~npm~append-transform@2.0.0/node_modules/append-transform"
+    },
+    "istanbul-lib-hook": {
+     "pkg": {
+      "name": "istanbul-lib-hook",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-instrument@4.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/core": {
+     "link": "../../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-instrument": {
+     "pkg": {
+      "name": "istanbul-lib-instrument",
+      "version": "4.0.3"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-processinfo@2.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "archy": {
+     "link": "../../~npm~archy@1.0.0/node_modules/archy"
+    },
+    "cross-spawn": {
+     "link": "../../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-processinfo": {
+     "pkg": {
+      "name": "istanbul-lib-processinfo",
+      "version": "2.0.3"
+     }
+    },
+    "p-map": {
+     "link": "../../~npm~p-map@3.0.0/node_modules/p-map"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "uuid": {
+     "link": "../../~npm~uuid@8.3.2/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-report@3.0.1",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-report": {
+     "pkg": {
+      "name": "istanbul-lib-report",
+      "version": "3.0.1"
+     }
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@4.0.0/node_modules/make-dir"
+    },
+    "supports-color": {
+     "link": "../../~npm~supports-color@7.2.0/node_modules/supports-color"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-source-maps@4.0.1",
+   "node_modules": {
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-source-maps": {
+     "pkg": {
+      "name": "istanbul-lib-source-maps",
+      "version": "4.0.1"
+     }
+    },
+    "source-map": {
+     "link": "../../~npm~source-map@0.6.1/node_modules/source-map"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-reports@3.2.0",
+   "node_modules": {
+    "html-escaper": {
+     "link": "../../~npm~html-escaper@2.0.2/node_modules/html-escaper"
+    },
+    "istanbul-lib-report": {
+     "link": "../../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-reports": {
+     "pkg": {
+      "name": "istanbul-reports",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jackspeak@1.4.2",
+   "node_modules": {
+    "cliui": {
+     "link": "../../~npm~cliui@7.0.4/node_modules/cliui"
+    },
+    "jackspeak": {
+     "pkg": {
+      "name": "jackspeak",
+      "version": "1.4.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~js-tokens@4.0.0",
+   "node_modules": {
+    "js-tokens": {
+     "pkg": {
+      "name": "js-tokens",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~js-yaml@3.15.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "argparse": {
+     "link": "../../~npm~argparse@1.0.10/node_modules/argparse"
+    },
+    "esprima": {
+     "link": "../../~npm~esprima@4.0.1/node_modules/esprima"
+    },
+    "js-yaml": {
+     "pkg": {
+      "name": "js-yaml",
+      "version": "3.15.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsbn@0.1.1",
+   "node_modules": {
+    "jsbn": {
+     "pkg": {
+      "name": "jsbn",
+      "version": "0.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsesc@3.1.0",
+   "node_modules": {
+    "jsesc": {
+     "pkg": {
+      "name": "jsesc",
+      "version": "3.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-schema-traverse@0.4.1",
+   "node_modules": {
+    "json-schema-traverse": {
+     "pkg": {
+      "name": "json-schema-traverse",
+      "version": "0.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-schema@0.4.0",
+   "node_modules": {
+    "json-schema": {
+     "pkg": {
+      "name": "json-schema",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-stringify-safe@5.0.1",
+   "node_modules": {
+    "json-stringify-safe": {
+     "pkg": {
+      "name": "json-stringify-safe",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json5@2.2.3",
+   "node_modules": {
+    "json5": {
+     "pkg": {
+      "name": "json5",
+      "version": "2.2.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsprim@1.4.2",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "extsprintf": {
+     "link": "../../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "json-schema": {
+     "link": "../../~npm~json-schema@0.4.0/node_modules/json-schema"
+    },
+    "jsprim": {
+     "pkg": {
+      "name": "jsprim",
+      "version": "1.4.2"
+     }
+    },
+    "verror": {
+     "link": "../../~npm~verror@1.10.0/node_modules/verror"
+    }
+   }
+  },
+  {
+   "id": "~npm~lcov-parse@1.0.0",
+   "node_modules": {
+    "lcov-parse": {
+     "pkg": {
+      "name": "lcov-parse",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~left-pad@1.1.3",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~left-pad@1.3.0",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~libtap@1.4.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "async-hook-domain": {
+     "link": "../../~npm~async-hook-domain@2.0.4/node_modules/async-hook-domain"
+    },
+    "bind-obj-methods": {
+     "link": "../../~npm~bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+    },
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "function-loop": {
+     "link": "../../~npm~function-loop@2.0.1/node_modules/function-loop"
+    },
+    "libtap": {
+     "pkg": {
+      "name": "libtap",
+      "version": "1.4.1"
+     }
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "own-or": {
+     "link": "../../~npm~own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "link": "../../~npm~own-or-env@1.0.2/node_modules/own-or-env"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "stack-utils": {
+     "link": "../../~npm~stack-utils@2.0.6/node_modules/stack-utils"
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../~npm~tcompare@5.0.7/node_modules/tcompare"
+    },
+    "trivial-deferred": {
+     "link": "../../~npm~trivial-deferred@1.1.2/node_modules/trivial-deferred"
+    }
+   }
+  },
+  {
+   "id": "~npm~locate-path@5.0.0",
+   "node_modules": {
+    "locate-path": {
+     "pkg": {
+      "name": "locate-path",
+      "version": "5.0.0"
+     }
+    },
+    "p-locate": {
+     "link": "../../~npm~p-locate@4.1.0/node_modules/p-locate"
+    }
+   }
+  },
+  {
+   "id": "~npm~lodash.flattendeep@4.4.0",
+   "node_modules": {
+    "lodash.flattendeep": {
+     "pkg": {
+      "name": "lodash.flattendeep",
+      "version": "4.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~log-driver@1.2.7",
+   "node_modules": {
+    "log-driver": {
+     "pkg": {
+      "name": "log-driver",
+      "version": "1.2.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~loose-envify@1.4.0",
+   "node_modules": {
+    "js-tokens": {
+     "link": "../../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "loose-envify": {
+     "pkg": {
+      "name": "loose-envify",
+      "version": "1.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~lru-cache@5.1.1",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "5.1.1"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@3.1.1/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~lru-cache@6.0.0",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "6.0.0"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~make-dir@3.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "3.1.0"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~make-dir@4.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "4.0.0"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@7.6.0/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~mime-db@1.52.0",
+   "node_modules": {
+    "mime-db": {
+     "pkg": {
+      "name": "mime-db",
+      "version": "1.52.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~mime-types@2.1.35",
+   "node_modules": {
+    "mime-db": {
+     "link": "../../~npm~mime-db@1.52.0/node_modules/mime-db"
+    },
+    "mime-types": {
+     "pkg": {
+      "name": "mime-types",
+      "version": "2.1.35"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minimatch@3.1.5",
+   "node_modules": {
+    "brace-expansion": {
+     "link": "../../~npm~brace-expansion@1.1.21/node_modules/brace-expansion"
+    },
+    "minimatch": {
+     "pkg": {
+      "name": "minimatch",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minimist@1.2.8",
+   "node_modules": {
+    "minimist": {
+     "pkg": {
+      "name": "minimist",
+      "version": "1.2.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minipass@3.3.6",
+   "node_modules": {
+    "minipass": {
+     "pkg": {
+      "name": "minipass",
+      "version": "3.3.6"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~mkdirp@1.0.4",
+   "node_modules": {
+    "mkdirp": {
+     "pkg": {
+      "name": "mkdirp",
+      "version": "1.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~node-preload@0.2.1",
+   "node_modules": {
+    "node-preload": {
+     "pkg": {
+      "name": "node-preload",
+      "version": "0.2.1"
+     }
+    },
+    "process-on-spawn": {
+     "link": "../../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    }
+   }
+  },
+  {
+   "id": "~npm~node-releases@2.0.57",
+   "node_modules": {
+    "node-releases": {
+     "pkg": {
+      "name": "node-releases",
+      "version": "2.0.57"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~normalize-path@3.0.0",
+   "node_modules": {
+    "normalize-path": {
+     "pkg": {
+      "name": "normalize-path",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~nyc@15.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "link": "../../../~npm~@istanbuljs+load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "caching-transform": {
+     "link": "../../~npm~caching-transform@4.0.0/node_modules/caching-transform"
+    },
+    "convert-source-map": {
+     "link": "../../~npm~convert-source-map@1.9.0/node_modules/convert-source-map"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-cache-dir": {
+     "link": "../../~npm~find-cache-dir@3.3.2/node_modules/find-cache-dir"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "get-package-type": {
+     "link": "../../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-hook": {
+     "link": "../../~npm~istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+    },
+    "istanbul-lib-instrument": {
+     "link": "../../~npm~istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "istanbul-lib-report": {
+     "link": "../../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-lib-source-maps": {
+     "link": "../../~npm~istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+    },
+    "istanbul-reports": {
+     "link": "../../~npm~istanbul-reports@3.2.0/node_modules/istanbul-reports"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "node-preload": {
+     "link": "../../~npm~node-preload@0.2.1/node_modules/node-preload"
+    },
+    "nyc": {
+     "pkg": {
+      "name": "nyc",
+      "version": "15.1.0"
+     }
+    },
+    "p-map": {
+     "link": "../../~npm~p-map@3.0.0/node_modules/p-map"
+    },
+    "process-on-spawn": {
+     "link": "../../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    },
+    "resolve-from": {
+     "link": "../../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "link": "../../~npm~spawn-wrap@2.0.0/node_modules/spawn-wrap"
+    },
+    "test-exclude": {
+     "link": "../../~npm~test-exclude@6.0.0/node_modules/test-exclude"
+    },
+    "yargs": {
+     "link": "../../~npm~yargs@15.4.1/node_modules/yargs"
+    }
+   }
+  },
+  {
+   "id": "~npm~oauth-sign@0.9.0",
+   "node_modules": {
+    "oauth-sign": {
+     "pkg": {
+      "name": "oauth-sign",
+      "version": "0.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~once@1.4.0",
+   "node_modules": {
+    "once": {
+     "pkg": {
+      "name": "once",
+      "version": "1.4.0"
+     }
+    },
+    "wrappy": {
+     "link": "../../~npm~wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "~npm~opener@1.5.2",
+   "node_modules": {
+    "opener": {
+     "pkg": {
+      "name": "opener",
+      "version": "1.5.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~own-or-env@1.0.2",
+   "node_modules": {
+    "own-or": {
+     "link": "../../~npm~own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "pkg": {
+      "name": "own-or-env",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~own-or@1.0.0",
+   "node_modules": {
+    "own-or": {
+     "pkg": {
+      "name": "own-or",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-limit@2.3.0",
+   "node_modules": {
+    "p-limit": {
+     "pkg": {
+      "name": "p-limit",
+      "version": "2.3.0"
+     }
+    },
+    "p-try": {
+     "link": "../../~npm~p-try@2.2.0/node_modules/p-try"
+    }
+   }
+  },
+  {
+   "id": "~npm~p-locate@4.1.0",
+   "node_modules": {
+    "p-limit": {
+     "link": "../../~npm~p-limit@2.3.0/node_modules/p-limit"
+    },
+    "p-locate": {
+     "pkg": {
+      "name": "p-locate",
+      "version": "4.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-map@3.0.0",
+   "node_modules": {
+    "aggregate-error": {
+     "link": "../../~npm~aggregate-error@3.1.0/node_modules/aggregate-error"
+    },
+    "p-map": {
+     "pkg": {
+      "name": "p-map",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-try@2.2.0",
+   "node_modules": {
+    "p-try": {
+     "pkg": {
+      "name": "p-try",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~package-hash@4.0.0",
+   "node_modules": {
+    "graceful-fs": {
+     "link": "../../~npm~graceful-fs@4.2.11/node_modules/graceful-fs"
+    },
+    "hasha": {
+     "link": "../../~npm~hasha@5.2.2/node_modules/hasha"
+    },
+    "lodash.flattendeep": {
+     "link": "../../~npm~lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+    },
+    "package-hash": {
+     "pkg": {
+      "name": "package-hash",
+      "version": "4.0.0"
+     }
+    },
+    "release-zalgo": {
+     "link": "../../~npm~release-zalgo@1.0.0/node_modules/release-zalgo"
+    }
+   }
+  },
+  {
+   "id": "~npm~path-exists@4.0.0",
+   "node_modules": {
+    "path-exists": {
+     "pkg": {
+      "name": "path-exists",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~path-is-absolute@1.0.1",
+   "node_modules": {
+    "path-is-absolute": {
+     "pkg": {
+      "name": "path-is-absolute",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~path-key@3.1.1",
+   "node_modules": {
+    "path-key": {
+     "pkg": {
+      "name": "path-key",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~performance-now@2.1.0",
+   "node_modules": {
+    "performance-now": {
+     "pkg": {
+      "name": "performance-now",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~picocolors@1.1.1",
+   "node_modules": {
+    "picocolors": {
+     "pkg": {
+      "name": "picocolors",
+      "version": "1.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~picomatch@2.3.2",
+   "node_modules": {
+    "picomatch": {
+     "pkg": {
+      "name": "picomatch",
+      "version": "2.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~pkg-dir@4.2.0",
+   "node_modules": {
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "pkg-dir": {
+     "pkg": {
+      "name": "pkg-dir",
+      "version": "4.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~process-on-spawn@1.1.0",
+   "node_modules": {
+    "fromentries": {
+     "link": "../../~npm~fromentries@1.3.2/node_modules/fromentries"
+    },
+    "process-on-spawn": {
+     "pkg": {
+      "name": "process-on-spawn",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~psl@1.15.0",
+   "node_modules": {
+    "psl": {
+     "pkg": {
+      "name": "psl",
+      "version": "1.15.0"
+     }
+    },
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    }
+   }
+  },
+  {
+   "id": "~npm~punycode@2.3.1",
+   "node_modules": {
+    "punycode": {
+     "pkg": {
+      "name": "punycode",
+      "version": "2.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~qs@6.5.5",
+   "node_modules": {
+    "qs": {
+     "pkg": {
+      "name": "qs",
+      "version": "6.5.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~react@18.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "18.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~readdirp@3.6.0",
+   "node_modules": {
+    "picomatch": {
+     "link": "../../~npm~picomatch@2.3.2/node_modules/picomatch"
+    },
+    "readdirp": {
+     "pkg": {
+      "name": "readdirp",
+      "version": "3.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~release-zalgo@1.0.0",
+   "node_modules": {
+    "es6-error": {
+     "link": "../../~npm~es6-error@4.1.1/node_modules/es6-error"
+    },
+    "release-zalgo": {
+     "pkg": {
+      "name": "release-zalgo",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~request@2.88.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "aws-sign2": {
+     "link": "../../~npm~aws-sign2@0.7.0/node_modules/aws-sign2"
+    },
+    "aws4": {
+     "link": "../../~npm~aws4@1.13.2/node_modules/aws4"
+    },
+    "caseless": {
+     "link": "../../~npm~caseless@0.12.0/node_modules/caseless"
+    },
+    "combined-stream": {
+     "link": "../../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "extend": {
+     "link": "../../~npm~extend@3.0.2/node_modules/extend"
+    },
+    "forever-agent": {
+     "link": "../../~npm~forever-agent@0.6.1/node_modules/forever-agent"
+    },
+    "form-data": {
+     "link": "../../~npm~form-data@2.3.3/node_modules/form-data"
+    },
+    "har-validator": {
+     "link": "../../~npm~har-validator@5.1.5/node_modules/har-validator"
+    },
+    "http-signature": {
+     "link": "../../~npm~http-signature@1.2.0/node_modules/http-signature"
+    },
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "isstream": {
+     "link": "../../~npm~isstream@0.1.2/node_modules/isstream"
+    },
+    "json-stringify-safe": {
+     "link": "../../~npm~json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+    },
+    "mime-types": {
+     "link": "../../~npm~mime-types@2.1.35/node_modules/mime-types"
+    },
+    "oauth-sign": {
+     "link": "../../~npm~oauth-sign@0.9.0/node_modules/oauth-sign"
+    },
+    "performance-now": {
+     "link": "../../~npm~performance-now@2.1.0/node_modules/performance-now"
+    },
+    "qs": {
+     "link": "../../~npm~qs@6.5.5/node_modules/qs"
+    },
+    "request": {
+     "pkg": {
+      "name": "request",
+      "version": "2.88.2"
+     }
+    },
+    "safe-buffer": {
+     "link": "../../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tough-cookie": {
+     "link": "../../~npm~tough-cookie@2.5.0/node_modules/tough-cookie"
+    },
+    "tunnel-agent": {
+     "link": "../../~npm~tunnel-agent@0.6.0/node_modules/tunnel-agent"
+    },
+    "uuid": {
+     "link": "../../~npm~uuid@3.4.0/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "~npm~require-directory@2.1.1",
+   "node_modules": {
+    "require-directory": {
+     "pkg": {
+      "name": "require-directory",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~require-main-filename@2.0.0",
+   "node_modules": {
+    "require-main-filename": {
+     "pkg": {
+      "name": "require-main-filename",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~resolve-from@5.0.0",
+   "node_modules": {
+    "resolve-from": {
+     "pkg": {
+      "name": "resolve-from",
+      "version": "5.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~rimraf@3.0.2",
+   "node_modules": {
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "rimraf": {
+     "pkg": {
+      "name": "rimraf",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~safe-buffer@5.2.1",
+   "node_modules": {
+    "safe-buffer": {
+     "pkg": {
+      "name": "safe-buffer",
+      "version": "5.2.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~safer-buffer@2.1.2",
+   "node_modules": {
+    "safer-buffer": {
+     "pkg": {
+      "name": "safer-buffer",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~semver@6.3.1",
+   "node_modules": {
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "6.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~semver@7.6.0",
+   "node_modules": {
+    "lru-cache": {
+     "link": "../../~npm~lru-cache@6.0.0/node_modules/lru-cache"
+    },
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "7.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~set-blocking@2.0.0",
+   "node_modules": {
+    "set-blocking": {
+     "pkg": {
+      "name": "set-blocking",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~shebang-command@2.0.0",
+   "node_modules": {
+    "shebang-command": {
+     "pkg": {
+      "name": "shebang-command",
+      "version": "2.0.0"
+     }
+    },
+    "shebang-regex": {
+     "link": "../../~npm~shebang-regex@3.0.0/node_modules/shebang-regex"
+    }
+   }
+  },
+  {
+   "id": "~npm~shebang-regex@3.0.0",
+   "node_modules": {
+    "shebang-regex": {
+     "pkg": {
+      "name": "shebang-regex",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~signal-exit@3.0.7",
+   "node_modules": {
+    "signal-exit": {
+     "pkg": {
+      "name": "signal-exit",
+      "version": "3.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~source-map-support@0.5.21",
+   "node_modules": {
+    "buffer-from": {
+     "link": "../../~npm~buffer-from@1.1.2/node_modules/buffer-from"
+    },
+    "source-map": {
+     "link": "../../~npm~source-map@0.6.1/node_modules/source-map"
+    },
+    "source-map-support": {
+     "pkg": {
+      "name": "source-map-support",
+      "version": "0.5.21"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~source-map@0.6.1",
+   "node_modules": {
+    "source-map": {
+     "pkg": {
+      "name": "source-map",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~spawn-wrap@2.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "is-windows": {
+     "link": "../../~npm~is-windows@1.0.2/node_modules/is-windows"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "pkg": {
+      "name": "spawn-wrap",
+      "version": "2.0.0"
+     }
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~sprintf-js@1.0.3",
+   "node_modules": {
+    "sprintf-js": {
+     "pkg": {
+      "name": "sprintf-js",
+      "version": "1.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~sshpk@1.18.0",
+   "node_modules": {
+    "asn1": {
+     "link": "../../~npm~asn1@0.2.6/node_modules/asn1"
+    },
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "bcrypt-pbkdf": {
+     "link": "../../~npm~bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+    },
+    "dashdash": {
+     "link": "../../~npm~dashdash@1.14.1/node_modules/dashdash"
+    },
+    "ecc-jsbn": {
+     "link": "../../~npm~ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+    },
+    "getpass": {
+     "link": "../../~npm~getpass@0.1.7/node_modules/getpass"
+    },
+    "jsbn": {
+     "link": "../../~npm~jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    },
+    "sshpk": {
+     "pkg": {
+      "name": "sshpk",
+      "version": "1.18.0"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "~npm~stack-utils@2.0.6",
+   "node_modules": {
+    "escape-string-regexp": {
+     "link": "../../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "stack-utils": {
+     "pkg": {
+      "name": "stack-utils",
+      "version": "2.0.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~string-width@4.2.3",
+   "node_modules": {
+    "emoji-regex": {
+     "link": "../../~npm~emoji-regex@8.0.0/node_modules/emoji-regex"
+    },
+    "is-fullwidth-code-point": {
+     "link": "../../~npm~is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+    },
+    "string-width": {
+     "pkg": {
+      "name": "string-width",
+      "version": "4.2.3"
+     }
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~strip-ansi@6.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "link": "../../~npm~ansi-regex@5.0.1/node_modules/ansi-regex"
+    },
+    "strip-ansi": {
+     "pkg": {
+      "name": "strip-ansi",
+      "version": "6.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~strip-bom@4.0.0",
+   "node_modules": {
+    "strip-bom": {
+     "pkg": {
+      "name": "strip-bom",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~supports-color@7.2.0",
+   "node_modules": {
+    "has-flag": {
+     "link": "../../~npm~has-flag@4.0.0/node_modules/has-flag"
+    },
+    "supports-color": {
+     "pkg": {
+      "name": "supports-color",
+      "version": "7.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-mocha-reporter@5.0.4",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "color-support": {
+     "link": "../../~npm~color-support@1.1.3/node_modules/color-support"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "escape-string-regexp": {
+     "link": "../../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "tap-mocha-reporter": {
+     "pkg": {
+      "name": "tap-mocha-reporter",
+      "version": "5.0.4"
+     }
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "unicode-length": {
+     "link": "../../~npm~unicode-length@2.1.0/node_modules/unicode-length"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-parser@11.0.2",
+   "node_modules": {
+    "events-to-array": {
+     "link": "../../~npm~events-to-array@1.1.2/node_modules/events-to-array"
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "tap-parser": {
+     "pkg": {
+      "name": "tap-parser",
+      "version": "11.0.2"
+     }
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-yaml@1.0.2",
+   "node_modules": {
+    "tap-yaml": {
+     "pkg": {
+      "name": "tap-yaml",
+      "version": "1.0.2"
+     }
+    },
+    "yaml": {
+     "link": "../../~npm~yaml@1.10.3/node_modules/yaml"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "chokidar": {
+     "link": "../../~npm~chokidar@3.6.0/node_modules/chokidar"
+    },
+    "coveralls": {
+     "link": "../../~npm~coveralls@3.1.1/node_modules/coveralls"
+    },
+    "findit": {
+     "link": "../../~npm~findit@2.0.0/node_modules/findit"
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "fs-exists-cached": {
+     "link": "../../~npm~fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "isexe": {
+     "link": "../../~npm~isexe@2.0.0/node_modules/isexe"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "jackspeak": {
+     "link": "../../~npm~jackspeak@1.4.2/node_modules/jackspeak"
+    },
+    "libtap": {
+     "link": "../../~npm~libtap@1.4.1/node_modules/libtap"
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "mkdirp": {
+     "link": "../../~npm~mkdirp@1.0.4/node_modules/mkdirp"
+    },
+    "nyc": {
+     "link": "../../~npm~nyc@15.1.0/node_modules/nyc"
+    },
+    "opener": {
+     "link": "../../~npm~opener@1.5.2/node_modules/opener"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "source-map-support": {
+     "link": "../../~npm~source-map-support@0.5.21/node_modules/source-map-support"
+    },
+    "tap": {
+     "pkg": {
+      "name": "tap",
+      "version": "15.2.3"
+     }
+    },
+    "tap-mocha-reporter": {
+     "link": "../../~npm~tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../~npm~tcompare@5.0.7/node_modules/tcompare"
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~tcompare@5.0.7",
+   "node_modules": {
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "tcompare": {
+     "pkg": {
+      "name": "tcompare",
+      "version": "5.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~test-exclude@6.0.0",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "minimatch": {
+     "link": "../../~npm~minimatch@3.1.5/node_modules/minimatch"
+    },
+    "test-exclude": {
+     "pkg": {
+      "name": "test-exclude",
+      "version": "6.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~to-regex-range@5.0.1",
+   "node_modules": {
+    "is-number": {
+     "link": "../../~npm~is-number@7.0.0/node_modules/is-number"
+    },
+    "to-regex-range": {
+     "pkg": {
+      "name": "to-regex-range",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tough-cookie@2.5.0",
+   "node_modules": {
+    "psl": {
+     "link": "../../~npm~psl@1.15.0/node_modules/psl"
+    },
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "tough-cookie": {
+     "pkg": {
+      "name": "tough-cookie",
+      "version": "2.5.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~trivial-deferred@1.1.2",
+   "node_modules": {
+    "trivial-deferred": {
+     "pkg": {
+      "name": "trivial-deferred",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tunnel-agent@0.6.0",
+   "node_modules": {
+    "safe-buffer": {
+     "link": "../../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tunnel-agent": {
+     "pkg": {
+      "name": "tunnel-agent",
+      "version": "0.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tweetnacl@0.14.5",
+   "node_modules": {
+    "tweetnacl": {
+     "pkg": {
+      "name": "tweetnacl",
+      "version": "0.14.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~type-fest@0.8.1",
+   "node_modules": {
+    "type-fest": {
+     "pkg": {
+      "name": "type-fest",
+      "version": "0.8.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~typedarray-to-buffer@3.1.5",
+   "node_modules": {
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "typedarray-to-buffer": {
+     "pkg": {
+      "name": "typedarray-to-buffer",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~unicode-length@2.1.0",
+   "node_modules": {
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "unicode-length": {
+     "pkg": {
+      "name": "unicode-length",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "browserslist": {
+     "link": "../../~npm~browserslist@4.29.1/node_modules/browserslist"
+    },
+    "escalade": {
+     "link": "../../~npm~escalade@3.2.0/node_modules/escalade"
+    },
+    "picocolors": {
+     "link": "../../~npm~picocolors@1.1.1/node_modules/picocolors"
+    },
+    "update-browserslist-db": {
+     "pkg": {
+      "name": "update-browserslist-db",
+      "version": "1.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uri-js@4.4.1",
+   "node_modules": {
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "uri-js": {
+     "pkg": {
+      "name": "uri-js",
+      "version": "4.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+   "node_modules": {
+    "react": {
+     "link": "../../~npm~react@18.2.0/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uuid@3.4.0",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "3.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uuid@8.3.2",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "8.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~verror@1.10.0",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "core-util-is": {
+     "link": "../../~npm~core-util-is@1.0.2/node_modules/core-util-is"
+    },
+    "extsprintf": {
+     "link": "../../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "verror": {
+     "pkg": {
+      "name": "verror",
+      "version": "1.10.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~which-module@2.0.1",
+   "node_modules": {
+    "which-module": {
+     "pkg": {
+      "name": "which-module",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~which@2.0.2",
+   "node_modules": {
+    "isexe": {
+     "link": "../../~npm~isexe@2.0.0/node_modules/isexe"
+    },
+    "which": {
+     "pkg": {
+      "name": "which",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrap-ansi@6.2.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "6.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrap-ansi@7.0.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrappy@1.0.2",
+   "node_modules": {
+    "wrappy": {
+     "pkg": {
+      "name": "wrappy",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~write-file-atomic@3.0.3",
+   "node_modules": {
+    "imurmurhash": {
+     "link": "../../~npm~imurmurhash@0.1.4/node_modules/imurmurhash"
+    },
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "typedarray-to-buffer": {
+     "link": "../../~npm~typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+    },
+    "write-file-atomic": {
+     "pkg": {
+      "name": "write-file-atomic",
+      "version": "3.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~y18n@4.0.3",
+   "node_modules": {
+    "y18n": {
+     "pkg": {
+      "name": "y18n",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yallist@3.1.1",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yallist@4.0.0",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yaml@1.10.3",
+   "node_modules": {
+    "yaml": {
+     "pkg": {
+      "name": "yaml",
+      "version": "1.10.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yargs-parser@18.1.3",
+   "node_modules": {
+    "camelcase": {
+     "link": "../../~npm~camelcase@5.3.1/node_modules/camelcase"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "yargs-parser": {
+     "pkg": {
+      "name": "yargs-parser",
+      "version": "18.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yargs@15.4.1",
+   "node_modules": {
+    "cliui": {
+     "link": "../../~npm~cliui@6.0.0/node_modules/cliui"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "get-caller-file": {
+     "link": "../../~npm~get-caller-file@2.0.5/node_modules/get-caller-file"
+    },
+    "require-directory": {
+     "link": "../../~npm~require-directory@2.1.1/node_modules/require-directory"
+    },
+    "require-main-filename": {
+     "link": "../../~npm~require-main-filename@2.0.0/node_modules/require-main-filename"
+    },
+    "set-blocking": {
+     "link": "../../~npm~set-blocking@2.0.0/node_modules/set-blocking"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "which-module": {
+     "link": "../../~npm~which-module@2.0.1/node_modules/which-module"
+    },
+    "y18n": {
+     "link": "../../~npm~y18n@4.0.3/node_modules/y18n"
+    },
+    "yargs": {
+     "pkg": {
+      "name": "yargs",
+      "version": "15.4.1"
+     }
+    },
+    "yargs-parser": {
+     "link": "../../~npm~yargs-parser@18.1.3/node_modules/yargs-parser"
+    }
+   }
+  }
+ ],
+ "importers": {
+  ".bin": {
+   "dir": true
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../.vlt/~npm~@isaacs+string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "debug": {
+   "link": ".vlt/~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+  },
+  "left-pad": {
+   "link": ".vlt/~npm~left-pad@1.3.0/node_modules/left-pad"
+  },
+  "localdir": {
+   "link": "../vendor/localdir"
+  },
+  "lp-alias": {
+   "link": ".vlt/~npm~left-pad@1.1.3/node_modules/left-pad"
+  },
+  "lp-remote": {
+   "link": ".vlt/remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz/node_modules/left-pad"
+  },
+  "ms-tgz": {
+   "link": ".vlt/file~vendor+ms-2.1.2.tgz/node_modules/ms"
+  },
+  "react": {
+   "link": ".vlt/~npm~react@18.2.0/node_modules/react"
+  },
+  "semver_x": {
+   "link": ".vlt/~npm~semver@7.6.0/node_modules/semver"
+  },
+  "slc-git": {
+   "link": ".vlt/git~git_phttps_c++github.com+isaacs+string-locale-compare.git~v1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "use-sync-external-store": {
+   "link": ".vlt/~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba/node_modules/use-sync-external-store"
+  }
+ },
+ "members": {},
+ "linkTargets": {
+  "vendor/localdir": {
+   "name": "localdir",
+   "version": "1.3.0"
+  }
+ }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/README.md b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/README.md
new file mode 100644
index 00000000..813f0958
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/README.md
@@ -0,0 +1,21 @@
+# vlt 1.2.0 installed layout
+
+`listing.json` is the on-disk layout real vlt 1.2.0 produced, captured with
+`scripts/capture-vlt-tree.mjs` right after a cold `vlt install` (isolated
+XDG dirs and VLT_CACHE, VLT_TELEMETRY=0, LANG=C, no lockfile). Store entry
+names are byte-exact; the crawler tests in `crawler_npm_e2e.rs` stage the
+listing as real directories, package.json files and relative symlinks.
+
+Project (`package.json` dependencies):
+
+- "left-pad": "1.3.0", "debug": "4.3.4", "@isaacs/string-locale-compare": "1.1.0"
+- "react": "18.2.0", "use-sync-external-store": "1.2.0"
+- "lp-alias": "npm:left-pad@1.1.3", "semver_x": "npm:semver@7.6.0"
+- "slc-git": "github:isaacs/string-locale-compare#v1.1.0"
+- "lp-remote": "https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz"
+- "ms-tgz": "file:./vendor/ms-2.1.2.tgz"
+- "localdir": "file:./vendor/localdir" (a left-pad@1.3.0 copy renamed localdir)
+
+`vlt.json`: `{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}`.
+
+The git dependency's devDependencies account for most store entries.
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/listing.json b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/listing.json
new file mode 100644
index 00000000..fb88c724
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-trees/1.2.0/listing.json
@@ -0,0 +1,4596 @@
+{
+ "vlt": "1.2.0",
+ "lockfileVersion": 1,
+ "storeFiles": [
+  "vlt.json"
+ ],
+ "hoist": {
+  "@babel/code-frame": {
+   "link": "../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+  },
+  "@babel/compat-data": {
+   "link": "../../~npm~@babel+compat-data@7.29.7/node_modules/@babel/compat-data"
+  },
+  "@babel/core": {
+   "link": "../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+  },
+  "@babel/generator": {
+   "link": "../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+  },
+  "@babel/helper-compilation-targets": {
+   "link": "../../~npm~@babel+helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+  },
+  "@babel/helper-globals": {
+   "link": "../../~npm~@babel+helper-globals@7.29.7/node_modules/@babel/helper-globals"
+  },
+  "@babel/helper-module-imports": {
+   "link": "../../~npm~@babel+helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+  },
+  "@babel/helper-module-transforms": {
+   "link": "../../~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8/node_modules/@babel/helper-module-transforms"
+  },
+  "@babel/helper-string-parser": {
+   "link": "../../~npm~@babel+helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+  },
+  "@babel/helper-validator-identifier": {
+   "link": "../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+  },
+  "@babel/helper-validator-option": {
+   "link": "../../~npm~@babel+helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+  },
+  "@babel/helpers": {
+   "link": "../../~npm~@babel+helpers@7.29.7/node_modules/@babel/helpers"
+  },
+  "@babel/parser": {
+   "link": "../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+  },
+  "@babel/template": {
+   "link": "../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+  },
+  "@babel/traverse": {
+   "link": "../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+  },
+  "@babel/types": {
+   "link": "../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../../~npm~@isaacs+string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "@istanbuljs/load-nyc-config": {
+   "link": "../../~npm~@istanbuljs+load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+  },
+  "@istanbuljs/schema": {
+   "link": "../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+  },
+  "@jridgewell/gen-mapping": {
+   "link": "../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+  },
+  "@jridgewell/remapping": {
+   "link": "../../~npm~@jridgewell+remapping@2.3.5/node_modules/@jridgewell/remapping"
+  },
+  "@jridgewell/resolve-uri": {
+   "link": "../../~npm~@jridgewell+resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+  },
+  "@jridgewell/sourcemap-codec": {
+   "link": "../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+  },
+  "@jridgewell/trace-mapping": {
+   "link": "../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+  },
+  "aggregate-error": {
+   "link": "../~npm~aggregate-error@3.1.0/node_modules/aggregate-error"
+  },
+  "ajv": {
+   "link": "../~npm~ajv@6.15.0/node_modules/ajv"
+  },
+  "ansi-regex": {
+   "link": "../~npm~ansi-regex@5.0.1/node_modules/ansi-regex"
+  },
+  "ansi-styles": {
+   "link": "../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+  },
+  "anymatch": {
+   "link": "../~npm~anymatch@3.1.3/node_modules/anymatch"
+  },
+  "append-transform": {
+   "link": "../~npm~append-transform@2.0.0/node_modules/append-transform"
+  },
+  "archy": {
+   "link": "../~npm~archy@1.0.0/node_modules/archy"
+  },
+  "argparse": {
+   "link": "../~npm~argparse@1.0.10/node_modules/argparse"
+  },
+  "asn1": {
+   "link": "../~npm~asn1@0.2.6/node_modules/asn1"
+  },
+  "assert-plus": {
+   "link": "../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+  },
+  "async-hook-domain": {
+   "link": "../~npm~async-hook-domain@2.0.4/node_modules/async-hook-domain"
+  },
+  "asynckit": {
+   "link": "../~npm~asynckit@0.4.0/node_modules/asynckit"
+  },
+  "aws-sign2": {
+   "link": "../~npm~aws-sign2@0.7.0/node_modules/aws-sign2"
+  },
+  "aws4": {
+   "link": "../~npm~aws4@1.13.2/node_modules/aws4"
+  },
+  "balanced-match": {
+   "link": "../~npm~balanced-match@1.0.2/node_modules/balanced-match"
+  },
+  "baseline-browser-mapping": {
+   "link": "../~npm~baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+  },
+  "bcrypt-pbkdf": {
+   "link": "../~npm~bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+  },
+  "binary-extensions": {
+   "link": "../~npm~binary-extensions@2.3.0/node_modules/binary-extensions"
+  },
+  "bind-obj-methods": {
+   "link": "../~npm~bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+  },
+  "brace-expansion": {
+   "link": "../~npm~brace-expansion@1.1.21/node_modules/brace-expansion"
+  },
+  "braces": {
+   "link": "../~npm~braces@3.0.3/node_modules/braces"
+  },
+  "browserslist": {
+   "link": "../~npm~browserslist@4.29.1/node_modules/browserslist"
+  },
+  "buffer-from": {
+   "link": "../~npm~buffer-from@1.1.2/node_modules/buffer-from"
+  },
+  "caching-transform": {
+   "link": "../~npm~caching-transform@4.0.0/node_modules/caching-transform"
+  },
+  "camelcase": {
+   "link": "../~npm~camelcase@5.3.1/node_modules/camelcase"
+  },
+  "caniuse-lite": {
+   "link": "../~npm~caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+  },
+  "caseless": {
+   "link": "../~npm~caseless@0.12.0/node_modules/caseless"
+  },
+  "chokidar": {
+   "link": "../~npm~chokidar@3.6.0/node_modules/chokidar"
+  },
+  "clean-stack": {
+   "link": "../~npm~clean-stack@2.2.0/node_modules/clean-stack"
+  },
+  "cliui": {
+   "link": "../~npm~cliui@7.0.4/node_modules/cliui"
+  },
+  "color-convert": {
+   "link": "../~npm~color-convert@2.0.1/node_modules/color-convert"
+  },
+  "color-name": {
+   "link": "../~npm~color-name@1.1.4/node_modules/color-name"
+  },
+  "color-support": {
+   "link": "../~npm~color-support@1.1.3/node_modules/color-support"
+  },
+  "combined-stream": {
+   "link": "../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+  },
+  "commondir": {
+   "link": "../~npm~commondir@1.0.1/node_modules/commondir"
+  },
+  "concat-map": {
+   "link": "../~npm~concat-map@0.0.1/node_modules/concat-map"
+  },
+  "convert-source-map": {
+   "link": "../~npm~convert-source-map@2.0.0/node_modules/convert-source-map"
+  },
+  "core-util-is": {
+   "link": "../~npm~core-util-is@1.0.2/node_modules/core-util-is"
+  },
+  "coveralls": {
+   "link": "../~npm~coveralls@3.1.1/node_modules/coveralls"
+  },
+  "cross-spawn": {
+   "link": "../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+  },
+  "dashdash": {
+   "link": "../~npm~dashdash@1.14.1/node_modules/dashdash"
+  },
+  "debug": {
+   "link": "../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+  },
+  "decamelize": {
+   "link": "../~npm~decamelize@1.2.0/node_modules/decamelize"
+  },
+  "default-require-extensions": {
+   "link": "../~npm~default-require-extensions@3.0.1/node_modules/default-require-extensions"
+  },
+  "delayed-stream": {
+   "link": "../~npm~delayed-stream@1.0.0/node_modules/delayed-stream"
+  },
+  "diff": {
+   "link": "../~npm~diff@4.0.4/node_modules/diff"
+  },
+  "ecc-jsbn": {
+   "link": "../~npm~ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+  },
+  "electron-to-chromium": {
+   "link": "../~npm~electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+  },
+  "emoji-regex": {
+   "link": "../~npm~emoji-regex@8.0.0/node_modules/emoji-regex"
+  },
+  "es6-error": {
+   "link": "../~npm~es6-error@4.1.1/node_modules/es6-error"
+  },
+  "escalade": {
+   "link": "../~npm~escalade@3.2.0/node_modules/escalade"
+  },
+  "escape-string-regexp": {
+   "link": "../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+  },
+  "esprima": {
+   "link": "../~npm~esprima@4.0.1/node_modules/esprima"
+  },
+  "events-to-array": {
+   "link": "../~npm~events-to-array@1.1.2/node_modules/events-to-array"
+  },
+  "extend": {
+   "link": "../~npm~extend@3.0.2/node_modules/extend"
+  },
+  "extsprintf": {
+   "link": "../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+  },
+  "fast-deep-equal": {
+   "link": "../~npm~fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+  },
+  "fast-json-stable-stringify": {
+   "link": "../~npm~fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+  },
+  "fill-range": {
+   "link": "../~npm~fill-range@7.1.1/node_modules/fill-range"
+  },
+  "find-cache-dir": {
+   "link": "../~npm~find-cache-dir@3.3.2/node_modules/find-cache-dir"
+  },
+  "find-up": {
+   "link": "../~npm~find-up@4.1.0/node_modules/find-up"
+  },
+  "findit": {
+   "link": "../~npm~findit@2.0.0/node_modules/findit"
+  },
+  "foreground-child": {
+   "link": "../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+  },
+  "forever-agent": {
+   "link": "../~npm~forever-agent@0.6.1/node_modules/forever-agent"
+  },
+  "form-data": {
+   "link": "../~npm~form-data@2.3.3/node_modules/form-data"
+  },
+  "fromentries": {
+   "link": "../~npm~fromentries@1.3.2/node_modules/fromentries"
+  },
+  "fs-exists-cached": {
+   "link": "../~npm~fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+  },
+  "fs.realpath": {
+   "link": "../~npm~fs.realpath@1.0.0/node_modules/fs.realpath"
+  },
+  "fsevents": {
+   "link": "../~npm~fsevents@2.3.3/node_modules/fsevents"
+  },
+  "function-loop": {
+   "link": "../~npm~function-loop@2.0.1/node_modules/function-loop"
+  },
+  "gensync": {
+   "link": "../~npm~gensync@1.0.0-beta.2/node_modules/gensync"
+  },
+  "get-caller-file": {
+   "link": "../~npm~get-caller-file@2.0.5/node_modules/get-caller-file"
+  },
+  "get-package-type": {
+   "link": "../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+  },
+  "getpass": {
+   "link": "../~npm~getpass@0.1.7/node_modules/getpass"
+  },
+  "glob": {
+   "link": "../~npm~glob@7.2.3/node_modules/glob"
+  },
+  "glob-parent": {
+   "link": "../~npm~glob-parent@5.1.2/node_modules/glob-parent"
+  },
+  "graceful-fs": {
+   "link": "../~npm~graceful-fs@4.2.11/node_modules/graceful-fs"
+  },
+  "har-schema": {
+   "link": "../~npm~har-schema@2.0.0/node_modules/har-schema"
+  },
+  "har-validator": {
+   "link": "../~npm~har-validator@5.1.5/node_modules/har-validator"
+  },
+  "has-flag": {
+   "link": "../~npm~has-flag@4.0.0/node_modules/has-flag"
+  },
+  "hasha": {
+   "link": "../~npm~hasha@5.2.2/node_modules/hasha"
+  },
+  "html-escaper": {
+   "link": "../~npm~html-escaper@2.0.2/node_modules/html-escaper"
+  },
+  "http-signature": {
+   "link": "../~npm~http-signature@1.2.0/node_modules/http-signature"
+  },
+  "imurmurhash": {
+   "link": "../~npm~imurmurhash@0.1.4/node_modules/imurmurhash"
+  },
+  "indent-string": {
+   "link": "../~npm~indent-string@4.0.0/node_modules/indent-string"
+  },
+  "inflight": {
+   "link": "../~npm~inflight@1.0.6/node_modules/inflight"
+  },
+  "inherits": {
+   "link": "../~npm~inherits@2.0.4/node_modules/inherits"
+  },
+  "is-binary-path": {
+   "link": "../~npm~is-binary-path@2.1.0/node_modules/is-binary-path"
+  },
+  "is-extglob": {
+   "link": "../~npm~is-extglob@2.1.1/node_modules/is-extglob"
+  },
+  "is-fullwidth-code-point": {
+   "link": "../~npm~is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+  },
+  "is-glob": {
+   "link": "../~npm~is-glob@4.0.3/node_modules/is-glob"
+  },
+  "is-number": {
+   "link": "../~npm~is-number@7.0.0/node_modules/is-number"
+  },
+  "is-stream": {
+   "link": "../~npm~is-stream@2.0.1/node_modules/is-stream"
+  },
+  "is-typedarray": {
+   "link": "../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+  },
+  "is-windows": {
+   "link": "../~npm~is-windows@1.0.2/node_modules/is-windows"
+  },
+  "isexe": {
+   "link": "../~npm~isexe@2.0.0/node_modules/isexe"
+  },
+  "isstream": {
+   "link": "../~npm~isstream@0.1.2/node_modules/isstream"
+  },
+  "istanbul-lib-coverage": {
+   "link": "../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+  },
+  "istanbul-lib-hook": {
+   "link": "../~npm~istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+  },
+  "istanbul-lib-instrument": {
+   "link": "../~npm~istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+  },
+  "istanbul-lib-processinfo": {
+   "link": "../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+  },
+  "istanbul-lib-report": {
+   "link": "../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+  },
+  "istanbul-lib-source-maps": {
+   "link": "../~npm~istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+  },
+  "istanbul-reports": {
+   "link": "../~npm~istanbul-reports@3.2.0/node_modules/istanbul-reports"
+  },
+  "jackspeak": {
+   "link": "../~npm~jackspeak@1.4.2/node_modules/jackspeak"
+  },
+  "js-tokens": {
+   "link": "../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+  },
+  "js-yaml": {
+   "link": "../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+  },
+  "jsbn": {
+   "link": "../~npm~jsbn@0.1.1/node_modules/jsbn"
+  },
+  "jsesc": {
+   "link": "../~npm~jsesc@3.1.0/node_modules/jsesc"
+  },
+  "json-schema": {
+   "link": "../~npm~json-schema@0.4.0/node_modules/json-schema"
+  },
+  "json-schema-traverse": {
+   "link": "../~npm~json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+  },
+  "json-stringify-safe": {
+   "link": "../~npm~json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+  },
+  "json5": {
+   "link": "../~npm~json5@2.2.3/node_modules/json5"
+  },
+  "jsprim": {
+   "link": "../~npm~jsprim@1.4.2/node_modules/jsprim"
+  },
+  "lcov-parse": {
+   "link": "../~npm~lcov-parse@1.0.0/node_modules/lcov-parse"
+  },
+  "left-pad": {
+   "link": "../~npm~left-pad@1.3.0/node_modules/left-pad"
+  },
+  "libtap": {
+   "link": "../~npm~libtap@1.4.1/node_modules/libtap"
+  },
+  "locate-path": {
+   "link": "../~npm~locate-path@5.0.0/node_modules/locate-path"
+  },
+  "lodash.flattendeep": {
+   "link": "../~npm~lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+  },
+  "log-driver": {
+   "link": "../~npm~log-driver@1.2.7/node_modules/log-driver"
+  },
+  "loose-envify": {
+   "link": "../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+  },
+  "lru-cache": {
+   "link": "../~npm~lru-cache@6.0.0/node_modules/lru-cache"
+  },
+  "make-dir": {
+   "link": "../~npm~make-dir@4.0.0/node_modules/make-dir"
+  },
+  "mime-db": {
+   "link": "../~npm~mime-db@1.52.0/node_modules/mime-db"
+  },
+  "mime-types": {
+   "link": "../~npm~mime-types@2.1.35/node_modules/mime-types"
+  },
+  "minimatch": {
+   "link": "../~npm~minimatch@3.1.5/node_modules/minimatch"
+  },
+  "minimist": {
+   "link": "../~npm~minimist@1.2.8/node_modules/minimist"
+  },
+  "minipass": {
+   "link": "../~npm~minipass@3.3.6/node_modules/minipass"
+  },
+  "mkdirp": {
+   "link": "../~npm~mkdirp@1.0.4/node_modules/mkdirp"
+  },
+  "ms-tgz": {
+   "link": "../file~vendor+ms-2.1.2.tgz/node_modules/ms"
+  },
+  "node-preload": {
+   "link": "../~npm~node-preload@0.2.1/node_modules/node-preload"
+  },
+  "node-releases": {
+   "link": "../~npm~node-releases@2.0.57/node_modules/node-releases"
+  },
+  "normalize-path": {
+   "link": "../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+  },
+  "nyc": {
+   "link": "../~npm~nyc@15.1.0/node_modules/nyc"
+  },
+  "oauth-sign": {
+   "link": "../~npm~oauth-sign@0.9.0/node_modules/oauth-sign"
+  },
+  "once": {
+   "link": "../~npm~once@1.4.0/node_modules/once"
+  },
+  "opener": {
+   "link": "../~npm~opener@1.5.2/node_modules/opener"
+  },
+  "own-or": {
+   "link": "../~npm~own-or@1.0.0/node_modules/own-or"
+  },
+  "own-or-env": {
+   "link": "../~npm~own-or-env@1.0.2/node_modules/own-or-env"
+  },
+  "p-limit": {
+   "link": "../~npm~p-limit@2.3.0/node_modules/p-limit"
+  },
+  "p-locate": {
+   "link": "../~npm~p-locate@4.1.0/node_modules/p-locate"
+  },
+  "p-map": {
+   "link": "../~npm~p-map@3.0.0/node_modules/p-map"
+  },
+  "p-try": {
+   "link": "../~npm~p-try@2.2.0/node_modules/p-try"
+  },
+  "package-hash": {
+   "link": "../~npm~package-hash@4.0.0/node_modules/package-hash"
+  },
+  "path-exists": {
+   "link": "../~npm~path-exists@4.0.0/node_modules/path-exists"
+  },
+  "path-is-absolute": {
+   "link": "../~npm~path-is-absolute@1.0.1/node_modules/path-is-absolute"
+  },
+  "path-key": {
+   "link": "../~npm~path-key@3.1.1/node_modules/path-key"
+  },
+  "performance-now": {
+   "link": "../~npm~performance-now@2.1.0/node_modules/performance-now"
+  },
+  "picocolors": {
+   "link": "../~npm~picocolors@1.1.1/node_modules/picocolors"
+  },
+  "picomatch": {
+   "link": "../~npm~picomatch@2.3.2/node_modules/picomatch"
+  },
+  "pkg-dir": {
+   "link": "../~npm~pkg-dir@4.2.0/node_modules/pkg-dir"
+  },
+  "process-on-spawn": {
+   "link": "../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+  },
+  "psl": {
+   "link": "../~npm~psl@1.15.0/node_modules/psl"
+  },
+  "punycode": {
+   "link": "../~npm~punycode@2.3.1/node_modules/punycode"
+  },
+  "qs": {
+   "link": "../~npm~qs@6.5.5/node_modules/qs"
+  },
+  "react": {
+   "link": "../~npm~react@18.2.0/node_modules/react"
+  },
+  "readdirp": {
+   "link": "../~npm~readdirp@3.6.0/node_modules/readdirp"
+  },
+  "release-zalgo": {
+   "link": "../~npm~release-zalgo@1.0.0/node_modules/release-zalgo"
+  },
+  "request": {
+   "link": "../~npm~request@2.88.2/node_modules/request"
+  },
+  "require-directory": {
+   "link": "../~npm~require-directory@2.1.1/node_modules/require-directory"
+  },
+  "require-main-filename": {
+   "link": "../~npm~require-main-filename@2.0.0/node_modules/require-main-filename"
+  },
+  "resolve-from": {
+   "link": "../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+  },
+  "rimraf": {
+   "link": "../~npm~rimraf@3.0.2/node_modules/rimraf"
+  },
+  "safe-buffer": {
+   "link": "../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+  },
+  "safer-buffer": {
+   "link": "../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+  },
+  "semver_x": {
+   "link": "../~npm~semver@7.6.0/node_modules/semver"
+  },
+  "set-blocking": {
+   "link": "../~npm~set-blocking@2.0.0/node_modules/set-blocking"
+  },
+  "shebang-command": {
+   "link": "../~npm~shebang-command@2.0.0/node_modules/shebang-command"
+  },
+  "shebang-regex": {
+   "link": "../~npm~shebang-regex@3.0.0/node_modules/shebang-regex"
+  },
+  "signal-exit": {
+   "link": "../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+  },
+  "source-map": {
+   "link": "../~npm~source-map@0.6.1/node_modules/source-map"
+  },
+  "source-map-support": {
+   "link": "../~npm~source-map-support@0.5.21/node_modules/source-map-support"
+  },
+  "spawn-wrap": {
+   "link": "../~npm~spawn-wrap@2.0.0/node_modules/spawn-wrap"
+  },
+  "sprintf-js": {
+   "link": "../~npm~sprintf-js@1.0.3/node_modules/sprintf-js"
+  },
+  "sshpk": {
+   "link": "../~npm~sshpk@1.18.0/node_modules/sshpk"
+  },
+  "stack-utils": {
+   "link": "../~npm~stack-utils@2.0.6/node_modules/stack-utils"
+  },
+  "string-width": {
+   "link": "../~npm~string-width@4.2.3/node_modules/string-width"
+  },
+  "strip-ansi": {
+   "link": "../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+  },
+  "strip-bom": {
+   "link": "../~npm~strip-bom@4.0.0/node_modules/strip-bom"
+  },
+  "supports-color": {
+   "link": "../~npm~supports-color@7.2.0/node_modules/supports-color"
+  },
+  "tap": {
+   "link": "../~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc/node_modules/tap"
+  },
+  "tap-mocha-reporter": {
+   "link": "../~npm~tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+  },
+  "tap-parser": {
+   "link": "../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+  },
+  "tap-yaml": {
+   "link": "../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+  },
+  "tcompare": {
+   "link": "../~npm~tcompare@5.0.7/node_modules/tcompare"
+  },
+  "test-exclude": {
+   "link": "../~npm~test-exclude@6.0.0/node_modules/test-exclude"
+  },
+  "to-regex-range": {
+   "link": "../~npm~to-regex-range@5.0.1/node_modules/to-regex-range"
+  },
+  "tough-cookie": {
+   "link": "../~npm~tough-cookie@2.5.0/node_modules/tough-cookie"
+  },
+  "trivial-deferred": {
+   "link": "../~npm~trivial-deferred@1.1.2/node_modules/trivial-deferred"
+  },
+  "tunnel-agent": {
+   "link": "../~npm~tunnel-agent@0.6.0/node_modules/tunnel-agent"
+  },
+  "tweetnacl": {
+   "link": "../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+  },
+  "type-fest": {
+   "link": "../~npm~type-fest@0.8.1/node_modules/type-fest"
+  },
+  "typedarray-to-buffer": {
+   "link": "../~npm~typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+  },
+  "unicode-length": {
+   "link": "../~npm~unicode-length@2.1.0/node_modules/unicode-length"
+  },
+  "update-browserslist-db": {
+   "link": "../~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae/node_modules/update-browserslist-db"
+  },
+  "uri-js": {
+   "link": "../~npm~uri-js@4.4.1/node_modules/uri-js"
+  },
+  "use-sync-external-store": {
+   "link": "../~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba/node_modules/use-sync-external-store"
+  },
+  "uuid": {
+   "link": "../~npm~uuid@8.3.2/node_modules/uuid"
+  },
+  "verror": {
+   "link": "../~npm~verror@1.10.0/node_modules/verror"
+  },
+  "which": {
+   "link": "../~npm~which@2.0.2/node_modules/which"
+  },
+  "which-module": {
+   "link": "../~npm~which-module@2.0.1/node_modules/which-module"
+  },
+  "wrap-ansi": {
+   "link": "../~npm~wrap-ansi@7.0.0/node_modules/wrap-ansi"
+  },
+  "wrappy": {
+   "link": "../~npm~wrappy@1.0.2/node_modules/wrappy"
+  },
+  "write-file-atomic": {
+   "link": "../~npm~write-file-atomic@3.0.3/node_modules/write-file-atomic"
+  },
+  "y18n": {
+   "link": "../~npm~y18n@4.0.3/node_modules/y18n"
+  },
+  "yallist": {
+   "link": "../~npm~yallist@4.0.0/node_modules/yallist"
+  },
+  "yaml": {
+   "link": "../~npm~yaml@1.10.3/node_modules/yaml"
+  },
+  "yargs": {
+   "link": "../~npm~yargs@15.4.1/node_modules/yargs"
+  },
+  "yargs-parser": {
+   "link": "../~npm~yargs-parser@18.1.3/node_modules/yargs-parser"
+  }
+ },
+ "store": [
+  {
+   "id": "file~vendor+ms-2.1.2.tgz",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "git~github_cisaacs+string-locale-compare~v1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    },
+    "tap": {
+     "link": "../../~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc/node_modules/tap"
+    }
+   }
+  },
+  {
+   "id": "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+code-frame@7.29.7",
+   "node_modules": {
+    "@babel/code-frame": {
+     "pkg": {
+      "name": "@babel/code-frame",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "js-tokens": {
+     "link": "../../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "picocolors": {
+     "link": "../../~npm~picocolors@1.1.1/node_modules/picocolors"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+compat-data@7.29.7",
+   "node_modules": {
+    "@babel/compat-data": {
+     "pkg": {
+      "name": "@babel/compat-data",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+core@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/core": {
+     "pkg": {
+      "name": "@babel/core",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/generator": {
+     "link": "../../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-compilation-targets": {
+     "link": "../../../~npm~@babel+helper-compilation-targets@7.29.7/node_modules/@babel/helper-compilation-targets"
+    },
+    "@babel/helper-module-transforms": {
+     "link": "../../../~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8/node_modules/@babel/helper-module-transforms"
+    },
+    "@babel/helpers": {
+     "link": "../../../~npm~@babel+helpers@7.29.7/node_modules/@babel/helpers"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/remapping": {
+     "link": "../../../~npm~@jridgewell+remapping@2.3.5/node_modules/@jridgewell/remapping"
+    },
+    "convert-source-map": {
+     "link": "../../~npm~convert-source-map@2.0.0/node_modules/convert-source-map"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "gensync": {
+     "link": "../../~npm~gensync@1.0.0-beta.2/node_modules/gensync"
+    },
+    "json5": {
+     "link": "../../~npm~json5@2.2.3/node_modules/json5"
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+generator@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/generator": {
+     "pkg": {
+      "name": "@babel/generator",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "@jridgewell/gen-mapping": {
+     "link": "../../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    },
+    "jsesc": {
+     "link": "../../~npm~jsesc@3.1.0/node_modules/jsesc"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-compilation-targets@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/compat-data": {
+     "link": "../../../~npm~@babel+compat-data@7.29.7/node_modules/@babel/compat-data"
+    },
+    "@babel/helper-compilation-targets": {
+     "pkg": {
+      "name": "@babel/helper-compilation-targets",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-option": {
+     "link": "../../../~npm~@babel+helper-validator-option@7.29.7/node_modules/@babel/helper-validator-option"
+    },
+    "browserslist": {
+     "link": "../../~npm~browserslist@4.29.1/node_modules/browserslist"
+    },
+    "lru-cache": {
+     "link": "../../~npm~lru-cache@5.1.1/node_modules/lru-cache"
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-globals@7.29.7",
+   "node_modules": {
+    "@babel/helper-globals": {
+     "pkg": {
+      "name": "@babel/helper-globals",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-module-imports@7.29.7",
+   "node_modules": {
+    "@babel/helper-module-imports": {
+     "pkg": {
+      "name": "@babel/helper-module-imports",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-module-transforms@7.29.7~peer.a8a63a14dad8d5d8",
+   "node_modules": {
+    "@babel/core": {
+     "link": "../../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+    },
+    "@babel/helper-module-imports": {
+     "link": "../../../~npm~@babel+helper-module-imports@7.29.7/node_modules/@babel/helper-module-imports"
+    },
+    "@babel/helper-module-transforms": {
+     "pkg": {
+      "name": "@babel/helper-module-transforms",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/traverse": {
+     "link": "../../../~npm~@babel+traverse@7.29.8/node_modules/@babel/traverse"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-string-parser@7.29.7",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "pkg": {
+      "name": "@babel/helper-string-parser",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-validator-identifier@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-identifier": {
+     "pkg": {
+      "name": "@babel/helper-validator-identifier",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helper-validator-option@7.29.7",
+   "node_modules": {
+    "@babel/helper-validator-option": {
+     "pkg": {
+      "name": "@babel/helper-validator-option",
+      "version": "7.29.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+helpers@7.29.7",
+   "node_modules": {
+    "@babel/helpers": {
+     "pkg": {
+      "name": "@babel/helpers",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+parser@7.29.9",
+   "node_modules": {
+    "@babel/parser": {
+     "pkg": {
+      "name": "@babel/parser",
+      "version": "7.29.9"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+template@7.29.7",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "pkg": {
+      "name": "@babel/template",
+      "version": "7.29.7"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+traverse@7.29.8",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/code-frame": {
+     "link": "../../../~npm~@babel+code-frame@7.29.7/node_modules/@babel/code-frame"
+    },
+    "@babel/generator": {
+     "link": "../../../~npm~@babel+generator@7.29.8/node_modules/@babel/generator"
+    },
+    "@babel/helper-globals": {
+     "link": "../../../~npm~@babel+helper-globals@7.29.7/node_modules/@babel/helper-globals"
+    },
+    "@babel/parser": {
+     "link": "../../../~npm~@babel+parser@7.29.9/node_modules/@babel/parser"
+    },
+    "@babel/template": {
+     "link": "../../../~npm~@babel+template@7.29.7/node_modules/@babel/template"
+    },
+    "@babel/traverse": {
+     "pkg": {
+      "name": "@babel/traverse",
+      "version": "7.29.8"
+     }
+    },
+    "@babel/types": {
+     "link": "../../../~npm~@babel+types@7.29.8/node_modules/@babel/types"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    }
+   }
+  },
+  {
+   "id": "~npm~@babel+types@7.29.8",
+   "node_modules": {
+    "@babel/helper-string-parser": {
+     "link": "../../../~npm~@babel+helper-string-parser@7.29.7/node_modules/@babel/helper-string-parser"
+    },
+    "@babel/helper-validator-identifier": {
+     "link": "../../../~npm~@babel+helper-validator-identifier@7.29.7/node_modules/@babel/helper-validator-identifier"
+    },
+    "@babel/types": {
+     "pkg": {
+      "name": "@babel/types",
+      "version": "7.29.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@isaacs+string-locale-compare@1.1.0",
+   "node_modules": {
+    "@isaacs/string-locale-compare": {
+     "pkg": {
+      "name": "@isaacs/string-locale-compare",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@istanbuljs+load-nyc-config@1.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "pkg": {
+      "name": "@istanbuljs/load-nyc-config",
+      "version": "1.1.0"
+     }
+    },
+    "camelcase": {
+     "link": "../../~npm~camelcase@5.3.1/node_modules/camelcase"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "get-package-type": {
+     "link": "../../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "js-yaml": {
+     "link": "../../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "resolve-from": {
+     "link": "../../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+    }
+   }
+  },
+  {
+   "id": "~npm~@istanbuljs+schema@0.1.6",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "pkg": {
+      "name": "@istanbuljs/schema",
+      "version": "0.1.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+gen-mapping@0.3.13",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "pkg": {
+      "name": "@jridgewell/gen-mapping",
+      "version": "0.3.13"
+     }
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+remapping@2.3.5",
+   "node_modules": {
+    "@jridgewell/gen-mapping": {
+     "link": "../../../~npm~@jridgewell+gen-mapping@0.3.13/node_modules/@jridgewell/gen-mapping"
+    },
+    "@jridgewell/remapping": {
+     "pkg": {
+      "name": "@jridgewell/remapping",
+      "version": "2.3.5"
+     }
+    },
+    "@jridgewell/trace-mapping": {
+     "link": "../../../~npm~@jridgewell+trace-mapping@0.3.31/node_modules/@jridgewell/trace-mapping"
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+resolve-uri@3.1.2",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "pkg": {
+      "name": "@jridgewell/resolve-uri",
+      "version": "3.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+sourcemap-codec@1.6.0",
+   "node_modules": {
+    "@jridgewell/sourcemap-codec": {
+     "pkg": {
+      "name": "@jridgewell/sourcemap-codec",
+      "version": "1.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~@jridgewell+trace-mapping@0.3.31",
+   "node_modules": {
+    "@jridgewell/resolve-uri": {
+     "link": "../../../~npm~@jridgewell+resolve-uri@3.1.2/node_modules/@jridgewell/resolve-uri"
+    },
+    "@jridgewell/sourcemap-codec": {
+     "link": "../../../~npm~@jridgewell+sourcemap-codec@1.6.0/node_modules/@jridgewell/sourcemap-codec"
+    },
+    "@jridgewell/trace-mapping": {
+     "pkg": {
+      "name": "@jridgewell/trace-mapping",
+      "version": "0.3.31"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aggregate-error@3.1.0",
+   "node_modules": {
+    "aggregate-error": {
+     "pkg": {
+      "name": "aggregate-error",
+      "version": "3.1.0"
+     }
+    },
+    "clean-stack": {
+     "link": "../../~npm~clean-stack@2.2.0/node_modules/clean-stack"
+    },
+    "indent-string": {
+     "link": "../../~npm~indent-string@4.0.0/node_modules/indent-string"
+    }
+   }
+  },
+  {
+   "id": "~npm~ajv@6.15.0",
+   "node_modules": {
+    "ajv": {
+     "pkg": {
+      "name": "ajv",
+      "version": "6.15.0"
+     }
+    },
+    "fast-deep-equal": {
+     "link": "../../~npm~fast-deep-equal@3.1.3/node_modules/fast-deep-equal"
+    },
+    "fast-json-stable-stringify": {
+     "link": "../../~npm~fast-json-stable-stringify@2.1.0/node_modules/fast-json-stable-stringify"
+    },
+    "json-schema-traverse": {
+     "link": "../../~npm~json-schema-traverse@0.4.1/node_modules/json-schema-traverse"
+    },
+    "uri-js": {
+     "link": "../../~npm~uri-js@4.4.1/node_modules/uri-js"
+    }
+   }
+  },
+  {
+   "id": "~npm~ansi-regex@5.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "pkg": {
+      "name": "ansi-regex",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ansi-styles@4.3.0",
+   "node_modules": {
+    "ansi-styles": {
+     "pkg": {
+      "name": "ansi-styles",
+      "version": "4.3.0"
+     }
+    },
+    "color-convert": {
+     "link": "../../~npm~color-convert@2.0.1/node_modules/color-convert"
+    }
+   }
+  },
+  {
+   "id": "~npm~anymatch@3.1.3",
+   "node_modules": {
+    "anymatch": {
+     "pkg": {
+      "name": "anymatch",
+      "version": "3.1.3"
+     }
+    },
+    "normalize-path": {
+     "link": "../../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "picomatch": {
+     "link": "../../~npm~picomatch@2.3.2/node_modules/picomatch"
+    }
+   }
+  },
+  {
+   "id": "~npm~append-transform@2.0.0",
+   "node_modules": {
+    "append-transform": {
+     "pkg": {
+      "name": "append-transform",
+      "version": "2.0.0"
+     }
+    },
+    "default-require-extensions": {
+     "link": "../../~npm~default-require-extensions@3.0.1/node_modules/default-require-extensions"
+    }
+   }
+  },
+  {
+   "id": "~npm~archy@1.0.0",
+   "node_modules": {
+    "archy": {
+     "pkg": {
+      "name": "archy",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~argparse@1.0.10",
+   "node_modules": {
+    "argparse": {
+     "pkg": {
+      "name": "argparse",
+      "version": "1.0.10"
+     }
+    },
+    "sprintf-js": {
+     "link": "../../~npm~sprintf-js@1.0.3/node_modules/sprintf-js"
+    }
+   }
+  },
+  {
+   "id": "~npm~asn1@0.2.6",
+   "node_modules": {
+    "asn1": {
+     "pkg": {
+      "name": "asn1",
+      "version": "0.2.6"
+     }
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "~npm~assert-plus@1.0.0",
+   "node_modules": {
+    "assert-plus": {
+     "pkg": {
+      "name": "assert-plus",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~async-hook-domain@2.0.4",
+   "node_modules": {
+    "async-hook-domain": {
+     "pkg": {
+      "name": "async-hook-domain",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~asynckit@0.4.0",
+   "node_modules": {
+    "asynckit": {
+     "pkg": {
+      "name": "asynckit",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aws-sign2@0.7.0",
+   "node_modules": {
+    "aws-sign2": {
+     "pkg": {
+      "name": "aws-sign2",
+      "version": "0.7.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~aws4@1.13.2",
+   "node_modules": {
+    "aws4": {
+     "pkg": {
+      "name": "aws4",
+      "version": "1.13.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~balanced-match@1.0.2",
+   "node_modules": {
+    "balanced-match": {
+     "pkg": {
+      "name": "balanced-match",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~baseline-browser-mapping@2.11.26",
+   "node_modules": {
+    "baseline-browser-mapping": {
+     "pkg": {
+      "name": "baseline-browser-mapping",
+      "version": "2.11.26"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~bcrypt-pbkdf@1.0.2",
+   "node_modules": {
+    "bcrypt-pbkdf": {
+     "pkg": {
+      "name": "bcrypt-pbkdf",
+      "version": "1.0.2"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "~npm~binary-extensions@2.3.0",
+   "node_modules": {
+    "binary-extensions": {
+     "pkg": {
+      "name": "binary-extensions",
+      "version": "2.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~bind-obj-methods@3.0.0",
+   "node_modules": {
+    "bind-obj-methods": {
+     "pkg": {
+      "name": "bind-obj-methods",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~brace-expansion@1.1.21",
+   "node_modules": {
+    "balanced-match": {
+     "link": "../../~npm~balanced-match@1.0.2/node_modules/balanced-match"
+    },
+    "brace-expansion": {
+     "pkg": {
+      "name": "brace-expansion",
+      "version": "1.1.21"
+     }
+    },
+    "concat-map": {
+     "link": "../../~npm~concat-map@0.0.1/node_modules/concat-map"
+    }
+   }
+  },
+  {
+   "id": "~npm~braces@3.0.3",
+   "node_modules": {
+    "braces": {
+     "pkg": {
+      "name": "braces",
+      "version": "3.0.3"
+     }
+    },
+    "fill-range": {
+     "link": "../../~npm~fill-range@7.1.1/node_modules/fill-range"
+    }
+   }
+  },
+  {
+   "id": "~npm~browserslist@4.29.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "baseline-browser-mapping": {
+     "link": "../../~npm~baseline-browser-mapping@2.11.26/node_modules/baseline-browser-mapping"
+    },
+    "browserslist": {
+     "pkg": {
+      "name": "browserslist",
+      "version": "4.29.1"
+     }
+    },
+    "caniuse-lite": {
+     "link": "../../~npm~caniuse-lite@1.0.30001812/node_modules/caniuse-lite"
+    },
+    "electron-to-chromium": {
+     "link": "../../~npm~electron-to-chromium@1.5.439/node_modules/electron-to-chromium"
+    },
+    "node-releases": {
+     "link": "../../~npm~node-releases@2.0.57/node_modules/node-releases"
+    },
+    "update-browserslist-db": {
+     "link": "../../~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae/node_modules/update-browserslist-db"
+    }
+   }
+  },
+  {
+   "id": "~npm~buffer-from@1.1.2",
+   "node_modules": {
+    "buffer-from": {
+     "pkg": {
+      "name": "buffer-from",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caching-transform@4.0.0",
+   "node_modules": {
+    "caching-transform": {
+     "pkg": {
+      "name": "caching-transform",
+      "version": "4.0.0"
+     }
+    },
+    "hasha": {
+     "link": "../../~npm~hasha@5.2.2/node_modules/hasha"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "package-hash": {
+     "link": "../../~npm~package-hash@4.0.0/node_modules/package-hash"
+    },
+    "write-file-atomic": {
+     "link": "../../~npm~write-file-atomic@3.0.3/node_modules/write-file-atomic"
+    }
+   }
+  },
+  {
+   "id": "~npm~camelcase@5.3.1",
+   "node_modules": {
+    "camelcase": {
+     "pkg": {
+      "name": "camelcase",
+      "version": "5.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caniuse-lite@1.0.30001812",
+   "node_modules": {
+    "caniuse-lite": {
+     "pkg": {
+      "name": "caniuse-lite",
+      "version": "1.0.30001812"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~caseless@0.12.0",
+   "node_modules": {
+    "caseless": {
+     "pkg": {
+      "name": "caseless",
+      "version": "0.12.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~chokidar@3.6.0",
+   "node_modules": {
+    "anymatch": {
+     "link": "../../~npm~anymatch@3.1.3/node_modules/anymatch"
+    },
+    "braces": {
+     "link": "../../~npm~braces@3.0.3/node_modules/braces"
+    },
+    "chokidar": {
+     "pkg": {
+      "name": "chokidar",
+      "version": "3.6.0"
+     }
+    },
+    "fsevents": {
+     "link": "../../~npm~fsevents@2.3.3/node_modules/fsevents"
+    },
+    "glob-parent": {
+     "link": "../../~npm~glob-parent@5.1.2/node_modules/glob-parent"
+    },
+    "is-binary-path": {
+     "link": "../../~npm~is-binary-path@2.1.0/node_modules/is-binary-path"
+    },
+    "is-glob": {
+     "link": "../../~npm~is-glob@4.0.3/node_modules/is-glob"
+    },
+    "normalize-path": {
+     "link": "../../~npm~normalize-path@3.0.0/node_modules/normalize-path"
+    },
+    "readdirp": {
+     "link": "../../~npm~readdirp@3.6.0/node_modules/readdirp"
+    }
+   }
+  },
+  {
+   "id": "~npm~clean-stack@2.2.0",
+   "node_modules": {
+    "clean-stack": {
+     "pkg": {
+      "name": "clean-stack",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~cliui@6.0.0",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "6.0.0"
+     }
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../~npm~wrap-ansi@6.2.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~cliui@7.0.4",
+   "node_modules": {
+    "cliui": {
+     "pkg": {
+      "name": "cliui",
+      "version": "7.0.4"
+     }
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "link": "../../~npm~wrap-ansi@7.0.0/node_modules/wrap-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~color-convert@2.0.1",
+   "node_modules": {
+    "color-convert": {
+     "pkg": {
+      "name": "color-convert",
+      "version": "2.0.1"
+     }
+    },
+    "color-name": {
+     "link": "../../~npm~color-name@1.1.4/node_modules/color-name"
+    }
+   }
+  },
+  {
+   "id": "~npm~color-name@1.1.4",
+   "node_modules": {
+    "color-name": {
+     "pkg": {
+      "name": "color-name",
+      "version": "1.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~color-support@1.1.3",
+   "node_modules": {
+    "color-support": {
+     "pkg": {
+      "name": "color-support",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~combined-stream@1.0.8",
+   "node_modules": {
+    "combined-stream": {
+     "pkg": {
+      "name": "combined-stream",
+      "version": "1.0.8"
+     }
+    },
+    "delayed-stream": {
+     "link": "../../~npm~delayed-stream@1.0.0/node_modules/delayed-stream"
+    }
+   }
+  },
+  {
+   "id": "~npm~commondir@1.0.1",
+   "node_modules": {
+    "commondir": {
+     "pkg": {
+      "name": "commondir",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~concat-map@0.0.1",
+   "node_modules": {
+    "concat-map": {
+     "pkg": {
+      "name": "concat-map",
+      "version": "0.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~convert-source-map@1.9.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "1.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~convert-source-map@2.0.0",
+   "node_modules": {
+    "convert-source-map": {
+     "pkg": {
+      "name": "convert-source-map",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~core-util-is@1.0.2",
+   "node_modules": {
+    "core-util-is": {
+     "pkg": {
+      "name": "core-util-is",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~coveralls@3.1.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "coveralls": {
+     "pkg": {
+      "name": "coveralls",
+      "version": "3.1.1"
+     }
+    },
+    "js-yaml": {
+     "link": "../../~npm~js-yaml@3.15.2/node_modules/js-yaml"
+    },
+    "lcov-parse": {
+     "link": "../../~npm~lcov-parse@1.0.0/node_modules/lcov-parse"
+    },
+    "log-driver": {
+     "link": "../../~npm~log-driver@1.2.7/node_modules/log-driver"
+    },
+    "minimist": {
+     "link": "../../~npm~minimist@1.2.8/node_modules/minimist"
+    },
+    "request": {
+     "link": "../../~npm~request@2.88.2/node_modules/request"
+    }
+   }
+  },
+  {
+   "id": "~npm~cross-spawn@7.0.6",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "cross-spawn": {
+     "pkg": {
+      "name": "cross-spawn",
+      "version": "7.0.6"
+     }
+    },
+    "path-key": {
+     "link": "../../~npm~path-key@3.1.1/node_modules/path-key"
+    },
+    "shebang-command": {
+     "link": "../../~npm~shebang-command@2.0.0/node_modules/shebang-command"
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~dashdash@1.14.1",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "dashdash": {
+     "pkg": {
+      "name": "dashdash",
+      "version": "1.14.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+   "node_modules": {
+    "debug": {
+     "pkg": {
+      "name": "debug",
+      "version": "4.3.4"
+     }
+    },
+    "ms": {
+     "link": "../../~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms/node_modules/ms"
+    }
+   }
+  },
+  {
+   "id": "~npm~decamelize@1.2.0",
+   "node_modules": {
+    "decamelize": {
+     "pkg": {
+      "name": "decamelize",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~default-require-extensions@3.0.1",
+   "node_modules": {
+    "default-require-extensions": {
+     "pkg": {
+      "name": "default-require-extensions",
+      "version": "3.0.1"
+     }
+    },
+    "strip-bom": {
+     "link": "../../~npm~strip-bom@4.0.0/node_modules/strip-bom"
+    }
+   }
+  },
+  {
+   "id": "~npm~delayed-stream@1.0.0",
+   "node_modules": {
+    "delayed-stream": {
+     "pkg": {
+      "name": "delayed-stream",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~diff@4.0.4",
+   "node_modules": {
+    "diff": {
+     "pkg": {
+      "name": "diff",
+      "version": "4.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ecc-jsbn@0.1.2",
+   "node_modules": {
+    "ecc-jsbn": {
+     "pkg": {
+      "name": "ecc-jsbn",
+      "version": "0.1.2"
+     }
+    },
+    "jsbn": {
+     "link": "../../~npm~jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    }
+   }
+  },
+  {
+   "id": "~npm~electron-to-chromium@1.5.439",
+   "node_modules": {
+    "electron-to-chromium": {
+     "pkg": {
+      "name": "electron-to-chromium",
+      "version": "1.5.439"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~emoji-regex@8.0.0",
+   "node_modules": {
+    "emoji-regex": {
+     "pkg": {
+      "name": "emoji-regex",
+      "version": "8.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~es6-error@4.1.1",
+   "node_modules": {
+    "es6-error": {
+     "pkg": {
+      "name": "es6-error",
+      "version": "4.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~escalade@3.2.0",
+   "node_modules": {
+    "escalade": {
+     "pkg": {
+      "name": "escalade",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~escape-string-regexp@2.0.0",
+   "node_modules": {
+    "escape-string-regexp": {
+     "pkg": {
+      "name": "escape-string-regexp",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~esprima@4.0.1",
+   "node_modules": {
+    "esprima": {
+     "pkg": {
+      "name": "esprima",
+      "version": "4.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~events-to-array@1.1.2",
+   "node_modules": {
+    "events-to-array": {
+     "pkg": {
+      "name": "events-to-array",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~extend@3.0.2",
+   "node_modules": {
+    "extend": {
+     "pkg": {
+      "name": "extend",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~extsprintf@1.3.0",
+   "node_modules": {
+    "extsprintf": {
+     "pkg": {
+      "name": "extsprintf",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fast-deep-equal@3.1.3",
+   "node_modules": {
+    "fast-deep-equal": {
+     "pkg": {
+      "name": "fast-deep-equal",
+      "version": "3.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fast-json-stable-stringify@2.1.0",
+   "node_modules": {
+    "fast-json-stable-stringify": {
+     "pkg": {
+      "name": "fast-json-stable-stringify",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fill-range@7.1.1",
+   "node_modules": {
+    "fill-range": {
+     "pkg": {
+      "name": "fill-range",
+      "version": "7.1.1"
+     }
+    },
+    "to-regex-range": {
+     "link": "../../~npm~to-regex-range@5.0.1/node_modules/to-regex-range"
+    }
+   }
+  },
+  {
+   "id": "~npm~find-cache-dir@3.3.2",
+   "node_modules": {
+    "commondir": {
+     "link": "../../~npm~commondir@1.0.1/node_modules/commondir"
+    },
+    "find-cache-dir": {
+     "pkg": {
+      "name": "find-cache-dir",
+      "version": "3.3.2"
+     }
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "pkg-dir": {
+     "link": "../../~npm~pkg-dir@4.2.0/node_modules/pkg-dir"
+    }
+   }
+  },
+  {
+   "id": "~npm~find-up@4.1.0",
+   "node_modules": {
+    "find-up": {
+     "pkg": {
+      "name": "find-up",
+      "version": "4.1.0"
+     }
+    },
+    "locate-path": {
+     "link": "../../~npm~locate-path@5.0.0/node_modules/locate-path"
+    },
+    "path-exists": {
+     "link": "../../~npm~path-exists@4.0.0/node_modules/path-exists"
+    }
+   }
+  },
+  {
+   "id": "~npm~findit@2.0.0",
+   "node_modules": {
+    "findit": {
+     "pkg": {
+      "name": "findit",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~foreground-child@2.0.0",
+   "node_modules": {
+    "cross-spawn": {
+     "link": "../../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "foreground-child": {
+     "pkg": {
+      "name": "foreground-child",
+      "version": "2.0.0"
+     }
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    }
+   }
+  },
+  {
+   "id": "~npm~forever-agent@0.6.1",
+   "node_modules": {
+    "forever-agent": {
+     "pkg": {
+      "name": "forever-agent",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~form-data@2.3.3",
+   "node_modules": {
+    "asynckit": {
+     "link": "../../~npm~asynckit@0.4.0/node_modules/asynckit"
+    },
+    "combined-stream": {
+     "link": "../../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "form-data": {
+     "pkg": {
+      "name": "form-data",
+      "version": "2.3.3"
+     }
+    },
+    "mime-types": {
+     "link": "../../~npm~mime-types@2.1.35/node_modules/mime-types"
+    }
+   }
+  },
+  {
+   "id": "~npm~fromentries@1.3.2",
+   "node_modules": {
+    "fromentries": {
+     "pkg": {
+      "name": "fromentries",
+      "version": "1.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fs-exists-cached@1.0.0",
+   "node_modules": {
+    "fs-exists-cached": {
+     "pkg": {
+      "name": "fs-exists-cached",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fs.realpath@1.0.0",
+   "node_modules": {
+    "fs.realpath": {
+     "pkg": {
+      "name": "fs.realpath",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~fsevents@2.3.3",
+   "node_modules": {
+    "fsevents": {
+     "pkg": {
+      "name": "fsevents",
+      "version": "2.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~function-loop@2.0.1",
+   "node_modules": {
+    "function-loop": {
+     "pkg": {
+      "name": "function-loop",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~gensync@1.0.0-beta.2",
+   "node_modules": {
+    "gensync": {
+     "pkg": {
+      "name": "gensync",
+      "version": "1.0.0-beta.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~get-caller-file@2.0.5",
+   "node_modules": {
+    "get-caller-file": {
+     "pkg": {
+      "name": "get-caller-file",
+      "version": "2.0.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~get-package-type@0.1.0",
+   "node_modules": {
+    "get-package-type": {
+     "pkg": {
+      "name": "get-package-type",
+      "version": "0.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~getpass@0.1.7",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "getpass": {
+     "pkg": {
+      "name": "getpass",
+      "version": "0.1.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~glob-parent@5.1.2",
+   "node_modules": {
+    "glob-parent": {
+     "pkg": {
+      "name": "glob-parent",
+      "version": "5.1.2"
+     }
+    },
+    "is-glob": {
+     "link": "../../~npm~is-glob@4.0.3/node_modules/is-glob"
+    }
+   }
+  },
+  {
+   "id": "~npm~glob@7.2.3",
+   "node_modules": {
+    "fs.realpath": {
+     "link": "../../~npm~fs.realpath@1.0.0/node_modules/fs.realpath"
+    },
+    "glob": {
+     "pkg": {
+      "name": "glob",
+      "version": "7.2.3"
+     }
+    },
+    "inflight": {
+     "link": "../../~npm~inflight@1.0.6/node_modules/inflight"
+    },
+    "inherits": {
+     "link": "../../~npm~inherits@2.0.4/node_modules/inherits"
+    },
+    "minimatch": {
+     "link": "../../~npm~minimatch@3.1.5/node_modules/minimatch"
+    },
+    "once": {
+     "link": "../../~npm~once@1.4.0/node_modules/once"
+    },
+    "path-is-absolute": {
+     "link": "../../~npm~path-is-absolute@1.0.1/node_modules/path-is-absolute"
+    }
+   }
+  },
+  {
+   "id": "~npm~graceful-fs@4.2.11",
+   "node_modules": {
+    "graceful-fs": {
+     "pkg": {
+      "name": "graceful-fs",
+      "version": "4.2.11"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~har-schema@2.0.0",
+   "node_modules": {
+    "har-schema": {
+     "pkg": {
+      "name": "har-schema",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~har-validator@5.1.5",
+   "node_modules": {
+    "ajv": {
+     "link": "../../~npm~ajv@6.15.0/node_modules/ajv"
+    },
+    "har-schema": {
+     "link": "../../~npm~har-schema@2.0.0/node_modules/har-schema"
+    },
+    "har-validator": {
+     "pkg": {
+      "name": "har-validator",
+      "version": "5.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~has-flag@4.0.0",
+   "node_modules": {
+    "has-flag": {
+     "pkg": {
+      "name": "has-flag",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~hasha@5.2.2",
+   "node_modules": {
+    "hasha": {
+     "pkg": {
+      "name": "hasha",
+      "version": "5.2.2"
+     }
+    },
+    "is-stream": {
+     "link": "../../~npm~is-stream@2.0.1/node_modules/is-stream"
+    },
+    "type-fest": {
+     "link": "../../~npm~type-fest@0.8.1/node_modules/type-fest"
+    }
+   }
+  },
+  {
+   "id": "~npm~html-escaper@2.0.2",
+   "node_modules": {
+    "html-escaper": {
+     "pkg": {
+      "name": "html-escaper",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~http-signature@1.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "http-signature": {
+     "pkg": {
+      "name": "http-signature",
+      "version": "1.2.0"
+     }
+    },
+    "jsprim": {
+     "link": "../../~npm~jsprim@1.4.2/node_modules/jsprim"
+    },
+    "sshpk": {
+     "link": "../../~npm~sshpk@1.18.0/node_modules/sshpk"
+    }
+   }
+  },
+  {
+   "id": "~npm~imurmurhash@0.1.4",
+   "node_modules": {
+    "imurmurhash": {
+     "pkg": {
+      "name": "imurmurhash",
+      "version": "0.1.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~indent-string@4.0.0",
+   "node_modules": {
+    "indent-string": {
+     "pkg": {
+      "name": "indent-string",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~inflight@1.0.6",
+   "node_modules": {
+    "inflight": {
+     "pkg": {
+      "name": "inflight",
+      "version": "1.0.6"
+     }
+    },
+    "once": {
+     "link": "../../~npm~once@1.4.0/node_modules/once"
+    },
+    "wrappy": {
+     "link": "../../~npm~wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "~npm~inherits@2.0.4",
+   "node_modules": {
+    "inherits": {
+     "pkg": {
+      "name": "inherits",
+      "version": "2.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-binary-path@2.1.0",
+   "node_modules": {
+    "binary-extensions": {
+     "link": "../../~npm~binary-extensions@2.3.0/node_modules/binary-extensions"
+    },
+    "is-binary-path": {
+     "pkg": {
+      "name": "is-binary-path",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-extglob@2.1.1",
+   "node_modules": {
+    "is-extglob": {
+     "pkg": {
+      "name": "is-extglob",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-fullwidth-code-point@3.0.0",
+   "node_modules": {
+    "is-fullwidth-code-point": {
+     "pkg": {
+      "name": "is-fullwidth-code-point",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-glob@4.0.3",
+   "node_modules": {
+    "is-extglob": {
+     "link": "../../~npm~is-extglob@2.1.1/node_modules/is-extglob"
+    },
+    "is-glob": {
+     "pkg": {
+      "name": "is-glob",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-number@7.0.0",
+   "node_modules": {
+    "is-number": {
+     "pkg": {
+      "name": "is-number",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-stream@2.0.1",
+   "node_modules": {
+    "is-stream": {
+     "pkg": {
+      "name": "is-stream",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-typedarray@1.0.0",
+   "node_modules": {
+    "is-typedarray": {
+     "pkg": {
+      "name": "is-typedarray",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~is-windows@1.0.2",
+   "node_modules": {
+    "is-windows": {
+     "pkg": {
+      "name": "is-windows",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~isexe@2.0.0",
+   "node_modules": {
+    "isexe": {
+     "pkg": {
+      "name": "isexe",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~isstream@0.1.2",
+   "node_modules": {
+    "isstream": {
+     "pkg": {
+      "name": "isstream",
+      "version": "0.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-coverage@3.2.2",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "pkg": {
+      "name": "istanbul-lib-coverage",
+      "version": "3.2.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-hook@3.0.0",
+   "node_modules": {
+    "append-transform": {
+     "link": "../../~npm~append-transform@2.0.0/node_modules/append-transform"
+    },
+    "istanbul-lib-hook": {
+     "pkg": {
+      "name": "istanbul-lib-hook",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-instrument@4.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@babel/core": {
+     "link": "../../../~npm~@babel+core@7.29.7/node_modules/@babel/core"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-instrument": {
+     "pkg": {
+      "name": "istanbul-lib-instrument",
+      "version": "4.0.3"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-processinfo@2.0.3",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "archy": {
+     "link": "../../~npm~archy@1.0.0/node_modules/archy"
+    },
+    "cross-spawn": {
+     "link": "../../~npm~cross-spawn@7.0.6/node_modules/cross-spawn"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-processinfo": {
+     "pkg": {
+      "name": "istanbul-lib-processinfo",
+      "version": "2.0.3"
+     }
+    },
+    "p-map": {
+     "link": "../../~npm~p-map@3.0.0/node_modules/p-map"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "uuid": {
+     "link": "../../~npm~uuid@8.3.2/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-report@3.0.1",
+   "node_modules": {
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-report": {
+     "pkg": {
+      "name": "istanbul-lib-report",
+      "version": "3.0.1"
+     }
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@4.0.0/node_modules/make-dir"
+    },
+    "supports-color": {
+     "link": "../../~npm~supports-color@7.2.0/node_modules/supports-color"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-lib-source-maps@4.0.1",
+   "node_modules": {
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-source-maps": {
+     "pkg": {
+      "name": "istanbul-lib-source-maps",
+      "version": "4.0.1"
+     }
+    },
+    "source-map": {
+     "link": "../../~npm~source-map@0.6.1/node_modules/source-map"
+    }
+   }
+  },
+  {
+   "id": "~npm~istanbul-reports@3.2.0",
+   "node_modules": {
+    "html-escaper": {
+     "link": "../../~npm~html-escaper@2.0.2/node_modules/html-escaper"
+    },
+    "istanbul-lib-report": {
+     "link": "../../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-reports": {
+     "pkg": {
+      "name": "istanbul-reports",
+      "version": "3.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jackspeak@1.4.2",
+   "node_modules": {
+    "cliui": {
+     "link": "../../~npm~cliui@7.0.4/node_modules/cliui"
+    },
+    "jackspeak": {
+     "pkg": {
+      "name": "jackspeak",
+      "version": "1.4.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~js-tokens@4.0.0",
+   "node_modules": {
+    "js-tokens": {
+     "pkg": {
+      "name": "js-tokens",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~js-yaml@3.15.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "argparse": {
+     "link": "../../~npm~argparse@1.0.10/node_modules/argparse"
+    },
+    "esprima": {
+     "link": "../../~npm~esprima@4.0.1/node_modules/esprima"
+    },
+    "js-yaml": {
+     "pkg": {
+      "name": "js-yaml",
+      "version": "3.15.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsbn@0.1.1",
+   "node_modules": {
+    "jsbn": {
+     "pkg": {
+      "name": "jsbn",
+      "version": "0.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsesc@3.1.0",
+   "node_modules": {
+    "jsesc": {
+     "pkg": {
+      "name": "jsesc",
+      "version": "3.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-schema-traverse@0.4.1",
+   "node_modules": {
+    "json-schema-traverse": {
+     "pkg": {
+      "name": "json-schema-traverse",
+      "version": "0.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-schema@0.4.0",
+   "node_modules": {
+    "json-schema": {
+     "pkg": {
+      "name": "json-schema",
+      "version": "0.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json-stringify-safe@5.0.1",
+   "node_modules": {
+    "json-stringify-safe": {
+     "pkg": {
+      "name": "json-stringify-safe",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~json5@2.2.3",
+   "node_modules": {
+    "json5": {
+     "pkg": {
+      "name": "json5",
+      "version": "2.2.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~jsprim@1.4.2",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "extsprintf": {
+     "link": "../../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "json-schema": {
+     "link": "../../~npm~json-schema@0.4.0/node_modules/json-schema"
+    },
+    "jsprim": {
+     "pkg": {
+      "name": "jsprim",
+      "version": "1.4.2"
+     }
+    },
+    "verror": {
+     "link": "../../~npm~verror@1.10.0/node_modules/verror"
+    }
+   }
+  },
+  {
+   "id": "~npm~lcov-parse@1.0.0",
+   "node_modules": {
+    "lcov-parse": {
+     "pkg": {
+      "name": "lcov-parse",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~left-pad@1.1.3",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~left-pad@1.3.0",
+   "node_modules": {
+    "left-pad": {
+     "pkg": {
+      "name": "left-pad",
+      "version": "1.3.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~libtap@1.4.1",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "async-hook-domain": {
+     "link": "../../~npm~async-hook-domain@2.0.4/node_modules/async-hook-domain"
+    },
+    "bind-obj-methods": {
+     "link": "../../~npm~bind-obj-methods@3.0.0/node_modules/bind-obj-methods"
+    },
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "function-loop": {
+     "link": "../../~npm~function-loop@2.0.1/node_modules/function-loop"
+    },
+    "libtap": {
+     "pkg": {
+      "name": "libtap",
+      "version": "1.4.1"
+     }
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "own-or": {
+     "link": "../../~npm~own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "link": "../../~npm~own-or-env@1.0.2/node_modules/own-or-env"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "stack-utils": {
+     "link": "../../~npm~stack-utils@2.0.6/node_modules/stack-utils"
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../~npm~tcompare@5.0.7/node_modules/tcompare"
+    },
+    "trivial-deferred": {
+     "link": "../../~npm~trivial-deferred@1.1.2/node_modules/trivial-deferred"
+    }
+   }
+  },
+  {
+   "id": "~npm~locate-path@5.0.0",
+   "node_modules": {
+    "locate-path": {
+     "pkg": {
+      "name": "locate-path",
+      "version": "5.0.0"
+     }
+    },
+    "p-locate": {
+     "link": "../../~npm~p-locate@4.1.0/node_modules/p-locate"
+    }
+   }
+  },
+  {
+   "id": "~npm~lodash.flattendeep@4.4.0",
+   "node_modules": {
+    "lodash.flattendeep": {
+     "pkg": {
+      "name": "lodash.flattendeep",
+      "version": "4.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~log-driver@1.2.7",
+   "node_modules": {
+    "log-driver": {
+     "pkg": {
+      "name": "log-driver",
+      "version": "1.2.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~loose-envify@1.4.0",
+   "node_modules": {
+    "js-tokens": {
+     "link": "../../~npm~js-tokens@4.0.0/node_modules/js-tokens"
+    },
+    "loose-envify": {
+     "pkg": {
+      "name": "loose-envify",
+      "version": "1.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~lru-cache@5.1.1",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "5.1.1"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@3.1.1/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~lru-cache@6.0.0",
+   "node_modules": {
+    "lru-cache": {
+     "pkg": {
+      "name": "lru-cache",
+      "version": "6.0.0"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~make-dir@3.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "3.1.0"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@6.3.1/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~make-dir@4.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "make-dir": {
+     "pkg": {
+      "name": "make-dir",
+      "version": "4.0.0"
+     }
+    },
+    "semver": {
+     "link": "../../~npm~semver@7.6.0/node_modules/semver"
+    }
+   }
+  },
+  {
+   "id": "~npm~mime-db@1.52.0",
+   "node_modules": {
+    "mime-db": {
+     "pkg": {
+      "name": "mime-db",
+      "version": "1.52.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~mime-types@2.1.35",
+   "node_modules": {
+    "mime-db": {
+     "link": "../../~npm~mime-db@1.52.0/node_modules/mime-db"
+    },
+    "mime-types": {
+     "pkg": {
+      "name": "mime-types",
+      "version": "2.1.35"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minimatch@3.1.5",
+   "node_modules": {
+    "brace-expansion": {
+     "link": "../../~npm~brace-expansion@1.1.21/node_modules/brace-expansion"
+    },
+    "minimatch": {
+     "pkg": {
+      "name": "minimatch",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minimist@1.2.8",
+   "node_modules": {
+    "minimist": {
+     "pkg": {
+      "name": "minimist",
+      "version": "1.2.8"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~minipass@3.3.6",
+   "node_modules": {
+    "minipass": {
+     "pkg": {
+      "name": "minipass",
+      "version": "3.3.6"
+     }
+    },
+    "yallist": {
+     "link": "../../~npm~yallist@4.0.0/node_modules/yallist"
+    }
+   }
+  },
+  {
+   "id": "~npm~mkdirp@1.0.4",
+   "node_modules": {
+    "mkdirp": {
+     "pkg": {
+      "name": "mkdirp",
+      "version": "1.0.4"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+   "node_modules": {
+    "ms": {
+     "pkg": {
+      "name": "ms",
+      "version": "2.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~node-preload@0.2.1",
+   "node_modules": {
+    "node-preload": {
+     "pkg": {
+      "name": "node-preload",
+      "version": "0.2.1"
+     }
+    },
+    "process-on-spawn": {
+     "link": "../../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    }
+   }
+  },
+  {
+   "id": "~npm~node-releases@2.0.57",
+   "node_modules": {
+    "node-releases": {
+     "pkg": {
+      "name": "node-releases",
+      "version": "2.0.57"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~normalize-path@3.0.0",
+   "node_modules": {
+    "normalize-path": {
+     "pkg": {
+      "name": "normalize-path",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~nyc@15.1.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "@istanbuljs/load-nyc-config": {
+     "link": "../../../~npm~@istanbuljs+load-nyc-config@1.1.0/node_modules/@istanbuljs/load-nyc-config"
+    },
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "caching-transform": {
+     "link": "../../~npm~caching-transform@4.0.0/node_modules/caching-transform"
+    },
+    "convert-source-map": {
+     "link": "../../~npm~convert-source-map@1.9.0/node_modules/convert-source-map"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-cache-dir": {
+     "link": "../../~npm~find-cache-dir@3.3.2/node_modules/find-cache-dir"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "get-package-type": {
+     "link": "../../~npm~get-package-type@0.1.0/node_modules/get-package-type"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "istanbul-lib-coverage": {
+     "link": "../../~npm~istanbul-lib-coverage@3.2.2/node_modules/istanbul-lib-coverage"
+    },
+    "istanbul-lib-hook": {
+     "link": "../../~npm~istanbul-lib-hook@3.0.0/node_modules/istanbul-lib-hook"
+    },
+    "istanbul-lib-instrument": {
+     "link": "../../~npm~istanbul-lib-instrument@4.0.3/node_modules/istanbul-lib-instrument"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "istanbul-lib-report": {
+     "link": "../../~npm~istanbul-lib-report@3.0.1/node_modules/istanbul-lib-report"
+    },
+    "istanbul-lib-source-maps": {
+     "link": "../../~npm~istanbul-lib-source-maps@4.0.1/node_modules/istanbul-lib-source-maps"
+    },
+    "istanbul-reports": {
+     "link": "../../~npm~istanbul-reports@3.2.0/node_modules/istanbul-reports"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "node-preload": {
+     "link": "../../~npm~node-preload@0.2.1/node_modules/node-preload"
+    },
+    "nyc": {
+     "pkg": {
+      "name": "nyc",
+      "version": "15.1.0"
+     }
+    },
+    "p-map": {
+     "link": "../../~npm~p-map@3.0.0/node_modules/p-map"
+    },
+    "process-on-spawn": {
+     "link": "../../~npm~process-on-spawn@1.1.0/node_modules/process-on-spawn"
+    },
+    "resolve-from": {
+     "link": "../../~npm~resolve-from@5.0.0/node_modules/resolve-from"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "link": "../../~npm~spawn-wrap@2.0.0/node_modules/spawn-wrap"
+    },
+    "test-exclude": {
+     "link": "../../~npm~test-exclude@6.0.0/node_modules/test-exclude"
+    },
+    "yargs": {
+     "link": "../../~npm~yargs@15.4.1/node_modules/yargs"
+    }
+   }
+  },
+  {
+   "id": "~npm~oauth-sign@0.9.0",
+   "node_modules": {
+    "oauth-sign": {
+     "pkg": {
+      "name": "oauth-sign",
+      "version": "0.9.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~once@1.4.0",
+   "node_modules": {
+    "once": {
+     "pkg": {
+      "name": "once",
+      "version": "1.4.0"
+     }
+    },
+    "wrappy": {
+     "link": "../../~npm~wrappy@1.0.2/node_modules/wrappy"
+    }
+   }
+  },
+  {
+   "id": "~npm~opener@1.5.2",
+   "node_modules": {
+    "opener": {
+     "pkg": {
+      "name": "opener",
+      "version": "1.5.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~own-or-env@1.0.2",
+   "node_modules": {
+    "own-or": {
+     "link": "../../~npm~own-or@1.0.0/node_modules/own-or"
+    },
+    "own-or-env": {
+     "pkg": {
+      "name": "own-or-env",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~own-or@1.0.0",
+   "node_modules": {
+    "own-or": {
+     "pkg": {
+      "name": "own-or",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-limit@2.3.0",
+   "node_modules": {
+    "p-limit": {
+     "pkg": {
+      "name": "p-limit",
+      "version": "2.3.0"
+     }
+    },
+    "p-try": {
+     "link": "../../~npm~p-try@2.2.0/node_modules/p-try"
+    }
+   }
+  },
+  {
+   "id": "~npm~p-locate@4.1.0",
+   "node_modules": {
+    "p-limit": {
+     "link": "../../~npm~p-limit@2.3.0/node_modules/p-limit"
+    },
+    "p-locate": {
+     "pkg": {
+      "name": "p-locate",
+      "version": "4.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-map@3.0.0",
+   "node_modules": {
+    "aggregate-error": {
+     "link": "../../~npm~aggregate-error@3.1.0/node_modules/aggregate-error"
+    },
+    "p-map": {
+     "pkg": {
+      "name": "p-map",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~p-try@2.2.0",
+   "node_modules": {
+    "p-try": {
+     "pkg": {
+      "name": "p-try",
+      "version": "2.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~package-hash@4.0.0",
+   "node_modules": {
+    "graceful-fs": {
+     "link": "../../~npm~graceful-fs@4.2.11/node_modules/graceful-fs"
+    },
+    "hasha": {
+     "link": "../../~npm~hasha@5.2.2/node_modules/hasha"
+    },
+    "lodash.flattendeep": {
+     "link": "../../~npm~lodash.flattendeep@4.4.0/node_modules/lodash.flattendeep"
+    },
+    "package-hash": {
+     "pkg": {
+      "name": "package-hash",
+      "version": "4.0.0"
+     }
+    },
+    "release-zalgo": {
+     "link": "../../~npm~release-zalgo@1.0.0/node_modules/release-zalgo"
+    }
+   }
+  },
+  {
+   "id": "~npm~path-exists@4.0.0",
+   "node_modules": {
+    "path-exists": {
+     "pkg": {
+      "name": "path-exists",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~path-is-absolute@1.0.1",
+   "node_modules": {
+    "path-is-absolute": {
+     "pkg": {
+      "name": "path-is-absolute",
+      "version": "1.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~path-key@3.1.1",
+   "node_modules": {
+    "path-key": {
+     "pkg": {
+      "name": "path-key",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~performance-now@2.1.0",
+   "node_modules": {
+    "performance-now": {
+     "pkg": {
+      "name": "performance-now",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~picocolors@1.1.1",
+   "node_modules": {
+    "picocolors": {
+     "pkg": {
+      "name": "picocolors",
+      "version": "1.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~picomatch@2.3.2",
+   "node_modules": {
+    "picomatch": {
+     "pkg": {
+      "name": "picomatch",
+      "version": "2.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~pkg-dir@4.2.0",
+   "node_modules": {
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "pkg-dir": {
+     "pkg": {
+      "name": "pkg-dir",
+      "version": "4.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~process-on-spawn@1.1.0",
+   "node_modules": {
+    "fromentries": {
+     "link": "../../~npm~fromentries@1.3.2/node_modules/fromentries"
+    },
+    "process-on-spawn": {
+     "pkg": {
+      "name": "process-on-spawn",
+      "version": "1.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~psl@1.15.0",
+   "node_modules": {
+    "psl": {
+     "pkg": {
+      "name": "psl",
+      "version": "1.15.0"
+     }
+    },
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    }
+   }
+  },
+  {
+   "id": "~npm~punycode@2.3.1",
+   "node_modules": {
+    "punycode": {
+     "pkg": {
+      "name": "punycode",
+      "version": "2.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~qs@6.5.5",
+   "node_modules": {
+    "qs": {
+     "pkg": {
+      "name": "qs",
+      "version": "6.5.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~react@18.2.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "loose-envify": {
+     "link": "../../~npm~loose-envify@1.4.0/node_modules/loose-envify"
+    },
+    "react": {
+     "pkg": {
+      "name": "react",
+      "version": "18.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~readdirp@3.6.0",
+   "node_modules": {
+    "picomatch": {
+     "link": "../../~npm~picomatch@2.3.2/node_modules/picomatch"
+    },
+    "readdirp": {
+     "pkg": {
+      "name": "readdirp",
+      "version": "3.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~release-zalgo@1.0.0",
+   "node_modules": {
+    "es6-error": {
+     "link": "../../~npm~es6-error@4.1.1/node_modules/es6-error"
+    },
+    "release-zalgo": {
+     "pkg": {
+      "name": "release-zalgo",
+      "version": "1.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~request@2.88.2",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "aws-sign2": {
+     "link": "../../~npm~aws-sign2@0.7.0/node_modules/aws-sign2"
+    },
+    "aws4": {
+     "link": "../../~npm~aws4@1.13.2/node_modules/aws4"
+    },
+    "caseless": {
+     "link": "../../~npm~caseless@0.12.0/node_modules/caseless"
+    },
+    "combined-stream": {
+     "link": "../../~npm~combined-stream@1.0.8/node_modules/combined-stream"
+    },
+    "extend": {
+     "link": "../../~npm~extend@3.0.2/node_modules/extend"
+    },
+    "forever-agent": {
+     "link": "../../~npm~forever-agent@0.6.1/node_modules/forever-agent"
+    },
+    "form-data": {
+     "link": "../../~npm~form-data@2.3.3/node_modules/form-data"
+    },
+    "har-validator": {
+     "link": "../../~npm~har-validator@5.1.5/node_modules/har-validator"
+    },
+    "http-signature": {
+     "link": "../../~npm~http-signature@1.2.0/node_modules/http-signature"
+    },
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "isstream": {
+     "link": "../../~npm~isstream@0.1.2/node_modules/isstream"
+    },
+    "json-stringify-safe": {
+     "link": "../../~npm~json-stringify-safe@5.0.1/node_modules/json-stringify-safe"
+    },
+    "mime-types": {
+     "link": "../../~npm~mime-types@2.1.35/node_modules/mime-types"
+    },
+    "oauth-sign": {
+     "link": "../../~npm~oauth-sign@0.9.0/node_modules/oauth-sign"
+    },
+    "performance-now": {
+     "link": "../../~npm~performance-now@2.1.0/node_modules/performance-now"
+    },
+    "qs": {
+     "link": "../../~npm~qs@6.5.5/node_modules/qs"
+    },
+    "request": {
+     "pkg": {
+      "name": "request",
+      "version": "2.88.2"
+     }
+    },
+    "safe-buffer": {
+     "link": "../../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tough-cookie": {
+     "link": "../../~npm~tough-cookie@2.5.0/node_modules/tough-cookie"
+    },
+    "tunnel-agent": {
+     "link": "../../~npm~tunnel-agent@0.6.0/node_modules/tunnel-agent"
+    },
+    "uuid": {
+     "link": "../../~npm~uuid@3.4.0/node_modules/uuid"
+    }
+   }
+  },
+  {
+   "id": "~npm~require-directory@2.1.1",
+   "node_modules": {
+    "require-directory": {
+     "pkg": {
+      "name": "require-directory",
+      "version": "2.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~require-main-filename@2.0.0",
+   "node_modules": {
+    "require-main-filename": {
+     "pkg": {
+      "name": "require-main-filename",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~resolve-from@5.0.0",
+   "node_modules": {
+    "resolve-from": {
+     "pkg": {
+      "name": "resolve-from",
+      "version": "5.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~rimraf@3.0.2",
+   "node_modules": {
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "rimraf": {
+     "pkg": {
+      "name": "rimraf",
+      "version": "3.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~safe-buffer@5.2.1",
+   "node_modules": {
+    "safe-buffer": {
+     "pkg": {
+      "name": "safe-buffer",
+      "version": "5.2.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~safer-buffer@2.1.2",
+   "node_modules": {
+    "safer-buffer": {
+     "pkg": {
+      "name": "safer-buffer",
+      "version": "2.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~semver@6.3.1",
+   "node_modules": {
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "6.3.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~semver@7.6.0",
+   "node_modules": {
+    "lru-cache": {
+     "link": "../../~npm~lru-cache@6.0.0/node_modules/lru-cache"
+    },
+    "semver": {
+     "pkg": {
+      "name": "semver",
+      "version": "7.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~set-blocking@2.0.0",
+   "node_modules": {
+    "set-blocking": {
+     "pkg": {
+      "name": "set-blocking",
+      "version": "2.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~shebang-command@2.0.0",
+   "node_modules": {
+    "shebang-command": {
+     "pkg": {
+      "name": "shebang-command",
+      "version": "2.0.0"
+     }
+    },
+    "shebang-regex": {
+     "link": "../../~npm~shebang-regex@3.0.0/node_modules/shebang-regex"
+    }
+   }
+  },
+  {
+   "id": "~npm~shebang-regex@3.0.0",
+   "node_modules": {
+    "shebang-regex": {
+     "pkg": {
+      "name": "shebang-regex",
+      "version": "3.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~signal-exit@3.0.7",
+   "node_modules": {
+    "signal-exit": {
+     "pkg": {
+      "name": "signal-exit",
+      "version": "3.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~source-map-support@0.5.21",
+   "node_modules": {
+    "buffer-from": {
+     "link": "../../~npm~buffer-from@1.1.2/node_modules/buffer-from"
+    },
+    "source-map": {
+     "link": "../../~npm~source-map@0.6.1/node_modules/source-map"
+    },
+    "source-map-support": {
+     "pkg": {
+      "name": "source-map-support",
+      "version": "0.5.21"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~source-map@0.6.1",
+   "node_modules": {
+    "source-map": {
+     "pkg": {
+      "name": "source-map",
+      "version": "0.6.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~spawn-wrap@2.0.0",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "is-windows": {
+     "link": "../../~npm~is-windows@1.0.2/node_modules/is-windows"
+    },
+    "make-dir": {
+     "link": "../../~npm~make-dir@3.1.0/node_modules/make-dir"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "spawn-wrap": {
+     "pkg": {
+      "name": "spawn-wrap",
+      "version": "2.0.0"
+     }
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~sprintf-js@1.0.3",
+   "node_modules": {
+    "sprintf-js": {
+     "pkg": {
+      "name": "sprintf-js",
+      "version": "1.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~sshpk@1.18.0",
+   "node_modules": {
+    "asn1": {
+     "link": "../../~npm~asn1@0.2.6/node_modules/asn1"
+    },
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "bcrypt-pbkdf": {
+     "link": "../../~npm~bcrypt-pbkdf@1.0.2/node_modules/bcrypt-pbkdf"
+    },
+    "dashdash": {
+     "link": "../../~npm~dashdash@1.14.1/node_modules/dashdash"
+    },
+    "ecc-jsbn": {
+     "link": "../../~npm~ecc-jsbn@0.1.2/node_modules/ecc-jsbn"
+    },
+    "getpass": {
+     "link": "../../~npm~getpass@0.1.7/node_modules/getpass"
+    },
+    "jsbn": {
+     "link": "../../~npm~jsbn@0.1.1/node_modules/jsbn"
+    },
+    "safer-buffer": {
+     "link": "../../~npm~safer-buffer@2.1.2/node_modules/safer-buffer"
+    },
+    "sshpk": {
+     "pkg": {
+      "name": "sshpk",
+      "version": "1.18.0"
+     }
+    },
+    "tweetnacl": {
+     "link": "../../~npm~tweetnacl@0.14.5/node_modules/tweetnacl"
+    }
+   }
+  },
+  {
+   "id": "~npm~stack-utils@2.0.6",
+   "node_modules": {
+    "escape-string-regexp": {
+     "link": "../../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "stack-utils": {
+     "pkg": {
+      "name": "stack-utils",
+      "version": "2.0.6"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~string-width@4.2.3",
+   "node_modules": {
+    "emoji-regex": {
+     "link": "../../~npm~emoji-regex@8.0.0/node_modules/emoji-regex"
+    },
+    "is-fullwidth-code-point": {
+     "link": "../../~npm~is-fullwidth-code-point@3.0.0/node_modules/is-fullwidth-code-point"
+    },
+    "string-width": {
+     "pkg": {
+      "name": "string-width",
+      "version": "4.2.3"
+     }
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    }
+   }
+  },
+  {
+   "id": "~npm~strip-ansi@6.0.1",
+   "node_modules": {
+    "ansi-regex": {
+     "link": "../../~npm~ansi-regex@5.0.1/node_modules/ansi-regex"
+    },
+    "strip-ansi": {
+     "pkg": {
+      "name": "strip-ansi",
+      "version": "6.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~strip-bom@4.0.0",
+   "node_modules": {
+    "strip-bom": {
+     "pkg": {
+      "name": "strip-bom",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~supports-color@7.2.0",
+   "node_modules": {
+    "has-flag": {
+     "link": "../../~npm~has-flag@4.0.0/node_modules/has-flag"
+    },
+    "supports-color": {
+     "pkg": {
+      "name": "supports-color",
+      "version": "7.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-mocha-reporter@5.0.4",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "color-support": {
+     "link": "../../~npm~color-support@1.1.3/node_modules/color-support"
+    },
+    "debug": {
+     "link": "../../~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+    },
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "escape-string-regexp": {
+     "link": "../../~npm~escape-string-regexp@2.0.0/node_modules/escape-string-regexp"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "tap-mocha-reporter": {
+     "pkg": {
+      "name": "tap-mocha-reporter",
+      "version": "5.0.4"
+     }
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "unicode-length": {
+     "link": "../../~npm~unicode-length@2.1.0/node_modules/unicode-length"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-parser@11.0.2",
+   "node_modules": {
+    "events-to-array": {
+     "link": "../../~npm~events-to-array@1.1.2/node_modules/events-to-array"
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "tap-parser": {
+     "pkg": {
+      "name": "tap-parser",
+      "version": "11.0.2"
+     }
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap-yaml@1.0.2",
+   "node_modules": {
+    "tap-yaml": {
+     "pkg": {
+      "name": "tap-yaml",
+      "version": "1.0.2"
+     }
+    },
+    "yaml": {
+     "link": "../../~npm~yaml@1.10.3/node_modules/yaml"
+    }
+   }
+  },
+  {
+   "id": "~npm~tap@15.2.3~peer.6f88d0ccf17dbbdc",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "chokidar": {
+     "link": "../../~npm~chokidar@3.6.0/node_modules/chokidar"
+    },
+    "coveralls": {
+     "link": "../../~npm~coveralls@3.1.1/node_modules/coveralls"
+    },
+    "findit": {
+     "link": "../../~npm~findit@2.0.0/node_modules/findit"
+    },
+    "foreground-child": {
+     "link": "../../~npm~foreground-child@2.0.0/node_modules/foreground-child"
+    },
+    "fs-exists-cached": {
+     "link": "../../~npm~fs-exists-cached@1.0.0/node_modules/fs-exists-cached"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "isexe": {
+     "link": "../../~npm~isexe@2.0.0/node_modules/isexe"
+    },
+    "istanbul-lib-processinfo": {
+     "link": "../../~npm~istanbul-lib-processinfo@2.0.3/node_modules/istanbul-lib-processinfo"
+    },
+    "jackspeak": {
+     "link": "../../~npm~jackspeak@1.4.2/node_modules/jackspeak"
+    },
+    "libtap": {
+     "link": "../../~npm~libtap@1.4.1/node_modules/libtap"
+    },
+    "minipass": {
+     "link": "../../~npm~minipass@3.3.6/node_modules/minipass"
+    },
+    "mkdirp": {
+     "link": "../../~npm~mkdirp@1.0.4/node_modules/mkdirp"
+    },
+    "nyc": {
+     "link": "../../~npm~nyc@15.1.0/node_modules/nyc"
+    },
+    "opener": {
+     "link": "../../~npm~opener@1.5.2/node_modules/opener"
+    },
+    "rimraf": {
+     "link": "../../~npm~rimraf@3.0.2/node_modules/rimraf"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "source-map-support": {
+     "link": "../../~npm~source-map-support@0.5.21/node_modules/source-map-support"
+    },
+    "tap": {
+     "pkg": {
+      "name": "tap",
+      "version": "15.2.3"
+     }
+    },
+    "tap-mocha-reporter": {
+     "link": "../../~npm~tap-mocha-reporter@5.0.4/node_modules/tap-mocha-reporter"
+    },
+    "tap-parser": {
+     "link": "../../~npm~tap-parser@11.0.2/node_modules/tap-parser"
+    },
+    "tap-yaml": {
+     "link": "../../~npm~tap-yaml@1.0.2/node_modules/tap-yaml"
+    },
+    "tcompare": {
+     "link": "../../~npm~tcompare@5.0.7/node_modules/tcompare"
+    },
+    "which": {
+     "link": "../../~npm~which@2.0.2/node_modules/which"
+    }
+   }
+  },
+  {
+   "id": "~npm~tcompare@5.0.7",
+   "node_modules": {
+    "diff": {
+     "link": "../../~npm~diff@4.0.4/node_modules/diff"
+    },
+    "tcompare": {
+     "pkg": {
+      "name": "tcompare",
+      "version": "5.0.7"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~test-exclude@6.0.0",
+   "node_modules": {
+    "@istanbuljs/schema": {
+     "link": "../../../~npm~@istanbuljs+schema@0.1.6/node_modules/@istanbuljs/schema"
+    },
+    "glob": {
+     "link": "../../~npm~glob@7.2.3/node_modules/glob"
+    },
+    "minimatch": {
+     "link": "../../~npm~minimatch@3.1.5/node_modules/minimatch"
+    },
+    "test-exclude": {
+     "pkg": {
+      "name": "test-exclude",
+      "version": "6.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~to-regex-range@5.0.1",
+   "node_modules": {
+    "is-number": {
+     "link": "../../~npm~is-number@7.0.0/node_modules/is-number"
+    },
+    "to-regex-range": {
+     "pkg": {
+      "name": "to-regex-range",
+      "version": "5.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tough-cookie@2.5.0",
+   "node_modules": {
+    "psl": {
+     "link": "../../~npm~psl@1.15.0/node_modules/psl"
+    },
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "tough-cookie": {
+     "pkg": {
+      "name": "tough-cookie",
+      "version": "2.5.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~trivial-deferred@1.1.2",
+   "node_modules": {
+    "trivial-deferred": {
+     "pkg": {
+      "name": "trivial-deferred",
+      "version": "1.1.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tunnel-agent@0.6.0",
+   "node_modules": {
+    "safe-buffer": {
+     "link": "../../~npm~safe-buffer@5.2.1/node_modules/safe-buffer"
+    },
+    "tunnel-agent": {
+     "pkg": {
+      "name": "tunnel-agent",
+      "version": "0.6.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~tweetnacl@0.14.5",
+   "node_modules": {
+    "tweetnacl": {
+     "pkg": {
+      "name": "tweetnacl",
+      "version": "0.14.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~type-fest@0.8.1",
+   "node_modules": {
+    "type-fest": {
+     "pkg": {
+      "name": "type-fest",
+      "version": "0.8.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~typedarray-to-buffer@3.1.5",
+   "node_modules": {
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "typedarray-to-buffer": {
+     "pkg": {
+      "name": "typedarray-to-buffer",
+      "version": "3.1.5"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~unicode-length@2.1.0",
+   "node_modules": {
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "unicode-length": {
+     "pkg": {
+      "name": "unicode-length",
+      "version": "2.1.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~update-browserslist-db@1.3.3~peer.27c7ade2f48570ae",
+   "node_modules": {
+    ".bin": {
+     "dir": true
+    },
+    "browserslist": {
+     "link": "../../~npm~browserslist@4.29.1/node_modules/browserslist"
+    },
+    "escalade": {
+     "link": "../../~npm~escalade@3.2.0/node_modules/escalade"
+    },
+    "picocolors": {
+     "link": "../../~npm~picocolors@1.1.1/node_modules/picocolors"
+    },
+    "update-browserslist-db": {
+     "pkg": {
+      "name": "update-browserslist-db",
+      "version": "1.3.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uri-js@4.4.1",
+   "node_modules": {
+    "punycode": {
+     "link": "../../~npm~punycode@2.3.1/node_modules/punycode"
+    },
+    "uri-js": {
+     "pkg": {
+      "name": "uri-js",
+      "version": "4.4.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+   "node_modules": {
+    "react": {
+     "link": "../../~npm~react@18.2.0/node_modules/react"
+    },
+    "use-sync-external-store": {
+     "pkg": {
+      "name": "use-sync-external-store",
+      "version": "1.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uuid@3.4.0",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "3.4.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~uuid@8.3.2",
+   "node_modules": {
+    "uuid": {
+     "pkg": {
+      "name": "uuid",
+      "version": "8.3.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~verror@1.10.0",
+   "node_modules": {
+    "assert-plus": {
+     "link": "../../~npm~assert-plus@1.0.0/node_modules/assert-plus"
+    },
+    "core-util-is": {
+     "link": "../../~npm~core-util-is@1.0.2/node_modules/core-util-is"
+    },
+    "extsprintf": {
+     "link": "../../~npm~extsprintf@1.3.0/node_modules/extsprintf"
+    },
+    "verror": {
+     "pkg": {
+      "name": "verror",
+      "version": "1.10.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~which-module@2.0.1",
+   "node_modules": {
+    "which-module": {
+     "pkg": {
+      "name": "which-module",
+      "version": "2.0.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~which@2.0.2",
+   "node_modules": {
+    "isexe": {
+     "link": "../../~npm~isexe@2.0.0/node_modules/isexe"
+    },
+    "which": {
+     "pkg": {
+      "name": "which",
+      "version": "2.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrap-ansi@6.2.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "6.2.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrap-ansi@7.0.0",
+   "node_modules": {
+    "ansi-styles": {
+     "link": "../../~npm~ansi-styles@4.3.0/node_modules/ansi-styles"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "strip-ansi": {
+     "link": "../../~npm~strip-ansi@6.0.1/node_modules/strip-ansi"
+    },
+    "wrap-ansi": {
+     "pkg": {
+      "name": "wrap-ansi",
+      "version": "7.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~wrappy@1.0.2",
+   "node_modules": {
+    "wrappy": {
+     "pkg": {
+      "name": "wrappy",
+      "version": "1.0.2"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~write-file-atomic@3.0.3",
+   "node_modules": {
+    "imurmurhash": {
+     "link": "../../~npm~imurmurhash@0.1.4/node_modules/imurmurhash"
+    },
+    "is-typedarray": {
+     "link": "../../~npm~is-typedarray@1.0.0/node_modules/is-typedarray"
+    },
+    "signal-exit": {
+     "link": "../../~npm~signal-exit@3.0.7/node_modules/signal-exit"
+    },
+    "typedarray-to-buffer": {
+     "link": "../../~npm~typedarray-to-buffer@3.1.5/node_modules/typedarray-to-buffer"
+    },
+    "write-file-atomic": {
+     "pkg": {
+      "name": "write-file-atomic",
+      "version": "3.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~y18n@4.0.3",
+   "node_modules": {
+    "y18n": {
+     "pkg": {
+      "name": "y18n",
+      "version": "4.0.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yallist@3.1.1",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "3.1.1"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yallist@4.0.0",
+   "node_modules": {
+    "yallist": {
+     "pkg": {
+      "name": "yallist",
+      "version": "4.0.0"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yaml@1.10.3",
+   "node_modules": {
+    "yaml": {
+     "pkg": {
+      "name": "yaml",
+      "version": "1.10.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yargs-parser@18.1.3",
+   "node_modules": {
+    "camelcase": {
+     "link": "../../~npm~camelcase@5.3.1/node_modules/camelcase"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "yargs-parser": {
+     "pkg": {
+      "name": "yargs-parser",
+      "version": "18.1.3"
+     }
+    }
+   }
+  },
+  {
+   "id": "~npm~yargs@15.4.1",
+   "node_modules": {
+    "cliui": {
+     "link": "../../~npm~cliui@6.0.0/node_modules/cliui"
+    },
+    "decamelize": {
+     "link": "../../~npm~decamelize@1.2.0/node_modules/decamelize"
+    },
+    "find-up": {
+     "link": "../../~npm~find-up@4.1.0/node_modules/find-up"
+    },
+    "get-caller-file": {
+     "link": "../../~npm~get-caller-file@2.0.5/node_modules/get-caller-file"
+    },
+    "require-directory": {
+     "link": "../../~npm~require-directory@2.1.1/node_modules/require-directory"
+    },
+    "require-main-filename": {
+     "link": "../../~npm~require-main-filename@2.0.0/node_modules/require-main-filename"
+    },
+    "set-blocking": {
+     "link": "../../~npm~set-blocking@2.0.0/node_modules/set-blocking"
+    },
+    "string-width": {
+     "link": "../../~npm~string-width@4.2.3/node_modules/string-width"
+    },
+    "which-module": {
+     "link": "../../~npm~which-module@2.0.1/node_modules/which-module"
+    },
+    "y18n": {
+     "link": "../../~npm~y18n@4.0.3/node_modules/y18n"
+    },
+    "yargs": {
+     "pkg": {
+      "name": "yargs",
+      "version": "15.4.1"
+     }
+    },
+    "yargs-parser": {
+     "link": "../../~npm~yargs-parser@18.1.3/node_modules/yargs-parser"
+    }
+   }
+  }
+ ],
+ "importers": {
+  ".bin": {
+   "dir": true
+  },
+  "@isaacs/string-locale-compare": {
+   "link": "../.vlt/~npm~@isaacs+string-locale-compare@1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "debug": {
+   "link": ".vlt/~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms/node_modules/debug"
+  },
+  "left-pad": {
+   "link": ".vlt/~npm~left-pad@1.3.0/node_modules/left-pad"
+  },
+  "localdir": {
+   "link": "../vendor/localdir"
+  },
+  "lp-alias": {
+   "link": ".vlt/~npm~left-pad@1.1.3/node_modules/left-pad"
+  },
+  "lp-remote": {
+   "link": ".vlt/remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz/node_modules/left-pad"
+  },
+  "ms-tgz": {
+   "link": ".vlt/file~vendor+ms-2.1.2.tgz/node_modules/ms"
+  },
+  "react": {
+   "link": ".vlt/~npm~react@18.2.0/node_modules/react"
+  },
+  "semver_x": {
+   "link": ".vlt/~npm~semver@7.6.0/node_modules/semver"
+  },
+  "slc-git": {
+   "link": ".vlt/git~github_cisaacs+string-locale-compare~v1.1.0/node_modules/@isaacs/string-locale-compare"
+  },
+  "use-sync-external-store": {
+   "link": ".vlt/~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba/node_modules/use-sync-external-store"
+  }
+ },
+ "members": {},
+ "linkTargets": {
+  "vendor/localdir": {
+   "name": "localdir",
+   "version": "1.3.0"
+  }
+ }
+}
diff --git a/scripts/capture-vlt-tree.mjs b/scripts/capture-vlt-tree.mjs
new file mode 100644
index 00000000..fa0e2b31
--- /dev/null
+++ b/scripts/capture-vlt-tree.mjs
@@ -0,0 +1,137 @@
+#!/usr/bin/env node
+// Prints the on-disk layout of a vlt-installed project as the listing the
+// crawler tests stage (crates/socket-patch-core/tests/fixtures/vlt-trees/):
+// every node_modules/.vlt entry (real package dirs with their package.json
+// identity, dependency links, other real dirs), the store's top-level files,
+// the internal hoist dir, and the importer node_modules of the root and of
+// each workspace member. Store entry names are kept byte for byte.
+//
+//   node scripts/capture-vlt-tree.mjs <project-root> <vlt-version> \
+//     > crates/socket-patch-core/tests/fixtures/vlt-trees/<vlt-version>/listing.json
+
+import fs from 'node:fs'
+import path from 'node:path'
+
+const [root, vltVersion] = process.argv.slice(2)
+if (!root || !vltVersion) {
+  process.stderr.write('usage: capture-vlt-tree.mjs <project-root> <vlt-version>\n')
+  process.exit(2)
+}
+
+const byteOrder = (a, b) => Buffer.compare(Buffer.from(a), Buffer.from(b))
+const sortedDir = (dir) => fs.readdirSync(dir).sort(byteOrder)
+
+const identity = (dir) => {
+  const pkg = JSON.parse(fs.readFileSync(path.join(dir, 'package.json'), 'utf8'))
+  return { name: pkg.name, version: pkg.version }
+}
+
+const describe = (full) => {
+  const st = fs.lstatSync(full)
+  if (st.isSymbolicLink()) {
+    return { link: fs.readlinkSync(full) }
+  }
+  if (st.isDirectory() && fs.existsSync(path.join(full, 'package.json'))) {
+    return { pkg: identity(full) }
+  }
+  if (st.isDirectory()) {
+    return { dir: true }
+  }
+  return { file: true }
+}
+
+const listModules = (nm) => {
+  const out = {}
+  if (!fs.existsSync(nm)) {
+    return out
+  }
+  for (const child of sortedDir(nm)) {
+    const full = path.join(nm, child)
+    const st = fs.lstatSync(full)
+    if (child.startsWith('@') && st.isDirectory() && !st.isSymbolicLink()) {
+      for (const scoped of sortedDir(full)) {
+        out[`${child}/${scoped}`] = describe(path.join(full, scoped))
+      }
+    } else if (child === '.bin' && st.isDirectory()) {
+      out[child] = { dir: true }
+    } else {
+      out[child] = describe(full)
+    }
+  }
+  return out
+}
+
+const nm = path.join(root, 'node_modules')
+const store = path.join(nm, '.vlt')
+const lockPath = path.join(root, 'vlt-lock.json')
+const lock = fs.existsSync(lockPath) ? JSON.parse(fs.readFileSync(lockPath, 'utf8')) : {}
+
+const entries = []
+const storeFiles = []
+for (const name of sortedDir(store)) {
+  const full = path.join(store, name)
+  const st = fs.lstatSync(full)
+  if (name === 'node_modules' || !st.isDirectory()) {
+    if (!st.isDirectory()) {
+      storeFiles.push(name)
+    }
+    continue
+  }
+  entries.push({ id: name, node_modules: listModules(path.join(full, 'node_modules')) })
+}
+
+const importers = listModules(nm)
+delete importers['.vlt']
+delete importers['.vlt-lock.json']
+
+const members = {}
+const linkTargets = {}
+const recordTarget = (from, value) => {
+  if (!value.link) {
+    return
+  }
+  const target = path.relative(root, path.resolve(path.dirname(from), value.link))
+  if (target.split(path.sep).includes('node_modules')) {
+    return
+  }
+  const full = path.join(root, target)
+  if (fs.existsSync(path.join(full, 'package.json'))) {
+    linkTargets[target.split(path.sep).join('/')] = identity(full)
+  }
+}
+for (const [rel, value] of Object.entries(importers)) {
+  recordTarget(path.join(nm, rel), value)
+}
+const walkMembers = (dir) => {
+  for (const child of sortedDir(dir)) {
+    if (child === 'node_modules' || child.startsWith('.')) {
+      continue
+    }
+    const full = path.join(dir, child)
+    if (!fs.lstatSync(full).isDirectory()) {
+      continue
+    }
+    const memberNm = path.join(full, 'node_modules')
+    if (fs.existsSync(memberNm)) {
+      const rel = path.relative(root, full).split(path.sep).join('/')
+      members[rel] = listModules(memberNm)
+      for (const [dep, value] of Object.entries(members[rel])) {
+        recordTarget(path.join(memberNm, dep), value)
+      }
+    }
+    walkMembers(full)
+  }
+}
+walkMembers(root)
+
+const listing = {
+  vlt: vltVersion,
+  lockfileVersion: lock.lockfileVersion ?? null,
+  storeFiles,
+  hoist: listModules(path.join(store, 'node_modules')),
+  store: entries,
+  importers,
+  members,
+  linkTargets,
+}
+process.stdout.write(`${JSON.stringify(listing, null, 1)}\n`)

From e96959b207bbbfcf69ebf1b689d91e7b14ecdf0f Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 21:39:55 -0400
Subject: [PATCH 10/46] Stop counting store dependency links as copies

When a git, remote or file: dependency in a vlt (or pnpm) store
depended on a patched package, apply and rollback treated that
dependency link as a second installed copy: the run reported an extra
"already patched" or "already original" result, and get, vex, vendor
and repair could pick the link as the package's location. An importer
link into a git or tarball entry was also listed twice.

The resolver now follows the store-entry rule the scan already uses:
inside a store entry only real directories are copies, and a store
copy an importer link already points at keeps the importer path. A
node_modules/.vlt that is a link is never followed, and tests now pin
the hoist-dir skip and the policy that a same-version git copy is
patched as its own copy. Doc comments broken in the previous commit
are rewrapped.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../tests/in_process_npm_multicopy.rs         |  24 ++-
 .../src/crawlers/npm_crawler.rs               |  95 ++++++---
 .../src/crawlers/pkg_managers.rs              |   6 +-
 crates/socket-patch-core/src/utils/fs.rs      |   3 +-
 .../tests/covgap_crawlers_npm_crawler.rs      |   5 +-
 .../tests/crawler_npm_e2e.rs                  | 193 +++++++++++++++++-
 6 files changed, 293 insertions(+), 33 deletions(-)

diff --git a/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs b/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
index 35ab91da..4e52774f 100644
--- a/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
+++ b/crates/socket-patch-cli/tests/in_process_npm_multicopy.rs
@@ -268,7 +268,9 @@ fn rollback_restores_every_on_disk_copy_of_a_duplicated_package() {
 /// (`.vlt/~npm~dupvuln@1.0.0~peer.2/` and `~peer.3/`), both real and
 /// runtime-loaded. The importer links ONE of them, so the resolver hands
 /// apply one primary and the store fan-out must reach the other; rollback
-/// restores both. Returns `(root, primary index.js, twin index.js)`.
+/// restores both. A git dependency links the primary from its own entry,
+/// a dependency edge that must never count as a third copy. Returns
+/// `(root, primary index.js, twin index.js)`.
 fn build_vlt_peer_variant_tree(tmp: &Path, link_importer: bool) -> (PathBuf, PathBuf, PathBuf) {
     let name = "dupvuln";
     let purl = "pkg:npm/dupvuln@1.0.0";
@@ -290,6 +292,14 @@ fn build_vlt_peer_variant_tree(tmp: &Path, link_importer: bool) -> (PathBuf, Pat
     let primary = write_copy(&entry("~npm~dupvuln@1.0.0~peer.2"), name, "1.0.0", original);
     let twin = write_copy(&entry("~npm~dupvuln@1.0.0~peer.3"), name, "1.0.0", original);
     std::fs::write(tmp.join("node_modules").join(".vlt-lock.json"), "{}").unwrap();
+    let git_nm = store.join("git~github_cx+y~v1.0.0").join("node_modules");
+    write_copy(&git_nm.join("y"), "y", "1.0.0", b"require('dupvuln');\n");
+    #[cfg(unix)]
+    std::os::unix::fs::symlink(
+        "../../~npm~dupvuln@1.0.0~peer.2/node_modules/dupvuln",
+        git_nm.join(name),
+    )
+    .unwrap();
     if link_importer {
         #[cfg(unix)]
         std::os::unix::fs::symlink(
@@ -354,16 +364,22 @@ fn apply_and_rollback_reach_both_vlt_peer_variant_copies_from_an_importer_link()
     let (code, v) = run_apply(&root);
     assert_eq!(code, 0, "apply must succeed; envelope={v}");
     assert_eq!(v["status"], "success", "envelope={v}");
+    assert_eq!(v["summary"]["applied"], 1, "envelope={v}");
+    assert_eq!(v["summary"]["skipped"], 0, "envelope={v}");
     assert_vlt_copies([&primary, &twin], true, "after apply");
 
     let (code, v) = run_rollback(&root);
     assert_eq!(code, 0, "rollback must succeed; envelope={v}");
+    assert_eq!(v["rolledBack"], 1, "envelope={v}");
+    assert_eq!(v["alreadyOriginal"], 0, "envelope={v}");
     assert_vlt_copies([&primary, &twin], false, "after rollback");
 }
 
 /// Without an importer link (a transitive-only dependency) both store
 /// copies are found by the resolver itself; each is patched exactly once
-/// and both are restored.
+/// and both are restored. The first copy's fan-out already reaches the
+/// second, so the second reports skipped (apply) and already original
+/// (rollback), and the git entry's link adds nothing.
 #[test]
 fn apply_and_rollback_reach_both_transitive_only_vlt_store_copies() {
     let tmp = tempfile::tempdir().unwrap();
@@ -371,9 +387,13 @@ fn apply_and_rollback_reach_both_transitive_only_vlt_store_copies() {
 
     let (code, v) = run_apply(&root);
     assert_eq!(code, 0, "apply must succeed; envelope={v}");
+    assert_eq!(v["summary"]["applied"], 1, "envelope={v}");
+    assert_eq!(v["summary"]["skipped"], 1, "envelope={v}");
     assert_vlt_copies([&primary, &twin], true, "after apply");
 
     let (code, v) = run_rollback(&root);
     assert_eq!(code, 0, "rollback must succeed; envelope={v}");
+    assert_eq!(v["rolledBack"], 1, "envelope={v}");
+    assert_eq!(v["alreadyOriginal"], 1, "envelope={v}");
     assert_vlt_copies([&primary, &twin], false, "after rollback");
 }
diff --git a/crates/socket-patch-core/src/crawlers/npm_crawler.rs b/crates/socket-patch-core/src/crawlers/npm_crawler.rs
index f5263ec9..cfc1cfc4 100644
--- a/crates/socket-patch-core/src/crawlers/npm_crawler.rs
+++ b/crates/socket-patch-core/src/crawlers/npm_crawler.rs
@@ -451,9 +451,9 @@ enum ScanPolicy<'a> {
     /// One pnpm or vlt store entry's `node_modules`: only REAL
     /// directories are inventoried — a symlinked (or, on Windows,
     /// junctioned) entry here is the package's dependency pointing at a
-    /// sibling store entry,
-    /// which is inventoried via that entry; following it would record the
-    /// same package under a path owned by a different store entry.
+    /// sibling store entry, which is inventoried via that entry; following
+    /// it would record the same package under a path owned by a different
+    /// store entry.
     /// `identity_seen` optionally carries the entry's own package name
     /// (what the store dir name decodes to) when its name@version is
     /// already inventoried — the importer pass wins the `seen` dedup for
@@ -621,10 +621,16 @@ impl NpmCrawler {
         if pending.is_empty() {
             return pending;
         }
-        let mut queue: VecDeque<PathBuf> = VecDeque::from([node_modules_path.to_path_buf()]);
-        while let Some(nm_path) = queue.pop_front() {
+        let mut queue: VecDeque<(PathBuf, bool)> =
+            VecDeque::from([(node_modules_path.to_path_buf(), false)]);
+        while let Some((nm_path, store_entry)) = queue.pop_front() {
             for target in &pending {
                 let pkg_path = nm_path.join(&target.dir_key);
+                // Inside a store entry a link is a dependency edge into a
+                // sibling entry, whose own probe records that copy.
+                if store_entry && !is_real_package_dir(&nm_path, &target.dir_key).await {
+                    continue;
+                }
                 let pkg_json_path = pkg_path.join("package.json");
 
                 match read_package_json(&pkg_json_path).await {
@@ -639,8 +645,11 @@ impl NpmCrawler {
                         let copies = result.entry(target.purl.clone()).or_default();
                         // Record each physical copy once — a path reached
                         // twice (defensive against overlapping walks) is not
-                        // double-counted.
-                        if !copies.iter().any(|c| c.path == pkg_path) {
+                        // double-counted, and a store copy an importer link
+                        // already resolves to keeps the importer path.
+                        let recorded = copies.iter().any(|c| c.path == pkg_path)
+                            || (store_entry && resolves_to_any(&pkg_path, copies).await);
+                        if !recorded {
                             copies.push(CrawledPackage {
                                 name: target.name.clone(),
                                 version: found_version,
@@ -674,7 +683,8 @@ impl NpmCrawler {
     }
 
     /// Append the `node_modules` dirs living one level below `nm_path`
-    /// (inside each of its package dirs, scoped or not) to `queue`.
+    /// (inside each of its package dirs, scoped or not) to `queue`, each
+    /// tagged `true` when it is a store entry's (see `ScanPolicy::StoreEntry`).
     /// Mirrors `scan_node_modules`' traversal policy: hidden entries are
     /// skipped and symlinked packages are never traversed — a symlink here
     /// points into pnpm's content-addressed store or an `npm link` target
@@ -686,7 +696,7 @@ impl NpmCrawler {
     async fn collect_nested_node_modules(
         nm_path: &Path,
         pending_names: Option<&HashSet<&str>>,
-        queue: &mut VecDeque<PathBuf>,
+        queue: &mut VecDeque<(PathBuf, bool)>,
     ) {
         for entry in crate::utils::fs::list_dir_entries(nm_path).await {
             let name = entry.file_name();
@@ -780,13 +790,13 @@ impl NpmCrawler {
                     }
                     let nested = entry_path.join(&scoped_name).join("node_modules");
                     if is_dir(&nested).await {
-                        queue.push_back(nested);
+                        queue.push_back((nested, false));
                     }
                 }
             } else {
                 let nested = entry_path.join("node_modules");
                 if is_dir(&nested).await {
-                    queue.push_back(nested);
+                    queue.push_back((nested, false));
                 }
             }
         }
@@ -812,7 +822,7 @@ impl NpmCrawler {
     fn enqueue_pending_store_entries(
         entries: Vec<StoreEntry>,
         pending_names: Option<&HashSet<&str>>,
-        queue: &mut VecDeque<PathBuf>,
+        queue: &mut VecDeque<(PathBuf, bool)>,
     ) {
         for entry in entries {
             if let (Some(filter), Some((entry_pkg, _version))) = (pending_names, &entry.advertised)
@@ -821,7 +831,7 @@ impl NpmCrawler {
                     continue;
                 }
             }
-            queue.push_back(entry.node_modules);
+            queue.push_back((entry.node_modules, true));
         }
     }
 
@@ -1245,13 +1255,12 @@ impl NpmCrawler {
 
     /// Inventory the packages under each virtual-store entry's
     /// `node_modules` (entries come from `list_pnpm_store_entries`,
-    /// `collect_nested_store_entries` or `list_vlt_store_entries`). An entry
-    /// whose name decodes to a
-    /// name@version the importer pass already inventoried (every
-    /// root-linked direct dep) skips the redundant package.json re-read
-    /// via `identity_seen` — the entry is still walked, because
-    /// bundled/injected dependencies are real dirs that physically live
-    /// only inside the store entry.
+    /// `collect_nested_store_entries` or `list_vlt_store_entries`). An
+    /// entry whose name decodes to a name@version the importer pass already
+    /// inventoried (every root-linked direct dep) skips the redundant
+    /// package.json re-read via `identity_seen` — the entry is still
+    /// walked, because bundled/injected dependencies are real dirs that
+    /// physically live only inside the store entry.
     async fn scan_store_entries(
         entries: Vec<StoreEntry>,
         seen: &mut HashSet<String>,
@@ -1466,9 +1475,11 @@ enum StoreLayout {
 ///    decodes to a DIFFERENT name@version is skipped and an undecodable
 ///    name stays probeable. vlt entries come from `list_vlt_store_entries`
 ///    and must decode to exactly the primary's name@version: an
-///    undecodable vlt id is a git/file/remote artifact with its own bytes,
-///    not a peer variant of the registry copy. The package.json probe is
-///    the authority either way.
+///    undecodable vlt id (git, remote, `file:`) is never a peer variant.
+///    A matching copy inside one is still installed, and
+///    `NpmCrawler::find_by_purls` returns it as a primary of its own (it
+///    probes every undecodable entry), so it is patched like any other.
+///    The package.json probe is the authority either way.
 /// 3. Only REAL directories count (a link inside a store entry is another
 ///    entry's copy, already yielded via that entry), the copy `pkg_path`
 ///    itself canonicalizes to is excluded, and results are deduped by
@@ -1582,6 +1593,35 @@ pub async fn find_store_peer_variant_copies(pkg_path: &Path) -> Vec<PathBuf> {
 // Utility
 // ---------------------------------------------------------------------------
 
+/// Whether every component of `dir_key` (`name` or `@scope/name`) below
+/// `nm_path` is a real directory: links and junctions do not count.
+async fn is_real_package_dir(nm_path: &Path, dir_key: &str) -> bool {
+    let mut path = nm_path.to_path_buf();
+    for component in dir_key.split('/') {
+        path.push(component);
+        let real = tokio::fs::symlink_metadata(&path)
+            .await
+            .is_ok_and(|m| m.is_dir());
+        if !real {
+            return false;
+        }
+    }
+    true
+}
+
+/// Whether `pkg_path` is the physical dir one of `copies` resolves to.
+async fn resolves_to_any(pkg_path: &Path, copies: &[CrawledPackage]) -> bool {
+    let Ok(canon) = tokio::fs::canonicalize(pkg_path).await else {
+        return false;
+    };
+    for copy in copies {
+        if tokio::fs::canonicalize(&copy.path).await.ok().as_ref() == Some(&canon) {
+            return true;
+        }
+    }
+    false
+}
+
 /// Whether a PURL-derived path component is safe to join onto the
 /// `node_modules` root. An npm package's scope (`@types`) and bare name
 /// (`node`) are each a single path segment, so a real one never contains a
@@ -2549,7 +2589,11 @@ mod tests {
         );
         assert_eq!(
             queue,
-            VecDeque::from([PathBuf::from("a"), PathBuf::from("b"), PathBuf::from("c")])
+            VecDeque::from([
+                (PathBuf::from("a"), true),
+                (PathBuf::from("b"), true),
+                (PathBuf::from("c"), true),
+            ])
         );
         let mut queue = VecDeque::new();
         let as_pnpm = entries()
@@ -2562,7 +2606,7 @@ mod tests {
             &mut queue,
         );
         assert!(
-            !queue.contains(&PathBuf::from("a")),
+            !queue.contains(&(PathBuf::from("a"), true)),
             "the pnpm decoder misreads the legacy name"
         );
     }
@@ -2585,6 +2629,7 @@ mod tests {
             "··ms@2.1.3/node_modules/ms",
             "~npm~a@1.0.0/node_modules/a",
             "node_modules/@scope",
+            "node_modules/node_modules/hoist-decoy",
             ".VLT.DELETE.9.~npm~b@1.0.0/node_modules/b",
             "~npm~no-nm@1.0.0/no-nm",
             "elsewhere/node_modules",
diff --git a/crates/socket-patch-core/src/crawlers/pkg_managers.rs b/crates/socket-patch-core/src/crawlers/pkg_managers.rs
index f2528a5b..8ae536e6 100644
--- a/crates/socket-patch-core/src/crawlers/pkg_managers.rs
+++ b/crates/socket-patch-core/src/crawlers/pkg_managers.rs
@@ -87,7 +87,9 @@ pub enum NpmPkgManager {
 ///
 /// vlt wins over every other lockfile or store marker: its install state
 /// only exists after a vlt install, while a sibling `bun.lock`,
-/// `pnpm-lock.yaml` or `yarn.lock` may be stale. Bun comes before pnpm in the precedence because bun's isolated
+/// `pnpm-lock.yaml` or `yarn.lock` may be stale.
+///
+/// Bun comes before pnpm in the precedence because bun's isolated
 /// linker (v1.3.2+ default) populates `node_modules/.bun/` which
 /// superficially resembles pnpm's `.pnpm/` content store. The
 /// lockfile filename disambiguates cleanly.
@@ -117,6 +119,8 @@ pub fn detect_npm_pkg_manager(project_root: &Path) -> NpmPkgManager {
         return NpmPkgManager::YarnBerryPnP;
     }
 
+    // 2. vlt — its store or hidden lock exists only after a vlt install,
+    //    so a stale sibling lockfile never outranks it.
     if project_root
         .join(crate::constants::npm_family::VLT_STORE_DIR)
         .is_dir()
diff --git a/crates/socket-patch-core/src/utils/fs.rs b/crates/socket-patch-core/src/utils/fs.rs
index 6b10102e..f3b2c88c 100644
--- a/crates/socket-patch-core/src/utils/fs.rs
+++ b/crates/socket-patch-core/src/utils/fs.rs
@@ -1183,7 +1183,8 @@ mod tests {
     /// Windows link shapes vlt produces: junctions (absolute targets, vlt
     /// >= 1.0.0-rc.22 and pnpm) and directory symlinks (older vlt). Both
     /// read as links through `entry_file_type` and `symlink_metadata`, are
-    /// followed by `is_dir`, report their target through `read_link`, and    /// `remove_link` deletes them while the target survives.
+    /// followed by `is_dir`, report their target through `read_link`, and
+    /// `remove_link` deletes them while the target survives.
     #[cfg(windows)]
     async fn assert_windows_dir_link(tmp: &Path, link: &Path, target: &Path) {
         let entry = list_dir_entries(tmp)
diff --git a/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs b/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
index 8aadafc9..c67b077f 100644
--- a/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
+++ b/crates/socket-patch-core/tests/covgap_crawlers_npm_crawler.rs
@@ -307,8 +307,9 @@ async fn find_store_peer_variant_copies_unreadable_primary_returns_empty() {
 /// the ROOT `node_modules`, reachable only on the link's canonical chain.
 /// Real copies whose DepID decodes to the primary's `name@version` are
 /// returned (a `~peer.<n>` twin); a git dependency of the same
-/// `name@version` is a different artifact (its own bytes), never a
-/// variant, and a store entry reached through a link is not a store entry.
+/// `name@version` is never a variant (the resolver reports it as a primary
+/// of its own), and a store entry reached through a link is not a store
+/// entry.
 #[cfg(unix)]
 #[tokio::test]
 #[serial_test::parallel]
diff --git a/crates/socket-patch-core/tests/crawler_npm_e2e.rs b/crates/socket-patch-core/tests/crawler_npm_e2e.rs
index d70475a9..cd73f644 100644
--- a/crates/socket-patch-core/tests/crawler_npm_e2e.rs
+++ b/crates/socket-patch-core/tests/crawler_npm_e2e.rs
@@ -2543,19 +2543,42 @@ async fn find_by_purls_resolves_vlt_store_transitives() {
         let purls: Vec<String> = copies.keys().cloned().collect();
         assert!(purls.len() > 200, "{tree}: the capture is the full tree");
 
+        let importer_links: Vec<std::path::PathBuf> = listing["importers"]
+            .as_object()
+            .unwrap()
+            .keys()
+            .map(|key| nm.join(key))
+            .collect();
         let result = NpmCrawler.find_by_purls(&nm, &purls).await.unwrap();
         for purl in &purls {
             let found = result
                 .get(purl)
                 .unwrap_or_else(|| panic!("{tree}: {purl} must resolve"));
-            let allowed: Vec<_> = copies[purl].iter().map(|p| canonical(p)).collect();
+            let mut allowed: Vec<_> = copies[purl].iter().map(|p| canonical(p)).collect();
+            let mut resolved = Vec::new();
             for pkg in found {
+                let is_link = std::fs::symlink_metadata(&pkg.path)
+                    .unwrap()
+                    .file_type()
+                    .is_symlink();
+                assert!(
+                    !is_link || importer_links.contains(&pkg.path),
+                    "{tree}: {purl} resolved to the dependency link {}",
+                    pkg.path.display()
+                );
                 assert!(
                     allowed.contains(&canonical(&pkg.path)),
                     "{tree}: {purl} resolved to {} which is no copy of it",
                     pkg.path.display()
                 );
+                resolved.push(canonical(&pkg.path));
             }
+            resolved.sort();
+            allowed.sort();
+            assert_eq!(
+                resolved, allowed,
+                "{tree}: {purl} resolves to each real copy exactly once; got {found:?}"
+            );
             if let Some(key) = vlt_importer_key(&listing, tmp.path(), purl) {
                 assert_eq!(
                     found[0].path,
@@ -2572,6 +2595,12 @@ async fn find_by_purls_resolves_vlt_store_transitives() {
                 .is_ok_and(|rel| rel.to_string_lossy().contains("debug"))),
             "{tree}: the modifier-extra ms entry must resolve; got {ms:?}"
         );
+        let tap = &result["pkg:npm/tap@15.2.3"];
+        assert_eq!(
+            tap.len(),
+            1,
+            "{tree}: the git entry's link to tap is an edge, not a copy; got {tap:?}"
+        );
         let alias = &result["pkg:npm/left-pad@1.1.3"];
         assert_eq!(
             alias[0].path.parent().unwrap().parent().unwrap().parent(),
@@ -2732,8 +2761,161 @@ async fn find_by_purls_probes_undecodable_vlt_store_entry() {
     }
 }
 
+/// Links inside a store entry's `node_modules` are dependency edges, never
+/// copies: a git entry and a registry entry both link `tap` and `@s/p`
+/// from their real entries, on either side of the real entries in readdir
+/// order. An importer link into an undecodable entry already names that
+/// entry's copy, so the probe of the entry adds nothing.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_skips_vlt_dependency_links_and_importer_resolved_copies() {
+    use std::os::unix::fs::symlink;
+
+    let tmp = tempfile::tempdir().unwrap();
+    let nm = tmp.path().join("node_modules");
+    let store = nm.join(".vlt");
+    tokio::fs::create_dir_all(&store).await.unwrap();
+    tokio::fs::write(nm.join(".vlt-lock.json"), b"{}")
+        .await
+        .unwrap();
+    let tap = store.join("~npm~tap@1.0.0/node_modules/tap");
+    stage_pkg_dir(&tap, "tap", "1.0.0").await;
+    let scoped = store.join("~npm~@s+p@1.0.0/node_modules/@s/p");
+    stage_pkg_dir(&scoped, "@s/p", "1.0.0").await;
+    for (id, name) in [("git~github_cx+y~v1.0.0", "y"), ("~npm~zz@1.0.0", "zz")] {
+        let entry_nm = store.join(id).join("node_modules");
+        stage_pkg_dir(&entry_nm.join(name), name, "1.0.0").await;
+        symlink(
+            "../../~npm~tap@1.0.0/node_modules/tap",
+            entry_nm.join("tap"),
+        )
+        .unwrap();
+        tokio::fs::create_dir_all(entry_nm.join("@s"))
+            .await
+            .unwrap();
+        symlink(
+            "../../../~npm~@s+p@1.0.0/node_modules/@s/p",
+            entry_nm.join("@s/p"),
+        )
+        .unwrap();
+    }
+    symlink(".vlt/git~github_cx+y~v1.0.0/node_modules/y", nm.join("y")).unwrap();
+    let remote_id = "remote~https_c++r.example+left-pad-1.2.0.tgz";
+    stage_pkg_dir(
+        &store.join(remote_id).join("node_modules/left-pad"),
+        "left-pad",
+        "1.2.0",
+    )
+    .await;
+    symlink(
+        format!(".vlt/{remote_id}/node_modules/left-pad"),
+        nm.join("left-pad"),
+    )
+    .unwrap();
+
+    let purls: Vec<String> = [
+        "pkg:npm/tap@1.0.0",
+        "pkg:npm/@s/p@1.0.0",
+        "pkg:npm/zz@1.0.0",
+        "pkg:npm/y@1.0.0",
+        "pkg:npm/left-pad@1.2.0",
+    ]
+    .iter()
+    .map(|p| p.to_string())
+    .collect();
+    let result = NpmCrawler.find_by_purls(&nm, &purls).await.unwrap();
+    let paths = |purl: &str| -> Vec<std::path::PathBuf> {
+        result
+            .get(purl)
+            .map(|found| found.iter().map(|p| p.path.clone()).collect())
+            .unwrap_or_default()
+    };
+    assert_eq!(paths("pkg:npm/tap@1.0.0"), vec![tap]);
+    assert_eq!(paths("pkg:npm/@s/p@1.0.0"), vec![scoped]);
+    assert_eq!(
+        paths("pkg:npm/zz@1.0.0"),
+        vec![store.join("~npm~zz@1.0.0/node_modules/zz")]
+    );
+    assert_eq!(paths("pkg:npm/y@1.0.0"), vec![nm.join("y")]);
+    assert_eq!(paths("pkg:npm/left-pad@1.2.0"), vec![nm.join("left-pad")]);
+}
+
+/// A git (or remote, `file:`) entry holding a real copy whose package.json
+/// says the same `name@version` as a registry copy is an installed copy in
+/// its own right: the resolver returns it beside the importer link, while
+/// the peer fan-out from the importer link never adds it (it is no peer
+/// variant, and the resolver already reports it).
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_returns_same_version_git_copy_as_its_own_primary() {
+    use socket_patch_core::crawlers::npm_crawler::find_store_peer_variant_copies;
+
+    let tmp = tempfile::tempdir().unwrap();
+    let nm = tmp.path().join("node_modules");
+    let store = nm.join(".vlt");
+    stage_pkg_dir(
+        &store.join("~npm~tap@1.0.0/node_modules/tap"),
+        "tap",
+        "1.0.0",
+    )
+    .await;
+    let git_copy = store.join("git~github_cz+tap~v1.0.0/node_modules/tap");
+    stage_pkg_dir(&git_copy, "tap", "1.0.0").await;
+    std::os::unix::fs::symlink(".vlt/~npm~tap@1.0.0/node_modules/tap", nm.join("tap")).unwrap();
+
+    let purl = "pkg:npm/tap@1.0.0".to_string();
+    let result = NpmCrawler
+        .find_by_purls(&nm, std::slice::from_ref(&purl))
+        .await
+        .unwrap();
+    assert_eq!(
+        result[&purl]
+            .iter()
+            .map(|p| p.path.clone())
+            .collect::<Vec<_>>(),
+        vec![nm.join("tap"), git_copy]
+    );
+    assert!(find_store_peer_variant_copies(&nm.join("tap"))
+        .await
+        .is_empty());
+}
+
+/// Only a REAL `node_modules/.vlt` directory is a store: one that links to
+/// another tree is never followed, by the resolver or by the scan.
+#[cfg(unix)]
+#[tokio::test]
+#[serial_test::parallel]
+async fn find_by_purls_and_crawl_all_never_follow_a_linked_vlt_store() {
+    let tmp = tempfile::tempdir().unwrap();
+    let nm = tmp.path().join("node_modules");
+    tokio::fs::create_dir_all(&nm).await.unwrap();
+    tokio::fs::write(nm.join(".vlt-lock.json"), b"{}")
+        .await
+        .unwrap();
+    let outside = tempfile::tempdir().unwrap();
+    stage_pkg_dir(
+        &outside.path().join("~npm~x@1.0.0/node_modules/x"),
+        "x",
+        "1.0.0",
+    )
+    .await;
+    std::os::unix::fs::symlink(outside.path(), nm.join(".vlt")).unwrap();
+
+    let purl = "pkg:npm/x@1.0.0".to_string();
+    let result = NpmCrawler
+        .find_by_purls(&nm, std::slice::from_ref(&purl))
+        .await
+        .unwrap();
+    assert!(result.is_empty(), "got {result:?}");
+    let scanned = NpmCrawler.crawl_all(&options_at(tmp.path())).await;
+    assert!(!scanned.iter().any(|p| p.purl == purl), "got {scanned:?}");
+}
+
 /// What the traversal must never read inside `.vlt`: the hoist dir
-/// `node_modules` (links plus real `@scope` dirs), the `vlt.json` file,
+/// `node_modules` (links plus real `@scope` dirs, skipped whole even when
+/// it holds a `node_modules` of its own), the `vlt.json` file,
 /// `.VLT.DELETE.<key>.<DepID>` rollback staging, an entry dir without its
 /// own `node_modules`, an entry reached through a link, and an entry's
 /// `.bin`. Decoy packages sit in each; none may resolve or be scanned.
@@ -2760,6 +2942,12 @@ async fn find_by_purls_and_crawl_all_skip_vlt_hoist_dir_and_vlt_json_and_delete_
         "9.9.9",
     )
     .await;
+    stage_pkg_dir(
+        &store.join("node_modules/node_modules/nested-hoist-decoy"),
+        "nested-hoist-decoy",
+        "9.9.9",
+    )
+    .await;
     stage_pkg_dir(
         &store.join(".VLT.DELETE.4f2a.~npm~ghost@1.0.0/node_modules/ghost"),
         "ghost",
@@ -2785,6 +2973,7 @@ async fn find_by_purls_and_crawl_all_skip_vlt_hoist_dir_and_vlt_json_and_delete_
     let decoys = [
         "pkg:npm/hoist-decoy@9.9.9",
         "pkg:npm/@babel/scoped-decoy@9.9.9",
+        "pkg:npm/nested-hoist-decoy@9.9.9",
         "pkg:npm/ghost@1.0.0",
         "pkg:npm/bare@1.0.0",
         "pkg:npm/linked@1.0.0",

From 44460c1a81c44195afc5a4a2ac27460db2ccf806 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 22:10:43 -0400
Subject: [PATCH 11/46] Rewrite vlt locks for hosted patches

The hosted rewriter now understands vlt-lock.json. For each patched
package it points every default-registry node at the Socket-hosted
tarball by splicing only the integrity and URL slots, so the DepID, the
flags, the trailing slots, the edges and the options stay byte-identical
and vlt ci keeps the lock as written. It reads every vlt lock era
(no lockfileVersion, 0 with the legacy ids, 1), refuses a lock vlt
itself could not read (BOM, unknown version, non-canonical layout),
skips named-alias, scoped and jsr registry copies with a warning, and
warns when an old vlt would ignore the lock.

Rollback, remove and the vendored takeover now revert these edits,
including ledgers the depscan PR flow writes: the registry slots go
back on the node even after vlt re-laid the line, and a node vlt has
re-locked away counts as already reverted.

The scan and get commands start reading vlt-lock.json in a later change;
until then this is reachable through the shared golden fixtures and the
revert paths.

Assisted-by: Claude Code:claude-opus-5-5
---
 .gitattributes                                |    3 +
 .gitignore                                    |    3 +
 CHANGELOG.md                                  |    8 +
 crates/socket-patch-cli/CLI_CONTRACT.md       |    2 +-
 .../tests/in_process_rollback_hosted.rs       |   63 +-
 .../src/patch/redirect/mod.rs                 |   25 +-
 .../src/patch/redirect/replay.rs              |  135 ++-
 .../src/patch/redirect/state.rs               |   65 +-
 .../src/patch/redirect/takeover.rs            |  143 ++-
 .../src/patch/redirect/vlt.rs                 |  894 ++++++++++++++
 .../vlt/alias-edge/expected-confirmation.json |    7 +
 .../npm/vlt/alias-edge/expected-edits.json    |   10 +
 .../npm/vlt/alias-edge/expected-warnings.json |    1 +
 .../npm/vlt/alias-edge/expected/vlt-lock.json |   14 +
 .../npm/vlt/alias-edge/input/vlt-lock.json    |   14 +
 .../npm/vlt/alias-edge/overrides.json         |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   16 +
 .../input/vlt-lock.json                       |   16 +
 .../alias-url-equals-registry/overrides.json  |   13 +
 .../npm/vlt/basic/expected-confirmation.json  |    7 +
 .../npm/vlt/basic/expected-edits.json         |   10 +
 .../npm/vlt/basic/expected-warnings.json      |    1 +
 .../npm/vlt/basic/expected/vlt-lock.json      |   16 +
 .../npm/vlt/basic/input/vlt-lock.json         |   16 +
 .../redirect/npm/vlt/basic/overrides.json     |   13 +
 .../expected-confirmation.json                |    8 +
 .../expected-edits.json                       |   18 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   12 +
 .../input/vlt-lock.json                       |   12 +
 .../bins-and-platform-slots/overrides.json    |   24 +
 .../bom-refusal/expected-confirmation.json    |    5 +
 .../npm/vlt/bom-refusal/expected-edits.json   |    1 +
 .../vlt/bom-refusal/expected-warnings.json    |    3 +
 .../npm/vlt/bom-refusal/input/vlt-lock.json   |   16 +
 .../npm/vlt/bom-refusal/overrides.json        |   13 +
 .../expected-confirmation.json                |   11 +
 .../vlt/capture-0.0.0-1/expected-edits.json   |   42 +
 .../capture-0.0.0-1/expected-warnings.json    |    5 +
 .../capture-0.0.0-1/expected/vlt-lock.json    |   39 +
 .../vlt/capture-0.0.0-1/input/vlt-lock.json   |   39 +
 .../npm/vlt/capture-0.0.0-1/overrides.json    |   69 ++
 .../expected-confirmation.json                |   12 +
 .../vlt/capture-0.0.0-16/expected-edits.json  |   50 +
 .../capture-0.0.0-16/expected-warnings.json   |    3 +
 .../capture-0.0.0-16/expected/vlt-lock.json   |   44 +
 .../vlt/capture-0.0.0-16/input/vlt-lock.json  |   44 +
 .../npm/vlt/capture-0.0.0-16/input/vlt.json   |    1 +
 .../npm/vlt/capture-0.0.0-16/overrides.json   |   69 ++
 .../expected-confirmation.json                |   12 +
 .../vlt/capture-0.0.0-19/expected-edits.json  |   50 +
 .../capture-0.0.0-19/expected-warnings.json   |    1 +
 .../capture-0.0.0-19/expected/vlt-lock.json   |   45 +
 .../vlt/capture-0.0.0-19/input/vlt-lock.json  |   45 +
 .../npm/vlt/capture-0.0.0-19/input/vlt.json   |    1 +
 .../npm/vlt/capture-0.0.0-19/overrides.json   |   69 ++
 .../expected-confirmation.json                |   12 +
 .../vlt/capture-0.0.0-32/expected-edits.json  |   50 +
 .../capture-0.0.0-32/expected-warnings.json   |    1 +
 .../capture-0.0.0-32/expected/vlt-lock.json   |   43 +
 .../vlt/capture-0.0.0-32/input/vlt-lock.json  |   43 +
 .../npm/vlt/capture-0.0.0-32/input/vlt.json   |    1 +
 .../npm/vlt/capture-0.0.0-32/overrides.json   |   69 ++
 .../expected-confirmation.json                |   12 +
 .../capture-1.0.0-rc.14/expected-edits.json   |   50 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   43 +
 .../capture-1.0.0-rc.14/input/vlt-lock.json   |   43 +
 .../vlt/capture-1.0.0-rc.14/input/vlt.json    |    1 +
 .../vlt/capture-1.0.0-rc.14/overrides.json    |   69 ++
 .../expected-confirmation.json                |   12 +
 .../capture-1.0.0-rc.15/expected-edits.json   |   50 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   43 +
 .../capture-1.0.0-rc.15/input/vlt-lock.json   |   43 +
 .../vlt/capture-1.0.0-rc.15/input/vlt.json    |    1 +
 .../vlt/capture-1.0.0-rc.15/overrides.json    |   69 ++
 .../expected-confirmation.json                |   12 +
 .../capture-1.0.0-rc.32/expected-edits.json   |   50 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   43 +
 .../capture-1.0.0-rc.32/input/vlt-lock.json   |   43 +
 .../vlt/capture-1.0.0-rc.32/input/vlt.json    |    1 +
 .../vlt/capture-1.0.0-rc.32/overrides.json    |   69 ++
 .../expected-confirmation.json                |   12 +
 .../capture-1.0.0-rc.33/expected-edits.json   |   50 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   46 +
 .../capture-1.0.0-rc.33/input/vlt-lock.json   |   46 +
 .../vlt/capture-1.0.0-rc.33/input/vlt.json    |    1 +
 .../vlt/capture-1.0.0-rc.33/overrides.json    |   69 ++
 .../expected-confirmation.json                |   12 +
 .../capture-1.0.0-rc.8/expected-edits.json    |   50 +
 .../capture-1.0.0-rc.8/expected-warnings.json |    1 +
 .../capture-1.0.0-rc.8/expected/vlt-lock.json |   43 +
 .../capture-1.0.0-rc.8/input/vlt-lock.json    |   43 +
 .../npm/vlt/capture-1.0.0-rc.8/input/vlt.json |    1 +
 .../npm/vlt/capture-1.0.0-rc.8/overrides.json |   69 ++
 .../capture-1.0.10/expected-confirmation.json |   12 +
 .../vlt/capture-1.0.10/expected-edits.json    |   50 +
 .../vlt/capture-1.0.10/expected-warnings.json |    1 +
 .../vlt/capture-1.0.10/expected/vlt-lock.json |   46 +
 .../vlt/capture-1.0.10/input/vlt-lock.json    |   46 +
 .../npm/vlt/capture-1.0.10/input/vlt.json     |    1 +
 .../npm/vlt/capture-1.0.10/overrides.json     |   69 ++
 .../capture-1.1.1/expected-confirmation.json  |   12 +
 .../npm/vlt/capture-1.1.1/expected-edits.json |   50 +
 .../vlt/capture-1.1.1/expected-warnings.json  |    1 +
 .../vlt/capture-1.1.1/expected/vlt-lock.json  |   46 +
 .../npm/vlt/capture-1.1.1/input/vlt-lock.json |   46 +
 .../npm/vlt/capture-1.1.1/input/vlt.json      |    1 +
 .../npm/vlt/capture-1.1.1/overrides.json      |   69 ++
 .../capture-1.2.0/expected-confirmation.json  |   12 +
 .../npm/vlt/capture-1.2.0/expected-edits.json |   50 +
 .../vlt/capture-1.2.0/expected-warnings.json  |    1 +
 .../vlt/capture-1.2.0/expected/vlt-lock.json  |   46 +
 .../npm/vlt/capture-1.2.0/input/vlt-lock.json |   46 +
 .../npm/vlt/capture-1.2.0/input/vlt.json      |    1 +
 .../npm/vlt/capture-1.2.0/overrides.json      |   69 ++
 .../npm/vlt/crlf/expected-confirmation.json   |    7 +
 .../redirect/npm/vlt/crlf/expected-edits.json |   10 +
 .../npm/vlt/crlf/expected-warnings.json       |    1 +
 .../npm/vlt/crlf/expected/vlt-lock.json       |   16 +
 .../redirect/npm/vlt/crlf/input/vlt-lock.json |   16 +
 .../redirect/npm/vlt/crlf/overrides.json      |   13 +
 .../expected-confirmation.json                |    5 +
 .../expected-edits.json                       |    1 +
 .../expected-warnings.json                    |    4 +
 .../input/vlt-lock.json                       |   15 +
 .../custom-registry-skipped/overrides.json    |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   15 +
 .../input/vlt-lock.json                       |   15 +
 .../vlt/default-registry-alias/overrides.json |   13 +
 .../expected-confirmation.json                |    5 +
 .../hidden-lock-sentinel/expected-edits.json  |    1 +
 .../expected-warnings.json                    |    3 +
 .../input/node_modules/.vlt-lock.json         |    0
 .../vlt/hidden-lock-sentinel/input/vlt.json   |    1 +
 .../vlt/hidden-lock-sentinel/overrides.json   |   13 +
 .../invalid-json/expected-confirmation.json   |    5 +
 .../npm/vlt/invalid-json/expected-edits.json  |    1 +
 .../vlt/invalid-json/expected-warnings.json   |    3 +
 .../npm/vlt/invalid-json/input/vlt-lock.json  |    9 +
 .../npm/vlt/invalid-json/overrides.json       |   13 +
 .../jsr-skipped/expected-confirmation.json    |    7 +
 .../npm/vlt/jsr-skipped/expected-edits.json   |   10 +
 .../vlt/jsr-skipped/expected-warnings.json    |    3 +
 .../vlt/jsr-skipped/expected/vlt-lock.json    |   19 +
 .../npm/vlt/jsr-skipped/input/vlt-lock.json   |   19 +
 .../npm/vlt/jsr-skipped/overrides.json        |   14 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   18 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   12 +
 .../input/vlt-lock.json                       |   12 +
 .../input/vlt.json                            |    1 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    4 +
 .../expected/vlt-lock.json                    |    9 +
 .../input/vlt-lock.json                       |    9 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    7 +
 .../lock-absent-version/expected-edits.json   |   10 +
 .../expected-warnings.json                    |    3 +
 .../expected/vlt-lock.json                    |    9 +
 .../lock-absent-version/input/vlt-lock.json   |    9 +
 .../vlt/lock-absent-version/input/vlt.json    |    1 +
 .../vlt/lock-absent-version/overrides.json    |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    3 +
 .../expected/vlt-lock.json                    |   10 +
 .../input/vlt-lock.json                       |   10 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    7 +
 .../lock-v0-empty-segment/expected-edits.json |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   10 +
 .../lock-v0-empty-segment/input/vlt-lock.json |   10 +
 .../vlt/lock-v0-empty-segment/input/vlt.json  |    3 +
 .../vlt/lock-v0-empty-segment/overrides.json  |   13 +
 .../expected-confirmation.json                |    7 +
 .../lock-v0-npm-segment/expected-edits.json   |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   14 +
 .../lock-v0-npm-segment/input/vlt-lock.json   |   14 +
 .../vlt/lock-v0-npm-segment/overrides.json    |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    4 +
 .../expected/vlt-lock.json                    |   12 +
 .../input/vlt-lock.json                       |   12 +
 .../overrides.json                            |   13 +
 .../lock-v1-3tuple/expected-confirmation.json |    7 +
 .../vlt/lock-v1-3tuple/expected-edits.json    |   10 +
 .../vlt/lock-v1-3tuple/expected-warnings.json |    1 +
 .../vlt/lock-v1-3tuple/expected/vlt-lock.json |   12 +
 .../vlt/lock-v1-3tuple/input/vlt-lock.json    |   12 +
 .../npm/vlt/lock-v1-3tuple/overrides.json     |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   15 +
 .../input/vlt-lock.json                       |   15 +
 .../lock-v1-both-registry-keys/overrides.json |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   15 +
 .../input/vlt-lock.json                       |   15 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    5 +
 .../lock-version-exponent/expected-edits.json |    1 +
 .../expected-warnings.json                    |    3 +
 .../lock-version-exponent/input/vlt-lock.json |   16 +
 .../vlt/lock-version-exponent/overrides.json  |   13 +
 .../expected-confirmation.json                |    5 +
 .../lock-version-float/expected-edits.json    |    1 +
 .../lock-version-float/expected-warnings.json |    3 +
 .../lock-version-float/input/vlt-lock.json    |   16 +
 .../npm/vlt/lock-version-float/overrides.json |   13 +
 .../expected-confirmation.json                |    5 +
 .../lock-version-string/expected-edits.json   |    1 +
 .../expected-warnings.json                    |    3 +
 .../lock-version-string/input/vlt-lock.json   |   16 +
 .../vlt/lock-version-string/overrides.json    |   13 +
 .../expected-confirmation.json                |    5 +
 .../expected-edits.json                       |    1 +
 .../expected-warnings.json                    |    3 +
 .../input/vlt-lock.json                       |   16 +
 .../lock-version-unsupported/overrides.json   |   13 +
 .../expected-confirmation.json                |    5 +
 .../lone-surrogate-string/expected-edits.json |    1 +
 .../expected-warnings.json                    |    3 +
 .../lone-surrogate-string/input/vlt-lock.json |   16 +
 .../vlt/lone-surrogate-string/overrides.json  |   13 +
 .../expected-confirmation.json                |    7 +
 .../mirror-registries-npm/expected-edits.json |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   14 +
 .../mirror-registries-npm/input/vlt-lock.json |   14 +
 .../vlt/mirror-registries-npm/overrides.json  |   13 +
 .../missing-sha512/expected-confirmation.json |    7 +
 .../vlt/missing-sha512/expected-edits.json    |    1 +
 .../vlt/missing-sha512/expected-warnings.json |    3 +
 .../vlt/missing-sha512/input/vlt-lock.json    |   16 +
 .../npm/vlt/missing-sha512/overrides.json     |   11 +
 .../vlt/mixed-eol/expected-confirmation.json  |    8 +
 .../npm/vlt/mixed-eol/expected-edits.json     |   18 +
 .../npm/vlt/mixed-eol/expected-warnings.json  |    1 +
 .../npm/vlt/mixed-eol/expected/vlt-lock.json  |   18 +
 .../npm/vlt/mixed-eol/input/vlt-lock.json     |   18 +
 .../redirect/npm/vlt/mixed-eol/overrides.json |   24 +
 .../modifier-extra/expected-confirmation.json |    8 +
 .../vlt/modifier-extra/expected-edits.json    |   18 +
 .../vlt/modifier-extra/expected-warnings.json |    1 +
 .../vlt/modifier-extra/expected/vlt-lock.json |   19 +
 .../vlt/modifier-extra/input/vlt-lock.json    |   19 +
 .../npm/vlt/modifier-extra/overrides.json     |   24 +
 .../expected-confirmation.json                |    7 +
 .../vlt/multiple-versions/expected-edits.json |   10 +
 .../multiple-versions/expected-warnings.json  |    1 +
 .../multiple-versions/expected/vlt-lock.json  |   16 +
 .../vlt/multiple-versions/input/vlt-lock.json |   16 +
 .../npm/vlt/multiple-versions/overrides.json  |   13 +
 .../expected-confirmation.json                |    5 +
 .../no-lockfile-vlt-json/expected-edits.json  |    1 +
 .../expected-warnings.json                    |    3 +
 .../vlt/no-lockfile-vlt-json/input/vlt.json   |    7 +
 .../vlt/no-lockfile-vlt-json/overrides.json   |   13 +
 .../expected-confirmation.json                |    5 +
 .../expected-edits.json                       |    1 +
 .../expected-warnings.json                    |    3 +
 .../input/vlt-lock.json                       |   26 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    5 +
 .../vlt/not-json-object/expected-edits.json   |    1 +
 .../not-json-object/expected-warnings.json    |    3 +
 .../vlt/not-json-object/input/vlt-lock.json   |    1 +
 .../npm/vlt/not-json-object/overrides.json    |   13 +
 .../peer-extras/expected-confirmation.json    |    7 +
 .../npm/vlt/peer-extras/expected-edits.json   |   26 +
 .../vlt/peer-extras/expected-warnings.json    |    1 +
 .../vlt/peer-extras/expected/vlt-lock.json    |   21 +
 .../npm/vlt/peer-extras/input/vlt-lock.json   |   21 +
 .../npm/vlt/peer-extras/overrides.json        |   13 +
 .../expected-confirmation.json                |    7 +
 .../re-redirect-stale-url/expected-edits.json |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   14 +
 .../re-redirect-stale-url/input/vlt-lock.json |   14 +
 .../vlt/re-redirect-stale-url/overrides.json  |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   20 +
 .../input/vlt-lock.json                       |   20 +
 .../remote-file-git-untouched/overrides.json  |   13 +
 .../vlt/rerun-noop/expected-confirmation.json |    7 +
 .../npm/vlt/rerun-noop/expected-edits.json    |    1 +
 .../npm/vlt/rerun-noop/expected-warnings.json |    1 +
 .../npm/vlt/rerun-noop/input/vlt-lock.json    |   14 +
 .../npm/vlt/rerun-noop/overrides.json         |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |    1 +
 .../expected-warnings.json                    |    3 +
 .../input/vlt-lock.json                       |   13 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    3 +
 .../expected/vlt-lock.json                    |   15 +
 .../input/vlt-lock.json                       |   15 +
 .../input/vlt.json                            |    1 +
 .../overrides.json                            |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    3 +
 .../expected/vlt-lock.json                    |   12 +
 .../input/vlt-lock.json                       |   12 +
 .../scalar-registry-warning/overrides.json    |   13 +
 .../scoped-package/expected-confirmation.json |    7 +
 .../vlt/scoped-package/expected-edits.json    |   18 +
 .../vlt/scoped-package/expected-warnings.json |    1 +
 .../vlt/scoped-package/expected/vlt-lock.json |   18 +
 .../vlt/scoped-package/input/vlt-lock.json    |   18 +
 .../npm/vlt/scoped-package/overrides.json     |   14 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    3 +
 .../expected/vlt-lock.json                    |   19 +
 .../input/vlt-lock.json                       |   19 +
 .../scoped-registry-skipped/overrides.json    |   14 +
 .../expected-confirmation.json                |    9 +
 .../expected-edits.json                       |   38 +
 .../expected-warnings.json                    |    3 +
 .../expected/package-lock.json                |   26 +
 .../expected/vlt-lock.json                    |   21 +
 .../input/node_modules/.vlt-lock.json         |    0
 .../input/package-lock.json                   |   26 +
 .../input/vlt-lock.json                       |   21 +
 .../overrides.json                            |   24 +
 .../expected-confirmation.json                |    7 +
 .../sibling-package-lock/expected-edits.json  |   24 +
 .../expected-warnings.json                    |    3 +
 .../expected/package-lock.json                |   26 +
 .../expected/vlt-lock.json                    |   16 +
 .../input/package-lock.json                   |   26 +
 .../sibling-package-lock/input/vlt-lock.json  |   16 +
 .../vlt/sibling-package-lock/overrides.json   |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   16 +
 .../expected-warnings.json                    |    4 +
 .../expected/package-lock.json                |   26 +
 .../input/package-lock.json                   |   26 +
 .../input/vlt-lock.json                       |   21 +
 .../vlt/sibling-refused-in-vlt/overrides.json |   13 +
 .../expected-confirmation.json                |    7 +
 .../unsupported-lock-key/expected-edits.json  |    1 +
 .../expected-warnings.json                    |    3 +
 .../unsupported-lock-key/input/vlt-lock.json  |   21 +
 .../vlt/unsupported-lock-key/overrides.json   |   13 +
 .../expected-confirmation.json                |    7 +
 .../url-segment-default/expected-edits.json   |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   15 +
 .../url-segment-default/input/vlt-lock.json   |   15 +
 .../vlt/url-segment-default/overrides.json    |   13 +
 .../expected-confirmation.json                |    7 +
 .../expected-edits.json                       |   10 +
 .../expected-warnings.json                    |    1 +
 .../expected/vlt-lock.json                    |   15 +
 .../input/vlt-lock.json                       |   15 +
 .../url-segment-trailing-slash/overrides.json |   13 +
 .../expected-confirmation.json                |    5 +
 .../vendored-entry-tgz/expected-edits.json    |    1 +
 .../vendored-entry-tgz/expected-warnings.json |    3 +
 .../vendored-entry-tgz/input/vlt-lock.json    |   14 +
 .../npm/vlt/vendored-entry-tgz/overrides.json |   13 +
 .../vendored-entry/expected-confirmation.json |    5 +
 .../vlt/vendored-entry/expected-edits.json    |    1 +
 .../vlt/vendored-entry/expected-warnings.json |    3 +
 .../vlt/vendored-entry/input/vlt-lock.json    |   14 +
 .../npm/vlt/vendored-entry/overrides.json     |   13 +
 .../vlt-json-bom/expected-confirmation.json   |    7 +
 .../npm/vlt/vlt-json-bom/expected-edits.json  |   10 +
 .../vlt/vlt-json-bom/expected-warnings.json   |    1 +
 .../vlt/vlt-json-bom/expected/vlt-lock.json   |   10 +
 .../npm/vlt/vlt-json-bom/input/vlt-lock.json  |   10 +
 .../npm/vlt/vlt-json-bom/input/vlt.json       |    3 +
 .../npm/vlt/vlt-json-bom/overrides.json       |   13 +
 .../vlt/workspace/expected-confirmation.json  |    7 +
 .../npm/vlt/workspace/expected-edits.json     |   10 +
 .../npm/vlt/workspace/expected-warnings.json  |    1 +
 .../npm/vlt/workspace/expected/vlt-lock.json  |   15 +
 .../npm/vlt/workspace/input/vlt-lock.json     |   15 +
 .../redirect/npm/vlt/workspace/input/vlt.json |    8 +
 .../redirect/npm/vlt/workspace/overrides.json |   13 +
 .../vex-discover-golden/redirect-npm.json     | 1041 +++++++++++++++++
 .../vex-discover-golden/vlt-locks.json        |   98 ++
 .../fixtures/vlt-locks/0.0.0-1/vlt-lock.json  |   39 +
 .../fixtures/vlt-locks/0.0.0-16/vlt-lock.json |   44 +
 .../fixtures/vlt-locks/0.0.0-16/vlt.json      |    1 +
 .../fixtures/vlt-locks/0.0.0-19/vlt-lock.json |   45 +
 .../fixtures/vlt-locks/0.0.0-19/vlt.json      |    1 +
 .../fixtures/vlt-locks/0.0.0-32/vlt-lock.json |   43 +
 .../fixtures/vlt-locks/0.0.0-32/vlt.json      |    1 +
 .../vlt-locks/1.0.0-rc.14/vlt-lock.json       |   43 +
 .../fixtures/vlt-locks/1.0.0-rc.14/vlt.json   |    1 +
 .../vlt-locks/1.0.0-rc.15/vlt-lock.json       |   43 +
 .../fixtures/vlt-locks/1.0.0-rc.15/vlt.json   |    1 +
 .../vlt-locks/1.0.0-rc.32/vlt-lock.json       |   43 +
 .../fixtures/vlt-locks/1.0.0-rc.32/vlt.json   |    1 +
 .../vlt-locks/1.0.0-rc.33/vlt-lock.json       |   46 +
 .../fixtures/vlt-locks/1.0.0-rc.33/vlt.json   |    1 +
 .../vlt-locks/1.0.0-rc.8/vlt-lock.json        |   43 +
 .../fixtures/vlt-locks/1.0.0-rc.8/vlt.json    |    1 +
 .../fixtures/vlt-locks/1.0.10/vlt-lock.json   |   46 +
 .../tests/fixtures/vlt-locks/1.0.10/vlt.json  |    1 +
 .../fixtures/vlt-locks/1.1.1/vlt-lock.json    |   46 +
 .../tests/fixtures/vlt-locks/1.1.1/vlt.json   |    1 +
 .../fixtures/vlt-locks/1.2.0/vlt-lock.json    |   46 +
 .../tests/fixtures/vlt-locks/1.2.0/vlt.json   |    1 +
 .../tests/fixtures/vlt-locks/README.md        |   28 +
 .../tests/redirect_golden.rs                  |   24 +
 .../tests/redirect_golden_reverse_replay.rs   |  220 ++++
 crates/socket-patch-core/tests/vlt_locks.rs   |  344 ++++++
 435 files changed, 9308 insertions(+), 88 deletions(-)
 create mode 100644 crates/socket-patch-core/src/patch/redirect/vlt.rs
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/node_modules/.vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/node_modules/.vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/package-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-1/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vlt-locks/README.md
 create mode 100644 crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
 create mode 100644 crates/socket-patch-core/tests/vlt_locks.rs

diff --git a/.gitattributes b/.gitattributes
index e7f9e267..679f441f 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -10,3 +10,6 @@ crates/socket-patch-core/tests/fixtures/pdm-native/*.lock -text
 # refuse CRLF by design (vendor_lockfile_crlf_unsupported), and the tests
 # derive their CRLF variants from the LF bytes themselves.
 crates/socket-patch-core/tests/fixtures/pnpm-hosted/** -text
+
+# Captured vlt locks are byte-real; CRLF variants are derived in the tests.
+crates/socket-patch-core/tests/fixtures/vlt-locks/** -text
diff --git a/.gitignore b/.gitignore
index f751c7dc..b3a6faf3 100644
--- a/.gitignore
+++ b/.gitignore
@@ -41,6 +41,9 @@ build/Release
 # Dependency directories
 node_modules/
 jspm_packages/
+# vlt golden inputs carry an install-state sentinel (commit with `git add -f`)
+!crates/socket-patch-core/tests/fixtures/redirect/**/node_modules/
+!crates/socket-patch-core/tests/fixtures/redirect/**/node_modules/.vlt-lock.json
 
 # Snowpack dependency directory (https://snowpack.dev/)
 web_modules/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f192916..2ebc467e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -279,6 +279,14 @@ into the new version's section — see docs/releasing.md.
   `failed to roll back` for pnpm and vlt alike. `--update` in a vlt
   project suggests `vlt install @socketsecurity/socket-patch@latest`, and
   in vlx's cache `vlx -y -- @socketsecurity/socket-patch@latest …`.
+- **`rollback`, `remove` and the vendored takeover revert hosted vlt
+  redirects.** A `redirect_vlt_lock_node` ledger edit (written by the
+  depscan PR flow, or by `scan --mode hosted` once it rewrites
+  `vlt-lock.json`) puts the registry integrity and URL back on the node,
+  keeping whatever vlt re-laid since (a moved comma, a new flag or bins
+  slot, CRLF re-saved as LF). A node vlt has since re-locked away is
+  already reverted; any other change refuses with the `vlt-lock.json`
+  remedy. Peer and modifier variants are claimed per `name@version`.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 7e89f34f..6168dd2c 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -921,7 +921,7 @@ Restore the system but keep the local patch state for a later re-apply: manifest
 
 ### Hosted unwind coverage
 
-* **Per-purl reverts** exist for **cargo, golang and the npm family** (`redirect_revert_supported`): staged, fail-closed on drift, and honoring `dry_run` (every inverse and drift check resolves like a wet run; nothing flushes and the ledger is untouched). npm purls on projects with bun-lock edits DEFER to the whole-ledger replay (below) whenever it will run — the scope covers every record, and the replay stages the bun group all-or-nothing. A SCOPED unwind (`rollback <purl>`, or `remove <purl>` while other hosted records remain) takes the per-purl revert instead: it claims that purl's `redirect_bun_lock_package` edits by the recorded line's spec (`<name>@<version>` registry spec, or a hosted URL whose tarball leaf is `<name>-<version>.tgz`) and replays them like the yarn/pnpm text kinds (whole-line fragments, CRLF-exact); a sibling version's edit is neither claimed nor a refusal; an edit that mentions the package but is not a bun packages-entry line refuses with the unscoped-`rollback` remedy. Pinned by `tests/in_process_vendor_bun_takeover.rs` (`bun_scoped_rollback_of_one_of_two_hosted_records_unwinds_only_that_purl` and the `remove` twin). Native binary `redirect_bun_lockb_package` snapshots follow the same scoped ownership rule and restore only the claimed package records; unrelated binary resolutions stay intact. yarn lock blocks (`redirect_yarn_berry_entry` / `redirect_yarn_classic_entry`) are recorded in the lock's on-disk line endings and replayed byte-exactly; when a `core.autocrlf` checkout has since flipped the lock's UNIFORM ending (LF ↔ CRLF — the committed ledger keeps its fragments verbatim), this per-purl revert and the whole-ledger replay below match the recorded blocks respelled in the live ending and restore in that ending (v5.0). A lock with mixed endings proves nothing and still refuses as drift.
+* **Per-purl reverts** exist for **cargo, golang and the npm family** (`redirect_revert_supported`): staged, fail-closed on drift, and honoring `dry_run` (every inverse and drift check resolves like a wet run; nothing flushes and the ledger is untouched). npm purls on projects with bun-lock edits DEFER to the whole-ledger replay (below) whenever it will run — the scope covers every record, and the replay stages the bun group all-or-nothing. A SCOPED unwind (`rollback <purl>`, or `remove <purl>` while other hosted records remain) takes the per-purl revert instead: it claims that purl's `redirect_bun_lock_package` edits by the recorded line's spec (`<name>@<version>` registry spec, or a hosted URL whose tarball leaf is `<name>-<version>.tgz`) and replays them like the yarn/pnpm text kinds (whole-line fragments, CRLF-exact); a sibling version's edit is neither claimed nor a refusal; an edit that mentions the package but is not a bun packages-entry line refuses with the unscoped-`rollback` remedy. Pinned by `tests/in_process_vendor_bun_takeover.rs` (`bun_scoped_rollback_of_one_of_two_hosted_records_unwinds_only_that_purl` and the `remove` twin). Native binary `redirect_bun_lockb_package` snapshots follow the same scoped ownership rule and restore only the claimed package records; unrelated binary resolutions stay intact. yarn lock blocks (`redirect_yarn_berry_entry` / `redirect_yarn_classic_entry`) are recorded in the lock's on-disk line endings and replayed byte-exactly; when a `core.autocrlf` checkout has since flipped the lock's UNIFORM ending (LF ↔ CRLF — the committed ledger keeps its fragments verbatim), this per-purl revert and the whole-ledger replay below match the recorded blocks respelled in the live ending and restore in that ending (v5.0). A lock with mixed endings proves nothing and still refuses as drift. vlt `redirect_vlt_lock_node` edits record entry text (`"<DepID>": <tuple>`, no indent, comma or `\r`) and revert slot by slot, in the per-purl revert and the whole-ledger replay alike: the line keyed by the recorded DepID gets the recorded slots [2] and [3] back while it keeps the flags, trailing slots, comma and line ending vlt has written since; a line already at the recorded original, or a DepID vlt has re-locked away with no line still carrying the hosted URL, is already reverted; anything else refuses as drift (remedy: restore the registry pin for the DepID by hand, or re-run `socket-patch scan --mode hosted` and roll back). Per-purl claims are by key: `<name>@<version>` or `<name>@<version>~<extra>` (peer and modifier variants).
 * **Whole-ledger reverse replay** (`revert_remaining_redirect_edits`, core `patch/redirect/replay.rs`) runs whenever the in-scope hosted record set equals the FULL ledger record set — however the scope was spelled (bare `rollback`, `rollback '**'`, an identifier set covering every record; `remove` reuses the same eligibility rule). It walks every remaining ledger edit in reverse write order through a **per-kind inverse table**, staged and committed **per ecosystem group, all-or-nothing**: one drifted, ambiguous (a fragment appearing more than once), or unhandled edit refuses the whole group byte-untouched while other groups proceed. This covers **gem, golang, pypi, composer, bun**, the yarn/pnpm text kinds (normally claimed by the per-purl npm revert first), and the **non-package rideshare edits** — the pnpm `trustLockfile` auto-config (a pristine created scaffold is deleted; a user-modified one keeps the file and loses only the `trustLockfile: true` line, warned as `redirect_pnpm_trust_scaffold_modified`) — plus a "last one out turns off the lights" pass: when the record map empties but non-package edits remain, they are replayed in the same persist, so the trust edit never strands. The npm `.npmrc` `allow-remote=all` auto-config (`redirect_npmrc_allow_remote`) replays in the `npm` group (a pristine created file is deleted; otherwise only the line is removed, warned as `redirect_npmrc_allow_remote_modified` for a modified created file) and is ALSO claimed by the per-purl npm revert of the last package-lock entry, so a scoped unwind never strands it.
 * **maven and nuget fail closed**: their structured-metadata kinds (`redirect_maven_repository` / `redirect_maven_dep_management` / `redirect_maven_config` / `redirect_maven_trusted_checksums`, `redirect_nuget_source` / `redirect_nuget_lock`) have no revert implementation, so any such edit refuses its whole group (the maven `<version>` suffix rewrite alone IS invertible, but it rides the same all-or-nothing group). The refusal keeps their records + edits in the ledger and names the remedy: re-run `scan --mode hosted` to normalize, or restore the lockfiles from version control.
 * **Unknown edit kinds fail closed (forward compatibility).** A ledger edit kind this release has no inverse for (written by a newer socket-patch) refuses in the replay's reserved `unknown` group with "the redirect ledger holds a {kind} edit this socket-patch release does not understand; upgrade socket-patch", and every record of every ecosystem is held while that group refuses, so no record is dropped beside an edit it may own. The other groups still unwind on disk and drop their edits; only their records wait until the unknown group clears. A per-purl revert (`rollback <purl>`, `remove`, the hosted→vendored takeover) refuses with the same text, and with nothing written, when any unknown `redirect_*` edit's `key`, `original` or `new` names the purl's `<name>@<version>` (at a package-name boundary: `left-pad@1.3.0` does not name `pad@1.3.0`, nor does `@scope/a@1.0.0` name `a@1.0.0`). When that scope covers every record, the whole-ledger replay above still runs after the refusal. The vendored flows' takeover reconcile (`vendor_supersedes_redirect`) drops nothing for such a purl and falls back to the manual advisory. vlt ledgers (`redirect_vlt_lock_node` edits, vendored entries with `flavor: "vlt"`) require the socket-patch release that adds vlt support. The ledger `version` stays 1: compatibility is decided per kind.
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
index bd177041..6c4b80ea 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
@@ -854,17 +854,13 @@ async fn scoped_unsupported_ecosystem_fails_closed() {
 }
 
 /// A ledger written by a newer socket-patch carries a hosted edit kind this
-/// release has no revert for (`redirect_vlt_lock_node`). A scoped rollback
-/// of the purl it names must refuse with nothing written, and an unscoped
-/// one must keep the record while that edit survives.
-async fn write_vlt_ledger_fixture(root: &Path, with_gem: bool) -> String {
-    let vlt_new = format!(
-        "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-PATCHEDpatched==\",\"{LP_HOSTED_URL}\"]"
-    );
-    let vlt_lock = format!(
-        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {vlt_new}\n  }},\n  \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.2.3 ~npm~left-pad@1.2.3\"\n  }}\n}}\n"
-    );
-    std::fs::write(root.join("vlt-lock.json"), &vlt_lock).unwrap();
+/// release has no revert for (`redirect_future_lock_entry`). A scoped
+/// rollback of the purl it names must refuse with nothing written, and an
+/// unscoped one must keep the record while that edit survives.
+async fn write_unknown_kind_ledger_fixture(root: &Path, with_gem: bool) -> String {
+    let future_new = format!("left-pad@1.2.3 {LP_HOSTED_URL}");
+    let future_lock = format!("{future_new}\n");
+    std::fs::write(root.join("future.lock"), &future_lock).unwrap();
     std::fs::write(
         root.join("yarn.lock"),
         yarn_lock_content(&yarn_redirected_block()),
@@ -882,17 +878,17 @@ async fn write_vlt_ledger_fixture(root: &Path, with_gem: bool) -> String {
         edits.push(gem_source_edit());
     }
     edits.push(FileEdit {
-        path: "vlt-lock.json".to_string(),
-        kind: "redirect_vlt_lock_node".to_string(),
+        path: "future.lock".to_string(),
+        kind: "redirect_future_lock_entry".to_string(),
         action: "rewritten".to_string(),
         key: Some("left-pad@1.2.3".to_string()),
         original: Some(Value::String(
-            "\"~npm~left-pad@1.2.3\": [0,\"left-pad\",\"sha512-UPSTREAMupstream==\"]".to_string(),
+            "left-pad@1.2.3 sha512-UPSTREAMupstream==".to_string(),
         )),
-        new: Some(Value::String(vlt_new)),
+        new: Some(Value::String(future_new)),
     });
     write_hosted_ledger(root, records, edits).await;
-    vlt_lock
+    future_lock
 }
 
 fn ledger_edit_kinds(root: &Path) -> Vec<String> {
@@ -909,7 +905,7 @@ fn ledger_edit_kinds(root: &Path) -> Vec<String> {
 #[serial]
 async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
     let tmp = tempfile::tempdir().unwrap();
-    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), true).await;
+    let future_lock = write_unknown_kind_ledger_fixture(tmp.path(), true).await;
     let ledger_before = std::fs::read(ledger_path(tmp.path())).unwrap();
     let yarn_before = std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap();
 
@@ -925,10 +921,9 @@ async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
     assert_eq!(failed.len(), 1, "{envelope}");
     assert_eq!(failed[0]["purl"], LP_PURL);
     assert!(
-        failed[0]["error"]
-            .as_str()
-            .unwrap()
-            .contains("redirect_vlt_lock_node edit this socket-patch release does not understand"),
+        failed[0]["error"].as_str().unwrap().contains(
+            "redirect_future_lock_entry edit this socket-patch release does not understand"
+        ),
         "{envelope}"
     );
     assert_eq!(
@@ -940,8 +935,8 @@ async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
         yarn_before
     );
     assert_eq!(
-        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
-        vlt_lock
+        std::fs::read_to_string(tmp.path().join("future.lock")).unwrap(),
+        future_lock
     );
 }
 
@@ -949,7 +944,7 @@ async fn scoped_rollback_refuses_a_purl_named_by_an_unknown_edit_kind() {
 #[serial]
 async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
     let tmp = tempfile::tempdir().unwrap();
-    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), true).await;
+    let future_lock = write_unknown_kind_ledger_fixture(tmp.path(), true).await;
 
     let code = rollback_in_process(tmp.path(), Vec::new(), false).await;
     assert_eq!(
@@ -957,8 +952,8 @@ async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
         "an unknown edit kind must fail the rollback closed"
     );
     assert_eq!(
-        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
-        vlt_lock
+        std::fs::read_to_string(tmp.path().join("future.lock")).unwrap(),
+        future_lock
     );
     let ledger: Value =
         serde_json::from_slice(&std::fs::read(ledger_path(tmp.path())).unwrap()).unwrap();
@@ -966,7 +961,10 @@ async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
     assert!(ledger["records"].get(GEM_PURL).is_some(), "{ledger}");
     // The groups this release understands still unwind on disk; their
     // records wait for the unknown group to clear.
-    assert_eq!(ledger_edit_kinds(tmp.path()), ["redirect_vlt_lock_node"]);
+    assert_eq!(
+        ledger_edit_kinds(tmp.path()),
+        ["redirect_future_lock_entry"]
+    );
     assert_eq!(
         std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap(),
         yarn_lock_content(&yarn_original_block())
@@ -984,7 +982,7 @@ async fn unscoped_rollback_holds_the_record_beside_an_unknown_edit_kind() {
 #[serial]
 async fn scoped_rollback_of_the_only_record_holds_it_beside_an_unknown_edit_kind() {
     let tmp = tempfile::tempdir().unwrap();
-    let vlt_lock = write_vlt_ledger_fixture(tmp.path(), false).await;
+    let future_lock = write_unknown_kind_ledger_fixture(tmp.path(), false).await;
 
     let (code, envelope) = run_rollback_subprocess(tmp.path(), &[LP_PURL]);
     assert_eq!(code, 1, "{envelope}");
@@ -1001,8 +999,8 @@ async fn scoped_rollback_of_the_only_record_holds_it_beside_an_unknown_edit_kind
         .collect();
     assert_eq!(failed, [LP_PURL, "group:unknown"], "{envelope}");
     assert_eq!(
-        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
-        vlt_lock
+        std::fs::read_to_string(tmp.path().join("future.lock")).unwrap(),
+        future_lock
     );
     assert_eq!(
         std::fs::read_to_string(tmp.path().join("yarn.lock")).unwrap(),
@@ -1011,7 +1009,10 @@ async fn scoped_rollback_of_the_only_record_holds_it_beside_an_unknown_edit_kind
     let ledger: Value =
         serde_json::from_slice(&std::fs::read(ledger_path(tmp.path())).unwrap()).unwrap();
     assert!(ledger["records"].get(LP_PURL).is_some(), "{ledger}");
-    assert_eq!(ledger_edit_kinds(tmp.path()), ["redirect_vlt_lock_node"]);
+    assert_eq!(
+        ledger_edit_kinds(tmp.path()),
+        ["redirect_future_lock_entry"]
+    );
 }
 
 // ---------------------------------------------------------------------------
diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index ccfcadac..fd0c6821 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -42,6 +42,7 @@ mod requirements;
 mod staged;
 mod state;
 mod takeover;
+pub mod vlt;
 pub use replay::{revert_remaining_redirect_edits, GroupRefusal, ReplayOutcome};
 pub use state::{
     drop_superseded_purl, load_redirect_state, persist_redirect_state, save_redirect_state,
@@ -219,6 +220,16 @@ pub struct RewriteResult {
     pub hatch_uuids: std::collections::BTreeSet<String>,
     pub confirmed_hatch_uuids: std::collections::BTreeSet<String>,
     pub confirmed_requirements_uuids: std::collections::BTreeSet<String>,
+    /// Patch uuids every default-registry vlt instance of which carries the
+    /// patched slots, written by this run or already in place. When vlt
+    /// drives, npm confirmation keys off this set alone.
+    pub confirmed_vlt_uuids: std::collections::BTreeSet<String>,
+    /// Patch uuids the vlt rewriter refused (no sha512, an instance outside
+    /// the node grammar, a failed residual gate). Never confirmed, whichever
+    /// lock drives.
+    pub refused_vlt_uuids: std::collections::BTreeSet<String>,
+    /// [`vlt::vlt_drives`] over the rewriter's input files.
+    pub vlt_drives: bool,
 }
 
 /// Combined name as it appears in registry coordinates / lock keys.
@@ -340,6 +351,8 @@ pub fn rewrite_registry_redirect_with_pipenv_version(
     rewrite_yarn_classic(files, overrides, &mut result);
     rewrite_yarn_berry(files, overrides, &mut result);
     rewrite_bun_lock(files, overrides, &mut result);
+    vlt::rewrite_vlt_lock(files, overrides, &mut result);
+    result.vlt_drives = vlt::vlt_drives(files);
     requirements::rewrite(files, overrides, &mut result);
     rewrite_hatch(files, overrides, &mut result);
     rewrite_uv_lock(files, overrides, python_metadata, &mut result);
@@ -449,12 +462,13 @@ fn rewrite_npm_lock(
         .filter(|f| files.contains_key(*f))
         .collect();
     if present.is_empty() {
-        // Another npm-family lock (pnpm — root or nested Rush —, yarn, bun)
-        // owns the redirect for these deps and its rewriter emits its own
-        // per-dep diagnostics; warning "no package-lock.json" on every
+        // Another npm-family lock (pnpm — root or nested Rush —, yarn, bun,
+        // vlt) owns the redirect for these deps and its rewriter emits its
+        // own per-dep diagnostics; warning "no package-lock.json" on every
         // successful pnpm/yarn/bun/Rush run is pure noise that trains users
         // to ignore the warnings channel. Only warn when NO npm-family
-        // lockfile exists at all.
+        // lockfile exists at all. A vlt project without its lock gets
+        // `redirect_vlt_no_lockfile` from the vlt rewriter instead.
         let sibling_lock_present = files.keys().any(|k| {
             k == "yarn.lock"
                 || k == "bun.lock"
@@ -463,6 +477,9 @@ fn rewrite_npm_lock(
                 || k.ends_with("/pnpm-lock.yaml")
                 || k == "shrinkwrap.yaml"
                 || k.ends_with("/shrinkwrap.yaml")
+                || k == crate::constants::npm_family::VLT_LOCK
+                || k == crate::constants::npm_family::VLT_CONFIG
+                || k == crate::constants::npm_family::VLT_HIDDEN_LOCK_REL
         });
         if !sibling_lock_present {
             // Without a lock, the installer-state marker still identifies
diff --git a/crates/socket-patch-core/src/patch/redirect/replay.rs b/crates/socket-patch-core/src/patch/redirect/replay.rs
index f0c29b37..f47e81f6 100644
--- a/crates/socket-patch-core/src/patch/redirect/replay.rs
+++ b/crates/socket-patch-core/src/patch/redirect/replay.rs
@@ -91,6 +91,9 @@ enum Inverse {
     /// surviving (refused) package-lock edit keeps the setting it needs.
     NpmrcAllowRemote,
     BunBinaryPackage,
+    /// A hosted vlt node splice: `original`'s slots [2] and [3] go back on
+    /// the line keyed by the recorded DepID ([`super::vlt::revert_vlt_slots`]).
+    VltSlots,
     /// Owned by a per-purl revert (npm JSON kinds). Present here only
     /// when that revert failed — refuse the group rather than guess.
     PerPurlOnly,
@@ -131,6 +134,7 @@ fn classify(kind: &str, action: &str) -> (&'static str, Inverse) {
         }
         "redirect_bun_lockb_package" => ("bun", Inverse::BunBinaryPackage),
         "redirect_bun_lock_package" => ("bun", Inverse::ReplaceFragment),
+        super::vlt::KIND => ("vlt", Inverse::VltSlots),
         "redirect_gemfile_lock_dependency_pin"
         | "redirect_gemfile_lock_checksum"
         | "redirect_gemfile_source_block" => (
@@ -192,7 +196,7 @@ pub(super) fn is_unclassified_kind(kind: &str, action: &str) -> bool {
 /// lock flavor), so dropping a record beside one would strand that edit.
 fn groups_for_record_purl(purl: &str) -> &'static [&'static str] {
     if purl.starts_with("pkg:npm/") {
-        &["npm", "yarn", "pnpm", "bun", "unknown"]
+        &["npm", "yarn", "pnpm", "bun", "vlt", "unknown"]
     } else if purl.starts_with("pkg:cargo/") {
         &["cargo", "unknown"]
     } else if purl.starts_with("pkg:gem/") {
@@ -528,6 +532,35 @@ pub async fn revert_remaining_redirect_edits(
                         }
                     }
                 }
+                Inverse::VltSlots => {
+                    let content = match staged_read(&staged, project_root, &edit.path).await {
+                        Ok(Some(content)) => content,
+                        Ok(None) => {
+                            refuse(format!("{} no longer exists", edit.path), &mut outcome);
+                            refused_groups.insert(group);
+                            continue 'group;
+                        }
+                        Err(error) => {
+                            refuse(error, &mut outcome);
+                            refused_groups.insert(group);
+                            continue 'group;
+                        }
+                    };
+                    match super::vlt::revert_vlt_slots(&content, edit) {
+                        Ok(Some(restored)) => {
+                            staged.insert(edit.path.clone(), Some(restored));
+                            group_drops.insert(idx);
+                        }
+                        Ok(None) => {
+                            group_drops.insert(idx);
+                        }
+                        Err(reason) => {
+                            refuse(reason, &mut outcome);
+                            refused_groups.insert(group);
+                            continue 'group;
+                        }
+                    }
+                }
                 Inverse::PerPurlOnly => {
                     refuse(
                         format!(
@@ -2033,20 +2066,18 @@ mod tests {
         assert_eq!(state.edits.len(), 1);
     }
 
-    const VLT_LOCK: &str = "{\n  \"lockfileVersion\": 0,\n  \"nodes\": {\n    \"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-p\",\"https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\"]\n  },\n  \"edges\": {}\n}\n";
+    const FUTURE_LOCK: &str =
+        "minimist@1.2.8 https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\n";
 
-    fn vlt_lock_node_edit() -> FileEdit {
+    fn future_lock_edit() -> FileEdit {
         FileEdit {
             key: Some("minimist@1.2.8".into()),
             ..edit(
-                "vlt-lock.json",
-                "redirect_vlt_lock_node",
+                "future.lock",
+                "redirect_future_lock_entry",
                 "rewritten",
-                Some("\"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-r\"]"),
-                Some(
-                    "\"~npm~minimist@1.2.8\": [0,\"minimist\",\"sha512-p\",\
-                     \"https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\"]",
-                ),
+                Some("minimist@1.2.8 sha512-r"),
+                Some("minimist@1.2.8 https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz"),
             )
         }
     }
@@ -2055,11 +2086,11 @@ mod tests {
     async fn unclassified_kind_holds_the_npm_record_and_every_other_record() {
         for dry_run in [true, false] {
             let dir = TempDir::new().unwrap();
-            write(dir.path(), "vlt-lock.json", VLT_LOCK).await;
+            write(dir.path(), "future.lock", FUTURE_LOCK).await;
             write(dir.path(), "composer.lock", "https://patch.example/c\n").await;
             let mut state = state_with(
                 vec![
-                    vlt_lock_node_edit(),
+                    future_lock_edit(),
                     edit(
                         "composer.lock",
                         "redirect_composer_dist",
@@ -2075,13 +2106,13 @@ mod tests {
             assert_eq!(out.refusals[0].group, "unknown");
             assert_eq!(
                 out.refusals[0].reason,
-                "the redirect ledger holds a redirect_vlt_lock_node edit this socket-patch \
+                "the redirect ledger holds a redirect_future_lock_entry edit this socket-patch \
                  release does not understand; upgrade socket-patch"
             );
             assert!(out.dropped_records.is_empty(), "{out:?}");
             assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
             assert!(state.records.contains_key("pkg:composer/v/c@1.0.0"));
-            assert_eq!(read(dir.path(), "vlt-lock.json").await, VLT_LOCK);
+            assert_eq!(read(dir.path(), "future.lock").await, FUTURE_LOCK);
             let kinds: Vec<&str> = state.edits.iter().map(|e| e.kind.as_str()).collect();
             // The composer group still unwinds on disk; only its record waits
             // for the unknown group to clear.
@@ -2090,17 +2121,82 @@ mod tests {
                     read(dir.path(), "composer.lock").await,
                     "https://patch.example/c\n"
                 );
-                assert_eq!(kinds, ["redirect_vlt_lock_node", "redirect_composer_dist"]);
+                assert_eq!(
+                    kinds,
+                    ["redirect_future_lock_entry", "redirect_composer_dist"]
+                );
             } else {
                 assert_eq!(
                     read(dir.path(), "composer.lock").await,
                     "https://packagist.example/c\n"
                 );
-                assert_eq!(kinds, ["redirect_vlt_lock_node"]);
+                assert_eq!(kinds, ["redirect_future_lock_entry"]);
             }
         }
     }
 
+    const VLT_REGISTRY_ENTRY: &str =
+        "\"~npm~minimist@1.2.8~peer.1\": [2,\"minimist\",\"sha512-r\"]";
+    const VLT_HOSTED_ENTRY: &str = "\"~npm~minimist@1.2.8~peer.1\": [2,\"minimist\",\"sha512-p\",\"https://patch.socket.dev/npm/minimist/1.2.8/t/u/minimist-1.2.8.tgz\"]";
+
+    fn vlt_lock(entry: &str) -> String {
+        format!(
+            "{{\r\n  \"lockfileVersion\": 1,\r\n  \"nodes\": {{\r\n    {entry},\r\n    \"~npm~zz@1.0.0\": [0,\"zz\",\"sha512-z\"]\r\n  }}\r\n}}\r\n"
+        )
+    }
+
+    fn vlt_edit() -> FileEdit {
+        FileEdit {
+            key: Some("minimist@1.2.8~peer.1".into()),
+            ..edit(
+                "vlt-lock.json",
+                super::super::vlt::KIND,
+                "rewritten",
+                Some(VLT_REGISTRY_ENTRY),
+                Some(VLT_HOSTED_ENTRY),
+            )
+        }
+    }
+
+    #[tokio::test]
+    async fn vlt_node_edits_replay_by_slots_and_drop_the_npm_record() {
+        let dir = TempDir::new().unwrap();
+        write(dir.path(), "vlt-lock.json", &vlt_lock(VLT_HOSTED_ENTRY)).await;
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert!(out.fully_reverted(), "{out:?}");
+        assert_eq!(
+            read(dir.path(), "vlt-lock.json").await,
+            vlt_lock(VLT_REGISTRY_ENTRY)
+        );
+        assert!(state.edits.is_empty() && state.records.is_empty());
+        assert_eq!(out.dropped_records, ["pkg:npm/minimist@1.2.8"]);
+    }
+
+    #[tokio::test]
+    async fn a_drifted_vlt_edit_holds_the_npm_record() {
+        let dir = TempDir::new().unwrap();
+        let drifted = VLT_HOSTED_ENTRY.replace("sha512-p", "sha512-x");
+        write(dir.path(), "vlt-lock.json", &vlt_lock(&drifted)).await;
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert_eq!(out.refusals.len(), 1, "{out:?}");
+        assert_eq!(out.refusals[0].group, "vlt");
+        assert!(out.refusals[0].reason.contains("drifted"), "{out:?}");
+        assert_eq!(read(dir.path(), "vlt-lock.json").await, vlt_lock(&drifted));
+        assert_eq!(state.edits.len(), 1);
+        assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
+    }
+
+    #[tokio::test]
+    async fn a_vlt_edit_whose_lock_is_gone_refuses() {
+        let dir = TempDir::new().unwrap();
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert_eq!(out.refusals[0].reason, "vlt-lock.json no longer exists");
+        assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
+    }
+
     #[test]
     fn every_ecosystem_group_list_includes_the_unknown_group() {
         for purl in [
@@ -2116,7 +2212,11 @@ mod tests {
         ] {
             assert!(groups_for_record_purl(purl).contains(&"unknown"), "{purl}");
         }
-        assert!(is_unclassified_kind("redirect_vlt_lock_node", "rewritten"));
+        assert!(is_unclassified_kind(
+            "redirect_future_lock_entry",
+            "rewritten"
+        ));
+        assert!(!is_unclassified_kind("redirect_vlt_lock_node", "rewritten"));
         assert!(!is_unclassified_kind(
             "redirect_bun_lock_package",
             "rewritten"
@@ -2580,6 +2680,7 @@ mod tests {
             ("redirect_yarn_berry_entry", "rewritten"),
             ("redirect_bun_lock_package", "rewritten"),
             ("redirect_bun_lockb_package", "rewritten"),
+            ("redirect_vlt_lock_node", "rewritten"),
             ("redirect_gemfile_lock_dependency_pin", "rewritten"),
             ("redirect_gemfile_lock_dependency_pin", "added"),
             ("redirect_gemfile_lock_checksum", "rewritten"),
diff --git a/crates/socket-patch-core/src/patch/redirect/state.rs b/crates/socket-patch-core/src/patch/redirect/state.rs
index 420ecde9..0bad12b7 100644
--- a/crates/socket-patch-core/src/patch/redirect/state.rs
+++ b/crates/socket-patch-core/src/patch/redirect/state.rs
@@ -376,11 +376,12 @@ pub fn drop_superseded_purl(state: &mut RedirectState, purl: &str) -> bool {
             return false;
         };
         // Version-exact instance keys: `name@version`, pnpm v6 peer-suffixed
-        // `name@version(peer…)`, pnpm v5 respelled `name@version_peer…`.
+        // `name@version(peer…)`, pnpm v5 respelled `name@version_peer…`, vlt
+        // peer/modifier variants `name@version~extra`.
         let version_exact = key == name_at_version
             || key
                 .strip_prefix(name_at_version.as_str())
-                .is_some_and(|rest| rest.starts_with('(') || rest.starts_with('_'));
+                .is_some_and(|rest| rest.starts_with(['(', '_', '~']));
         // Artifact anchor: the edit's rewritten (`new`) content references
         // this purl's hosted artifact (its patch uuid — spelling-invariant
         // across raw / `\/`-escaped / percent-encoded URL forms).
@@ -841,18 +842,14 @@ mod tests {
         );
     }
 
-    fn vlt_node_edit(name: &str, version: &str, url: &str) -> FileEdit {
+    fn future_lock_edit(name: &str, version: &str, url: &str) -> FileEdit {
         FileEdit {
-            path: "vlt-lock.json".to_string(),
-            kind: "redirect_vlt_lock_node".to_string(),
+            path: "future.lock".to_string(),
+            kind: "redirect_future_lock_entry".to_string(),
             action: "rewritten".to_string(),
             key: Some(format!("{name}@{version}")),
-            original: Some(serde_json::json!(format!(
-                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-r\"]"
-            ))),
-            new: Some(serde_json::json!(format!(
-                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-p\",\"{url}\"]"
-            ))),
+            original: Some(serde_json::json!(format!("{name}@{version} sha512-r"))),
+            new: Some(serde_json::json!(format!("{name}@{version} {url}"))),
         }
     }
 
@@ -860,7 +857,7 @@ mod tests {
     fn drop_superseded_purl_drops_nothing_beside_an_unclassified_edit_naming_it() {
         let url = hosted_url("left-pad", "1.3.0", SAMPLE_UUID);
         let unanchored = hosted_url("left-pad", "1.3.0", "0e0e0e0e-0000-4000-8000-000000000000");
-        for (with_record, vlt_key, vlt_url) in [
+        for (with_record, future_key, future_url) in [
             (true, "left-pad@1.3.0", url.as_str()),
             (false, "left-pad@1.3.0", url.as_str()),
             (false, "left-pad@1.3.0~custom", unanchored.as_str()),
@@ -879,8 +876,8 @@ mod tests {
                     &url,
                 ),
                 FileEdit {
-                    key: Some(vlt_key.to_string()),
-                    ..vlt_node_edit("left-pad", "1.3.0", vlt_url)
+                    key: Some(future_key.to_string()),
+                    ..future_lock_edit("left-pad", "1.3.0", future_url)
                 },
             ];
             let before = serde_json::to_value(&state).unwrap();
@@ -888,7 +885,7 @@ mod tests {
             assert_eq!(
                 serde_json::to_value(&state).unwrap(),
                 before,
-                "{with_record} {vlt_key}"
+                "{with_record} {future_key}"
             );
         }
     }
@@ -925,12 +922,12 @@ mod tests {
                 "redirect_pnpm_resolution",
                 Some("pad@1.3.0"),
             ),
-            vlt_node_edit(
+            future_lock_edit(
                 "left-pad",
                 "1.3.0",
                 &hosted_url("left-pad", "1.3.0", "0e0e0e0e-0000-4000-8000-000000000000"),
             ),
-            vlt_node_edit(
+            future_lock_edit(
                 "@scope/pad",
                 "1.3.0",
                 &hosted_url(
@@ -943,7 +940,39 @@ mod tests {
         assert!(drop_superseded_purl(&mut state, "pkg:npm/pad@1.3.0"));
         assert!(state.records.is_empty());
         let kinds: Vec<&str> = state.edits.iter().map(|e| e.kind.as_str()).collect();
-        assert_eq!(kinds, ["redirect_vlt_lock_node", "redirect_vlt_lock_node"]);
+        assert_eq!(
+            kinds,
+            ["redirect_future_lock_entry", "redirect_future_lock_entry"]
+        );
+    }
+
+    #[test]
+    fn drop_superseded_purl_claims_vlt_variant_keys() {
+        let mut state = RedirectState::new();
+        state.edits = vec![
+            edit(
+                "vlt-lock.json",
+                "redirect_vlt_lock_node",
+                Some("left-pad@1.3.0"),
+            ),
+            edit(
+                "vlt-lock.json",
+                "redirect_vlt_lock_node",
+                Some("left-pad@1.3.0~peer.0df72515a50372ba"),
+            ),
+            edit(
+                "vlt-lock.json",
+                "redirect_vlt_lock_node",
+                Some("left-pad@1.3.0-rc.1~peer.1"),
+            ),
+        ];
+        assert!(drop_superseded_purl(&mut state, "pkg:npm/left-pad@1.3.0"));
+        let keys: Vec<&str> = state
+            .edits
+            .iter()
+            .filter_map(|e| e.key.as_deref())
+            .collect();
+        assert_eq!(keys, ["left-pad@1.3.0-rc.1~peer.1"]);
     }
 
     /// A version-boundary key (`left-pad@1.3.10`) and a different package
diff --git a/crates/socket-patch-core/src/patch/redirect/takeover.rs b/crates/socket-patch-core/src/patch/redirect/takeover.rs
index 18d71993..54163894 100644
--- a/crates/socket-patch-core/src/patch/redirect/takeover.rs
+++ b/crates/socket-patch-core/src/patch/redirect/takeover.rs
@@ -621,10 +621,11 @@ fn cargo_declared_req(fragment: Option<&Value>) -> Option<String> {
 /// The npm-family text-fragment edit kinds CLAIMED BY KEY: `original`/`new`
 /// hold the whole lock fragment as a string, the edit's `key` embeds
 /// `<name>@<version>`, and the revert is a `replacen(new, original)`.
-const NPM_TEXT_KINDS: [&str; 3] = [
+const NPM_TEXT_KINDS: [&str; 4] = [
     "redirect_yarn_classic_entry",
     "redirect_yarn_berry_entry",
     "redirect_pnpm_resolution",
+    super::vlt::KIND,
 ];
 
 /// The bun hosted rewriter's edit kind (`rewrite_bun_lock`): `original`/`new`
@@ -636,8 +637,9 @@ const NPM_TEXT_KINDS: [&str; 3] = [
 /// (`elems[0]`), the field the rewriter itself matched on.
 const BUN_TEXT_KIND: &str = "redirect_bun_lock_package";
 
-/// Does this edit kind replay as a whole text fragment
-/// (`content.replacen(new, original, 1)`, fail-closed on drift)?
+/// Does this edit kind replay as a text fragment, fail-closed on drift?
+/// Most replace the whole fragment (`content.replacen(new, original, 1)`);
+/// vlt node edits revert slot by slot ([`super::vlt::revert_vlt_slots`]).
 fn replays_as_text_fragment(kind: &str) -> bool {
     NPM_TEXT_KINDS.contains(&kind) || kind == BUN_TEXT_KIND
 }
@@ -829,6 +831,7 @@ pub async fn revert_npm_redirect_purl(
     for (i, e) in state.edits.iter().enumerate() {
         let key = e.key.as_deref().unwrap_or_default();
         let claimed = match e.kind.as_str() {
+            super::vlt::KIND => super::vlt::claims_key(key, &name, &version),
             k if NPM_TEXT_KINDS.contains(&k) => {
                 key == lock_key
                     || (k == "redirect_pnpm_resolution"
@@ -971,6 +974,13 @@ pub async fn revert_npm_redirect_purl(
                     edit.path
                 ));
             };
+            if edit.kind == super::vlt::KIND {
+                if let Some(restored) = super::vlt::revert_vlt_slots(&content, edit)? {
+                    staged.insert(edit.path.clone(), Some(restored));
+                    out.reverted_files.push(edit.path.clone());
+                }
+                continue;
+            }
             // A yarn block recorded on a CRLF checkout, replayed on an LF
             // one (or the reverse — `core.autocrlf` re-spells the lock on
             // every OS switch, never the committed ledger): when neither
@@ -2472,27 +2482,126 @@ mod tests {
         assert!(state.edits.is_empty(), "edits dropped");
     }
 
-    fn vlt_lock_node_edit(name: &str, version: &str) -> FileEdit {
+    fn future_lock_edit(name: &str, version: &str) -> FileEdit {
         FileEdit {
-            path: "vlt-lock.json".into(),
-            kind: "redirect_vlt_lock_node".into(),
+            path: "future.lock".into(),
+            kind: "redirect_future_lock_entry".into(),
             action: "rewritten".into(),
             key: Some(format!("{name}@{version}")),
-            original: Some(Value::String(format!(
-                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-r\"]"
-            ))),
-            new: Some(Value::String(format!(
-                "\"~npm~{name}@{version}\": [0,\"{name}\",\"sha512-p\",\"{NPM_URL}\"]"
+            original: Some(Value::String(format!("{name}@{version} sha512-r"))),
+            new: Some(Value::String(format!("{name}@{version} {NPM_URL}"))),
+        }
+    }
+
+    fn vlt_lock(entries: &[String]) -> String {
+        let body: Vec<String> = entries.iter().map(|e| format!("    {e}")).collect();
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n{}\n  }},\n  \"edges\": {{}}\n}}\n",
+            body.join(",\n")
+        )
+    }
+
+    fn vlt_entry(id: &str, slots: &str) -> String {
+        format!("\"{id}\": [0,\"left-pad\",{slots}]")
+    }
+
+    fn vlt_node_edit(key: &str, id: &str) -> FileEdit {
+        FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: super::super::vlt::KIND.into(),
+            action: "rewritten".into(),
+            key: Some(key.into()),
+            original: Some(Value::String(vlt_entry(id, "\"sha512-r\""))),
+            new: Some(Value::String(vlt_entry(
+                id,
+                &format!("\"sha512-p\",\"{NPM_URL}\""),
             ))),
         }
     }
 
+    #[tokio::test]
+    async fn npm_vlt_takeover_claims_every_variant_by_key_and_leaves_other_versions() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let hosted = format!("\"sha512-p\",\"{NPM_URL}\"");
+        let wired = vlt_lock(&[
+            vlt_entry("·npm·left-pad@1.3.0·%E1%B9%97%3A3", &hosted),
+            vlt_entry("~npm~left-pad@1.3.0", &hosted),
+            vlt_entry("~npm~left-pad@1.3.0-rc.1", &hosted),
+            vlt_entry("~npm~left-pad@1.3.0~peer.2", &hosted),
+        ]);
+        tokio::fs::write(root.join("vlt-lock.json"), &wired)
+            .await
+            .unwrap();
+        let mut state = RedirectState::new();
+        state.records.insert(NPM_PURL.into(), record());
+        state.edits = vec![
+            vlt_node_edit(
+                "left-pad@1.3.0~%E1%B9%97%3A3",
+                "·npm·left-pad@1.3.0·%E1%B9%97%3A3",
+            ),
+            vlt_node_edit("left-pad@1.3.0", "~npm~left-pad@1.3.0"),
+            vlt_node_edit("left-pad@1.3.0-rc.1", "~npm~left-pad@1.3.0-rc.1"),
+            vlt_node_edit("left-pad@1.3.0~peer.2", "~npm~left-pad@1.3.0~peer.2"),
+        ];
+        revert_redirect_purl(root, &mut state, NPM_PURL, false)
+            .await
+            .expect("revert succeeds");
+        let registry = "\"sha512-r\"";
+        assert_eq!(
+            tokio::fs::read_to_string(root.join("vlt-lock.json"))
+                .await
+                .unwrap(),
+            vlt_lock(&[
+                vlt_entry("·npm·left-pad@1.3.0·%E1%B9%97%3A3", registry),
+                vlt_entry("~npm~left-pad@1.3.0", registry),
+                vlt_entry("~npm~left-pad@1.3.0-rc.1", &hosted),
+                vlt_entry("~npm~left-pad@1.3.0~peer.2", registry),
+            ])
+        );
+        let keys: Vec<&str> = state
+            .edits
+            .iter()
+            .filter_map(|e| e.key.as_deref())
+            .collect();
+        assert_eq!(keys, ["left-pad@1.3.0-rc.1"]);
+        assert!(state.records.is_empty());
+    }
+
+    #[tokio::test]
+    async fn npm_vlt_takeover_refuses_a_drifted_line_untouched() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let wired = vlt_lock(&[vlt_entry("~npm~left-pad@1.3.0", "\"sha512-other\"")]);
+        tokio::fs::write(root.join("vlt-lock.json"), &wired)
+            .await
+            .unwrap();
+        let mut state = RedirectState::new();
+        state.records.insert(NPM_PURL.into(), record());
+        state.edits = vec![vlt_node_edit("left-pad@1.3.0", "~npm~left-pad@1.3.0")];
+        let before = state.clone();
+        let err = revert_redirect_purl(root, &mut state, NPM_PURL, false)
+            .await
+            .unwrap_err();
+        assert!(err.contains("drifted from the recorded redirect"), "{err}");
+        assert_eq!(
+            serde_json::to_value(&state).unwrap(),
+            serde_json::to_value(&before).unwrap()
+        );
+        assert_eq!(
+            tokio::fs::read_to_string(root.join("vlt-lock.json"))
+                .await
+                .unwrap(),
+            wired
+        );
+    }
+
     #[tokio::test]
     async fn npm_unclassified_edit_naming_the_purl_refuses_the_claim_untouched() {
         for dry_run in [true, false] {
             let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
             let root = tmp.path();
-            state.edits.push(vlt_lock_node_edit("left-pad", "1.3.0"));
+            state.edits.push(future_lock_edit("left-pad", "1.3.0"));
             let wired = tokio::fs::read_to_string(root.join("yarn.lock"))
                 .await
                 .unwrap();
@@ -2502,7 +2611,7 @@ mod tests {
                 .unwrap_err();
             assert_eq!(
                 err,
-                "the redirect ledger holds a redirect_vlt_lock_node edit this socket-patch \
+                "the redirect ledger holds a redirect_future_lock_entry edit this socket-patch \
                  release does not understand; upgrade socket-patch"
             );
             assert_eq!(
@@ -2523,24 +2632,24 @@ mod tests {
     async fn npm_unclassified_edit_for_another_package_does_not_block_the_claim() {
         let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
         let root = tmp.path();
-        state.edits.push(vlt_lock_node_edit("left-pad", "1.3.1"));
+        state.edits.push(future_lock_edit("left-pad", "1.3.1"));
         revert_redirect_purl(root, &mut state, NPM_PURL, false)
             .await
             .expect("revert succeeds");
         assert_eq!(state.edits.len(), 1);
-        assert_eq!(state.edits[0].kind, "redirect_vlt_lock_node");
+        assert_eq!(state.edits[0].kind, "redirect_future_lock_entry");
     }
 
     #[tokio::test]
     async fn npm_unclassified_edit_for_a_longer_or_scoped_name_does_not_block_the_claim() {
         for other in ["long-left-pad", "@scope/left-pad"] {
             let (tmp, mut state) = npm_redirected_fixture("yarn.lock", &classic_pristine()).await;
-            state.edits.push(vlt_lock_node_edit(other, "1.3.0"));
+            state.edits.push(future_lock_edit(other, "1.3.0"));
             revert_redirect_purl(tmp.path(), &mut state, NPM_PURL, false)
                 .await
                 .unwrap_or_else(|e| panic!("{other}: {e}"));
             assert_eq!(state.edits.len(), 1, "{other}");
-            assert_eq!(state.edits[0].kind, "redirect_vlt_lock_node", "{other}");
+            assert_eq!(state.edits[0].kind, "redirect_future_lock_entry", "{other}");
         }
     }
 
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
new file mode 100644
index 00000000..36f3b921
--- /dev/null
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -0,0 +1,894 @@
+//! vlt `vlt-lock.json` hosted rewriter, the byte-for-byte twin of the TS
+//! `registry-rewrite/vlt.ts`.
+//!
+//! A default-registry node keeps its DepID and has only slot [2] (the
+//! patched sha512) and slot [3] (the hosted URL) spliced into its one-line
+//! tuple; nothing else in the lock changes. The ledger records entry text
+//! (`"<DepID>": <tuple>`, no indent, comma or `\r`), because vlt moves
+//! commas and re-lays flags and trailing slots on later saves, so the
+//! revert ([`revert_vlt_slots`]) works slot by slot.
+
+use std::collections::BTreeMap;
+
+use serde_json::{Map, Value};
+
+use super::{full_name, DepOverride, FileEdit, RewriteResult, RewriteWarning};
+use crate::constants::npm_family::{
+    BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, VLT_CONFIG, VLT_HIDDEN_LOCK_REL, VLT_LOCK,
+};
+use crate::vendor::vlt_lock_text::{
+    entry_text, is_default_registry, nodes_block, parse_node_entry_text, parse_node_line,
+    parse_vendored_path, render_entry_line, render_tuple_with_slots, sniff_lock, split_dep_id,
+    split_lines, DepIdKind, LockSniff, NodeEntry, ParsedLock, SectionSpan,
+};
+
+/// The ledger kind of a hosted vlt node splice.
+pub const KIND: &str = "redirect_vlt_lock_node";
+
+/// Every other npm-family lock whose presence makes `vlt-lock.json`
+/// ambiguous as the install driver.
+const SIBLING_LOCKS: [&str; 6] = [
+    NPM_LOCKS[1],
+    NPM_LOCKS[0],
+    "yarn.lock",
+    PNPM_LOCK,
+    BUN_LOCK,
+    BUN_LOCKB,
+];
+
+/// Does vlt drive hosted confirmation and the artifact preflight?
+/// `vlt-lock.json` must be present, and either vlt's install state (the
+/// `node_modules/.vlt-lock.json` sentinel) is too, or no other npm-family
+/// lock is. Otherwise both locks are rewritten and neither decides alone.
+pub fn vlt_drives(files: &BTreeMap<String, String>) -> bool {
+    files.contains_key(VLT_LOCK)
+        && (files.contains_key(VLT_HIDDEN_LOCK_REL)
+            || !SIBLING_LOCKS.iter().any(|lock| files.contains_key(*lock)))
+}
+
+fn lock_unsupported(detail: &str) -> RewriteWarning {
+    RewriteWarning {
+        code: "redirect_vlt_lock_unsupported".into(),
+        detail: format!(
+            "vlt-lock.json {detail}; re-save it with a current vlt (`vlt install`) or update \
+             socket-patch"
+        ),
+    }
+}
+
+/// A lock that passed the lock-level parse, with its nodes section located.
+struct HostedLock {
+    parsed: ParsedLock,
+    nodes: Option<SectionSpan>,
+}
+
+fn parse_hosted_lock(text: &str) -> Result<HostedLock, RewriteWarning> {
+    let parsed = match sniff_lock(text) {
+        LockSniff::Readable(parsed) => parsed,
+        LockSniff::Bom => {
+            return Err(lock_unsupported(
+                "starts with a UTF-8 BOM, which vlt cannot read",
+            ))
+        }
+        LockSniff::NotJsonObject => return Err(lock_unsupported("is not a JSON object")),
+        LockSniff::UnsupportedVersion(raw) => {
+            return Err(lock_unsupported(&format!("has lockfileVersion {raw}")))
+        }
+    };
+    let lines = split_lines(text);
+    let nodes = nodes_block(&lines);
+    let one_node_per_line = nodes.is_some_and(|span| {
+        matches!(span, SectionSpan::Inline { .. })
+            || span
+                .entry_lines()
+                .any(|i| parse_node_line(lines[i]).is_some())
+    });
+    if !one_node_per_line && parsed.nodes().is_some_and(|n| !n.is_empty()) {
+        return Err(lock_unsupported(
+            "nodes section is not in vlt's canonical layout",
+        ));
+    }
+    Ok(HostedLock { parsed, nodes })
+}
+
+/// The lock-level refusal alone, run before any vendored vlt entry is
+/// reverted for a hosted takeover. An absent lock passes.
+pub fn preflight_vlt_hosted(files: &BTreeMap<String, String>) -> Result<(), RewriteWarning> {
+    match files.get(VLT_LOCK) {
+        Some(text) => parse_hosted_lock(text).map(|_| ()),
+        None => Ok(()),
+    }
+}
+
+/// Is `id` a registry node of `name@version`, and is its segment the
+/// default registry? `None` for any other node.
+fn registry_instance(
+    id: &str,
+    name: &str,
+    version: &str,
+    options: Option<&Map<String, Value>>,
+) -> Option<bool> {
+    let dep_id = split_dep_id(id)?;
+    (dep_id.registry_identity()? == (name, version))
+        .then(|| is_default_registry(&dep_id.first, options))
+}
+
+fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>) -> bool {
+    if lock.parsed.version == Some(1) {
+        return false;
+    }
+    let options = lock.parsed.options();
+    let has_legacy_default = lock.parsed.nodes().is_some_and(|nodes| {
+        nodes.keys().any(|id| {
+            split_dep_id(id).is_some_and(|dep_id| {
+                dep_id.kind == DepIdKind::Registry
+                    && dep_id.first != "npm"
+                    && is_default_registry(&dep_id.first, options)
+            })
+        })
+    });
+    let declares_modifiers = files.get(VLT_CONFIG).is_some_and(|text| {
+        let text = text.strip_prefix('\u{feff}').unwrap_or(text);
+        serde_json::from_str::<Value>(text)
+            .ok()
+            .and_then(|v| v.as_object().map(|o| o.contains_key("modifiers")))
+            .unwrap_or(false)
+    });
+    has_legacy_default && !declares_modifiers
+}
+
+fn is_scalar_registry_ignored(lock: &HostedLock) -> bool {
+    let options = lock.parsed.options();
+    let scalar = options
+        .and_then(|o| o.get("registry"))
+        .is_some_and(Value::is_string);
+    let registries_npm = options
+        .and_then(|o| o.get("registries"))
+        .and_then(|r| r.get("npm"))
+        .is_some_and(Value::is_string);
+    scalar && (lock.parsed.version != Some(1) || !registries_npm)
+}
+
+fn lock_level_warnings(lock: &HostedLock, files: &BTreeMap<String, String>) -> Vec<RewriteWarning> {
+    let mut warnings = Vec::new();
+    if lock.parsed.version.is_none() {
+        warnings.push(RewriteWarning {
+            code: "redirect_vlt_lockfile_version_missing".into(),
+            detail: "vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently \
+                     re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a \
+                     current vlt"
+                .into(),
+        });
+    }
+    if is_old_lockfile_ignored(lock, files) {
+        warnings.push(RewriteWarning {
+            code: "redirect_vlt_old_lockfile_ignored".into(),
+            detail: "vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \
+                     \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json"
+                .into(),
+        });
+    }
+    if is_scalar_registry_ignored(lock) {
+        warnings.push(RewriteWarning {
+            code: "redirect_vlt_scalar_registry_ignored".into(),
+            detail: "vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is \
+                     configured; upgrade vlt to ≥ 1.0.0-rc.30"
+                .into(),
+        });
+    }
+    if !vlt_drives(files) {
+        let others: Vec<&str> = SIBLING_LOCKS
+            .iter()
+            .copied()
+            .filter(|lock| files.contains_key(*lock))
+            .collect();
+        warnings.push(RewriteWarning {
+            code: "redirect_vlt_sibling_lockfiles".into(),
+            detail: format!(
+                "vlt-lock.json and {} are both present; socket-patch rewrote both — delete the \
+                 lock your installs do not use",
+                others.join(", ")
+            ),
+        });
+    }
+    warnings
+}
+
+fn npm_purl(name: &str, version: &str) -> String {
+    format!("pkg:npm/{}@{version}", name.replacen('@', "%40", 1))
+}
+
+/// A `file` node of socket-patch's vendored vlt shape for `name@version`.
+fn has_vendored_node(nodes: &Map<String, Value>, name: &str, version: &str) -> bool {
+    nodes.iter().any(|(id, tuple)| {
+        let slot1 = tuple.get(1).and_then(Value::as_str);
+        split_dep_id(id).is_some_and(|dep_id| {
+            dep_id.kind == DepIdKind::File
+                && slot1 == Some(name)
+                && parse_vendored_path(&dep_id.first, name).is_some_and(|p| p.version == version)
+        })
+    })
+}
+
+/// The ledger key of an instance: `<name>@<version>`, plus `~` and the raw
+/// extra segment for a peer or modifier variant, in either era.
+fn ledger_key(name: &str, version: &str, extra: Option<&str>) -> String {
+    match extra {
+        Some(extra) => format!("{name}@{version}~{extra}"),
+        None => format!("{name}@{version}"),
+    }
+}
+
+/// Does a ledger edit of [`KIND`] belong to `name@version`? Claims are by
+/// key, with a `~` boundary before a variant's extra segment.
+pub(crate) fn claims_key(key: &str, name: &str, version: &str) -> bool {
+    let base = format!("{name}@{version}");
+    key.strip_prefix(base.as_str())
+        .is_some_and(|rest| rest.is_empty() || rest.starts_with('~'))
+}
+
+/// The one nodes-section line index keyed `id` that parses under the node
+/// grammar with slot [1] naming `name`; `None` when there are zero or
+/// several lines with that key, or the one line is outside the grammar.
+fn instance_line(
+    lines: &[String],
+    span: Option<SectionSpan>,
+    id: &str,
+    name: &str,
+) -> Option<usize> {
+    let span = span?;
+    let prefix = format!("    \"{id}\": ");
+    let mut found = span
+        .entry_lines()
+        .filter(|&i| lines[i].starts_with(prefix.as_str()));
+    let idx = found.next()?;
+    if found.next().is_some() {
+        return None;
+    }
+    let line = parse_node_line(&lines[idx])?;
+    (line.entry.key == id && line.entry.name().as_deref() == Some(name)).then_some(idx)
+}
+
+/// The residual gate: re-parsed, every instance carries the patched slots.
+fn every_instance_pinned(text: &str, ids: &[&str], sha512: &str, url: &str) -> Option<()> {
+    let json: Value = serde_json::from_str(text).ok()?;
+    let nodes = json.get("nodes")?.as_object()?;
+    ids.iter()
+        .all(|id| {
+            let tuple = nodes.get(*id).and_then(Value::as_array);
+            tuple.is_some_and(|t| {
+                t.get(2).and_then(Value::as_str) == Some(sha512)
+                    && t.get(3).and_then(Value::as_str) == Some(url)
+            })
+        })
+        .then_some(())
+}
+
+struct Splice {
+    line: usize,
+    text: String,
+    edit: FileEdit,
+}
+
+fn unsupported_key(result: &mut RewriteResult, dep: &DepOverride, id: &str) {
+    result.warnings.push(RewriteWarning {
+        code: "redirect_vlt_unsupported_lock_key".into(),
+        detail: format!(
+            "vlt-lock.json entry {id} cannot be rewritten safely; re-save the lock with `vlt \
+             install`"
+        ),
+    });
+    result.refused_vlt_uuids.insert(dep.patch_uuid.clone());
+}
+
+/// Rewrite one override's default-registry instances, or none of them.
+/// Returns whether any line changed.
+fn rewrite_dep(
+    lock: &HostedLock,
+    lines: &mut [String],
+    dep: &DepOverride,
+    result: &mut RewriteResult,
+) -> bool {
+    let name = full_name(dep);
+    let version = dep.version.as_str();
+    let options = lock.parsed.options();
+    let empty = Map::new();
+    let nodes = lock.parsed.nodes().unwrap_or(&empty);
+
+    let mut defaults: Vec<&str> = Vec::new();
+    let mut foreign: Vec<&str> = Vec::new();
+    for id in nodes.keys() {
+        match registry_instance(id, &name, version, options) {
+            Some(true) => defaults.push(id),
+            Some(false) => foreign.push(id),
+            None => {}
+        }
+    }
+    if !foreign.is_empty() {
+        result.warnings.push(RewriteWarning {
+            code: "redirect_vlt_custom_registry_skipped".into(),
+            detail: format!(
+                "hosted mode only redirects packages from vlt's default registry; {} left \
+                 unchanged (use --mode vendored or agent mode)",
+                foreign.join(", ")
+            ),
+        });
+    }
+    let Some(sha512) = dep.integrity.sha512.as_deref().filter(|s| !s.is_empty()) else {
+        result.warnings.push(RewriteWarning {
+            code: "redirect_vlt_missing_sha512".into(),
+            detail: format!(
+                "hosted artifact for {} has no sha512 integrity; retry later",
+                npm_purl(&name, version)
+            ),
+        });
+        result.refused_vlt_uuids.insert(dep.patch_uuid.clone());
+        return false;
+    };
+    if defaults.is_empty() {
+        let warning = if has_vendored_node(nodes, &name, version) {
+            RewriteWarning {
+                code: "redirect_vlt_entry_vendored".into(),
+                detail: format!(
+                    "{name}@{version} is vendored; re-run `socket-patch scan --mode hosted` from \
+                     a ledger that owns it, or `socket-patch vendor --revert`"
+                ),
+            }
+        } else {
+            RewriteWarning {
+                code: "redirect_vlt_entry_not_found".into(),
+                detail: format!(
+                    "vlt-lock.json has no default-registry entry for {name}@{version}; run `vlt \
+                     install` first"
+                ),
+            }
+        };
+        result.warnings.push(warning);
+        return false;
+    }
+
+    let mut located: Vec<(usize, &str)> = Vec::new();
+    for id in &defaults {
+        match instance_line(lines, lock.nodes, id, &name) {
+            Some(idx) => located.push((idx, id)),
+            None => {
+                unsupported_key(result, dep, id);
+                return false;
+            }
+        }
+    }
+    located.sort_unstable();
+
+    let s2 = serde_json::to_string(sha512).expect("a str serializes to JSON infallibly");
+    let s3 = serde_json::to_string(&dep.artifact_url).expect("a str serializes to JSON infallibly");
+    let mut splices: Vec<Splice> = Vec::new();
+    for &(idx, id) in &located {
+        let line = parse_node_line(&lines[idx]).expect("instance_line parsed this line");
+        let elems = &line.entry.elems;
+        if elems.len() >= 4 && elems[2] == s2 && elems[3] == s3 {
+            continue;
+        }
+        let tuple = render_tuple_with_slots(elems, Some(&s2), Some(&s3));
+        let new_text = entry_text(id, &tuple);
+        let extra = split_dep_id(id).and_then(|dep_id| dep_id.extra);
+        splices.push(Splice {
+            line: idx,
+            text: render_entry_line(&new_text, line.comma, line.cr),
+            edit: FileEdit {
+                path: VLT_LOCK.into(),
+                kind: KIND.into(),
+                action: "rewritten".into(),
+                key: Some(ledger_key(&name, version, extra.as_deref())),
+                original: Some(Value::String(line.entry.entry_text())),
+                new: Some(Value::String(new_text)),
+            },
+        });
+    }
+
+    let mut candidate: Vec<String> = lines.to_vec();
+    for splice in &splices {
+        candidate[splice.line].clone_from(&splice.text);
+    }
+    let ids: Vec<&str> = located.iter().map(|(_, id)| *id).collect();
+    if every_instance_pinned(&candidate.join("\n"), &ids, sha512, &dep.artifact_url).is_none() {
+        unsupported_key(result, dep, ids[0]);
+        return false;
+    }
+
+    result.confirmed_vlt_uuids.insert(dep.patch_uuid.clone());
+    let changed = !splices.is_empty();
+    for splice in splices {
+        lines[splice.line] = splice.text;
+        result.edits.push(splice.edit);
+    }
+    changed
+}
+
+/// The hosted vlt rewrite (DESIGN §3.2–§3.8): lock-level refusal and
+/// advisories, then each npm override's default-registry instances.
+pub(super) fn rewrite_vlt_lock(
+    files: &BTreeMap<String, String>,
+    overrides: &[DepOverride],
+    result: &mut RewriteResult,
+) {
+    let npm: Vec<&DepOverride> = overrides.iter().filter(|o| o.ecosystem == "npm").collect();
+    if npm.is_empty() {
+        return;
+    }
+    let Some(text) = files.get(VLT_LOCK) else {
+        if files.contains_key(VLT_CONFIG) || files.contains_key(VLT_HIDDEN_LOCK_REL) {
+            result.warnings.push(RewriteWarning {
+                code: "redirect_vlt_no_lockfile".into(),
+                detail: "vlt project has no vlt-lock.json; run `vlt install` and commit \
+                         vlt-lock.json"
+                    .into(),
+            });
+        }
+        return;
+    };
+    let lock = match parse_hosted_lock(text) {
+        Ok(lock) => lock,
+        Err(warning) => {
+            result.warnings.push(warning);
+            return;
+        }
+    };
+    result.warnings.extend(lock_level_warnings(&lock, files));
+
+    let mut lines: Vec<String> = split_lines(text).into_iter().map(str::to_string).collect();
+    let mut changed = false;
+    for dep in npm {
+        changed |= rewrite_dep(&lock, &mut lines, dep, result);
+    }
+    if changed {
+        result.files.insert(VLT_LOCK.into(), lines.join("\n"));
+    }
+}
+
+// ── revert ───────────────────────────────────────────────────────────────
+
+fn slot_value(entry: &NodeEntry<'_>, index: usize) -> Option<Value> {
+    match entry.slot(index) {
+        None | Some("null") => None,
+        Some(raw) => serde_json::from_str(raw).ok(),
+    }
+}
+
+fn same_slots(a: &NodeEntry<'_>, b: &NodeEntry<'_>) -> bool {
+    slot_value(a, 2) == slot_value(b, 2) && slot_value(a, 3) == slot_value(b, 3)
+}
+
+fn drift(id: &str, why: &str) -> String {
+    format!(
+        "vlt-lock.json {why}; restore the registry pin for {id} manually, or re-run \
+         `socket-patch scan --mode hosted` and then roll back"
+    )
+}
+
+/// Undo one [`KIND`] edit by slots. The line keyed by the recorded DepID
+/// gets `original`'s slots [2] and [3] back while its current flags,
+/// trailing slots, indent, comma and `\r` stay, so a lock vlt re-laid since
+/// the rewrite still reverts. `Ok(None)` when there is nothing to revert:
+/// the line already holds `original`'s slots, or the DepID and the hosted
+/// URL are both gone (a re-lock). Anything else is drift.
+pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<String>, String> {
+    fn fragment(v: &Option<Value>) -> Option<&str> {
+        v.as_ref().and_then(Value::as_str)
+    }
+    let (Some(original), Some(new)) = (fragment(&edit.original), fragment(&edit.new)) else {
+        return Err(format!("{KIND} edit is missing its recorded fragments"));
+    };
+    let (Some(original), Some(new)) = (parse_node_entry_text(original), parse_node_entry_text(new))
+    else {
+        return Err(format!(
+            "{KIND} edit records fragments that are not vlt node entries"
+        ));
+    };
+    if original.key != new.key {
+        return Err(format!("{KIND} edit records two different DepIDs"));
+    }
+    let id = original.key;
+    let lines = split_lines(text);
+    let Some(span) = nodes_block(&lines) else {
+        return Err(drift(id, "nodes section is not in vlt's canonical layout"));
+    };
+    let prefix = format!("    \"{id}\": ");
+    let keyed: Vec<usize> = span
+        .entry_lines()
+        .filter(|&i| lines[i].starts_with(prefix.as_str()))
+        .collect();
+    let url = slot_value(&new, 3);
+    match keyed.as_slice() {
+        [] => {
+            let url_left = url
+                .as_ref()
+                .and_then(Value::as_str)
+                .is_some_and(|url| lines.iter().any(|line| line.contains(url)));
+            if url_left {
+                Err(drift(
+                    id,
+                    &format!("no longer has {id}, but still pins its hosted URL"),
+                ))
+            } else {
+                Ok(None)
+            }
+        }
+        [idx] => {
+            let Some(line) = parse_node_line(lines[*idx]) else {
+                return Err(drift(
+                    id,
+                    &format!("entry {id} is outside vlt's node grammar"),
+                ));
+            };
+            if same_slots(&line.entry, &original) {
+                return Ok(None);
+            }
+            if !same_slots(&line.entry, &new) {
+                return Err(drift(
+                    id,
+                    &format!("entry {id} drifted from the recorded redirect"),
+                ));
+            }
+            let tuple = render_tuple_with_slots(
+                &line.entry.elems,
+                original.slot(2).filter(|s| *s != "null"),
+                original.slot(3).filter(|s| *s != "null"),
+            );
+            let mut out: Vec<String> = lines.iter().map(|l| (*l).to_string()).collect();
+            out[*idx] = render_entry_line(&entry_text(id, &tuple), line.comma, line.cr);
+            Ok(Some(out.join("\n")))
+        }
+        _ => Err(drift(id, &format!("has {id} more than once"))),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    const SHA: &str = "sha512-PATCHED==";
+    const URL: &str = "https://patch.socket.dev/patch/npm/t/u/left-pad-1.3.0.tgz";
+    const REG_SHA: &str = "sha512-REGISTRY==";
+    const REG_URL: &str = "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz";
+
+    fn files(entries: &[(&str, &str)]) -> BTreeMap<String, String> {
+        entries
+            .iter()
+            .map(|(k, v)| ((*k).to_string(), (*v).to_string()))
+            .collect()
+    }
+
+    fn dep(name: &str, version: &str, sha512: Option<&str>) -> DepOverride {
+        serde_json::from_value(serde_json::json!({
+            "ecosystem": "npm",
+            "name": name,
+            "version": version,
+            "token": "t",
+            "patchUuid": format!("uuid-{name}"),
+            "artifactUrl": URL,
+            "integrity": { "sha512": sha512 },
+        }))
+        .unwrap()
+    }
+
+    fn lock_with(node_lines: &[&str]) -> String {
+        let mut out =
+            String::from("{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n");
+        for (i, line) in node_lines.iter().enumerate() {
+            out.push_str("    ");
+            out.push_str(line);
+            if i + 1 < node_lines.len() {
+                out.push(',');
+            }
+            out.push('\n');
+        }
+        out.push_str("  },\n  \"edges\": {}\n}\n");
+        out
+    }
+
+    fn rewrite(lock: &str, deps: &[DepOverride]) -> RewriteResult {
+        let mut result = RewriteResult::default();
+        rewrite_vlt_lock(&files(&[(VLT_LOCK, lock)]), deps, &mut result);
+        result
+    }
+
+    fn codes(result: &RewriteResult) -> Vec<&str> {
+        result.warnings.iter().map(|w| w.code.as_str()).collect()
+    }
+
+    fn vlt_edit(original: &str, new: &str) -> FileEdit {
+        FileEdit {
+            path: VLT_LOCK.into(),
+            kind: KIND.into(),
+            action: "rewritten".into(),
+            key: Some("left-pad@1.3.0".into()),
+            original: Some(Value::String(original.into())),
+            new: Some(Value::String(new.into())),
+        }
+    }
+
+    const ID: &str = "~npm~left-pad@1.3.0";
+
+    fn registry_entry() -> String {
+        format!("\"{ID}\": [0,\"left-pad\",\"{REG_SHA}\",\"{REG_URL}\"]")
+    }
+
+    fn hosted_entry() -> String {
+        format!("\"{ID}\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]")
+    }
+
+    #[test]
+    fn vlt_drives_needs_the_lock_and_the_sentinel_or_no_sibling() {
+        let sentinel = (VLT_HIDDEN_LOCK_REL, "");
+        let lock = (VLT_LOCK, "{}");
+        assert!(!vlt_drives(&files(&[])));
+        assert!(!vlt_drives(&files(&[sentinel, (VLT_CONFIG, "{}")])));
+        assert!(vlt_drives(&files(&[lock])));
+        assert!(vlt_drives(&files(&[lock, (VLT_CONFIG, "{}")])));
+        for sibling in SIBLING_LOCKS {
+            let other = (sibling, "x");
+            assert!(!vlt_drives(&files(&[lock, other])), "{sibling}");
+            assert!(vlt_drives(&files(&[lock, other, sentinel])), "{sibling}");
+        }
+        assert!(!vlt_drives(&files(&[
+            lock,
+            ("package-lock.json", "x"),
+            ("bun.lockb", "x")
+        ])));
+        assert!(vlt_drives(&files(&[
+            lock,
+            ("packages/a/package-lock.json", "x")
+        ])));
+    }
+
+    #[test]
+    fn ledger_keys_carry_the_raw_extra_after_a_tilde() {
+        let lock = lock_with(&[
+            &format!("\"·npm·left-pad@1.3.0·%E1%B9%97%3A3\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"~npm~left-pad@1.3.0~_croot_s_g_s#x\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"~npm~left-pad@1.3.0~peer.2\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"{ID}\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+        ]);
+        let result = rewrite(&lock, &[dep("left-pad", "1.3.0", Some(SHA))]);
+        let keys: Vec<&str> = result
+            .edits
+            .iter()
+            .map(|e| e.key.as_deref().unwrap())
+            .collect();
+        assert_eq!(
+            keys,
+            [
+                "left-pad@1.3.0~%E1%B9%97%3A3",
+                "left-pad@1.3.0~_croot_s_g_s#x",
+                "left-pad@1.3.0~peer.2",
+                "left-pad@1.3.0",
+            ]
+        );
+        for key in keys {
+            assert!(claims_key(key, "left-pad", "1.3.0"), "{key}");
+        }
+        assert!(result.confirmed_vlt_uuids.contains("uuid-left-pad"));
+    }
+
+    #[test]
+    fn claims_stop_at_the_version_boundary() {
+        assert!(claims_key("@s/p@1.0.0", "@s/p", "1.0.0"));
+        assert!(claims_key("@s/p@1.0.0~peer.1", "@s/p", "1.0.0"));
+        for foreign in [
+            "left-pad@1.3.01",
+            "left-pad@1.3.0-rc.1",
+            "left-pad@1.3.0(peer)",
+            "left-pad@1.3.0_x",
+            "long-left-pad@1.3.0",
+            "left-pad@1.3",
+        ] {
+            assert!(!claims_key(foreign, "left-pad", "1.3.0"), "{foreign}");
+        }
+    }
+
+    #[test]
+    fn residual_gate_refuses_when_the_parsed_node_is_not_the_spliced_line() {
+        let entry = format!("    \"{ID}\": [0,\"left-pad\",\"{REG_SHA}\"]");
+        let lock = format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n{entry}\n  }},\n  \"nodes\": {{\n{entry}\n  }}\n}}\n"
+        );
+        let result = rewrite(&lock, &[dep("left-pad", "1.3.0", Some(SHA))]);
+        assert_eq!(codes(&result), ["redirect_vlt_unsupported_lock_key"]);
+        assert!(result.files.is_empty() && result.edits.is_empty());
+        assert!(result.refused_vlt_uuids.contains("uuid-left-pad"));
+        assert!(result.confirmed_vlt_uuids.is_empty());
+    }
+
+    #[test]
+    fn an_unsupported_instance_refuses_every_instance_of_the_dep_only() {
+        let lock = format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n    \"{ID}\": [0,\"left-pad\",\"{REG_SHA}\"],\n    \"~npm~left-pad@1.3.0~peer.1\": [0, \"left-pad\"],\n    \"~npm~ms@2.1.3\": [0,\"ms\",\"{REG_SHA}\"]\n  }}\n}}\n"
+        );
+        let result = rewrite(
+            &lock,
+            &[
+                dep("left-pad", "1.3.0", Some(SHA)),
+                dep("ms", "2.1.3", Some(SHA)),
+            ],
+        );
+        assert_eq!(codes(&result), ["redirect_vlt_unsupported_lock_key"]);
+        assert_eq!(result.edits.len(), 1);
+        assert_eq!(result.edits[0].key.as_deref(), Some("ms@2.1.3"));
+        assert!(result.refused_vlt_uuids.contains("uuid-left-pad"));
+        assert!(result.confirmed_vlt_uuids.contains("uuid-ms"));
+    }
+
+    #[test]
+    fn a_name_mismatch_in_slot_one_is_unsupported() {
+        let lock = lock_with(&[&format!("\"{ID}\": [0,\"other\",\"{REG_SHA}\"]")]);
+        let result = rewrite(&lock, &[dep("left-pad", "1.3.0", Some(SHA))]);
+        assert_eq!(codes(&result), ["redirect_vlt_unsupported_lock_key"]);
+    }
+
+    #[test]
+    fn lock_level_parse_refusals() {
+        let refused = |text: &str| {
+            preflight_vlt_hosted(&files(&[(VLT_LOCK, text)]))
+                .unwrap_err()
+                .detail
+        };
+        assert!(refused("\u{feff}{}").contains("UTF-8 BOM"));
+        assert!(refused("[]").contains("not a JSON object"));
+        assert!(refused("{\"lockfileVersion\": 1.0}").contains("lockfileVersion 1.0"));
+        let pretty = format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n    \"{ID}\": [\n      0,\n      \"left-pad\"\n    ]\n  }}\n}}\n"
+        );
+        assert!(refused(&pretty).contains("canonical layout"));
+        assert!(preflight_vlt_hosted(&files(&[])).is_ok());
+        assert!(preflight_vlt_hosted(&files(&[(VLT_LOCK, "{\"nodes\": {}}")])).is_ok());
+        let ok = lock_with(&[&registry_entry()]);
+        assert!(preflight_vlt_hosted(&files(&[(VLT_LOCK, &ok)])).is_ok());
+    }
+
+    #[test]
+    fn missing_sha512_and_empty_sha512_refuse() {
+        let lock = lock_with(&[&registry_entry()]);
+        for sha in [None, Some("")] {
+            let result = rewrite(&lock, &[dep("left-pad", "1.3.0", sha)]);
+            assert_eq!(codes(&result), ["redirect_vlt_missing_sha512"]);
+            assert!(result.refused_vlt_uuids.contains("uuid-left-pad"));
+        }
+    }
+
+    #[test]
+    fn non_npm_overrides_leave_everything_alone() {
+        let mut other = dep("left-pad", "1.3.0", Some(SHA));
+        other.ecosystem = "pypi".into();
+        let mut result = RewriteResult::default();
+        rewrite_vlt_lock(&files(&[(VLT_CONFIG, "{}")]), &[other], &mut result);
+        assert!(result.warnings.is_empty());
+    }
+
+    fn revert(lock: &str, edit: &FileEdit) -> Result<Option<String>, String> {
+        revert_vlt_slots(lock, edit)
+    }
+
+    #[test]
+    fn revert_restores_the_slots_after_a_comma_move() {
+        let edit = vlt_edit(&registry_entry(), &hosted_entry());
+        let lone = lock_with(&[&hosted_entry()]);
+        assert_eq!(
+            revert(&lone, &edit).unwrap().unwrap(),
+            lock_with(&[&registry_entry()])
+        );
+        let sibling = "\"~npm~zz@1.0.0\": [0,\"zz\",\"sha512-z\"]";
+        let moved = lock_with(&[&hosted_entry(), sibling]);
+        assert_eq!(
+            revert(&moved, &edit).unwrap().unwrap(),
+            lock_with(&[&registry_entry(), sibling])
+        );
+    }
+
+    #[test]
+    fn revert_keeps_a_changed_flag_and_new_trailing_slots() {
+        let edit = vlt_edit(&registry_entry(), &hosted_entry());
+        let relaid = lock_with(&[&format!(
+            "\"{ID}\": [2,\"left-pad\",\"{SHA}\",\"{URL}\",null,null,null,null,{{  \"lp\": \"bin.js\"}}]"
+        )]);
+        assert_eq!(
+            revert(&relaid, &edit).unwrap().unwrap(),
+            lock_with(&[&format!(
+                "\"{ID}\": [2,\"left-pad\",\"{REG_SHA}\",\"{REG_URL}\",null,null,null,null,{{  \"lp\": \"bin.js\"}}]"
+            )])
+        );
+    }
+
+    #[test]
+    fn revert_of_a_three_tuple_original() {
+        let original = format!("\"{ID}\": [0,\"left-pad\",\"{REG_SHA}\"]");
+        let edit = vlt_edit(&original, &hosted_entry());
+        assert_eq!(
+            revert(&lock_with(&[&hosted_entry()]), &edit)
+                .unwrap()
+                .unwrap(),
+            lock_with(&[&original])
+        );
+        let five = lock_with(&[&format!(
+            "\"{ID}\": [1,\"left-pad\",\"{SHA}\",\"{URL}\",\"lib\"]"
+        )]);
+        assert_eq!(
+            revert(&five, &edit).unwrap().unwrap(),
+            lock_with(&[&format!(
+                "\"{ID}\": [1,\"left-pad\",\"{REG_SHA}\",null,\"lib\"]"
+            )])
+        );
+    }
+
+    #[test]
+    fn revert_after_an_lf_resave_of_a_crlf_lock() {
+        let edit = vlt_edit(&registry_entry(), &hosted_entry());
+        let crlf = lock_with(&[&hosted_entry()]).replace('\n', "\r\n");
+        assert_eq!(
+            revert(&crlf, &edit).unwrap().unwrap(),
+            lock_with(&[&registry_entry()]).replace('\n', "\r\n")
+        );
+        let lf = lock_with(&[&hosted_entry()]);
+        assert_eq!(
+            revert(&lf, &edit).unwrap().unwrap(),
+            lock_with(&[&registry_entry()])
+        );
+    }
+
+    #[test]
+    fn revert_already_reverted() {
+        let edit = vlt_edit(&registry_entry(), &hosted_entry());
+        assert_eq!(revert(&lock_with(&[&registry_entry()]), &edit), Ok(None));
+        let relaid = lock_with(&[&format!(
+            "\"{ID}\": [2,\"left-pad\",\"{REG_SHA}\",\"{REG_URL}\"]"
+        )]);
+        assert_eq!(revert(&relaid, &edit), Ok(None));
+        let relocked = lock_with(&[&format!(
+            "\"~npm~left-pad@1.3.0~peer.1\": [0,\"left-pad\",\"{REG_SHA}\",\"{REG_URL}\"]"
+        )]);
+        assert_eq!(revert(&relocked, &edit), Ok(None));
+    }
+
+    #[test]
+    fn revert_refuses_drift() {
+        let edit = vlt_edit(&registry_entry(), &hosted_entry());
+        let other = lock_with(&[&format!(
+            "\"{ID}\": [0,\"left-pad\",\"sha512-OTHER==\",\"{URL}\"]"
+        )]);
+        assert!(revert(&other, &edit).unwrap_err().contains("drifted"));
+        let moved = lock_with(&[&format!(
+            "\"~npm~left-pad@1.3.0~peer.1\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"
+        )]);
+        let err = revert(&moved, &edit).unwrap_err();
+        assert!(err.contains("still pins its hosted URL"), "{err}");
+        assert!(err.contains("restore the registry pin for ~npm~left-pad@1.3.0 manually"));
+        let twice = format!(
+            "{{\n  \"nodes\": {{\n    {},\n    {}\n  }}\n}}\n",
+            hosted_entry(),
+            hosted_entry()
+        );
+        assert!(revert(&twice, &edit)
+            .unwrap_err()
+            .contains("more than once"));
+        let multi = format!("{{\n  \"nodes\": {{\n    \"{ID}\": [\n      0\n    ]\n  }}\n}}\n");
+        assert!(revert(&multi, &edit).unwrap_err().contains("node grammar"));
+        assert!(revert("{\"nodes\": {}}", &edit)
+            .unwrap_err()
+            .contains("canonical"));
+    }
+
+    #[test]
+    fn revert_refuses_a_malformed_ledger_edit() {
+        let mut edit = vlt_edit(&registry_entry(), &hosted_entry());
+        edit.original = None;
+        assert!(revert(&lock_with(&[&hosted_entry()]), &edit).is_err());
+        let edit = vlt_edit("not an entry", &hosted_entry());
+        assert!(revert(&lock_with(&[&hosted_entry()]), &edit).is_err());
+        let edit = vlt_edit(
+            &format!("\"~npm~other@1.0.0\": [0,\"other\",\"{REG_SHA}\"]"),
+            &hosted_entry(),
+        );
+        assert!(revert(&lock_with(&[&hosted_entry()]), &edit)
+            .unwrap_err()
+            .contains("two different DepIDs"));
+    }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..8a73d87c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/expected/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d lp-alias": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/input/vlt-lock.json
new file mode 100644
index 00000000..880d850a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d lp-alias": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-edge/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-edits.json
new file mode 100644
index 00000000..bb1e0d02
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~acme~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~acme~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected/vlt-lock.json
new file mode 100644
index 00000000..4a6fe722
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/expected/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com",
+    "registries": {
+      "acme": "https://registry.example.com",
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~acme~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod acme:left-pad@1.3.0 ~acme~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/input/vlt-lock.json
new file mode 100644
index 00000000..1afb400d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com",
+    "registries": {
+      "acme": "https://registry.example.com",
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~acme~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod acme:left-pad@1.3.0 ~acme~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/alias-url-equals-registry/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected/vlt-lock.json
new file mode 100644
index 00000000..db1afaba
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/expected/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/input/vlt-lock.json
new file mode 100644
index 00000000..e81e65c3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/basic/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-confirmation.json
new file mode 100644
index 00000000..eea9f40c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-confirmation.json
@@ -0,0 +1,8 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-edits.json
new file mode 100644
index 00000000..b76e7094
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-edits.json
@@ -0,0 +1,18 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",null,null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected/vlt-lock.json
new file mode 100644
index 00000000..bef3ee6a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/expected/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/input/vlt-lock.json
new file mode 100644
index 00000000..0e9093de
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/input/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/overrides.json
new file mode 100644
index 00000000..c73060b3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bins-and-platform-slots/overrides.json
@@ -0,0 +1,24 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/input/vlt-lock.json
new file mode 100644
index 00000000..165bf9ac
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/bom-refusal/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-confirmation.json
new file mode 100644
index 00000000..60ce7a3c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-confirmation.json
@@ -0,0 +1,11 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-edits.json
new file mode 100644
index 00000000..a1749b56
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-edits.json
@@ -0,0 +1,42 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\"]",
+    "new": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\"]",
+    "new": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-warnings.json
new file mode 100644
index 00000000..3f4080a3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected-warnings.json
@@ -0,0 +1,5 @@
+[
+  "redirect_vlt_lockfile_version_missing",
+  "redirect_vlt_old_lockfile_ignored",
+  "redirect_vlt_entry_not_found"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected/vlt-lock.json
new file mode 100644
index 00000000..f0a9278d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/expected/vlt-lock.json
@@ -0,0 +1,39 @@
+{
+  "options": {},
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "··debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz"],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz"],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4 ms": "prod 2.1.2 ··ms@2.1.2",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/input/vlt-lock.json
new file mode 100644
index 00000000..830dbce7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/input/vlt-lock.json
@@ -0,0 +1,39 @@
+{
+  "options": {},
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4 ms": "prod 2.1.2 ··ms@2.1.2",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-1/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-edits.json
new file mode 100644
index 00000000..97a8033a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "original": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\"]",
+    "new": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\"]",
+    "new": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-warnings.json
new file mode 100644
index 00000000..7111bf57
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lockfile_version_missing"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected/vlt-lock.json
new file mode 100644
index 00000000..88056f32
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/expected/vlt-lock.json
@@ -0,0 +1,44 @@
+{
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz"],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz"],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt-lock.json
new file mode 100644
index 00000000..b5829580
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt-lock.json
@@ -0,0 +1,44 @@
+{
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-16/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-edits.json
new file mode 100644
index 00000000..97a8033a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "original": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\"]",
+    "new": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\"]",
+    "new": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected/vlt-lock.json
new file mode 100644
index 00000000..98a40486
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/expected/vlt-lock.json
@@ -0,0 +1,45 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz"],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz"],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt-lock.json
new file mode 100644
index 00000000..9725a9fb
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt-lock.json
@@ -0,0 +1,45 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-19/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-edits.json
new file mode 100644
index 00000000..5bdff734
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "original": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\"]",
+    "new": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected/vlt-lock.json
new file mode 100644
index 00000000..2ffd3e19
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/expected/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz"],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt-lock.json
new file mode 100644
index 00000000..beae2b78
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-0.0.0-32/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-edits.json
new file mode 100644
index 00000000..40c485a0
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"·npm·@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"·npm·@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"·npm·use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"·npm·use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "original": "\"·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"·npm·semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",null,null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"·npm·semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"·npm·fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"·npm·fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected/vlt-lock.json
new file mode 100644
index 00000000..6e21a14a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/expected/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ·npm·ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ·npm·fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt-lock.json
new file mode 100644
index 00000000..9b570793
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ·npm·ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ·npm·fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.14/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-edits.json
new file mode 100644
index 00000000..222128b0
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",null,null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected/vlt-lock.json
new file mode 100644
index 00000000..b37d8cdd
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/expected/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt-lock.json
new file mode 100644
index 00000000..657f3548
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.15/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-edits.json
new file mode 100644
index 00000000..222128b0
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",null,null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected/vlt-lock.json
new file mode 100644
index 00000000..b37d8cdd
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/expected/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt-lock.json
new file mode 100644
index 00000000..657f3548
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.32/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-edits.json
new file mode 100644
index 00000000..a222abab
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\",\"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",\"https://registry.npmjs.org/semver/-/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",\"https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected/vlt-lock.json
new file mode 100644
index 00000000..eb2e813b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt-lock.json
new file mode 100644
index 00000000..16b0da72
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/input/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.33/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-edits.json
new file mode 100644
index 00000000..4d7e7d72
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\"]",
+    "new": "\"··@isaacs§string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0",
+    "original": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"··use-sync-external-store@1.2.0\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "original": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"]",
+    "new": "\"··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",null,null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"··semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",null,null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"··fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected/vlt-lock.json
new file mode 100644
index 00000000..f8dad75e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/expected/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt-lock.json
new file mode 100644
index 00000000..d3a36652
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.0-rc.8/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-edits.json
new file mode 100644
index 00000000..89901272
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\",\"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "original": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",\"https://registry.npmjs.org/semver/-/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",\"https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected/vlt-lock.json
new file mode 100644
index 00000000..9a54c540
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/input/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.0.10/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-edits.json
new file mode 100644
index 00000000..89901272
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\",\"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "original": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",\"https://registry.npmjs.org/semver/-/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",\"https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected/vlt-lock.json
new file mode 100644
index 00000000..9a54c540
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/input/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.1.1/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-confirmation.json
new file mode 100644
index 00000000..4b065991
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-confirmation.json
@@ -0,0 +1,12 @@
+{
+  "confirmed": [
+    "00000000-0000-4000-8000-000000000000",
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "ffffffff-ffff-4fff-8fff-ffffffffffff"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-edits.json
new file mode 100644
index 00000000..89901272
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-edits.json
@@ -0,0 +1,50 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@isaacs/string-locale-compare@1.1.0",
+    "original": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==\",\"https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz\"]",
+    "new": "\"~npm~@isaacs+string-locale-compare@1.1.0\": [0,\"@isaacs/string-locale-compare\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "original": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "semver@7.6.0",
+    "original": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==\",\"https://registry.npmjs.org/semver/-/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]",
+    "new": "\"~npm~semver@7.6.0\": [0,\"semver\",\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz\",null,null,null,null,{  \"semver\": \"bin/semver.js\"}]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "fsevents@2.3.3",
+    "original": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==\",\"https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]",
+    "new": "\"~npm~fsevents@2.3.3\": [1,\"fsevents\",\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz\",null,null,null,{  \"engines\": {    \"node\": \"^8.16.0 || ^10.6.0 || >=11.0.0\"  },  \"os\": [    \"darwin\"  ]}]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected/vlt-lock.json
new file mode 100644
index 00000000..9a54c540
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/input/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/overrides.json
new file mode 100644
index 00000000..701102fe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/capture-1.2.0/overrides.json
@@ -0,0 +1,69 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "string-locale-compare",
+    "namespace": "@isaacs",
+    "version": "1.1.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "semver",
+    "version": "7.6.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+    "integrity": {
+      "sha512": "sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "fsevents",
+    "version": "2.3.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "00000000-0000-4000-8000-000000000000",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+    "integrity": {
+      "sha512": "sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected/vlt-lock.json
new file mode 100644
index 00000000..01bda51f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/expected/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/input/vlt-lock.json
new file mode 100644
index 00000000..01d3a58c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/crlf/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-warnings.json
new file mode 100644
index 00000000..ebc409b6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/expected-warnings.json
@@ -0,0 +1,4 @@
+[
+  "redirect_vlt_custom_registry_skipped",
+  "redirect_vlt_entry_not_found"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/input/vlt-lock.json
new file mode 100644
index 00000000..814a0008
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "acme": "https://acme.example.com/",
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~acme~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://acme.example.com/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod acme:left-pad@1.3.0 ~acme~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/custom-registry-skipped/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-edits.json
new file mode 100644
index 00000000..05c8326a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~corp~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://corp.example.com/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~corp~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected/vlt-lock.json
new file mode 100644
index 00000000..5a686662
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "default-registry-alias": "corp",
+    "registries": {
+      "corp": "https://corp.example.com/"
+    }
+  },
+  "nodes": {
+    "~corp~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~corp~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/input/vlt-lock.json
new file mode 100644
index 00000000..8334a617
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "default-registry-alias": "corp",
+    "registries": {
+      "corp": "https://corp.example.com/"
+    }
+  },
+  "nodes": {
+    "~corp~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://corp.example.com/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~corp~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/default-registry-alias/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-confirmation.json
new file mode 100644
index 00000000..e4bdb58e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": false
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-warnings.json
new file mode 100644
index 00000000..a73a1b0e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_no_lockfile"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/node_modules/.vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/node_modules/.vlt-lock.json
new file mode 100644
index 00000000..e69de29b
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/vlt.json
new file mode 100644
index 00000000..8898a254
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/input/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/input/vlt-lock.json
new file mode 100644
index 00000000..47b10b7f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/input/vlt-lock.json
@@ -0,0 +1,9 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-
\ No newline at end of file
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/invalid-json/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-confirmation.json
new file mode 100644
index 00000000..f5aa4421
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "33333333-3333-4333-8333-333333333333"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-edits.json
new file mode 100644
index 00000000..75809e11
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@std/path@1.0.0",
+    "original": "\"~npm~@std+path@1.0.0\": [0,\"@std/path\",\"sha512-jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj==\",\"https://registry.npmjs.org/@std/path/-/path-1.0.0.tgz\"]",
+    "new": "\"~npm~@std+path@1.0.0\": [0,\"@std/path\",\"sha512-33333333333333333333333333333333333333333333333333333333333333333333333333333333333333==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/33333333-3333-4333-8333-333333333333/path-1.0.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-warnings.json
new file mode 100644
index 00000000..dfc8880b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_custom_registry_skipped"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected/vlt-lock.json
new file mode 100644
index 00000000..6bb84ef6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "jsr-registries": {
+      "jsr": "https://npm.jsr.io/"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~jsr~@std+path@1.0.0": [0,"@std/path","sha512-jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj==","https://npm.jsr.io/~/11/@jsr/std__path/1.0.0.tgz"],
+    "~npm~@std+path@1.0.0": [0,"@std/path","sha512-33333333333333333333333333333333333333333333333333333333333333333333333333333333333333==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/33333333-3333-4333-8333-333333333333/path-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @std/path": "prod jsr:@std/path@1.0.0 ~jsr~@std+path@1.0.0",
+    "workspace~packages+a @std/path": "prod 1.0.0 ~npm~@std+path@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/input/vlt-lock.json
new file mode 100644
index 00000000..f13c4620
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/input/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "jsr-registries": {
+      "jsr": "https://npm.jsr.io/"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~jsr~@std+path@1.0.0": [0,"@std/path","sha512-jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj==","https://npm.jsr.io/~/11/@jsr/std__path/1.0.0.tgz"],
+    "~npm~@std+path@1.0.0": [0,"@std/path","sha512-jjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjjj==","https://registry.npmjs.org/@std/path/-/path-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @std/path": "prod jsr:@std/path@1.0.0 ~jsr~@std+path@1.0.0",
+    "workspace~packages+a @std/path": "prod 1.0.0 ~npm~@std+path@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/overrides.json
new file mode 100644
index 00000000..798fb122
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/jsr-skipped/overrides.json
@@ -0,0 +1,14 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "path",
+    "namespace": "@std",
+    "version": "1.0.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "33333333-3333-4333-8333-333333333333",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/33333333-3333-4333-8333-333333333333/path-1.0.0.tgz",
+    "integrity": {
+      "sha512": "sha512-33333333333333333333333333333333333333333333333333333333333333333333333333333333333333=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-edits.json
new file mode 100644
index 00000000..837aaccf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-edits.json
@@ -0,0 +1,18 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected/vlt-lock.json
new file mode 100644
index 00000000..a3293a9d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/expected/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "workspace·packages§a left-pad": "prod npm:left-pad@1.3.0 ·npm·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt-lock.json
new file mode 100644
index 00000000..886c32b7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "workspace·packages§a left-pad": "prod npm:left-pad@1.3.0 ·npm·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt.json
new file mode 100644
index 00000000..84ead0d5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/legacy-mixed-default-segments/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-edits.json
new file mode 100644
index 00000000..e6479a1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-warnings.json
new file mode 100644
index 00000000..f3a6a174
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected-warnings.json
@@ -0,0 +1,4 @@
+[
+  "redirect_vlt_lockfile_version_missing",
+  "redirect_vlt_old_lockfile_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected/vlt-lock.json
new file mode 100644
index 00000000..2c52d629
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/expected/vlt-lock.json
@@ -0,0 +1,9 @@
+{
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/input/vlt-lock.json
new file mode 100644
index 00000000..43bb8922
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/input/vlt-lock.json
@@ -0,0 +1,9 @@
+{
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version-warning/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-edits.json
new file mode 100644
index 00000000..e6479a1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-warnings.json
new file mode 100644
index 00000000..7111bf57
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lockfile_version_missing"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected/vlt-lock.json
new file mode 100644
index 00000000..2c52d629
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/expected/vlt-lock.json
@@ -0,0 +1,9 @@
+{
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt-lock.json
new file mode 100644
index 00000000..43bb8922
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt-lock.json
@@ -0,0 +1,9 @@
+{
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt.json
new file mode 100644
index 00000000..84ead0d5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-absent-version/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-edits.json
new file mode 100644
index 00000000..e6479a1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-warnings.json
new file mode 100644
index 00000000..e533ff00
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_old_lockfile_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected/vlt-lock.json
new file mode 100644
index 00000000..a3f179e4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input/vlt-lock.json
new file mode 100644
index 00000000..2767564b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-edits.json
new file mode 100644
index 00000000..e6479a1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected/vlt-lock.json
new file mode 100644
index 00000000..a3f179e4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/expected/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt-lock.json
new file mode 100644
index 00000000..2767564b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt.json
new file mode 100644
index 00000000..a237a320
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/input/vlt.json
@@ -0,0 +1,3 @@
+{
+  "modifiers": {}
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-empty-segment/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-edits.json
new file mode 100644
index 00000000..eca66dc9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·npm·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected/vlt-lock.json
new file mode 100644
index 00000000..d4c50950
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/expected/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registries": {}
+  },
+  "nodes": {
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/input/vlt-lock.json
new file mode 100644
index 00000000..b472d35e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registries": {}
+  },
+  "nodes": {
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-npm-segment/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-edits.json
new file mode 100644
index 00000000..16751b0a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-warnings.json
new file mode 100644
index 00000000..4e6b7346
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected-warnings.json
@@ -0,0 +1,4 @@
+[
+  "redirect_vlt_old_lockfile_ignored",
+  "redirect_vlt_scalar_registry_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected/vlt-lock.json
new file mode 100644
index 00000000..4f5f8c8a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "http://127.0.0.1:4873/"
+  },
+  "nodes": {
+    "·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input/vlt-lock.json
new file mode 100644
index 00000000..30238c6d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "http://127.0.0.1:4873/"
+  },
+  "nodes": {
+    "·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·http%3A§§127.0.0.1%3A4873§·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-edits.json
new file mode 100644
index 00000000..78994cde
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected/vlt-lock.json
new file mode 100644
index 00000000..9ac5a2e9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/expected/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/input/vlt-lock.json
new file mode 100644
index 00000000..237026c2
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/input/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-3tuple/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected/vlt-lock.json
new file mode 100644
index 00000000..0716ebd9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/input/vlt-lock.json
new file mode 100644
index 00000000..1f881fcb
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-both-registry-keys/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-edits.json
new file mode 100644
index 00000000..562cee06
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~https_c++registry.npmjs.org+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~https_c++registry.npmjs.org+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected/vlt-lock.json
new file mode 100644
index 00000000..ca1aeb36
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.npmjs.org+~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.npmjs.org+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input/vlt-lock.json
new file mode 100644
index 00000000..be30e2ff
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.npmjs.org+~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.npmjs.org+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v1-scalar-registry-3tuple/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/input/vlt-lock.json
new file mode 100644
index 00000000..f513e374
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1e0,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-exponent/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/input/vlt-lock.json
new file mode 100644
index 00000000..c44bc907
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1.0,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-float/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/input/vlt-lock.json
new file mode 100644
index 00000000..f6c53e68
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": "1",
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-string/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/input/vlt-lock.json
new file mode 100644
index 00000000..bc05b5ae
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 2,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-version-unsupported/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/input/vlt-lock.json
new file mode 100644
index 00000000..1ba97162
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/\ud800.js"}]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lone-surrogate-string/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-edits.json
new file mode 100644
index 00000000..810fca2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://mirror.example.com/npm/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected/vlt-lock.json
new file mode 100644
index 00000000..3b3ed525
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/expected/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://mirror.example.com/npm/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/input/vlt-lock.json
new file mode 100644
index 00000000..7ddcd5d8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://mirror.example.com/npm/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://mirror.example.com/npm/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mirror-registries-npm/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-confirmation.json
new file mode 100644
index 00000000..37fd4d64
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [],
+  "refused": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-warnings.json
new file mode 100644
index 00000000..94996b7c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_missing_sha512"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/input/vlt-lock.json
new file mode 100644
index 00000000..e81e65c3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/overrides.json
new file mode 100644
index 00000000..a651d80a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/missing-sha512/overrides.json
@@ -0,0 +1,11 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {}
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-confirmation.json
new file mode 100644
index 00000000..07379947
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-confirmation.json
@@ -0,0 +1,8 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-edits.json
new file mode 100644
index 00000000..0ef35173
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-edits.json
@@ -0,0 +1,18 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3",
+    "original": "\"~npm~ms@2.1.3\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected/vlt-lock.json
new file mode 100644
index 00000000..41f81496
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/expected/vlt-lock.json
@@ -0,0 +1,18 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d yallist": "prod 4.0.0 ~npm~yallist@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/input/vlt-lock.json
new file mode 100644
index 00000000..54d2d69c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/input/vlt-lock.json
@@ -0,0 +1,18 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d yallist": "prod 4.0.0 ~npm~yallist@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/overrides.json
new file mode 100644
index 00000000..46e4417e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/mixed-eol/overrides.json
@@ -0,0 +1,24 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-confirmation.json
new file mode 100644
index 00000000..02f7155f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-confirmation.json
@@ -0,0 +1,8 @@
+{
+  "confirmed": [
+    "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-edits.json
new file mode 100644
index 00000000..1495660a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-edits.json
@@ -0,0 +1,18 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\",\"https://registry.npmjs.org/ms/-/ms-2.1.3.tgz\"]",
+    "new": "\"~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms\": [0,\"ms\",\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "original": "\"~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms\": [0,\"debug\",\"sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==\",\"https://registry.npmjs.org/debug/-/debug-4.3.4.tgz\"]",
+    "new": "\"~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms\": [0,\"debug\",\"sha512-EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee/debug-4.3.4.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected/vlt-lock.json
new file mode 100644
index 00000000..27da90fc
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee/debug-4.3.4.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/input/vlt-lock.json
new file mode 100644
index 00000000..308ae1c4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/input/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/overrides.json
new file mode 100644
index 00000000..d7212771
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/modifier-extra/overrides.json
@@ -0,0 +1,24 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "debug",
+    "version": "4.3.4",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee/debug-4.3.4.tgz",
+    "integrity": {
+      "sha512": "sha512-EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected/vlt-lock.json
new file mode 100644
index 00000000..094fd045
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/expected/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a left-pad": "prod 1.1.3 ~npm~left-pad@1.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/input/vlt-lock.json
new file mode 100644
index 00000000..2080c326
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a left-pad": "prod 1.1.3 ~npm~left-pad@1.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/multiple-versions/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-confirmation.json
new file mode 100644
index 00000000..e4bdb58e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": false
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-warnings.json
new file mode 100644
index 00000000..a73a1b0e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_no_lockfile"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/input/vlt.json
new file mode 100644
index 00000000..edaf227f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/input/vlt.json
@@ -0,0 +1,7 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/no-lockfile-vlt-json/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/input/vlt-lock.json
new file mode 100644
index 00000000..8d9d44b8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/input/vlt-lock.json
@@ -0,0 +1,26 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [
+      0,
+      "left-pad",
+      "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==",
+      "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"
+    ],
+    "~npm~ms@2.1.3": [
+      0,
+      "ms",
+      "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
+    ]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/non-canonical-layout-refusal/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-warnings.json
new file mode 100644
index 00000000..5331bd1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_lock_unsupported"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/input/vlt-lock.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/input/vlt-lock.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/not-json-object/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-confirmation.json
new file mode 100644
index 00000000..f3bbf511
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "cccccccc-cccc-4ccc-8ccc-cccccccccccc"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-edits.json
new file mode 100644
index 00000000..ad58f974
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-edits.json
@@ -0,0 +1,26 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~%E1%B9%97%3A3",
+    "original": "\"·npm·use-sync-external-store@1.2.0·%E1%B9%97%3A3\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\"]",
+    "new": "\"·npm·use-sync-external-store@1.2.0·%E1%B9%97%3A3\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "original": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "use-sync-external-store@1.2.0~peer.2",
+    "original": "\"~npm~use-sync-external-store@1.2.0~peer.2\": [0,\"use-sync-external-store\",\"sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==\",\"https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz\"]",
+    "new": "\"~npm~use-sync-external-store@1.2.0~peer.2\": [0,\"use-sync-external-store\",\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected/vlt-lock.json
new file mode 100644
index 00000000..f9681f3f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/expected/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "·npm·use-sync-external-store@1.2.0·%E1%B9%97%3A3": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.2": [0,"use-sync-external-store","sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.2",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "~npm~use-sync-external-store@1.2.0~peer.2 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/input/vlt-lock.json
new file mode 100644
index 00000000..4eff1fab
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/input/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "·npm·use-sync-external-store@1.2.0·%E1%B9%97%3A3": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.2": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.2",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "~npm~use-sync-external-store@1.2.0~peer.2 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/overrides.json
new file mode 100644
index 00000000..ea2d7386
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/peer-extras/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "use-sync-external-store",
+    "version": "1.2.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+    "integrity": {
+      "sha512": "sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-edits.json
new file mode 100644
index 00000000..4ab8f56d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO==\",\"https://patch.socket.dev/patch/npm/22222222-2222-2222-2222-222222222222/66666666-6666-4666-8666-666666666666/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected/vlt-lock.json
new file mode 100644
index 00000000..c63cd23c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/expected/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/input/vlt-lock.json
new file mode 100644
index 00000000..fb3ac2a1
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO==","https://patch.socket.dev/patch/npm/22222222-2222-2222-2222-222222222222/66666666-6666-4666-8666-666666666666/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/re-redirect-stale-url/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected/vlt-lock.json
new file mode 100644
index 00000000..a9566142
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected/vlt-lock.json
@@ -0,0 +1,20 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "file~vendor+left-pad": [0,"left-pad",null,"vendor/left-pad"],
+    "git~github_cfoo+left-pad~v1.3.0": [0,"left-pad"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz": [0,"left-pad","sha512-rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d lp-dir": "prod file:vendor/left-pad file~vendor+left-pad",
+    "file~_d lp-git": "prod github:foo/left-pad#v1.3.0 git~github_cfoo+left-pad~v1.3.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/input/vlt-lock.json
new file mode 100644
index 00000000..ae7a10a6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/input/vlt-lock.json
@@ -0,0 +1,20 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "file~vendor+left-pad": [0,"left-pad",null,"vendor/left-pad"],
+    "git~github_cfoo+left-pad~v1.3.0": [0,"left-pad"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz": [0,"left-pad","sha512-rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d lp-dir": "prod file:vendor/left-pad file~vendor+left-pad",
+    "file~_d lp-git": "prod github:foo/left-pad#v1.3.0 git~github_cfoo+left-pad~v1.3.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/input/vlt-lock.json
new file mode 100644
index 00000000..c63cd23c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/rerun-noop/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-confirmation.json
new file mode 100644
index 00000000..37fd4d64
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [],
+  "refused": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-warnings.json
new file mode 100644
index 00000000..c91b1068
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_unsupported_lock_key"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/input/vlt-lock.json
new file mode 100644
index 00000000..51f0fc25
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/input/vlt-lock.json
@@ -0,0 +1,13 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/residual-gate-duplicate-nodes/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-edits.json
new file mode 100644
index 00000000..ff81330e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·https%3A§§registry.npmjs.org§·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·https%3A§§registry.npmjs.org§·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-warnings.json
new file mode 100644
index 00000000..13e48044
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_scalar_registry_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected/vlt-lock.json
new file mode 100644
index 00000000..62820e0b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "·https%3A§§registry.npmjs.org§·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·https%3A§§registry.npmjs.org§·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt-lock.json
new file mode 100644
index 00000000..e90e5486
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "https://registry.npmjs.org/",
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "·https%3A§§registry.npmjs.org§·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·https%3A§§registry.npmjs.org§·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt.json
new file mode 100644
index 00000000..84ead0d5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {}}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-v0-with-registries-npm/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-edits.json
new file mode 100644
index 00000000..562cee06
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~https_c++registry.npmjs.org+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~https_c++registry.npmjs.org+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-warnings.json
new file mode 100644
index 00000000..13e48044
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_scalar_registry_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected/vlt-lock.json
new file mode 100644
index 00000000..a882453b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/expected/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "nodes": {
+    "~https_c++registry.npmjs.org+~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.npmjs.org+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/input/vlt-lock.json
new file mode 100644
index 00000000..517a2162
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/input/vlt-lock.json
@@ -0,0 +1,12 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.npmjs.org/"
+  },
+  "nodes": {
+    "~https_c++registry.npmjs.org+~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.npmjs.org+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scalar-registry-warning/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-confirmation.json
new file mode 100644
index 00000000..82a6ee81
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-edits.json
new file mode 100644
index 00000000..850cb438
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-edits.json
@@ -0,0 +1,18 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@a/b@1.0.0",
+    "original": "\"··@a§b@1.0.0\": [0,\"@a/b\",\"sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==\"]",
+    "new": "\"··@a§b@1.0.0\": [0,\"@a/b\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz\"]"
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@a/b@1.0.0",
+    "original": "\"~npm~@a+b@1.0.0\": [0,\"@a/b\",\"sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==\",\"https://registry.npmjs.org/@a/b/-/b-1.0.0.tgz\"]",
+    "new": "\"~npm~@a+b@1.0.0\": [0,\"@a/b\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected/vlt-lock.json
new file mode 100644
index 00000000..a53d2f0c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/expected/vlt-lock.json
@@ -0,0 +1,18 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "··@a§b@1.0.0": [0,"@a/b","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz"],
+    "~npm~@a+b@1.0.0": [0,"@a/b","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz"],
+    "~npm~b@1.0.0": [0,"b","sha512-tttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttt==","https://registry.npmjs.org/b/-/b-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @a/b": "prod 1.0.0 ~npm~@a+b@1.0.0",
+    "file~_d b": "prod 1.0.0 ~npm~b@1.0.0",
+    "workspace~packages+x @a/b": "prod 1.0.0 ··@a§b@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/input/vlt-lock.json
new file mode 100644
index 00000000..0f3b9e93
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/input/vlt-lock.json
@@ -0,0 +1,18 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "··@a§b@1.0.0": [0,"@a/b","sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss=="],
+    "~npm~@a+b@1.0.0": [0,"@a/b","sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==","https://registry.npmjs.org/@a/b/-/b-1.0.0.tgz"],
+    "~npm~b@1.0.0": [0,"b","sha512-tttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttttt==","https://registry.npmjs.org/b/-/b-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @a/b": "prod 1.0.0 ~npm~@a+b@1.0.0",
+    "file~_d b": "prod 1.0.0 ~npm~b@1.0.0",
+    "workspace~packages+x @a/b": "prod 1.0.0 ··@a§b@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/overrides.json
new file mode 100644
index 00000000..94f365ad
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-package/overrides.json
@@ -0,0 +1,14 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "b",
+    "namespace": "@a",
+    "version": "1.0.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-confirmation.json
new file mode 100644
index 00000000..82a6ee81
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-edits.json
new file mode 100644
index 00000000..d1ac3ba9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "@a/b@1.0.0",
+    "original": "\"~npm~@a+b@1.0.0\": [0,\"@a/b\",\"sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==\",\"https://registry.npmjs.org/@a/b/-/b-1.0.0.tgz\"]",
+    "new": "\"~npm~@a+b@1.0.0\": [0,\"@a/b\",\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-warnings.json
new file mode 100644
index 00000000..dfc8880b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_custom_registry_skipped"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected/vlt-lock.json
new file mode 100644
index 00000000..dd60371a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "scope-registries": {
+      "@a": "https://scoped.example.com/"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~https_c++scoped.example.com+~@a+b@1.0.0": [0,"@a/b","sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==","https://scoped.example.com/@a/b/-/b-1.0.0.tgz"],
+    "~npm~@a+b@1.0.0": [0,"@a/b","sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @a/b": "prod 1.0.0 ~https_c++scoped.example.com+~@a+b@1.0.0",
+    "workspace~packages+a @a/b": "prod 1.0.0 ~npm~@a+b@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/input/vlt-lock.json
new file mode 100644
index 00000000..1ff37802
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/input/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "scope-registries": {
+      "@a": "https://scoped.example.com/"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~https_c++scoped.example.com+~@a+b@1.0.0": [0,"@a/b","sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==","https://scoped.example.com/@a/b/-/b-1.0.0.tgz"],
+    "~npm~@a+b@1.0.0": [0,"@a/b","sha512-ssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssssss==","https://registry.npmjs.org/@a/b/-/b-1.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d @a/b": "prod 1.0.0 ~https_c++scoped.example.com+~@a+b@1.0.0",
+    "workspace~packages+a @a/b": "prod 1.0.0 ~npm~@a+b@1.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/overrides.json
new file mode 100644
index 00000000..94f365ad
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/scoped-registry-skipped/overrides.json
@@ -0,0 +1,14 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "b",
+    "namespace": "@a",
+    "version": "1.0.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz",
+    "integrity": {
+      "sha512": "sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-confirmation.json
new file mode 100644
index 00000000..160f829c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-confirmation.json
@@ -0,0 +1,9 @@
+{
+  "confirmed": [
+    "11111111-1111-4111-8111-111111111111"
+  ],
+  "refused": [
+    "22222222-2222-4222-8222-222222222222"
+  ],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-edits.json
new file mode 100644
index 00000000..84b9dc35
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-edits.json
@@ -0,0 +1,38 @@
+[
+  {
+    "path": "package-lock.json",
+    "kind": "redirect_npm_lock_entry",
+    "action": "rewritten",
+    "key": "node_modules/left-pad",
+    "original": {
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "new": {
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  },
+  {
+    "path": "package-lock.json",
+    "kind": "redirect_npm_lock_entry",
+    "action": "rewritten",
+    "key": "node_modules/ms",
+    "original": {
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    },
+    "new": {
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/22222222-2222-4222-8222-222222222222/ms-2.1.3.tgz",
+      "integrity": "sha512-22222222222222222222222222222222222222222222222222222222222222222222222222222222222222=="
+    }
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-warnings.json
new file mode 100644
index 00000000..c91b1068
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_unsupported_lock_key"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/package-lock.json
new file mode 100644
index 00000000..10f82720
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/22222222-2222-4222-8222-222222222222/ms-2.1.3.tgz",
+      "integrity": "sha512-22222222222222222222222222222222222222222222222222222222222222222222222222222222222222=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/vlt-lock.json
new file mode 100644
index 00000000..56ac9356
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/expected/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [
+      0,
+      "ms",
+      "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
+    ]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/node_modules/.vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/node_modules/.vlt-lock.json
new file mode 100644
index 00000000..e69de29b
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/package-lock.json
new file mode 100644
index 00000000..8bea494b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/vlt-lock.json
new file mode 100644
index 00000000..7c272c09
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/input/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [
+      0,
+      "ms",
+      "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
+    ]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/overrides.json
new file mode 100644
index 00000000..8d72b35d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock-vlt-installed/overrides.json
@@ -0,0 +1,24 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "11111111-1111-4111-8111-111111111111",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  },
+  {
+    "ecosystem": "npm",
+    "name": "ms",
+    "version": "2.1.3",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "22222222-2222-4222-8222-222222222222",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/22222222-2222-4222-8222-222222222222/ms-2.1.3.tgz",
+    "integrity": {
+      "sha512": "sha512-22222222222222222222222222222222222222222222222222222222222222222222222222222222222222=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-confirmation.json
new file mode 100644
index 00000000..7ef8c995
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "11111111-1111-4111-8111-111111111111"
+  ],
+  "refused": [],
+  "vltDrives": false
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-edits.json
new file mode 100644
index 00000000..3d790caa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-edits.json
@@ -0,0 +1,24 @@
+[
+  {
+    "path": "package-lock.json",
+    "kind": "redirect_npm_lock_entry",
+    "action": "rewritten",
+    "key": "node_modules/left-pad",
+    "original": {
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "new": {
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  },
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-warnings.json
new file mode 100644
index 00000000..27252497
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_sibling_lockfiles"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/package-lock.json
new file mode 100644
index 00000000..32d172bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/vlt-lock.json
new file mode 100644
index 00000000..17466da9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/expected/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/package-lock.json
new file mode 100644
index 00000000..8bea494b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/vlt-lock.json
new file mode 100644
index 00000000..e81e65c3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/input/vlt-lock.json
@@ -0,0 +1,16 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/overrides.json
new file mode 100644
index 00000000..04a1bf4b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-package-lock/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "11111111-1111-4111-8111-111111111111",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-confirmation.json
new file mode 100644
index 00000000..c9cd6957
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [],
+  "refused": [
+    "11111111-1111-4111-8111-111111111111"
+  ],
+  "vltDrives": false
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-edits.json
new file mode 100644
index 00000000..f01adc13
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-edits.json
@@ -0,0 +1,16 @@
+[
+  {
+    "path": "package-lock.json",
+    "kind": "redirect_npm_lock_entry",
+    "action": "rewritten",
+    "key": "node_modules/left-pad",
+    "original": {
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "new": {
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-warnings.json
new file mode 100644
index 00000000..b83d20a3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected-warnings.json
@@ -0,0 +1,4 @@
+[
+  "redirect_vlt_sibling_lockfiles",
+  "redirect_vlt_unsupported_lock_key"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected/package-lock.json
new file mode 100644
index 00000000..32d172bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/expected/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+      "integrity": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/package-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/package-lock.json
new file mode 100644
index 00000000..8bea494b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/package-lock.json
@@ -0,0 +1,26 @@
+{
+  "name": "consumer",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "consumer",
+      "version": "1.0.0",
+      "dependencies": {
+        "left-pad": "1.3.0",
+        "ms": "2.1.3"
+      }
+    },
+    "node_modules/left-pad": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+      "integrity": "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/vlt-lock.json
new file mode 100644
index 00000000..f0b21682
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/input/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [
+      0,
+      "left-pad",
+      "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==",
+      "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"
+    ],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/overrides.json
new file mode 100644
index 00000000..04a1bf4b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/sibling-refused-in-vlt/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "11111111-1111-4111-8111-111111111111",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-confirmation.json
new file mode 100644
index 00000000..37fd4d64
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [],
+  "refused": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-warnings.json
new file mode 100644
index 00000000..c91b1068
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_unsupported_lock_key"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/input/vlt-lock.json
new file mode 100644
index 00000000..69bb6b88
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/input/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~left-pad@1.3.0~peer.1": [
+      0,
+      "left-pad",
+      "sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="
+    ],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/unsupported-lock-key/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-edits.json
new file mode 100644
index 00000000..3b857113
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~https_c++registry.example.com+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~https_c++registry.example.com+~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected/vlt-lock.json
new file mode 100644
index 00000000..7c0176ed
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com/",
+    "registries": {
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.example.com+~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.example.com+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/input/vlt-lock.json
new file mode 100644
index 00000000..b1d72cdd
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com/",
+    "registries": {
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.example.com+~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.example.com+~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-default/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-edits.json
new file mode 100644
index 00000000..92b64b97
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~https_c++registry.example.com~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"~https_c++registry.example.com~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected/vlt-lock.json
new file mode 100644
index 00000000..fbb2bd73
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com/",
+    "registries": {
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.example.com~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.example.com~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/input/vlt-lock.json
new file mode 100644
index 00000000..5e9a6c0a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registry": "https://registry.example.com/",
+    "registries": {
+      "npm": "https://registry.example.com/"
+    }
+  },
+  "nodes": {
+    "~https_c++registry.example.com~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file~_d left-pad": "prod 1.3.0 ~https_c++registry.example.com~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/url-segment-trailing-slash/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-warnings.json
new file mode 100644
index 00000000..673df0bc
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_entry_vendored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/input/vlt-lock.json
new file mode 100644
index 00000000..bcc50e44
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0.tgz": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0.tgz file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0.tgz"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry-tgz/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-confirmation.json
new file mode 100644
index 00000000..473f0bc6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-warnings.json
new file mode 100644
index 00000000..673df0bc
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_entry_vendored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/input/vlt-lock.json
new file mode 100644
index 00000000..3855b985
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/input/vlt-lock.json
@@ -0,0 +1,14 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d left-pad": "prod file:.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vendored-entry/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-edits.json
new file mode 100644
index 00000000..e6479a1a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"··left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected/vlt-lock.json
new file mode 100644
index 00000000..a3f179e4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/expected/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt-lock.json
new file mode 100644
index 00000000..2767564b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt-lock.json
@@ -0,0 +1,10 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt.json
new file mode 100644
index 00000000..54f57a94
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/input/vlt.json
@@ -0,0 +1,3 @@
+{
+  "modifiers": {}
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/vlt-json-bom/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-edits.json
new file mode 100644
index 00000000..5a1e33aa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]",
+    "new": "\"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected/vlt-lock.json
new file mode 100644
index 00000000..3d3ceb2c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+b left-pad": "dev ^1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt-lock.json
new file mode 100644
index 00000000..e3f5f4c7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+b left-pad": "dev ^1.3.0 ~npm~left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt.json
new file mode 100644
index 00000000..0155c44a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/input/vlt.json
@@ -0,0 +1,8 @@
+{
+  "workspaces": "packages/*",
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/workspace/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 3303c6ad..06f89a6c 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -925,6 +925,1047 @@
     "elsewhere": [],
     "live_claims": []
   },
+  "redirect/npm/vlt/alias-edge/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/alias-edge/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/alias-url-equals-registry/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/alias-url-equals-registry/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/basic/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/basic/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/bins-and-platform-slots/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/bins-and-platform-slots/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/bom-refusal/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-1/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-1/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-16/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-16/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-19/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-19/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-32/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-32/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.14/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.14/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.15/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.15/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.32/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.32/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.33/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.33/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.8/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.0-rc.8/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.10/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.0.10/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.1.1/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.1.1/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.2.0/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-1.2.0/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/crlf/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/crlf/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/custom-registry-skipped/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/default-registry-alias/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/default-registry-alias/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/hidden-lock-sentinel/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/invalid-json/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/jsr-skipped/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/jsr-skipped/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/legacy-mixed-default-segments/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/legacy-mixed-default-segments/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-absent-version/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-absent-version/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-absent-version-warning/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-absent-version-warning/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-empty-segment/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-empty-segment/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-npm-segment/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-npm-segment/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-3tuple/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-3tuple/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-both-registry-keys/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-both-registry-keys/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-version-exponent/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-version-float/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-version-string/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-version-unsupported/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lone-surrogate-string/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/mirror-registries-npm/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/mirror-registries-npm/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/missing-sha512/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/mixed-eol/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/mixed-eol/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/modifier-extra/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/modifier-extra/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/multiple-versions/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/multiple-versions/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/no-lockfile-vlt-json/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/non-canonical-layout-refusal/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/not-json-object/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/peer-extras/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/peer-extras/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/re-redirect-stale-url/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/re-redirect-stale-url/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/remote-file-git-untouched/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/remote-file-git-untouched/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/rerun-noop/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/residual-gate-duplicate-nodes/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scalar-registry-warning/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scalar-registry-warning/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scoped-package/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scoped-package/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scoped-registry-skipped/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/scoped-registry-skipped/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/sibling-package-lock/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "source_file": "package-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "package-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
+  },
+  "redirect/npm/vlt/sibling-package-lock/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "package-lock.json"
+      }
+    ],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/sibling-package-lock-vlt-installed/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "source_file": "package-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "22222222-2222-4222-8222-222222222222",
+        "mode": "hosted",
+        "source_file": "package-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-22222222222222222222222222222222222222222222222222222222222222222222222222222222222222==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/22222222-2222-4222-8222-222222222222/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      },
+      {
+        "uuid": "22222222-2222-4222-8222-222222222222",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "22222222-2222-4222-8222-222222222222",
+        "purl": "pkg:npm/ms@2.1.3"
+      }
+    ]
+  },
+  "redirect/npm/vlt/sibling-package-lock-vlt-installed/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "package-lock.json"
+      }
+    ],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/sibling-refused-in-vlt/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "source_file": "package-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "file": "package-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "package-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
+  },
+  "redirect/npm/vlt/sibling-refused-in-vlt/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "package-lock.json"
+      }
+    ],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/unsupported-lock-key/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/url-segment-default/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/url-segment-default/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/url-segment-trailing-slash/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/url-segment-trailing-slash/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/vendored-entry/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/vendored-entry-tgz/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/vlt-json-bom/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/vlt-json-bom/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/workspace/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/workspace/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
   "redirect/npm/yarn-berry/basic/expected": {
     "refs": [
       {
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
new file mode 100644
index 00000000..9d2f41df
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
@@ -0,0 +1,98 @@
+{
+  "vlt-locks/0.0.0-1": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/0.0.0-16": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/0.0.0-19": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/0.0.0-32": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.0-rc.14": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.0-rc.15": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.0-rc.32": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.0-rc.33": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.0-rc.8": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.0.10": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.1.1": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "vlt-locks/1.2.0": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-1/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-1/vlt-lock.json
new file mode 100644
index 00000000..830dbce7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-1/vlt-lock.json
@@ -0,0 +1,39 @@
+{
+  "options": {},
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4 ms": "prod 2.1.2 ··ms@2.1.2",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt-lock.json
new file mode 100644
index 00000000..b5829580
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt-lock.json
@@ -0,0 +1,44 @@
+{
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-16/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt-lock.json
new file mode 100644
index 00000000..9725a9fb
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt-lock.json
@@ -0,0 +1,45 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··react@18.3.1": [0,"react","sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··react@18.3.1 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.3.1"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-19/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt-lock.json
new file mode 100644
index 00000000..beae2b78
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q=="],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg=="],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/0.0.0-32/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt-lock.json
new file mode 100644
index 00000000..9b570793
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ·npm·ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ·npm·fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "·npm·debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.14/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt-lock.json
new file mode 100644
index 00000000..657f3548
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.15/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt-lock.json
new file mode 100644
index 00000000..657f3548
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.32/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt-lock.json
new file mode 100644
index 00000000..16b0da72
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.33/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt-lock.json
new file mode 100644
index 00000000..d3a36652
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt-lock.json
@@ -0,0 +1,43 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    }
+  },
+  "nodes": {
+    "··@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "··fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",null,null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "··js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "··left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "··loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "··lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "··ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "··react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "··semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "··use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "··yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "·npm·left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="],
+    "remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz": [0,"left-pad"]
+  },
+  "edges": {
+    "file·. ms": "dev 2.1.2 ··ms@2.1.2",
+    "file·. fsevents": "optional 2.3.3 ··fsevents@2.3.3",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ··@isaacs§string-locale-compare@1.1.0",
+    "file·. debug": "prod 4.3.4 ··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ··react@18.2.0",
+    "file·. semver": "prod 7.6.0 ··semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ··use-sync-external-store@1.2.0",
+    "file·. lp-alias": "prod npm:left-pad@1.1.3 ·npm·left-pad@1.1.3",
+    "file·. lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote·https%3A§§registry.npmjs.org§left-pad§-§left-pad-1.2.0.tgz",
+    "··debug@4.3.4·%3Aroot%20%3E%20%23debug%20%3E%20%23ms ms": "prod 2.1.3 ··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+    "··loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ··js-tokens@4.0.0",
+    "··lru-cache@6.0.0 yallist": "prod ^4.0.0 ··yallist@4.0.0",
+    "··react@18.2.0 loose-envify": "prod ^1.1.0 ··loose-envify@1.4.0",
+    "··semver@7.6.0 lru-cache": "prod ^6.0.0 ··lru-cache@6.0.0",
+    "··use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ··react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt.json
new file mode 100644
index 00000000..5f7ee1f6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.0-rc.8/vlt.json
@@ -0,0 +1 @@
+{"modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.0.10/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.1.1/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt-lock.json
new file mode 100644
index 00000000..54da8c22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "modifiers": {
+      ":root > #debug > #ms": "2.1.3"
+    },
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==","https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",null,null,null,{  "engines": {    "node": "^8.16.0 || ^10.6.0 || >=11.0.0"  },  "os": [    "darwin"  ]}],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.1.3": [0,"left-pad","sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==","https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [2,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz": [0,"left-pad","sha512-OQadpCyFCT/VLniZQgym8d3/ofIJtuZyw2ibsVeIUOexKgW/osn8+mMFJbwGMPeDC4GnLzD8q115WPCDx4YRWg=="]
+  },
+  "edges": {
+    "file~_d ms": "dev 2.1.2 ~npm~ms@2.1.2",
+    "file~_d fsevents": "optional 2.3.3 ~npm~fsevents@2.3.3",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d debug": "prod 4.3.4 ~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms",
+    "file~_d lp-alias": "prod npm:left-pad@1.1.3 ~npm~left-pad@1.1.3",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp-remote": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+    "~npm~debug@4.3.4~_croot_s_g_s#debug_s_g_s#ms ms": "prod 2.1.3 ~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt.json b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt.json
new file mode 100644
index 00000000..ab3aa87e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/1.2.0/vlt.json
@@ -0,0 +1 @@
+{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}, "modifiers": {":root > #debug > #ms": "2.1.3"}}
diff --git a/crates/socket-patch-core/tests/fixtures/vlt-locks/README.md b/crates/socket-patch-core/tests/fixtures/vlt-locks/README.md
new file mode 100644
index 00000000..ececddc1
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vlt-locks/README.md
@@ -0,0 +1,28 @@
+# Captured vlt locks
+
+Each `<vlt-version>/vlt-lock.json` is the lock real vlt wrote on a cold
+`vlt install` of one project (isolated XDG dirs and VLT_CACHE,
+VLT_TELEMETRY=0, LANG=C, LC_ALL=C, CI=1, Node 24.21.0, public npm registry),
+byte for byte. `<vlt-version>/vlt.json` is the config it ran with (0.0.0-1
+has none).
+
+Project (`package.json`):
+
+- dependencies: "left-pad": "1.3.0", "debug": "4.3.4",
+  "@isaacs/string-locale-compare": "1.1.0", "react": "18.2.0",
+  "use-sync-external-store": "1.2.0", "lp-alias": "npm:left-pad@1.1.3",
+  "semver": "7.6.0",
+  "lp-remote": "https://registry.npmjs.org/left-pad/-/left-pad-1.2.0.tgz"
+- optionalDependencies: "fsevents": "2.3.3" (captured on macOS)
+- devDependencies: "ms": "2.1.2"
+
+`vlt.json`: `{"modifiers": {":root > #debug > #ms": "2.1.3"}}`, plus
+`{"config": {"registries": {"npm": "https://registry.npmjs.org/"}}}` from
+1.0.0-rc.33 (which has no default registry).
+
+The locks cover every era: no `lockfileVersion` (0.0.0-1, 0.0.0-16), `0`
+with `··` and `·npm·` ids (0.0.0-19 to rc.14), `1` with `~` ids and
+3-tuples (rc.15, rc.32), `1` with slot [3] (rc.33 on), and peer extras
+(1.0.10 on), with dev/optional flags, platform [7], bins [8], a modifier,
+an alias and a remote node. `tests/vlt_locks.rs` round-trips them, and the
+`redirect/npm/vlt/capture-<version>` goldens are built from them.
diff --git a/crates/socket-patch-core/tests/redirect_golden.rs b/crates/socket-patch-core/tests/redirect_golden.rs
index 0fc5a6ec..7a6266f1 100644
--- a/crates/socket-patch-core/tests/redirect_golden.rs
+++ b/crates/socket-patch-core/tests/redirect_golden.rs
@@ -25,6 +25,7 @@ const RUST_IMPLEMENTED: &[&str] = &[
     "npm/yarn-classic",
     "npm/yarn-berry",
     "npm/bun",
+    "npm/vlt",
     "pypi/requirements",
     "pypi/uv",
     "cargo/cargo",
@@ -162,6 +163,29 @@ fn redirect_golden_fixtures_match() {
             assert_eq!(got, expected, "{rel}: warning codes mismatch");
         }
 
+        // Confirmation sets (`expected-confirmation.json`: `confirmed` and
+        // `refused` uuid lists plus `vltDrives`), the hosted confirmation
+        // inputs the TS twin must reproduce. Required for every vlt case,
+        // optional elsewhere.
+        let confirmation_path = case.join("expected-confirmation.json");
+        if eco_flavor == "npm/vlt" {
+            assert!(
+                confirmation_path.is_file(),
+                "{rel}: vlt cases must ship expected-confirmation.json"
+            );
+        }
+        if confirmation_path.is_file() {
+            let expected: serde_json::Value =
+                serde_json::from_str(&fs::read_to_string(&confirmation_path).unwrap())
+                    .unwrap_or_else(|e| panic!("{rel}: bad expected-confirmation.json: {e}"));
+            let got = serde_json::json!({
+                "confirmed": result.confirmed_vlt_uuids,
+                "refused": result.refused_vlt_uuids,
+                "vltDrives": result.vlt_drives,
+            });
+            assert_eq!(got, expected, "{rel}: confirmation mismatch");
+        }
+
         // Determinism: a second run yields identical bytes.
         let again = rewrite_registry_redirect(&files, &overrides);
         assert_eq!(again.files, result.files, "{rel}: non-deterministic");
diff --git a/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs b/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
new file mode 100644
index 00000000..20e15156
--- /dev/null
+++ b/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
@@ -0,0 +1,220 @@
+//! Reverse replay of the vlt redirect goldens: each `npm/vlt` case's
+//! `expected-edits.json`, recorded as a hosted ledger over its `expected/`
+//! tree, must unwind `vlt-lock.json` to the `input/` bytes. The same edits are
+//! what the depscan server writes into its PR ledgers, so this is also the
+//! proof that socket-patch reverts a server-written vlt redirect.
+//!
+//! Each case runs three ways: as written, after vlt's LF re-save of a CRLF
+//! lock, and after a re-save that appended a sibling node (which moves the
+//! trailing comma). Both the whole-ledger replay and the per-purl revert are
+//! exercised.
+
+use std::collections::BTreeMap;
+use std::fs;
+use std::path::{Path, PathBuf};
+
+use socket_patch_core::manifest::schema::PatchRecord;
+use socket_patch_core::patch::redirect::{
+    revert_redirect_purl, revert_remaining_redirect_edits, FileEdit, RedirectState,
+};
+
+const VLT_LOCK: &str = "vlt-lock.json";
+const KIND: &str = "redirect_vlt_lock_node";
+
+fn cases_root() -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/redirect/npm/vlt")
+}
+
+struct Case {
+    name: String,
+    input: String,
+    expected: String,
+    edits: Vec<FileEdit>,
+    purls: Vec<String>,
+}
+
+fn npm_purl(name: &str, namespace: Option<&str>, version: &str) -> String {
+    match namespace {
+        Some(ns) if !ns.is_empty() => format!("pkg:npm/%40{}/{name}@{version}", &ns[1..]),
+        _ => format!("pkg:npm/{name}@{version}"),
+    }
+}
+
+fn load_cases() -> Vec<Case> {
+    let mut dirs: Vec<PathBuf> = fs::read_dir(cases_root())
+        .unwrap()
+        .map(|e| e.unwrap().path())
+        .filter(|p| p.join("input").is_dir())
+        .collect();
+    dirs.sort();
+    let mut cases = Vec::new();
+    for dir in dirs {
+        let edits: Vec<FileEdit> =
+            serde_json::from_str(&fs::read_to_string(dir.join("expected-edits.json")).unwrap())
+                .unwrap();
+        let edits: Vec<FileEdit> = edits.into_iter().filter(|e| e.kind == KIND).collect();
+        if edits.is_empty() {
+            continue;
+        }
+        let overrides: Vec<serde_json::Value> =
+            serde_json::from_str(&fs::read_to_string(dir.join("overrides.json")).unwrap()).unwrap();
+        let purls = overrides
+            .iter()
+            .map(|o| {
+                npm_purl(
+                    o["name"].as_str().unwrap(),
+                    o["namespace"].as_str(),
+                    o["version"].as_str().unwrap(),
+                )
+            })
+            .collect();
+        cases.push(Case {
+            name: dir.file_name().unwrap().to_string_lossy().into_owned(),
+            input: fs::read_to_string(dir.join("input").join(VLT_LOCK)).unwrap(),
+            expected: fs::read_to_string(dir.join("expected").join(VLT_LOCK)).unwrap(),
+            edits,
+            purls,
+        });
+    }
+    cases
+}
+
+fn record(uuid: &str) -> PatchRecord {
+    PatchRecord {
+        uuid: uuid.to_string(),
+        exported_at: "2026-09-25T00:00:00Z".to_string(),
+        files: Default::default(),
+        vulnerabilities: Default::default(),
+        description: String::new(),
+        license: String::new(),
+        tier: "free".to_string(),
+    }
+}
+
+fn ledger(case: &Case) -> RedirectState {
+    let mut state = RedirectState::new();
+    state.edits = case.edits.clone();
+    for purl in &case.purls {
+        state.records.insert(purl.clone(), record("u"));
+    }
+    state
+}
+
+/// The lock after vlt re-saved it with a node appended at the end of the
+/// nodes section, so the formerly last entry gains a comma.
+fn with_appended_node(text: &str) -> String {
+    let mut lines: Vec<String> = text.split('\n').map(str::to_string).collect();
+    let open = lines
+        .iter()
+        .position(|l| l.trim_end_matches('\r') == "  \"nodes\": {")
+        .expect("nodes section");
+    let close = (open + 1..lines.len())
+        .find(|&i| matches!(lines[i].trim_end_matches('\r'), "  }" | "  },"))
+        .expect("nodes section end");
+    let last = close - 1;
+    let cr = if lines[last].ends_with('\r') {
+        "\r"
+    } else {
+        ""
+    };
+    let body = lines[last].trim_end_matches('\r').to_string();
+    assert!(!body.ends_with(','), "the last node has no comma");
+    lines[last] = format!("{body},{cr}");
+    lines.insert(
+        close,
+        format!("    \"~npm~zzz-appended@1.0.0\": [0,\"zzz-appended\",\"sha512-zz==\"]{cr}"),
+    );
+    lines.join("\n")
+}
+
+fn variants(case: &Case) -> Vec<(&'static str, String, String)> {
+    let mut out = vec![("as-written", case.expected.clone(), case.input.clone())];
+    if case.expected.contains('\r') {
+        out.push((
+            "lf-resave",
+            case.expected.replace("\r\n", "\n"),
+            case.input.replace("\r\n", "\n"),
+        ));
+    }
+    out.push((
+        "comma-moved",
+        with_appended_node(&case.expected),
+        with_appended_node(&case.input),
+    ));
+    out
+}
+
+fn stage(lock: &str) -> tempfile::TempDir {
+    let dir = tempfile::tempdir().unwrap();
+    fs::write(dir.path().join(VLT_LOCK), lock).unwrap();
+    dir
+}
+
+#[tokio::test]
+async fn vlt_goldens_replay_back_to_their_input() {
+    let cases = load_cases();
+    assert!(
+        cases.len() >= 30,
+        "only {} vlt cases with edits",
+        cases.len()
+    );
+    for case in &cases {
+        for (variant, on_disk, want) in variants(case) {
+            let dir = stage(&on_disk);
+            let mut state = ledger(case);
+            let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+            assert!(
+                out.fully_reverted(),
+                "{} {variant}: {:?}",
+                case.name,
+                out.refusals
+            );
+            assert!(state.edits.is_empty(), "{} {variant}", case.name);
+            assert!(state.records.is_empty(), "{} {variant}", case.name);
+            assert_eq!(
+                fs::read_to_string(dir.path().join(VLT_LOCK)).unwrap(),
+                want,
+                "{} {variant}: replay",
+                case.name
+            );
+
+            let again = revert_remaining_redirect_edits(dir.path(), &mut ledger(case), false).await;
+            assert!(again.fully_reverted(), "{} {variant}: rerun", case.name);
+            assert_eq!(
+                fs::read_to_string(dir.path().join(VLT_LOCK)).unwrap(),
+                want,
+                "{} {variant}: an already reverted lock stays put",
+                case.name
+            );
+        }
+    }
+}
+
+#[tokio::test]
+async fn vlt_goldens_revert_per_purl_back_to_their_input() {
+    for case in &load_cases() {
+        for (variant, on_disk, want) in variants(case) {
+            let dir = stage(&on_disk);
+            let mut state = ledger(case);
+            let mut touched: BTreeMap<String, usize> = BTreeMap::new();
+            for purl in &case.purls {
+                let out = revert_redirect_purl(dir.path(), &mut state, purl, false)
+                    .await
+                    .unwrap_or_else(|e| panic!("{} {variant} {purl}: {e}", case.name));
+                *touched.entry(purl.clone()).or_default() += out.reverted_files.len();
+            }
+            assert!(
+                state.edits.is_empty(),
+                "{} {variant}: every vlt edit is claimed by its purl: {:?}",
+                case.name,
+                state.edits
+            );
+            assert_eq!(
+                fs::read_to_string(dir.path().join(VLT_LOCK)).unwrap(),
+                want,
+                "{} {variant}: per-purl revert ({touched:?})",
+                case.name
+            );
+        }
+    }
+}
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
new file mode 100644
index 00000000..a1ce21be
--- /dev/null
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -0,0 +1,344 @@
+//! Real vlt locks (`tests/fixtures/vlt-locks/<version>/`, captured from every
+//! era) through the hosted rewriter: only the target nodes' slots [2] and [3]
+//! change, and the output stays in vlt's own canonical serialization, so
+//! vlt's next save leaves it byte-identical.
+
+use std::collections::BTreeMap;
+use std::fs;
+use std::path::{Path, PathBuf};
+
+use serde_json::Value;
+use socket_patch_core::patch::redirect::{rewrite_registry_redirect, DepOverride};
+
+const TOKEN: &str = "11111111-1111-1111-1111-111111111111";
+
+/// `(version, the DepIDs rewritten in override order, warning codes)`.
+const CAPTURES: &[(&str, &[&str], &[&str])] = &[
+    (
+        "0.0.0-1",
+        &[
+            "··left-pad@1.3.0",
+            "··@isaacs§string-locale-compare@1.1.0",
+            "··use-sync-external-store@1.2.0",
+            "··semver@7.6.0",
+            "··fsevents@2.3.3",
+        ],
+        &[
+            "redirect_vlt_lockfile_version_missing",
+            "redirect_vlt_old_lockfile_ignored",
+            "redirect_vlt_entry_not_found",
+        ],
+    ),
+    (
+        "0.0.0-16",
+        &[
+            "··left-pad@1.3.0",
+            "··@isaacs§string-locale-compare@1.1.0",
+            "··use-sync-external-store@1.2.0",
+            "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            "··semver@7.6.0",
+            "··fsevents@2.3.3",
+        ],
+        &["redirect_vlt_lockfile_version_missing"],
+    ),
+    (
+        "0.0.0-19",
+        &[
+            "··left-pad@1.3.0",
+            "··@isaacs§string-locale-compare@1.1.0",
+            "··use-sync-external-store@1.2.0",
+            "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            "··semver@7.6.0",
+            "··fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "0.0.0-32",
+        &[
+            "··left-pad@1.3.0",
+            "··@isaacs§string-locale-compare@1.1.0",
+            "··use-sync-external-store@1.2.0",
+            "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            "··semver@7.6.0",
+            "··fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.0-rc.8",
+        &[
+            "··left-pad@1.3.0",
+            "··@isaacs§string-locale-compare@1.1.0",
+            "··use-sync-external-store@1.2.0",
+            "··ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            "··semver@7.6.0",
+            "··fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.0-rc.14",
+        &[
+            "·npm·left-pad@1.3.0",
+            "·npm·@isaacs§string-locale-compare@1.1.0",
+            "·npm·use-sync-external-store@1.2.0",
+            "·npm·ms@2.1.3·%3Aroot%20%3E%20%23debug%20%3E%20%23ms",
+            "·npm·semver@7.6.0",
+            "·npm·fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.0-rc.15",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.0-rc.32",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.0-rc.33",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.0.10",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.1.1",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+    (
+        "1.2.0",
+        &[
+            "~npm~left-pad@1.3.0",
+            "~npm~@isaacs+string-locale-compare@1.1.0",
+            "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+            "~npm~ms@2.1.3~_croot_s_g_s#debug_s_g_s#ms",
+            "~npm~semver@7.6.0",
+            "~npm~fsevents@2.3.3",
+        ],
+        &[],
+    ),
+];
+
+/// `(full name, version, patch uuid)` of the override set: a direct, a
+/// scoped, a peer, a transitive (modifier) target, a bins and an optional
+/// platform node.
+const TARGETS: &[(&str, &str, &str)] = &[
+    ("left-pad", "1.3.0", "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"),
+    (
+        "@isaacs/string-locale-compare",
+        "1.1.0",
+        "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+    ),
+    (
+        "use-sync-external-store",
+        "1.2.0",
+        "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+    ),
+    ("ms", "2.1.3", "dddddddd-dddd-4ddd-8ddd-dddddddddddd"),
+    ("semver", "7.6.0", "ffffffff-ffff-4fff-8fff-ffffffffffff"),
+    ("fsevents", "2.3.3", "00000000-0000-4000-8000-000000000000"),
+];
+
+fn captures_root() -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/vlt-locks")
+}
+
+fn hosted_url(name: &str, version: &str, uuid: &str) -> String {
+    let bare = name.rsplit('/').next().unwrap();
+    format!("https://patch.socket.dev/patch/npm/{TOKEN}/{uuid}/{bare}-{version}.tgz")
+}
+
+fn patched_sha(uuid: &str) -> String {
+    let tag = uuid[..1].to_ascii_uppercase();
+    format!("sha512-{}==", tag.repeat(86))
+}
+
+fn overrides() -> Vec<DepOverride> {
+    TARGETS
+        .iter()
+        .map(|(name, version, uuid)| {
+            let (namespace, bare) = match name.split_once('/') {
+                Some((scope, bare)) => (Some(scope), bare),
+                None => (None, *name),
+            };
+            serde_json::from_value(serde_json::json!({
+                "ecosystem": "npm",
+                "name": bare,
+                "namespace": namespace,
+                "version": version,
+                "token": TOKEN,
+                "patchUuid": uuid,
+                "artifactUrl": hosted_url(name, version, uuid),
+                "integrity": { "sha512": patched_sha(uuid) },
+            }))
+            .unwrap()
+        })
+        .collect()
+}
+
+/// vlt `save.ts` `extraFormat(JSON.stringify(data, null, 2))`.
+fn vlt_serialize(text: &str) -> String {
+    let value: Value = serde_json::from_str(text).unwrap();
+    let pretty = format!("{}\n", serde_json::to_string_pretty(&value).unwrap());
+    let marker = "  \"nodes\": {";
+    let mut parts = pretty.split(marker);
+    let mut out = parts.next().unwrap().to_string();
+    for part in parts {
+        out.push_str(marker);
+        out.push_str(&part.replace("\n      ", "").replace("\n    ]", "]"));
+    }
+    out
+}
+
+fn node_entry(line: &str) -> (String, Vec<Value>) {
+    let body = line.trim_start().trim_end_matches(',');
+    let (key, tuple) = body.split_once(": ").unwrap();
+    let key: String = serde_json::from_str(key).unwrap();
+    let tuple: Vec<Value> = serde_json::from_str(tuple).unwrap();
+    (key, tuple)
+}
+
+fn read_capture(version: &str) -> BTreeMap<String, String> {
+    let dir = captures_root().join(version);
+    let mut files = BTreeMap::new();
+    for name in ["vlt-lock.json", "vlt.json"] {
+        if let Ok(text) = fs::read_to_string(dir.join(name)) {
+            files.insert(name.to_string(), text);
+        }
+    }
+    files
+}
+
+#[test]
+fn every_capture_is_listed() {
+    let mut on_disk: Vec<String> = fs::read_dir(captures_root())
+        .unwrap()
+        .map(|e| e.unwrap().path())
+        .filter(|p| p.is_dir())
+        .map(|p| p.file_name().unwrap().to_string_lossy().into_owned())
+        .collect();
+    on_disk.sort();
+    let mut listed: Vec<String> = CAPTURES.iter().map(|(v, _, _)| v.to_string()).collect();
+    listed.sort();
+    assert_eq!(on_disk, listed);
+}
+
+#[test]
+fn captured_locks_are_in_vlt_canonical_form() {
+    for (version, _, _) in CAPTURES {
+        let lock = &read_capture(version)["vlt-lock.json"];
+        assert_eq!(&vlt_serialize(lock), lock, "{version}");
+    }
+}
+
+#[test]
+fn hosted_rewrite_changes_exactly_the_target_slots() {
+    let overrides = overrides();
+    for (version, targets, warnings) in CAPTURES {
+        let files = read_capture(version);
+        let input = &files["vlt-lock.json"];
+        let result = rewrite_registry_redirect(&files, &overrides);
+        let codes: Vec<&str> = result.warnings.iter().map(|w| w.code.as_str()).collect();
+        assert_eq!(&codes, warnings, "{version}");
+        let output = &result.files["vlt-lock.json"];
+        assert_eq!(result.files.len(), 1, "{version}");
+        assert_eq!(&vlt_serialize(output), output, "{version}: canonical");
+
+        let before: Vec<&str> = input.split('\n').collect();
+        let after: Vec<&str> = output.split('\n').collect();
+        assert_eq!(before.len(), after.len(), "{version}");
+        let mut changed = Vec::new();
+        for (old, new) in before.iter().zip(&after) {
+            if old == new {
+                continue;
+            }
+            let (old_key, old_tuple) = node_entry(old);
+            let (new_key, new_tuple) = node_entry(new);
+            assert_eq!(old_key, new_key, "{version}");
+            let name = old_tuple[1].as_str().unwrap();
+            let (_, target_version, uuid) = TARGETS
+                .iter()
+                .find(|(n, v, _)| *n == name && old_key.contains(&format!("@{v}")))
+                .unwrap_or_else(|| panic!("{version}: {old_key} is not a target"));
+            assert_eq!(
+                new_tuple.len(),
+                old_tuple.len().max(4),
+                "{version} {old_key}"
+            );
+            assert_eq!(new_tuple[0], old_tuple[0], "{version} {old_key}");
+            assert_eq!(new_tuple[1], old_tuple[1], "{version} {old_key}");
+            assert_eq!(new_tuple[2], Value::String(patched_sha(uuid)));
+            assert_eq!(
+                new_tuple[3],
+                Value::String(hosted_url(name, target_version, uuid))
+            );
+            assert_eq!(
+                new_tuple[4..],
+                old_tuple[old_tuple.len().min(4)..],
+                "{version} {old_key}"
+            );
+            changed.push(old_key);
+        }
+        let mut want: Vec<&str> = targets.to_vec();
+        want.sort_unstable();
+        changed.sort_unstable();
+        assert_eq!(changed, want, "{version}");
+        let edited: Vec<&str> = result
+            .edits
+            .iter()
+            .map(|e| {
+                let original = e.original.as_ref().and_then(Value::as_str).unwrap();
+                original[1..].split_once('"').unwrap().0
+            })
+            .collect();
+        assert_eq!(&edited, targets, "{version}: edits in override order");
+
+        let again = rewrite_registry_redirect(&result.files, &overrides);
+        assert!(again.files.is_empty(), "{version}: a rerun is a no-op");
+        assert!(again.edits.is_empty(), "{version}");
+    }
+}

From 0f00b0263357f8c6c245ddfb1edcc49104ea49a5 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 22:36:14 -0400
Subject: [PATCH 12/46] Fix vlt hosted revert order and lock advisories

Rolling back a vlt hosted redirect no longer refuses when vlt re-locked
one peer or modifier variant away while an earlier instance of the same
package still carries the pin. Every surviving instance is restored
first, and only then is a vanished one checked for a leftover hosted
URL, so rollback, remove and the vendored takeover succeed whatever
order the ledger holds.

The "vlt ignores this old lockfile" advisory now fires only for the
empty or registry-URL segments the spec names, so v0 locks that use a
named registry alias no longer get a spurious warning (and a withheld
VEX attestation). A bun.lockb on disk now counts as a sibling lock when
deciding whether vlt drives the install, without passing its bytes as
text.

New tests pin the slot-level revert through both revert entry points,
the install-state sentinel on its own, both advisory alias cases and a
CRLF copy of every captured vlt lock.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../src/commands/scan/hosted.rs               |   1 +
 .../src/patch/redirect/mod.rs                 |  13 +-
 .../src/patch/redirect/replay.rs              |  89 +++++++-
 .../src/patch/redirect/takeover.rs            |  79 ++++++-
 .../src/patch/redirect/vlt.rs                 | 207 +++++++++++++-----
 .../src/vendor/vlt_lock_text.rs               |  17 +-
 .../src/vex/discover/pypi_other.rs            |   1 +
 .../expected-confirmation.json                |   5 +
 .../expected-edits.json                       |   1 +
 .../expected-warnings.json                    |   3 +
 .../input/node_modules/.vlt-lock.json         |   0
 .../hidden-lock-sentinel-only/overrides.json  |  13 ++
 .../expected-confirmation.json                |   7 +
 .../expected-edits.json                       |  10 +
 .../expected-warnings.json                    |   3 +
 .../expected/vlt-lock.json                    |  15 ++
 .../input/vlt-lock.json                       |  15 ++
 .../overrides.json                            |  13 ++
 .../expected-confirmation.json                |   7 +
 .../expected-edits.json                       |  10 +
 .../expected-warnings.json                    |   1 +
 .../expected/vlt-lock.json                    |  15 ++
 .../input/vlt-lock.json                       |  15 ++
 .../overrides.json                            |  13 ++
 .../vex-discover-golden/redirect-npm.json     |  40 ++++
 .../tests/redirect_golden_reverse_replay.rs   |  54 ++++-
 crates/socket-patch-core/tests/vlt_locks.rs   |  21 +-
 27 files changed, 586 insertions(+), 82 deletions(-)
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/input/node_modules/.vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/overrides.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-confirmation.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-edits.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-warnings.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/input/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/overrides.json

diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 2c218c53..03223412 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -1881,6 +1881,7 @@ pub(crate) async fn run_redirect_selected(
         &rewrite_overrides,
         &python_metadata,
         pipenv_major,
+        common.cwd.join("bun.lockb").exists(),
     );
     if let Some(content) = binary_content {
         rewrite
diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index fd0c6821..ed40feca 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -228,7 +228,8 @@ pub struct RewriteResult {
     /// the node grammar, a failed residual gate). Never confirmed, whichever
     /// lock drives.
     pub refused_vlt_uuids: std::collections::BTreeSet<String>,
-    /// [`vlt::vlt_drives`] over the rewriter's input files.
+    /// [`vlt::vlt_drives`] over the rewriter's input files and the
+    /// caller's `bun_lockb_present`.
     pub vlt_drives: bool,
 }
 
@@ -274,7 +275,7 @@ pub fn rewrite_registry_redirect_with_python_metadata(
     overrides: &[DepOverride],
     python_metadata: &BTreeMap<String, String>,
 ) -> RewriteResult {
-    rewrite_registry_redirect_with_pipenv_version(files, overrides, python_metadata, None)
+    rewrite_registry_redirect_with_pipenv_version(files, overrides, python_metadata, None, false)
 }
 
 /// Whether any pypi override targets an entry of `files["Pipfile.lock"]` —
@@ -325,11 +326,15 @@ fn withhold<'a>(
     }
 }
 
+/// `bun_lockb_present` reports a `bun.lockb` in the project that `files`
+/// leaves out because the caller rewrites its bytes itself; vlt counts it
+/// as a sibling lock.
 pub fn rewrite_registry_redirect_with_pipenv_version(
     files: &BTreeMap<String, String>,
     overrides: &[DepOverride],
     python_metadata: &BTreeMap<String, String>,
     pipenv_major: Option<u32>,
+    bun_lockb_present: bool,
 ) -> RewriteResult {
     let mut result = RewriteResult::default();
     // pdm runs FIRST, but only when `pdm.lock` is the project's PyPI install
@@ -351,8 +356,8 @@ pub fn rewrite_registry_redirect_with_pipenv_version(
     rewrite_yarn_classic(files, overrides, &mut result);
     rewrite_yarn_berry(files, overrides, &mut result);
     rewrite_bun_lock(files, overrides, &mut result);
-    vlt::rewrite_vlt_lock(files, overrides, &mut result);
-    result.vlt_drives = vlt::vlt_drives(files);
+    vlt::rewrite_vlt_lock(files, overrides, bun_lockb_present, &mut result);
+    result.vlt_drives = vlt::vlt_drives(files, bun_lockb_present);
     requirements::rewrite(files, overrides, &mut result);
     rewrite_hatch(files, overrides, &mut result);
     rewrite_uv_lock(files, overrides, python_metadata, &mut result);
diff --git a/crates/socket-patch-core/src/patch/redirect/replay.rs b/crates/socket-patch-core/src/patch/redirect/replay.rs
index f47e81f6..cc642562 100644
--- a/crates/socket-patch-core/src/patch/redirect/replay.rs
+++ b/crates/socket-patch-core/src/patch/redirect/replay.rs
@@ -468,6 +468,7 @@ pub async fn revert_remaining_redirect_edits(
         let mut staged_bytes: StagedBytes = BTreeMap::new();
         let mut group_drops: BTreeSet<usize> = BTreeSet::new();
         let mut group_warnings: Vec<(String, String)> = Vec::new();
+        let mut vanished_vlt: Vec<usize> = Vec::new();
         let files: BTreeSet<String> = indices
             .iter()
             .map(|&i| state.edits[i].path.clone())
@@ -547,11 +548,15 @@ pub async fn revert_remaining_redirect_edits(
                         }
                     };
                     match super::vlt::revert_vlt_slots(&content, edit) {
-                        Ok(Some(restored)) => {
+                        Ok(super::vlt::SlotRevert::Restored(restored)) => {
                             staged.insert(edit.path.clone(), Some(restored));
                             group_drops.insert(idx);
                         }
-                        Ok(None) => {
+                        Ok(super::vlt::SlotRevert::Unchanged) => {
+                            group_drops.insert(idx);
+                        }
+                        Ok(super::vlt::SlotRevert::Vanished) => {
+                            vanished_vlt.push(idx);
                             group_drops.insert(idx);
                         }
                         Err(reason) => {
@@ -1086,6 +1091,20 @@ pub async fn revert_remaining_redirect_edits(
             }
         }
 
+        for &idx in &vanished_vlt {
+            let edit = &state.edits[idx];
+            let checked = match staged_read(&staged, project_root, &edit.path).await {
+                Ok(Some(content)) => super::vlt::check_vanished(&content, edit),
+                Ok(None) => Err(format!("{} no longer exists", edit.path)),
+                Err(error) => Err(error),
+            };
+            if let Err(reason) = checked {
+                refuse(reason, &mut outcome);
+                refused_groups.insert(group);
+                continue 'group;
+            }
+        }
+
         // Commit the group: flush staged files (unless dry-run) through the
         // shared guarded atomic writer, then mark its edits for dropping. A
         // flush error refuses the group late — some files may already have
@@ -2188,6 +2207,72 @@ mod tests {
         assert!(state.records.contains_key("pkg:npm/minimist@1.2.8"));
     }
 
+    #[tokio::test]
+    async fn vlt_replay_keeps_a_relaid_flag_and_trailing_slots() {
+        let dir = TempDir::new().unwrap();
+        let relaid = VLT_HOSTED_ENTRY.replacen("[2,", "[0,", 1).replacen(
+            "\"]",
+            "\",null,null,null,null,{  \"m\": \"bin.js\"}]",
+            1,
+        );
+        write(dir.path(), "vlt-lock.json", &vlt_lock(&relaid)).await;
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert!(out.fully_reverted(), "{out:?}");
+        assert_eq!(
+            read(dir.path(), "vlt-lock.json").await,
+            vlt_lock(
+                "\"~npm~minimist@1.2.8~peer.1\": [0,\"minimist\",\"sha512-r\",null,null,null,null,null,{  \"m\": \"bin.js\"}]"
+            )
+        );
+        assert!(state.edits.is_empty() && state.records.is_empty());
+    }
+
+    #[tokio::test]
+    async fn a_relocked_away_vlt_variant_reverts_whatever_the_ledger_order() {
+        let plain_registry = VLT_REGISTRY_ENTRY.replace("~peer.1", "");
+        let plain_hosted = VLT_HOSTED_ENTRY.replace("~peer.1", "");
+        let plain_edit = FileEdit {
+            key: Some("minimist@1.2.8".into()),
+            ..edit(
+                "vlt-lock.json",
+                super::super::vlt::KIND,
+                "rewritten",
+                Some(&plain_registry),
+                Some(&plain_hosted),
+            )
+        };
+        for edits in [
+            vec![plain_edit.clone(), vlt_edit()],
+            vec![vlt_edit(), plain_edit.clone()],
+        ] {
+            let dir = TempDir::new().unwrap();
+            write(dir.path(), "vlt-lock.json", &vlt_lock(&plain_hosted)).await;
+            let mut state = state_with(edits, &["pkg:npm/minimist@1.2.8"]);
+            let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+            assert!(out.fully_reverted(), "{out:?}");
+            assert_eq!(
+                read(dir.path(), "vlt-lock.json").await,
+                vlt_lock(&plain_registry)
+            );
+            assert!(state.edits.is_empty() && state.records.is_empty());
+        }
+
+        let dir = TempDir::new().unwrap();
+        write(dir.path(), "vlt-lock.json", &vlt_lock(&plain_hosted)).await;
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert_eq!(out.refusals.len(), 1, "{out:?}");
+        assert!(
+            out.refusals[0].reason.contains("still pins its hosted URL"),
+            "{out:?}"
+        );
+        assert_eq!(
+            read(dir.path(), "vlt-lock.json").await,
+            vlt_lock(&plain_hosted)
+        );
+    }
+
     #[tokio::test]
     async fn a_vlt_edit_whose_lock_is_gone_refuses() {
         let dir = TempDir::new().unwrap();
diff --git a/crates/socket-patch-core/src/patch/redirect/takeover.rs b/crates/socket-patch-core/src/patch/redirect/takeover.rs
index 54163894..20ea162d 100644
--- a/crates/socket-patch-core/src/patch/redirect/takeover.rs
+++ b/crates/socket-patch-core/src/patch/redirect/takeover.rs
@@ -921,6 +921,7 @@ pub async fn revert_npm_redirect_purl(
     let mut out = RedirectRevert::default();
     let mut staged: Staged = Staged::new();
     let mut staged_bytes: StagedBytes = StagedBytes::new();
+    let mut vanished_vlt: Vec<usize> = Vec::new();
     // Newest-first: the hosted flow appends edits, so reverse index order
     // unwinds re-redirect chains correctly (each step's `original` is the
     // previous step's `new`).
@@ -975,9 +976,13 @@ pub async fn revert_npm_redirect_purl(
                 ));
             };
             if edit.kind == super::vlt::KIND {
-                if let Some(restored) = super::vlt::revert_vlt_slots(&content, edit)? {
-                    staged.insert(edit.path.clone(), Some(restored));
-                    out.reverted_files.push(edit.path.clone());
+                match super::vlt::revert_vlt_slots(&content, edit)? {
+                    super::vlt::SlotRevert::Restored(restored) => {
+                        staged.insert(edit.path.clone(), Some(restored));
+                        out.reverted_files.push(edit.path.clone());
+                    }
+                    super::vlt::SlotRevert::Unchanged => {}
+                    super::vlt::SlotRevert::Vanished => vanished_vlt.push(i),
                 }
                 continue;
             }
@@ -1044,6 +1049,18 @@ pub async fn revert_npm_redirect_purl(
         }
     }
 
+    for &i in &vanished_vlt {
+        let edit = &state.edits[i];
+        let Some(content) = staged_read(&staged, project_root, &edit.path).await? else {
+            return Err(format!(
+                "{} no longer exists; cannot revert the recorded hosted \
+                 redirect for {lock_key}",
+                edit.path
+            ));
+        };
+        super::vlt::check_vanished(&content, edit)?;
+    }
+
     // LAST ONE OUT: the `.npmrc` `allow-remote=all` auto-config exists only
     // for package-lock / shrinkwrap hosted entries (npm >= 12 refuses them
     // without it). When this purl's revert leaves no such entry in the
@@ -2596,6 +2613,62 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn npm_vlt_takeover_keeps_a_relaid_flag_and_trailing_slots() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let relaid = format!(
+            "\"~npm~left-pad@1.3.0\": [2,\"left-pad\",\"sha512-p\",\"{NPM_URL}\",null,null,null,null,{{  \"lp\": \"bin.js\"}}]"
+        );
+        tokio::fs::write(root.join("vlt-lock.json"), vlt_lock(&[relaid]))
+            .await
+            .unwrap();
+        let mut state = RedirectState::new();
+        state.records.insert(NPM_PURL.into(), record());
+        state.edits = vec![vlt_node_edit("left-pad@1.3.0", "~npm~left-pad@1.3.0")];
+        revert_redirect_purl(root, &mut state, NPM_PURL, false)
+            .await
+            .expect("revert succeeds");
+        assert_eq!(
+            tokio::fs::read_to_string(root.join("vlt-lock.json"))
+                .await
+                .unwrap(),
+            vlt_lock(&["\"~npm~left-pad@1.3.0\": [2,\"left-pad\",\"sha512-r\",null,null,null,null,null,{  \"lp\": \"bin.js\"}]".to_string()])
+        );
+        assert!(state.edits.is_empty() && state.records.is_empty());
+    }
+
+    #[tokio::test]
+    async fn npm_vlt_takeover_reverts_a_relocked_away_variant_whatever_the_ledger_order() {
+        let hosted = format!("\"sha512-p\",\"{NPM_URL}\"");
+        let plain = vlt_node_edit("left-pad@1.3.0", "~npm~left-pad@1.3.0");
+        let peer = vlt_node_edit("left-pad@1.3.0~peer.2", "~npm~left-pad@1.3.0~peer.2");
+        for edits in [
+            vec![plain.clone(), peer.clone()],
+            vec![peer.clone(), plain.clone()],
+        ] {
+            let tmp = tempfile::tempdir().unwrap();
+            let root = tmp.path();
+            let wired = vlt_lock(&[vlt_entry("~npm~left-pad@1.3.0", &hosted)]);
+            tokio::fs::write(root.join("vlt-lock.json"), &wired)
+                .await
+                .unwrap();
+            let mut state = RedirectState::new();
+            state.records.insert(NPM_PURL.into(), record());
+            state.edits = edits;
+            revert_redirect_purl(root, &mut state, NPM_PURL, false)
+                .await
+                .expect("revert succeeds");
+            assert_eq!(
+                tokio::fs::read_to_string(root.join("vlt-lock.json"))
+                    .await
+                    .unwrap(),
+                vlt_lock(&[vlt_entry("~npm~left-pad@1.3.0", "\"sha512-r\"")])
+            );
+            assert!(state.edits.is_empty() && state.records.is_empty());
+        }
+    }
+
     #[tokio::test]
     async fn npm_unclassified_edit_naming_the_purl_refuses_the_claim_untouched() {
         for dry_run in [true, false] {
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index 36f3b921..310f1f6f 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -17,9 +17,9 @@ use crate::constants::npm_family::{
     BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, VLT_CONFIG, VLT_HIDDEN_LOCK_REL, VLT_LOCK,
 };
 use crate::vendor::vlt_lock_text::{
-    entry_text, is_default_registry, nodes_block, parse_node_entry_text, parse_node_line,
-    parse_vendored_path, render_entry_line, render_tuple_with_slots, sniff_lock, split_dep_id,
-    split_lines, DepIdKind, LockSniff, NodeEntry, ParsedLock, SectionSpan,
+    entry_text, is_default_registry, is_registry_url_segment, nodes_block, parse_node_entry_text,
+    parse_node_line, parse_vendored_path, render_entry_line, render_tuple_with_slots, sniff_lock,
+    split_dep_id, split_lines, DepIdKind, LockSniff, NodeEntry, ParsedLock, SectionSpan,
 };
 
 /// The ledger kind of a hosted vlt node splice.
@@ -36,14 +36,26 @@ const SIBLING_LOCKS: [&str; 6] = [
     BUN_LOCKB,
 ];
 
+/// The other npm-family locks present. `bun_lockb_present` reports a
+/// `bun.lockb` on disk, which a caller holding its bytes keeps out of
+/// `files`.
+fn sibling_locks(files: &BTreeMap<String, String>, bun_lockb_present: bool) -> Vec<&'static str> {
+    SIBLING_LOCKS
+        .iter()
+        .copied()
+        .filter(|lock| files.contains_key(*lock) || (*lock == BUN_LOCKB && bun_lockb_present))
+        .collect()
+}
+
 /// Does vlt drive hosted confirmation and the artifact preflight?
 /// `vlt-lock.json` must be present, and either vlt's install state (the
 /// `node_modules/.vlt-lock.json` sentinel) is too, or no other npm-family
-/// lock is. Otherwise both locks are rewritten and neither decides alone.
-pub fn vlt_drives(files: &BTreeMap<String, String>) -> bool {
+/// lock is (`bun_lockb_present`: see [`sibling_locks`]). Otherwise both
+/// locks are rewritten and neither decides alone.
+pub fn vlt_drives(files: &BTreeMap<String, String>, bun_lockb_present: bool) -> bool {
     files.contains_key(VLT_LOCK)
         && (files.contains_key(VLT_HIDDEN_LOCK_REL)
-            || !SIBLING_LOCKS.iter().any(|lock| files.contains_key(*lock)))
+            || sibling_locks(files, bun_lockb_present).is_empty())
 }
 
 fn lock_unsupported(detail: &str) -> RewriteWarning {
@@ -122,8 +134,7 @@ fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>)
         nodes.keys().any(|id| {
             split_dep_id(id).is_some_and(|dep_id| {
                 dep_id.kind == DepIdKind::Registry
-                    && dep_id.first != "npm"
-                    && is_default_registry(&dep_id.first, options)
+                    && (dep_id.first.is_empty() || is_registry_url_segment(&dep_id.first, options))
             })
         })
     });
@@ -149,7 +160,11 @@ fn is_scalar_registry_ignored(lock: &HostedLock) -> bool {
     scalar && (lock.parsed.version != Some(1) || !registries_npm)
 }
 
-fn lock_level_warnings(lock: &HostedLock, files: &BTreeMap<String, String>) -> Vec<RewriteWarning> {
+fn lock_level_warnings(
+    lock: &HostedLock,
+    files: &BTreeMap<String, String>,
+    bun_lockb_present: bool,
+) -> Vec<RewriteWarning> {
     let mut warnings = Vec::new();
     if lock.parsed.version.is_none() {
         warnings.push(RewriteWarning {
@@ -176,12 +191,8 @@ fn lock_level_warnings(lock: &HostedLock, files: &BTreeMap<String, String>) -> V
                 .into(),
         });
     }
-    if !vlt_drives(files) {
-        let others: Vec<&str> = SIBLING_LOCKS
-            .iter()
-            .copied()
-            .filter(|lock| files.contains_key(*lock))
-            .collect();
+    if !vlt_drives(files, bun_lockb_present) {
+        let others = sibling_locks(files, bun_lockb_present);
         warnings.push(RewriteWarning {
             code: "redirect_vlt_sibling_lockfiles".into(),
             detail: format!(
@@ -409,6 +420,7 @@ fn rewrite_dep(
 pub(super) fn rewrite_vlt_lock(
     files: &BTreeMap<String, String>,
     overrides: &[DepOverride],
+    bun_lockb_present: bool,
     result: &mut RewriteResult,
 ) {
     let npm: Vec<&DepOverride> = overrides.iter().filter(|o| o.ecosystem == "npm").collect();
@@ -433,7 +445,9 @@ pub(super) fn rewrite_vlt_lock(
             return;
         }
     };
-    result.warnings.extend(lock_level_warnings(&lock, files));
+    result
+        .warnings
+        .extend(lock_level_warnings(&lock, files, bun_lockb_present));
 
     let mut lines: Vec<String> = split_lines(text).into_iter().map(str::to_string).collect();
     let mut changed = false;
@@ -465,13 +479,21 @@ fn drift(id: &str, why: &str) -> String {
     )
 }
 
-/// Undo one [`KIND`] edit by slots. The line keyed by the recorded DepID
-/// gets `original`'s slots [2] and [3] back while its current flags,
-/// trailing slots, indent, comma and `\r` stay, so a lock vlt re-laid since
-/// the rewrite still reverts. `Ok(None)` when there is nothing to revert:
-/// the line already holds `original`'s slots, or the DepID and the hosted
-/// URL are both gone (a re-lock). Anything else is drift.
-pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<String>, String> {
+/// What [`revert_vlt_slots`] found on the line keyed by an edit's DepID.
+#[derive(Debug, PartialEq)]
+pub(crate) enum SlotRevert {
+    /// The lock text with `original`'s slots back on that line.
+    Restored(String),
+    /// The line already holds `original`'s slots.
+    Unchanged,
+    /// No line has the DepID. Every instance of a `name@version` shares one
+    /// hosted URL, so [`check_vanished`] runs only after the transaction's
+    /// other edits are staged.
+    Vanished,
+}
+
+/// The recorded DepID and entries of a [`KIND`] edit.
+fn recorded(edit: &FileEdit) -> Result<(NodeEntry<'_>, NodeEntry<'_>), String> {
     fn fragment(v: &Option<Value>) -> Option<&str> {
         v.as_ref().and_then(Value::as_str)
     }
@@ -487,6 +509,16 @@ pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<Str
     if original.key != new.key {
         return Err(format!("{KIND} edit records two different DepIDs"));
     }
+    Ok((original, new))
+}
+
+/// Undo one [`KIND`] edit by slots. The line keyed by the recorded DepID
+/// gets `original`'s slots [2] and [3] back while its current flags,
+/// trailing slots, indent, comma and `\r` stay, so a lock vlt re-laid since
+/// the rewrite still reverts. A line that already holds `original`'s slots
+/// is [`SlotRevert::Unchanged`]; anything else on that line is drift.
+pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<SlotRevert, String> {
+    let (original, new) = recorded(edit)?;
     let id = original.key;
     let lines = split_lines(text);
     let Some(span) = nodes_block(&lines) else {
@@ -497,22 +529,8 @@ pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<Str
         .entry_lines()
         .filter(|&i| lines[i].starts_with(prefix.as_str()))
         .collect();
-    let url = slot_value(&new, 3);
     match keyed.as_slice() {
-        [] => {
-            let url_left = url
-                .as_ref()
-                .and_then(Value::as_str)
-                .is_some_and(|url| lines.iter().any(|line| line.contains(url)));
-            if url_left {
-                Err(drift(
-                    id,
-                    &format!("no longer has {id}, but still pins its hosted URL"),
-                ))
-            } else {
-                Ok(None)
-            }
-        }
+        [] => Ok(SlotRevert::Vanished),
         [idx] => {
             let Some(line) = parse_node_line(lines[*idx]) else {
                 return Err(drift(
@@ -521,7 +539,7 @@ pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<Str
                 ));
             };
             if same_slots(&line.entry, &original) {
-                return Ok(None);
+                return Ok(SlotRevert::Unchanged);
             }
             if !same_slots(&line.entry, &new) {
                 return Err(drift(
@@ -536,12 +554,31 @@ pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<Option<Str
             );
             let mut out: Vec<String> = lines.iter().map(|l| (*l).to_string()).collect();
             out[*idx] = render_entry_line(&entry_text(id, &tuple), line.comma, line.cr);
-            Ok(Some(out.join("\n")))
+            Ok(SlotRevert::Restored(out.join("\n")))
         }
         _ => Err(drift(id, &format!("has {id} more than once"))),
     }
 }
 
+/// A [`SlotRevert::Vanished`] edit is already reverted (a re-lock dropped
+/// its pin) unless its hosted URL is still on some line of `text`, the lock
+/// with every other edit of the same revert already staged.
+pub(crate) fn check_vanished(text: &str, edit: &FileEdit) -> Result<(), String> {
+    let (_, new) = recorded(edit)?;
+    let url_left = slot_value(&new, 3)
+        .as_ref()
+        .and_then(Value::as_str)
+        .is_some_and(|url| text.contains(url));
+    if url_left {
+        Err(drift(
+            new.key,
+            &format!("no longer has {}, but still pins its hosted URL", new.key),
+        ))
+    } else {
+        Ok(())
+    }
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
@@ -588,7 +625,7 @@ mod tests {
 
     fn rewrite(lock: &str, deps: &[DepOverride]) -> RewriteResult {
         let mut result = RewriteResult::default();
-        rewrite_vlt_lock(&files(&[(VLT_LOCK, lock)]), deps, &mut result);
+        rewrite_vlt_lock(&files(&[(VLT_LOCK, lock)]), deps, false, &mut result);
         result
     }
 
@@ -621,24 +658,74 @@ mod tests {
     fn vlt_drives_needs_the_lock_and_the_sentinel_or_no_sibling() {
         let sentinel = (VLT_HIDDEN_LOCK_REL, "");
         let lock = (VLT_LOCK, "{}");
-        assert!(!vlt_drives(&files(&[])));
-        assert!(!vlt_drives(&files(&[sentinel, (VLT_CONFIG, "{}")])));
-        assert!(vlt_drives(&files(&[lock])));
-        assert!(vlt_drives(&files(&[lock, (VLT_CONFIG, "{}")])));
+        assert!(!vlt_drives(&files(&[]), false));
+        assert!(!vlt_drives(&files(&[sentinel, (VLT_CONFIG, "{}")]), false));
+        assert!(vlt_drives(&files(&[lock]), false));
+        assert!(vlt_drives(&files(&[lock, (VLT_CONFIG, "{}")]), false));
         for sibling in SIBLING_LOCKS {
             let other = (sibling, "x");
-            assert!(!vlt_drives(&files(&[lock, other])), "{sibling}");
-            assert!(vlt_drives(&files(&[lock, other, sentinel])), "{sibling}");
+            assert!(!vlt_drives(&files(&[lock, other]), false), "{sibling}");
+            assert!(
+                vlt_drives(&files(&[lock, other, sentinel]), false),
+                "{sibling}"
+            );
         }
-        assert!(!vlt_drives(&files(&[
-            lock,
-            ("package-lock.json", "x"),
-            ("bun.lockb", "x")
-        ])));
-        assert!(vlt_drives(&files(&[
-            lock,
-            ("packages/a/package-lock.json", "x")
-        ])));
+        assert!(!vlt_drives(
+            &files(&[lock, ("package-lock.json", "x"), ("bun.lockb", "x")]),
+            false
+        ));
+        assert!(vlt_drives(
+            &files(&[lock, ("packages/a/package-lock.json", "x")]),
+            false
+        ));
+    }
+
+    #[test]
+    fn a_bun_lockb_on_disk_is_a_sibling_outside_files() {
+        let lock = (VLT_LOCK, "{}");
+        assert!(!vlt_drives(&files(&[lock]), true));
+        assert!(vlt_drives(&files(&[lock, (VLT_HIDDEN_LOCK_REL, "")]), true));
+        assert!(!vlt_drives(&files(&[]), true));
+
+        let text = lock_with(&[&registry_entry()]);
+        let deps = [dep("left-pad", "1.3.0", Some(SHA))];
+        let mut result = RewriteResult::default();
+        rewrite_vlt_lock(&files(&[(VLT_LOCK, &text)]), &deps, true, &mut result);
+        assert_eq!(codes(&result), ["redirect_vlt_sibling_lockfiles"]);
+        assert!(result.warnings[0].detail.contains("and bun.lockb are both"));
+        assert!(result.confirmed_vlt_uuids.contains("uuid-left-pad"));
+    }
+
+    #[test]
+    fn old_lockfile_ignored_counts_only_empty_and_registry_url_segments() {
+        let r = "https://registry.example.com/";
+        let v0 = |options: &str, id: &str| {
+            format!(
+                "{{\n  \"lockfileVersion\": 0,\n  \"options\": {options},\n  \"nodes\": {{\n    \"{id}\": [0,\"left-pad\",\"{REG_SHA}\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+            )
+        };
+        let old_lockfile = |lock: &str| {
+            codes(&rewrite(lock, &[dep("left-pad", "1.3.0", Some(SHA))]))
+                .contains(&"redirect_vlt_old_lockfile_ignored")
+        };
+        assert!(old_lockfile(&v0("{}", "··left-pad@1.3.0")));
+        let url_segment = format!(
+            "·{}·left-pad@1.3.0",
+            r.replace(':', "%3A").replace('/', "§")
+        );
+        assert!(old_lockfile(&v0(
+            &format!("{{\"registry\": \"{r}\"}}"),
+            &url_segment
+        )));
+        assert!(!old_lockfile(&v0("{}", "·npm·left-pad@1.3.0")));
+        assert!(!old_lockfile(&v0(
+            "{\"default-registry-alias\": \"corp\"}",
+            "·corp·left-pad@1.3.0"
+        )));
+        assert!(!old_lockfile(&v0(
+            &format!("{{\"registry\": \"{r}\", \"registries\": {{\"acme\": \"{r}\"}}}}"),
+            "·acme·left-pad@1.3.0"
+        )));
     }
 
     #[test]
@@ -760,12 +847,16 @@ mod tests {
         let mut other = dep("left-pad", "1.3.0", Some(SHA));
         other.ecosystem = "pypi".into();
         let mut result = RewriteResult::default();
-        rewrite_vlt_lock(&files(&[(VLT_CONFIG, "{}")]), &[other], &mut result);
+        rewrite_vlt_lock(&files(&[(VLT_CONFIG, "{}")]), &[other], false, &mut result);
         assert!(result.warnings.is_empty());
     }
 
     fn revert(lock: &str, edit: &FileEdit) -> Result<Option<String>, String> {
-        revert_vlt_slots(lock, edit)
+        match revert_vlt_slots(lock, edit)? {
+            SlotRevert::Restored(text) => Ok(Some(text)),
+            SlotRevert::Unchanged => Ok(None),
+            SlotRevert::Vanished => check_vanished(lock, edit).map(|()| None),
+        }
     }
 
     #[test]
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
index 187c66f1..684c3454 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -372,16 +372,27 @@ pub(crate) fn is_default_registry(segment: &str, options: Option<&Map<String, Va
     else {
         return false;
     };
-    let registry = with_trailing_slash(registry);
     let aliased = options
         .and_then(|o| o.get("registries"))
         .and_then(|r| r.get(segment))
         .and_then(Value::as_str);
-    if aliased.is_some_and(|url| with_trailing_slash(url) == registry) {
+    if aliased.is_some_and(|url| with_trailing_slash(url) == with_trailing_slash(registry)) {
         return true;
     }
+    is_registry_url_segment(segment, options)
+}
+
+/// Is `segment` an http(s) URL naming `options.registry` (a trailing `/`
+/// aside)?
+pub(crate) fn is_registry_url_segment(segment: &str, options: Option<&Map<String, Value>>) -> bool {
+    let Some(registry) = options
+        .and_then(|o| o.get("registry"))
+        .and_then(Value::as_str)
+    else {
+        return false;
+    };
     reqwest::Url::parse(segment).is_ok_and(|url| matches!(url.scheme(), "http" | "https"))
-        && with_trailing_slash(segment) == registry
+        && with_trailing_slash(segment) == with_trailing_slash(registry)
 }
 
 // ── lock-level sniff ─────────────────────────────────────────────────────
diff --git a/crates/socket-patch-core/src/vex/discover/pypi_other.rs b/crates/socket-patch-core/src/vex/discover/pypi_other.rs
index ce0bb6dc..989fd17d 100644
--- a/crates/socket-patch-core/src/vex/discover/pypi_other.rs
+++ b/crates/socket-patch-core/src/vex/discover/pypi_other.rs
@@ -676,6 +676,7 @@ mod tests {
                 &[dep],
                 &BTreeMap::new(),
                 major,
+                false,
             );
             let lock = result.files.get("Pipfile.lock").expect("lock rewritten");
             assert!(lock.contains(&format!("\"{key}\": ")), "{lock}");
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-confirmation.json
new file mode 100644
index 00000000..e4bdb58e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-confirmation.json
@@ -0,0 +1,5 @@
+{
+  "confirmed": [],
+  "refused": [],
+  "vltDrives": false
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-edits.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-edits.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-warnings.json
new file mode 100644
index 00000000..a73a1b0e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_no_lockfile"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/input/node_modules/.vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/input/node_modules/.vlt-lock.json
new file mode 100644
index 00000000..e69de29b
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/hidden-lock-sentinel-only/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-edits.json
new file mode 100644
index 00000000..03fafbb8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·acme·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·acme·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-warnings.json
new file mode 100644
index 00000000..13e48044
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected-warnings.json
@@ -0,0 +1,3 @@
+[
+  "redirect_vlt_scalar_registry_ignored"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected/vlt-lock.json
new file mode 100644
index 00000000..ca5bec4e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "http://127.0.0.1:4873/",
+    "registries": {
+      "acme": "http://127.0.0.1:4873/"
+    }
+  },
+  "nodes": {
+    "·acme·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·acme·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/input/vlt-lock.json
new file mode 100644
index 00000000..713952a4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "registry": "http://127.0.0.1:4873/",
+    "registries": {
+      "acme": "http://127.0.0.1:4873/"
+    }
+  },
+  "nodes": {
+    "·acme·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·acme·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-alias-url-equals-registry/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-confirmation.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-confirmation.json
new file mode 100644
index 00000000..7cfc5070
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-confirmation.json
@@ -0,0 +1,7 @@
+{
+  "confirmed": [
+    "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa"
+  ],
+  "refused": [],
+  "vltDrives": true
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-edits.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-edits.json
new file mode 100644
index 00000000..781a3d18
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-edits.json
@@ -0,0 +1,10 @@
+[
+  {
+    "path": "vlt-lock.json",
+    "kind": "redirect_vlt_lock_node",
+    "action": "rewritten",
+    "key": "left-pad@1.3.0",
+    "original": "\"·corp·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==\"]",
+    "new": "\"·corp·left-pad@1.3.0\": [0,\"left-pad\",\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\",\"https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz\"]"
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-warnings.json
new file mode 100644
index 00000000..fe51488c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected-warnings.json
@@ -0,0 +1 @@
+[]
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected/vlt-lock.json
new file mode 100644
index 00000000..6215661d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/expected/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "default-registry-alias": "corp",
+    "registries": {
+      "corp": "https://corp.example.com/"
+    }
+  },
+  "nodes": {
+    "·corp·left-pad@1.3.0": [0,"left-pad","sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==","https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·corp·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/input/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/input/vlt-lock.json
new file mode 100644
index 00000000..69225cce
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/input/vlt-lock.json
@@ -0,0 +1,15 @@
+{
+  "lockfileVersion": 0,
+  "options": {
+    "default-registry-alias": "corp",
+    "registries": {
+      "corp": "https://corp.example.com/"
+    }
+  },
+  "nodes": {
+    "·corp·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="]
+  },
+  "edges": {
+    "file·. left-pad": "prod 1.3.0 ·corp·left-pad@1.3.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/overrides.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/overrides.json
new file mode 100644
index 00000000..10e9e18a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/lock-v0-default-registry-alias/overrides.json
@@ -0,0 +1,13 @@
+[
+  {
+    "ecosystem": "npm",
+    "name": "left-pad",
+    "version": "1.3.0",
+    "token": "11111111-1111-1111-1111-111111111111",
+    "patchUuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+    "artifactUrl": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+    "integrity": {
+      "sha512": "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=="
+    }
+  }
+]
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 06f89a6c..144e514d 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -1237,6 +1237,14 @@
     "elsewhere": [],
     "live_claims": []
   },
+  "redirect/npm/vlt/hidden-lock-sentinel-only/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
   "redirect/npm/vlt/invalid-json/input": {
     "refs": [],
     "diagnostics": [],
@@ -1309,6 +1317,38 @@
     "elsewhere": [],
     "live_claims": []
   },
+  "redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-alias-url-equals-registry/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-default-registry-alias/expected": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/lock-v0-default-registry-alias/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [],
+    "live_claims": []
+  },
   "redirect/npm/vlt/lock-v0-empty-segment/expected": {
     "refs": [],
     "diagnostics": [],
diff --git a/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs b/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
index 20e15156..8c45b54c 100644
--- a/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
+++ b/crates/socket-patch-core/tests/redirect_golden_reverse_replay.rs
@@ -4,10 +4,11 @@
 //! what the depscan server writes into its PR ledgers, so this is also the
 //! proof that socket-patch reverts a server-written vlt redirect.
 //!
-//! Each case runs three ways: as written, after vlt's LF re-save of a CRLF
-//! lock, and after a re-save that appended a sibling node (which moves the
-//! trailing comma). Both the whole-ledger replay and the per-purl revert are
-//! exercised.
+//! Each case runs up to four ways: as written, after vlt's LF re-save of a
+//! CRLF lock, after a re-save that appended a sibling node (which moves the
+//! trailing comma), and after a re-lock that dropped the last node while
+//! earlier instances of the same package may still carry its hosted URL.
+//! Both the whole-ledger replay and the per-purl revert are exercised.
 
 use std::collections::BTreeMap;
 use std::fs;
@@ -104,13 +105,7 @@ fn ledger(case: &Case) -> RedirectState {
 /// nodes section, so the formerly last entry gains a comma.
 fn with_appended_node(text: &str) -> String {
     let mut lines: Vec<String> = text.split('\n').map(str::to_string).collect();
-    let open = lines
-        .iter()
-        .position(|l| l.trim_end_matches('\r') == "  \"nodes\": {")
-        .expect("nodes section");
-    let close = (open + 1..lines.len())
-        .find(|&i| matches!(lines[i].trim_end_matches('\r'), "  }" | "  },"))
-        .expect("nodes section end");
+    let (_, close) = nodes_section(&lines);
     let last = close - 1;
     let cr = if lines[last].ends_with('\r') {
         "\r"
@@ -127,6 +122,37 @@ fn with_appended_node(text: &str) -> String {
     lines.join("\n")
 }
 
+/// The nodes section's line range: the opening line and the closing one.
+fn nodes_section(lines: &[String]) -> (usize, usize) {
+    let open = lines
+        .iter()
+        .position(|l| l.trim_end_matches('\r') == "  \"nodes\": {")
+        .expect("nodes section");
+    let close = (open + 1..lines.len())
+        .find(|&i| matches!(lines[i].trim_end_matches('\r'), "  }" | "  },"))
+        .expect("nodes section end");
+    (open, close)
+}
+
+/// The lock after vlt re-locked its last node away (the new last entry
+/// loses its comma), or `None` when fewer than two nodes remain.
+fn without_last_node(text: &str) -> Option<String> {
+    let mut lines: Vec<String> = text.split('\n').map(str::to_string).collect();
+    let (open, close) = nodes_section(&lines);
+    if close - open < 3 {
+        return None;
+    }
+    lines.remove(close - 1);
+    let last = &mut lines[close - 2];
+    let cr = last.ends_with('\r');
+    let body = last
+        .trim_end_matches('\r')
+        .trim_end_matches(',')
+        .to_string();
+    *last = if cr { format!("{body}\r") } else { body };
+    Some(lines.join("\n"))
+}
+
 fn variants(case: &Case) -> Vec<(&'static str, String, String)> {
     let mut out = vec![("as-written", case.expected.clone(), case.input.clone())];
     if case.expected.contains('\r') {
@@ -141,6 +167,12 @@ fn variants(case: &Case) -> Vec<(&'static str, String, String)> {
         with_appended_node(&case.expected),
         with_appended_node(&case.input),
     ));
+    if let (Some(on_disk), Some(want)) = (
+        without_last_node(&case.expected),
+        without_last_node(&case.input),
+    ) {
+        out.push(("last-node-relocked-away", on_disk, want));
+    }
     out
 }
 
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index a1ce21be..151ae319 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -1,7 +1,8 @@
 //! Real vlt locks (`tests/fixtures/vlt-locks/<version>/`, captured from every
 //! era) through the hosted rewriter: only the target nodes' slots [2] and [3]
 //! change, and the output stays in vlt's own canonical serialization, so
-//! vlt's next save leaves it byte-identical.
+//! vlt's next save leaves it byte-identical. A CRLF checkout of each capture
+//! gets the same edits, with every line keeping its `\r`.
 
 use std::collections::BTreeMap;
 use std::fs;
@@ -340,5 +341,23 @@ fn hosted_rewrite_changes_exactly_the_target_slots() {
         let again = rewrite_registry_redirect(&result.files, &overrides);
         assert!(again.files.is_empty(), "{version}: a rerun is a no-op");
         assert!(again.edits.is_empty(), "{version}");
+
+        let crlf: BTreeMap<String, String> = files
+            .iter()
+            .map(|(name, text)| (name.clone(), text.replace('\n', "\r\n")))
+            .collect();
+        let crlf_result = rewrite_registry_redirect(&crlf, &overrides);
+        let crlf_codes: Vec<&str> = crlf_result
+            .warnings
+            .iter()
+            .map(|w| w.code.as_str())
+            .collect();
+        assert_eq!(&crlf_codes, warnings, "{version}: CRLF");
+        assert_eq!(
+            crlf_result.files["vlt-lock.json"],
+            output.replace('\n', "\r\n"),
+            "{version}: CRLF"
+        );
+        assert_eq!(crlf_result.edits, result.edits, "{version}: CRLF");
     }
 }

From 10420baae06b7b7683390531928bde3da30b7027 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 23:16:45 -0400
Subject: [PATCH 13/46] Redirect vlt projects in hosted mode

`scan --mode hosted` and `get --mode hosted` now repoint vlt-lock.json
at Socket's hosted patches: every default-registry node of a patched
package keeps its DepID and gets the patched sha512 and hosted URL,
and vlt drives confirmation when its install state is present or no
other npm-family lock is.

Before anything is written, each artifact is fetched the way vlt
fetches it. A response vlt would reject (re-gzipped, wrong sha512,
HTTP error, unreachable) withholds the package instead of pinning a
lock `vlt ci` cannot install.

vlt never refreshes an installed copy, so after the rewrite socket-patch
removes stale store entries and the hidden lock, and rollback and remove
do the same once the registry pins are back. --no-vlt-install-cleanup
(SOCKET_NO_VLT_INSTALL_CLEANUP) keeps them; the
redirect_vlt_reinstall_required advisory says what to run. A same-run
--vex no longer attests a vlt package whose installed copy is stale or
unchecked, whose lock an older vlt may ignore, or which also resolves
from another registry.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   21 +
 crates/socket-patch-cli/CLI_CONTRACT.md       |    9 +
 crates/socket-patch-cli/src/args.rs           |   18 +
 .../socket-patch-cli/src/commands/rollback.rs |   25 +
 .../src/commands/scan/hosted.rs               |  355 +++++-
 .../src/commands/scan/hosted/vlt.rs           |  483 ++++++++
 .../socket-patch-cli/src/commands/scan/mod.rs |   62 +-
 .../socket-patch-cli/tests/cli_global_args.rs |   13 +-
 .../socket-patch-cli/tests/cli_parse_get.rs   |   12 +
 .../tests/cli_parse_repair.rs                 |   12 +
 .../socket-patch-cli/tests/cli_parse_scan.rs  |   27 +
 .../tests/cli_parse_vendor.rs                 |   14 +
 .../socket-patch-cli/tests/cli_parse_vex.rs   |   19 +
 .../tests/covgap_commands_rollback.rs         |  112 +-
 .../tests/covgap_commands_scan_hosted.rs      |  129 ++
 .../tests/hosted_symlinked_files.rs           |   81 +-
 .../tests/in_process_get_hosted_ecosystems.rs |   62 +
 .../tests/in_process_redirect.rs              |    4 +
 .../tests/in_process_redirect/vlt.rs          | 1057 +++++++++++++++++
 .../tests/in_process_rollback_hosted.rs       |    4 +
 .../tests/in_process_rollback_hosted/vlt.rs   |  191 +++
 .../tests/remove_rollback_api_overrides.rs    |    1 +
 .../tests/vlt_hosted_common/mod.rs            |  509 ++++++++
 crates/socket-patch-core/src/api/client.rs    |    8 +-
 .../src/patch/redirect/mod.rs                 |   34 +-
 .../src/patch/redirect/vlt.rs                 |   66 +-
 .../src/patch/redirect/vlt_heal.rs            |  903 ++++++++++++++
 .../src/patch/redirect/vlt_preflight.rs       |  503 ++++++++
 28 files changed, 4666 insertions(+), 68 deletions(-)
 create mode 100644 crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
 create mode 100644 crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
 create mode 100644 crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2ebc467e..006973ea 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -287,6 +287,27 @@ into the new version's section — see docs/releasing.md.
   slot, CRLF re-saved as LF). A node vlt has since re-locked away is
   already reverted; any other change refuses with the `vlt-lock.json`
   remedy. Peer and modifier variants are claimed per `name@version`.
+- **`scan --mode hosted` and `get --mode hosted` redirect vlt projects.**
+  `vlt-lock.json` default-registry nodes of a patched `name@version` (every
+  peer and modifier variant, in every DepID era and CRLF lock) keep their
+  DepID and get the patched sha512 and hosted URL; `vlt.json` is read only.
+  vlt drives confirmation when its install state is present or no other
+  npm-family lock is; otherwise both locks are rewritten
+  (`redirect_vlt_sibling_lockfiles`). Before anything is written, each
+  artifact is fetched as vlt fetches it: a response vlt would reject
+  (re-gzipped, wrong sha512, HTTP error, unreachable) withholds the dep
+  (`redirect_vlt_artifact_unverifiable`) instead of pinning a lock `vlt ci`
+  cannot install. After the write, stale installed copies of the
+  Socket-owned nodes (`node_modules/.vlt-lock.json` and their
+  `node_modules/.vlt/<DepID>` entries) are removed so the next `vlt install`
+  extracts the patched packages; `rollback` and `remove` do the same for
+  the registry bytes. New `--no-vlt-install-cleanup` /
+  `SOCKET_NO_VLT_INSTALL_CLEANUP` keeps them, and the
+  `redirect_vlt_reinstall_required` advisory says what to run. A same-run
+  `--vex` does not attest a vlt package whose installed copy is stale or
+  unchecked, whose lock a vlt release may ignore, or which also resolves
+  from a non-default registry. vlt ledgers require the socket-patch
+  release that adds vlt support.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 6168dd2c..706583ed 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -58,6 +58,7 @@ In v3.0 every subcommand accepts the same set of "global" flags via a single sha
 | `--no-telemetry` | — | `SOCKET_TELEMETRY_DISABLED` | `false` | bool | Disable anonymous usage telemetry |
 | `--no-trust-lockfile-config` | — | `SOCKET_NO_TRUST_LOCKFILE_CONFIG` | `false` | bool | Opt out of hosted mode's automatic `trustLockfile: true` write to `pnpm-workspace.yaml` (see the pnpm trust-config note under the scan arguments) |
 | `--no-npm-allow-remote-config` | — | `SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG` | `false` | bool | Opt out of hosted mode's automatic `allow-remote=all` write to the project `.npmrc` (see the npm allow-remote note under the scan arguments). Read by `scan --mode hosted` and `get --mode hosted`; other subcommands accept it silently |
+| `--no-vlt-install-cleanup` | — | `SOCKET_NO_VLT_INSTALL_CLEANUP` | `false` | bool | Opt out of hosted mode's warm-tree heal for vlt: stale installed copies (`node_modules/.vlt-lock.json` and the stale `node_modules/.vlt/<DepID>` entries) are left in place after `vlt-lock.json` is repointed (`scan`/`get --mode hosted`) or restored (`rollback`/`remove`), and the `redirect_vlt_reinstall_required` advisory tells you to run `vlt ci` instead. Other subcommands accept it silently |
 
 The `--offline` semantics unified in v3.0. Previously `apply` enforced strict airgap, `repair` skipped network ops, and `rollback` failed when blobs were missing. All three now mean the same thing: never contact the network, fail loudly when a required local source is missing. On `repair`, `--offline` and `--download-only` are mutually exclusive (exit 2). `scan` and `get` need remote data for their core function (patch discovery / patch fetch), so `--offline` refuses them up front — exit 1 with an error naming the offline gate (JSON: `status: "error"`), before any crawl, client build, or network contact. This covers `scan --vendor` too: offline vendored staging is `vendor --offline`'s job.
 
@@ -1287,6 +1288,14 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_bun_workspace_unsupported` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (bun): a lockfileVersion-0 lock (Bun 1.1.39–1.1.45 `--save-text-lockfile`) holds `workspace:` packages; frozen installs of that grammar cannot keep the hosted tuple. Detail: "Bun version-0 workspace locks cannot preserve hosted tarballs on frozen installs; delete bun.lock and re-run `bun install` with Bun >= 1.2 (which writes lockfileVersion 1, accepted by hosted mode) — a plain in-place `bun install` bumps the version only when a workspace depends on another workspace (e.g. root -> member); otherwise it keeps version 0 or fails to resolve" (measured: Bun 1.2.0 keeps 0, 1.2.23–1.4.2 exit 1 "failed to resolve" on a root that does not depend on its members). Version-1/2 workspace locks are rewritten. Exit 0. |
 | `redirect_bun_lockb_invalid` | `redirect.warnings[]` (warning) | scan/get `--mode hosted`: the native binary lock is malformed, unreadable, unsupported or cannot be rewritten safely. No installer is spawned and no binary or sibling npm lock edit or takeover occurs; dry-run reports the same format error. Exit 0, `redirected: 0`. |
 | `redirect_bun_entry_not_found` / `redirect_bun_missing_sha512` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (bun): the lock has no rewritable entry at the granted version (re-resolved, or occupied by an unowned URL/file spec) / the grant carries no sha512 integrity. Per-dep; nothing rewritten for it; exit 0. NOT emitted for the digest-less 2-tuple Bun 1.1.39–1.3.9 re-save our URL tuple as — that entry counts as redirected and is healed. |
+| `redirect_vlt_lock_unsupported` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` has a `lockfileVersion` other than absent, `0` or `1` (decided on the raw JSON token), is not a JSON object, starts with a UTF-8 BOM, or its `nodes` section is not vlt's one-node-per-line layout. Nothing rewritten; also refuses a vendored → hosted takeover of a `flavor: "vlt"` entry before its revert (`redirect.skipped[].reason`). Exit 0. |
+| `redirect_vlt_missing_sha512` / `redirect_vlt_entry_not_found` / `redirect_vlt_entry_vendored` / `redirect_vlt_unsupported_lock_key` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the grant has no sha512 / the lock has no default-registry node for `name@version` / the only match is a vendored `file` node under `.socket/vendor/npm/<uuid>/` / a default-registry instance is outside vlt's node-line grammar or still unpatched after the splice. Per dep; none of the dep's instances is written, and a refused dep is never confirmed, whichever lock drives. Exit 0. |
+| `redirect_vlt_custom_registry_skipped` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): same-`name@version` nodes under a named alias, a scoped registry or jsr were left untouched (hosted mode only redirects vlt's default registry). The dep is still redirected, but the run's `--vex` does not attest it. |
+| `redirect_vlt_lockfile_version_missing` / `redirect_vlt_old_lockfile_ignored` / `redirect_vlt_scalar_registry_ignored` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the lock has no `lockfileVersion` (vlt ≥ 1.0.0-rc.15 re-resolves it) / a legacy default-registry id without `"modifiers"` in `vlt.json` (vlt 0.0.0-16 … 0.0.0-24 ignore the lock) / a scalar `registry` option that vlt 1.0.0-rc.7 … rc.29 honor over the lock. The deps stay redirected, but the run's `--vex` does not attest them. |
+| `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
+| `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
+| `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives (from the vlt rewrite only otherwise). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`. Invalidation failures only warn. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
 | `vendor_*` / `pypi_*` / `gemfile_*` / `lock_*` / `locked_version_mismatch` / `user_authored_*` / `native_extensions_unsupported` / `platform_gem_unsupported` | `failed`/`skipped` | vendor: per-ecosystem refusal + drift vocabulary; see the Vendor command contract section. New tags are additive (MINOR). |
diff --git a/crates/socket-patch-cli/src/args.rs b/crates/socket-patch-cli/src/args.rs
index fcd45dcb..baa46e67 100644
--- a/crates/socket-patch-cli/src/args.rs
+++ b/crates/socket-patch-cli/src/args.rs
@@ -362,6 +362,22 @@ pub struct GlobalArgs {
         value_parser = parse_bool_flag,
     )]
     pub no_npm_allow_remote_config: bool,
+
+    /// Hosted mode (`scan`/`get --mode hosted`, and `rollback`/`remove` of
+    /// hosted redirects): do NOT remove stale vlt installed copies
+    /// (`node_modules/.vlt-lock.json` and the stale `node_modules/.vlt`
+    /// entries) after `vlt-lock.json` is repointed or restored. vlt never
+    /// refreshes an installed copy on its own, so opting out means running
+    /// `vlt ci` instead (the run's `redirect_vlt_reinstall_required`
+    /// advisory says so). Other subcommands accept it silently.
+    #[arg(
+        help_heading = GLOBAL_OPTIONS,
+        long = "no-vlt-install-cleanup",
+        env = "SOCKET_NO_VLT_INSTALL_CLEANUP",
+        default_value_t = false,
+        value_parser = parse_bool_flag,
+    )]
+    pub no_vlt_install_cleanup: bool,
 }
 
 impl GlobalArgs {
@@ -550,6 +566,7 @@ pub const GLOBAL_ARG_ENV_VARS: &[&str] = &[
     "SOCKET_TELEMETRY_DISABLED",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
 ];
 
 /// Every env var a **subcommand-local** flag binds (one per `env = "..."`
@@ -642,6 +659,7 @@ impl Default for GlobalArgs {
             no_telemetry: false,
             no_trust_lockfile_config: false,
             no_npm_allow_remote_config: false,
+            no_vlt_install_cleanup: false,
         }
     }
 }
diff --git a/crates/socket-patch-cli/src/commands/rollback.rs b/crates/socket-patch-cli/src/commands/rollback.rs
index 4a3aefe7..ff42597e 100644
--- a/crates/socket-patch-cli/src/commands/rollback.rs
+++ b/crates/socket-patch-cli/src/commands/rollback.rs
@@ -1042,6 +1042,20 @@ pub(crate) async fn run_hosted_leg(
     };
 
     let mut out = HostedLegOutcome::default();
+    // The vlt nodes the unwound purls pin, read before the revert drops
+    // their edits: the heal below invalidates the patched installed copies
+    // once the registry pins are back.
+    let vlt_scope: Vec<String> = if replay_eligible {
+        purls
+            .iter()
+            .cloned()
+            .chain(state.records.keys().cloned())
+            .collect()
+    } else {
+        purls.to_vec()
+    };
+    let vlt_targets =
+        socket_patch_core::patch::redirect::vlt_heal::ledger_targets(state, &vlt_scope);
     // When the whole-ledger replay will run anyway (the scope covers every
     // record), npm purls on Bun projects defer to it so all lockfile edits
     // are staged together atomically. A scoped unwind of one of several
@@ -1138,6 +1152,17 @@ pub(crate) async fn run_hosted_leg(
             }
         }
     }
+    let unwound: Vec<_> = vlt_targets
+        .into_iter()
+        .filter(|t| {
+            out.reverted.iter().any(|p| {
+                socket_patch_core::utils::purl::canonical_purl(p)
+                    == socket_patch_core::utils::purl::canonical_purl(&t.purl)
+            }) || (replay_eligible && !out.failed.iter().any(|(p, _)| p.starts_with("group:")))
+        })
+        .collect();
+    out.warnings
+        .extend(crate::commands::scan::vlt_rollback_heal(common, &unwound).await);
     out
 }
 
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 03223412..412e4f20 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -16,13 +16,20 @@ use crate::commands::vex::generate_vex_from_manifest_path;
 use super::{discover_selected, ScanArgs};
 
 mod python;
+mod vlt;
+
+pub(crate) use vlt::rollback_heal as vlt_rollback_heal;
 
 /// Candidate lockfiles / registry configs the redirect rewriters may touch —
 /// read from the project when present and handed to `rewrite_registry_redirect`.
 /// Fragment-edit kinds whose lockfile the package manager re-lays in place
 /// (keeping the Socket source) — a re-scan REBASES their ledger edits instead
 /// of appending; see the ledger merge below.
-const REBASE_KINDS: &[&str] = &["redirect_poetry_lock_package", "redirect_pdm_lock_package"];
+const REBASE_KINDS: &[&str] = &[
+    "redirect_poetry_lock_package",
+    "redirect_pdm_lock_package",
+    socket_patch_core::patch::redirect::vlt::KIND,
+];
 
 const REDIRECT_CANDIDATE_FILES: &[&str] = &[
     "package-lock.json",
@@ -37,6 +44,12 @@ const REDIRECT_CANDIDATE_FILES: &[&str] = &[
     ".yarnrc.yml",
     "bun.lock",
     "bun.lockb",
+    // vlt: the lock is rewritten, vlt.json is read-only (the old-lockfile
+    // advisory), and the hidden lock is only stat'ed as the install-state
+    // sentinel.
+    "vlt-lock.json",
+    "vlt.json",
+    "node_modules/.vlt-lock.json",
     "requirements.txt",
     "uv.lock",
     "poetry.lock",
@@ -1069,7 +1082,7 @@ pub(crate) async fn run_redirect_selected(
 ) -> i32 {
     use socket_patch_core::manifest::schema::PatchRecord;
     use socket_patch_core::patch::redirect::{
-        rewrite_registry_redirect_with_pipenv_version, RedirectState,
+        rewrite_registry_redirect_withholding_vlt, RedirectState,
     };
 
     let mut skipped: Vec<serde_json::Value> = Vec::new();
@@ -1238,6 +1251,31 @@ pub(crate) async fn run_redirect_selected(
         return 1;
     }
 
+    // vlt artifact preflight: before any takeover or rewrite (dry runs
+    // included), each in-scope artifact is fetched as vlt fetches it. A
+    // failure while vlt drives withholds the dep from every rewriter;
+    // otherwise only from the vlt rewrite.
+    let vlt_preflight = {
+        let deps: Vec<(&str, &DepOverride)> = candidates
+            .iter()
+            .filter(|c| c.dep.ecosystem == "npm")
+            .map(|c| (c.purl.as_str(), &c.dep))
+            .collect();
+        vlt::artifact_preflight(common, api_client, &deps).await
+    };
+    if !vlt_preflight.withheld_everywhere.is_empty() {
+        for (uuid, purl) in &vlt_preflight.withheld_everywhere {
+            skipped.push(serde_json::json!({
+                "purl": purl, "uuid": uuid, "reason": vlt::WITHHELD_REASON,
+            }));
+        }
+        candidates.retain(|c| {
+            !vlt_preflight
+                .withheld_everywhere
+                .contains_key(&c.dep.patch_uuid)
+        });
+    }
+
     // The apply lock (see `acquire_hosted_lock`), taken only by a WET run
     // that holds at least one granted reference — the only runs that can
     // write anything: the takeover pre-reverts (lockfiles + the vendored
@@ -1453,10 +1491,39 @@ pub(crate) async fn run_redirect_selected(
         } else {
             None
         };
+        // vlt twin: the hosted rewriter's lock-level refusal must be known
+        // before a vendored vlt entry is reverted, or the revert strips the
+        // live vendored patch and the rewrite then refuses the lock.
+        let vlt_entry = |entry: &socket_patch_core::vendor::VendorEntry| {
+            entry.ecosystem == "npm" && entry.flavor.as_deref() == Some("vlt")
+        };
+        let vlt_takeover_refusal = if takeover
+            .iter()
+            .any(|(_, entry)| entry.as_ref().is_some_and(vlt_entry))
+        {
+            match socket_patch_core::utils::fs::read_regular_to_string(
+                &common
+                    .cwd
+                    .join(socket_patch_core::constants::npm_family::VLT_LOCK),
+            )
+            .await
+            {
+                Ok(lock) => {
+                    let files = std::collections::BTreeMap::from([(
+                        socket_patch_core::constants::npm_family::VLT_LOCK.to_string(),
+                        lock,
+                    )]);
+                    socket_patch_core::patch::redirect::vlt::preflight_vlt_hosted(&files).err()
+                }
+                Err(_) => None,
+            }
+        } else {
+            None
+        };
         // The takeover refusal (if any) for one candidate: bun gates every
-        // npm purl, berry only its vendored-berry entries. A refused purl is
-        // never dispatched (see the loop), so its wiring is not a write
-        // target here.
+        // npm purl, berry and vlt only their own vendored entries. A refused
+        // purl is never dispatched (see the loop), so its wiring is not a
+        // write target here.
         let takeover_refusal =
             |c: &Candidate,
              entry: Option<&socket_patch_core::vendor::VendorEntry>|
@@ -1464,11 +1531,18 @@ pub(crate) async fn run_redirect_selected(
                 if !c.purl.starts_with("pkg:npm/") {
                     return None;
                 }
-                bun_takeover_refusal.as_ref().or_else(|| {
-                    berry_takeover_refusal
-                        .as_ref()
-                        .filter(|_| entry.is_some_and(berry_entry))
-                })
+                bun_takeover_refusal
+                    .as_ref()
+                    .or_else(|| {
+                        berry_takeover_refusal
+                            .as_ref()
+                            .filter(|_| entry.is_some_and(berry_entry))
+                    })
+                    .or_else(|| {
+                        vlt_takeover_refusal
+                            .as_ref()
+                            .filter(|_| entry.is_some_and(vlt_entry))
+                    })
             };
         // SYMLINK PRE-CHECK for the takeover reverts — the same rule as the
         // SYMLINK GUARD below, applied to the files the reverts rewrite
@@ -1704,6 +1778,12 @@ pub(crate) async fn run_redirect_selected(
             if *name == "bun.lockb" {
                 continue;
             }
+            if *name == socket_patch_core::constants::npm_family::VLT_HIDDEN_LOCK_REL {
+                if vlt::install_state_present(&common.cwd) {
+                    files.insert((*name).to_string(), String::new());
+                }
+                continue;
+            }
             if let Ok(content) = read_regular_to_string(&common.cwd.join(name)).await {
                 files.insert((*name).to_string(), content);
             }
@@ -1876,12 +1956,13 @@ pub(crate) async fn run_redirect_selected(
         .filter(|o| !(binary_content.as_ref().is_some_and(Result::is_err) && o.ecosystem == "npm"))
         .cloned()
         .collect();
-    let mut rewrite = rewrite_registry_redirect_with_pipenv_version(
+    let mut rewrite = rewrite_registry_redirect_withholding_vlt(
         &files,
         &rewrite_overrides,
         &python_metadata,
         pipenv_major,
         common.cwd.join("bun.lockb").exists(),
+        &vlt_preflight.withheld_from_vlt,
     );
     if let Some(content) = binary_content {
         rewrite
@@ -2351,6 +2432,14 @@ pub(crate) async fn run_redirect_selected(
         .filter(|c| {
             let purl = c.purl.as_str();
             let uuid = c.dep.patch_uuid.as_str();
+            // vlt decides before the binary-bun rule, so `bun.lockb` beside
+            // a vlt-driven `vlt-lock.json` never confirms an npm purl.
+            if rewrite.refused_vlt_uuids.contains(uuid) {
+                return false;
+            }
+            if rewrite.vlt_drives && purl.starts_with("pkg:npm/") {
+                return rewrite.confirmed_vlt_uuids.contains(uuid);
+            }
             if binary_bun && purl.starts_with("pkg:npm/") {
                 return rewrite.confirmed_bun_binary_uuids.contains(uuid);
             }
@@ -2538,12 +2627,18 @@ pub(crate) async fn run_redirect_selected(
             // fragment) and adopting the fresh `new` keeps the chain a single
             // invertible link: replay swaps the fragment this run wrote back to
             // the fragment the very first run found.
+            let vlt_merged = rebase_vlt_edits(
+                &mut ledger.edits,
+                &rewrite.edits,
+                files
+                    .get(socket_patch_core::constants::npm_family::VLT_LOCK)
+                    .map(String::as_str),
+            );
             let mut rebased: Vec<usize> = Vec::new();
-            for edit in rewrite
-                .edits
-                .iter()
-                .filter(|e| REBASE_KINDS.contains(&e.kind.as_str()))
-            {
+            for edit in rewrite.edits.iter().filter(|e| {
+                REBASE_KINDS.contains(&e.kind.as_str())
+                    && e.kind != socket_patch_core::patch::redirect::vlt::KIND
+            }) {
                 let siblings: Vec<usize> = ledger
                     .edits
                     .iter()
@@ -2600,7 +2695,10 @@ pub(crate) async fn run_redirect_selected(
             // them made `remove` leave the second pin (and its registry
             // block) in place while reporting success.
             let recorded = ledger.edits.len();
-            for edit in &rewrite.edits {
+            for (i, edit) in rewrite.edits.iter().enumerate() {
+                if vlt_merged[i] {
+                    continue;
+                }
                 let is_rebased = REBASE_KINDS.contains(&edit.kind.as_str())
                     && rebased.iter().any(|&t| {
                         let old = &ledger.edits[t];
@@ -2705,6 +2803,33 @@ pub(crate) async fn run_redirect_selected(
         .await
     };
 
+    // vlt warm-tree heal (DESIGN §3.9): stale installed copies of the
+    // Socket-owned nodes are invalidated (classified only on a dry run or
+    // with --no-vlt-install-cleanup), and every confirmed vlt purl whose
+    // installed or next-installed bytes are not known to be patched is
+    // withheld from the in-run VEX attestation.
+    let vlt_stale = {
+        let rewrite_codes: Vec<&str> = rewrite.warnings.iter().map(|w| w.code.as_str()).collect();
+        let lock_key = socket_patch_core::constants::npm_family::VLT_LOCK;
+        vlt::heal_after_rewrite(
+            common,
+            &vlt::HealInputs {
+                final_lock: rewrite
+                    .files
+                    .get(lock_key)
+                    .or_else(|| files.get(lock_key))
+                    .map(String::as_str),
+                preflight: &vlt_preflight,
+                records: &ledger.records,
+                confirmed: &confirmed,
+                confirmed_vlt: &rewrite.confirmed_vlt_uuids,
+                foreign: &rewrite.vlt_foreign_uuids,
+                rewrite_warning_codes: &rewrite_codes,
+            },
+        )
+        .await
+    };
+
     // Cross-mode takeover: a committed vendored ledger (`.socket/vendor/state.json`)
     // may still claim package(s) this project also has a hosted redirect ledger
     // for — their tarballs would then be orphaned and that ledger stale. But the
@@ -2776,12 +2901,20 @@ pub(crate) async fn run_redirect_selected(
             .iter()
             .map(|(purl, _)| purl.clone())
             .filter(|purl| {
-                !gem_stale.stale_purls.contains(purl) && !python_stale.stale_purls.contains(purl)
+                !gem_stale.stale_purls.contains(purl)
+                    && !python_stale.stale_purls.contains(purl)
+                    && !vlt_stale.stale_purls.contains(purl)
             })
             .collect();
         // A healthy copy in another interpreter must not override a stale
-        // Python tree found by the probe, including with --vex-no-verify.
-        params.known_stale = python_stale.stale_purls.iter().cloned().collect();
+        // Python tree found by the probe, including with --vex-no-verify;
+        // likewise a vlt copy the heal could not prove patched.
+        params.known_stale = python_stale
+            .stale_purls
+            .iter()
+            .chain(&vlt_stale.stale_purls)
+            .cloned()
+            .collect();
         let manifest_path = common.resolved_manifest_path();
         match generate_vex_from_manifest_path(common, &params, &manifest_path).await {
             Ok(summary) => {
@@ -2808,12 +2941,14 @@ pub(crate) async fn run_redirect_selected(
             })
         })
         .collect();
+    warnings.extend(vlt_preflight.warnings.iter().cloned());
     warnings.extend(record_warnings.iter().cloned());
     warnings.extend(rush_warnings.iter().cloned());
     warnings.extend(pnpm_warnings.iter().cloned());
     warnings.extend(npm_warnings.iter().cloned());
     warnings.extend(gem_stale.warnings.iter().cloned());
     warnings.extend(python_stale.warnings.iter().cloned());
+    warnings.extend(vlt_stale.warnings.iter().cloned());
     warnings.extend(takeover_pre_warnings.iter().cloned());
     warnings.extend(takeover_warnings.iter().cloned());
     warnings.extend(prune_warnings.iter().cloned());
@@ -2997,7 +3132,8 @@ const TAKEOVER_INFO_CODES: &[&str] = &[
 /// sentence (`pnpm >=11 rejects…` must not become `Pnpm`).
 const LOWERCASE_TOOLS: &[&str] = &[
     "npm", "pnpm", "yarn", "bun", "cargo", "pip", "pipenv", "uv", "poetry", "pdm", "hatch", "go",
-    "gem", "bundler", "bundle", "composer", "mvn", "gradle", "dotnet", "deno", "rush",
+    "gem", "bundler", "bundle", "composer", "mvn", "gradle", "dotnet", "deno", "rush", "vlt",
+    "vlx", "vlr",
 ];
 
 /// Capitalize the first letter of a message for an `Error:`/`Warning:`
@@ -3175,6 +3311,12 @@ fn describe_skip_reason(reason: &str) -> String {
         "redirect_bun_lock_unsupported" | "redirect_bun_lockb_invalid" => {
             "the Bun lockfile blocks the vendored-to-hosted migration (see the warning)".into()
         }
+        "redirect_vlt_lock_unsupported" => {
+            "vlt-lock.json blocks the vendored-to-hosted migration (see the warning)".into()
+        }
+        "redirect_vlt_artifact_unverifiable" => {
+            "vlt could not verify the hosted artifact (see the warning)".into()
+        }
         other => format!("server status `{other}`"),
     }
 }
@@ -3287,13 +3429,70 @@ fn format_next_steps(
         .iter()
         .any(|f| f == "package-lock.json" || f == "npm-shrinkwrap.json");
     let hint = if npm { " (e.g. `npm ci`)" } else { "" };
-    vec![
+    let mut steps = vec![
         format!("Commit {} to keep the redirect.", join_names(&commit, 6)),
         format!(
             "Reinstall from the updated lockfile{hint} so the installed packages pick up the \
              patched artifacts, then run `socket-patch vex` to verify them."
         ),
-    ]
+    ];
+    if files
+        .iter()
+        .any(|f| f == socket_patch_core::constants::npm_family::VLT_LOCK)
+    {
+        steps.push("vlt: commit vlt-lock.json; CI should run `vlt ci`".to_string());
+    }
+    steps
+}
+
+/// Merge this run's vlt node edits into the recorded ones. A fresh edit
+/// for the same `key` and DepID keeps the recorded `original` (the
+/// pristine registry entry) and takes the fresh `new`; one whose recorded
+/// same-key edits all name DepIDs the pre-run lock no longer holds (a
+/// re-lock, or a new id grammar after a vlt upgrade) replaces them,
+/// `original` included. Returns, per fresh edit, whether it was merged
+/// (anything else is appended as usual).
+fn rebase_vlt_edits(
+    ledger: &mut Vec<socket_patch_core::patch::redirect::FileEdit>,
+    fresh: &[socket_patch_core::patch::redirect::FileEdit],
+    before_lock: Option<&str>,
+) -> Vec<bool> {
+    use socket_patch_core::patch::redirect::vlt::{edit_dep_id, lock_node_ids, KIND};
+    let live = before_lock.and_then(lock_node_ids).unwrap_or_default();
+    let mut merged = vec![false; fresh.len()];
+    for (i, edit) in fresh.iter().enumerate() {
+        if edit.kind != KIND {
+            continue;
+        }
+        let id = edit_dep_id(edit);
+        let same_key: Vec<usize> = ledger
+            .iter()
+            .enumerate()
+            .filter(|(_, old)| old.kind == KIND && old.path == edit.path && old.key == edit.key)
+            .map(|(j, _)| j)
+            .collect();
+        if let Some(&j) = same_key
+            .iter()
+            .find(|&&j| id.is_some() && edit_dep_id(&ledger[j]) == id)
+        {
+            ledger[j].new = edit.new.clone();
+            ledger[j].action = edit.action.clone();
+            merged[i] = true;
+            continue;
+        }
+        let vanished: Vec<usize> = same_key
+            .into_iter()
+            .filter(|&j| edit_dep_id(&ledger[j]).is_none_or(|old| !live.contains(&old)))
+            .collect();
+        if let Some((&first, rest)) = vanished.split_first() {
+            ledger[first] = edit.clone();
+            for &j in rest.iter().rev() {
+                ledger.remove(j);
+            }
+            merged[i] = true;
+        }
+    }
+    merged
 }
 
 /// Transient-frame boxed constructor for [`run_redirect_selected`] — the
@@ -3338,8 +3537,9 @@ mod tests {
         pnpm_lock_may_need_store_flag, pnpm_trust_rerun_reminder, sentence_case, split_sentences,
         wrap_tokens, wrap_words, TAKEOVER_INFO_CODES,
     };
+    use super::{rebase_vlt_edits, REBASE_KINDS};
     use socket_patch_core::constants::npm_family;
-    use socket_patch_core::patch::redirect::DepOverride;
+    use socket_patch_core::patch::redirect::{DepOverride, FileEdit};
 
     /// Lock-head version sniff against the byte-real heads the 2026-08-18
     /// matrix captured from pnpm 7/8/9-12: quoted `'9.0'` and `'6.0'`,
@@ -4528,6 +4728,14 @@ mod tests {
             describe_skip_reason("redirect_bun_lockb_invalid"),
             describe_skip_reason("redirect_bun_lock_unsupported")
         );
+        assert_eq!(
+            describe_skip_reason("redirect_vlt_artifact_unverifiable"),
+            "vlt could not verify the hosted artifact (see the warning)"
+        );
+        assert_eq!(
+            describe_skip_reason("redirect_vlt_lock_unsupported"),
+            "vlt-lock.json blocks the vendored-to-hosted migration (see the warning)"
+        );
         assert_eq!(describe_skip_reason("mystery"), "server status `mystery`");
         for code in [
             "not_found",
@@ -4619,6 +4827,12 @@ mod tests {
             "The redirect ledger ./a is malformed"
         );
         assert_eq!(sentence_case("pnpm >=11 rejects"), "pnpm >=11 rejects");
+        for tool in ["vlt", "vlx", "vlr"] {
+            assert_eq!(
+                sentence_case(&format!("{tool} ci fails")),
+                format!("{tool} ci fails")
+            );
+        }
         assert_eq!(
             sentence_case("pnpm-lock.yaml was repointed"),
             "pnpm-lock.yaml was repointed"
@@ -4819,6 +5033,99 @@ mod tests {
         assert!(!steps[1].contains("npm ci"), "{}", steps[1]);
     }
 
+    #[test]
+    fn next_steps_add_the_vlt_ci_line_only_for_a_rewritten_vlt_lock() {
+        let steps = format_next_steps(&["vlt-lock.json".to_string()], true, false);
+        assert_eq!(
+            steps.last().map(String::as_str),
+            Some("vlt: commit vlt-lock.json; CI should run `vlt ci`")
+        );
+        assert!(
+            !format_next_steps(&["package-lock.json".to_string()], true, false)
+                .iter()
+                .any(|s| s.starts_with("vlt:"))
+        );
+    }
+
+    fn vlt_edit(key: &str, id: &str, slot2: &str, slot3: &str) -> FileEdit {
+        FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: socket_patch_core::patch::redirect::vlt::KIND.into(),
+            action: "rewritten".into(),
+            key: Some(key.into()),
+            original: Some(serde_json::Value::String(format!(
+                "\"{id}\": [0,\"x\",\"sha512-reg\",null]"
+            ))),
+            new: Some(serde_json::Value::String(format!(
+                "\"{id}\": [0,\"x\",\"{slot2}\",\"{slot3}\"]"
+            ))),
+        }
+    }
+
+    fn vlt_lock_with(ids: &[&str]) -> String {
+        let nodes: Vec<String> = ids
+            .iter()
+            .map(|id| format!("    \"{id}\": [0,\"x\"]"))
+            .collect();
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n{}\n  }},\n  \"edges\": {{}}\n}}\n",
+            nodes.join(",\n")
+        )
+    }
+
+    #[test]
+    fn vlt_rerun_keeps_the_pristine_original_for_the_same_dep_id() {
+        assert!(REBASE_KINDS.contains(&socket_patch_core::patch::redirect::vlt::KIND));
+        let mut ledger = vec![vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-p1", "u1")];
+        let mut fresh = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-p2", "u2");
+        fresh.original = ledger[0].new.clone();
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&["~npm~x@1.0.0"])),
+        );
+        assert_eq!(merged, [true]);
+        assert_eq!(ledger.len(), 1);
+        assert_eq!(
+            ledger[0].original,
+            vlt_edit("x@1.0.0", "~npm~x@1.0.0", "", "").original
+        );
+        assert_eq!(ledger[0].new, fresh.new);
+    }
+
+    #[test]
+    fn vlt_relocked_dep_id_supersedes_the_recorded_edits() {
+        let mut ledger = vec![
+            vlt_edit("x@1.0.0", "··x@1.0.0", "sha512-p", "u"),
+            vlt_edit("x@1.0.0", "·npm·x@1.0.0", "sha512-p", "u"),
+            vlt_edit("y@1.0.0", "·npm·y@1.0.0", "sha512-p", "u"),
+        ];
+        let fresh = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-p", "u");
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&["~npm~x@1.0.0", "·npm·y@1.0.0"])),
+        );
+        assert_eq!(merged, [true]);
+        assert_eq!(
+            ledger,
+            [fresh, vlt_edit("y@1.0.0", "·npm·y@1.0.0", "sha512-p", "u")]
+        );
+    }
+
+    #[test]
+    fn vlt_edit_of_a_live_sibling_dep_id_is_appended() {
+        let mut ledger = vec![vlt_edit("x@1.0.0", "··x@1.0.0", "sha512-p", "u")];
+        let fresh = vlt_edit("x@1.0.0", "·npm·x@1.0.0", "sha512-p", "u");
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&["··x@1.0.0", "·npm·x@1.0.0"])),
+        );
+        assert_eq!(merged, [false]);
+        assert_eq!(ledger.len(), 1);
+    }
+
     #[test]
     fn next_steps_after_a_takeover_name_the_removed_vendored_state() {
         assert_eq!(
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
new file mode 100644
index 00000000..62fa3981
--- /dev/null
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -0,0 +1,483 @@
+//! The vlt steps of the hosted flow: the artifact preflight, run before any
+//! takeover or rewrite, and the warm-tree heal with its
+//! `redirect_vlt_reinstall_required` advisory, run after the writes (and by
+//! rollback/remove after the vlt pins are restored).
+
+use std::collections::{BTreeMap, BTreeSet};
+use std::path::Path;
+
+use socket_patch_core::constants::npm_family::{
+    BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, VLT_HIDDEN_LOCK_REL, VLT_LOCK, VLT_STORE_DIR,
+};
+use socket_patch_core::manifest::schema::PatchRecord;
+use socket_patch_core::patch::redirect::vlt_heal::{
+    self, classify_target, read_install_state, Expected, LedgerTarget, Target, TargetState,
+};
+use socket_patch_core::patch::redirect::vlt_preflight::{self, OFFLINE_REASON};
+use socket_patch_core::patch::redirect::{vlt, DepOverride};
+
+use super::StaleInstallOutcome;
+
+pub(super) const REINSTALL_REQUIRED: &str = "redirect_vlt_reinstall_required";
+const ARTIFACT_UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
+
+/// The lock-level warnings that say vlt may discard the redirect.
+const DISCARDING_LOCK_WARNINGS: [&str; 3] = [
+    "redirect_vlt_lockfile_version_missing",
+    "redirect_vlt_old_lockfile_ignored",
+    "redirect_vlt_scalar_registry_ignored",
+];
+
+/// Whether vlt's install state exists: the hidden lock as a regular file,
+/// or the store as a real directory. Stat only; the hidden lock can be
+/// megabytes and is never read into the rewriter's input.
+pub(super) fn install_state_present(cwd: &Path) -> bool {
+    let is = |rel: &str, dir: bool| {
+        std::fs::symlink_metadata(cwd.join(rel)).is_ok_and(|m| {
+            if dir {
+                m.file_type().is_dir()
+            } else {
+                m.file_type().is_file()
+            }
+        })
+    };
+    is(VLT_HIDDEN_LOCK_REL, false) || is(VLT_STORE_DIR, true)
+}
+
+/// What the artifact preflight decided for this run's npm candidates.
+#[derive(Default)]
+pub(super) struct Preflight {
+    /// Failed while vlt drives: withheld from every rewriter.
+    pub(super) withheld_everywhere: BTreeMap<String, String>,
+    /// Failed while another npm-family lock may drive: kept out of the vlt
+    /// rewrite only.
+    pub(super) withheld_from_vlt: BTreeSet<String>,
+    pub(super) passed: BTreeSet<String>,
+    /// Artifact bytes by URL, for the heal's no-record comparison.
+    pub(super) artifacts: BTreeMap<String, Vec<u8>>,
+    pub(super) warnings: Vec<serde_json::Value>,
+}
+
+/// The files `vlt_drives` and the preflight scope read: `vlt-lock.json`
+/// itself, and presence-only entries for the sibling locks and vlt's
+/// install state. Empty without a readable `vlt-lock.json`.
+async fn vlt_inputs(cwd: &Path) -> BTreeMap<String, String> {
+    let mut files = BTreeMap::new();
+    let Ok(lock) = socket_patch_core::utils::fs::read_regular_to_string(&cwd.join(VLT_LOCK)).await
+    else {
+        return files;
+    };
+    files.insert(VLT_LOCK.to_string(), lock);
+    for sibling in [NPM_LOCKS[0], NPM_LOCKS[1], "yarn.lock", PNPM_LOCK, BUN_LOCK] {
+        if std::fs::metadata(cwd.join(sibling)).is_ok_and(|m| m.is_file()) {
+            files.insert(sibling.to_string(), String::new());
+        }
+    }
+    if install_state_present(cwd) {
+        files.insert(VLT_HIDDEN_LOCK_REL.to_string(), String::new());
+    }
+    files
+}
+
+fn unverifiable_detail(url: &str, reason: &str, purl: &str, already_pinned: bool) -> String {
+    if already_pinned {
+        format!(
+            "vlt would fail to verify {url}: {reason}; {purl} was left pinned by an earlier run \
+             and `vlt ci` will fail until the artifact verifies"
+        )
+    } else {
+        format!("vlt would fail to verify {url}: {reason}; nothing was written for {purl}")
+    }
+}
+
+/// Fetch each in-scope artifact the way vlt does (once per distinct URL,
+/// `offline` making no request) and decide which deps may be pinned in
+/// `vlt-lock.json`. Projects without `vlt-lock.json` make no request.
+pub(super) async fn artifact_preflight(
+    common: &crate::args::GlobalArgs,
+    api_client: &socket_patch_core::api::client::ApiClient,
+    deps: &[(&str, &DepOverride)],
+) -> Preflight {
+    let mut out = Preflight::default();
+    let files = vlt_inputs(&common.cwd).await;
+    if files.is_empty() {
+        return out;
+    }
+    let overrides: Vec<DepOverride> = deps.iter().map(|(_, dep)| (*dep).clone()).collect();
+    let scope = vlt_preflight::preflight_scope(&files, &overrides);
+    if scope.is_empty() {
+        return out;
+    }
+    let drives = vlt::vlt_drives(&files, common.cwd.join(BUN_LOCKB).exists());
+    let urls: BTreeSet<String> = scope.iter().map(|d| d.artifact_url.clone()).collect();
+    let probes = if common.offline {
+        BTreeMap::new()
+    } else {
+        vlt_preflight::probe_artifacts(api_client, &urls).await
+    };
+    for dep in &scope {
+        let reason = match probes.get(&dep.artifact_url) {
+            None => Some(OFFLINE_REASON.to_string()),
+            Some(probe) => probe.failure(&dep.sha512),
+        };
+        let Some(reason) = reason else {
+            out.passed.insert(dep.patch_uuid.clone());
+            if let Some(body) = probes.get(&dep.artifact_url).and_then(|p| p.body.clone()) {
+                out.artifacts.insert(dep.artifact_url.clone(), body);
+            }
+            continue;
+        };
+        let purl = deps
+            .iter()
+            .find(|(_, d)| d.patch_uuid == dep.patch_uuid)
+            .map_or("", |(purl, _)| *purl);
+        out.warnings.push(serde_json::json!({
+            "code": ARTIFACT_UNVERIFIABLE,
+            "detail": unverifiable_detail(&dep.artifact_url, &reason, purl, dep.already_pinned),
+        }));
+        if drives {
+            out.withheld_everywhere
+                .insert(dep.patch_uuid.clone(), purl.to_string());
+        } else {
+            out.withheld_from_vlt.insert(dep.patch_uuid.clone());
+        }
+    }
+    out
+}
+
+/// The skip `reason` of a dep the preflight withheld from every rewriter.
+pub(super) const WITHHELD_REASON: &str = ARTIFACT_UNVERIFIABLE;
+
+fn patch_server_origins(common: &crate::args::GlobalArgs) -> Vec<String> {
+    common
+        .patch_server_url
+        .iter()
+        .chain(common.api_url.iter())
+        .filter(|url| !url.trim().is_empty())
+        .cloned()
+        .collect()
+}
+
+fn cleanup_disabled(common: &crate::args::GlobalArgs) -> bool {
+    common.dry_run || common.no_vlt_install_cleanup
+}
+
+/// How a heal ended, for the advisory wording.
+#[derive(Debug, Default, PartialEq, Eq)]
+struct HealTally {
+    invalidated: usize,
+    stale_left: usize,
+    undeterminable: usize,
+    stale_uuids: BTreeSet<String>,
+    undeterminable_uuids: BTreeSet<String>,
+}
+
+/// Classify `targets` against `expected` and invalidate the stale ones
+/// unless cleanup is off. `(dep_id, name, lock sha512, record, artifact,
+/// uuid)` per target.
+async fn heal_targets(
+    common: &crate::args::GlobalArgs,
+    targets: &[(Target<'_>, &str)],
+    expected: Expected,
+) -> HealTally {
+    let mut tally = HealTally::default();
+    if targets.is_empty() {
+        return tally;
+    }
+    let state = read_install_state(&common.cwd).await;
+    let mut stale: Vec<(String, &str)> = Vec::new();
+    for (target, uuid) in targets {
+        match classify_target(&state, &common.cwd, target, expected).await {
+            TargetState::Stale => stale.push((target.dep_id.to_string(), uuid)),
+            TargetState::Undeterminable => {
+                tally.undeterminable += 1;
+                tally.undeterminable_uuids.insert((*uuid).to_string());
+            }
+            TargetState::Healthy => {}
+        }
+    }
+    if stale.is_empty() {
+        return tally;
+    }
+    if cleanup_disabled(common) {
+        tally.stale_left = stale.len();
+        tally
+            .stale_uuids
+            .extend(stale.iter().map(|(_, uuid)| (*uuid).to_string()));
+        return tally;
+    }
+    let ids: Vec<String> = stale.iter().map(|(id, _)| id.clone()).collect();
+    let result = vlt_heal::invalidate(&common.cwd, &state, &ids).await;
+    let hidden_failed = result
+        .failed
+        .iter()
+        .any(|(id, _)| id == VLT_HIDDEN_LOCK_REL);
+    for (id, uuid) in &stale {
+        let removed = result.removed.contains(id);
+        if removed && !hidden_failed {
+            tally.invalidated += 1;
+        } else {
+            tally.stale_left += 1;
+            tally.stale_uuids.insert((*uuid).to_string());
+        }
+    }
+    tally
+}
+
+fn reinstall_detail(tally: &HealTally) -> String {
+    if tally.stale_left > 0 {
+        format!(
+            "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
+             unpatched copies and `vlt install` will not refresh them; run `vlt ci` (or re-run \
+             without --no-vlt-install-cleanup).",
+            tally.stale_left
+        )
+    } else if tally.undeterminable > 0 {
+        undeterminable_detail(tally.undeterminable)
+    } else if tally.invalidated > 0 {
+        format!(
+            "vlt-lock.json pins Socket-patched packages; socket-patch removed {} stale installed \
+             copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), so node_modules \
+             is incomplete until you run `vlt install` (or `vlt ci`), which installs the patched \
+             packages. Note: `vlt update` re-resolves from the registry and drops these \
+             redirects.",
+            tally.invalidated
+        )
+    } else {
+        "vlt-lock.json pins Socket-patched packages; fresh checkouts install them with `vlt ci` \
+         or `vlt install --frozen-lockfile`. Note: `vlt update` re-resolves from the registry \
+         and drops these redirects."
+            .to_string()
+    }
+}
+
+fn undeterminable_detail(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages, but socket-patch could not check {n} \
+         installed copies (node_modules is a link, or no patch record or artifact was \
+         available); run `vlt ci` to be sure the patched packages are installed."
+    )
+}
+
+/// What this run's vlt rewrite needs from the rest of the hosted flow.
+pub(super) struct HealInputs<'a> {
+    /// The final `vlt-lock.json` (as written, or as a dry run would write it).
+    pub(super) final_lock: Option<&'a str>,
+    pub(super) preflight: &'a Preflight,
+    /// This run's fetched records merged with the ledger's, keyed by purl.
+    pub(super) records: &'a BTreeMap<String, PatchRecord>,
+    pub(super) confirmed: &'a [(String, String)],
+    pub(super) confirmed_vlt: &'a BTreeSet<String>,
+    pub(super) foreign: &'a BTreeSet<String>,
+    pub(super) rewrite_warning_codes: &'a [&'a str],
+}
+
+/// The heal after a hosted rewrite, the advisory, and the purls whose
+/// installed or next-installed bytes are not known to be patched (removed
+/// from the same run's in-run VEX attestation).
+pub(super) async fn heal_after_rewrite(
+    common: &crate::args::GlobalArgs,
+    inputs: &HealInputs<'_>,
+) -> StaleInstallOutcome {
+    let mut out = StaleInstallOutcome::default();
+    let owned: Vec<vlt_heal::OwnedInstance> = inputs
+        .final_lock
+        .map(|lock| vlt_heal::socket_owned_instances(lock, &patch_server_origins(common)))
+        .unwrap_or_default()
+        .into_iter()
+        .filter(|i| inputs.preflight.passed.contains(&i.patch_uuid))
+        .collect();
+    let mut tally = HealTally::default();
+    if !owned.is_empty() {
+        let targets: Vec<(Target<'_>, &str)> = owned
+            .iter()
+            .map(|i| {
+                let record = inputs.records.values().find(|r| r.uuid == i.patch_uuid);
+                (
+                    Target {
+                        dep_id: &i.dep_id,
+                        name: &i.name,
+                        lock_sha512: i.sha512.as_deref(),
+                        record,
+                        artifact: inputs.preflight.artifacts.get(&i.url).map(Vec::as_slice),
+                    },
+                    i.patch_uuid.as_str(),
+                )
+            })
+            .collect();
+        tally = heal_targets(common, &targets, Expected::Patched).await;
+        out.warnings.push(serde_json::json!({
+            "code": REINSTALL_REQUIRED,
+            "detail": reinstall_detail(&tally),
+        }));
+    }
+    let lock_discards = inputs
+        .rewrite_warning_codes
+        .iter()
+        .any(|code| DISCARDING_LOCK_WARNINGS.contains(code));
+    for (purl, uuid) in inputs.confirmed {
+        if !inputs.confirmed_vlt.contains(uuid) {
+            continue;
+        }
+        if lock_discards
+            || inputs.foreign.contains(uuid)
+            || tally.stale_uuids.contains(uuid)
+            || tally.undeterminable_uuids.contains(uuid)
+        {
+            out.stale_purls.insert(purl.clone());
+        }
+    }
+    out
+}
+
+/// The heal after rollback or remove restored the registry pins of
+/// `targets` (the ledger's vlt nodes of the unwound purls, collected before
+/// the revert): patched store copies are invalidated so the next install
+/// extracts the registry bytes. Returns `(code, detail)` warnings.
+pub(crate) async fn rollback_heal(
+    common: &crate::args::GlobalArgs,
+    targets: &[LedgerTarget],
+) -> Vec<(String, String)> {
+    if targets.is_empty() || common.dry_run {
+        return Vec::new();
+    }
+    let lock = socket_patch_core::utils::fs::read_regular_to_string(&common.cwd.join(VLT_LOCK))
+        .await
+        .ok();
+    let shas: Vec<Option<String>> = targets
+        .iter()
+        .map(|t| {
+            lock.as_deref()
+                .and_then(|l| vlt_heal::lock_sha512(l, &t.dep_id))
+        })
+        .collect();
+    let classified: Vec<(Target<'_>, &str)> = targets
+        .iter()
+        .zip(&shas)
+        .map(|(t, sha)| {
+            (
+                Target {
+                    dep_id: &t.dep_id,
+                    name: &t.name,
+                    lock_sha512: sha.as_deref(),
+                    record: t.record.as_ref(),
+                    artifact: None,
+                },
+                t.purl.as_str(),
+            )
+        })
+        .collect();
+    let tally = heal_targets(common, &classified, Expected::Pristine).await;
+    let restored: BTreeSet<&str> = targets.iter().map(|t| t.purl.as_str()).collect();
+    let detail = if tally.stale_left > 0 {
+        format!(
+            "restored registry pins for {} packages, but node_modules still holds {} patched \
+             copies and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
+             --no-vlt-install-cleanup)",
+            restored.len(),
+            tally.stale_left
+        )
+    } else if tally.undeterminable > 0 {
+        undeterminable_detail(tally.undeterminable)
+    } else if tally.invalidated > 0 {
+        format!(
+            "restored registry pins for {} packages; removed the patched installed copies, so \
+             node_modules is incomplete until you run `vlt install` (or `vlt ci`)",
+            restored.len()
+        )
+    } else {
+        return Vec::new();
+    };
+    vec![(REINSTALL_REQUIRED.to_string(), detail)]
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn test_api() -> socket_patch_core::api::client::ApiClient {
+        socket_patch_core::api::client::ApiClient::new(
+            socket_patch_core::api::client::ApiClientOptions {
+                api_url: "http://127.0.0.1:9".into(),
+                api_token: Some("secret".into()),
+                use_public_proxy: false,
+                org_slug: Some("org".into()),
+            },
+        )
+    }
+
+    #[test]
+    fn advisory_variants_follow_severity_order() {
+        let mut tally = HealTally::default();
+        assert!(reinstall_detail(&tally).contains("fresh checkouts install them with `vlt ci`"));
+        tally.invalidated = 2;
+        assert!(reinstall_detail(&tally).contains("socket-patch removed 2 stale installed copies"));
+        tally.undeterminable = 1;
+        assert!(reinstall_detail(&tally).contains("could not check 1 installed copies"));
+        tally.stale_left = 3;
+        assert!(reinstall_detail(&tally).contains("still holds 3 unpatched copies"));
+    }
+
+    #[tokio::test]
+    async fn offline_withholds_every_probed_dep_without_a_request() {
+        let server = wiremock::MockServer::start().await;
+        let tmp = tempfile::tempdir().unwrap();
+        let url = format!("{}/patch/npm/t/u/left-pad-1.3.0.tgz", server.uri());
+        std::fs::write(
+            tmp.path().join(VLT_LOCK),
+            "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
+             \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-old\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]\n  },\n  \"edges\": {}\n}\n",
+        )
+        .unwrap();
+        let dep = DepOverride {
+            ecosystem: "npm".into(),
+            name: "left-pad".into(),
+            namespace: None,
+            version: "1.3.0".into(),
+            token: String::new(),
+            patch_uuid: "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa".into(),
+            artifact_url: url.clone(),
+            berry_zip_url: None,
+            registry_override: None,
+            integrity: socket_patch_core::patch::redirect::Integrity {
+                sha512: Some("sha512-new".into()),
+                ..Default::default()
+            },
+        };
+        let common = crate::args::GlobalArgs {
+            cwd: tmp.path().to_path_buf(),
+            offline: true,
+            ..crate::args::GlobalArgs::default()
+        };
+        let api = test_api();
+        let pre = artifact_preflight(&common, &api, &[("pkg:npm/left-pad@1.3.0", &dep)]).await;
+        assert!(server.received_requests().await.unwrap().is_empty());
+        assert!(pre.passed.is_empty());
+        assert_eq!(
+            pre.withheld_everywhere
+                .get(&dep.patch_uuid)
+                .map(String::as_str),
+            Some("pkg:npm/left-pad@1.3.0")
+        );
+        assert_eq!(
+            pre.warnings[0]["detail"],
+            format!(
+                "vlt would fail to verify {url}: offline; nothing was written for \
+                 pkg:npm/left-pad@1.3.0"
+            )
+        );
+    }
+
+    #[tokio::test]
+    async fn no_vlt_lock_makes_no_request() {
+        let tmp = tempfile::tempdir().unwrap();
+        std::fs::write(tmp.path().join("package-lock.json"), "{}").unwrap();
+        let common = crate::args::GlobalArgs {
+            cwd: tmp.path().to_path_buf(),
+            ..crate::args::GlobalArgs::default()
+        };
+        let api = test_api();
+        let pre = artifact_preflight(&common, &api, &[]).await;
+        assert!(pre.passed.is_empty() && pre.warnings.is_empty());
+    }
+}
diff --git a/crates/socket-patch-cli/src/commands/scan/mod.rs b/crates/socket-patch-cli/src/commands/scan/mod.rs
index 0e727c38..4618af42 100644
--- a/crates/socket-patch-cli/src/commands/scan/mod.rs
+++ b/crates/socket-patch-cli/src/commands/scan/mod.rs
@@ -49,6 +49,7 @@ pub(crate) use self::discovery::unsupported_layout_warnings;
 use self::gc::gc_json;
 pub(crate) use self::hosted::boxed_run_redirect_selected;
 use self::hosted::run_redirect;
+pub(crate) use self::hosted::vlt_rollback_heal;
 pub(crate) use self::vendor_flow::{
     boxed_scan_vendor_step, preview_vendor_json, print_dry_run_refusals,
 };
@@ -183,7 +184,11 @@ pub fn resolve_mode_flags(args: &mut ScanArgs) -> Result<(), String> {
         return Err(format!(
             "{} cannot be used with --mode hosted: global installs have no project \
              lockfile to redirect",
-            if args.common.global { "--global" } else { "--global-prefix" },
+            if args.common.global {
+                "--global"
+            } else {
+                "--global-prefix"
+            },
         ));
     }
     if args.detached && args.mode != Some(ScanMode::Vendored) {
@@ -396,7 +401,10 @@ async fn embed_vex_human(
     // Dry-run twin of the JSON guard above: no generation, no file write.
     if common.dry_run {
         if !common.silent {
-            println!("{}", crate::commands::vex::format_vex_dry_run_skip("applied"));
+            println!(
+                "{}",
+                crate::commands::vex::format_vex_dry_run_skip("applied")
+            );
         }
         return base_code;
     }
@@ -756,7 +764,8 @@ fn overlap_from_states(
     // machinery blind to exactly that degraded ledger, so fall back to
     // matching the vendored purls against the recorded edit keys — npm
     // `node_modules/<name>` (possibly nested), pnpm/yarn/cargo/uv
-    // `<name>@<version>`, bun `<prefix>/<name>`, gem/composer/pypi bare
+    // `<name>@<version>` (vlt `<name>@<version>~<extra>` for a peer or
+    // modifier variant), bun `<prefix>/<name>`, gem/composer/pypi bare
     // `<name>`. Name-level matching can over-claim across versions, but the
     // direction gate in `classify_overlap_takeover` still requires the live
     // lock to prove one side before anything is reported.
@@ -776,6 +785,7 @@ fn overlap_from_states(
                 .any(|key| {
                     key == name
                         || key == format!("{name}@{version}")
+                        || key.starts_with(&format!("{name}@{version}~"))
                         || key.ends_with(&format!("/{name}"))
                 })
         })
@@ -1671,7 +1681,11 @@ pub async fn run(mut args: ScanArgs) -> i32 {
                     } else {
                         format!("{excluded_supplements} lockfile-only/vendor-ledger packages have")
                     },
-                    if excluded_supplements == 1 { "was" } else { "were" },
+                    if excluded_supplements == 1 {
+                        "was"
+                    } else {
+                        "were"
+                    },
                 ),
             ));
         }
@@ -2465,9 +2479,7 @@ pub async fn run(mut args: ScanArgs) -> i32 {
 
         // The rule is as wide as the table, but never wraps a terminal.
         let header = render::table_header(purl_w);
-        let cap = std::io::stdout()
-            .is_terminal()
-            .then(ui::stdout_width);
+        let cap = std::io::stdout().is_terminal().then(ui::stdout_width);
         let rule = render::ruler(
             std::iter::once(header.as_str()).chain(rows.iter().map(String::as_str)),
             cap,
@@ -2708,8 +2720,10 @@ pub async fn run(mut args: ScanArgs) -> i32 {
             println!("\nPatches to apply:\n");
         }
         for patch in &selected {
-            let severity =
-                ui::severity(render::highest_severity(patch).unwrap_or("unknown"), use_color);
+            let severity = ui::severity(
+                render::highest_severity(patch).unwrap_or("unknown"),
+                use_color,
+            );
             // The manifest already records a different patch for this
             // package: say so, and warn when the new one fixes less. Agent
             // mode only: vendored mode never writes the manifest.
@@ -2841,10 +2855,7 @@ pub async fn run(mut args: ScanArgs) -> i32 {
     // Download, then apply in place — or vendor (vendored mode, where the
     // download only saves and the vendor step below does the rest).
     let params = download_params(
-        &args,
-        /*save_only=*/ vendor,
-        /*json=*/ false,
-        silent,
+        &args, /*save_only=*/ vendor, /*json=*/ false, silent,
     );
 
     let code = if vendor {
@@ -3965,6 +3976,31 @@ mod tests {
         assert!(takeover.redirect.is_empty(), "{takeover:?}");
     }
 
+    #[tokio::test]
+    async fn degraded_ledger_matches_a_vlt_variant_key_at_the_tilde_boundary() {
+        for (key, overlaps) in [
+            ("minimist@1.2.2~peer.2", true),
+            ("minimist@1.2.2~_croot_s_g_s#a", true),
+            ("minimist@1.2.20~peer.2", false),
+        ] {
+            let tmp = tempfile::tempdir().unwrap();
+            let root = tmp.path();
+            let mut edit = redirect_edit("vlt-lock.json", key);
+            edit.kind = socket_patch_core::patch::redirect::vlt::KIND.to_string();
+            write_redirect_ledger_with_edits(root, &[], vec![edit]).await;
+            write_vendor_ledger_wired(root, &["pkg:npm/minimist@1.2.2"]).await;
+            assert_eq!(
+                overlapping_ledger_purls(root).await,
+                if overlaps {
+                    vec!["pkg:npm/minimist@1.2.2".to_string()]
+                } else {
+                    Vec::new()
+                },
+                "{key}"
+            );
+        }
+    }
+
     #[tokio::test]
     async fn following_the_vendored_remediation_clears_the_warning() {
         // Regression (sticky warning): the vendored remediation used to name
diff --git a/crates/socket-patch-cli/tests/cli_global_args.rs b/crates/socket-patch-cli/tests/cli_global_args.rs
index b0ca583c..e6f5c09a 100644
--- a/crates/socket-patch-cli/tests/cli_global_args.rs
+++ b/crates/socket-patch-cli/tests/cli_global_args.rs
@@ -114,6 +114,9 @@ fn global_flag_cases() -> Vec<(&'static str, Option<&'static str>, fn(&GlobalArg
         ("--no-npm-allow-remote-config", None, |c| {
             assert!(c.no_npm_allow_remote_config)
         }),
+        ("--no-vlt-install-cleanup", None, |c| {
+            assert!(c.no_vlt_install_cleanup)
+        }),
         ("--lock-timeout", Some("30"), |c| {
             assert_eq!(c.lock_timeout, Some(30))
         }),
@@ -228,17 +231,18 @@ fn global_flag_cases_cover_every_global_field() {
         no_telemetry: _,
         no_trust_lockfile_config: _,
         no_npm_allow_remote_config: _,
+        no_vlt_install_cleanup: _,
         strict: _,
         vendor_source: _,
         vendor_url: _,
         patch_server_url: _,
     } = common;
 
-    // 25 fields ↔ 25 long-flag cases. Bump both this count and add a case when
+    // 26 fields ↔ 26 long-flag cases. Bump both this count and add a case when
     // the destructure above forces you to add a field.
     assert_eq!(
         global_flag_cases().len(),
-        25,
+        26,
         "every GlobalArgs field needs a long-flag case in global_flag_cases()",
     );
 
@@ -659,7 +663,7 @@ fn bool_env_vars_reject_zero_and_falsey() {
 #[serial_test::serial]
 fn empty_bool_env_var_resolves_to_false_not_crash() {
     // (env var, accessor) for every boolean global.
-    let bool_vars: [(&str, fn(&GlobalArgs) -> bool); 12] = [
+    let bool_vars: [(&str, fn(&GlobalArgs) -> bool); 13] = [
         ("SOCKET_OFFLINE", |c| c.offline),
         ("SOCKET_STRICT", |c| c.strict),
         ("SOCKET_GLOBAL", |c| c.global),
@@ -676,6 +680,9 @@ fn empty_bool_env_var_resolves_to_false_not_crash() {
         ("SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG", |c| {
             c.no_npm_allow_remote_config
         }),
+        ("SOCKET_NO_VLT_INSTALL_CLEANUP", |c| {
+            c.no_vlt_install_cleanup
+        }),
     ];
 
     let saved = save_and_clear_global_env();
diff --git a/crates/socket-patch-cli/tests/cli_parse_get.rs b/crates/socket-patch-cli/tests/cli_parse_get.rs
index 83919aba..43709677 100644
--- a/crates/socket-patch-cli/tests/cli_parse_get.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_get.rs
@@ -56,6 +56,7 @@ const SOCKET_ENV_VARS: &[&str] = &[
     "SOCKET_TELEMETRY_DISABLED",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
     // GetArgs-specific
     "SOCKET_SAVE_ONLY",
     "SOCKET_ONE_OFF",
@@ -682,3 +683,14 @@ fn scrub_covers_every_global_env_var_clap_consults() {
         );
     }
 }
+
+#[test]
+#[serial_test::serial]
+fn no_vlt_install_cleanup_flag_parses_for_hosted_get() {
+    assert!(!parse_get(&["some-id"]).common.no_vlt_install_cleanup);
+    assert!(
+        parse_get(&["some-id", "--mode", "hosted", "--no-vlt-install-cleanup"])
+            .common
+            .no_vlt_install_cleanup
+    );
+}
diff --git a/crates/socket-patch-cli/tests/cli_parse_repair.rs b/crates/socket-patch-cli/tests/cli_parse_repair.rs
index 80a943fa..474b6fcb 100644
--- a/crates/socket-patch-cli/tests/cli_parse_repair.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_repair.rs
@@ -63,6 +63,7 @@ const SOCKET_ENV_VARS: &[&str] = &[
     "SOCKET_TELEMETRY_DISABLED",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
     // RepairArgs-specific
     "SOCKET_DOWNLOAD_ONLY",
 ];
@@ -547,3 +548,14 @@ fn gc_alias_parses_as_repair() {
         Err(e) => panic!("gc alias should parse: {e}"),
     }
 }
+
+#[test]
+#[serial_test::serial]
+fn no_vlt_install_cleanup_is_accepted_silently_by_repair() {
+    assert!(!parse_repair(&[]).common.no_vlt_install_cleanup);
+    assert!(
+        parse_repair(&["--no-vlt-install-cleanup"])
+            .common
+            .no_vlt_install_cleanup
+    );
+}
diff --git a/crates/socket-patch-cli/tests/cli_parse_scan.rs b/crates/socket-patch-cli/tests/cli_parse_scan.rs
index 4c846c38..5a6f7fe9 100644
--- a/crates/socket-patch-cli/tests/cli_parse_scan.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_scan.rs
@@ -44,6 +44,7 @@ const SCAN_ENV_VARS: &[&str] = &[
     "SOCKET_MANIFEST_PATH",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
     "SOCKET_OFFLINE",
     "SOCKET_ORG_SLUG",
     "SOCKET_PATCH_SERVER_URL",
@@ -935,3 +936,29 @@ fn detached_flag_is_hidden_from_help() {
     let folded = parse_and_resolve(&["--mode", "vendored", "--detached"]).expect("fold ok");
     assert!(folded.detached);
 }
+
+#[test]
+#[serial_test::serial]
+fn no_vlt_install_cleanup_flag_and_env_parse() {
+    assert!(
+        !parse_scan(&["--mode", "hosted"])
+            .common
+            .no_vlt_install_cleanup
+    );
+    assert!(
+        parse_scan(&["--mode", "hosted", "--no-vlt-install-cleanup"])
+            .common
+            .no_vlt_install_cleanup
+    );
+    let from_env = with_clean_env(|| {
+        std::env::set_var("SOCKET_NO_VLT_INSTALL_CLEANUP", "1");
+        let cli = Cli::try_parse_from(["socket-patch", "scan", "--mode", "hosted"]);
+        std::env::remove_var("SOCKET_NO_VLT_INSTALL_CLEANUP");
+        cli
+    })
+    .expect("parse");
+    match from_env.command {
+        Commands::Scan(a) => assert!(a.common.no_vlt_install_cleanup),
+        _ => panic!("expected Scan"),
+    }
+}
diff --git a/crates/socket-patch-cli/tests/cli_parse_vendor.rs b/crates/socket-patch-cli/tests/cli_parse_vendor.rs
index baf7c6e0..9106903c 100644
--- a/crates/socket-patch-cli/tests/cli_parse_vendor.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_vendor.rs
@@ -60,6 +60,7 @@ const SOCKET_ENV_VARS: &[&str] = &[
     "SOCKET_TELEMETRY_DISABLED",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
     // VendorArgs-specific
     "SOCKET_FORCE",
     "SOCKET_VENDOR_REVERT",
@@ -631,3 +632,16 @@ fn bare_force_does_not_consume_next_token() {
         Err(err) => assert_eq!(err.kind(), clap::error::ErrorKind::UnknownArgument),
     }
 }
+
+#[test]
+#[serial_test::serial]
+fn no_vlt_install_cleanup_is_accepted_silently_by_vendor() {
+    assert!(
+        parse_vendor(&["--no-vlt-install-cleanup"])
+            .common
+            .no_vlt_install_cleanup
+    );
+    let from_env =
+        parse_vendor_with_env(&[("SOCKET_NO_VLT_INSTALL_CLEANUP", "true")], &[]).expect("parse");
+    assert!(from_env.common.no_vlt_install_cleanup);
+}
diff --git a/crates/socket-patch-cli/tests/cli_parse_vex.rs b/crates/socket-patch-cli/tests/cli_parse_vex.rs
index 03276e8e..d7d65fd2 100644
--- a/crates/socket-patch-cli/tests/cli_parse_vex.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_vex.rs
@@ -59,6 +59,7 @@ const SOCKET_ENV_VARS: &[&str] = &[
     "SOCKET_TELEMETRY_DISABLED",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
     // VexArgs / VexEmbedArgs
     "SOCKET_VEX",
     "SOCKET_VEX_OUTPUT",
@@ -217,6 +218,7 @@ struct Snap {
     no_telemetry: bool,
     no_trust_lockfile_config: bool,
     no_npm_allow_remote_config: bool,
+    no_vlt_install_cleanup: bool,
     output: Option<PathBuf>,
     product: Option<String>,
     no_verify: bool,
@@ -251,6 +253,7 @@ fn snapshot(a: &VexArgs) -> Snap {
         no_telemetry: a.common.no_telemetry,
         no_trust_lockfile_config: a.common.no_trust_lockfile_config,
         no_npm_allow_remote_config: a.common.no_npm_allow_remote_config,
+        no_vlt_install_cleanup: a.common.no_vlt_install_cleanup,
         output: a.output.clone(),
         product: a.product.clone(),
         no_verify: a.no_verify,
@@ -292,6 +295,7 @@ fn expected_defaults() -> Snap {
         no_telemetry: false,
         no_trust_lockfile_config: false,
         no_npm_allow_remote_config: false,
+        no_vlt_install_cleanup: false,
         output: None,
         product: None,
         no_verify: false,
@@ -356,3 +360,18 @@ fn bare_flags_still_parse_without_env() {
         _ => panic!("expected Vex"),
     }
 }
+
+#[test]
+#[serial_test::serial]
+fn no_vlt_install_cleanup_env_is_accepted_silently_by_vex() {
+    let cli = parse_with_env(
+        "SOCKET_NO_VLT_INSTALL_CLEANUP",
+        "1",
+        &["socket-patch", "vex"],
+    )
+    .expect("SOCKET_NO_VLT_INSTALL_CLEANUP=1 must parse on vex");
+    match cli.command {
+        Commands::Vex(a) => assert!(a.common.no_vlt_install_cleanup),
+        _ => panic!("expected Vex"),
+    }
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_rollback.rs b/crates/socket-patch-cli/tests/covgap_commands_rollback.rs
index d9ecc92b..185edeef 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_rollback.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_rollback.rs
@@ -2218,9 +2218,8 @@ mod interactive {
             .expect("spawn socket-patch in PTY");
         drop(pair.slave);
 
-        let reader_handle = crate::pty_io::PtyOutput::spawn(
-            pair.master.try_clone_reader().expect("clone reader"),
-        );
+        let reader_handle =
+            crate::pty_io::PtyOutput::spawn(pair.master.try_clone_reader().expect("clone reader"));
 
         let mut killer = child.clone_killer();
         std::thread::spawn(move || {
@@ -2270,9 +2269,7 @@ mod interactive {
         );
         assert_eq!(code, 0, "declining must exit 0; got: {output}");
         assert!(
-            output.contains(
-                "Roll back 1 patch and remove it from the local manifest? [Y/n]"
-            ),
+            output.contains("Roll back 1 patch and remove it from the local manifest? [Y/n]"),
             "the composed confirm prompt must render verbatim; got: {output}"
         );
         assert!(
@@ -3345,3 +3342,106 @@ fn empty_manifest_announces_no_patches() {
         "the empty-manifest announce must print; stdout=\n{stdout}\nstderr=\n{stderr}"
     );
 }
+
+// ───────────────────────── hosted vlt heal ─────────────────────────
+
+const VLT_UUID: &str = "88888888-8888-4888-8888-888888888888";
+const VLT_ID: &str = "~npm~left-pad@1.3.0";
+const VLT_REGISTRY_SHA: &str = "sha512-REGISTRY==";
+const VLT_PATCHED_SHA: &str = "sha512-PATCHED==";
+
+fn vlt_entry(sha: &str, url: &str) -> String {
+    format!("\"{VLT_ID}\": [0,\"left-pad\",\"{sha}\",\"{url}\"]")
+}
+
+fn vlt_lock_text(entry: &str) -> String {
+    format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {entry}\n  }},\n  \"edges\": {{}}\n}}\n"
+    )
+}
+
+/// A redirected vlt project whose store holds the patched copy `vlt
+/// install` extracted, with the hidden lock recording the hosted pin.
+fn write_vlt_hosted_fixture(root: &Path) -> (String, PathBuf) {
+    let registry = vlt_entry(
+        VLT_REGISTRY_SHA,
+        "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+    );
+    let hosted = vlt_entry(
+        VLT_PATCHED_SHA,
+        &format!("https://patch.socket.dev/patch/npm/t/{VLT_UUID}/left-pad-1.3.0.tgz"),
+    );
+    std::fs::write(root.join("vlt-lock.json"), vlt_lock_text(&hosted)).unwrap();
+    let store = root
+        .join("node_modules/.vlt")
+        .join(VLT_ID)
+        .join("node_modules/left-pad");
+    std::fs::create_dir_all(&store).unwrap();
+    std::fs::write(store.join("index.js"), b"patched").unwrap();
+    std::fs::write(
+        root.join("node_modules/.vlt-lock.json"),
+        vlt_lock_text(&hosted),
+    )
+    .unwrap();
+    let mut record = hosted_record(VLT_UUID);
+    record.files.insert(
+        "package/index.js".to_string(),
+        PatchFileInfo {
+            before_hash: git_sha256(b"pristine"),
+            after_hash: git_sha256(b"patched"),
+        },
+    );
+    write_hosted_ledger(
+        root,
+        vec![("pkg:npm/left-pad@1.3.0", record)],
+        vec![FileEdit {
+            path: "vlt-lock.json".to_string(),
+            kind: "redirect_vlt_lock_node".to_string(),
+            action: "rewritten".to_string(),
+            key: Some("left-pad@1.3.0".to_string()),
+            original: Some(json!(registry)),
+            new: Some(json!(hosted)),
+        }],
+    );
+    (vlt_lock_text(&registry), store)
+}
+
+/// A dry-run rollback previews the vlt unwind but deletes nothing and
+/// says nothing about installed copies; the wet human run restores the
+/// registry pin, invalidates the patched store entry and prints the
+/// advisory as a warning line.
+#[test]
+fn vlt_hosted_rollback_dry_run_keeps_the_store_and_wet_human_run_heals() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let (registry_lock, store) = write_vlt_hosted_fixture(root);
+    let hosted_lock = std::fs::read_to_string(root.join("vlt-lock.json")).unwrap();
+
+    let (code, stdout, stderr) = run(root, &["rollback", "--dry-run", "--yes", "--offline"]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert!(
+        !stderr.contains("redirect_vlt_reinstall_required"),
+        "{stderr}"
+    );
+    assert_eq!(
+        std::fs::read_to_string(root.join("vlt-lock.json")).unwrap(),
+        hosted_lock
+    );
+    assert!(store.join("index.js").exists());
+
+    let (code, stdout, stderr) = run(root, &["rollback", "--yes", "--offline"]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert_eq!(
+        std::fs::read_to_string(root.join("vlt-lock.json")).unwrap(),
+        registry_lock
+    );
+    assert!(
+        stderr.contains(
+            "Warning (redirect_vlt_reinstall_required): restored registry pins for 1 packages; \
+             removed the patched installed copies"
+        ),
+        "{stderr}"
+    );
+    assert!(!store.exists());
+    assert!(!root.join("node_modules/.vlt-lock.json").exists());
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_scan_hosted.rs b/crates/socket-patch-cli/tests/covgap_commands_scan_hosted.rs
index a90a6113..b99cb22a 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_scan_hosted.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_scan_hosted.rs
@@ -2493,3 +2493,132 @@ async fn human_pnpm_rerun_prints_only_the_reminder_and_heal_restores_guidance()
         "the heal run prints the full guidance again; stderr=\n{stderr}"
     );
 }
+
+// ───────────────────────────── vlt ─────────────────────────────
+
+/// A vendored vlt entry is never reverted for a hosted takeover the vlt
+/// rewriter would then refuse: the lock-level refusal (here a BOM) is known
+/// first, the purl is skipped with that code, and the vendored ledger and
+/// the lock stay byte-identical.
+#[tokio::test]
+async fn vlt_takeover_refusal_before_revert() {
+    let server = MockServer::start().await;
+    mock_discovery(&server, PURL, UUID).await;
+    mock_granted_reference(&server, UUID, PURL, HOSTED_URL).await;
+
+    let tmp = tempfile::tempdir().unwrap();
+    write_npm_project(tmp.path(), NAME);
+    std::fs::remove_file(tmp.path().join("package-lock.json")).unwrap();
+    let lock = format!(
+        "\u{feff}{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+         \"~npm~{NAME}@{VERSION}\": [0,\"{NAME}\",\"{UPSTREAM_SHA512}\",\"https://registry.npmjs.org/{NAME}/-/{NAME}-{VERSION}.tgz\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+    );
+    std::fs::write(tmp.path().join("vlt-lock.json"), &lock).unwrap();
+    write_vendor_state(tmp.path(), PURL, UUID, "vlt");
+    let state_before = std::fs::read(tmp.path().join(".socket/vendor/state.json")).unwrap();
+
+    let (code, doc) = scan_hosted_json(tmp.path(), &server.uri(), &[], &[]);
+
+    assert_eq!(code, 0, "{doc:#}");
+    assert_eq!(doc["redirect"]["redirected"], 0, "{doc:#}");
+    assert!(
+        doc["redirect"]["skipped"].as_array().is_some_and(|s| s
+            .iter()
+            .any(|e| e["purl"] == PURL && e["reason"] == "redirect_vlt_lock_unsupported")),
+        "{doc:#}"
+    );
+    assert!(warning_detail(&doc, "redirect_vlt_lock_unsupported").contains("BOM"));
+    assert!(!warning_codes(&doc).contains(&"redirect_vendored_revert_failed".to_string()));
+    assert_eq!(
+        std::fs::read(tmp.path().join(".socket/vendor/state.json")).unwrap(),
+        state_before
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap(),
+        lock
+    );
+}
+
+/// With `bun.lockb` beside a vlt-driven `vlt-lock.json`, the vlt rules
+/// decide npm confirmation before the binary-bun rule: the binary rewrite
+/// lands, but the vlt rewriter refused the dep, so it is not confirmed.
+#[tokio::test]
+async fn vlt_decides_before_binary_bun_and_a_refused_uuid_is_never_confirmed() {
+    use base64::Engine as _;
+    use sha2::Digest as _;
+    let purl = "pkg:npm/minimist@1.2.2";
+    let body = b"minimist tarball".to_vec();
+    let sri = format!(
+        "sha512-{}",
+        base64::engine::general_purpose::STANDARD.encode(sha2::Sha512::digest(&body))
+    );
+    let server = MockServer::start().await;
+    let url = format!("{}/patch/npm/minimist-1.2.2.tgz", server.uri());
+    mock_discovery(&server, purl, UUID).await;
+    mock_reference_results(
+        &server,
+        json!({ UUID: {
+            "status": "granted", "url": url, "purl": purl,
+            "artifacts": [{"kind": "tarball", "url": url, "integrity": {"sha512": sri}}],
+            "registryOverride": null,
+        }}),
+    )
+    .await;
+    mock_view(&server, UUID, purl).await;
+    Mock::given(method("GET"))
+        .and(path("/patch/npm/minimist-1.2.2.tgz"))
+        .respond_with(ResponseTemplate::new(200).set_body_bytes(body))
+        .mount(&server)
+        .await;
+
+    let run = |off_grammar: bool| {
+        let tmp = tempfile::tempdir().unwrap();
+        let original =
+            include_bytes!("../../socket-patch-core/tests/fixtures/bun-lockb/1.1.45/bun.lockb");
+        std::fs::write(tmp.path().join("bun.lockb"), original).unwrap();
+        std::fs::write(
+            tmp.path().join("package.json"),
+            include_bytes!("../../socket-patch-core/tests/fixtures/bun-lockb/1.1.45/package.json"),
+        )
+        .unwrap();
+        let space = if off_grammar { " " } else { "" };
+        std::fs::write(
+            tmp.path().join("vlt-lock.json"),
+            format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+                 \"~npm~is-number@7.0.0\": [0,\"is-number\"],\n    \
+                 \"~npm~minimist@1.2.2\": [0,{space}\"minimist\",\"{UPSTREAM_SHA512}\",\"https://registry.npmjs.org/minimist/-/minimist-1.2.2.tgz\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+            ),
+        )
+        .unwrap();
+        let pkg = tmp.path().join("node_modules/minimist");
+        std::fs::create_dir_all(&pkg).unwrap();
+        std::fs::write(
+            pkg.join("package.json"),
+            r#"{ "name": "minimist", "version": "1.2.2" }"#,
+        )
+        .unwrap();
+        std::fs::create_dir_all(tmp.path().join("node_modules/.vlt")).unwrap();
+        let (code, doc) = scan_hosted_json(tmp.path(), &server.uri(), &[], &[("PATH", "")]);
+        assert_eq!(code, 0, "{doc:#}");
+        (doc, tmp)
+    };
+
+    let (refused, tmp) = run(true);
+    assert!(
+        warning_codes(&refused).contains(&"redirect_vlt_unsupported_lock_key".to_string()),
+        "{refused:#}"
+    );
+    assert!(
+        refused["redirect"]["rewrittenFiles"]
+            .as_array()
+            .unwrap()
+            .contains(&json!("bun.lockb")),
+        "the binary lock is still rewritten: {refused:#}"
+    );
+    assert_eq!(refused["redirect"]["redirected"], 0, "{refused:#}");
+    drop(tmp);
+
+    let (confirmed, _tmp) = run(false);
+    assert_eq!(confirmed["redirect"]["redirected"], 1, "{confirmed:#}");
+}
diff --git a/crates/socket-patch-cli/tests/hosted_symlinked_files.rs b/crates/socket-patch-cli/tests/hosted_symlinked_files.rs
index 7bf241a0..c58107ca 100644
--- a/crates/socket-patch-cli/tests/hosted_symlinked_files.rs
+++ b/crates/socket-patch-cli/tests/hosted_symlinked_files.rs
@@ -30,6 +30,8 @@ use wiremock::{Mock, MockServer, ResponseTemplate};
 
 #[path = "common/mod.rs"]
 mod common;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
 
 const ORG: &str = "test-org";
 const CODE: &str = "redirect_symlinked_file_unsupported";
@@ -166,7 +168,9 @@ fn build_wheel(name: &str, version: &str) -> (Vec<u8>, String) {
             .start_file(format!("{name}-{version}.dist-info/METADATA"), opts)
             .unwrap();
         writer
-            .write_all(format!("Metadata-Version: 2.1\nName: {name}\nVersion: {version}\n\n").as_bytes())
+            .write_all(
+                format!("Metadata-Version: 2.1\nName: {name}\nVersion: {version}\n\n").as_bytes(),
+            )
             .unwrap();
         writer.finish().unwrap();
     }
@@ -257,7 +261,10 @@ fn symlink_away(root: &Path, shared: &Path, name: &str) -> std::path::PathBuf {
     std::fs::create_dir_all(shared).unwrap();
     let target = shared.join(name);
     std::fs::rename(root.join(name), &target).unwrap();
-    let rel = format!("../{}/{name}", shared.file_name().unwrap().to_str().unwrap());
+    let rel = format!(
+        "../{}/{name}",
+        shared.file_name().unwrap().to_str().unwrap()
+    );
     std::os::unix::fs::symlink(&rel, root.join(name)).unwrap();
     assert!(is_symlink(&root.join(name)) && root.join(name).exists());
     target
@@ -317,7 +324,10 @@ fn assert_refused_untouched(
     target: &Path,
     target_before: &[u8],
 ) {
-    assert_eq!(code, 1, "a symlinked rewrite target must fail the run: {doc:#}");
+    assert_eq!(
+        code, 1,
+        "a symlinked rewrite target must fail the run: {doc:#}"
+    );
     assert_eq!(doc["status"], "error", "{doc:#}");
     assert_eq!(doc["errorCode"], CODE, "{doc:#}");
     let message = doc["error"].as_str().unwrap_or_else(|| panic!("{doc:#}"));
@@ -459,11 +469,9 @@ async fn hosted_rewrites_the_same_lock_once_it_is_a_regular_file() {
     let (code, doc, stderr) = scan_hosted_json(&root, &server.uri());
     assert_eq!(code, 0, "{doc:#}\n{stderr}");
     assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
-    assert!(
-        std::fs::read_to_string(root.join("package-lock.json"))
-            .unwrap()
-            .contains(NPM_HOSTED_URL)
-    );
+    assert!(std::fs::read_to_string(root.join("package-lock.json"))
+        .unwrap()
+        .contains(NPM_HOSTED_URL));
     assert!(root.join(LEDGER_REL).exists());
 }
 
@@ -541,3 +549,60 @@ async fn hosted_scan_returns_with_fifo_candidate() {
         "the FIFO must not be replaced by a rewrite"
     );
 }
+
+/// vlt: `vlt-lock.json` is in the rewrite set, so a symlinked lock is
+/// refused by the same guard, before the ledger and before any write.
+#[tokio::test]
+async fn hosted_refuses_symlinked_vlt_lock_before_ledger_write() {
+    use vlt_hosted_common as vlt;
+    let server = MockServer::start().await;
+    vlt::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path().join("proj");
+    std::fs::create_dir_all(&root).unwrap();
+    vlt::write_vlt_project(&root, vlt::Era::V1);
+    let target = symlink_away(&root, &tmp.path().join("shared"), "vlt-lock.json");
+    let lock_before = std::fs::read(&target).unwrap();
+
+    let (code, doc, _stderr) = scan_hosted_json(&root, &server.uri());
+
+    assert_refused_untouched(code, &doc, &root, "vlt-lock.json", &target, &lock_before);
+}
+
+/// A FIFO planted as `vlt-lock.json` is skipped by the preflight read and
+/// the candidate read alike: the scan returns and never probes an artifact.
+#[tokio::test]
+async fn hosted_scan_returns_with_fifo_vlt_lock() {
+    use vlt_hosted_common as vlt;
+    let server = MockServer::start().await;
+    vlt::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path().join("proj");
+    std::fs::create_dir_all(&root).unwrap();
+    vlt::write_vlt_project(&root, vlt::Era::V1);
+    let fifo = root.join("vlt-lock.json");
+    std::fs::remove_file(&fifo).unwrap();
+    mkfifo(&fifo);
+
+    let (tx, rx) = std::sync::mpsc::channel();
+    let api = server.uri();
+    let run_root = root.clone();
+    std::thread::spawn(move || {
+        let _ = tx.send(scan_hosted(&run_root, &api, &["--json"]));
+    });
+    let deadline = std::time::Duration::from_secs(90);
+    let Ok((code, stdout, stderr)) = rx.recv_timeout(deadline) else {
+        use std::os::unix::fs::OpenOptionsExt as _;
+        let _ = std::fs::OpenOptions::new()
+            .write(true)
+            .custom_flags(libc::O_NONBLOCK)
+            .open(&fifo);
+        panic!("scan --mode hosted wedged on a FIFO vlt-lock.json for {deadline:?}");
+    };
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    let doc: Value = serde_json::from_str(&stdout).unwrap();
+    assert_eq!(doc["redirect"]["redirected"], 0, "{doc:#}");
+    assert_eq!(vlt::artifact_requests(&server).await, 0);
+    let meta = std::fs::symlink_metadata(&fifo).unwrap();
+    assert!(std::os::unix::fs::FileTypeExt::is_fifo(&meta.file_type()));
+}
diff --git a/crates/socket-patch-cli/tests/in_process_get_hosted_ecosystems.rs b/crates/socket-patch-cli/tests/in_process_get_hosted_ecosystems.rs
index 250e6345..1a8c2a21 100644
--- a/crates/socket-patch-cli/tests/in_process_get_hosted_ecosystems.rs
+++ b/crates/socket-patch-cli/tests/in_process_get_hosted_ecosystems.rs
@@ -26,6 +26,8 @@ use std::path::Path;
 mod vex_e2e_common;
 #[path = "vex_pipenv_pip_steps/mod.rs"]
 mod vex_pipenv_pip_steps;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
 
 use serial_test::serial;
 use socket_patch_cli::commands::get::GetArgs;
@@ -957,3 +959,63 @@ async fn deno_hosted_grant_lands_nothing() {
         .unwrap();
     }
 }
+
+/// vlt: `get <uuid> --mode hosted` over a lock-only vlt project pins the
+/// node (UUID identifiers skip installed narrowing), preflights the
+/// artifact, heals a warm store and emits the reinstall advisory.
+#[tokio::test]
+async fn vlt_hosted_get_pins_the_node_heals_and_emits_the_advisory() {
+    use vlt_hosted_common as vlt;
+    let server = MockServer::start().await;
+    vlt::mock_all(&server).await;
+    for warm in [false, true] {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        vlt::write_package_json(root);
+        std::fs::write(
+            root.join("vlt-lock.json"),
+            vlt::vlt_lock(vlt::Era::V1, &[vlt::registry_node(vlt::TILDE_ID)]),
+        )
+        .unwrap();
+        if warm {
+            vlt::install_store(root, vlt::TILDE_ID, vlt::PRISTINE);
+            vlt::write_hidden_lock(root, &[vlt::registry_node(vlt::TILDE_ID)]);
+        }
+        let cwd = root.to_str().unwrap().to_string();
+        let uri = server.uri();
+
+        let (code, doc, stderr) = vlt::run_json(
+            root,
+            &[
+                "get",
+                vlt::UUID,
+                "--mode",
+                "hosted",
+                "--yes",
+                "--cwd",
+                &cwd,
+                "--api-url",
+                &uri,
+                "--org",
+                vlt::ORG,
+                "--api-token",
+                "fake",
+            ],
+            &[],
+        );
+
+        assert_eq!(code, 0, "{doc:#}\n{stderr}");
+        assert_eq!(vlt::redirected(&doc), 1, "{doc:#}");
+        assert_eq!(
+            vlt::read(root, "vlt-lock.json"),
+            vlt::vlt_lock(vlt::Era::V1, &[vlt::pinned_node(vlt::TILDE_ID, &server)])
+        );
+        let expected = if warm {
+            vlt::advisory_invalidated(1)
+        } else {
+            vlt::ADVISORY_NOTHING_STALE.to_string()
+        };
+        assert_eq!(vlt::warning_detail(&doc, vlt::ADVISORY), expected);
+        assert!(!vlt::store_dir(root, vlt::TILDE_ID).exists());
+    }
+}
diff --git a/crates/socket-patch-cli/tests/in_process_redirect.rs b/crates/socket-patch-cli/tests/in_process_redirect.rs
index abdb014e..8fd40598 100644
--- a/crates/socket-patch-cli/tests/in_process_redirect.rs
+++ b/crates/socket-patch-cli/tests/in_process_redirect.rs
@@ -27,6 +27,10 @@ mod vex_e2e_common;
 #[allow(clippy::duplicate_mod)]
 #[path = "vex_e2e_common/bun.rs"]
 mod bun_vex;
+#[path = "in_process_redirect/vlt.rs"]
+mod vlt;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
 
 const ORG: &str = "test-org";
 const NAME: &str = "in-proc-redirect";
diff --git a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
new file mode 100644
index 00000000..b66c17b0
--- /dev/null
+++ b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
@@ -0,0 +1,1057 @@
+//! Hosted vlt legs (DESIGN §3, §8.2): the rewrite through the CLI, the
+//! artifact preflight, the warm-tree heal with its advisory, and the in-run
+//! VEX exclusion. Every run is the scrubbed subprocess binary, so the
+//! `--json` envelope is read back and no parent env is mutated.
+
+use std::path::Path;
+
+use serde_json::Value;
+use wiremock::matchers::{method, path};
+use wiremock::{Mock, MockServer, ResponseTemplate};
+
+use crate::vlt_hosted_common::*;
+
+fn ledger(root: &Path) -> Value {
+    serde_json::from_str(&read(root, ".socket/vendor/redirect-state.json")).unwrap()
+}
+
+fn vlt_edit_keys(root: &Path) -> Vec<String> {
+    ledger(root)["edits"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .filter(|e| e["kind"] == "redirect_vlt_lock_node")
+        .map(|e| e["key"].as_str().unwrap().to_string())
+        .collect()
+}
+
+fn skipped_reasons(doc: &Value) -> Vec<String> {
+    doc["redirect"]["skipped"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .filter_map(|s| s["reason"].as_str().map(str::to_string))
+        .collect()
+}
+
+fn lock_with(era: Era, nodes: &[String]) -> String {
+    vlt_lock(era, nodes)
+}
+
+async fn assert_rewrites(era: Era, expected_warnings: &[&str]) {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), era);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(era, &[pinned_node(era.dep_id(), &server)])
+    );
+    assert_eq!(
+        doc["redirect"]["rewrittenFiles"],
+        serde_json::json!(["vlt-lock.json"])
+    );
+    assert_eq!(warning_codes(&doc), expected_warnings, "{doc:#}");
+    assert_eq!(warning_detail(&doc, ADVISORY), ADVISORY_NOTHING_STALE);
+    assert_eq!(vlt_edit_keys(tmp.path()), ["left-pad@1.3.0"]);
+    assert!(ledger(tmp.path())["records"][PURL].is_object());
+    assert_eq!(artifact_requests(&server).await, 1);
+}
+
+#[tokio::test]
+async fn scan_redirect_rewrites_vlt_lock_v1() {
+    assert_rewrites(Era::V1, &[ADVISORY]).await;
+}
+
+#[tokio::test]
+async fn scan_redirect_rewrites_vlt_lock_v0() {
+    assert_rewrites(Era::V0, &[ADVISORY]).await;
+}
+
+#[tokio::test]
+async fn scan_redirect_rewrites_vlt_lock_a0() {
+    assert_rewrites(
+        Era::A0,
+        &[
+            "redirect_vlt_lockfile_version_missing",
+            "redirect_vlt_old_lockfile_ignored",
+            ADVISORY,
+        ],
+    )
+    .await;
+}
+
+#[tokio::test]
+async fn scan_redirect_refuses_vlt_lock_v2() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let v2 = read(tmp.path(), "vlt-lock.json")
+        .replace("\"lockfileVersion\": 1", "\"lockfileVersion\": 2");
+    std::fs::write(tmp.path().join("vlt-lock.json"), &v2).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0);
+    assert_eq!(warning_codes(&doc), ["redirect_vlt_lock_unsupported"]);
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), v2);
+    assert_eq!(artifact_requests(&server).await, 0);
+    assert!(!ledger_path(tmp.path()).exists());
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_rerun_noop_keeps_ledger() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    scan_hosted(tmp.path(), &server, &[], &[]);
+    let lock = read(tmp.path(), "vlt-lock.json");
+    let ledger_bytes = read(tmp.path(), ".socket/vendor/redirect-state.json");
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(
+        redirected(&doc),
+        1,
+        "a pinned lock stays confirmed: {doc:#}"
+    );
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    assert_eq!(
+        read(tmp.path(), ".socket/vendor/redirect-state.json"),
+        ledger_bytes
+    );
+    assert_eq!(vlt_edit_keys(tmp.path()), ["left-pad@1.3.0"]);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_crlf() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let other = "\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string();
+    let crlf = lock_with(Era::V1, &[registry_node(TILDE_ID), other.clone()]).replace('\n', "\r\n");
+    std::fs::write(tmp.path().join("vlt-lock.json"), &crlf).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(Era::V1, &[pinned_node(TILDE_ID, &server), other]).replace('\n', "\r\n")
+    );
+    let original = ledger(tmp.path())["edits"][0]["original"]
+        .as_str()
+        .unwrap()
+        .to_string();
+    assert!(
+        !original.contains('\r') && !original.ends_with(','),
+        "{original:?}"
+    );
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_peer_instances() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let peer = "~npm~left-pad@1.3.0~peer.2";
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(Era::V1, &[registry_node(TILDE_ID), registry_node(peer)]),
+    )
+    .unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(
+            Era::V1,
+            &[pinned_node(TILDE_ID, &server), pinned_node(peer, &server)]
+        )
+    );
+    assert_eq!(
+        vlt_edit_keys(tmp.path()),
+        ["left-pad@1.3.0", "left-pad@1.3.0~peer.2"]
+    );
+    assert_eq!(
+        artifact_requests(&server).await,
+        1,
+        "one GET per distinct artifact URL"
+    );
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_sibling_package_lock_ambiguous() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(warning_codes(&doc).contains(&"redirect_vlt_sibling_lockfiles".to_string()));
+    assert!(read(tmp.path(), "package-lock.json").contains(&artifact_url(&server)));
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(Era::V1, &[pinned_node(TILDE_ID, &server)])
+    );
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_sibling_package_lock_vlt_installed_does_not_confirm_refused() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+    let off_grammar =
+        format!("\"{TILDE_ID}\": [0, \"{NAME}\", \"{UPSTREAM_SHA512}\", \"{REGISTRY_URL}\"]");
+    let lock = lock_with(
+        Era::V1,
+        &["\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string(), off_grammar],
+    );
+    std::fs::write(tmp.path().join("vlt-lock.json"), &lock).unwrap();
+    write_hidden_lock(tmp.path(), &[]);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(
+        redirected(&doc),
+        0,
+        "vlt drives and refused the dep: the package-lock rewrite confirms nothing: {doc:#}"
+    );
+    assert!(warning_codes(&doc).contains(&"redirect_vlt_unsupported_lock_key".to_string()));
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    assert!(!ledger_path(tmp.path()).exists() || ledger(tmp.path())["records"][PURL].is_null());
+}
+
+// ── artifact preflight ───────────────────────────────────────────────────
+
+async fn assert_preflight_refuses(response: ResponseTemplate, reason: &str) {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_reference(&server).await;
+    mock_view(&server).await;
+    mock_artifact_with(&server, response).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let lock = read(tmp.path(), "vlt-lock.json");
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0, "{doc:#}");
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    assert!(!ledger_path(tmp.path()).exists(), "nothing is written");
+    assert_eq!(
+        warning_detail(&doc, UNVERIFIABLE),
+        format!(
+            "vlt would fail to verify {}: {reason}; nothing was written for {PURL}",
+            artifact_url(&server)
+        )
+    );
+    assert_eq!(skipped_reasons(&doc), [UNVERIFIABLE]);
+    assert!(!warning_codes(&doc).contains(&ADVISORY.to_string()));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_content_encoding_refused() {
+    assert_preflight_refuses(
+        ResponseTemplate::new(200)
+            .insert_header("content-encoding", "gzip")
+            .set_body_bytes(gzip(&patched_tarball())),
+        "content-encoding gzip",
+    )
+    .await;
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_identity_passes() {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_reference(&server).await;
+    mock_view(&server).await;
+    mock_artifact_with(
+        &server,
+        ResponseTemplate::new(200)
+            .insert_header("content-encoding", "identity")
+            .set_body_bytes(patched_tarball()),
+    )
+    .await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(!warning_codes(&doc).contains(&UNVERIFIABLE.to_string()));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_sha512_mismatch() {
+    assert_preflight_refuses(
+        ResponseTemplate::new(200).set_body_bytes(b"other bytes".to_vec()),
+        "sha512 mismatch",
+    )
+    .await;
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_http_404() {
+    assert_preflight_refuses(ResponseTemplate::new(404), "http 404").await;
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_http_500() {
+    assert_preflight_refuses(ResponseTemplate::new(500), "http 500").await;
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_fetch_error() {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    let url = format!("http://127.0.0.1:9{}", artifact_path());
+    mock_reference_at(&server, &url, &sha512_sri(&patched_tarball())).await;
+    mock_view(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let lock = read(tmp.path(), "vlt-lock.json");
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0);
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    let detail = warning_detail(&doc, UNVERIFIABLE);
+    assert!(
+        detail.starts_with(&format!("vlt would fail to verify {url}: fetch error "))
+            && detail.ends_with(&format!("; nothing was written for {PURL}")),
+        "{detail}"
+    );
+}
+
+async fn redirect_chain(hops: usize) -> (Value, tempfile::TempDir) {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_view(&server).await;
+    for hop in 0..hops {
+        Mock::given(method("GET"))
+            .and(path(format!("/hop/{hop}")))
+            .respond_with(
+                ResponseTemplate::new(302)
+                    .insert_header("location", format!("{}/hop/{}", server.uri(), hop + 1)),
+            )
+            .mount(&server)
+            .await;
+    }
+    Mock::given(method("GET"))
+        .and(path(format!("/hop/{hops}")))
+        .respond_with(ResponseTemplate::new(200).set_body_bytes(patched_tarball()))
+        .mount(&server)
+        .await;
+    mock_reference_at(
+        &server,
+        &format!("{}/hop/0", server.uri()),
+        &sha512_sri(&patched_tarball()),
+    )
+    .await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+    (doc, tmp)
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_redirect_chain_10_passes() {
+    let (doc, _tmp) = redirect_chain(10).await;
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_redirect_chain_11_fails() {
+    let (doc, _tmp) = redirect_chain(11).await;
+    assert_eq!(redirected(&doc), 0);
+    assert!(warning_detail(&doc, UNVERIFIABLE).contains(": fetch error "));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_one_get_per_distinct_url() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let ids = [
+        TILDE_ID,
+        "~npm~left-pad@1.3.0~peer.2",
+        "~npm~left-pad@1.3.0~peer.3",
+    ];
+    let nodes: Vec<String> = ids.iter().map(|id| registry_node(id)).collect();
+    std::fs::write(tmp.path().join("vlt-lock.json"), lock_with(Era::V1, &nodes)).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--dry-run"], &[]);
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(artifact_requests(&server).await, 1);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_dry_run_still_preflights_writes_nothing() {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_reference(&server).await;
+    mock_artifact_with(
+        &server,
+        ResponseTemplate::new(200)
+            .insert_header("content-encoding", "gzip")
+            .set_body_bytes(gzip(&patched_tarball())),
+    )
+    .await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let lock = read(tmp.path(), "vlt-lock.json");
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--dry-run"], &[]);
+
+    assert_eq!(artifact_requests(&server).await, 1);
+    assert_eq!(redirected(&doc), 0);
+    assert!(warning_codes(&doc).contains(&UNVERIFIABLE.to_string()));
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    assert!(!tmp.path().join(".socket").exists());
+}
+
+async fn gzip_artifact_server() -> MockServer {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_reference(&server).await;
+    mock_view(&server).await;
+    mock_artifact_with(
+        &server,
+        ResponseTemplate::new(200)
+            .insert_header("content-encoding", "gzip")
+            .set_body_bytes(gzip(&patched_tarball())),
+    )
+    .await;
+    server
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_failed_dep_withheld_from_every_rewriter() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0);
+    assert_eq!(read(tmp.path(), "package-lock.json"), package_lock());
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(Era::V1, &[registry_node(TILDE_ID)])
+    );
+    assert!(store_dir(tmp.path(), TILDE_ID).exists());
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_ambiguous_withholds_vlt_only() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(
+        redirected(&doc),
+        1,
+        "package-lock.json still confirms: {doc:#}"
+    );
+    assert!(read(tmp.path(), "package-lock.json").contains(&artifact_url(&server)));
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(Era::V1, &[registry_node(TILDE_ID)])
+    );
+    assert!(warning_codes(&doc).contains(&UNVERIFIABLE.to_string()));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_get_uuid_driver() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let lock = read(tmp.path(), "vlt-lock.json");
+    let cwd = tmp.path().to_str().unwrap().to_string();
+    let uri = server.uri();
+
+    let (code, doc, stderr) = run_json(
+        tmp.path(),
+        &[
+            "get",
+            UUID,
+            "--mode",
+            "hosted",
+            "--yes",
+            "--cwd",
+            &cwd,
+            "--api-url",
+            &uri,
+            "--org",
+            ORG,
+            "--api-token",
+            "fake",
+        ],
+        &[],
+    );
+
+    assert_eq!(code, 0, "{doc:#}\n{stderr}");
+    assert_eq!(artifact_requests(&server).await, 1);
+    assert_eq!(redirected(&doc), 0);
+    assert!(warning_codes(&doc).contains(&UNVERIFIABLE.to_string()));
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_no_preflight_without_vlt_lock() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_package_json(tmp.path());
+    install_importer(tmp.path(), PRISTINE);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(artifact_requests(&server).await, 0);
+    assert!(!warning_codes(&doc)
+        .iter()
+        .any(|c| c.starts_with("redirect_vlt_")));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_proxy_honored() {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_view(&server).await;
+    mock_artifact(&server).await;
+    let url = format!("http://vlt-artifact.invalid{}", artifact_path());
+    mock_reference_at(&server, &url, &sha512_sri(&patched_tarball())).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let proxy = server.uri();
+
+    let (_, doc) = scan_hosted(
+        tmp.path(),
+        &server,
+        &[],
+        &[
+            ("HTTP_PROXY", proxy.as_str()),
+            ("http_proxy", proxy.as_str()),
+            ("NO_PROXY", "127.0.0.1,localhost"),
+            ("no_proxy", "127.0.0.1,localhost"),
+        ],
+    );
+
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    assert_eq!(artifact_requests(&server).await, 1);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_already_pinned_failure_left_pinned() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let pinned = lock_with(Era::V1, &[pinned_node(TILDE_ID, &server)]);
+    std::fs::write(tmp.path().join("vlt-lock.json"), &pinned).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0, "neither confirmed nor attested");
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        pinned,
+        "nothing is reverted"
+    );
+    assert_eq!(
+        warning_detail(&doc, UNVERIFIABLE),
+        format!(
+            "vlt would fail to verify {}: content-encoding gzip; {PURL} was left pinned by an \
+             earlier run and `vlt ci` will fail until the artifact verifies",
+            artifact_url(&server)
+        )
+    );
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_no_bearer_on_artifact_request() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+
+    scan_hosted(tmp.path(), &server, &[], &[]);
+
+    let requests = server.received_requests().await.unwrap();
+    let (artifact, api): (Vec<_>, Vec<_>) = requests
+        .iter()
+        .partition(|r| r.url.path() == artifact_path());
+    assert_eq!(artifact.len(), 1);
+    assert!(artifact[0].headers.get("authorization").is_none());
+    assert!(api.iter().any(|r| r.headers.get("authorization").is_some()));
+}
+
+// ── warm-tree heal ───────────────────────────────────────────────────────
+
+#[tokio::test]
+async fn scan_redirect_vlt_warm_tree_invalidates_stale_store() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PATCHED);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(!store_dir(tmp.path(), TILDE_ID).exists());
+    assert!(!tmp.path().join("node_modules/.vlt").join(TILDE_ID).exists());
+    assert!(!tmp.path().join("node_modules/.vlt-lock.json").exists());
+    assert!(tmp.path().join("node_modules/.vlt").is_dir());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_rule_b_hidden_lock_without_node() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PATCHED);
+    write_hidden_lock(tmp.path(), &["\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string()]);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert!(!store_dir(tmp.path(), TILDE_ID).exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_rule_c_no_hidden_lock_with_record() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    std::fs::remove_file(tmp.path().join("node_modules/.vlt-lock.json")).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert!(!store_dir(tmp.path(), TILDE_ID).exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_rule_c_no_record_uses_artifact_bytes() {
+    let server = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_reference(&server).await;
+    mock_artifact(&server).await;
+    Mock::given(method("GET"))
+        .and(path(format!("/v0/orgs/{ORG}/patches/view/{UUID}")))
+        .respond_with(ResponseTemplate::new(404))
+        .mount(&server)
+        .await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    std::fs::remove_file(tmp.path().join("node_modules/.vlt-lock.json")).unwrap();
+    let healthy = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(healthy.path(), PATCHED);
+    std::fs::remove_file(healthy.path().join("node_modules/.vlt-lock.json")).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+    let (_, healthy_doc) = scan_hosted(healthy.path(), &server, &[], &[]);
+
+    assert!(warning_codes(&doc).contains(&"record_fetch_failed".to_string()));
+    assert!(!store_dir(tmp.path(), TILDE_ID).exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+    assert!(store_dir(healthy.path(), TILDE_ID).exists());
+    assert_eq!(
+        warning_detail(&healthy_doc, ADVISORY),
+        ADVISORY_NOTHING_STALE
+    );
+}
+
+#[cfg(unix)]
+fn link_node_modules_outside(root: &Path, outside: &Path) {
+    let real = outside.join("node_modules");
+    std::fs::rename(root.join("node_modules"), &real).unwrap();
+    std::os::unix::fs::symlink(&real, root.join("node_modules")).unwrap();
+}
+
+#[cfg(unix)]
+#[tokio::test]
+async fn scan_redirect_vlt_heal_undeterminable_node_modules_symlink_not_deleted() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let outside = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    link_node_modules_outside(tmp.path(), outside.path());
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_undeterminable(1));
+    assert!(store_dir(outside.path(), TILDE_ID)
+        .join("index.js")
+        .exists());
+    assert!(outside.path().join("node_modules/.vlt-lock.json").exists());
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_advisory_texts_exact() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let fresh = tempfile::tempdir().unwrap();
+    write_vlt_project(fresh.path(), Era::V1);
+    let warm = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(warm.path(), PRISTINE);
+    let skipped = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(skipped.path(), PRISTINE);
+
+    let (_, fresh_doc) = scan_hosted(fresh.path(), &server, &[], &[]);
+    let (_, warm_doc) = scan_hosted(warm.path(), &server, &[], &[]);
+    let (_, skipped_doc) = scan_hosted(skipped.path(), &server, &["--no-vlt-install-cleanup"], &[]);
+
+    assert_eq!(warning_detail(&fresh_doc, ADVISORY), ADVISORY_NOTHING_STALE);
+    assert_eq!(warning_detail(&warm_doc, ADVISORY), advisory_invalidated(1));
+    assert_eq!(
+        warning_detail(&skipped_doc, ADVISORY),
+        advisory_cleanup_skipped(1)
+    );
+    for doc in [&fresh_doc, &warm_doc, &skipped_doc] {
+        assert_eq!(
+            warning_codes(doc).iter().filter(|c| *c == ADVISORY).count(),
+            1,
+            "{doc:#}"
+        );
+    }
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_dry_run_deletes_nothing_emits_iii() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    let lock = read(tmp.path(), "vlt-lock.json");
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--dry-run"], &[]);
+
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_cleanup_skipped(1));
+    assert!(store_dir(tmp.path(), TILDE_ID).join("index.js").exists());
+    assert!(tmp.path().join("node_modules/.vlt-lock.json").exists());
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+}
+
+#[cfg(unix)]
+fn mkfifo(path: &Path) {
+    let status = std::process::Command::new("mkfifo")
+        .arg(path)
+        .status()
+        .unwrap();
+    assert!(status.success());
+}
+
+#[cfg(unix)]
+#[tokio::test]
+async fn scan_redirect_vlt_heal_hidden_lock_fifo_or_symlink() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+
+    let fifo = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(fifo.path(), PRISTINE);
+    let hidden = fifo.path().join("node_modules/.vlt-lock.json");
+    std::fs::remove_file(&hidden).unwrap();
+    mkfifo(&hidden);
+    let (_, doc) = scan_hosted(fifo.path(), &server, &[], &[]);
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+    assert!(std::fs::symlink_metadata(&hidden).is_err());
+    assert!(!store_dir(fifo.path(), TILDE_ID).exists());
+
+    let linked = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(linked.path(), PRISTINE);
+    let hidden = linked.path().join("node_modules/.vlt-lock.json");
+    let target = linked.path().join("hidden-target.json");
+    std::fs::rename(&hidden, &target).unwrap();
+    std::os::unix::fs::symlink(&target, &hidden).unwrap();
+    let (_, doc) = scan_hosted(linked.path(), &server, &[], &[]);
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+    assert!(std::fs::symlink_metadata(&hidden).is_err());
+    assert!(target.exists(), "only the link is removed");
+}
+
+#[cfg(unix)]
+#[tokio::test]
+async fn scan_redirect_vlt_heal_invalidation_failure_warns() {
+    use std::os::unix::fs::PermissionsExt as _;
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    let store = tmp.path().join("node_modules/.vlt");
+    std::fs::set_permissions(&store, std::fs::Permissions::from_mode(0o555)).unwrap();
+
+    let (code, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+    std::fs::set_permissions(&store, std::fs::Permissions::from_mode(0o755)).unwrap();
+
+    assert_eq!(code, 0);
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_cleanup_skipped(1));
+    assert!(store.join(TILDE_ID).exists());
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_no_install_cleanup_flag_keeps_tree() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-vlt-install-cleanup"], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert_eq!(
+        read(tmp.path(), "vlt-lock.json"),
+        lock_with(Era::V1, &[pinned_node(TILDE_ID, &server)])
+    );
+    assert!(store_dir(tmp.path(), TILDE_ID).join("index.js").exists());
+    assert!(tmp.path().join("node_modules/.vlt-lock.json").exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_cleanup_skipped(1));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_env_socket_no_vlt_install_cleanup() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+
+    let (_, doc) = scan_hosted(
+        tmp.path(),
+        &server,
+        &[],
+        &[("SOCKET_NO_VLT_INSTALL_CLEANUP", "1")],
+    );
+
+    assert!(store_dir(tmp.path(), TILDE_ID).join("index.js").exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_cleanup_skipped(1));
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_rerun_does_not_invalidate_healthy_tree() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(Era::V1, &[pinned_node(TILDE_ID, &server)]),
+    )
+    .unwrap();
+    install_store(tmp.path(), TILDE_ID, PATCHED);
+    write_hidden_lock(tmp.path(), &[pinned_node(TILDE_ID, &server)]);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(store_dir(tmp.path(), TILDE_ID).join("index.js").exists());
+    assert!(tmp.path().join("node_modules/.vlt-lock.json").exists());
+    assert_eq!(warning_detail(&doc, ADVISORY), ADVISORY_NOTHING_STALE);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_custom_patch_server_origin_heals() {
+    let server = MockServer::start().await;
+    let artifacts = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_view(&server).await;
+    mock_artifact(&artifacts).await;
+    mock_reference_at(
+        &server,
+        &artifact_url(&artifacts),
+        &sha512_sri(&patched_tarball()),
+    )
+    .await;
+    let configured = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(configured.path(), PRISTINE);
+    let unconfigured = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(unconfigured.path(), PRISTINE);
+    let origin = artifacts.uri();
+
+    let (_, doc) = scan_hosted(
+        configured.path(),
+        &server,
+        &["--patch-server-url", &origin],
+        &[],
+    );
+    let (_, plain) = scan_hosted(unconfigured.path(), &server, &[], &[]);
+
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_invalidated(1));
+    assert!(!store_dir(configured.path(), TILDE_ID).exists());
+    assert!(
+        !warning_codes(&plain).contains(&ADVISORY.to_string()),
+        "a URL on an unconfigured host is not Socket-owned: {plain:#}"
+    );
+    assert!(store_dir(unconfigured.path(), TILDE_ID).exists());
+}
+
+// ── in-run VEX exclusion ─────────────────────────────────────────────────
+
+fn vex_args(out: &Path) -> Vec<String> {
+    vec![
+        "--vex".into(),
+        out.to_str().unwrap().into(),
+        "--vex-product".into(),
+        "pkg:npm/consumer@0.0.0".into(),
+    ]
+}
+
+fn scan_with_vex(root: &Path, server: &MockServer, extra: &[&str]) -> (i32, Value, bool) {
+    let out = root.join("out.vex.json");
+    let vex = vex_args(&out);
+    let mut args: Vec<&str> = vex.iter().map(String::as_str).collect();
+    args.extend_from_slice(extra);
+    let (code, doc) = scan_hosted(root, server, &args, &[]);
+    (code, doc, vex_attests(&out))
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_no_cleanup_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    let healed = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(healed.path(), PRISTINE);
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &["--no-vlt-install-cleanup"]);
+    let (code, _, healed_attested) = scan_with_vex(healed.path(), &server, &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(
+        !attested,
+        "stale installed copies are not attested: {doc:#}"
+    );
+    assert_eq!(code, 0);
+    assert!(
+        healed_attested,
+        "the invalidated tree attests from the ledger"
+    );
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_foreign_instance_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(
+            Era::V1,
+            &[
+                registry_node("~custom~left-pad@1.3.0"),
+                registry_node(TILDE_ID),
+            ],
+        ),
+    )
+    .unwrap();
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(warning_codes(&doc).contains(&"redirect_vlt_custom_registry_skipped".to_string()));
+    assert!(!attested, "{doc:#}");
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_old_lockfile_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V0);
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(Era::V0, &[registry_node(EMPTY_SEGMENT_ID)]),
+    )
+    .unwrap();
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(warning_codes(&doc).contains(&"redirect_vlt_old_lockfile_ignored".to_string()));
+    assert!(!attested, "{doc:#}");
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_a0_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::A0);
+    let control = tempfile::tempdir().unwrap();
+    write_vlt_project(control.path(), Era::V1);
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &[]);
+    let (_, _, control_attested) = scan_with_vex(control.path(), &server, &[]);
+
+    assert!(warning_codes(&doc).contains(&"redirect_vlt_lockfile_version_missing".to_string()));
+    assert!(!attested, "{doc:#}");
+    assert!(control_attested);
+}
+
+#[cfg(unix)]
+#[tokio::test]
+async fn scan_redirect_vlt_undeterminable_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let outside = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(tmp.path(), PRISTINE);
+    link_node_modules_outside(tmp.path(), outside.path());
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &[]);
+
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_undeterminable(1));
+    assert!(!attested, "{doc:#}");
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_workspace_member_cwd_sees_no_root_lock() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let root_lock = read(tmp.path(), "vlt-lock.json");
+    let member = tmp.path().join("packages/a");
+    std::fs::create_dir_all(&member).unwrap();
+    write_package_json(&member);
+    install_importer(&member, PRISTINE);
+
+    let (_, doc) = scan_hosted(&member, &server, &[], &[]);
+
+    assert_eq!(redirected(&doc), 0, "{doc:#}");
+    assert!(!member.join("package-lock.json").exists());
+    assert!(!member.join("vlt-lock.json").exists());
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), root_lock);
+    assert!(!warning_codes(&doc)
+        .iter()
+        .any(|c| c.starts_with("redirect_vlt_")));
+    assert_eq!(artifact_requests(&server).await, 0);
+}
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
index 6c4b80ea..8339c0e9 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted.rs
@@ -26,6 +26,10 @@ use std::path::Path;
 mod vex_e2e_common;
 #[path = "vex_pipenv_pip_steps/mod.rs"]
 mod vex_pipenv_pip_steps;
+#[path = "in_process_rollback_hosted/vlt.rs"]
+mod vlt;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
 
 use serde_json::Value;
 use serial_test::serial;
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
new file mode 100644
index 00000000..42e20634
--- /dev/null
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
@@ -0,0 +1,191 @@
+//! Hosted vlt round trips: a real `scan --mode hosted` over a vlt project,
+//! then `rollback` / `remove` restoring the registry pins slot by slot
+//! (after vlt re-laid the line) and invalidating the patched installed
+//! copies so the next install extracts the registry bytes.
+
+use std::path::Path;
+
+use serde_json::Value;
+use wiremock::MockServer;
+
+use crate::vlt_hosted_common::*;
+
+const RESTORED: &str = "restored registry pins for 1 packages; removed the patched installed \
+     copies, so node_modules is incomplete until you run `vlt install` (or `vlt ci`)";
+
+async fn hosted_vlt_project(root: &Path) -> MockServer {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    write_vlt_project(root, Era::V1);
+    let (_, doc) = scan_hosted(root, &server, &[], &[]);
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(Era::V1, &[pinned_node(TILDE_ID, &server)])
+    );
+    server
+}
+
+/// What `vlt install` leaves after the redirect: the patched store entry
+/// and a hidden lock recording the pinned node.
+fn vlt_install_patched(root: &Path, server: &MockServer) {
+    install_store(root, TILDE_ID, PATCHED);
+    write_hidden_lock(root, &[pinned_node(TILDE_ID, server)]);
+}
+
+fn run_verb(root: &Path, verb: &str, extra: &[&str]) -> (i32, Value) {
+    let cwd = root.to_str().unwrap().to_string();
+    let mut args = vec![verb];
+    args.extend_from_slice(extra);
+    args.extend_from_slice(&["--yes", "--offline", "--cwd", &cwd]);
+    let (code, doc, stderr) = run_json(root, &args, &[]);
+    assert_eq!(code, 0, "{verb} must succeed: {doc:#}\n{stderr}");
+    (code, doc)
+}
+
+fn advisory_details(doc: &Value) -> Vec<String> {
+    doc["warnings"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .filter(|w| w["code"] == ADVISORY)
+        .filter_map(|w| w["detail"].as_str().map(str::to_string))
+        .collect()
+}
+
+#[tokio::test]
+async fn vlt_hosted_round_trip() {
+    for scoped in [true, false] {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let pristine = vlt_lock(Era::V1, &[registry_node(TILDE_ID)]);
+        let server = hosted_vlt_project(root).await;
+        vlt_install_patched(root, &server);
+
+        let targets: &[&str] = if scoped { &[PURL] } else { &[] };
+        let (_, doc) = run_verb(root, "rollback", targets);
+
+        assert_eq!(read(root, "vlt-lock.json"), pristine, "scoped={scoped}");
+        assert_eq!(advisory_details(&doc), [RESTORED], "{doc:#}");
+        assert!(!store_dir(root, TILDE_ID).exists());
+        assert!(!root.join("node_modules/.vlt-lock.json").exists());
+        assert!(
+            !ledger_path(root).exists()
+                || !read(root, ".socket/vendor/redirect-state.json")
+                    .contains("redirect_vlt_lock_node")
+        );
+    }
+}
+
+#[tokio::test]
+async fn vlt_hosted_remove_restores_and_emits_the_advisory() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = hosted_vlt_project(root).await;
+    vlt_install_patched(root, &server);
+
+    let (_, doc) = run_verb(root, "remove", &[PURL]);
+
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(Era::V1, &[registry_node(TILDE_ID)])
+    );
+    assert!(doc.to_string().contains(ADVISORY), "{doc:#}");
+    assert!(!store_dir(root, TILDE_ID).exists());
+}
+
+#[tokio::test]
+async fn vlt_rollback_after_vlt_update_invalidates_patched_store() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let _server = hosted_vlt_project(root).await;
+    let registry = vlt_lock(Era::V1, &[registry_node(TILDE_ID)]);
+    std::fs::write(root.join("vlt-lock.json"), &registry).unwrap();
+    install_store(root, TILDE_ID, PATCHED);
+    write_hidden_lock(root, &[registry_node(TILDE_ID)]);
+
+    let (_, doc) = run_verb(root, "rollback", &[]);
+
+    assert_eq!(read(root, "vlt-lock.json"), registry);
+    assert_eq!(advisory_details(&doc), [RESTORED], "{doc:#}");
+    assert!(!store_dir(root, TILDE_ID).exists());
+}
+
+#[tokio::test]
+async fn vlt_rollback_after_comma_move() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = hosted_vlt_project(root).await;
+    let sibling = "\"~npm~zz@1.0.0\": [0,\"zz\"]".to_string();
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        vlt_lock(Era::V1, &[pinned_node(TILDE_ID, &server), sibling.clone()]),
+    )
+    .unwrap();
+
+    let (_, doc) = run_verb(root, "rollback", &[PURL]);
+
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(Era::V1, &[registry_node(TILDE_ID), sibling])
+    );
+    assert!(
+        advisory_details(&doc).is_empty(),
+        "nothing installed: {doc:#}"
+    );
+}
+
+#[tokio::test]
+async fn vlt_rollback_after_e0_flag_change() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = hosted_vlt_project(root).await;
+    let relaid = pinned_node(TILDE_ID, &server).replacen("[0,", "[1,", 1);
+    std::fs::write(root.join("vlt-lock.json"), vlt_lock(Era::V1, &[relaid])).unwrap();
+
+    run_verb(root, "rollback", &[]);
+
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(
+            Era::V1,
+            &[registry_node(TILDE_ID).replacen("[0,", "[1,", 1)]
+        )
+    );
+}
+
+#[tokio::test]
+async fn vlt_rollback_honors_no_vlt_install_cleanup() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = hosted_vlt_project(root).await;
+    vlt_install_patched(root, &server);
+
+    let (_, doc) = run_verb(root, "rollback", &["--no-vlt-install-cleanup"]);
+
+    assert_eq!(
+        advisory_details(&doc),
+        [
+            "restored registry pins for 1 packages, but node_modules still holds 1 patched copies \
+          and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
+          --no-vlt-install-cleanup)"
+        ],
+        "{doc:#}"
+    );
+    assert!(store_dir(root, TILDE_ID).join("index.js").exists());
+}
+
+#[tokio::test]
+async fn vlt_rollback_of_a_pristine_tree_keeps_it() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let _server = hosted_vlt_project(root).await;
+    install_store(root, TILDE_ID, PRISTINE);
+    write_hidden_lock(root, &[registry_node(TILDE_ID)]);
+
+    let (_, doc) = run_verb(root, "rollback", &[]);
+
+    assert!(advisory_details(&doc).is_empty(), "{doc:#}");
+    assert!(store_dir(root, TILDE_ID).join("index.js").exists());
+    assert!(root.join("node_modules/.vlt-lock.json").exists());
+}
diff --git a/crates/socket-patch-cli/tests/remove_rollback_api_overrides.rs b/crates/socket-patch-cli/tests/remove_rollback_api_overrides.rs
index 5db30e08..bee81cc8 100644
--- a/crates/socket-patch-cli/tests/remove_rollback_api_overrides.rs
+++ b/crates/socket-patch-cli/tests/remove_rollback_api_overrides.rs
@@ -59,6 +59,7 @@ const SOCKET_ENV_VARS: &[&str] = &[
     "SOCKET_SKIP_ROLLBACK",
     "SOCKET_NO_TRUST_LOCKFILE_CONFIG",
     "SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG",
+    "SOCKET_NO_VLT_INSTALL_CLEANUP",
 ];
 
 /// Drift guard: the scrub must cover every env var `GlobalArgs` binds — the
diff --git a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
new file mode 100644
index 00000000..2620a041
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
@@ -0,0 +1,509 @@
+//! Hermetic vlt hosted-mode fixtures shared by the redirect, rollback,
+//! symlink, get and covgap suites: a vlt project (`vlt-lock.json`, an
+//! installed importer copy, optionally vlt's store and hidden lock), the
+//! wiremock API (discovery, the grant, the patch view) plus the artifact
+//! route the vlt preflight fetches, and a scrubbed subprocess runner that
+//! reads the `--json` envelope back.
+//!
+//! Include with `#[path = "vlt_hosted_common/mod.rs"] mod vlt_hosted_common;`.
+
+#![allow(dead_code)]
+
+use std::io::Write as _;
+use std::path::{Path, PathBuf};
+
+use base64::Engine as _;
+use serde_json::{json, Value};
+use sha2::{Digest, Sha256, Sha512};
+use wiremock::matchers::{method, path, path_regex};
+use wiremock::{Mock, MockServer, ResponseTemplate};
+
+pub const ORG: &str = "test-org";
+pub const NAME: &str = "left-pad";
+pub const VERSION: &str = "1.3.0";
+pub const PURL: &str = "pkg:npm/left-pad@1.3.0";
+pub const UUID: &str = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
+pub const TOKEN: &str = "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb";
+pub const GHSA: &str = "GHSA-vlth-aaaa-bbbb";
+pub const UPSTREAM_SHA512: &str = "sha512-UPSTREAMupstreamUPSTREAMupstream==";
+pub const REGISTRY_URL: &str = "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz";
+pub const PRISTINE: &[u8] = b"module.exports = 'pristine'\n";
+pub const PATCHED: &[u8] = b"module.exports = 'patched'\n";
+pub const PACKAGE_JSON: &[u8] = b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}\n";
+pub const TILDE_ID: &str = "~npm~left-pad@1.3.0";
+pub const LEGACY_ID: &str = "·npm·left-pad@1.3.0";
+pub const EMPTY_SEGMENT_ID: &str = "··left-pad@1.3.0";
+
+pub const ADVISORY: &str = "redirect_vlt_reinstall_required";
+pub const UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
+
+pub const ADVISORY_NOTHING_STALE: &str = "vlt-lock.json pins Socket-patched packages; fresh \
+     checkouts install them with `vlt ci` or `vlt install --frozen-lockfile`. Note: `vlt update` \
+     re-resolves from the registry and drops these redirects.";
+
+pub fn advisory_invalidated(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages; socket-patch removed {n} stale installed \
+         copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), so node_modules is \
+         incomplete until you run `vlt install` (or `vlt ci`), which installs the patched \
+         packages. Note: `vlt update` re-resolves from the registry and drops these redirects."
+    )
+}
+
+pub fn advisory_cleanup_skipped(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages, but node_modules still holds {n} unpatched \
+         copies and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
+         --no-vlt-install-cleanup)."
+    )
+}
+
+pub fn advisory_undeterminable(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages, but socket-patch could not check {n} \
+         installed copies (node_modules is a link, or no patch record or artifact was \
+         available); run `vlt ci` to be sure the patched packages are installed."
+    )
+}
+
+pub fn git_sha256(bytes: &[u8]) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(format!("blob {}\0", bytes.len()).as_bytes());
+    hasher.update(bytes);
+    hex::encode(hasher.finalize())
+}
+
+pub fn sha512_sri(bytes: &[u8]) -> String {
+    format!(
+        "sha512-{}",
+        base64::engine::general_purpose::STANDARD.encode(Sha512::digest(bytes))
+    )
+}
+
+/// The patched npm tarball the hosted artifact route serves.
+pub fn patched_tarball() -> Vec<u8> {
+    let gz = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+    let mut builder = tar::Builder::new(gz);
+    for (name, data) in [
+        ("package/package.json", PACKAGE_JSON),
+        ("package/index.js", PATCHED),
+    ] {
+        let mut header = tar::Header::new_gnu();
+        header.set_size(data.len() as u64);
+        header.set_mode(0o644);
+        header.set_cksum();
+        builder.append_data(&mut header, name, data).unwrap();
+    }
+    builder.into_inner().unwrap().finish().unwrap()
+}
+
+pub fn gzip(bytes: &[u8]) -> Vec<u8> {
+    let mut enc = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+    enc.write_all(bytes).unwrap();
+    enc.finish().unwrap()
+}
+
+pub fn artifact_path() -> String {
+    format!("/patch/npm/{NAME}/{VERSION}/{TOKEN}/{UUID}/{NAME}-{VERSION}.tgz")
+}
+
+pub fn artifact_url(server: &MockServer) -> String {
+    format!("{}{}", server.uri(), artifact_path())
+}
+
+pub async fn mock_discovery(server: &MockServer) {
+    Mock::given(method("POST"))
+        .and(path(format!("/v0/orgs/{ORG}/patches/batch")))
+        .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+            "packages": [{
+                "purl": PURL,
+                "patches": [{
+                    "uuid": UUID, "purl": PURL, "tier": "free",
+                    "cveIds": [], "ghsaIds": [], "severity": "high",
+                    "title": "vlt hosted fixture"
+                }]
+            }],
+            "canAccessPaidPatches": false,
+        })))
+        .mount(server)
+        .await;
+    Mock::given(method("GET"))
+        .and(path_regex(format!(
+            "^/v0/orgs/{ORG}/patches/by-package/.+$"
+        )))
+        .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+            "patches": [{
+                "uuid": UUID, "purl": PURL,
+                "publishedAt": "2024-01-01T00:00:00Z",
+                "description": "x", "license": "MIT", "tier": "free",
+                "vulnerabilities": {}
+            }],
+            "canAccessPaidPatches": false,
+        })))
+        .mount(server)
+        .await;
+}
+
+/// The grant for [`UUID`], pointing at `url` with `sha512`.
+pub async fn mock_reference_at(server: &MockServer, url: &str, sha512: &str) {
+    Mock::given(method("POST"))
+        .and(path(format!("/v0/orgs/{ORG}/patches/package")))
+        .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+            "results": {
+                UUID: {
+                    "status": "granted",
+                    "url": url,
+                    "purl": PURL,
+                    "artifacts": [{
+                        "kind": "tarball",
+                        "url": url,
+                        "integrity": { "sha512": sha512 }
+                    }],
+                    "registryOverride": null
+                }
+            }
+        })))
+        .mount(server)
+        .await;
+}
+
+/// The grant for the served [`patched_tarball`].
+pub async fn mock_reference(server: &MockServer) {
+    mock_reference_at(
+        server,
+        &artifact_url(server),
+        &sha512_sri(&patched_tarball()),
+    )
+    .await;
+}
+
+pub fn view_body() -> Value {
+    json!({
+        "uuid": UUID,
+        "purl": PURL,
+        "publishedAt": "2024-01-01T00:00:00Z",
+        "files": {
+            "package/index.js": {
+                "beforeHash": git_sha256(PRISTINE),
+                "afterHash": git_sha256(PATCHED),
+            }
+        },
+        "vulnerabilities": {
+            GHSA: {
+                "cves": ["CVE-2026-4242"],
+                "summary": "vlt hosted fixture",
+                "severity": "high",
+                "description": "d"
+            }
+        },
+        "description": "x", "license": "MIT", "tier": "free"
+    })
+}
+
+pub async fn mock_view(server: &MockServer) {
+    Mock::given(method("GET"))
+        .and(path(format!("/v0/orgs/{ORG}/patches/view/{UUID}")))
+        .respond_with(ResponseTemplate::new(200).set_body_json(view_body()))
+        .mount(server)
+        .await;
+}
+
+/// The artifact route with an arbitrary response.
+pub async fn mock_artifact_with(server: &MockServer, response: ResponseTemplate) {
+    Mock::given(method("GET"))
+        .and(path(artifact_path()))
+        .respond_with(response)
+        .mount(server)
+        .await;
+}
+
+pub async fn mock_artifact(server: &MockServer) {
+    mock_artifact_with(
+        server,
+        ResponseTemplate::new(200).set_body_bytes(patched_tarball()),
+    )
+    .await;
+}
+
+/// Discovery, grant, view and a passing artifact.
+pub async fn mock_all(server: &MockServer) {
+    mock_discovery(server).await;
+    mock_reference(server).await;
+    mock_view(server).await;
+    mock_artifact(server).await;
+}
+
+/// How many requests reached the artifact route.
+pub async fn artifact_requests(server: &MockServer) -> usize {
+    server
+        .received_requests()
+        .await
+        .unwrap_or_default()
+        .iter()
+        .filter(|r| r.url.path() == artifact_path())
+        .count()
+}
+
+/// Which `vlt-lock.json` era to write.
+#[derive(Clone, Copy, PartialEq, Eq)]
+pub enum Era {
+    /// `lockfileVersion: 1`, tilde ids.
+    V1,
+    /// `lockfileVersion: 0`, `·npm·` ids.
+    V0,
+    /// No `lockfileVersion`, `··` ids.
+    A0,
+}
+
+impl Era {
+    pub fn dep_id(self) -> &'static str {
+        match self {
+            Era::V1 => TILDE_ID,
+            Era::V0 => LEGACY_ID,
+            Era::A0 => EMPTY_SEGMENT_ID,
+        }
+    }
+}
+
+/// A canonical vlt lock with the given node entries (`"<id>": <tuple>`).
+pub fn vlt_lock(era: Era, nodes: &[String]) -> String {
+    let version = match era {
+        Era::V1 => "  \"lockfileVersion\": 1,\n",
+        Era::V0 => "  \"lockfileVersion\": 0,\n",
+        Era::A0 => "",
+    };
+    let body = nodes
+        .iter()
+        .map(|n| format!("    {n}"))
+        .collect::<Vec<_>>()
+        .join(",\n");
+    format!(
+        "{{\n{version}  \"options\": {{}},\n  \"nodes\": {{\n{body}\n  }},\n  \"edges\": {{}}\n}}\n"
+    )
+}
+
+/// `"<id>": [0,"left-pad","<sha512>","<url>"]`.
+pub fn node(id: &str, sha512: &str, url: &str) -> String {
+    format!("\"{id}\": [0,\"{NAME}\",\"{sha512}\",\"{url}\"]")
+}
+
+pub fn registry_node(id: &str) -> String {
+    node(id, UPSTREAM_SHA512, REGISTRY_URL)
+}
+
+/// The same line after a hosted splice.
+pub fn pinned_node(id: &str, server: &MockServer) -> String {
+    node(id, &sha512_sri(&patched_tarball()), &artifact_url(server))
+}
+
+pub fn write_package_json(root: &Path) {
+    std::fs::write(
+        root.join("package.json"),
+        format!(
+            r#"{{ "name": "consumer", "version": "0.0.0", "dependencies": {{ "{NAME}": "{VERSION}" }} }}"#
+        ),
+    )
+    .unwrap();
+}
+
+/// The importer copy the crawler discovers, `node_modules/left-pad`.
+pub fn install_importer(root: &Path, index: &[u8]) {
+    let dir = root.join("node_modules").join(NAME);
+    std::fs::create_dir_all(&dir).unwrap();
+    std::fs::write(dir.join("package.json"), PACKAGE_JSON).unwrap();
+    std::fs::write(dir.join("index.js"), index).unwrap();
+}
+
+/// vlt's store entry `node_modules/.vlt/<id>/node_modules/left-pad`.
+pub fn store_dir(root: &Path, id: &str) -> PathBuf {
+    root.join("node_modules/.vlt")
+        .join(id)
+        .join("node_modules")
+        .join(NAME)
+}
+
+pub fn install_store(root: &Path, id: &str, index: &[u8]) {
+    let dir = store_dir(root, id);
+    std::fs::create_dir_all(&dir).unwrap();
+    std::fs::write(dir.join("package.json"), PACKAGE_JSON).unwrap();
+    std::fs::write(dir.join("index.js"), index).unwrap();
+}
+
+/// `node_modules/.vlt-lock.json` holding `nodes` verbatim.
+pub fn write_hidden_lock(root: &Path, nodes: &[String]) {
+    std::fs::create_dir_all(root.join("node_modules")).unwrap();
+    std::fs::write(
+        root.join("node_modules/.vlt-lock.json"),
+        vlt_lock(Era::V1, nodes),
+    )
+    .unwrap();
+}
+
+/// A vlt project: package.json, `vlt-lock.json` with one registry node,
+/// and the importer copy (no store).
+pub fn write_vlt_project(root: &Path, era: Era) {
+    write_package_json(root);
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        vlt_lock(era, &[registry_node(era.dep_id())]),
+    )
+    .unwrap();
+    install_importer(root, PRISTINE);
+}
+
+/// [`write_vlt_project`] (v1) plus a warm install: the store entry with
+/// `index` and a hidden lock recording the registry integrity.
+pub fn write_installed_vlt_project(root: &Path, index: &[u8]) {
+    write_vlt_project(root, Era::V1);
+    install_store(root, TILDE_ID, index);
+    write_hidden_lock(root, &[registry_node(TILDE_ID)]);
+}
+
+pub fn package_lock() -> String {
+    format!(
+        r#"{{
+  "name": "consumer",
+  "version": "0.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {{
+    "": {{ "name": "consumer", "version": "0.0.0", "dependencies": {{ "{NAME}": "{VERSION}" }} }},
+    "node_modules/{NAME}": {{
+      "version": "{VERSION}",
+      "resolved": "{REGISTRY_URL}",
+      "integrity": "{UPSTREAM_SHA512}"
+    }}
+  }}
+}}
+"#
+    )
+}
+
+pub fn read(root: &Path, rel: &str) -> String {
+    std::fs::read_to_string(root.join(rel)).unwrap_or_else(|e| panic!("read {rel}: {e}"))
+}
+
+pub fn ledger_path(root: &Path) -> PathBuf {
+    root.join(".socket/vendor/redirect-state.json")
+}
+
+/// The `socket-patch` binary with the ambient `SOCKET_*` and proxy
+/// environment scrubbed (telemetry opt-outs kept).
+pub fn scrubbed_cli() -> std::process::Command {
+    let mut cmd = std::process::Command::new(env!("CARGO_BIN_EXE_socket-patch"));
+    cmd.env("SOCKET_DRY_RUN", "true")
+        .env("SOCKET_OFFLINE", "true")
+        .env("SOCKET_NO_VLT_INSTALL_CLEANUP", "true")
+        .env_remove("SOCKET_DRY_RUN")
+        .env_remove("SOCKET_OFFLINE")
+        .env_remove("SOCKET_NO_VLT_INSTALL_CLEANUP");
+    for (key, _) in std::env::vars_os() {
+        let name = key.to_string_lossy();
+        let proxy = name.eq_ignore_ascii_case("http_proxy")
+            || name.eq_ignore_ascii_case("https_proxy")
+            || name.eq_ignore_ascii_case("all_proxy")
+            || name.eq_ignore_ascii_case("no_proxy");
+        if proxy
+            || (name.starts_with("SOCKET_")
+                && !name.contains("TELEMETRY")
+                && name != "SOCKET_NO_CONFIG")
+        {
+            cmd.env_remove(&key);
+        }
+    }
+    cmd.env("SOCKET_NO_CONFIG", "1")
+        .env("SOCKET_NO_UPDATE_CHECK", "1");
+    cmd
+}
+
+/// Run `<args> --json` in `cwd` with `env`; `(exit code, envelope, stderr)`.
+pub fn run_json(cwd: &Path, args: &[&str], env: &[(&str, &str)]) -> (i32, Value, String) {
+    let mut cmd = scrubbed_cli();
+    cmd.args(args).arg("--json").current_dir(cwd);
+    for (k, v) in env {
+        cmd.env(k, v);
+    }
+    let out = cmd.output().expect("run socket-patch");
+    let stdout = String::from_utf8_lossy(&out.stdout).to_string();
+    let stderr = String::from_utf8_lossy(&out.stderr).to_string();
+    let doc = serde_json::from_str(&stdout).unwrap_or_else(|e| {
+        panic!("stdout must be the JSON envelope ({e});\nstdout=\n{stdout}\nstderr=\n{stderr}")
+    });
+    (out.status.code().unwrap_or(-1), doc, stderr)
+}
+
+/// `scan --mode hosted --json --yes` against `server`, plus `extra`.
+pub fn scan_hosted(
+    cwd: &Path,
+    server: &MockServer,
+    extra: &[&str],
+    env: &[(&str, &str)],
+) -> (i32, Value) {
+    let cwd_s = cwd.to_str().unwrap().to_string();
+    let uri = server.uri();
+    let mut args = vec![
+        "scan",
+        "--mode",
+        "hosted",
+        "--yes",
+        "--cwd",
+        &cwd_s,
+        "--api-url",
+        &uri,
+        "--org",
+        ORG,
+        "--api-token",
+        "fake",
+    ];
+    args.extend_from_slice(extra);
+    let (code, doc, stderr) = run_json(cwd, &args, env);
+    assert!(
+        code == 0 || extra.contains(&"--vex"),
+        "scan --mode hosted must exit 0: {doc:#}\nstderr=\n{stderr}"
+    );
+    (code, doc)
+}
+
+pub fn warning_codes(doc: &Value) -> Vec<String> {
+    doc["redirect"]["warnings"]
+        .as_array()
+        .map(|arr| {
+            arr.iter()
+                .filter_map(|w| w["code"].as_str().map(str::to_string))
+                .collect()
+        })
+        .unwrap_or_default()
+}
+
+pub fn warning_detail(doc: &Value, code: &str) -> String {
+    doc["redirect"]["warnings"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .find(|w| w["code"] == code)
+        .and_then(|w| w["detail"].as_str())
+        .unwrap_or_else(|| panic!("expected a `{code}` warning: {doc:#}"))
+        .to_string()
+}
+
+pub fn redirected(doc: &Value) -> u64 {
+    doc["redirect"]["redirected"]
+        .as_u64()
+        .unwrap_or_else(|| panic!("{doc:#}"))
+}
+
+/// Whether the VEX document at `path` attests [`PURL`].
+pub fn vex_attests(path: &Path) -> bool {
+    let Ok(text) = std::fs::read_to_string(path) else {
+        return false;
+    };
+    let doc: Value = serde_json::from_str(&text).unwrap();
+    doc["statements"].as_array().into_iter().flatten().any(|s| {
+        s["products"]
+            .as_array()
+            .into_iter()
+            .flatten()
+            .flat_map(|p| p["subcomponents"].as_array().into_iter().flatten())
+            .any(|c| c["@id"] == PURL)
+    })
+}
diff --git a/crates/socket-patch-core/src/api/client.rs b/crates/socket-patch-core/src/api/client.rs
index ba3ff596..a2851c84 100644
--- a/crates/socket-patch-core/src/api/client.rs
+++ b/crates/socket-patch-core/src/api/client.rs
@@ -281,6 +281,12 @@ impl ApiClient {
         self
     }
 
+    /// The User-Agent-only client for grant-tokenized artifact URLs, where
+    /// the Socket bearer must never be sent.
+    pub(crate) fn plain_http(&self) -> &reqwest::Client {
+        &self.plain
+    }
+
     /// Returns the API token, if set.
     pub fn api_token(&self) -> Option<&String> {
         self.api_token.as_ref()
@@ -1266,7 +1272,7 @@ impl ApiClient {
 
 /// Cap on a single prebuilt-archive download (defensive bound against a
 /// runaway / hostile serve response). Generous enough for any real package.
-const MAX_VENDOR_PACKAGE_BYTES: u64 = 256 * 1024 * 1024;
+pub(crate) const MAX_VENDOR_PACKAGE_BYTES: u64 = 256 * 1024 * 1024;
 
 /// A prebuilt vendored archive downloaded from the patch.socket.dev service,
 /// together with the service-reported integrity. The bytes are **unverified**
diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index ed40feca..ea8cfc74 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -43,6 +43,8 @@ mod staged;
 mod state;
 mod takeover;
 pub mod vlt;
+pub mod vlt_heal;
+pub mod vlt_preflight;
 pub use replay::{revert_remaining_redirect_edits, GroupRefusal, ReplayOutcome};
 pub use state::{
     drop_superseded_purl, load_redirect_state, persist_redirect_state, save_redirect_state,
@@ -228,6 +230,9 @@ pub struct RewriteResult {
     /// the node grammar, a failed residual gate). Never confirmed, whichever
     /// lock drives.
     pub refused_vlt_uuids: std::collections::BTreeSet<String>,
+    /// Patch uuids with a same-`name@version` vlt node under a named alias,
+    /// a scoped registry or jsr, which hosted mode leaves unpatched.
+    pub vlt_foreign_uuids: std::collections::BTreeSet<String>,
     /// [`vlt::vlt_drives`] over the rewriter's input files and the
     /// caller's `bun_lockb_present`.
     pub vlt_drives: bool,
@@ -335,6 +340,28 @@ pub fn rewrite_registry_redirect_with_pipenv_version(
     python_metadata: &BTreeMap<String, String>,
     pipenv_major: Option<u32>,
     bun_lockb_present: bool,
+) -> RewriteResult {
+    rewrite_registry_redirect_withholding_vlt(
+        files,
+        overrides,
+        python_metadata,
+        pipenv_major,
+        bun_lockb_present,
+        &std::collections::BTreeSet::new(),
+    )
+}
+
+/// [`rewrite_registry_redirect_with_pipenv_version`] with the patch uuids
+/// in `vlt_withheld` kept out of the vlt rewrite only: their artifact
+/// failed vlt's preflight while another npm-family lock may be the one the
+/// project installs from.
+pub fn rewrite_registry_redirect_withholding_vlt(
+    files: &BTreeMap<String, String>,
+    overrides: &[DepOverride],
+    python_metadata: &BTreeMap<String, String>,
+    pipenv_major: Option<u32>,
+    bun_lockb_present: bool,
+    vlt_withheld: &std::collections::BTreeSet<String>,
 ) -> RewriteResult {
     let mut result = RewriteResult::default();
     // pdm runs FIRST, but only when `pdm.lock` is the project's PyPI install
@@ -356,7 +383,12 @@ pub fn rewrite_registry_redirect_with_pipenv_version(
     rewrite_yarn_classic(files, overrides, &mut result);
     rewrite_yarn_berry(files, overrides, &mut result);
     rewrite_bun_lock(files, overrides, &mut result);
-    vlt::rewrite_vlt_lock(files, overrides, bun_lockb_present, &mut result);
+    vlt::rewrite_vlt_lock(
+        files,
+        &withhold(overrides, vlt_withheld),
+        bun_lockb_present,
+        &mut result,
+    );
     result.vlt_drives = vlt::vlt_drives(files, bun_lockb_present);
     requirements::rewrite(files, overrides, &mut result);
     rewrite_hatch(files, overrides, &mut result);
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index 310f1f6f..cc79bd08 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -69,12 +69,12 @@ fn lock_unsupported(detail: &str) -> RewriteWarning {
 }
 
 /// A lock that passed the lock-level parse, with its nodes section located.
-struct HostedLock {
+pub(super) struct HostedLock {
     parsed: ParsedLock,
     nodes: Option<SectionSpan>,
 }
 
-fn parse_hosted_lock(text: &str) -> Result<HostedLock, RewriteWarning> {
+pub(super) fn parse_hosted_lock(text: &str) -> Result<HostedLock, RewriteWarning> {
     let parsed = match sniff_lock(text) {
         LockSniff::Readable(parsed) => parsed,
         LockSniff::Bom => {
@@ -125,6 +125,35 @@ fn registry_instance(
         .then(|| is_default_registry(&dep_id.first, options))
 }
 
+/// The default-registry and the foreign registry node ids of
+/// `name@version`, in the lock's key order.
+fn partition_instances<'a>(
+    nodes: &'a Map<String, Value>,
+    name: &str,
+    version: &str,
+    options: Option<&Map<String, Value>>,
+) -> (Vec<&'a str>, Vec<&'a str>) {
+    let mut defaults = Vec::new();
+    let mut foreign = Vec::new();
+    for id in nodes.keys() {
+        match registry_instance(id, name, version, options) {
+            Some(true) => defaults.push(id.as_str()),
+            Some(false) => foreign.push(id.as_str()),
+            None => {}
+        }
+    }
+    (defaults, foreign)
+}
+
+/// The default-registry node ids of `dep` in a lock that passed the
+/// lock-level parse.
+pub(super) fn default_instances<'a>(lock: &'a HostedLock, dep: &DepOverride) -> Vec<&'a str> {
+    let Some(nodes) = lock.parsed.nodes() else {
+        return Vec::new();
+    };
+    partition_instances(nodes, &full_name(dep), &dep.version, lock.parsed.options()).0
+}
+
 fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>) -> bool {
     if lock.parsed.version == Some(1) {
         return false;
@@ -230,6 +259,21 @@ fn ledger_key(name: &str, version: &str, extra: Option<&str>) -> String {
     }
 }
 
+/// The DepID a [`KIND`] ledger edit records, from its `original` entry
+/// text.
+pub fn edit_dep_id(edit: &FileEdit) -> Option<String> {
+    let text = edit.original.as_ref()?.as_str()?;
+    parse_node_entry_text(text).map(|entry| entry.key.to_string())
+}
+
+/// The node ids of a readable `vlt-lock.json`.
+pub fn lock_node_ids(text: &str) -> Option<std::collections::BTreeSet<String>> {
+    match sniff_lock(text) {
+        LockSniff::Readable(lock) => Some(lock.nodes()?.keys().cloned().collect()),
+        _ => None,
+    }
+}
+
 /// Does a ledger edit of [`KIND`] belong to `name@version`? Claims are by
 /// key, with a `~` boundary before a variant's extra segment.
 pub(crate) fn claims_key(key: &str, name: &str, version: &str) -> bool {
@@ -261,7 +305,12 @@ fn instance_line(
 }
 
 /// The residual gate: re-parsed, every instance carries the patched slots.
-fn every_instance_pinned(text: &str, ids: &[&str], sha512: &str, url: &str) -> Option<()> {
+pub(super) fn every_instance_pinned(
+    text: &str,
+    ids: &[&str],
+    sha512: &str,
+    url: &str,
+) -> Option<()> {
     let json: Value = serde_json::from_str(text).ok()?;
     let nodes = json.get("nodes")?.as_object()?;
     ids.iter()
@@ -306,16 +355,9 @@ fn rewrite_dep(
     let empty = Map::new();
     let nodes = lock.parsed.nodes().unwrap_or(&empty);
 
-    let mut defaults: Vec<&str> = Vec::new();
-    let mut foreign: Vec<&str> = Vec::new();
-    for id in nodes.keys() {
-        match registry_instance(id, &name, version, options) {
-            Some(true) => defaults.push(id),
-            Some(false) => foreign.push(id),
-            None => {}
-        }
-    }
+    let (defaults, foreign) = partition_instances(nodes, &name, version, options);
     if !foreign.is_empty() {
+        result.vlt_foreign_uuids.insert(dep.patch_uuid.clone());
         result.warnings.push(RewriteWarning {
             code: "redirect_vlt_custom_registry_skipped".into(),
             detail: format!(
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
new file mode 100644
index 00000000..98f563b1
--- /dev/null
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
@@ -0,0 +1,903 @@
+//! Warm-tree heal for hosted vlt redirects (DESIGN D7).
+//!
+//! vlt never refreshes a store entry it already holds: after the lock is
+//! repointed, `vlt install` keeps `node_modules/.vlt/<DepID>` and the
+//! hidden lock as they are. A store entry whose bytes are not the ones the
+//! lock now pins is invalidated (the entry plus `node_modules/.vlt-lock.json`)
+//! so the next install extracts the pinned artifact. An entry whose state
+//! cannot be determined is never removed, and nothing outside the project
+//! root is ever touched.
+
+use std::collections::{BTreeMap, BTreeSet};
+use std::path::{Path, PathBuf};
+
+use serde_json::{Map, Value};
+
+use super::{hosted_patch_uuid, vlt, RedirectState};
+use crate::constants::npm_family::{VLT_HIDDEN_LOCK_REL, VLT_STORE_DIR};
+use crate::manifest::schema::PatchRecord;
+use crate::patch::apply::{is_safe_relative_subpath, normalize_file_path};
+use crate::patch::file_hash::compute_file_git_sha256;
+use crate::patch::package::read_archive_bytes_to_map_strict;
+use crate::utils::purl::{canonical_purl, purl_parts};
+use crate::vendor::vlt_lock_text::{
+    is_default_registry, is_registry_package_name, parse_node_entry_text, sniff_lock, split_dep_id,
+    DepIdKind, LockSniff,
+};
+
+/// The installed state a target should be in: patched after a redirect,
+/// pristine after a rollback or remove.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum Expected {
+    Patched,
+    Pristine,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum TargetState {
+    Healthy,
+    Stale,
+    Undeterminable,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum ByteCheck {
+    Match,
+    Mismatch,
+    Unknown,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq)]
+enum StoreState {
+    /// No `node_modules` or no `node_modules/.vlt`: nothing is installed.
+    Absent,
+    /// Both are real directories inside the canonical project root.
+    Real,
+    /// A link, a non-directory, or a store outside the root.
+    Unsafe,
+}
+
+#[derive(Debug, Clone)]
+enum HiddenLock {
+    Absent,
+    Unreadable,
+    Parsed(Map<String, Value>),
+}
+
+/// The project's vlt install state, read once per heal.
+#[derive(Debug, Clone)]
+pub struct InstallState {
+    store: StoreState,
+    hidden: HiddenLock,
+    hidden_present: bool,
+}
+
+/// One default-registry node of the lock that Socket hosts.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct OwnedInstance {
+    pub dep_id: String,
+    pub name: String,
+    pub version: String,
+    pub patch_uuid: String,
+    pub url: String,
+    pub sha512: Option<String>,
+}
+
+/// A store entry to classify.
+#[derive(Debug, Clone, Copy)]
+pub struct Target<'a> {
+    pub dep_id: &'a str,
+    pub name: &'a str,
+    /// Slot [2] of the node in the final `vlt-lock.json` (`None` when the
+    /// node is gone or the slot is null).
+    pub lock_sha512: Option<&'a str>,
+    pub record: Option<&'a PatchRecord>,
+    /// The artifact bytes the preflight downloaded.
+    pub artifact: Option<&'a [u8]>,
+}
+
+/// A ledger vlt node of one purl, for the rollback heal.
+#[derive(Debug, Clone, PartialEq)]
+pub struct LedgerTarget {
+    pub purl: String,
+    pub dep_id: String,
+    pub name: String,
+    pub record: Option<PatchRecord>,
+}
+
+/// What invalidation removed and what it could not.
+#[derive(Debug, Clone, Default, PartialEq, Eq)]
+pub struct Invalidation {
+    pub removed: Vec<String>,
+    pub failed: Vec<(String, String)>,
+}
+
+fn url_leaf(url: &str) -> &str {
+    let path = url.split(['?', '#']).next().unwrap_or(url);
+    path.rsplit('/').next().unwrap_or(path)
+}
+
+/// Every default-registry node whose slot [3] is a Socket-hosted URL (on
+/// patch.socket.dev or one of `origins`) whose leaf `<bare>-<version>.tgz`
+/// agrees with the DepID. An unreadable lock has none.
+pub fn socket_owned_instances(lock_text: &str, origins: &[String]) -> Vec<OwnedInstance> {
+    let LockSniff::Readable(lock) = sniff_lock(lock_text) else {
+        return Vec::new();
+    };
+    let options = lock.options();
+    let Some(nodes) = lock.nodes() else {
+        return Vec::new();
+    };
+    let mut out = Vec::new();
+    for (id, tuple) in nodes {
+        let Some(dep_id) = split_dep_id(id) else {
+            continue;
+        };
+        if dep_id.kind != DepIdKind::Registry || !is_default_registry(&dep_id.first, options) {
+            continue;
+        }
+        let Some((name, version)) = dep_id.registry_identity() else {
+            continue;
+        };
+        let Some(url) = tuple.get(3).and_then(Value::as_str) else {
+            continue;
+        };
+        let Some(patch_uuid) = hosted_patch_uuid(url, origins) else {
+            continue;
+        };
+        let bare = name.rsplit('/').next().unwrap_or(name);
+        if url_leaf(url) != format!("{bare}-{version}.tgz") {
+            continue;
+        }
+        out.push(OwnedInstance {
+            dep_id: id.clone(),
+            name: name.to_string(),
+            version: version.to_string(),
+            patch_uuid,
+            url: url.to_string(),
+            sha512: tuple.get(2).and_then(Value::as_str).map(str::to_string),
+        });
+    }
+    out
+}
+
+/// Slot [2] of `dep_id`'s node in `lock_text`.
+pub fn lock_sha512(lock_text: &str, dep_id: &str) -> Option<String> {
+    let LockSniff::Readable(lock) = sniff_lock(lock_text) else {
+        return None;
+    };
+    lock.nodes()?
+        .get(dep_id)?
+        .get(2)?
+        .as_str()
+        .map(str::to_string)
+}
+
+/// vlt's `isDepID` path-safety rule: the id is used as one path segment.
+pub fn is_safe_dep_id(id: &str) -> bool {
+    let bytes = id.as_bytes();
+    let drive = bytes.len() >= 2 && bytes[0].is_ascii_alphabetic() && bytes[1] == b':';
+    !id.is_empty()
+        && !drive
+        && !id.contains(['/', '\\'])
+        && !id.chars().any(char::is_control)
+        && id
+            .split(['~', '·'])
+            .all(|field| field != "." && field != "..")
+}
+
+async fn store_state(root: &Path) -> StoreState {
+    let node_modules = root.join("node_modules");
+    let store = root.join(VLT_STORE_DIR);
+    for dir in [&node_modules, &store] {
+        match tokio::fs::symlink_metadata(dir).await {
+            Ok(meta) if meta.file_type().is_dir() => {}
+            Ok(_) => return StoreState::Unsafe,
+            Err(e) if e.kind() == std::io::ErrorKind::NotFound => return StoreState::Absent,
+            Err(_) => return StoreState::Unsafe,
+        }
+    }
+    match (
+        tokio::fs::canonicalize(root).await,
+        tokio::fs::canonicalize(&store).await,
+    ) {
+        (Ok(root), Ok(store)) if store.starts_with(&root) => StoreState::Real,
+        _ => StoreState::Unsafe,
+    }
+}
+
+async fn hidden_lock(root: &Path) -> (HiddenLock, bool) {
+    let path = root.join(VLT_HIDDEN_LOCK_REL);
+    let meta = match tokio::fs::symlink_metadata(&path).await {
+        Ok(meta) => meta,
+        Err(e) if e.kind() == std::io::ErrorKind::NotFound => return (HiddenLock::Absent, false),
+        Err(_) => return (HiddenLock::Unreadable, true),
+    };
+    if !meta.file_type().is_file() {
+        return (HiddenLock::Unreadable, true);
+    }
+    let parsed = crate::utils::fs::read_regular_to_string(&path)
+        .await
+        .ok()
+        .and_then(|text| serde_json::from_str::<Value>(&text).ok())
+        .and_then(|json| json.get("nodes").and_then(Value::as_object).cloned());
+    match parsed {
+        Some(nodes) => (HiddenLock::Parsed(nodes), true),
+        None => (HiddenLock::Unreadable, true),
+    }
+}
+
+/// Read the store precondition and the hidden lock.
+pub async fn read_install_state(root: &Path) -> InstallState {
+    let store = store_state(root).await;
+    let (hidden, hidden_present) = hidden_lock(root).await;
+    InstallState {
+        store,
+        hidden,
+        hidden_present,
+    }
+}
+
+fn package_dir(root: &Path, dep_id: &str, name: &str) -> PathBuf {
+    let mut dir = root.join(VLT_STORE_DIR).join(dep_id).join("node_modules");
+    for part in name.split('/') {
+        dir.push(part);
+    }
+    dir
+}
+
+async fn file_hash(path: &Path) -> Result<Option<String>, ()> {
+    match compute_file_git_sha256(path).await {
+        Ok(hash) => Ok(Some(hash)),
+        Err(e) if crate::patch::apply::is_missing_path(&e) => Ok(None),
+        Err(_) => Err(()),
+    }
+}
+
+async fn record_check(dir: &Path, record: &PatchRecord, expected: Expected) -> ByteCheck {
+    let mut unknown = false;
+    for (file, info) in &record.files {
+        let rel = normalize_file_path(file);
+        if !is_safe_relative_subpath(rel) {
+            return ByteCheck::Unknown;
+        }
+        let Ok(current) = file_hash(&dir.join(rel)).await else {
+            unknown = true;
+            continue;
+        };
+        let want = match expected {
+            Expected::Patched => &info.after_hash,
+            Expected::Pristine => &info.before_hash,
+        };
+        let matches = match current.as_deref() {
+            None => want.is_empty(),
+            Some(hash) => hash == want.as_str(),
+        };
+        if !matches {
+            return ByteCheck::Mismatch;
+        }
+    }
+    if unknown {
+        ByteCheck::Unknown
+    } else {
+        ByteCheck::Match
+    }
+}
+
+/// The regular files under `dir` (its own `node_modules/` excluded) by
+/// `/`-joined relative path; `Err(true)` when a link or special file is
+/// present (never an extracted artifact), `Err(false)` when unreadable.
+fn installed_files(dir: &Path) -> Result<BTreeMap<String, Vec<u8>>, bool> {
+    let mut out = BTreeMap::new();
+    let walk = walkdir::WalkDir::new(dir)
+        .follow_links(false)
+        .into_iter()
+        .filter_entry(|e| !(e.depth() == 1 && e.file_name() == "node_modules"));
+    for entry in walk {
+        let entry = entry.map_err(|_| false)?;
+        if entry.depth() == 0 || entry.file_type().is_dir() {
+            continue;
+        }
+        if !entry.file_type().is_file() {
+            return Err(true);
+        }
+        let rel = entry.path().strip_prefix(dir).map_err(|_| false)?;
+        let key = rel
+            .components()
+            .map(|c| c.as_os_str().to_str())
+            .collect::<Option<Vec<_>>>()
+            .ok_or(false)?
+            .join("/");
+        out.insert(key, std::fs::read(entry.path()).map_err(|_| false)?);
+    }
+    Ok(out)
+}
+
+fn artifact_check(dir: &Path, artifact: &[u8]) -> ByteCheck {
+    let Ok(expected) = read_archive_bytes_to_map_strict(artifact) else {
+        return ByteCheck::Unknown;
+    };
+    let installed = match installed_files(dir) {
+        Ok(files) => files,
+        Err(true) => return ByteCheck::Mismatch,
+        Err(false) => return ByteCheck::Unknown,
+    };
+    let expected: BTreeMap<String, Vec<u8>> = expected.into_iter().collect();
+    if expected == installed {
+        ByteCheck::Match
+    } else {
+        ByteCheck::Mismatch
+    }
+}
+
+async fn bytes_check(dir: &Path, target: &Target<'_>, expected: Expected) -> ByteCheck {
+    if let Some(record) = target.record.filter(|r| !r.files.is_empty()) {
+        return record_check(dir, record, expected).await;
+    }
+    match (expected, target.artifact) {
+        (Expected::Patched, Some(artifact)) => artifact_check(dir, artifact),
+        _ => ByteCheck::Unknown,
+    }
+}
+
+/// Is `target`'s store entry stale against `expected`, healthy, or
+/// impossible to judge? See DESIGN §3.9 "Heal" for the rules.
+pub async fn classify_target(
+    state: &InstallState,
+    root: &Path,
+    target: &Target<'_>,
+    expected: Expected,
+) -> TargetState {
+    match state.store {
+        StoreState::Absent => return TargetState::Healthy,
+        StoreState::Unsafe => return TargetState::Undeterminable,
+        StoreState::Real => {}
+    }
+    if !is_safe_dep_id(target.dep_id) || !is_registry_package_name(target.name) {
+        return TargetState::Undeterminable;
+    }
+    let dir = package_dir(root, target.dep_id, target.name);
+    if !tokio::fs::metadata(&dir).await.is_ok_and(|m| m.is_dir()) {
+        return TargetState::Healthy;
+    }
+    let bytes = bytes_check(&dir, target, expected).await;
+    if let HiddenLock::Parsed(nodes) = &state.hidden {
+        match nodes.get(target.dep_id) {
+            None => return TargetState::Stale,
+            Some(node) => {
+                if node.get(2).and_then(Value::as_str) != target.lock_sha512 {
+                    return TargetState::Stale;
+                }
+            }
+        }
+    }
+    if bytes == ByteCheck::Mismatch {
+        return TargetState::Stale;
+    }
+    if !matches!(state.hidden, HiddenLock::Parsed(_)) && bytes == ByteCheck::Unknown {
+        return TargetState::Undeterminable;
+    }
+    TargetState::Healthy
+}
+
+async fn remove_entry(path: &Path) -> std::io::Result<()> {
+    let meta = tokio::fs::symlink_metadata(path).await?;
+    if meta.file_type().is_symlink() {
+        crate::utils::fs::remove_link(path).await
+    } else if meta.file_type().is_dir() {
+        tokio::fs::remove_dir_all(path).await
+    } else {
+        tokio::fs::remove_file(path).await
+    }
+}
+
+/// Remove the hidden lock and each stale store entry. Callers pass only
+/// ids [`classify_target`] judged stale, which requires a real store dir.
+pub async fn invalidate(root: &Path, state: &InstallState, stale: &[String]) -> Invalidation {
+    let mut out = Invalidation::default();
+    if stale.is_empty() || state.store != StoreState::Real {
+        return out;
+    }
+    if state.hidden_present {
+        if let Err(e) = remove_entry(&root.join(VLT_HIDDEN_LOCK_REL)).await {
+            if e.kind() != std::io::ErrorKind::NotFound {
+                out.failed
+                    .push((VLT_HIDDEN_LOCK_REL.to_string(), e.to_string()));
+            }
+        }
+    }
+    let unique: BTreeSet<&String> = stale.iter().collect();
+    for id in unique {
+        if !is_safe_dep_id(id) {
+            continue;
+        }
+        match remove_entry(&root.join(VLT_STORE_DIR).join(id)).await {
+            Ok(()) => out.removed.push(id.clone()),
+            Err(e) if e.kind() == std::io::ErrorKind::NotFound => out.removed.push(id.clone()),
+            Err(e) => out.failed.push((id.clone(), e.to_string())),
+        }
+    }
+    out
+}
+
+/// The vlt nodes the ledger's `redirect_vlt_lock_node` edits name for each
+/// of `purls`, with the purl's patch record.
+pub fn ledger_targets(state: &RedirectState, purls: &[String]) -> Vec<LedgerTarget> {
+    let mut out: Vec<LedgerTarget> = Vec::new();
+    for purl in purls {
+        let Some((ecosystem, name, version)) = purl_parts(purl) else {
+            continue;
+        };
+        if ecosystem != "npm" {
+            continue;
+        }
+        let canon = canonical_purl(purl);
+        let record = state
+            .records
+            .iter()
+            .find(|(key, _)| canonical_purl(key) == canon)
+            .map(|(_, record)| record.clone());
+        for edit in &state.edits {
+            if edit.kind != vlt::KIND
+                || !edit
+                    .key
+                    .as_deref()
+                    .is_some_and(|key| vlt::claims_key(key, &name, &version))
+            {
+                continue;
+            }
+            let Some(entry) = edit
+                .original
+                .as_ref()
+                .and_then(Value::as_str)
+                .and_then(parse_node_entry_text)
+            else {
+                continue;
+            };
+            if out.iter().any(|t| t.dep_id == entry.key && t.purl == *purl) {
+                continue;
+            }
+            out.push(LedgerTarget {
+                purl: purl.clone(),
+                dep_id: entry.key.to_string(),
+                name: name.clone(),
+                record: record.clone(),
+            });
+        }
+    }
+    out
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::hash::git_sha256::compute_git_sha256_from_bytes;
+    use crate::manifest::schema::PatchFileInfo;
+    use crate::patch::redirect::FileEdit;
+    use std::collections::HashMap;
+
+    const ID: &str = "~npm~left-pad@1.3.0";
+    const PRISTINE: &[u8] = b"module.exports = 'pristine'\n";
+    const PATCHED: &[u8] = b"module.exports = 'patched'\n";
+    const LOCK_SHA: &str = "sha512-PATCHED";
+
+    fn record() -> PatchRecord {
+        PatchRecord {
+            uuid: "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa".into(),
+            exported_at: String::new(),
+            files: HashMap::from([(
+                "package/index.js".to_string(),
+                PatchFileInfo {
+                    before_hash: compute_git_sha256_from_bytes(PRISTINE),
+                    after_hash: compute_git_sha256_from_bytes(PATCHED),
+                },
+            )]),
+            vulnerabilities: HashMap::new(),
+            description: String::new(),
+            license: String::new(),
+            tier: String::new(),
+        }
+    }
+
+    fn store(root: &Path, id: &str, index: &[u8]) -> PathBuf {
+        let dir = package_dir(root, id, "left-pad");
+        std::fs::create_dir_all(&dir).unwrap();
+        std::fs::write(dir.join("index.js"), index).unwrap();
+        std::fs::write(dir.join("package.json"), b"{\"name\":\"left-pad\"}").unwrap();
+        dir
+    }
+
+    fn hidden(root: &Path, slot2: Option<&str>) {
+        let nodes = match slot2 {
+            Some(sha) => serde_json::json!({ ID: [0, "left-pad", sha, null] }),
+            None => serde_json::json!({}),
+        };
+        std::fs::write(
+            root.join(VLT_HIDDEN_LOCK_REL),
+            serde_json::to_vec(&serde_json::json!({ "nodes": nodes })).unwrap(),
+        )
+        .unwrap();
+    }
+
+    fn target<'a>(record: Option<&'a PatchRecord>, artifact: Option<&'a [u8]>) -> Target<'a> {
+        Target {
+            dep_id: ID,
+            name: "left-pad",
+            lock_sha512: Some(LOCK_SHA),
+            record,
+            artifact,
+        }
+    }
+
+    async fn classify(root: &Path, target: &Target<'_>, expected: Expected) -> TargetState {
+        let state = read_install_state(root).await;
+        classify_target(&state, root, target, expected).await
+    }
+
+    fn tarball(entries: &[(&str, &[u8])]) -> Vec<u8> {
+        let gz = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+        let mut builder = tar::Builder::new(gz);
+        for (name, data) in entries {
+            let mut header = tar::Header::new_gnu();
+            header.set_size(data.len() as u64);
+            header.set_mode(0o644);
+            header.set_cksum();
+            builder.append_data(&mut header, name, *data).unwrap();
+        }
+        builder.into_inner().unwrap().finish().unwrap()
+    }
+
+    #[tokio::test]
+    async fn rule_a_hidden_lock_integrity_differs() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        hidden(tmp.path(), Some("sha512-UPSTREAM"));
+        let rec = record();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Stale
+        );
+    }
+
+    #[tokio::test]
+    async fn rule_b_hidden_lock_without_the_node() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        hidden(tmp.path(), None);
+        let rec = record();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Stale
+        );
+    }
+
+    #[tokio::test]
+    async fn rule_c_bytes_mismatch_whatever_the_hidden_lock_says() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PRISTINE);
+        hidden(tmp.path(), Some(LOCK_SHA));
+        let rec = record();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Stale
+        );
+        std::fs::remove_file(tmp.path().join(VLT_HIDDEN_LOCK_REL)).unwrap();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Stale
+        );
+    }
+
+    #[tokio::test]
+    async fn healthy_patched_and_pristine_trees() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        hidden(tmp.path(), Some(LOCK_SHA));
+        let rec = record();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Healthy
+        );
+        std::fs::remove_file(tmp.path().join(VLT_HIDDEN_LOCK_REL)).unwrap();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Healthy,
+            "a tree without a hidden lock is judged by its bytes"
+        );
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Pristine).await,
+            TargetState::Stale,
+            "patched bytes are stale once the pin is restored"
+        );
+        store(tmp.path(), ID, PRISTINE);
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Pristine).await,
+            TargetState::Healthy
+        );
+    }
+
+    #[tokio::test]
+    async fn undeterminable_without_hidden_lock_record_or_artifact() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        assert_eq!(
+            classify(tmp.path(), &target(None, None), Expected::Patched).await,
+            TargetState::Undeterminable
+        );
+        hidden(tmp.path(), Some(LOCK_SHA));
+        assert_eq!(
+            classify(tmp.path(), &target(None, None), Expected::Patched).await,
+            TargetState::Healthy,
+            "a parsed hidden lock that agrees decides alone"
+        );
+        std::fs::write(tmp.path().join(VLT_HIDDEN_LOCK_REL), b"{not json").unwrap();
+        assert_eq!(
+            classify(tmp.path(), &target(None, None), Expected::Pristine).await,
+            TargetState::Undeterminable
+        );
+    }
+
+    #[tokio::test]
+    async fn no_record_compares_against_the_artifact_bytes() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        let dir = package_dir(tmp.path(), ID, "left-pad");
+        std::fs::create_dir_all(dir.join("node_modules/dep")).unwrap();
+        std::fs::write(dir.join("node_modules/dep/x.js"), b"ignored").unwrap();
+        let good = tarball(&[
+            ("package/index.js", PATCHED),
+            ("package/package.json", b"{\"name\":\"left-pad\"}"),
+        ]);
+        let bad = tarball(&[
+            ("package/index.js", PRISTINE),
+            ("package/package.json", b"{\"name\":\"left-pad\"}"),
+        ]);
+        assert_eq!(
+            classify(tmp.path(), &target(None, Some(&good)), Expected::Patched).await,
+            TargetState::Healthy
+        );
+        assert_eq!(
+            classify(tmp.path(), &target(None, Some(&bad)), Expected::Patched).await,
+            TargetState::Stale
+        );
+        std::fs::write(dir.join("extra.js"), b"x").unwrap();
+        assert_eq!(
+            classify(tmp.path(), &target(None, Some(&good)), Expected::Patched).await,
+            TargetState::Stale,
+            "an extra installed file is not the artifact"
+        );
+        assert_eq!(
+            classify(
+                tmp.path(),
+                &target(None, Some(b"not a tarball")),
+                Expected::Patched
+            )
+            .await,
+            TargetState::Undeterminable
+        );
+    }
+
+    #[tokio::test]
+    async fn an_uninstalled_target_is_healthy() {
+        let tmp = tempfile::tempdir().unwrap();
+        let rec = record();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Healthy
+        );
+        std::fs::create_dir_all(tmp.path().join(VLT_STORE_DIR)).unwrap();
+        assert_eq!(
+            classify(tmp.path(), &target(Some(&rec), None), Expected::Patched).await,
+            TargetState::Healthy
+        );
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn a_linked_node_modules_or_store_outside_the_root_is_undeterminable_and_kept() {
+        for linked in ["node_modules", VLT_STORE_DIR] {
+            let tmp = tempfile::tempdir().unwrap();
+            let project = tmp.path().join("project");
+            let outside = tmp.path().join("outside");
+            std::fs::create_dir_all(&project).unwrap();
+            let real_root = outside.join("root");
+            store(&real_root, ID, PRISTINE);
+            if linked == "node_modules" {
+                std::os::unix::fs::symlink(real_root.join("node_modules"), project.join(linked))
+                    .unwrap();
+            } else {
+                std::fs::create_dir_all(project.join("node_modules")).unwrap();
+                std::os::unix::fs::symlink(real_root.join(VLT_STORE_DIR), project.join(linked))
+                    .unwrap();
+            }
+            hidden(&real_root, Some("sha512-UPSTREAM"));
+            let rec = record();
+            let state = read_install_state(&project).await;
+            assert_eq!(
+                classify_target(
+                    &state,
+                    &project,
+                    &target(Some(&rec), None),
+                    Expected::Patched
+                )
+                .await,
+                TargetState::Undeterminable,
+                "{linked}"
+            );
+            let out = invalidate(&project, &state, &[ID.to_string()]).await;
+            assert!(out.removed.is_empty() && out.failed.is_empty(), "{out:?}");
+            assert!(package_dir(&real_root, ID, "left-pad")
+                .join("index.js")
+                .exists());
+        }
+    }
+
+    #[test]
+    fn dep_ids_are_single_safe_segments() {
+        for ok in [
+            ID,
+            "··left-pad@1.3.0",
+            "~npm~@a+b@1.0.0~peer.2",
+            "·npm·x@1.0.0",
+        ] {
+            assert!(is_safe_dep_id(ok), "{ok}");
+        }
+        for bad in [
+            "",
+            "..",
+            ".",
+            "~npm~../x@1",
+            "~..~x@1.0.0",
+            "a/b",
+            "a\\b",
+            "C:x",
+            "~npm~x@1.0.0\n",
+        ] {
+            assert!(!is_safe_dep_id(bad), "{bad:?}");
+        }
+    }
+
+    #[tokio::test]
+    async fn invalidation_removes_the_hidden_lock_and_stale_entries_only() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PRISTINE);
+        let other = "~npm~ms@2.1.3";
+        let other_dir = package_dir(tmp.path(), other, "left-pad");
+        std::fs::create_dir_all(&other_dir).unwrap();
+        hidden(tmp.path(), Some("sha512-UPSTREAM"));
+        let state = read_install_state(tmp.path()).await;
+        let out = invalidate(tmp.path(), &state, &[ID.to_string(), "../escape".into()]).await;
+        assert_eq!(out.removed, [ID.to_string()]);
+        assert!(out.failed.is_empty());
+        assert!(!tmp.path().join(VLT_HIDDEN_LOCK_REL).exists());
+        assert!(!tmp.path().join(VLT_STORE_DIR).join(ID).exists());
+        assert!(other_dir.exists());
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn a_linked_store_entry_is_unlinked_not_traversed() {
+        let tmp = tempfile::tempdir().unwrap();
+        let target_root = tmp.path().join("elsewhere");
+        store(&target_root, ID, PRISTINE);
+        let root = tmp.path().join("project");
+        std::fs::create_dir_all(root.join(VLT_STORE_DIR)).unwrap();
+        std::os::unix::fs::symlink(
+            target_root.join(VLT_STORE_DIR).join(ID),
+            root.join(VLT_STORE_DIR).join(ID),
+        )
+        .unwrap();
+        let dep_link = root.join(VLT_STORE_DIR).join("~npm~ms@2.1.3");
+        std::fs::create_dir_all(dep_link.join("node_modules")).unwrap();
+        std::os::unix::fs::symlink(
+            target_root.join(VLT_STORE_DIR),
+            dep_link.join("node_modules/linked"),
+        )
+        .unwrap();
+        let state = read_install_state(&root).await;
+        let out = invalidate(&root, &state, &[ID.to_string(), "~npm~ms@2.1.3".into()]).await;
+        assert!(out.failed.is_empty(), "{out:?}");
+        assert!(!root.join(VLT_STORE_DIR).join(ID).exists());
+        assert!(
+            package_dir(&target_root, ID, "left-pad")
+                .join("index.js")
+                .exists(),
+            "the link target survives"
+        );
+        assert!(!dep_link.exists());
+        assert!(target_root.join(VLT_STORE_DIR).exists());
+    }
+
+    #[cfg(windows)]
+    #[tokio::test]
+    async fn store_entries_with_junction_and_dir_symlink_children_are_removed_alone() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let sibling = "~npm~ms@2.1.3";
+        let sibling_dir = package_dir(root, sibling, "ms");
+        std::fs::create_dir_all(&sibling_dir).unwrap();
+        std::fs::write(sibling_dir.join("index.js"), b"ms").unwrap();
+        let entry = root.join(VLT_STORE_DIR).join(ID).join("node_modules");
+        std::fs::create_dir_all(entry.join("left-pad")).unwrap();
+        let status = std::process::Command::new("cmd")
+            .args(["/C", "mklink", "/J"])
+            .arg(entry.join("ms"))
+            .arg(
+                root.join(VLT_STORE_DIR)
+                    .join(sibling)
+                    .join("node_modules/ms"),
+            )
+            .status()
+            .unwrap();
+        assert!(status.success());
+        if std::os::windows::fs::symlink_dir(
+            root.join(VLT_STORE_DIR).join(sibling),
+            entry.join("dir-link"),
+        )
+        .is_err()
+        {
+            eprintln!("dir symlinks need Developer Mode; junction leg only");
+        }
+        let state = read_install_state(root).await;
+        let out = invalidate(root, &state, &[ID.to_string()]).await;
+        assert!(out.failed.is_empty(), "{out:?}");
+        assert!(!root.join(VLT_STORE_DIR).join(ID).exists());
+        assert!(sibling_dir.join("index.js").exists());
+    }
+
+    #[test]
+    fn owned_instances_need_a_socket_url_whose_leaf_matches_the_dep_id() {
+        let lock = r#"{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-P","https://patch.socket.dev/patch/npm/t/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-M","https://patch.socket.dev/patch/npm/t/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/left-pad-1.3.0.tgz"],
+    "~npm~@a+b@1.0.0": [0,"@a/b","sha512-S","http://localhost:4026/patch/npm/t/cccccccc-cccc-4ccc-8ccc-cccccccccccc/b-1.0.0.tgz"],
+    "~custom~c@1.0.0": [0,"c","sha512-C","https://patch.socket.dev/patch/npm/t/dddddddd-dddd-4ddd-8ddd-dddddddddddd/c-1.0.0.tgz"],
+    "~npm~d@1.0.0": [0,"d","sha512-D","https://registry.npmjs.org/d/-/d-1.0.0.tgz"]
+  },
+  "edges": {}
+}
+"#;
+        let ids: Vec<String> = socket_owned_instances(lock, &[])
+            .into_iter()
+            .map(|i| i.dep_id)
+            .collect();
+        assert_eq!(ids, ["~npm~left-pad@1.3.0"]);
+        let with_origin = socket_owned_instances(lock, &["http://localhost:4026".into()]);
+        let scoped = with_origin.iter().find(|i| i.name == "@a/b").unwrap();
+        assert_eq!(scoped.patch_uuid, "cccccccc-cccc-4ccc-8ccc-cccccccccccc");
+        assert_eq!(scoped.sha512.as_deref(), Some("sha512-S"));
+        assert_eq!(
+            lock_sha512(lock, "~npm~d@1.0.0").as_deref(),
+            Some("sha512-D")
+        );
+        assert!(socket_owned_instances("\u{feff}{}", &[]).is_empty());
+    }
+
+    #[test]
+    fn ledger_targets_follow_the_claimed_edits() {
+        let mut state = RedirectState::new();
+        let edit = |key: &str, id: &str| FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: vlt::KIND.into(),
+            action: "rewritten".into(),
+            key: Some(key.into()),
+            original: Some(Value::String(format!("\"{id}\": [0,\"x\"]"))),
+            new: Some(Value::String(format!("\"{id}\": [0,\"x\",\"s\",\"u\"]"))),
+        };
+        state.edits = vec![
+            edit("left-pad@1.3.0", "~npm~left-pad@1.3.0"),
+            edit("left-pad@1.3.0~peer.2", "~npm~left-pad@1.3.0~peer.2"),
+            edit("left-pad@1.3.1", "~npm~left-pad@1.3.1"),
+        ];
+        state
+            .records
+            .insert("pkg:npm/left-pad@1.3.0".into(), record());
+        let targets = ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()]);
+        let ids: Vec<&str> = targets.iter().map(|t| t.dep_id.as_str()).collect();
+        assert_eq!(ids, ["~npm~left-pad@1.3.0", "~npm~left-pad@1.3.0~peer.2"]);
+        assert!(targets.iter().all(|t| t.record.is_some()));
+    }
+}
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs b/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs
new file mode 100644
index 00000000..1875b7d2
--- /dev/null
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs
@@ -0,0 +1,503 @@
+//! The hosted vlt artifact preflight (`redirect_vlt_artifact_unverifiable`).
+//!
+//! vlt always sends `accept-encoding: gzip`, and it hashes the bytes it
+//! received, so a server that re-gzips the archive makes every install fail
+//! `EINTEGRITY`. Before a vlt lock is pinned to a hosted artifact, the
+//! artifact is fetched the way vlt fetches it and hashed raw: the workspace
+//! reqwest is built without gzip/brotli, so bodies are never decoded.
+
+use std::collections::{BTreeMap, BTreeSet};
+use std::time::Duration;
+
+use base64::Engine as _;
+use sha2::{Digest, Sha512};
+
+use super::{vlt, DepOverride};
+use crate::api::client::{ApiClient, MAX_VENDOR_PACKAGE_BYTES};
+use crate::constants::npm_family::VLT_LOCK;
+use crate::utils::http::{read_capped_typed, ReadCappedError};
+
+/// The `accept-encoding` vlt sends for registry tarballs.
+pub const VLT_ACCEPT_ENCODING: &str = "gzip;q=1.0, identity;q=0.5";
+
+/// The failure reason for a run that may not touch the network.
+pub const OFFLINE_REASON: &str = "offline";
+
+const MAX_CONCURRENT_PROBES: usize = 4;
+const HEADERS_TIMEOUT: Duration = Duration::from_secs(60);
+const BODY_TIMEOUT: Duration = Duration::from_secs(300);
+
+/// What fetching one artifact URL as vlt does returned.
+#[derive(Debug, Clone, Default, PartialEq, Eq)]
+pub struct ArtifactProbe {
+    pub status: Option<u16>,
+    pub content_encoding: Option<String>,
+    /// SRI form (`sha512-<base64>`) of the raw body.
+    pub sha512: Option<String>,
+    /// The raw body, kept for the warm-tree heal's no-record comparison.
+    pub body: Option<Vec<u8>>,
+    pub error: Option<String>,
+}
+
+impl ArtifactProbe {
+    /// Why vlt would fail to verify this artifact against `sha512`, or
+    /// `None` when it passes.
+    pub fn failure(&self, sha512: &str) -> Option<String> {
+        if let Some(error) = &self.error {
+            return Some(format!("fetch error {error}"));
+        }
+        match self.status {
+            Some(200) => {}
+            Some(status) => return Some(format!("http {status}")),
+            None => return Some("fetch error no response".to_string()),
+        }
+        if let Some(encoding) = self
+            .content_encoding
+            .as_deref()
+            .map(str::trim)
+            .filter(|e| !e.is_empty() && !e.eq_ignore_ascii_case("identity"))
+        {
+            return Some(format!("content-encoding {encoding}"));
+        }
+        if self.sha512.as_deref() != Some(sha512) {
+            return Some("sha512 mismatch".to_string());
+        }
+        None
+    }
+}
+
+/// The SRI form of `bytes`' sha512.
+pub fn sha512_sri(bytes: &[u8]) -> String {
+    format!(
+        "sha512-{}",
+        base64::engine::general_purpose::STANDARD.encode(Sha512::digest(bytes))
+    )
+}
+
+fn fetch_error(error: impl Into<String>) -> ArtifactProbe {
+    ArtifactProbe {
+        error: Some(error.into()),
+        ..ArtifactProbe::default()
+    }
+}
+
+/// `GET url` with vlt's `accept-encoding` (and reqwest's default
+/// `Accept: */*`), following up to ten redirects, the body capped like
+/// every other artifact download.
+pub async fn fetch_artifact_probe(client: &reqwest::Client, url: &str) -> ArtifactProbe {
+    fetch_capped(client, url, MAX_VENDOR_PACKAGE_BYTES).await
+}
+
+async fn fetch_capped(client: &reqwest::Client, url: &str, max: u64) -> ArtifactProbe {
+    if !(url.starts_with("https://") || url.starts_with("http://")) {
+        return fetch_error("refusing a non-http(s) artifact URL");
+    }
+    let sent = tokio::time::timeout(
+        HEADERS_TIMEOUT,
+        client
+            .get(url)
+            .header(reqwest::header::ACCEPT_ENCODING, VLT_ACCEPT_ENCODING)
+            .send(),
+    )
+    .await;
+    let resp = match sent {
+        Ok(Ok(resp)) => resp,
+        Ok(Err(e)) => return fetch_error(e.without_url().to_string()),
+        Err(_) => return fetch_error(format!("no response within {HEADERS_TIMEOUT:?}")),
+    };
+    let status = resp.status().as_u16();
+    let content_encoding = resp
+        .headers()
+        .get(reqwest::header::CONTENT_ENCODING)
+        .map(|v| String::from_utf8_lossy(v.as_bytes()).into_owned());
+    if status != 200 {
+        return ArtifactProbe {
+            status: Some(status),
+            content_encoding,
+            ..ArtifactProbe::default()
+        };
+    }
+    let body = tokio::time::timeout(
+        BODY_TIMEOUT,
+        read_capped_typed(resp, max, "hosted artifact"),
+    )
+    .await
+    .unwrap_or_else(|_| {
+        Err(ReadCappedError::Truncated(format!(
+            "hosted artifact body not received within {BODY_TIMEOUT:?}"
+        )))
+    });
+    match body {
+        Ok(bytes) => ArtifactProbe {
+            status: Some(status),
+            content_encoding,
+            sha512: Some(sha512_sri(&bytes)),
+            body: Some(bytes),
+            error: None,
+        },
+        Err(e) => ArtifactProbe {
+            status: Some(status),
+            content_encoding,
+            error: Some(e.to_string()),
+            ..ArtifactProbe::default()
+        },
+    }
+}
+
+/// Probe every distinct URL in `urls` through `api`'s plain client (no
+/// `Authorization`: the grant token is in the URL), at most four at a time.
+pub async fn probe_artifacts(
+    api: &ApiClient,
+    urls: &BTreeSet<String>,
+) -> BTreeMap<String, ArtifactProbe> {
+    let semaphore = std::sync::Arc::new(tokio::sync::Semaphore::new(MAX_CONCURRENT_PROBES));
+    let mut tasks = tokio::task::JoinSet::new();
+    for url in urls {
+        let client = api.plain_http().clone();
+        let semaphore = semaphore.clone();
+        let url = url.clone();
+        tasks.spawn(async move {
+            let _permit = semaphore.acquire_owned().await;
+            let probe = fetch_artifact_probe(&client, &url).await;
+            (url, probe)
+        });
+    }
+    let mut out = BTreeMap::new();
+    while let Some(joined) = tasks.join_next().await {
+        if let Ok((url, probe)) = joined {
+            out.insert(url, probe);
+        }
+    }
+    for url in urls {
+        out.entry(url.clone())
+            .or_insert_with(|| fetch_error("probe task failed"));
+    }
+    out
+}
+
+/// One override the preflight must probe.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub struct PreflightDep {
+    pub patch_uuid: String,
+    pub artifact_url: String,
+    pub sha512: String,
+    /// Every default-registry instance already carries this URL and sha512
+    /// (an earlier run pinned it).
+    pub already_pinned: bool,
+}
+
+/// The npm overrides the preflight probes: `vlt-lock.json` passes the
+/// lock-level parse, the override has a sha512, and it has at least one
+/// default-registry instance in the lock. Nothing is probed without a
+/// `vlt-lock.json`.
+pub fn preflight_scope(
+    files: &BTreeMap<String, String>,
+    overrides: &[DepOverride],
+) -> Vec<PreflightDep> {
+    let Some(text) = files.get(VLT_LOCK) else {
+        return Vec::new();
+    };
+    let Ok(lock) = vlt::parse_hosted_lock(text) else {
+        return Vec::new();
+    };
+    overrides
+        .iter()
+        .filter(|dep| dep.ecosystem == "npm")
+        .filter_map(|dep| {
+            let sha512 = dep.integrity.sha512.as_deref().filter(|s| !s.is_empty())?;
+            let ids = vlt::default_instances(&lock, dep);
+            if ids.is_empty() {
+                return None;
+            }
+            let already_pinned =
+                vlt::every_instance_pinned(text, &ids, sha512, &dep.artifact_url).is_some();
+            Some(PreflightDep {
+                patch_uuid: dep.patch_uuid.clone(),
+                artifact_url: dep.artifact_url.clone(),
+                sha512: sha512.to_string(),
+                already_pinned,
+            })
+        })
+        .collect()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::api::client::ApiClientOptions;
+    use crate::patch::redirect::Integrity;
+    use std::io::Write as _;
+    use wiremock::matchers::{method, path};
+    use wiremock::{Mock, MockServer, Request, ResponseTemplate};
+
+    const BODY: &[u8] = b"patched tarball bytes";
+
+    fn api(token: Option<&str>) -> ApiClient {
+        ApiClient::new(ApiClientOptions {
+            api_url: "http://127.0.0.1:9".to_string(),
+            api_token: token.map(str::to_string),
+            use_public_proxy: false,
+            org_slug: Some("org".to_string()),
+        })
+    }
+
+    async fn probe_of(server: &MockServer, route: &str) -> ArtifactProbe {
+        fetch_artifact_probe(api(None).plain_http(), &format!("{}{route}", server.uri())).await
+    }
+
+    fn gzip(bytes: &[u8]) -> Vec<u8> {
+        let mut enc = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+        enc.write_all(bytes).unwrap();
+        enc.finish().unwrap()
+    }
+
+    #[tokio::test]
+    async fn identity_body_with_the_granted_sha512_passes() {
+        let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .and(path("/a.tgz"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(BODY))
+            .mount(&server)
+            .await;
+        let probe = probe_of(&server, "/a.tgz").await;
+        assert_eq!(probe.failure(&sha512_sri(BODY)), None);
+        assert_eq!(probe.body.as_deref(), Some(BODY));
+    }
+
+    #[tokio::test]
+    async fn an_explicit_identity_encoding_passes() {
+        let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .respond_with(
+                ResponseTemplate::new(200)
+                    .insert_header("content-encoding", "identity")
+                    .set_body_bytes(BODY),
+            )
+            .mount(&server)
+            .await;
+        assert_eq!(
+            probe_of(&server, "/a.tgz").await.failure(&sha512_sri(BODY)),
+            None
+        );
+    }
+
+    #[tokio::test]
+    async fn every_failure_reason() {
+        let server = MockServer::start().await;
+        let gz = gzip(BODY);
+        Mock::given(method("GET"))
+            .and(path("/gz.tgz"))
+            .respond_with(
+                ResponseTemplate::new(200)
+                    .insert_header("content-encoding", "gzip")
+                    .set_body_bytes(gz.clone()),
+            )
+            .mount(&server)
+            .await;
+        Mock::given(method("GET"))
+            .and(path("/other.tgz"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(b"other".to_vec()))
+            .mount(&server)
+            .await;
+        Mock::given(method("GET"))
+            .and(path("/missing.tgz"))
+            .respond_with(ResponseTemplate::new(404))
+            .mount(&server)
+            .await;
+        Mock::given(method("GET"))
+            .and(path("/broken.tgz"))
+            .respond_with(ResponseTemplate::new(500))
+            .mount(&server)
+            .await;
+        let expected = sha512_sri(BODY);
+
+        let gz_probe = probe_of(&server, "/gz.tgz").await;
+        assert_eq!(
+            gz_probe.failure(&expected).as_deref(),
+            Some("content-encoding gzip")
+        );
+        assert_eq!(
+            gz_probe.sha512,
+            Some(sha512_sri(&gz)),
+            "the body is hashed as received, never decoded"
+        );
+        assert_eq!(
+            probe_of(&server, "/other.tgz")
+                .await
+                .failure(&expected)
+                .as_deref(),
+            Some("sha512 mismatch")
+        );
+        assert_eq!(
+            probe_of(&server, "/missing.tgz")
+                .await
+                .failure(&expected)
+                .as_deref(),
+            Some("http 404")
+        );
+        assert_eq!(
+            probe_of(&server, "/broken.tgz")
+                .await
+                .failure(&expected)
+                .as_deref(),
+            Some("http 500")
+        );
+        let refused =
+            fetch_artifact_probe(api(None).plain_http(), "http://127.0.0.1:9/a.tgz").await;
+        assert!(
+            refused
+                .failure(&expected)
+                .is_some_and(|r| r.starts_with("fetch error ")),
+            "{refused:?}"
+        );
+        let scheme = fetch_artifact_probe(api(None).plain_http(), "file:///etc/passwd").await;
+        assert!(scheme
+            .failure(&expected)
+            .is_some_and(|r| r.starts_with("fetch error ")));
+    }
+
+    #[tokio::test]
+    async fn sends_vlt_accept_encoding_and_no_authorization() {
+        let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(BODY))
+            .expect(1)
+            .mount(&server)
+            .await;
+        let urls: BTreeSet<String> = [format!("{}/a.tgz", server.uri())].into();
+        let probes = probe_artifacts(&api(Some("sktsec_secret_token")), &urls).await;
+        assert_eq!(probes.len(), 1);
+        let requests: Vec<Request> = server.received_requests().await.unwrap();
+        assert_eq!(requests.len(), 1);
+        assert_eq!(
+            requests[0]
+                .headers
+                .get("accept-encoding")
+                .map(|v| v.as_bytes()),
+            Some(VLT_ACCEPT_ENCODING.as_bytes())
+        );
+        assert!(requests[0].headers.get("authorization").is_none());
+        assert!(requests[0]
+            .headers
+            .get("accept")
+            .is_none_or(|v| v.as_bytes() == b"*/*"));
+    }
+
+    #[tokio::test]
+    async fn redirect_chains_of_ten_pass_and_eleven_fail() {
+        let server = MockServer::start().await;
+        for hop in 0..11 {
+            Mock::given(method("GET"))
+                .and(path(format!("/r{hop}")))
+                .respond_with(
+                    ResponseTemplate::new(302)
+                        .insert_header("location", format!("{}/r{}", server.uri(), hop + 1)),
+                )
+                .mount(&server)
+                .await;
+        }
+        Mock::given(method("GET"))
+            .and(path("/r11"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(BODY))
+            .mount(&server)
+            .await;
+        let expected = sha512_sri(BODY);
+        assert_eq!(probe_of(&server, "/r1").await.failure(&expected), None);
+        assert!(probe_of(&server, "/r0")
+            .await
+            .failure(&expected)
+            .is_some_and(|r| r.starts_with("fetch error ")));
+    }
+
+    #[tokio::test]
+    async fn a_body_over_the_cap_is_a_fetch_error() {
+        let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(BODY))
+            .mount(&server)
+            .await;
+        let url = format!("{}/big.tgz", server.uri());
+        let probe = fetch_capped(api(None).plain_http(), &url, 4).await;
+        assert!(
+            probe
+                .failure(&sha512_sri(BODY))
+                .is_some_and(|r| r.starts_with("fetch error ") && r.contains("too large")),
+            "{probe:?}"
+        );
+        assert_eq!(probe.body, None);
+    }
+
+    #[tokio::test]
+    async fn one_request_per_distinct_url() {
+        let server = MockServer::start().await;
+        Mock::given(method("GET"))
+            .respond_with(ResponseTemplate::new(200).set_body_bytes(BODY))
+            .mount(&server)
+            .await;
+        let urls: BTreeSet<String> = (0..6)
+            .map(|i| format!("{}/u{}.tgz", server.uri(), i % 3))
+            .collect();
+        let probes = probe_artifacts(&api(None), &urls).await;
+        assert_eq!(probes.len(), 3);
+        assert_eq!(server.received_requests().await.unwrap().len(), 3);
+    }
+
+    fn dep(name: &str, sha512: Option<&str>) -> DepOverride {
+        DepOverride {
+            ecosystem: "npm".into(),
+            name: name.into(),
+            namespace: None,
+            version: "1.0.0".into(),
+            token: String::new(),
+            patch_uuid: format!("uuid-{name}"),
+            artifact_url: format!("https://patch.socket.dev/patch/npm/t/u/{name}-1.0.0.tgz"),
+            berry_zip_url: None,
+            registry_override: None,
+            integrity: Integrity {
+                sha512: sha512.map(str::to_string),
+                ..Integrity::default()
+            },
+        }
+    }
+
+    fn lock(nodes: &[&str]) -> BTreeMap<String, String> {
+        let body = nodes
+            .iter()
+            .map(|n| format!("    {n}"))
+            .collect::<Vec<_>>()
+            .join(",\n");
+        [(
+            VLT_LOCK.to_string(),
+            format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n{body}\n  }},\n  \"edges\": {{}}\n}}\n"
+            ),
+        )]
+        .into()
+    }
+
+    #[test]
+    fn scope_needs_a_parsed_lock_a_sha512_and_a_default_instance() {
+        let files = lock(&[
+            r#""~npm~a@1.0.0": [0,"a","sha512-old","https://registry.npmjs.org/a/-/a-1.0.0.tgz"]"#,
+            r#""~npm~b@1.0.0": [0,"b","sha512-B","https://patch.socket.dev/patch/npm/t/u/b-1.0.0.tgz"]"#,
+            r#""~custom~c@1.0.0": [0,"c"]"#,
+        ]);
+        let deps = [
+            dep("a", Some("sha512-A")),
+            dep("b", Some("sha512-B")),
+            dep("c", Some("sha512-C")),
+            dep("d", Some("sha512-D")),
+            dep("a", None),
+        ];
+        let scope = preflight_scope(&files, &deps);
+        let got: Vec<(&str, bool)> = scope
+            .iter()
+            .map(|d| (d.patch_uuid.as_str(), d.already_pinned))
+            .collect();
+        assert_eq!(got, [("uuid-a", false), ("uuid-b", true)]);
+        assert!(preflight_scope(&BTreeMap::new(), &deps).is_empty());
+        let mut bom = files.clone();
+        bom.insert(VLT_LOCK.into(), format!("\u{feff}{}", files[VLT_LOCK]));
+        assert!(preflight_scope(&bom, &deps).is_empty());
+    }
+}

From f38c1487c3eb328c9b0fef5367ad743eff099041 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Fri, 25 Sep 2026 23:43:54 -0400
Subject: [PATCH 14/46] Verify vlt takeovers before reverting them

A vendored vlt package taken over by `scan --mode hosted` is now
fetched and verified before its vendored state is reverted, dry runs
included. An artifact vlt would reject keeps the package vendored
instead of leaving a lock pinned to bytes nobody checked.

A same-run --vex attests a vlt package only when the heal checked its
installed copy; a pin on a host socket-patch does not own is left to a
later `socket-patch vex`. When vlt-lock.json is withheld beside another
lockfile, its old pin no longer confirms the package, and the warning
says only vlt-lock.json was left unchanged.

The heal keeps every store entry when node_modules/.vlt-lock.json
cannot be removed, so vlt never trusts a hidden lock with dangling
links, and packages that bundle dependencies are no longer
re-invalidated on every run.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/CLI_CONTRACT.md       |   4 +-
 .../src/commands/scan/hosted.rs               |  16 +-
 .../src/commands/scan/hosted/vlt.rs           | 164 ++++++++--
 .../tests/in_process_redirect/vlt.rs          | 301 +++++++++++++++++-
 .../tests/in_process_rollback_hosted/vlt.rs   |  85 +++++
 .../src/patch/redirect/vlt.rs                 |   8 +
 .../src/patch/redirect/vlt_heal.rs            |  62 +++-
 .../src/patch/redirect/vlt_preflight.rs       |  49 ++-
 8 files changed, 632 insertions(+), 57 deletions(-)

diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 706583ed..1947b076 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -1294,8 +1294,8 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_lockfile_version_missing` / `redirect_vlt_old_lockfile_ignored` / `redirect_vlt_scalar_registry_ignored` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the lock has no `lockfileVersion` (vlt ≥ 1.0.0-rc.15 re-resolves it) / a legacy default-registry id without `"modifiers"` in `vlt.json` (vlt 0.0.0-16 … 0.0.0-24 ignore the lock) / a scalar `registry` option that vlt 1.0.0-rc.7 … rc.29 honor over the lock. The deps stay redirected, but the run's `--vex` does not attest them. |
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
-| `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives (from the vlt rewrite only otherwise). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
-| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`. Invalidation failures only warn. |
+| `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
 | `vendor_*` / `pypi_*` / `gemfile_*` / `lock_*` / `locked_version_mismatch` / `user_authored_*` / `native_extensions_unsupported` / `platform_gem_unsupported` | `failed`/`skipped` | vendor: per-ecosystem refusal + drift vocabulary; see the Vendor command contract section. New tags are additive (MINOR). |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 412e4f20..191ca64d 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -2415,16 +2415,20 @@ pub(crate) async fn run_redirect_selected(
     // here is always safe; `pdm.lock` only ever carries pypi URLs.
     let pdm_inactive =
         files.contains_key("pdm.lock") && !socket_patch_core::patch::redirect::pdm_drives(&files);
-    let final_texts: Vec<&String> = files
+    // Likewise a `vlt-lock.json` the vlt rewrite was withheld from (its
+    // artifact failed the preflight beside another npm-family lock) may
+    // still hold an earlier run's pin: only the sibling lock this run
+    // rewrote can confirm that dep.
+    let final_texts: Vec<(&str, &String)> = files
         .iter()
         .filter(|(name, _)| !(pdm_inactive && name.as_str() == "pdm.lock"))
-        .map(|(name, content)| rewrite.files.get(name).unwrap_or(content))
+        .map(|(name, content)| (name.as_str(), rewrite.files.get(name).unwrap_or(content)))
         .chain(
             rewrite
                 .files
                 .iter()
                 .filter(|(name, _)| !files.contains_key(*name))
-                .map(|(_, content)| content),
+                .map(|(name, content)| (name.as_str(), content)),
         )
         .collect();
     let confirmed: Vec<(String, String)> = candidates
@@ -2504,7 +2508,11 @@ pub(crate) async fn run_redirect_selected(
             let suffixed_version =
                 registry.and_then(|o| o.identifiers.maven_suffixed_version.as_deref());
             let encoded = socket_patch_core::utils::uri::encode_uri_component(artifact_url);
-            final_texts.iter().any(|text| {
+            let vlt_withheld = vlt_preflight.withheld_from_vlt.contains(uuid);
+            final_texts.iter().any(|(name, text)| {
+                if vlt_withheld && *name == socket_patch_core::constants::npm_family::VLT_LOCK {
+                    return false;
+                }
                 // The rewriters' own predicate — raw, or the `\/`-escaped
                 // slashes an old composer.lock spells them with — so a
                 // writer's spelling can never be one this probe misses. It
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index 62fa3981..2e1d1878 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -21,7 +21,9 @@ use super::StaleInstallOutcome;
 pub(super) const REINSTALL_REQUIRED: &str = "redirect_vlt_reinstall_required";
 const ARTIFACT_UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
 
-/// The lock-level warnings that say vlt may discard the redirect.
+/// The lock-level warnings that say vlt may discard the redirect (§3.9 (c);
+/// `redirect_vlt_sibling_lockfiles` says nothing about vlt's reading of the
+/// lock).
 const DISCARDING_LOCK_WARNINGS: [&str; 3] = [
     "redirect_vlt_lockfile_version_missing",
     "redirect_vlt_old_lockfile_ignored",
@@ -47,7 +49,8 @@ pub(super) fn install_state_present(cwd: &Path) -> bool {
 /// What the artifact preflight decided for this run's npm candidates.
 #[derive(Default)]
 pub(super) struct Preflight {
-    /// Failed while vlt drives: withheld from every rewriter.
+    /// Failed while vlt drives, or for a vlt-vendored takeover: withheld
+    /// from every rewriter.
     pub(super) withheld_everywhere: BTreeMap<String, String>,
     /// Failed while another npm-family lock may drive: kept out of the vlt
     /// rewrite only.
@@ -79,20 +82,50 @@ async fn vlt_inputs(cwd: &Path) -> BTreeMap<String, String> {
     files
 }
 
-fn unverifiable_detail(url: &str, reason: &str, purl: &str, already_pinned: bool) -> String {
+fn unverifiable_detail(
+    url: &str,
+    reason: &str,
+    purl: &str,
+    already_pinned: bool,
+    everywhere: bool,
+) -> String {
     if already_pinned {
         format!(
             "vlt would fail to verify {url}: {reason}; {purl} was left pinned by an earlier run \
              and `vlt ci` will fail until the artifact verifies"
         )
-    } else {
+    } else if everywhere {
         format!("vlt would fail to verify {url}: {reason}; nothing was written for {purl}")
+    } else {
+        format!(
+            "vlt would fail to verify {url}: {reason}; vlt-lock.json was not changed for {purl}"
+        )
     }
 }
 
+/// The uuids of `deps` whose purl a vlt vendored ledger entry claims: a
+/// hosted takeover reverts them to a registry node before the rewrite.
+async fn vlt_vendored_uuids(cwd: &Path, deps: &[(&str, &DepOverride)]) -> BTreeSet<String> {
+    let Ok(state) = socket_patch_core::vendor::load_state(cwd).await else {
+        return BTreeSet::new();
+    };
+    deps.iter()
+        .filter(|(purl, _)| {
+            socket_patch_core::vendor::lookup_entry(
+                &state.entries,
+                socket_patch_core::utils::purl::strip_purl_qualifiers(purl),
+            )
+            .is_some_and(|e| e.ecosystem == "npm" && e.flavor.as_deref() == Some("vlt"))
+        })
+        .map(|(_, dep)| dep.patch_uuid.clone())
+        .collect()
+}
+
 /// Fetch each in-scope artifact the way vlt does (once per distinct URL,
 /// `offline` making no request) and decide which deps may be pinned in
-/// `vlt-lock.json`. Projects without `vlt-lock.json` make no request.
+/// `vlt-lock.json`. Projects without `vlt-lock.json` make no request. A
+/// vlt-vendored dep is probed through its vendored node, before the
+/// takeover reverts it, and a failure keeps it vendored.
 pub(super) async fn artifact_preflight(
     common: &crate::args::GlobalArgs,
     api_client: &socket_patch_core::api::client::ApiClient,
@@ -104,7 +137,8 @@ pub(super) async fn artifact_preflight(
         return out;
     }
     let overrides: Vec<DepOverride> = deps.iter().map(|(_, dep)| (*dep).clone()).collect();
-    let scope = vlt_preflight::preflight_scope(&files, &overrides);
+    let vendored = vlt_vendored_uuids(&common.cwd, deps).await;
+    let scope = vlt_preflight::preflight_scope(&files, &overrides, &vendored);
     if scope.is_empty() {
         return out;
     }
@@ -131,11 +165,18 @@ pub(super) async fn artifact_preflight(
             .iter()
             .find(|(_, d)| d.patch_uuid == dep.patch_uuid)
             .map_or("", |(purl, _)| *purl);
+        let everywhere = drives || dep.vendored;
         out.warnings.push(serde_json::json!({
             "code": ARTIFACT_UNVERIFIABLE,
-            "detail": unverifiable_detail(&dep.artifact_url, &reason, purl, dep.already_pinned),
+            "detail": unverifiable_detail(
+                &dep.artifact_url,
+                &reason,
+                purl,
+                dep.already_pinned,
+                everywhere,
+            ),
         }));
-        if drives {
+        if everywhere {
             out.withheld_everywhere
                 .insert(dep.patch_uuid.clone(), purl.to_string());
         } else {
@@ -274,7 +315,10 @@ pub(super) struct HealInputs<'a> {
 
 /// The heal after a hosted rewrite, the advisory, and the purls whose
 /// installed or next-installed bytes are not known to be patched (removed
-/// from the same run's in-run VEX attestation).
+/// from the same run's in-run VEX attestation). A confirmed vlt uuid with
+/// no heal target (a non-Socket host, a leaf that disagrees with the
+/// DepID, an artifact no preflight verified) was never checked, so it is
+/// never attested here.
 pub(super) async fn heal_after_rewrite(
     common: &crate::args::GlobalArgs,
     inputs: &HealInputs<'_>,
@@ -287,6 +331,7 @@ pub(super) async fn heal_after_rewrite(
         .into_iter()
         .filter(|i| inputs.preflight.passed.contains(&i.patch_uuid))
         .collect();
+    let targeted: BTreeSet<&str> = owned.iter().map(|i| i.patch_uuid.as_str()).collect();
     let mut tally = HealTally::default();
     if !owned.is_empty() {
         let targets: Vec<(Target<'_>, &str)> = owned
@@ -320,6 +365,7 @@ pub(super) async fn heal_after_rewrite(
             continue;
         }
         if lock_discards
+            || !targeted.contains(uuid.as_str())
             || inputs.foreign.contains(uuid)
             || tally.stale_uuids.contains(uuid)
             || tally.undeterminable_uuids.contains(uuid)
@@ -418,32 +464,35 @@ mod tests {
         assert!(reinstall_detail(&tally).contains("still holds 3 unpatched copies"));
     }
 
-    #[tokio::test]
-    async fn offline_withholds_every_probed_dep_without_a_request() {
-        let server = wiremock::MockServer::start().await;
-        let tmp = tempfile::tempdir().unwrap();
-        let url = format!("{}/patch/npm/t/u/left-pad-1.3.0.tgz", server.uri());
-        std::fs::write(
-            tmp.path().join(VLT_LOCK),
-            "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
-             \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-old\",\"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]\n  },\n  \"edges\": {}\n}\n",
-        )
-        .unwrap();
-        let dep = DepOverride {
+    fn left_pad_dep(url: &str) -> DepOverride {
+        DepOverride {
             ecosystem: "npm".into(),
             name: "left-pad".into(),
             namespace: None,
             version: "1.3.0".into(),
             token: String::new(),
             patch_uuid: "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa".into(),
-            artifact_url: url.clone(),
+            artifact_url: url.to_string(),
             berry_zip_url: None,
             registry_override: None,
             integrity: socket_patch_core::patch::redirect::Integrity {
                 sha512: Some("sha512-new".into()),
                 ..Default::default()
             },
-        };
+        }
+    }
+
+    const LEFT_PAD_LOCK: &str = "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": \
+         {\n    \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-old\",\
+         \"https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz\"]\n  },\n  \"edges\": {}\n}\n";
+
+    #[tokio::test]
+    async fn offline_withholds_every_probed_dep_without_a_request() {
+        let server = wiremock::MockServer::start().await;
+        let tmp = tempfile::tempdir().unwrap();
+        let url = format!("{}/patch/npm/t/u/left-pad-1.3.0.tgz", server.uri());
+        std::fs::write(tmp.path().join(VLT_LOCK), LEFT_PAD_LOCK).unwrap();
+        let dep = left_pad_dep(&url);
         let common = crate::args::GlobalArgs {
             cwd: tmp.path().to_path_buf(),
             offline: true,
@@ -470,14 +519,79 @@ mod tests {
 
     #[tokio::test]
     async fn no_vlt_lock_makes_no_request() {
+        let server = wiremock::MockServer::start().await;
+        let url = format!("{}/patch/npm/t/u/left-pad-1.3.0.tgz", server.uri());
+        let dep = left_pad_dep(&url);
+        let api = test_api();
+        for with_lock in [false, true] {
+            let tmp = tempfile::tempdir().unwrap();
+            std::fs::write(tmp.path().join("package-lock.json"), "{}").unwrap();
+            if with_lock {
+                std::fs::write(tmp.path().join(VLT_LOCK), LEFT_PAD_LOCK).unwrap();
+            }
+            let common = crate::args::GlobalArgs {
+                cwd: tmp.path().to_path_buf(),
+                ..crate::args::GlobalArgs::default()
+            };
+            let pre = artifact_preflight(&common, &api, &[("pkg:npm/left-pad@1.3.0", &dep)]).await;
+            let requests = server.received_requests().await.unwrap().len();
+            if with_lock {
+                assert_eq!(requests, 1, "the control probes the vlt lock's dep");
+                assert!(pre.withheld_from_vlt.contains(&dep.patch_uuid));
+            } else {
+                assert_eq!(requests, 0);
+                assert!(pre.passed.is_empty() && pre.warnings.is_empty());
+                assert!(pre.withheld_everywhere.is_empty() && pre.withheld_from_vlt.is_empty());
+            }
+        }
+    }
+
+    #[tokio::test]
+    async fn a_vlt_vendored_dep_is_probed_and_withheld_everywhere() {
+        let server = wiremock::MockServer::start().await;
+        let url = format!("{}/patch/npm/t/u/left-pad-1.3.0.tgz", server.uri());
+        let dep = left_pad_dep(&url);
         let tmp = tempfile::tempdir().unwrap();
         std::fs::write(tmp.path().join("package-lock.json"), "{}").unwrap();
+        std::fs::write(
+            tmp.path().join(VLT_LOCK),
+            "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
+             \"file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad\": \
+             [0,\"left-pad\",null,\".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad\"]\n  \
+             },\n  \"edges\": {}\n}\n",
+        )
+        .unwrap();
         let common = crate::args::GlobalArgs {
             cwd: tmp.path().to_path_buf(),
             ..crate::args::GlobalArgs::default()
         };
         let api = test_api();
-        let pre = artifact_preflight(&common, &api, &[]).await;
-        assert!(pre.passed.is_empty() && pre.warnings.is_empty());
+        let deps = [("pkg:npm/left-pad@1.3.0", &dep)];
+        let unclaimed = artifact_preflight(&common, &api, &deps).await;
+        assert!(server.received_requests().await.unwrap().is_empty());
+        assert!(unclaimed.warnings.is_empty());
+        std::fs::create_dir_all(tmp.path().join(".socket/vendor")).unwrap();
+        std::fs::write(
+            tmp.path().join(".socket/vendor/state.json"),
+            serde_json::to_vec(&serde_json::json!({
+                "version": 1,
+                "entries": { "pkg:npm/left-pad@1.3.0": {
+                    "ecosystem": "npm", "basePurl": "pkg:npm/left-pad@1.3.0",
+                    "uuid": "11111111-2222-4333-8444-555555555555",
+                    "artifact": { "path": ".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0" },
+                    "wiring": [], "flavor": "vlt"
+                }}
+            }))
+            .unwrap(),
+        )
+        .unwrap();
+        let claimed = artifact_preflight(&common, &api, &deps).await;
+        assert_eq!(server.received_requests().await.unwrap().len(), 1);
+        assert!(claimed.withheld_from_vlt.is_empty());
+        assert!(claimed.withheld_everywhere.contains_key(&dep.patch_uuid));
+        assert_eq!(
+            claimed.warnings[0]["detail"],
+            format!("vlt would fail to verify {url}: http 404; nothing was written for pkg:npm/left-pad@1.3.0")
+        );
     }
 }
diff --git a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
index b66c17b0..71fa8e0b 100644
--- a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
@@ -480,7 +480,216 @@ async fn scan_redirect_vlt_artifact_ambiguous_withholds_vlt_only() {
         read(tmp.path(), "vlt-lock.json"),
         lock_with(Era::V1, &[registry_node(TILDE_ID)])
     );
-    assert!(warning_codes(&doc).contains(&UNVERIFIABLE.to_string()));
+    assert_eq!(
+        warning_detail(&doc, UNVERIFIABLE),
+        format!(
+            "vlt would fail to verify {}: content-encoding gzip; vlt-lock.json was not changed \
+             for {PURL}",
+            artifact_url(&server)
+        )
+    );
+    assert!(skipped_reasons(&doc).is_empty(), "{doc:#}");
+}
+
+/// A package-lock.json that lists only the root: the npm rewriter has
+/// nothing to pin.
+fn package_lock_without_dep() -> String {
+    r#"{
+  "name": "consumer",
+  "version": "0.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": { "name": "consumer", "version": "0.0.0" }
+  }
+}
+"#
+    .to_string()
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_ambiguous_earlier_pin_is_not_confirmed() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    let pinned = lock_with(Era::V1, &[pinned_node(TILDE_ID, &server)]);
+    std::fs::write(tmp.path().join("vlt-lock.json"), &pinned).unwrap();
+    std::fs::write(
+        tmp.path().join("package-lock.json"),
+        package_lock_without_dep(),
+    )
+    .unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(
+        redirected(&doc),
+        0,
+        "the earlier run's vlt pin alone confirms nothing: {doc:#}"
+    );
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), pinned);
+    assert_eq!(
+        warning_detail(&doc, UNVERIFIABLE),
+        format!(
+            "vlt would fail to verify {}: content-encoding gzip; {PURL} was left pinned by an \
+             earlier run and `vlt ci` will fail until the artifact verifies",
+            artifact_url(&server)
+        )
+    );
+}
+
+/// A real `node_modules/.vlt` store with no hidden lock (0.0.0-1 and
+/// 0.0.0-32 write none) is vlt's install state too: vlt drives beside a
+/// package-lock.json, so there is no sibling warning and a failed preflight
+/// withholds the dep from every rewriter.
+#[tokio::test]
+async fn scan_redirect_vlt_store_dir_without_hidden_lock_drives() {
+    let server = gzip_artifact_server().await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), Era::V1);
+    install_store(tmp.path(), TILDE_ID, PRISTINE);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    assert_eq!(redirected(&doc), 0, "{doc:#}");
+    assert!(
+        !warning_codes(&doc).contains(&"redirect_vlt_sibling_lockfiles".to_string()),
+        "{doc:#}"
+    );
+    assert_eq!(skipped_reasons(&doc), [UNVERIFIABLE]);
+    assert_eq!(read(tmp.path(), "package-lock.json"), package_lock());
+    assert_eq!(
+        warning_detail(&doc, UNVERIFIABLE),
+        format!(
+            "vlt would fail to verify {}: content-encoding gzip; nothing was written for {PURL}",
+            artifact_url(&server)
+        )
+    );
+}
+
+/// When vlt drives, only the vlt rewriter confirms an npm purl: a
+/// package-lock.json rewrite that carries the hosted URL does not, when
+/// vlt-lock.json has no default-registry node for the dep.
+#[tokio::test]
+async fn scan_redirect_vlt_drives_entry_not_found_sibling_rewrite_does_not_confirm() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_package_json(tmp.path());
+    install_importer(tmp.path(), PRISTINE);
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(Era::V1, &["\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string()]),
+    )
+    .unwrap();
+    write_hidden_lock(tmp.path(), &[]);
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc, attested) = scan_with_vex(tmp.path(), &server, &["--no-npm-allow-remote-config"]);
+
+    assert!(
+        warning_codes(&doc).contains(&"redirect_vlt_entry_not_found".to_string()),
+        "{doc:#}"
+    );
+    assert!(read(tmp.path(), "package-lock.json").contains(&artifact_url(&server)));
+    assert_eq!(redirected(&doc), 0, "{doc:#}");
+    assert!(!attested, "{doc:#}");
+    assert_eq!(artifact_requests(&server).await, 0);
+}
+
+const VENDORED_UUID: &str = "11111111-2222-4333-8444-555555555555";
+
+/// A vlt project whose left-pad is vendored (§3.4 D19 dir node) and
+/// claimed by a `flavor: "vlt"` vendored ledger entry.
+fn write_vlt_vendored_project(root: &Path) -> (String, Vec<u8>) {
+    write_package_json(root);
+    install_importer(root, PATCHED);
+    let dir = format!(".socket/vendor/npm/{VENDORED_UUID}/{NAME}-{VERSION}/node_modules/{NAME}");
+    let lock = lock_with(
+        Era::V1,
+        &[format!(
+            "\"file~.socket+vendor+npm+{VENDORED_UUID}+{NAME}-{VERSION}+node__modules+{NAME}\": \
+             [0,\"{NAME}\",null,\"{dir}\"]"
+        )],
+    );
+    std::fs::write(root.join("vlt-lock.json"), &lock).unwrap();
+    let state = serde_json::json!({
+        "version": 1,
+        "entries": { PURL: {
+            "ecosystem": "npm",
+            "basePurl": PURL,
+            "uuid": VENDORED_UUID,
+            "artifact": { "path": format!(".socket/vendor/npm/{VENDORED_UUID}/{NAME}-{VERSION}") },
+            "wiring": [],
+            "flavor": "vlt"
+        }}
+    });
+    std::fs::create_dir_all(root.join(".socket/vendor")).unwrap();
+    let state = serde_json::to_vec_pretty(&state).unwrap();
+    std::fs::write(root.join(".socket/vendor/state.json"), &state).unwrap();
+    (lock, state)
+}
+
+/// Vendored → hosted (§4.10): the takeover restores the registry node this
+/// run pins, so the artifact is probed through the vendored node BEFORE the
+/// revert; a failure keeps the package vendored (never reverted), with or
+/// without another npm-family lock, wet or dry.
+#[tokio::test]
+async fn scan_redirect_vlt_vendored_takeover_preflights_before_the_revert() {
+    for (sibling, dry_run) in [(false, false), (false, true), (true, false)] {
+        let server = gzip_artifact_server().await;
+        let tmp = tempfile::tempdir().unwrap();
+        let (lock, state) = write_vlt_vendored_project(tmp.path());
+        if sibling {
+            std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+        }
+        let mut extra = vec!["--no-npm-allow-remote-config"];
+        if dry_run {
+            extra.push("--dry-run");
+        }
+
+        let (_, doc) = scan_hosted(tmp.path(), &server, &extra, &[]);
+
+        let leg = format!("sibling={sibling} dry_run={dry_run}: {doc:#}");
+        assert_eq!(artifact_requests(&server).await, 1, "{leg}");
+        assert_eq!(redirected(&doc), 0, "{leg}");
+        assert_eq!(skipped_reasons(&doc), [UNVERIFIABLE], "{leg}");
+        assert!(
+            !warning_codes(&doc)
+                .iter()
+                .any(|c| c.contains("revert") || c.contains("takeover")),
+            "no takeover is attempted: {leg}"
+        );
+        assert_eq!(read(tmp.path(), "vlt-lock.json"), lock, "{leg}");
+        assert_eq!(
+            std::fs::read(tmp.path().join(".socket/vendor/state.json")).unwrap(),
+            state,
+            "{leg}"
+        );
+        if sibling {
+            assert_eq!(
+                read(tmp.path(), "package-lock.json"),
+                package_lock(),
+                "{leg}"
+            );
+        }
+    }
+
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_vendored_project(tmp.path());
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--dry-run"], &[]);
+    assert_eq!(
+        artifact_requests(&server).await,
+        1,
+        "a verifying artifact is probed too: {doc:#}"
+    );
+    assert!(
+        !warning_codes(&doc).contains(&UNVERIFIABLE.to_string()),
+        "{doc:#}"
+    );
 }
 
 #[tokio::test]
@@ -519,22 +728,50 @@ async fn scan_redirect_vlt_artifact_get_uuid_driver() {
     assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
 }
 
-#[tokio::test]
-async fn scan_redirect_vlt_artifact_no_preflight_without_vlt_lock() {
-    let server = MockServer::start().await;
-    mock_all(&server).await;
-    let tmp = tempfile::tempdir().unwrap();
-    write_package_json(tmp.path());
-    install_importer(tmp.path(), PRISTINE);
-    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+fn pnpm_lock() -> String {
+    format!(
+        "lockfileVersion: '9.0'\n\nimporters:\n  .:\n    dependencies:\n      {NAME}:\n        \
+         specifier: {VERSION}\n        version: {VERSION}\n\npackages:\n  {NAME}@{VERSION}:\n    \
+         resolution: {{integrity: {UPSTREAM_SHA512}}}\n\nsnapshots:\n  {NAME}@{VERSION}: {{}}\n"
+    )
+}
 
-    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+fn bun_lock() -> String {
+    format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"packages\": {{\n    \"{NAME}\": [\"{NAME}@{VERSION}\", \
+         \"\", {{}}, \"{UPSTREAM_SHA512}\"],\n  }}\n}}\n"
+    )
+}
 
-    assert_eq!(redirected(&doc), 1);
-    assert_eq!(artifact_requests(&server).await, 0);
-    assert!(!warning_codes(&doc)
-        .iter()
-        .any(|c| c.starts_with("redirect_vlt_")));
+#[tokio::test]
+async fn scan_redirect_vlt_artifact_no_preflight_without_vlt_lock() {
+    for (lock, text) in [
+        ("package-lock.json", package_lock()),
+        ("pnpm-lock.yaml", pnpm_lock()),
+        ("bun.lock", bun_lock()),
+    ] {
+        let server = MockServer::start().await;
+        mock_all(&server).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_package_json(tmp.path());
+        install_importer(tmp.path(), PRISTINE);
+        std::fs::write(tmp.path().join(lock), text).unwrap();
+
+        let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+        assert_eq!(redirected(&doc), 1, "{lock}: {doc:#}");
+        assert!(
+            read(tmp.path(), lock).contains(&artifact_url(&server)),
+            "{lock}"
+        );
+        assert_eq!(artifact_requests(&server).await, 0, "{lock}");
+        assert!(
+            !warning_codes(&doc)
+                .iter()
+                .any(|c| c.starts_with("redirect_vlt_")),
+            "{lock}: {doc:#}"
+        );
+    }
 }
 
 #[tokio::test]
@@ -913,6 +1150,40 @@ async fn scan_redirect_vlt_heal_custom_patch_server_origin_heals() {
 
 // ── in-run VEX exclusion ─────────────────────────────────────────────────
 
+/// A confirmed vlt pin on a host that is neither patch.socket.dev nor a
+/// configured origin is never healed, so the same run must not attest the
+/// installed (pristine) copy; with the origin configured the heal proves it.
+#[tokio::test]
+async fn scan_redirect_vlt_unconfigured_origin_vex_not_attested() {
+    let server = MockServer::start().await;
+    let artifacts = MockServer::start().await;
+    mock_discovery(&server).await;
+    mock_view(&server).await;
+    mock_artifact(&artifacts).await;
+    mock_reference_at(
+        &server,
+        &artifact_url(&artifacts),
+        &sha512_sri(&patched_tarball()),
+    )
+    .await;
+    let unconfigured = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(unconfigured.path(), PRISTINE);
+    let configured = tempfile::tempdir().unwrap();
+    write_installed_vlt_project(configured.path(), PRISTINE);
+    let origin = artifacts.uri();
+
+    let (_, doc, attested) = scan_with_vex(unconfigured.path(), &server, &[]);
+    let (_, healed, healed_attested) =
+        scan_with_vex(configured.path(), &server, &["--patch-server-url", &origin]);
+
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    assert!(!warning_codes(&doc).contains(&ADVISORY.to_string()));
+    assert!(store_dir(unconfigured.path(), TILDE_ID).exists());
+    assert!(!attested, "an unhealed pin is not attested: {doc:#}");
+    assert_eq!(warning_detail(&healed, ADVISORY), advisory_invalidated(1));
+    assert!(healed_attested, "{healed:#}");
+}
+
 fn vex_args(out: &Path) -> Vec<String> {
     vec![
         "--vex".into(),
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
index 42e20634..7f45302b 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
@@ -189,3 +189,88 @@ async fn vlt_rollback_of_a_pristine_tree_keeps_it() {
     assert!(store_dir(root, TILDE_ID).join("index.js").exists());
     assert!(root.join("node_modules/.vlt-lock.json").exists());
 }
+
+const OTHER: &str = "right-pad";
+const OTHER_UUID: &str = "cccccccc-cccc-4ccc-8ccc-cccccccccccc";
+
+fn as_other(text: &str) -> String {
+    text.replace(NAME, OTHER).replace(UUID, OTHER_UUID)
+}
+
+/// Add a second hosted vlt package to the ledger and the lock by renaming
+/// left-pad's recorded edit, record and pinned node.
+fn add_second_hosted_package(root: &Path, server: &MockServer) -> String {
+    let path = ledger_path(root);
+    let mut ledger: Value = serde_json::from_str(&read(root, ".socket/vendor/redirect-state.json"))
+        .expect("the hosted run wrote a ledger");
+    let edits: Vec<Value> = ledger["edits"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .filter(|e| e["kind"] == "redirect_vlt_lock_node")
+        .map(|e| serde_json::from_str(&as_other(&e.to_string())).unwrap())
+        .collect();
+    assert_eq!(edits.len(), 1);
+    ledger["edits"].as_array_mut().unwrap().extend(edits);
+    let record: Value =
+        serde_json::from_str(&as_other(&ledger["records"][PURL].to_string())).unwrap();
+    ledger["records"][as_other(PURL)] = record;
+    std::fs::write(&path, serde_json::to_vec_pretty(&ledger).unwrap()).unwrap();
+    let other_pinned = as_other(&pinned_node(TILDE_ID, server));
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        vlt_lock(
+            Era::V1,
+            &[pinned_node(TILDE_ID, server), other_pinned.clone()],
+        ),
+    )
+    .unwrap();
+    other_pinned
+}
+
+fn other_store_dir(root: &Path) -> std::path::PathBuf {
+    root.join("node_modules/.vlt")
+        .join(as_other(TILDE_ID))
+        .join("node_modules")
+        .join(OTHER)
+}
+
+/// A scoped rollback of one of two hosted vlt packages takes the per-purl
+/// path (not a whole-ledger replay): only that package's pin is restored
+/// and only its patched store entry (plus the hidden lock) is removed.
+#[tokio::test]
+async fn vlt_scoped_rollback_of_one_of_two_heals_only_that_package() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = hosted_vlt_project(root).await;
+    let other_pinned = add_second_hosted_package(root, &server);
+    install_store(root, TILDE_ID, PATCHED);
+    let other = other_store_dir(root);
+    std::fs::create_dir_all(&other).unwrap();
+    std::fs::write(
+        other.join("package.json"),
+        as_other(&String::from_utf8_lossy(PACKAGE_JSON)),
+    )
+    .unwrap();
+    std::fs::write(other.join("index.js"), PATCHED).unwrap();
+    write_hidden_lock(
+        root,
+        &[pinned_node(TILDE_ID, &server), other_pinned.clone()],
+    );
+
+    let (_, doc) = run_verb(root, "rollback", &[PURL]);
+
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(Era::V1, &[registry_node(TILDE_ID), other_pinned])
+    );
+    assert_eq!(advisory_details(&doc), [RESTORED], "{doc:#}");
+    assert!(!store_dir(root, TILDE_ID).exists());
+    assert!(!root.join("node_modules/.vlt-lock.json").exists());
+    assert!(
+        other.join("index.js").exists(),
+        "the other package's copy stays"
+    );
+    let ledger = read(root, ".socket/vendor/redirect-state.json");
+    assert!(ledger.contains(OTHER_UUID), "{ledger}");
+}
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index cc79bd08..2fadf504 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -154,6 +154,14 @@ pub(super) fn default_instances<'a>(lock: &'a HostedLock, dep: &DepOverride) ->
     partition_instances(nodes, &full_name(dep), &dep.version, lock.parsed.options()).0
 }
 
+/// Does `dep` have a node of socket-patch's vendored vlt shape (§3.4) in a
+/// lock that passed the lock-level parse?
+pub(super) fn has_vendored_instance(lock: &HostedLock, dep: &DepOverride) -> bool {
+    lock.parsed
+        .nodes()
+        .is_some_and(|nodes| has_vendored_node(nodes, &full_name(dep), &dep.version))
+}
+
 fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>) -> bool {
     if lock.parsed.version == Some(1) {
         return false;
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
index 98f563b1..337227d4 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
@@ -322,7 +322,10 @@ fn artifact_check(dir: &Path, artifact: &[u8]) -> ByteCheck {
         Err(true) => return ByteCheck::Mismatch,
         Err(false) => return ByteCheck::Unknown,
     };
-    let expected: BTreeMap<String, Vec<u8>> = expected.into_iter().collect();
+    let expected: BTreeMap<String, Vec<u8>> = expected
+        .into_iter()
+        .filter(|(path, _)| path != "node_modules" && !path.starts_with("node_modules/"))
+        .collect();
     if expected == installed {
         ByteCheck::Match
     } else {
@@ -393,20 +396,29 @@ async fn remove_entry(path: &Path) -> std::io::Result<()> {
 
 /// Remove the hidden lock and each stale store entry. Callers pass only
 /// ids [`classify_target`] judged stale, which requires a real store dir.
+/// A hidden lock that cannot be removed keeps every store entry: vlt would
+/// trust it and leave the importer links dangling.
 pub async fn invalidate(root: &Path, state: &InstallState, stale: &[String]) -> Invalidation {
     let mut out = Invalidation::default();
     if stale.is_empty() || state.store != StoreState::Real {
         return out;
     }
+    let unique: BTreeSet<&String> = stale.iter().collect();
     if state.hidden_present {
         if let Err(e) = remove_entry(&root.join(VLT_HIDDEN_LOCK_REL)).await {
             if e.kind() != std::io::ErrorKind::NotFound {
+                let why = e.to_string();
                 out.failed
-                    .push((VLT_HIDDEN_LOCK_REL.to_string(), e.to_string()));
+                    .push((VLT_HIDDEN_LOCK_REL.to_string(), why.clone()));
+                out.failed.extend(
+                    unique
+                        .into_iter()
+                        .map(|id| (id.clone(), format!("kept: {VLT_HIDDEN_LOCK_REL}: {why}"))),
+                );
+                return out;
             }
         }
     }
-    let unique: BTreeSet<&String> = stale.iter().collect();
     for id in unique {
         if !is_safe_dep_id(id) {
             continue;
@@ -677,6 +689,29 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn bundled_node_modules_in_the_artifact_are_not_compared() {
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PATCHED);
+        let dir = package_dir(tmp.path(), ID, "left-pad");
+        std::fs::create_dir_all(dir.join("node_modules/x")).unwrap();
+        std::fs::write(dir.join("node_modules/x/index.js"), b"bundled").unwrap();
+        let bundling = tarball(&[
+            ("package/index.js", PATCHED),
+            ("package/package.json", b"{\"name\":\"left-pad\"}"),
+            ("package/node_modules/x/index.js", b"bundled"),
+        ]);
+        assert_eq!(
+            classify(
+                tmp.path(),
+                &target(None, Some(&bundling)),
+                Expected::Patched
+            )
+            .await,
+            TargetState::Healthy
+        );
+    }
+
     #[tokio::test]
     async fn an_uninstalled_target_is_healthy() {
         let tmp = tempfile::tempdir().unwrap();
@@ -774,6 +809,27 @@ mod tests {
         assert!(other_dir.exists());
     }
 
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn an_unremovable_hidden_lock_keeps_every_store_entry() {
+        use std::os::unix::fs::PermissionsExt as _;
+        let tmp = tempfile::tempdir().unwrap();
+        store(tmp.path(), ID, PRISTINE);
+        hidden(tmp.path(), Some("sha512-UPSTREAM"));
+        let state = read_install_state(tmp.path()).await;
+        let node_modules = tmp.path().join("node_modules");
+        std::fs::set_permissions(&node_modules, std::fs::Permissions::from_mode(0o555)).unwrap();
+        let out = invalidate(tmp.path(), &state, &[ID.to_string()]).await;
+        std::fs::set_permissions(&node_modules, std::fs::Permissions::from_mode(0o755)).unwrap();
+        assert!(out.removed.is_empty(), "{out:?}");
+        let failed: Vec<&str> = out.failed.iter().map(|(id, _)| id.as_str()).collect();
+        assert_eq!(failed, [VLT_HIDDEN_LOCK_REL, ID]);
+        assert!(tmp.path().join(VLT_HIDDEN_LOCK_REL).exists());
+        assert!(package_dir(tmp.path(), ID, "left-pad")
+            .join("index.js")
+            .exists());
+    }
+
     #[cfg(unix)]
     #[tokio::test]
     async fn a_linked_store_entry_is_unlinked_not_traversed() {
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs b/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs
index 1875b7d2..f848197c 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_preflight.rs
@@ -184,15 +184,21 @@ pub struct PreflightDep {
     /// Every default-registry instance already carries this URL and sha512
     /// (an earlier run pinned it).
     pub already_pinned: bool,
+    /// In scope only through its vendored node: a vendored-to-hosted
+    /// takeover restores the registry node this run would pin.
+    pub vendored: bool,
 }
 
 /// The npm overrides the preflight probes: `vlt-lock.json` passes the
 /// lock-level parse, the override has a sha512, and it has at least one
-/// default-registry instance in the lock. Nothing is probed without a
-/// `vlt-lock.json`.
+/// default-registry instance in the lock, or (for the uuids in
+/// `vendored_vlt`, whose purl a vlt vendored entry claims) a vendored node
+/// the hosted takeover will turn back into one. Nothing is probed without
+/// a `vlt-lock.json`.
 pub fn preflight_scope(
     files: &BTreeMap<String, String>,
     overrides: &[DepOverride],
+    vendored_vlt: &BTreeSet<String>,
 ) -> Vec<PreflightDep> {
     let Some(text) = files.get(VLT_LOCK) else {
         return Vec::new();
@@ -206,16 +212,20 @@ pub fn preflight_scope(
         .filter_map(|dep| {
             let sha512 = dep.integrity.sha512.as_deref().filter(|s| !s.is_empty())?;
             let ids = vlt::default_instances(&lock, dep);
-            if ids.is_empty() {
+            let vendored = ids.is_empty()
+                && vendored_vlt.contains(&dep.patch_uuid)
+                && vlt::has_vendored_instance(&lock, dep);
+            if ids.is_empty() && !vendored {
                 return None;
             }
-            let already_pinned =
-                vlt::every_instance_pinned(text, &ids, sha512, &dep.artifact_url).is_some();
+            let already_pinned = !vendored
+                && vlt::every_instance_pinned(text, &ids, sha512, &dep.artifact_url).is_some();
             Some(PreflightDep {
                 patch_uuid: dep.patch_uuid.clone(),
                 artifact_url: dep.artifact_url.clone(),
                 sha512: sha512.to_string(),
                 already_pinned,
+                vendored,
             })
         })
         .collect()
@@ -489,15 +499,38 @@ mod tests {
             dep("d", Some("sha512-D")),
             dep("a", None),
         ];
-        let scope = preflight_scope(&files, &deps);
+        let none = BTreeSet::new();
+        let scope = preflight_scope(&files, &deps, &none);
         let got: Vec<(&str, bool)> = scope
             .iter()
             .map(|d| (d.patch_uuid.as_str(), d.already_pinned))
             .collect();
         assert_eq!(got, [("uuid-a", false), ("uuid-b", true)]);
-        assert!(preflight_scope(&BTreeMap::new(), &deps).is_empty());
+        assert!(preflight_scope(&BTreeMap::new(), &deps, &none).is_empty());
         let mut bom = files.clone();
         bom.insert(VLT_LOCK.into(), format!("\u{feff}{}", files[VLT_LOCK]));
-        assert!(preflight_scope(&bom, &deps).is_empty());
+        assert!(preflight_scope(&bom, &deps, &none).is_empty());
+    }
+
+    #[test]
+    fn a_vlt_vendored_takeover_is_scoped_through_its_vendored_node() {
+        let files = lock(&[
+            r#""file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+e-1.0.0+node__modules+e": [0,"e",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/e-1.0.0/node_modules/e"]"#,
+            r#""file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+f-1.0.0+node__modules+f": [0,"f",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/f-1.0.0/node_modules/f"]"#,
+        ]);
+        let deps = [dep("e", Some("sha512-E")), dep("f", Some("sha512-F"))];
+        assert!(preflight_scope(&files, &deps, &BTreeSet::new()).is_empty());
+        let vendored = BTreeSet::from(["uuid-e".to_string()]);
+        let scope = preflight_scope(&files, &deps, &vendored);
+        assert_eq!(
+            scope,
+            [PreflightDep {
+                patch_uuid: "uuid-e".into(),
+                artifact_url: "https://patch.socket.dev/patch/npm/t/u/e-1.0.0.tgz".into(),
+                sha512: "sha512-E".into(),
+                already_pinned: false,
+                vendored: true,
+            }]
+        );
     }
 }

From 5a779c5e5896f31a04c3c8f9e4106ec4db567bea Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 00:40:54 -0400
Subject: [PATCH 15/46] Vendor vlt projects as patched package dirs

`socket-patch vendor` now wires projects that install with vlt. A
vlt-lock.json (lockfileVersion 0 or 1) routes npm vendoring to a new
vlt backend ahead of every other lockfile, and a package already
vendored through another lockfile refuses with vendor_flavor_changed.

A direct dependency of the root or a workspace member is committed as
the patched package directory under
.socket/vendor/npm/<uuid>/<name>-<version>/node_modules/<name>/, so
packages that require their own name keep resolving. Its
devDependencies are dropped from the vendored package.json, and the
uuid dir's .gitignore and .gitattributes keep the payload committable
and byte-exact on every checkout. The lock node, its importer edges
and the importers' package.json specs move to the file: path, placed
where vlt itself writes them, so `vlt ci` leaves the lock unchanged;
this is checked against locks real vlt 1.2.0, 1.0.10 and 1.0.0-rc.14
wrote. Transitive targets, peer or modifier variants, foreign
registries, peer edges, multi-field declarations, stale specs,
unreadable locks and git-ignored payloads refuse before any write.

`vendor --revert` restores the registry node, edges and specs while
keeping whatever vlt re-laid since, or leaves everything on drift.
Health checks, reuse and repair judge the directory with its
package.json exemption, and lock inventory reads vlt-lock.json.

Assisted-by: Claude Code:claude-opus-5-5
---
 .gitattributes                                |    3 +
 CHANGELOG.md                                  |   24 +
 .../tests/repair_vendor_flavors_e2e.rs        |    4 +-
 crates/socket-patch-core/src/constants.rs     |   13 +
 .../src/vendor/lock_inventory/mod.rs          |    3 +
 .../src/vendor/lock_inventory/npm_family.rs   |   22 +-
 .../src/vendor/lock_inventory/recover.rs      |   16 +
 .../vendor/lock_inventory/recover_tests.rs    |   45 +
 .../src/vendor/lock_inventory/tests.rs        |  134 +
 .../src/vendor/lock_inventory/vlt.rs          |  138 +
 .../src/vendor/lock_inventory/wired.rs        |    4 +-
 crates/socket-patch-core/src/vendor/mod.rs    |   17 +-
 .../src/vendor/npm_common.rs                  |   12 +-
 .../socket-patch-core/src/vendor/npm_dir.rs   | 1028 +++++++
 .../src/vendor/npm_flavor.rs                  |  316 ++-
 .../socket-patch-core/src/vendor/npm_lock.rs  |    4 +-
 crates/socket-patch-core/src/vendor/path.rs   |   66 +-
 .../src/vendor/registry_fetch.rs              |  135 +-
 crates/socket-patch-core/src/vendor/reuse.rs  |   52 +
 crates/socket-patch-core/src/vendor/state.rs  |    6 +-
 crates/socket-patch-core/src/vendor/verify.rs |  246 +-
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 2399 +++++++++++++++++
 .../src/vendor/vlt_lock_text.rs               |   37 +-
 .../socket-patch-core/src/vex/discover/mod.rs |    1 +
 .../cases/alias-selfref-peer/case.json        |   12 +
 .../alias-selfref-peer/expected/package.json  |    9 +
 .../alias-selfref-peer/expected/vlt-lock.json |   19 +
 .../npm/vlt/1.0.0-rc.14/cases/alias/case.json |    7 +
 .../cases/alias/expected/package.json         |    9 +
 .../cases/alias/expected/vlt-lock.json        |   19 +
 .../vlt/1.0.0-rc.14/cases/dev-edge/case.json  |    7 +
 .../cases/dev-edge/expected/package.json      |   19 +
 .../dev-edge/expected/packages/a/package.json |    8 +
 .../cases/dev-edge/expected/vlt-lock.json     |   42 +
 .../vlt/1.0.0-rc.14/cases/left-pad/case.json  |    7 +
 .../cases/left-pad/expected/package.json      |   19 +
 .../left-pad/expected/packages/a/package.json |    8 +
 .../cases/left-pad/expected/vlt-lock.json     |   42 +
 .../1.0.0-rc.14/cases/member-only/case.json   |    7 +
 .../cases/member-only/expected/package.json   |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../cases/member-only/expected/vlt-lock.json  |   42 +
 .../1.0.0-rc.14/cases/optional-edge/case.json |    7 +
 .../cases/optional-edge/expected/package.json |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../optional-edge/expected/vlt-lock.json      |   42 +
 .../npm/vlt/1.0.0-rc.14/cases/peer/case.json  |    7 +
 .../cases/peer/expected/package.json          |   19 +
 .../peer/expected/packages/a/package.json     |    8 +
 .../cases/peer/expected/vlt-lock.json         |   42 +
 .../vlt/1.0.0-rc.14/cases/scoped/case.json    |    7 +
 .../cases/scoped/expected/package.json        |   19 +
 .../scoped/expected/packages/a/package.json   |    8 +
 .../cases/scoped/expected/vlt-lock.json       |   42 +
 .../vlt/1.0.0-rc.14/cases/semver/case.json    |    7 +
 .../cases/semver/expected/package.json        |   19 +
 .../semver/expected/packages/a/package.json   |    8 +
 .../cases/semver/expected/vlt-lock.json       |   42 +
 .../cases/supports-color/case.json            |    7 +
 .../supports-color/expected/package.json      |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../supports-color/expected/vlt-lock.json     |   42 +
 .../1.0.0-rc.14/cases/transitive/case.json    |    6 +
 .../1.0.0-rc.14/projects/alias/package.json   |    9 +
 .../1.0.0-rc.14/projects/alias/vlt-lock.json  |   19 +
 .../vlt/1.0.0-rc.14/projects/alias/vlt.json   |    1 +
 .../projects/workspace/package.json           |   19 +
 .../workspace/packages/a/package.json         |    8 +
 .../projects/workspace/vlt-lock.json          |   42 +
 .../1.0.0-rc.14/projects/workspace/vlt.json   |    3 +
 .../1.0.10/cases/alias-selfref-peer/case.json |    6 +
 .../npm/vlt/1.0.10/cases/alias/case.json      |    7 +
 .../1.0.10/cases/alias/expected/package.json  |    9 +
 .../1.0.10/cases/alias/expected/vlt-lock.json |   23 +
 .../npm/vlt/1.0.10/cases/dev-edge/case.json   |    7 +
 .../cases/dev-edge/expected/package.json      |   19 +
 .../dev-edge/expected/packages/a/package.json |    8 +
 .../cases/dev-edge/expected/vlt-lock.json     |   46 +
 .../npm/vlt/1.0.10/cases/left-pad/case.json   |    7 +
 .../cases/left-pad/expected/package.json      |   19 +
 .../left-pad/expected/packages/a/package.json |    8 +
 .../cases/left-pad/expected/vlt-lock.json     |   46 +
 .../vlt/1.0.10/cases/member-only/case.json    |    7 +
 .../cases/member-only/expected/package.json   |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../cases/member-only/expected/vlt-lock.json  |   46 +
 .../vlt/1.0.10/cases/optional-edge/case.json  |    7 +
 .../cases/optional-edge/expected/package.json |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../optional-edge/expected/vlt-lock.json      |   46 +
 .../npm/vlt/1.0.10/cases/peer/case.json       |    6 +
 .../npm/vlt/1.0.10/cases/scoped/case.json     |    7 +
 .../1.0.10/cases/scoped/expected/package.json |   19 +
 .../scoped/expected/packages/a/package.json   |    8 +
 .../cases/scoped/expected/vlt-lock.json       |   46 +
 .../npm/vlt/1.0.10/cases/semver/case.json     |    7 +
 .../1.0.10/cases/semver/expected/package.json |   19 +
 .../semver/expected/packages/a/package.json   |    8 +
 .../cases/semver/expected/vlt-lock.json       |   46 +
 .../vlt/1.0.10/cases/supports-color/case.json |    7 +
 .../supports-color/expected/package.json      |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../supports-color/expected/vlt-lock.json     |   46 +
 .../npm/vlt/1.0.10/cases/transitive/case.json |    6 +
 .../vlt/1.0.10/projects/alias/package.json    |    9 +
 .../vlt/1.0.10/projects/alias/vlt-lock.json   |   23 +
 .../npm/vlt/1.0.10/projects/alias/vlt.json    |    7 +
 .../1.0.10/projects/workspace/package.json    |   19 +
 .../workspace/packages/a/package.json         |    8 +
 .../1.0.10/projects/workspace/vlt-lock.json   |   46 +
 .../vlt/1.0.10/projects/workspace/vlt.json    |    8 +
 .../1.2.0/cases/alias-selfref-peer/case.json  |    6 +
 .../npm/vlt/1.2.0/cases/alias/case.json       |    7 +
 .../1.2.0/cases/alias/expected/package.json   |    9 +
 .../1.2.0/cases/alias/expected/vlt-lock.json  |   23 +
 .../npm/vlt/1.2.0/cases/dev-edge/case.json    |    7 +
 .../cases/dev-edge/expected/package.json      |   19 +
 .../dev-edge/expected/packages/a/package.json |    8 +
 .../cases/dev-edge/expected/vlt-lock.json     |   46 +
 .../npm/vlt/1.2.0/cases/left-pad/case.json    |    7 +
 .../cases/left-pad/expected/package.json      |   19 +
 .../left-pad/expected/packages/a/package.json |    8 +
 .../cases/left-pad/expected/vlt-lock.json     |   46 +
 .../npm/vlt/1.2.0/cases/member-only/case.json |    7 +
 .../cases/member-only/expected/package.json   |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../cases/member-only/expected/vlt-lock.json  |   46 +
 .../vlt/1.2.0/cases/optional-edge/case.json   |    7 +
 .../cases/optional-edge/expected/package.json |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../optional-edge/expected/vlt-lock.json      |   46 +
 .../vendor/npm/vlt/1.2.0/cases/peer/case.json |    6 +
 .../npm/vlt/1.2.0/cases/scoped/case.json      |    7 +
 .../1.2.0/cases/scoped/expected/package.json  |   19 +
 .../scoped/expected/packages/a/package.json   |    8 +
 .../1.2.0/cases/scoped/expected/vlt-lock.json |   46 +
 .../npm/vlt/1.2.0/cases/semver/case.json      |    7 +
 .../1.2.0/cases/semver/expected/package.json  |   19 +
 .../semver/expected/packages/a/package.json   |    8 +
 .../1.2.0/cases/semver/expected/vlt-lock.json |   46 +
 .../vlt/1.2.0/cases/supports-color/case.json  |    7 +
 .../supports-color/expected/package.json      |   19 +
 .../expected/packages/a/package.json          |    8 +
 .../supports-color/expected/vlt-lock.json     |   46 +
 .../npm/vlt/1.2.0/cases/transitive/case.json  |    6 +
 .../npm/vlt/1.2.0/projects/alias/package.json |    9 +
 .../vlt/1.2.0/projects/alias/vlt-lock.json    |   23 +
 .../npm/vlt/1.2.0/projects/alias/vlt.json     |    7 +
 .../vlt/1.2.0/projects/workspace/package.json |   19 +
 .../workspace/packages/a/package.json         |    8 +
 .../1.2.0/projects/workspace/vlt-lock.json    |   46 +
 .../npm/vlt/1.2.0/projects/workspace/vlt.json |    8 +
 .../fixtures/vendor/npm/vlt/regenerate.sh     |  141 +
 .../tests/fixtures/vendor/npm/vlt/surgery.mjs |  242 ++
 crates/socket-patch-core/tests/vlt_locks.rs   |  506 ++++
 155 files changed, 7791 insertions(+), 87 deletions(-)
 create mode 100644 crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
 create mode 100644 crates/socket-patch-core/src/vendor/npm_dir.rs
 create mode 100644 crates/socket-patch-core/src/vendor/vlt_lock.rs
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/transitive/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/transitive/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/transitive/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt.json
 create mode 100755 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs

diff --git a/.gitattributes b/.gitattributes
index 679f441f..5c7b89a0 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -13,3 +13,6 @@ crates/socket-patch-core/tests/fixtures/pnpm-hosted/** -text
 
 # Captured vlt locks are byte-real; CRLF variants are derived in the tests.
 crates/socket-patch-core/tests/fixtures/vlt-locks/** -text
+
+# The vendored vlt fixtures pin locks real vlt wrote, byte for byte.
+crates/socket-patch-core/tests/fixtures/vendor/** -text
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 006973ea..a5aa36ae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -308,6 +308,30 @@ into the new version's section — see docs/releasing.md.
   unchecked, whose lock a vlt release may ignore, or which also resolves
   from a non-default registry. vlt ledgers require the socket-patch
   release that adds vlt support.
+- **`vendor` wires vlt projects.** A `vlt-lock.json` (lockfileVersion 0
+  or 1) routes npm vendoring to the new vlt backend ahead of every other
+  lockfile. A direct dependency of the root or of a workspace member is
+  vendored as a patched package directory,
+  `.socket/vendor/npm/<uuid>/<name>-<version>/node_modules/<name>/`, so a
+  package that `require()`s its own name still resolves; its
+  `devDependencies` are dropped from the vendored `package.json`, and the
+  uuid dir's `.gitignore` re-includes the payload against the project's
+  own ignores while `.gitattributes` keeps EOL conversion off it. The
+  lock's node becomes a `file` node, its importer edges and the importers'
+  `package.json` specs move to the `file:` path, and every moved entry is
+  placed where vlt's own serializer puts it, so `vlt ci` keeps the lock
+  byte-identical (checked against vlt 1.2.0, 1.0.10 and 1.0.0-rc.14).
+  Transitive targets (`vendor_vlt_transitive_unsupported`), peer or
+  modifier variants, foreign registries, peer edges and dependencies
+  declared in several fields refuse before any write, as do locks vlt
+  cannot read and specs that no longer match the lock
+  (`vendor_vlt_lock_out_of_sync`); a payload git would ignore refuses with
+  `vendor_artifact_gitignored`, and a package already vendored through
+  another lockfile flavor with `vendor_flavor_changed`. `vendor --revert`
+  restores the registry node, edges and specs (keeping flags, trailing
+  slots and outgoing edge values vlt rewrote since) or keeps everything on
+  drift. Lock inventory reads `vlt-lock.json` too, Socket-hosted pins
+  included.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
index c934abd4..17168c4f 100644
--- a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
+++ b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
@@ -602,7 +602,7 @@ async fn repair_rebuilds_corrupt_bun_tarball() {
 }
 
 /// An entry stamped with a flavor this release has no backend for (written
-/// by a newer socket-patch, e.g. `vlt`) is never judged or rebuilt: repair
+/// by a newer socket-patch, e.g. `future-pm`) is never judged or rebuilt: repair
 /// warns `vendor_wiring_unknown_revert_blocked` and leaves the ledger, the
 /// lock and the (here deleted) artifact exactly as found.
 #[tokio::test]
@@ -618,7 +618,7 @@ async fn repair_skips_an_entry_with_an_unknown_flavor() {
     let state_path = tmp.path().join(".socket/vendor/state.json");
     let mut v: serde_json::Value =
         serde_json::from_str(&std::fs::read_to_string(&state_path).unwrap()).unwrap();
-    v["entries"][PURL]["flavor"] = serde_json::json!("vlt");
+    v["entries"][PURL]["flavor"] = serde_json::json!("future-pm");
     std::fs::write(&state_path, serde_json::to_vec_pretty(&v).unwrap()).unwrap();
     let state_before = std::fs::read(&state_path).unwrap();
     let lock_before = std::fs::read(tmp.path().join(flavor.lock_name())).unwrap();
diff --git a/crates/socket-patch-core/src/constants.rs b/crates/socket-patch-core/src/constants.rs
index 8aa1a1ae..3f872bbb 100644
--- a/crates/socket-patch-core/src/constants.rs
+++ b/crates/socket-patch-core/src/constants.rs
@@ -158,6 +158,19 @@ pub mod npm_family {
             redirect_candidate: true,
             detects_pnpm: false,
         },
+        FileRow {
+            name: "vlt-lock.json",
+            vendor_probe: true,
+            redirect_candidate: true,
+            detects_pnpm: false,
+        },
+        // vlt's config: a read-only redirect input, never wired.
+        FileRow {
+            name: "vlt.json",
+            vendor_probe: false,
+            redirect_candidate: true,
+            detects_pnpm: false,
+        },
         // deno.lock is deliberately absent: deno is its own ecosystem
         // (JSR-crawled); no npm-family vendor/redirect/detection path treats
         // deno.lock as an npm lock today. Adding it here is a feature
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/mod.rs b/crates/socket-patch-core/src/vendor/lock_inventory/mod.rs
index 774ad377..1c3bc381 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/mod.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/mod.rs
@@ -65,6 +65,7 @@ pub(crate) mod npm_family;
 pub(crate) mod pnpm;
 pub(crate) mod pypi;
 pub(crate) mod recover;
+pub(crate) mod vlt;
 pub(crate) mod wired;
 pub(crate) mod yarn;
 
@@ -92,6 +93,7 @@ use self::{
     pnpm::{inventory_pnpm_lock, inventory_pnpm_lock_at},
     pypi::{is_public_pypi_url, python_lock_inventory, socket_reference_coords},
     recover::pure_wheel_from_uv_unit,
+    vlt::inventory_vlt,
     yarn::{inventory_yarn_berry, inventory_yarn_classic},
 };
 #[cfg(test)]
@@ -430,6 +432,7 @@ mod architecture_tests {
             "pnpm.rs",
             "yarn.rs",
             "bun.rs",
+            "vlt.rs",
             "cargo.rs",
             "golang.rs",
             "composer.rs",
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/npm_family.rs b/crates/socket-patch-core/src/vendor/lock_inventory/npm_family.rs
index a82a4dda..ecc45c4a 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/npm_family.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/npm_family.rs
@@ -4,13 +4,16 @@
 
 use std::path::Path;
 
-use crate::constants::npm_family::{BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_SHRINKWRAP_LEGACY};
+use crate::constants::npm_family::{
+    BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_SHRINKWRAP_LEGACY, VLT_LOCK,
+};
 use crate::utils::purl::npm_purl;
 use crate::vendor::npm_flavor::{detect_npm_lock_flavor, NpmLockFlavor};
 
 use super::bun::{bun_text_lock_present, inventory_bun, inventory_bun_binary};
 use super::npm::inventory_package_lock;
 use super::pnpm::{inventory_pnpm_lock, inventory_pnpm_lock_at, inventory_rush_pnpm_locks};
+use super::vlt::inventory_vlt;
 use super::yarn::{inventory_yarn_berry, inventory_yarn_classic};
 use super::{dedup_prefer_integrity, LockfileEntry, UnsupportedNpmLayout};
 
@@ -142,6 +145,7 @@ pub(super) async fn inventory_npm_lock_raw(
                 Some(inventory_bun_binary(project_root).await?)
             }
         }
+        NpmLockFlavor::Vlt => inventory_vlt(project_root).await,
     };
     Ok(raw.map(|raw| (flavor, guard_npm(raw))))
 }
@@ -150,8 +154,8 @@ pub(super) async fn inventory_npm_lock_raw(
 /// shadowing, or `None` when no sibling lock file exists at all.
 ///
 /// [`detect_npm_lock_flavor`] cannot be re-asked (it already refused on its
-/// pnpm step), so this mirrors the rest of its precedence by hand — bun,
-/// then yarn, then npm — on file EXISTENCE, and returns the first present
+/// pnpm step), so this mirrors the rest of its precedence by hand — vlt,
+/// bun, then yarn, then npm — on file EXISTENCE, and returns the first present
 /// sibling's inventory (possibly empty: presence alone proves the pnpm lock
 /// is migration debris, so the caller must not fall back to it). Raw
 /// entries — the caller guards and collapses them.
@@ -162,7 +166,13 @@ pub(super) async fn inventory_live_sibling_lock(
         let p = root.join(name);
         async move { tokio::fs::metadata(&p).await.is_ok() }
     };
-    // bun.lock — router step 2. That step runs BEFORE the pnpm sniff, so
+    if exists(VLT_LOCK).await {
+        return Some((
+            NpmLockFlavor::Vlt,
+            inventory_vlt(root).await.unwrap_or_default(),
+        ));
+    }
+    // bun.lock — router step 3. That step runs BEFORE the pnpm sniff, so
     // when the version refusal fired no bun.lock can actually be present;
     // probed anyway to keep this a literal transcription of the router's
     // order. The binary lock shares the same routing precedence.
@@ -178,7 +188,7 @@ pub(super) async fn inventory_live_sibling_lock(
             inventory_bun_binary(root).await.unwrap_or_default(),
         ));
     }
-    // yarn.lock — router step 4, where classic vs berry is a content
+    // yarn.lock — router step 5, where classic vs berry is a content
     // decision. Rather than re-deriving that head sniff, try both readers:
     // each yields entries only for its own grammar (classic's `version "…"`
     // fields vs berry's `resolution:` lines), so a non-empty result is the
@@ -194,7 +204,7 @@ pub(super) async fn inventory_live_sibling_lock(
             inventory_yarn_berry(root).await.unwrap_or_default(),
         ));
     }
-    // npm — router step 5 (`inventory_package_lock` itself prefers the
+    // npm — router step 6 (`inventory_package_lock` itself prefers the
     // shrinkwrap when both exist, mirroring npm).
     if exists(NPM_LOCKS[0]).await || exists(NPM_LOCKS[1]).await {
         return Some((
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/recover.rs b/crates/socket-patch-core/src/vendor/lock_inventory/recover.rs
index ebd8cdce..0e58a9a8 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/recover.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/recover.rs
@@ -406,6 +406,22 @@ fn recover_npm_fragment(
             return Ok(mk(resolved, LockIntegrity::Sri(sri.to_string())));
         }
     }
+    // vlt: the original is the registry node's entry text; slot [2] is its
+    // integrity and slot [3] (from vlt 1.0.0-rc.33) its tarball URL.
+    if let Some(text) = wiring_original(entry, &["vlt_lock_node"]).and_then(Value::as_str) {
+        if let Some(node) = crate::vendor::vlt_lock_text::parse_node_entry_text(text) {
+            let slot = |i: usize| {
+                node.slot(i)
+                    .and_then(|raw| serde_json::from_str::<String>(raw).ok())
+            };
+            if let Some(sri) = slot(2).filter(|s| is_sri_pin(s)) {
+                return Ok(mk(
+                    slot(3).and_then(|u| http_url(&u)),
+                    LockIntegrity::Sri(sri),
+                ));
+            }
+        }
+    }
     // bun: the original is the raw tuple line; the integrity is its last
     // quoted SRI string.
     if let Some(line) =
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/recover_tests.rs b/crates/socket-patch-core/src/vendor/lock_inventory/recover_tests.rs
index 5e93e21d..9c392a69 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/recover_tests.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/recover_tests.rs
@@ -83,6 +83,51 @@ async fn npm_lock_entry_fragment_recovers_sri_and_url() {
     assert_eq!(got.integrity, LockIntegrity::Sri("sha512-AAAA".into()));
 }
 
+#[tokio::test]
+async fn vlt_lock_node_original_recovers_sri_and_url() {
+    let tmp = tempfile::tempdir().unwrap();
+    let node = |tuple: &str| {
+        entry(
+            "npm",
+            "pkg:npm/%40scope/x@1.2.3",
+            vec![rec(
+                "vlt_lock_node",
+                serde_json::Value::String(format!("\"~npm~@scope+x@1.2.3\": {tuple}")),
+            )],
+        )
+    };
+    let got = recover_lock_entry(
+        tmp.path(),
+        &node(
+            r#"[0,"@scope/x","sha512-AAAA","https://registry.npmjs.org/@scope/x/-/x-1.2.3.tgz"]"#,
+        ),
+    )
+    .await
+    .unwrap();
+    assert_eq!(
+        (got.name.as_str(), got.version.as_str()),
+        ("@scope/x", "1.2.3")
+    );
+    assert_eq!(
+        got.resolved.as_deref(),
+        Some("https://registry.npmjs.org/@scope/x/-/x-1.2.3.tgz")
+    );
+    assert_eq!(got.integrity, LockIntegrity::Sri("sha512-AAAA".into()));
+
+    let got = recover_lock_entry(tmp.path(), &node(r#"[0,"@scope/x","sha512-AAAA"]"#))
+        .await
+        .unwrap();
+    assert_eq!(
+        got.resolved, None,
+        "a 3-tuple leaves the URL to the fetcher"
+    );
+    assert!(
+        recover_lock_entry(tmp.path(), &node(r#"[0,"@scope/x",null,"file:x"]"#))
+            .await
+            .is_err()
+    );
+}
+
 #[tokio::test]
 async fn bun_binary_snapshot_recovers_registry_metadata_and_checks_coordinates() {
     let tmp = tempfile::tempdir().unwrap();
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs b/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
index 2dbdf96b..a7366e5c 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
@@ -2425,3 +2425,137 @@ fn pnpm_resolution_tokens_cover_maps_the_grammar_refuses() {
     assert!(ok.resolution.is_some());
     assert_eq!(ok.resolution_tokens(), vec!["integrity:", "sha512-ok"]);
 }
+
+// ── vlt ───────────────────────────────────────────────────────────────
+
+const VLT_UUID: &str = "9f6b2c4e-1d3a-4f6b-8c2d-7e5a9b1c3d5f";
+
+fn vlt_lock(options: &str, nodes: &[&str]) -> String {
+    format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {options},\n  \"nodes\": {{\n{}\n  }},\n  \"edges\": {{}}\n}}\n",
+        nodes
+            .iter()
+            .map(|n| format!("    {n}"))
+            .collect::<Vec<_>>()
+            .join(",\n")
+    )
+}
+
+#[tokio::test]
+async fn vlt_registry_nodes_inventory_with_their_location_and_integrity() {
+    let hosted = format!("https://patch.socket.dev/patch/npm/t/{VLT_UUID}/left-pad-1.3.0.tgz");
+    let vendored = format!(".socket/vendor/npm/{VLT_UUID}/ms-2.1.3/node_modules/ms");
+    let lock = vlt_lock(
+        r#"{"registries": {"acme": "https://npm.acme.test"}}"#,
+        &[
+            &format!(r#""~npm~left-pad@1.3.0": [0,"left-pad","sha512-PATCHED==","{hosted}"]"#),
+            r#""~npm~@scope+pkg@2.0.0": [0,"@scope/pkg","sha512-scoped=="]"#,
+            r#""~acme~private@1.0.0": [0,"private","sha512-acme=="]"#,
+            r#""~ghost~lost@1.0.0": [0,"lost","sha512-lost=="]"#,
+            r#""~http_c++127.0.0.1_c4873+~u@1.0.0": [0,"u"]"#,
+            r#""~npm~alias-name@1.0.0": [0,"other"]"#,
+            &format!(
+                r#""file~.socket+vendor+npm+{VLT_UUID}+ms-2.1.3+node__modules+ms": [0,"ms",null,"{vendored}"]"#
+            ),
+            r#""git~github_cu+p~": [0,"p"]"#,
+        ],
+    );
+    let tmp = tempfile::tempdir().unwrap();
+    write(tmp.path(), "vlt-lock.json", &lock).await;
+    let (flavor, entries) = inventory_npm_lock(tmp.path()).await.unwrap().unwrap();
+    assert_eq!(flavor, NpmLockFlavor::Vlt);
+    let mut names: Vec<&str> = entries.iter().map(|e| e.name.as_str()).collect();
+    names.sort_unstable();
+    assert_eq!(names, ["@scope/pkg", "left-pad", "lost", "private", "u"]);
+
+    let left_pad = entry(&entries, "left-pad");
+    assert_eq!(left_pad.resolved.as_deref(), Some(hosted.as_str()));
+    assert_eq!(
+        left_pad.integrity,
+        LockIntegrity::Sri("sha512-PATCHED==".into())
+    );
+    assert_eq!(
+        entry(&entries, "@scope/pkg").resolved.as_deref(),
+        Some("https://registry.npmjs.org/@scope/pkg/-/pkg-2.0.0.tgz")
+    );
+    assert_eq!(
+        entry(&entries, "private").resolved.as_deref(),
+        Some("https://npm.acme.test/private/-/private-1.0.0.tgz")
+    );
+    assert_eq!(entry(&entries, "lost").resolved, None);
+    let u = entry(&entries, "u");
+    assert_eq!(
+        u.resolved.as_deref(),
+        Some("http://127.0.0.1:4873/u/-/u-1.0.0.tgz")
+    );
+    assert_eq!(u.integrity, LockIntegrity::None);
+    assert_eq!(inventory_vlt(tmp.path()).await.unwrap().len(), 5);
+}
+
+#[tokio::test]
+async fn vlt_default_registry_base_follows_the_lock_options() {
+    for (options, want) in [
+        (r#"{"registry": "https://r.test"}"#, "https://r.test/"),
+        (
+            r#"{"registries": {"npm": "https://mirror.test/npm/"}}"#,
+            "https://mirror.test/npm/",
+        ),
+        ("{}", "https://registry.npmjs.org/"),
+    ] {
+        let tmp = tempfile::tempdir().unwrap();
+        let lock = vlt_lock(options, &[r#""~npm~a@1.0.0": [0,"a","sha512-a=="]"#]);
+        write(tmp.path(), "vlt-lock.json", &lock).await;
+        let entries = inventory_vlt(tmp.path()).await.unwrap();
+        assert_eq!(
+            entries[0].resolved.as_deref(),
+            Some(format!("{want}a/-/a-1.0.0.tgz").as_str()),
+            "{options}"
+        );
+    }
+}
+
+#[tokio::test]
+async fn unreadable_vlt_locks_inventory_to_nothing() {
+    let good = vlt_lock("{}", &[r#""~npm~a@1.0.0": [0,"a","sha512-a=="]"#]);
+    for lock in [
+        format!("\u{feff}{good}"),
+        good.replace("\"lockfileVersion\": 1", "\"lockfileVersion\": 2"),
+        "{\"lockfileVersion\": 1,".to_string(),
+    ] {
+        let tmp = tempfile::tempdir().unwrap();
+        write(tmp.path(), "vlt-lock.json", &lock).await;
+        assert!(inventory_vlt(tmp.path()).await.is_none(), "{lock:?}");
+        assert!(inventory_project(tmp.path()).await.is_empty(), "{lock:?}");
+    }
+    // A pre-lockfileVersion lock is still read-only readable.
+    let tmp = tempfile::tempdir().unwrap();
+    write(
+        tmp.path(),
+        "vlt-lock.json",
+        &good
+            .replace("  \"lockfileVersion\": 1,\n", "")
+            .replace("~npm~", "··"),
+    )
+    .await;
+    assert_eq!(inventory_vlt(tmp.path()).await.unwrap().len(), 1);
+}
+
+#[tokio::test]
+async fn vlt_lock_wins_the_sibling_order_behind_a_refused_pnpm_lock() {
+    let tmp = tempfile::tempdir().unwrap();
+    write(
+        tmp.path(),
+        "vlt-lock.json",
+        &vlt_lock("{}", &[r#""~npm~a@1.0.0": [0,"a","sha512-a=="]"#]),
+    )
+    .await;
+    write(tmp.path(), "package-lock.json", PACKAGE_LOCK).await;
+    let (flavor, entries) = inventory_npm_lock(tmp.path()).await.unwrap().unwrap();
+    assert_eq!(flavor, NpmLockFlavor::Vlt);
+    assert_eq!(entries.len(), 1);
+    let (flavor, entries) = super::npm_family::inventory_live_sibling_lock(tmp.path())
+        .await
+        .unwrap();
+    assert_eq!(flavor, NpmLockFlavor::Vlt);
+    assert_eq!(entries.len(), 1);
+}
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
new file mode 100644
index 00000000..e05d69db
--- /dev/null
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
@@ -0,0 +1,138 @@
+//! `vlt-lock.json`: the entry model lockfile discovery shares
+//! ([`vlt_lock_nodes`]) and the registry view (DESIGN §4.8).
+
+use std::path::Path;
+
+use serde_json::{Map, Value};
+
+use crate::constants::npm_family::VLT_LOCK;
+use crate::utils::fs::read_regular_to_string;
+use crate::vendor::vlt_lock_text::{
+    is_default_registry, sniff_lock, split_dep_id, DepId, DepIdKind, LockSniff,
+};
+
+use super::{http_url, LockIntegrity, LockfileEntry};
+
+// ── entry model ──
+
+/// One node of a readable `vlt-lock.json`: its DepID split, slot [1] (the
+/// package name) and the raw slot [2] integrity and slot [3] location.
+#[derive(Debug, Clone)]
+pub(crate) struct VltLockNode {
+    pub(crate) dep_id: DepId,
+    pub(crate) name: String,
+    pub(crate) integrity: Option<String>,
+    pub(crate) location: Option<String>,
+}
+
+/// A readable `vlt-lock.json`: its `options` and every node whose id splits.
+#[derive(Debug, Clone)]
+pub(crate) struct VltLock {
+    pub(crate) options: Option<Map<String, Value>>,
+    pub(crate) nodes: Vec<VltLockNode>,
+}
+
+/// The nodes of a lock vlt itself can read; `None` for a BOM-prefixed,
+/// unparseable or unknown-version lock (never BOM-stripped).
+pub(crate) fn vlt_lock_nodes(text: &str) -> Option<VltLock> {
+    let LockSniff::Readable(lock) = sniff_lock(text) else {
+        return None;
+    };
+    let string_slot = |tuple: &[Value], i: usize| {
+        tuple
+            .get(i)
+            .and_then(Value::as_str)
+            .filter(|s| !s.is_empty())
+            .map(str::to_string)
+    };
+    let nodes = lock
+        .nodes()
+        .map(|nodes| {
+            nodes
+                .iter()
+                .filter_map(|(id, tuple)| {
+                    let tuple = tuple.as_array()?;
+                    Some(VltLockNode {
+                        dep_id: split_dep_id(id)?,
+                        name: tuple.get(1)?.as_str()?.to_string(),
+                        integrity: string_slot(tuple, 2),
+                        location: string_slot(tuple, 3),
+                    })
+                })
+                .collect()
+        })
+        .unwrap_or_default();
+    Some(VltLock {
+        options: lock.options().cloned(),
+        nodes,
+    })
+}
+
+fn with_slash(url: &str) -> String {
+    if url.ends_with('/') {
+        url.to_string()
+    } else {
+        format!("{url}/")
+    }
+}
+
+/// The registry base a node's segment names: the segment URL itself, the
+/// alias's `options.registries` URL, or for the default registry
+/// `options.registry`, `options.registries.npm`, else the public registry.
+/// `None` for an alias the options do not map.
+fn registry_base(segment: &str, options: Option<&Map<String, Value>>) -> Option<String> {
+    let option = |path: &[&str]| {
+        let mut value = options.map(|o| Value::Object(o.clone()))?;
+        for key in path {
+            value = value.get(*key)?.clone();
+        }
+        value.as_str().map(str::to_string)
+    };
+    if segment.starts_with("https://") || segment.starts_with("http://") {
+        return Some(with_slash(segment));
+    }
+    if is_default_registry(segment, options) {
+        let base = option(&["registry"])
+            .or_else(|| option(&["registries", "npm"]))
+            .unwrap_or_else(|| "https://registry.npmjs.org/".to_string());
+        return Some(with_slash(&base));
+    }
+    option(&["registries", segment]).map(|base| with_slash(&base))
+}
+
+/// The registry entries of a readable lock: every registry node whose slot
+/// [1] is its DepID name. The location is slot [3] when it is an http(s)
+/// URL (a Socket-hosted pin included: it is the installed pair), else the
+/// conventional tarball URL of its registry.
+pub(crate) fn vlt_registry_entries(lock: &VltLock) -> Vec<LockfileEntry> {
+    let options = lock.options.as_ref();
+    lock.nodes
+        .iter()
+        .filter(|node| node.dep_id.kind == DepIdKind::Registry)
+        .filter_map(|node| {
+            let (name, version) = node.dep_id.registry_identity()?;
+            if node.name != name {
+                return None;
+            }
+            let bare = name.rsplit('/').next().unwrap_or(name);
+            let resolved = node.location.as_deref().and_then(http_url).or_else(|| {
+                registry_base(&node.dep_id.first, options)
+                    .map(|base| format!("{base}{name}/-/{bare}-{version}.tgz"))
+            });
+            let integrity = node
+                .integrity
+                .clone()
+                .map_or(LockIntegrity::None, LockIntegrity::Sri);
+            Some(LockfileEntry::npm(name, version, resolved, integrity))
+        })
+        .collect()
+}
+
+// ── registry view ──
+
+/// Inventory the root `vlt-lock.json`. Vendored `file` nodes are not
+/// registry nodes and never appear; hosted pins stay (pnpm parity).
+pub(super) async fn inventory_vlt(root: &Path) -> Option<Vec<LockfileEntry>> {
+    let text = read_regular_to_string(&root.join(VLT_LOCK)).await.ok()?;
+    vlt_lock_nodes(&text).map(|lock| vlt_registry_entries(&lock))
+}
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/wired.rs b/crates/socket-patch-core/src/vendor/lock_inventory/wired.rs
index e2ee04ca..35c2a2f3 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/wired.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/wired.rs
@@ -25,7 +25,9 @@ use super::LockIntegrity;
 ///
 /// package-lock/shrinkwrap are parsed as JSON; the text formats (pnpm,
 /// yarn classic/berry, bun) are scanned with a bounded forward window from
-/// each reference line.
+/// each reference line. vlt yields `None`: its `file` nodes pin no
+/// integrity (slot [2] is `null`), and `vlt-lock.json` is never scanned,
+/// because the forward window would pick up a neighbouring node's sha512.
 pub async fn wired_vendor_integrity(
     project_root: &Path,
     artifact_rel: &str,
diff --git a/crates/socket-patch-core/src/vendor/mod.rs b/crates/socket-patch-core/src/vendor/mod.rs
index da961b13..8bdd68db 100644
--- a/crates/socket-patch-core/src/vendor/mod.rs
+++ b/crates/socket-patch-core/src/vendor/mod.rs
@@ -13,7 +13,7 @@
 //!
 //! | eco      | artifact            | wiring                                         |
 //! |----------|---------------------|------------------------------------------------|
-//! | npm      | deterministic tgz   | per lockfile flavor: package-lock `resolved`+`integrity`, yarn classic, yarn berry, pnpm, bun ([`npm_flavor`] routes) |
+//! | npm      | deterministic tgz (vlt: package dir) | per lockfile flavor: package-lock `resolved`+`integrity`, yarn classic, yarn berry, pnpm, bun, vlt ([`npm_flavor`] routes) |
 //! | cargo    | crate dir           | root `Cargo.toml` `[patch.crates-io]` + Cargo.lock surgery ([`cargo_manifest`]) |
 //! | golang   | module dir          | `go.mod` `replace` ([`ReplaceOwner::Vendor`])  |
 //! | composer | package dir         | composer.lock `dist` → `{type: path}`          |
@@ -69,6 +69,7 @@ pub mod lock_inventory;
 pub(crate) mod maven_pom;
 pub mod maven_repo;
 pub(crate) mod npm_common;
+pub(crate) mod npm_dir;
 pub mod npm_flavor;
 pub mod npm_lock;
 mod npm_pack;
@@ -92,6 +93,7 @@ pub(crate) mod service_fetch;
 pub(crate) mod test_support;
 mod toml_surgery;
 pub(crate) mod verify;
+pub mod vlt_lock;
 #[allow(dead_code)]
 pub(crate) mod vlt_lock_text;
 pub(crate) mod yarn_berry_lock;
@@ -506,9 +508,12 @@ pub async fn harvest_artifact_blobs_from(
             }
             continue;
         }
-        // Dir-shaped artifacts (cargo/golang/composer/gem copies): the
-        // record keys are package-relative, so resolve each needed file
-        // directly instead of walking the whole tree.
+        // Dir-shaped artifacts (cargo/golang/composer/gem copies, vlt
+        // package dirs): the record keys are package-relative, so resolve
+        // each needed file directly instead of walking the whole tree. A vlt
+        // dir's package.json is post-transform, never the afterHash blob,
+        // and its node_modules holds vlt's links.
+        let vlt_dir = entry.ecosystem == "npm" && entry.flavor.as_deref() == Some(vlt_lock::FLAVOR);
         if tokio::fs::metadata(&artifact)
             .await
             .is_ok_and(|m| m.is_dir())
@@ -518,7 +523,9 @@ pub async fn harvest_artifact_blobs_from(
                     continue;
                 }
                 let rel = normalize_file_path(file_name);
-                if !is_safe_relative_subpath(rel) {
+                if !is_safe_relative_subpath(rel)
+                    || (vlt_dir && (rel == "package.json" || rel.starts_with("node_modules/")))
+                {
                     continue;
                 }
                 let path = artifact.join(rel);
diff --git a/crates/socket-patch-core/src/vendor/npm_common.rs b/crates/socket-patch-core/src/vendor/npm_common.rs
index fd345d07..67c2c002 100644
--- a/crates/socket-patch-core/src/vendor/npm_common.rs
+++ b/crates/socket-patch-core/src/vendor/npm_common.rs
@@ -712,9 +712,15 @@ pub(crate) fn is_safe_npm_name(name: &str) -> bool {
 /// The artifact path under the uuid dir: `[@scope/]<name>-<version>.tgz`,
 /// with the scope kept as a real subdirectory.
 pub(super) fn tgz_rel_leaf(name: &str, version: &str) -> String {
+    format!("{}.tgz", pkg_rel_leaf(name, version))
+}
+
+/// `[@scope/]<name>-<version>`: the tarball leaf without `.tgz`, which the
+/// vlt directory artifact uses as its version-bearing level.
+pub(crate) fn pkg_rel_leaf(name: &str, version: &str) -> String {
     match name.split_once('/') {
-        Some((scope, bare)) => format!("{scope}/{bare}-{version}.tgz"),
-        None => format!("{name}-{version}.tgz"),
+        Some((scope, bare)) => format!("{scope}/{bare}-{version}"),
+        None => format!("{name}-{version}"),
     }
 }
 
@@ -733,7 +739,7 @@ pub(crate) fn tgz_leaf_version<'l>(name: &str, leaf: &'l str) -> Option<&'l str>
 /// to `Object.keys(bd)` for any other truthy value — so an OBJECT form
 /// bundles its keys too; any of these makes the package unvendorable (see
 /// the refusal site).
-fn declares_bundled_deps(pkg: &Value) -> bool {
+pub(super) fn declares_bundled_deps(pkg: &Value) -> bool {
     ["bundleDependencies", "bundledDependencies"]
         .iter()
         .any(|k| match pkg.get(*k) {
diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
new file mode 100644
index 00000000..d847a637
--- /dev/null
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -0,0 +1,1028 @@
+//! Directory artifacts for the vlt backend (DESIGN §4.2–§4.4).
+//!
+//! vlt installs a `file:` directory dependency by linking it, so the vendored
+//! artifact is the patched package directory itself, laid out as
+//! `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>/node_modules/<name>/`:
+//! Node resolves a package's `require('<own name>')` by walking up from its
+//! realpath, and only a `node_modules/<name>` ancestor makes that work for
+//! root, workspace-member and alias edges alike. The `<bare>-<version>`
+//! level keeps the version in the path, because a committed `file` node
+//! records none. vlt writes the dependency links under the package's own
+//! `node_modules/`, which socket-patch never inventories, reads or creates.
+//!
+//! `<uuid>/.gitignore` re-includes the payload against the user's ignores
+//! (JS repos routinely ignore `dist/`, `lib/` and `*.map`, exactly what
+//! packages publish) while keeping vlt's links out, and `<uuid>/.gitattributes`
+//! stops EOL conversion from rewriting the payload on a Windows checkout.
+//!
+//! Two deterministic transforms run on every tree, service-built or local:
+//! the top-level `devDependencies` member is cut out of `package.json` (vlt
+//! installs a `file` node's devDependencies), and nothing else changes. The
+//! verifiers then apply the vlt manifest exemption ([`super::verify`]).
+
+use std::collections::BTreeMap;
+use std::path::{Path, PathBuf};
+
+use serde_json::Value;
+
+use crate::manifest::schema::PatchRecord;
+use crate::patch::apply::{normalize_file_path, ApplyResult, PatchSources};
+use crate::patch::copy_tree::{fresh_copy, remove_tree};
+use crate::utils::fs::atomic_write_bytes;
+
+use super::common::{already_patched_result, refused, service_offline_conflict};
+use super::npm_common::{
+    declares_bundled_deps, done_failure, done_failure_unstage, guard_coordinates,
+};
+use super::service_fetch::{fetch_verified_archive, ServiceArtifact};
+use super::state::VENDOR_MARKER_FILE;
+use super::vlt_lock_text::vendored_dir_rel;
+use super::{VendorOutcome, VendorServiceConfig, VendorWarning};
+
+/// `<uuid>/.gitignore`, exactly.
+pub(crate) const UUID_GITIGNORE: &str =
+    "!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n";
+/// `<uuid>/.gitattributes`, exactly.
+pub(crate) const UUID_GITATTRIBUTES: &str = "* -text\n";
+
+const GITIGNORE: &str = ".gitignore";
+const GITATTRIBUTES: &str = ".gitattributes";
+const NODE_MODULES: &str = "node_modules";
+
+/// The staged directory artifact the vlt wiring consumes.
+pub(super) struct NpmStagedDir {
+    /// `.socket/vendor/npm/<uuid>/<leaf>/node_modules/<name>`.
+    pub rel_dir: String,
+    /// Every regular file under `rel_dir` but its `node_modules/`.
+    pub inventory: BTreeMap<String, String>,
+    /// The uuid dir existed before this run wrote into it.
+    pub uuid_dir_preexisted: bool,
+    /// The patched manifest, when the patch rewrote `package.json`.
+    pub staged_pkg_json: Option<Value>,
+    /// The committed dir passed the reuse check; nothing was written.
+    pub reused: bool,
+}
+
+// ── package.json spans ───────────────────────────────────────────────────
+
+/// One member of a JSON object: its decoded key and byte offsets.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct JsonMember {
+    pub(crate) key: String,
+    pub(crate) key_start: usize,
+    pub(crate) value_start: usize,
+    pub(crate) value_end: usize,
+    /// The comma right after the value, when one follows.
+    pub(crate) comma: Option<usize>,
+}
+
+fn skip_ws(b: &[u8], mut i: usize) -> usize {
+    while i < b.len() && matches!(b[i], b' ' | b'\t' | b'\n' | b'\r') {
+        i += 1;
+    }
+    i
+}
+
+/// The index just past the string token starting at `i`.
+fn scan_string(b: &[u8], i: usize) -> Option<usize> {
+    if b.get(i) != Some(&b'"') {
+        return None;
+    }
+    let mut j = i + 1;
+    while j < b.len() {
+        match b[j] {
+            b'\\' => j += 2,
+            b'"' => return Some(j + 1),
+            _ => j += 1,
+        }
+    }
+    None
+}
+
+/// The index just past the value starting at `i`.
+fn scan_value(b: &[u8], i: usize) -> Option<usize> {
+    match b.get(i)? {
+        b'"' => scan_string(b, i),
+        b'{' | b'[' => {
+            let mut depth = 0usize;
+            let mut j = i;
+            while j < b.len() {
+                match b[j] {
+                    b'"' => {
+                        j = scan_string(b, j)?;
+                        continue;
+                    }
+                    b'{' | b'[' => depth += 1,
+                    b'}' | b']' => {
+                        depth -= 1;
+                        if depth == 0 {
+                            return Some(j + 1);
+                        }
+                    }
+                    _ => {}
+                }
+                j += 1;
+            }
+            None
+        }
+        _ => {
+            let mut j = i;
+            while j < b.len() && !matches!(b[j], b',' | b'}' | b']' | b' ' | b'\t' | b'\n' | b'\r')
+            {
+                j += 1;
+            }
+            (j > i).then_some(j)
+        }
+    }
+}
+
+/// The members of the object whose `{` is at `open`.
+fn object_members(text: &str, open: usize) -> Option<Vec<JsonMember>> {
+    let b = text.as_bytes();
+    if b.get(open) != Some(&b'{') {
+        return None;
+    }
+    let mut members = Vec::new();
+    let mut i = skip_ws(b, open + 1);
+    if b.get(i) == Some(&b'}') {
+        return Some(members);
+    }
+    loop {
+        let key_start = i;
+        let key_end = scan_string(b, key_start)?;
+        let key: String = serde_json::from_str(&text[key_start..key_end]).ok()?;
+        i = skip_ws(b, key_end);
+        if b.get(i) != Some(&b':') {
+            return None;
+        }
+        let value_start = skip_ws(b, i + 1);
+        let value_end = scan_value(b, value_start)?;
+        i = skip_ws(b, value_end);
+        let comma = (b.get(i) == Some(&b',')).then_some(i);
+        members.push(JsonMember {
+            key,
+            key_start,
+            value_start,
+            value_end,
+            comma,
+        });
+        match b.get(i)? {
+            b',' => i = skip_ws(b, i + 1),
+            b'}' => return Some(members),
+            _ => return None,
+        }
+    }
+}
+
+/// The top-level members of a JSON object document (a leading BOM is kept
+/// out of the offsets' way, never stripped from the text).
+pub(crate) fn root_members(text: &str) -> Option<Vec<JsonMember>> {
+    let body = text.strip_prefix('\u{feff}').unwrap_or(text);
+    serde_json::from_str::<serde_json::Map<String, Value>>(body).ok()?;
+    let open = skip_ws(text.as_bytes(), text.len() - body.len());
+    object_members(text, open)
+}
+
+/// The one member named `key`; `Err` when it appears more than once.
+fn unique_member<'m>(members: &'m [JsonMember], key: &str) -> Result<Option<&'m JsonMember>, ()> {
+    let mut found = members.iter().filter(|m| m.key == key);
+    let first = found.next();
+    if found.next().is_some() {
+        return Err(());
+    }
+    Ok(first)
+}
+
+/// Why a package.json span edit could not be made.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) enum SpanError {
+    NotJson,
+    Duplicate(String),
+    Missing,
+    NotString,
+}
+
+/// DESIGN §4.4: `package.json` with its top-level `devDependencies` member
+/// cut out as a byte span (key, colon, value and the whitespace between
+/// them, plus the following comma and the run up to the next token, else
+/// the preceding comma). `Ok(None)` when the member is absent.
+pub(crate) fn strip_dev_dependencies(text: &str) -> Result<Option<String>, SpanError> {
+    let members = root_members(text).ok_or(SpanError::NotJson)?;
+    let member = match unique_member(&members, "devDependencies") {
+        Ok(Some(member)) => member,
+        Ok(None) => return Ok(None),
+        Err(()) => return Err(SpanError::Duplicate("devDependencies".into())),
+    };
+    let index = members.iter().position(|m| m == member).unwrap_or_default();
+    let (start, end) = match member.comma {
+        Some(comma) => (
+            member.key_start,
+            skip_ws(text.as_bytes(), comma + 1).min(
+                members
+                    .get(index + 1)
+                    .map_or(text.len(), |next| next.key_start),
+            ),
+        ),
+        None => match index.checked_sub(1).and_then(|i| members[i].comma) {
+            Some(prev_comma) => (prev_comma, member.value_end),
+            None => (member.key_start, member.value_end),
+        },
+    };
+    Ok(Some(format!("{}{}", &text[..start], &text[end..])))
+}
+
+/// The raw string token at `[field][name]` of a package.json and its byte
+/// span.
+fn dependency_span(text: &str, field: &str, name: &str) -> Result<(usize, usize), SpanError> {
+    let members = root_members(text).ok_or(SpanError::NotJson)?;
+    let table = unique_member(&members, field)
+        .map_err(|()| SpanError::Duplicate(field.into()))?
+        .ok_or(SpanError::Missing)?;
+    let inner = object_members(text, table.value_start).ok_or(SpanError::Missing)?;
+    let dep = unique_member(&inner, name)
+        .map_err(|()| SpanError::Duplicate(format!("{field}.{name}")))?
+        .ok_or(SpanError::Missing)?;
+    if text.as_bytes()[dep.value_start] != b'"' {
+        return Err(SpanError::NotString);
+    }
+    Ok((dep.value_start, dep.value_end))
+}
+
+/// The raw JSON token of `[field][name]` (quotes included).
+pub(crate) fn dependency_token(text: &str, field: &str, name: &str) -> Result<String, SpanError> {
+    let (start, end) = dependency_span(text, field, name)?;
+    Ok(text[start..end].to_string())
+}
+
+/// `text` with the string token at `[field][name]` replaced by `raw` (a JSON
+/// string token), nothing else re-serialized.
+pub(crate) fn replace_dependency_token(
+    text: &str,
+    field: &str,
+    name: &str,
+    raw: &str,
+) -> Result<String, SpanError> {
+    let (start, end) = dependency_span(text, field, name)?;
+    Ok(format!("{}{raw}{}", &text[..start], &text[end..]))
+}
+
+/// The §4.4 transform on a staged tree's `package.json`. A refusal is the
+/// ready outcome.
+async fn apply_transforms(
+    stage: &Path,
+    name: &str,
+    version: &str,
+) -> Result<(), Box<VendorOutcome>> {
+    let path = stage.join("package.json");
+    let Ok(text) = crate::utils::fs::read_regular_to_string(&path).await else {
+        return Ok(());
+    };
+    match strip_dev_dependencies(&text) {
+        Ok(None) => Ok(()),
+        Ok(Some(stripped)) => tokio::fs::write(&path, stripped).await.map_err(|e| {
+            Box::new(done_failure(
+                &format!("pkg:npm/{name}@{version}"),
+                format!("cannot write the staged package.json: {e}"),
+            ))
+        }),
+        Err(SpanError::Duplicate(_)) => Err(Box::new(refused(
+            "vendor_lock_entry_unsupported",
+            format!("{name}@{version}'s package.json declares duplicate devDependencies"),
+        ))),
+        Err(_) => Err(Box::new(refused(
+            "vendor_lock_entry_unsupported",
+            format!("{name}@{version}'s package.json is not a JSON object"),
+        ))),
+    }
+}
+
+// ── tree checks ──────────────────────────────────────────────────────────
+
+/// DESIGN §4.2 structure rule: `<uuid>/<leaf>/node_modules/` holds exactly
+/// the package dir (for a scoped name, exactly `@scope/` holding exactly
+/// `<bare>`). `rel_abs` is the package dir.
+pub(crate) async fn structure_rule_holds(rel_abs: &Path, name: &str) -> bool {
+    let levels: Vec<&str> = name.split('/').collect();
+    let mut dir = rel_abs.to_path_buf();
+    for _ in &levels {
+        dir.pop();
+    }
+    for level in levels {
+        let entries = crate::utils::fs::list_dir_entries(&dir).await;
+        if entries.len() != 1 || entries[0].file_name().to_str() != Some(level) {
+            return false;
+        }
+        match tokio::fs::symlink_metadata(entries[0].path()).await {
+            Ok(meta) if meta.is_dir() => {}
+            _ => return false,
+        }
+        dir.push(level);
+    }
+    true
+}
+
+/// vlt's `node_modules/` inside the package dir holds only links, dirs and
+/// `.bin/` scripts; anything else there was planted.
+pub(crate) async fn node_modules_holds_only_links(rel_abs: &Path) -> bool {
+    let root = rel_abs.join(NODE_MODULES);
+    tokio::task::spawn_blocking(move || {
+        let Ok(meta) = std::fs::symlink_metadata(&root) else {
+            return true;
+        };
+        if !meta.is_dir() {
+            return false;
+        }
+        let mut stack = vec![(root.clone(), false)];
+        while let Some((dir, in_bin)) = stack.pop() {
+            let Ok(entries) = std::fs::read_dir(&dir) else {
+                return false;
+            };
+            for entry in entries {
+                let Ok(entry) = entry else {
+                    return false;
+                };
+                let Ok(meta) = std::fs::symlink_metadata(entry.path()) else {
+                    return false;
+                };
+                let ty = meta.file_type();
+                if ty.is_symlink() {
+                    continue;
+                }
+                if ty.is_dir() {
+                    let bin = in_bin || (dir == root && entry.file_name() == ".bin");
+                    stack.push((entry.path(), bin));
+                    continue;
+                }
+                if !(ty.is_file() && in_bin) {
+                    return false;
+                }
+            }
+        }
+        true
+    })
+    .await
+    .unwrap_or(false)
+}
+
+/// Rewrite `<uuid>/.gitignore` and `<uuid>/.gitattributes` when absent or
+/// different; neither is part of the artifact.
+pub(crate) async fn restore_uuid_metadata(uuid_dir: &Path) -> std::io::Result<()> {
+    for (name, want) in [
+        (GITIGNORE, UUID_GITIGNORE),
+        (GITATTRIBUTES, UUID_GITATTRIBUTES),
+    ] {
+        let path = uuid_dir.join(name);
+        let current = crate::utils::fs::read_regular_to_bytes(&path).await.ok();
+        if current.as_deref() != Some(want.as_bytes()) {
+            atomic_write_bytes(&path, want.as_bytes()).await?;
+        }
+    }
+    Ok(())
+}
+
+// ── gitignore probe ──────────────────────────────────────────────────────
+
+async fn git_output(
+    git: &Path,
+    root: &Path,
+    args: &[&str],
+    stdin: Option<String>,
+) -> Option<(i32, String)> {
+    use tokio::io::AsyncWriteExt as _;
+    let mut child = tokio::process::Command::new(git)
+        .arg("-C")
+        .arg(root)
+        .args(args)
+        .stdin(if stdin.is_some() {
+            std::process::Stdio::piped()
+        } else {
+            std::process::Stdio::null()
+        })
+        .stdout(std::process::Stdio::piped())
+        .stderr(std::process::Stdio::null())
+        .kill_on_drop(true)
+        .spawn()
+        .ok()?;
+    if let (Some(input), Some(mut pipe)) = (stdin, child.stdin.take()) {
+        pipe.write_all(input.as_bytes()).await.ok()?;
+    }
+    let output = tokio::time::timeout(std::time::Duration::from_secs(30), child.wait_with_output())
+        .await
+        .ok()?
+        .ok()?;
+    Some((
+        output.status.code()?,
+        String::from_utf8_lossy(&output.stdout).into_owned(),
+    ))
+}
+
+/// DESIGN §4.2 probe: `git check-ignore -v --no-index` over `paths`
+/// (project-relative). `Some(rules)` names what ignores them; `None` when
+/// nothing is ignored, git is absent or the root is not a work tree.
+pub(crate) async fn gitignored(project_root: &Path, paths: &[String]) -> Option<String> {
+    let git = crate::utils::process::resolve_tool("git")?;
+    let (_, inside) = git_output(
+        &git,
+        project_root,
+        &["rev-parse", "--is-inside-work-tree"],
+        None,
+    )
+    .await?;
+    if inside.trim() != "true" {
+        return None;
+    }
+    let input: String = paths.iter().map(|p| format!("{p}\n")).collect();
+    let (code, out) = git_output(
+        &git,
+        project_root,
+        &["check-ignore", "-v", "--no-index", "--stdin"],
+        Some(input),
+    )
+    .await?;
+    let lines: Vec<&str> = out
+        .lines()
+        .filter(|line| {
+            let rule = line.split('\t').next().unwrap_or_default();
+            let pattern = rule.splitn(3, ':').nth(2).unwrap_or_default();
+            !pattern.is_empty() && !pattern.starts_with('!')
+        })
+        .collect();
+    (code == 0 && !lines.is_empty()).then(|| {
+        let shown: Vec<&str> = lines.iter().take(3).copied().collect();
+        let more = lines.len().saturating_sub(shown.len());
+        let mut detail = shown.join("; ");
+        if more > 0 {
+            detail.push_str(&format!("; and {more} more"));
+        }
+        detail
+    })
+}
+
+fn gitignored_refusal(rel_dir: &str, rules: &str) -> VendorOutcome {
+    refused(
+        "vendor_artifact_gitignored",
+        format!(
+            "git would not commit the vendored artifact at {rel_dir} ({rules}); remove the \
+             rule that ignores .socket/ (or .socket/vendor/) and vendor again"
+        ),
+    )
+}
+
+// ── pipeline ─────────────────────────────────────────────────────────────
+
+/// DESIGN §4.3: reuse the committed dir, else build it from the patch
+/// service or the installed copy, then write it into place. Same result
+/// shape as [`super::npm_common::stage_patch_pack`]: `Err` is a refusal or
+/// a failure with the project untouched, `Ok((None, _))` a failed patch or
+/// a dry run, `Ok((Some(dir), _))` the artifact on disk.
+#[allow(clippy::too_many_arguments)]
+pub(super) async fn stage_patch_dir(
+    purl: &str,
+    installed_dir: &Path,
+    project_root: &Path,
+    record: &PatchRecord,
+    sources: &PatchSources<'_>,
+    dry_run: bool,
+    force: bool,
+    warnings: &mut Vec<VendorWarning>,
+    service: Option<&VendorServiceConfig>,
+) -> Result<(Option<NpmStagedDir>, ApplyResult), Box<VendorOutcome>> {
+    let coords = guard_coordinates(purl, record)?;
+    let rel_dir = vendored_dir_rel(&record.uuid, &coords.name, &coords.version);
+    let uuid_dir = project_root.join(&coords.uuid_dir_rel);
+    let rel_abs = project_root.join(&rel_dir);
+    let touches_manifest = record
+        .files
+        .keys()
+        .any(|k| normalize_file_path(k) == "package.json");
+
+    let mut reusable = false;
+    match super::reuse::reusable_committed_dir(project_root, record, &rel_dir).await {
+        Ok(inventory) => {
+            if !dry_run {
+                if let Err(e) = restore_uuid_metadata(&uuid_dir).await {
+                    return Err(Box::new(done_failure(
+                        purl,
+                        format!("cannot restore {}/.gitignore: {e}", coords.uuid_dir_rel),
+                    )));
+                }
+                let staged_pkg_json = if touches_manifest {
+                    read_manifest(&rel_abs).await.ok()
+                } else {
+                    None
+                };
+                let result = already_patched_result(purl, &rel_abs, &record.files);
+                return Ok((
+                    Some(NpmStagedDir {
+                        rel_dir,
+                        inventory,
+                        uuid_dir_preexisted: true,
+                        staged_pkg_json,
+                        reused: true,
+                    }),
+                    result,
+                ));
+            }
+            reusable = true;
+        }
+        Err(miss) => super::reuse::log_miss(purl, &miss),
+    }
+
+    if let Some(refusal) = service_offline_conflict(service).filter(|_| !reusable) {
+        return Err(Box::new(refusal));
+    }
+
+    let stage_tmp = tempfile::tempdir().map_err(|e| {
+        Box::new(done_failure(
+            purl,
+            format!("cannot create staging tempdir: {e}"),
+        ))
+    })?;
+    let stage = stage_tmp.path().join("stage");
+    let mut result = None;
+    if let Some(cfg) = service.filter(|cfg| cfg.service_enabled() && !dry_run) {
+        match try_service_dir(
+            purl,
+            record,
+            cfg,
+            &stage,
+            &coords.name,
+            &coords.version,
+            warnings,
+        )
+        .await
+        {
+            ServiceDir::Used => {
+                result = Some(already_patched_result(purl, &rel_abs, &record.files));
+            }
+            ServiceDir::HardFail(outcome) => return Err(outcome),
+            ServiceDir::FallBack => {}
+        }
+    }
+    let result = match result {
+        Some(result) => {
+            apply_transforms(&stage, &coords.name, &coords.version).await?;
+            result
+        }
+        None => {
+            if let Err(e) = fresh_copy(installed_dir, &stage, None).await {
+                return Err(Box::new(done_failure(
+                    purl,
+                    format!("cannot stage a copy of the installed package: {e}"),
+                )));
+            }
+            if let Err(e) = remove_tree(&stage.join(NODE_MODULES)).await {
+                return Err(Box::new(done_failure(
+                    purl,
+                    format!("cannot prune staged node_modules: {e}"),
+                )));
+            }
+            if let Ok(pkg) = read_manifest(&stage).await {
+                if declares_bundled_deps(&pkg) {
+                    return Err(Box::new(refused(
+                        "vendor_bundled_deps_unsupported",
+                        format!(
+                            "{}@{} declares bundleDependencies; vendoring would drop its \
+                             bundled node_modules and break installs",
+                            coords.name, coords.version
+                        ),
+                    )));
+                }
+            }
+            let result = super::force_apply_staged(
+                purl,
+                &stage,
+                record,
+                sources,
+                dry_run,
+                force,
+                &coords.name,
+                &coords.version,
+                warnings,
+            )
+            .await;
+            if !result.success {
+                return Ok((None, result));
+            }
+            apply_transforms(&stage, &coords.name, &coords.version).await?;
+            result
+        }
+    };
+    if dry_run {
+        return Ok((None, result));
+    }
+
+    let uuid_dir_preexisted = tokio::fs::metadata(&uuid_dir).await.is_ok();
+    let unstage = |error: String| {
+        done_failure_unstage(
+            purl,
+            error,
+            project_root,
+            &coords.uuid_dir_rel,
+            uuid_dir_preexisted,
+        )
+    };
+    if let Err(e) = write_into_place(&stage, &uuid_dir, &rel_abs).await {
+        return Err(Box::new(
+            unstage(format!("cannot write {rel_dir}: {e}")).await,
+        ));
+    }
+    if let Err(e) = restore_uuid_metadata(&uuid_dir).await {
+        return Err(Box::new(
+            unstage(format!(
+                "cannot write {}/.gitignore: {e}",
+                coords.uuid_dir_rel
+            ))
+            .await,
+        ));
+    }
+    let inventory = match super::verify::compute_package_dir_inventory(&rel_abs).await {
+        Ok(inventory) => inventory,
+        Err(e) => {
+            return Err(Box::new(
+                unstage(format!("cannot inventory {rel_dir}: {e}")).await,
+            ))
+        }
+    };
+    let mut probe: Vec<String> = inventory.keys().map(|k| format!("{rel_dir}/{k}")).collect();
+    for name in [VENDOR_MARKER_FILE, GITIGNORE, GITATTRIBUTES] {
+        probe.push(format!("{}/{name}", coords.uuid_dir_rel));
+    }
+    if let Some(rules) = gitignored(project_root, &probe).await {
+        let _ = unstage(String::new()).await;
+        return Err(Box::new(gitignored_refusal(&rel_dir, &rules)));
+    }
+    let staged_pkg_json = if touches_manifest {
+        match read_manifest(&rel_abs).await {
+            Ok(pkg) => Some(pkg),
+            Err(e) => return Err(Box::new(unstage(e).await)),
+        }
+    } else {
+        None
+    };
+    Ok((
+        Some(NpmStagedDir {
+            rel_dir,
+            inventory,
+            uuid_dir_preexisted,
+            staged_pkg_json,
+            reused: false,
+        }),
+        result,
+    ))
+}
+
+async fn read_manifest(dir: &Path) -> Result<Value, String> {
+    let text = crate::utils::fs::read_regular_to_string(&dir.join("package.json"))
+        .await
+        .map_err(|e| format!("package.json unreadable: {e}"))?;
+    serde_json::from_str(crate::package_json::detect::strip_bom(&text))
+        .map_err(|e| format!("package.json is not parseable JSON: {e}"))
+}
+
+/// Copy the stage to `<uuid>/.tmp-*`, then rename it over `rel_abs`.
+async fn write_into_place(stage: &Path, uuid_dir: &Path, rel_abs: &Path) -> std::io::Result<()> {
+    tokio::fs::create_dir_all(uuid_dir).await?;
+    let parent: PathBuf = rel_abs
+        .parent()
+        .map(Path::to_path_buf)
+        .ok_or_else(|| std::io::Error::other("artifact path has no parent"))?;
+    tokio::fs::create_dir_all(&parent).await?;
+    let tmp = tempfile::Builder::new()
+        .prefix(".tmp-")
+        .tempdir_in(uuid_dir)?
+        .keep();
+    if let Err(e) = fresh_copy(stage, &tmp, None).await {
+        let _ = remove_tree(&tmp).await;
+        return Err(e);
+    }
+    if tokio::fs::symlink_metadata(rel_abs).await.is_ok() {
+        remove_tree(rel_abs).await?;
+    }
+    if let Err(e) = tokio::fs::rename(&tmp, rel_abs).await {
+        let _ = remove_tree(&tmp).await;
+        return Err(e);
+    }
+    Ok(())
+}
+
+/// Every record file of the extracted tree hashes to its afterHash (the
+/// archive check, run on the tree the first-component strip produced).
+async fn tree_matches_after_hashes(stage: &Path, record: &PatchRecord) -> bool {
+    for (file_name, info) in &record.files {
+        let rel = normalize_file_path(file_name);
+        if !crate::patch::path_safety::is_safe_multi_segment(rel) {
+            return false;
+        }
+        let Ok(bytes) = crate::utils::fs::read_regular_to_bytes(&stage.join(rel)).await else {
+            return false;
+        };
+        if !crate::hash::git_sha256::compute_git_sha256_from_bytes(&bytes)
+            .eq_ignore_ascii_case(&info.after_hash)
+        {
+            return false;
+        }
+    }
+    true
+}
+
+enum ServiceDir {
+    Used,
+    HardFail(Box<VendorOutcome>),
+    FallBack,
+}
+
+/// The service fast path: the prebuilt tarball, integrity- and
+/// afterHash-verified, extracted into `stage` with its first path component
+/// stripped whatever it is called. The fallback policy is the tarball
+/// backends' (`try_service_pack`).
+async fn try_service_dir(
+    purl: &str,
+    record: &PatchRecord,
+    cfg: &VendorServiceConfig,
+    stage: &Path,
+    name: &str,
+    version: &str,
+    warnings: &mut Vec<VendorWarning>,
+) -> ServiceDir {
+    let hard_fail = |detail: String| ServiceDir::HardFail(Box::new(done_failure(purl, detail)));
+    let fallback_or_fail =
+        |reason: String, code: &'static str, warnings: &mut Vec<VendorWarning>| {
+            if cfg.source.requires_service() {
+                hard_fail(reason)
+            } else {
+                warnings.push(VendorWarning::new(
+                    code,
+                    format!("{reason}; building locally instead"),
+                ));
+                ServiceDir::FallBack
+            }
+        };
+    match fetch_verified_archive(cfg, &record.uuid).await {
+        ServiceArtifact::Ready(archive) => {
+            let (bytes, dest) = (archive.bytes, stage.to_path_buf());
+            let extracted = tokio::task::spawn_blocking(move || {
+                super::registry_fetch::extract_tgz_strict(&bytes, &dest)
+            })
+            .await
+            .map_err(|e| e.to_string())
+            .and_then(|r| r);
+            if let Err(e) = extracted {
+                return hard_fail(format!(
+                    "prebuilt tarball for {name}@{version} is unsafe: {e}"
+                ));
+            }
+            if !tree_matches_after_hashes(stage, record).await {
+                let _ = remove_tree(stage).await;
+                return fallback_or_fail(
+                    format!(
+                        "prebuilt tarball for {name}@{version} does not carry the patched files \
+                         at their recorded paths"
+                    ),
+                    "vendor_prebuilt_layout_mismatch",
+                    warnings,
+                );
+            }
+            warnings.push(VendorWarning::new(
+                "vendor_prebuilt_downloaded",
+                format!(
+                    "vendored {name}@{version} from the patch service ({})",
+                    archive.source_url
+                ),
+            ));
+            ServiceDir::Used
+        }
+        ServiceArtifact::IntegrityMismatch(reason) => hard_fail(format!(
+            "prebuilt artifact failed integrity verification ({reason}); refusing to fall back \
+             to a local build on tampered bytes"
+        )),
+        ServiceArtifact::Pending => fallback_or_fail(
+            "prebuilt artifact is still building".to_string(),
+            "vendor_prebuilt_pending",
+            warnings,
+        ),
+        ServiceArtifact::Unavailable(reason) => {
+            if cfg.source.requires_service() {
+                hard_fail(format!("prebuilt artifact unavailable: {reason}"))
+            } else {
+                ServiceDir::FallBack
+            }
+        }
+        ServiceArtifact::Failed(reason) => fallback_or_fail(
+            format!("patch service request failed ({reason})"),
+            "vendor_prebuilt_unavailable",
+            warnings,
+        ),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn dev_dependencies_are_cut_out_as_one_span() {
+        let cases = [
+            (
+                "{\n  \"name\": \"x\",\n  \"devDependencies\": {\n    \"a\": \"1\"\n  },\n  \"main\": \"i.js\"\n}\n",
+                Some("{\n  \"name\": \"x\",\n  \"main\": \"i.js\"\n}\n"),
+            ),
+            (
+                "{\n  \"name\": \"x\",\n  \"devDependencies\": {}\n}\n",
+                Some("{\n  \"name\": \"x\"\n}\n"),
+            ),
+            ("{\"devDependencies\": {\"a\": \"1\"}}", Some("{}")),
+            (
+                "\u{feff}{\"devDependencies\":{},\"main\":\"i\"}",
+                Some("\u{feff}{\"main\":\"i\"}"),
+            ),
+            (
+                "{\"name\":\"x\",\"scripts\":{\"devDependencies\":\"y\"}}",
+                None,
+            ),
+            ("{\"name\":\"x\"}", None),
+        ];
+        for (input, want) in cases {
+            assert_eq!(
+                strip_dev_dependencies(input).unwrap().as_deref(),
+                want,
+                "{input}"
+            );
+        }
+        assert_eq!(
+            strip_dev_dependencies("{\"devDependencies\":{},\"devDependencies\":{}}"),
+            Err(SpanError::Duplicate("devDependencies".into()))
+        );
+        assert_eq!(strip_dev_dependencies("[1]"), Err(SpanError::NotJson));
+    }
+
+    #[test]
+    fn dependency_tokens_are_replaced_in_place() {
+        let text = "{\n  \"dependencies\": {\n    \"a\": \"1\",\n    \"@s/b\" :  \"^2\"\n  },\n  \"x\": [\"dependencies\"]\n}\n";
+        assert_eq!(
+            dependency_token(text, "dependencies", "@s/b").unwrap(),
+            "\"^2\""
+        );
+        assert_eq!(
+            replace_dependency_token(text, "dependencies", "@s/b", "\"file:./v\"").unwrap(),
+            text.replace("\"^2\"", "\"file:./v\"")
+        );
+        assert_eq!(
+            dependency_token(text, "devDependencies", "a"),
+            Err(SpanError::Missing)
+        );
+        assert_eq!(
+            dependency_token("{\"dependencies\":{\"a\":1}}", "dependencies", "a"),
+            Err(SpanError::NotString)
+        );
+        assert_eq!(
+            dependency_token(
+                "{\"dependencies\":{\"a\":\"1\",\"a\":\"2\"}}",
+                "dependencies",
+                "a"
+            ),
+            Err(SpanError::Duplicate("dependencies.a".into()))
+        );
+    }
+
+    #[tokio::test]
+    async fn the_structure_rule_admits_exactly_the_package_dir() {
+        let tmp = tempfile::tempdir().unwrap();
+        let leaf = tmp.path().join("@s/b-1.0.0/node_modules");
+        let pkg = leaf.join("@s/b");
+        tokio::fs::create_dir_all(&pkg).await.unwrap();
+        assert!(structure_rule_holds(&pkg, "@s/b").await);
+        tokio::fs::create_dir_all(leaf.join("@s/c")).await.unwrap();
+        assert!(!structure_rule_holds(&pkg, "@s/b").await);
+
+        let pkg = tmp.path().join("a-1.0.0/node_modules/a");
+        tokio::fs::create_dir_all(&pkg).await.unwrap();
+        assert!(structure_rule_holds(&pkg, "a").await);
+        tokio::fs::write(tmp.path().join("a-1.0.0/node_modules/.x"), b"")
+            .await
+            .unwrap();
+        assert!(!structure_rule_holds(&pkg, "a").await);
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn only_links_dirs_and_bin_scripts_live_under_the_package_node_modules() {
+        let tmp = tempfile::tempdir().unwrap();
+        let pkg = tmp.path();
+        assert!(node_modules_holds_only_links(pkg).await, "absent is fine");
+        let nm = pkg.join("node_modules");
+        tokio::fs::create_dir_all(nm.join(".bin")).await.unwrap();
+        tokio::fs::create_dir_all(nm.join("@s")).await.unwrap();
+        std::os::unix::fs::symlink("/elsewhere", nm.join("dep")).unwrap();
+        std::os::unix::fs::symlink("/elsewhere", nm.join("@s/dep")).unwrap();
+        tokio::fs::write(nm.join(".bin/tool"), b"#!/bin/sh\n")
+            .await
+            .unwrap();
+        assert!(node_modules_holds_only_links(pkg).await);
+        tokio::fs::write(nm.join("@s/planted.js"), b"x")
+            .await
+            .unwrap();
+        assert!(!node_modules_holds_only_links(pkg).await);
+    }
+
+    #[tokio::test]
+    async fn uuid_metadata_is_written_with_its_exact_bytes() {
+        let tmp = tempfile::tempdir().unwrap();
+        tokio::fs::write(tmp.path().join(GITIGNORE), b"*\n")
+            .await
+            .unwrap();
+        restore_uuid_metadata(tmp.path()).await.unwrap();
+        assert_eq!(
+            std::fs::read_to_string(tmp.path().join(GITIGNORE)).unwrap(),
+            "!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n"
+        );
+        assert_eq!(
+            std::fs::read_to_string(tmp.path().join(GITATTRIBUTES)).unwrap(),
+            "* -text\n"
+        );
+    }
+
+    fn tgz(entries: &[(&str, tar::EntryType, &[u8])]) -> Vec<u8> {
+        let mut builder = tar::Builder::new(flate2::write::GzEncoder::new(
+            Vec::new(),
+            flate2::Compression::default(),
+        ));
+        for (path, kind, bytes) in entries {
+            let mut header = tar::Header::new_gnu();
+            header.set_entry_type(*kind);
+            header.set_size(bytes.len() as u64);
+            header.set_mode(0o644);
+            if !kind.is_file() && !kind.is_dir() {
+                header.set_link_name("target").unwrap();
+            }
+            header.set_cksum();
+            builder.append_data(&mut header, path, *bytes).unwrap();
+        }
+        builder.into_inner().unwrap().finish().unwrap()
+    }
+
+    #[test]
+    fn the_service_extract_strips_any_first_component_and_refuses_links() {
+        use tar::EntryType;
+        let tmp = tempfile::tempdir().unwrap();
+        let dest = tmp.path().join("stage");
+        let ok = tgz(&[
+            ("left-pad/", EntryType::Directory, b""),
+            ("left-pad/index.js", EntryType::Regular, b"x"),
+        ]);
+        super::super::registry_fetch::extract_tgz_strict(&ok, &dest).unwrap();
+        assert_eq!(std::fs::read(dest.join("index.js")).unwrap(), b"x");
+        for kind in [
+            EntryType::Symlink,
+            EntryType::Link,
+            EntryType::Char,
+            EntryType::Fifo,
+        ] {
+            let bad = tgz(&[
+                ("package/index.js", EntryType::Regular, b"x"),
+                ("package/evil", kind, b""),
+            ]);
+            let err =
+                super::super::registry_fetch::extract_tgz_strict(&bad, &tmp.path().join("s2"))
+                    .unwrap_err();
+            assert!(err.contains("not a regular file"), "{kind:?}: {err}");
+        }
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn the_gitignore_probe_ignores_tracked_state_and_names_the_rule() {
+        let Some(git) = crate::utils::process::resolve_tool("git") else {
+            return;
+        };
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let status = std::process::Command::new(&git)
+            .args(["init", "-q"])
+            .current_dir(root)
+            .status()
+            .unwrap();
+        assert!(status.success());
+        let paths = vec![".socket/vendor/npm/u/a-1.0.0/node_modules/a/dist/i.js".to_string()];
+        assert_eq!(gitignored(root, &paths).await, None);
+        std::fs::write(root.join(".gitignore"), "dist/\n").unwrap();
+        let uuid = root.join(".socket/vendor/npm/u");
+        std::fs::create_dir_all(&uuid).unwrap();
+        assert!(
+            gitignored(root, &paths).await.is_some(),
+            "a root dist/ rule"
+        );
+        restore_uuid_metadata(&uuid).await.unwrap();
+        assert_eq!(
+            gitignored(root, &paths).await,
+            None,
+            "the uuid .gitignore re-includes it"
+        );
+        std::fs::write(root.join(".gitignore"), ".socket/\n").unwrap();
+        let rules = gitignored(root, &paths).await.unwrap();
+        assert!(rules.contains(".gitignore:1:.socket/"), "{rules}");
+        assert!(gitignored(&tmp.path().join("missing"), &paths)
+            .await
+            .is_none());
+    }
+}
diff --git a/crates/socket-patch-core/src/vendor/npm_flavor.rs b/crates/socket-patch-core/src/vendor/npm_flavor.rs
index 1bb6a6b3..04ddb38d 100644
--- a/crates/socket-patch-core/src/vendor/npm_flavor.rs
+++ b/crates/socket-patch-core/src/vendor/npm_flavor.rs
@@ -11,11 +11,11 @@
 //! package dirs) because the file: rewiring is unvalidated under that
 //! linker — each with its own code and remedy.
 //!
-//! The router fans `vendor`/`revert` out per detected flavor. All five
-//! flavors have real backends: package-lock ([`super::npm_lock`]),
-//! yarn classic ([`super::yarn_classic_lock`]), yarn berry
-//! ([`super::yarn_berry_lock`]), pnpm ([`super::pnpm_lock`]), and bun
-//! ([`super::bun_lock`]); a lockfile the probe can't classify refuses with
+//! The router fans `vendor`/`revert` out per detected flavor. Every flavor
+//! has a real backend: package-lock ([`super::npm_lock`]), yarn classic
+//! ([`super::yarn_classic_lock`]), yarn berry ([`super::yarn_berry_lock`]),
+//! pnpm ([`super::pnpm_lock`]), bun ([`super::bun_lock`]) and vlt
+//! ([`super::vlt_lock`]); a lockfile the probe can't classify refuses with
 //! a stable code. Reverts fail CLOSED on a flavor this build has no
 //! backend for — never guess at another flavor's wiring records.
 
@@ -28,7 +28,7 @@ use crate::utils::fs::{read_regular_to_bytes, read_regular_to_string};
 use super::pnpm_lock_legacy::PnpmLockGrammar;
 use super::state::VendorEntry;
 use super::{
-    bun_lock, npm_lock, pnpm_lock, pnpm_lock_legacy, yarn_berry_lock, yarn_classic_lock,
+    bun_lock, npm_lock, pnpm_lock, pnpm_lock_legacy, vlt_lock, yarn_berry_lock, yarn_classic_lock,
     RevertOpts, RevertOutcome, VendorOutcome, VendorWarning,
 };
 
@@ -48,6 +48,8 @@ pub(crate) enum NpmLockFlavor {
     PnpmLegacy,
     /// `bun.lock` or native binary `bun.lockb`.
     Bun,
+    /// `vlt-lock.json`, lockfileVersion 0 or 1.
+    Vlt,
 }
 
 impl NpmLockFlavor {
@@ -60,6 +62,7 @@ impl NpmLockFlavor {
             NpmLockFlavor::Pnpm => "pnpm",
             NpmLockFlavor::PnpmLegacy => pnpm_lock_legacy::FLAVOR,
             NpmLockFlavor::Bun => "bun",
+            NpmLockFlavor::Vlt => vlt_lock::FLAVOR,
         }
     }
 
@@ -75,6 +78,7 @@ impl NpmLockFlavor {
             Some("pnpm") => Some(NpmLockFlavor::Pnpm),
             Some(pnpm_lock_legacy::FLAVOR) => Some(NpmLockFlavor::PnpmLegacy),
             Some("bun") => Some(NpmLockFlavor::Bun),
+            Some(vlt_lock::FLAVOR) => Some(NpmLockFlavor::Vlt),
             Some(_) => None,
         }
     }
@@ -82,7 +86,9 @@ impl NpmLockFlavor {
 
 /// Yarn berry Plug'n'Play loaders: packages live inside `.yarn/cache/` zips,
 /// so there is nothing on disk to stage and no lockfile entry to rewire.
-use crate::constants::npm_family::{BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, PNP_MARKERS};
+use crate::constants::npm_family::{
+    BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, PNP_MARKERS, VLT_LOCK,
+};
 
 /// How many head lines the yarn content sniff reads (the v1 header sits in
 /// the leading comment block; berry's `__metadata:` is the first top-level
@@ -92,7 +98,8 @@ const YARN_SNIFF_HEAD_LINES: usize = 30;
 /// Every lockfile name the probe knows, grouped into wiring families: the
 /// flavor that owns a family wires (or supersedes) every file in it, so only
 /// files OUTSIDE the detected family get the multiple-lockfiles warning.
-const LOCKFILE_FAMILIES: [(NpmLockFlavor, &[&str]); 4] = [
+const LOCKFILE_FAMILIES: [(NpmLockFlavor, &[&str]); 5] = [
+    (NpmLockFlavor::Vlt, &[VLT_LOCK]),
     // npm itself ignores package-lock.json when npm-shrinkwrap.json exists,
     // so the npm family never warns about its own sibling.
     (NpmLockFlavor::PackageLock, &NPM_LOCKS),
@@ -122,19 +129,23 @@ pub(super) fn project_root_location(project_root: &Path) -> String {
 ///    pnpm store + no yarn.lock, see
 ///    [`crate::crawlers::pkg_managers::pnpm_pnp_layout`]) → Err
 ///    `vendor_pnpm_pnp_unsupported` with a pnpm remedy;
-/// 2. `bun.lock` or `bun.lockb` → Bun (text takes precedence);
-/// 3. `pnpm-lock.yaml` → head-sniff `lockfileVersion`: `'9.0'` → Pnpm;
+/// 2. `vlt-lock.json` → Vlt when it is a BOM-less JSON object with
+///    `lockfileVersion` 0 or 1; any other shape → Err
+///    `vendor_lockfile_version_unsupported` (the layout is not checked here,
+///    so read-only consumers still read a pretty-printed lock);
+/// 3. `bun.lock` or `bun.lockb` → Bun (text takes precedence);
+/// 4. `pnpm-lock.yaml` → head-sniff `lockfileVersion`: `'9.0'` → Pnpm;
 ///    `5.4`/`'6.0'` (pnpm 7/8) → PnpmLegacy; anything else → Err
 ///    `vendor_lockfile_version_unsupported` (version-aware remedy);
-/// 4. `yarn.lock` → head-sniff: column-0 `__metadata:` → Err
+/// 5. `yarn.lock` → head-sniff: column-0 `__metadata:` → Err
 ///    `vendor_yarn_berry_unsupported`; `# yarn lockfile v1` → YarnClassic;
 ///    neither → Err `vendor_lockfile_version_unsupported`;
-/// 5. `npm-shrinkwrap.json` | `package-lock.json` → PackageLock;
-/// 6. nothing recognized, but `rush.json` present → Err
+/// 6. `npm-shrinkwrap.json` | `package-lock.json` → PackageLock;
+/// 7. nothing recognized, but `rush.json` present → Err
 ///    `vendor_rush_unsupported` (Rush's generated-workspace install model
 ///    can't carry vendor's relative `file:` specs — hosted mode edits the
 ///    lock in place instead);
-/// 7. nothing → Err `vendor_lockfile_missing`.
+/// 8. nothing → Err `vendor_lockfile_missing`.
 ///
 /// `Ok` carries one `vendor_multiple_lockfiles` warning per OTHER known
 /// lockfile present (outside the detected flavor's family): installs driven
@@ -182,13 +193,22 @@ pub(crate) async fn detect_npm_lock_flavor(
     }
 
     let detected = 'flavor: {
-        // 2. Bun's native backend accepts text and binary locks. Selection
+        // 2. vlt wins every other lock once PnP is ruled out.
+        if exists(VLT_LOCK).await {
+            let text = read_lock(project_root, VLT_LOCK).await?;
+            match vlt_lock::sniff_vendor_lock(&text) {
+                Ok(_) => break 'flavor NpmLockFlavor::Vlt,
+                Err(detail) => return Err(("vendor_lockfile_version_unsupported", detail)),
+            }
+        }
+
+        // 3. Bun's native backend accepts text and binary locks. Selection
         // inside the backend and inventory preserves bun.lock precedence.
         if exists(BUN_LOCK).await || exists(BUN_LOCKB).await {
             break 'flavor NpmLockFlavor::Bun;
         }
 
-        // 3. pnpm: lockfileVersion 9.0 routes to the v9 backend, the legacy
+        // 4. pnpm: lockfileVersion 9.0 routes to the v9 backend, the legacy
         //    grammars 5.4 (pnpm 7) / 6.0 (pnpm 8) to the legacy backend;
         //    anything else refuses with the sniff's version-aware remedy.
         if exists(PNPM_LOCK).await {
@@ -204,17 +224,17 @@ pub(crate) async fn detect_npm_lock_flavor(
             }
         }
 
-        // 4. yarn: classic v1 vs berry (node-modules linker), decided by content.
+        // 5. yarn: classic v1 vs berry (node-modules linker), decided by content.
         if exists("yarn.lock").await {
             break 'flavor sniff_yarn_lock(project_root).await?;
         }
 
-        // 5. npm (npm_lock itself prefers the shrinkwrap when both exist).
+        // 6. npm (npm_lock itself prefers the shrinkwrap when both exist).
         if exists(NPM_LOCKS[0]).await || exists(NPM_LOCKS[1]).await {
             break 'flavor NpmLockFlavor::PackageLock;
         }
 
-        // 6. nothing recognizable at the root. A Rush monorepo keeps its
+        // 7. nothing recognizable at the root. A Rush monorepo keeps its
         //    single source-of-truth lock under common/config/rush/ (no root
         //    package.json/lock pair), and its overrides live in
         //    common/config/rush/pnpm-config.json rather than the lockfile —
@@ -241,7 +261,7 @@ pub(crate) async fn detect_npm_lock_flavor(
             "vendor_lockfile_missing",
             format!(
                 "no package-lock.json, npm-shrinkwrap.json, yarn.lock, pnpm-lock.yaml, \
-                 bun.lock, or bun.lockb {} — vendoring rewires the lockfile, so one must \
+                 bun.lock, bun.lockb, or vlt-lock.json {} — vendoring rewires the lockfile, so one must \
                  exist (run your package manager's install first)",
                 project_root_location(project_root)
             ),
@@ -347,6 +367,12 @@ pub async fn vendor_npm_any(
         Ok(found) => found,
         Err((code, detail)) => return VendorOutcome::Refused { code, detail },
     };
+    if let Some(detail) = flavor_change_refusal(project_root, purl, flavor).await {
+        return VendorOutcome::Refused {
+            code: "vendor_flavor_changed",
+            detail,
+        };
+    }
     // Every backend takes the identical 9-argument tuple; the macro collapses
     // the five-way repetition (same shape as the CLI dispatcher's `vend!`).
     macro_rules! vend {
@@ -372,6 +398,7 @@ pub async fn vendor_npm_any(
         NpmLockFlavor::Pnpm => vend!(pnpm_lock::vendor_pnpm),
         NpmLockFlavor::PnpmLegacy => vend!(pnpm_lock_legacy::vendor_pnpm_legacy),
         NpmLockFlavor::Bun => vend!(bun_lock::vendor_bun),
+        NpmLockFlavor::Vlt => vend!(vlt_lock::vendor_vlt),
     };
     // Probe warnings (e.g. a sibling lockfile that will install UNPATCHED
     // bytes) precede the backend's own; the ledger records which flavor wired
@@ -390,6 +417,37 @@ pub async fn vendor_npm_any(
     outcome
 }
 
+/// The refusal for re-vendoring `purl` under `detected` when its ledger
+/// entry was wired by a different flavor and either side is vlt: the other
+/// backend's records name a lock this run never reads, so a revert through
+/// either flavor would leave half of the wiring behind. Unreadable ledgers
+/// are left to the caller's own persist step.
+async fn flavor_change_refusal(
+    project_root: &Path,
+    purl: &str,
+    detected: NpmLockFlavor,
+) -> Option<String> {
+    let state = super::state::load_state(project_root).await.ok()?;
+    state.entries.iter().find_map(|(key, entry)| {
+        if entry.ecosystem != "npm" || !entry.covers_purl(key, purl) {
+            return None;
+        }
+        let prior = NpmLockFlavor::from_recorded(entry.flavor.as_deref());
+        if prior == Some(detected)
+            || (prior != Some(NpmLockFlavor::Vlt) && detected != NpmLockFlavor::Vlt)
+        {
+            return None;
+        }
+        let prior = entry.flavor.as_deref().unwrap_or("package-lock");
+        Some(format!(
+            "{purl} is vendored through the `{prior}` lockfile flavor, but this project now \
+             installs through `{}`; run `socket-patch vendor --revert` for it while the lock it \
+             was vendored under still drives installs, then vendor it again",
+            detected.as_str()
+        ))
+    })
+}
+
 /// Is this npm-vendored entry still consumed by its lockfile's dependency
 /// graph?
 ///
@@ -438,6 +496,7 @@ pub async fn vendored_entry_in_use(entry: &VendorEntry, project_root: &Path) ->
                     .any(|package| package.resolution.contains(&needle)),
             )
         }
+        NpmLockFlavor::Vlt => vlt_lock::vlt_entry_in_use(entry, project_root).await,
     }
 }
 
@@ -516,6 +575,7 @@ pub async fn revert_npm_any_opts(
             pnpm_lock_legacy::revert_pnpm_legacy_opts(entry, project_root, opts).await
         }
         NpmLockFlavor::Bun => bun_lock::revert_bun_opts(entry, project_root, opts).await,
+        NpmLockFlavor::Vlt => vlt_lock::revert_vlt_opts(entry, project_root, opts).await,
     }
 }
 
@@ -556,8 +616,8 @@ mod tests {
         assert_eq!(
             detail,
             "no package-lock.json, npm-shrinkwrap.json, yarn.lock, pnpm-lock.yaml, bun.lock, \
-             or bun.lockb at /nonexistent-socket-patch-root — vendoring rewires the lockfile, \
-             so one must exist (run your package manager's install first)"
+             bun.lockb, or vlt-lock.json at /nonexistent-socket-patch-root — vendoring rewires \
+             the lockfile, so one must exist (run your package manager's install first)"
         );
     }
     use crate::manifest::schema::PatchFileInfo;
@@ -581,9 +641,17 @@ mod tests {
     #[test]
     fn flavor_strings_are_stable() {
         use NpmLockFlavor::*;
-        for flavor in [PackageLock, YarnClassic, YarnBerry, Pnpm, PnpmLegacy, Bun] {
+        for flavor in [
+            PackageLock,
+            YarnClassic,
+            YarnBerry,
+            Pnpm,
+            PnpmLegacy,
+            Bun,
+            Vlt,
+        ] {
             match flavor {
-                PackageLock | YarnClassic | YarnBerry | Pnpm | PnpmLegacy | Bun => {}
+                PackageLock | YarnClassic | YarnBerry | Pnpm | PnpmLegacy | Bun | Vlt => {}
             }
             assert_eq!(
                 NpmLockFlavor::from_recorded(Some(flavor.as_str())),
@@ -596,6 +664,7 @@ mod tests {
         assert_eq!(NpmLockFlavor::Pnpm.as_str(), "pnpm");
         assert_eq!(NpmLockFlavor::PnpmLegacy.as_str(), "pnpm-legacy");
         assert_eq!(NpmLockFlavor::Bun.as_str(), "bun");
+        assert_eq!(NpmLockFlavor::Vlt.as_str(), "vlt");
     }
 
     #[tokio::test]
@@ -853,6 +922,159 @@ mod tests {
         assert_eq!(flavor, NpmLockFlavor::PackageLock);
     }
 
+    const VLT_V1: &str = "{\n  \"lockfileVersion\": 1,\n  \"nodes\": {},\n  \"edges\": {}\n}\n";
+
+    #[tokio::test]
+    async fn vlt_lock_sniff_accepts_v0_v1_and_refuses_every_other_shape() {
+        for version in ["0", "1"] {
+            let tmp = tempfile::tempdir().unwrap();
+            touch(
+                tmp.path(),
+                "vlt-lock.json",
+                &format!("{{\"lockfileVersion\":{version},\n\"nodes\":{{\"a\": [0,\"a\"]}}}}"),
+            )
+            .await;
+            let (flavor, warnings) = detect_npm_lock_flavor(tmp.path()).await.unwrap();
+            assert_eq!(
+                flavor,
+                NpmLockFlavor::Vlt,
+                "{version}: layout is not checked here"
+            );
+            assert!(warnings.is_empty());
+        }
+        for (lock, needle) in [
+            ("{\"nodes\": {}}", "has no lockfileVersion (vlt ≤ 0.0.0-18)"),
+            (
+                "{\"lockfileVersion\": 2}",
+                "lockfileVersion 2; update socket-patch",
+            ),
+            (
+                "{\"lockfileVersion\": 1e0}",
+                "lockfileVersion 1e0; update socket-patch",
+            ),
+            (
+                "\u{feff}{\"lockfileVersion\": 1}",
+                "re-save vlt-lock.json with `vlt install`",
+            ),
+            (
+                "{\"lockfileVersion\": 1",
+                "re-save vlt-lock.json with `vlt install`",
+            ),
+            ("[1]", "re-save vlt-lock.json with `vlt install`"),
+        ] {
+            let tmp = tempfile::tempdir().unwrap();
+            touch(tmp.path(), "vlt-lock.json", lock).await;
+            touch(tmp.path(), "package-lock.json", "{}").await;
+            let (code, detail) = detect_npm_lock_flavor(tmp.path()).await.unwrap_err();
+            assert_eq!(code, "vendor_lockfile_version_unsupported", "{lock}");
+            assert!(detail.contains(needle), "{lock}: {detail}");
+        }
+    }
+
+    #[tokio::test]
+    async fn vlt_outranks_every_other_lock_after_pnp() {
+        let tmp = tempfile::tempdir().unwrap();
+        touch(tmp.path(), "vlt-lock.json", VLT_V1).await;
+        touch(tmp.path(), "bun.lock", "{}").await;
+        touch(tmp.path(), "bun.lockb", "binary").await;
+        touch(tmp.path(), "pnpm-lock.yaml", PNPM_9).await;
+        touch(tmp.path(), "yarn.lock", YARN_V1).await;
+        touch(tmp.path(), "package-lock.json", "{}").await;
+        touch(tmp.path(), "npm-shrinkwrap.json", "{}").await;
+        let (flavor, warnings) = detect_npm_lock_flavor(tmp.path()).await.unwrap();
+        assert_eq!(flavor, NpmLockFlavor::Vlt);
+        let mut named: Vec<&str> = warnings
+            .iter()
+            .map(|w| {
+                assert_eq!(w.code, "vendor_multiple_lockfiles");
+                assert!(w.detail.contains("vlt vendor backend"), "{}", w.detail);
+                w.detail.split('`').nth(1).unwrap()
+            })
+            .collect();
+        named.sort_unstable();
+        assert_eq!(
+            named,
+            [
+                "bun.lock",
+                "bun.lockb",
+                "npm-shrinkwrap.json",
+                "package-lock.json",
+                "pnpm-lock.yaml",
+                "yarn.lock"
+            ]
+        );
+
+        let tmp = tempfile::tempdir().unwrap();
+        touch(tmp.path(), ".pnp.cjs", "/* pnp */").await;
+        touch(tmp.path(), "vlt-lock.json", VLT_V1).await;
+        let (code, _) = detect_npm_lock_flavor(tmp.path()).await.unwrap_err();
+        assert_eq!(
+            code, "vendor_yarn_berry_unsupported",
+            "PnP is still refused first"
+        );
+    }
+
+    #[tokio::test]
+    async fn flavor_change_to_or_from_vlt_refuses_before_any_write() {
+        let (tmp, record) = npm_project().await;
+        let mut state = super::super::state::VendorState::new();
+        state.entries.insert(
+            "pkg:npm/left-pad@1.3.0".into(),
+            probe_entry(Some("package-lock")),
+        );
+        super::super::state::save_state(tmp.path(), &state)
+            .await
+            .unwrap();
+        touch(tmp.path(), "vlt-lock.json", VLT_V1).await;
+        let lock_before = tokio::fs::read(tmp.path().join("vlt-lock.json"))
+            .await
+            .unwrap();
+        let VendorOutcome::Refused { code, detail } = vendor_any(tmp.path(), &record).await else {
+            panic!("expected the flavor guard");
+        };
+        assert_eq!(code, "vendor_flavor_changed");
+        assert!(
+            detail.contains("`package-lock`") && detail.contains("`vlt`"),
+            "{detail}"
+        );
+        assert_eq!(
+            tokio::fs::read(tmp.path().join("vlt-lock.json"))
+                .await
+                .unwrap(),
+            lock_before
+        );
+        assert!(!tmp
+            .path()
+            .join(format!(".socket/vendor/npm/{UUID}"))
+            .exists());
+
+        // vlt → package-lock refuses the same way.
+        tokio::fs::remove_file(tmp.path().join("vlt-lock.json"))
+            .await
+            .unwrap();
+        state
+            .entries
+            .insert("pkg:npm/left-pad@1.3.0".into(), probe_entry(Some("vlt")));
+        super::super::state::save_state(tmp.path(), &state)
+            .await
+            .unwrap();
+        let VendorOutcome::Refused { code, .. } = vendor_any(tmp.path(), &record).await else {
+            panic!("expected the flavor guard");
+        };
+        assert_eq!(code, "vendor_flavor_changed");
+
+        // Switches between the other flavors are not this guard's to judge.
+        state.entries.insert(
+            "pkg:npm/left-pad@1.3.0".into(),
+            probe_entry(Some("yarn-classic")),
+        );
+        super::super::state::save_state(tmp.path(), &state)
+            .await
+            .unwrap();
+        let outcome = vendor_any(tmp.path(), &record).await;
+        assert!(matches!(outcome, VendorOutcome::Done { .. }), "{outcome:?}");
+    }
+
     #[tokio::test]
     async fn precedence_and_multiple_lockfile_warnings() {
         // bun.lock beats pnpm beats yarn beats package-lock; every unwired
@@ -1084,7 +1306,7 @@ mod tests {
         assert!(outcome.error.as_deref().unwrap().contains("future-pm"));
 
         assert!(!npm_flavor_is_known(Some("future-pm")));
-        assert!(!npm_flavor_is_known(Some("vlt")));
+        assert!(npm_flavor_is_known(Some("vlt")));
 
         // Every known flavor routes to its backend; with no wiring records and
         // nothing on disk each reverts trivially (None = a pre-flavor ledger).
@@ -1096,6 +1318,7 @@ mod tests {
             Some("pnpm".to_string()),
             Some("pnpm-legacy".to_string()),
             Some("bun".to_string()),
+            Some("vlt".to_string()),
         ] {
             assert!(npm_flavor_is_known(flavor.as_deref()), "{flavor:?}");
             entry.flavor = flavor.clone();
@@ -1184,6 +1407,35 @@ mod tests {
         // Unknown flavor: undeterminable, fail-safe keep.
         let entry = probe_entry(Some("future-pm"));
         assert_eq!(vendored_entry_in_use(&entry, tmp.path()).await, None);
+
+        // vlt is structural: only a `file` node under the uuid dir counts,
+        // never a mention in an edge spec or another node's slot.
+        let entry = probe_entry(Some("vlt"));
+        let tmp = tempfile::tempdir().unwrap();
+        assert_eq!(vendored_entry_in_use(&entry, tmp.path()).await, None);
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let file_id =
+            format!("file~.socket+vendor+npm+{UUID}+left-pad-1.3.0+node__modules+left-pad");
+        touch(
+            tmp.path(),
+            "vlt-lock.json",
+            &format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n    \"{file_id}\": [0,\"left-pad\",null,\"{rel}\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+            ),
+        )
+        .await;
+        assert_eq!(vendored_entry_in_use(&entry, tmp.path()).await, Some(true));
+        touch(
+            tmp.path(),
+            "vlt-lock.json",
+            &format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n    \"~npm~x@1.0.0\": [0,\"x\",null,\"{rel}\"]\n  }},\n  \"edges\": {{\n    \"file~_d x\": \"prod file:./{rel} ~npm~x@1.0.0\"\n  }}\n}}\n"
+            ),
+        )
+        .await;
+        assert_eq!(vendored_entry_in_use(&entry, tmp.path()).await, Some(false));
+        touch(tmp.path(), "vlt-lock.json", "\u{feff}{}").await;
+        assert_eq!(vendored_entry_in_use(&entry, tmp.path()).await, None);
     }
 
     #[tokio::test]
@@ -1337,12 +1589,15 @@ mod tests {
         mkfifo(&pnpm_dir.path().join("pnpm-lock.yaml"));
         let yarn_dir = tempfile::tempdir().unwrap();
         mkfifo(&yarn_dir.path().join("yarn.lock"));
+        let vlt_dir = tempfile::tempdir().unwrap();
+        mkfifo(&vlt_dir.path().join("vlt-lock.json"));
         let in_use_dir = tempfile::tempdir().unwrap();
-        const IN_USE_LOCKS: [&str; 4] = [
+        const IN_USE_LOCKS: [&str; 5] = [
             "npm-shrinkwrap.json",
             "package-lock.json",
             "yarn.lock",
             "bun.lock",
+            "vlt-lock.json",
         ];
         for name in IN_USE_LOCKS {
             mkfifo(&in_use_dir.path().join(name));
@@ -1353,12 +1608,14 @@ mod tests {
             (
                 detect_npm_lock_flavor(pnpm_dir.path()).await,
                 detect_npm_lock_flavor(yarn_dir.path()).await,
+                detect_npm_lock_flavor(vlt_dir.path()).await,
                 vendored_entry_in_use(&probe_entry(Some("package-lock")), in_use_dir.path()).await,
                 vendored_entry_in_use(&probe_entry(Some("yarn-classic")), in_use_dir.path()).await,
                 vendored_entry_in_use(&probe_entry(Some("bun")), in_use_dir.path()).await,
+                vendored_entry_in_use(&probe_entry(Some("vlt")), in_use_dir.path()).await,
             )
         };
-        let Ok((pnpm, yarn, npm_use, yarn_use, bun_use)) =
+        let Ok((pnpm, yarn, vlt, npm_use, yarn_use, bun_use, vlt_use)) =
             tokio::time::timeout(deadline, all).await
         else {
             // On timeout the open is wedged in a `spawn_blocking` thread the
@@ -1368,6 +1625,7 @@ mod tests {
             let stuck = [
                 pnpm_dir.path().join("pnpm-lock.yaml"),
                 yarn_dir.path().join("yarn.lock"),
+                vlt_dir.path().join("vlt-lock.json"),
             ];
             for path in stuck
                 .iter()
@@ -1395,5 +1653,9 @@ mod tests {
         assert_eq!(npm_use, None);
         assert_eq!(yarn_use, None);
         assert_eq!(bun_use, None);
+        let (code, detail) = vlt.unwrap_err();
+        assert_eq!(code, "vendor_lockfile_missing", "{detail}");
+        assert!(detail.contains("vlt-lock.json"), "{detail}");
+        assert_eq!(vlt_use, None);
     }
 }
diff --git a/crates/socket-patch-core/src/vendor/npm_lock.rs b/crates/socket-patch-core/src/vendor/npm_lock.rs
index 2541d5db..7ad1f30b 100644
--- a/crates/socket-patch-core/src/vendor/npm_lock.rs
+++ b/crates/socket-patch-core/src/vendor/npm_lock.rs
@@ -426,7 +426,9 @@ pub async fn vendor_npm(
 /// FAIL-CLOSED revert guard for a ledger entry with NO wiring records,
 /// shared by the four TEXTUAL npm-family backends (npm / yarn classic /
 /// yarn berry / bun) — the flavor-parameterized sibling of
-/// [`super::pnpm_lock::guard_unwired_revert`].
+/// [`super::pnpm_lock::guard_unwired_revert`]. vlt has its own structural
+/// guard in [`super::vlt_lock`]: its lock names the artifact in DepID keys
+/// and slot [3], so the textual probe is not exact there.
 ///
 /// Such entries come out of `repair`'s no-ledger reconstruction (the
 /// npm-family pre-vendor lock fragments are not offline-recoverable, so the
diff --git a/crates/socket-patch-core/src/vendor/path.rs b/crates/socket-patch-core/src/vendor/path.rs
index b7b8a278..0b946b17 100644
--- a/crates/socket-patch-core/src/vendor/path.rs
+++ b/crates/socket-patch-core/src/vendor/path.rs
@@ -20,7 +20,7 @@
 //!
 //! | eco      | leaf                                   |
 //! |----------|----------------------------------------|
-//! | npm      | `[@scope/]<name>-<version>.tgz`        |
+//! | npm      | `[@scope/]<name>-<version>.tgz`; vlt: `[@scope/]<bare>-<version>/node_modules/<name>/` |
 //! | cargo    | `<name>-<version>/`                    |
 //! | golang   | `<module>@<version>/` (nested dirs)    |
 //! | composer | `<vendor>/<name>@<version>/`           |
@@ -230,11 +230,16 @@ fn split_nuget_leaf(stem: &str) -> Option<(&str, &str)> {
 /// the latter for lockfile-discovered references.
 pub(crate) fn leaf_to_purl(eco: &str, leaf: &str) -> Option<String> {
     match eco {
-        "npm" => {
-            let stem = leaf.strip_suffix(".tgz")?;
-            let (name, version) = split_name_version(stem)?;
-            Some(format!("pkg:npm/{name}@{version}"))
-        }
+        "npm" => match leaf.strip_suffix(".tgz") {
+            Some(stem) => {
+                let (name, version) = split_name_version(stem)?;
+                Some(format!("pkg:npm/{name}@{version}"))
+            }
+            None => {
+                let (name, version) = super::vlt_lock_text::parse_vendored_dir_leaf(leaf)?;
+                Some(format!("pkg:npm/{name}@{version}"))
+            }
+        },
         "cargo" => {
             let (name, version) = split_name_version(leaf)?;
             Some(format!("pkg:cargo/{name}@{version}"))
@@ -406,6 +411,55 @@ mod tests {
 
     const UUID: &str = "9f6b2c4e-1d3a-4f6b-8c2d-7e5a9b1c3d5f";
 
+    #[test]
+    fn vlt_dir_leaves_name_their_package() {
+        for (leaf, want) in [
+            (
+                "left-pad-1.3.0/node_modules/left-pad",
+                Some("pkg:npm/left-pad@1.3.0"),
+            ),
+            (
+                "@s/b-2.0.0-rc.1/node_modules/@s/b",
+                Some("pkg:npm/@s/b@2.0.0-rc.1"),
+            ),
+            (
+                "base-64-1.0.0/node_modules/base-64",
+                Some("pkg:npm/base-64@1.0.0"),
+            ),
+            (
+                "a-1.0.0-1.0.0/node_modules/a-1.0.0",
+                Some("pkg:npm/a-1.0.0@1.0.0"),
+            ),
+            ("@s/b-1.0.0/node_modules/@t/b", None),
+            ("left-pad-1.3.0/node_modules/right-pad", None),
+            ("left-pad-1.3/node_modules/left-pad", None),
+            ("left-pad-1.3.0", None),
+        ] {
+            assert_eq!(leaf_to_purl("npm", leaf).as_deref(), want, "{leaf}");
+        }
+    }
+
+    #[tokio::test]
+    async fn the_sweep_recognizes_a_vlt_dir_and_never_descends_into_it() {
+        let tmp = tempfile::tempdir().unwrap();
+        let pkg = tmp.path().join(format!(
+            ".socket/vendor/npm/{UUID}/@s/b-1.0.0/node_modules/@s/b"
+        ));
+        tokio::fs::create_dir_all(pkg.join("node_modules/dep-9.9.9/node_modules/dep"))
+            .await
+            .unwrap();
+        tokio::fs::write(
+            tmp.path()
+                .join(format!(".socket/vendor/npm/{UUID}/.gitignore")),
+            "",
+        )
+        .await
+        .unwrap();
+        let swept = sweep_vendor_dirs(tmp.path()).await;
+        assert_eq!(swept.len(), 1);
+        assert_eq!(swept[0].purls, ["pkg:npm/@s/b@1.0.0"]);
+    }
+
     #[test]
     fn uuid_dir_is_validated() {
         assert_eq!(
diff --git a/crates/socket-patch-core/src/vendor/registry_fetch.rs b/crates/socket-patch-core/src/vendor/registry_fetch.rs
index fa2cafed..bd53dea5 100644
--- a/crates/socket-patch-core/src/vendor/registry_fetch.rs
+++ b/crates/socket-patch-core/src/vendor/registry_fetch.rs
@@ -326,7 +326,10 @@ async fn resolve_pypi_url_by_hash(
         entry.version
     );
     let resp = client.get(&api).send().await.map_err(|e| {
-        FetchError::Failed(format!("PyPI JSON API request for {} failed: {e}", entry.purl))
+        FetchError::Failed(format!(
+            "PyPI JSON API request for {} failed: {e}",
+            entry.purl
+        ))
     })?;
     if !resp.status().is_success() {
         return Err(FetchError::Failed(format!(
@@ -336,7 +339,10 @@ async fn resolve_pypi_url_by_hash(
         )));
     }
     let body: serde_json::Value = resp.json().await.map_err(|e| {
-        FetchError::Failed(format!("PyPI JSON API response for {} is not JSON: {e}", entry.purl))
+        FetchError::Failed(format!(
+            "PyPI JSON API response for {} is not JSON: {e}",
+            entry.purl
+        ))
     })?;
     let digest_matches = |file: &serde_json::Value| {
         file.get("digests")
@@ -899,6 +905,53 @@ pub async fn stage_local_artifact(
     })
 }
 
+/// Stage a package from a committed vlt directory artifact (the
+/// fresh-clone re-vendor path): an inventory-verified copy of `dir` without
+/// its `node_modules/`. Refused when the ledger records no inventory, and
+/// on any missing, extra or modified file.
+pub async fn stage_local_dir_artifact(
+    dir: &Path,
+    inventory: Option<&std::collections::BTreeMap<String, String>>,
+) -> Result<FetchedPackage, FetchError> {
+    let Some(inventory) = inventory else {
+        return Err(FetchError::Unverifiable(
+            "the vendor ledger records no file inventory for the artifact".to_string(),
+        ));
+    };
+    let actual = super::verify::compute_package_dir_inventory(dir)
+        .await
+        .map_err(|e| FetchError::Failed(format!("{}: {e}", dir.display())))?;
+    if &actual != inventory {
+        return Err(FetchError::Failed(format!(
+            "{}: the committed dir does not match the vendor ledger's file inventory",
+            dir.display()
+        )));
+    }
+    let tmp = tempfile::tempdir()
+        .map_err(|e| FetchError::Failed(format!("cannot create staging tempdir: {e}")))?;
+    let staged = tmp.path().join("package");
+    crate::patch::copy_tree::fresh_copy(dir, &staged, None)
+        .await
+        .map_err(|e| FetchError::Failed(format!("cannot stage {}: {e}", dir.display())))?;
+    crate::patch::copy_tree::remove_tree(&staged.join("node_modules"))
+        .await
+        .map_err(|e| FetchError::Failed(format!("cannot stage {}: {e}", dir.display())))?;
+    let copied = super::verify::compute_package_dir_inventory(&staged)
+        .await
+        .map_err(|e| FetchError::Failed(format!("{}: {e}", dir.display())))?;
+    if &copied != inventory {
+        return Err(FetchError::Failed(format!(
+            "{}: the staged copy does not match the vendor ledger's file inventory",
+            dir.display()
+        )));
+    }
+    Ok(FetchedPackage {
+        dir: staged,
+        url: format!("file:{}", dir.display()),
+        _tmp: tmp,
+    })
+}
+
 /// Capped download. http(s) only; the cap is enforced on the declared
 /// Content-Length AND the actual stream (a lying server cannot blow past
 /// it).
@@ -1134,13 +1187,20 @@ fn strip_first_component(path: &Path) -> Option<PathBuf> {
 /// `.crate` (tar.gz, single top-level `{name}-{version}/` prefix) into the
 /// vendor copy dir — the same content the local `fresh_copy` produces.
 pub(crate) fn extract_tgz(bytes: &[u8], dest: &Path) -> Result<(), String> {
-    extract_tar_gz(bytes, dest, /*strip_first=*/ true)
+    extract_tar_gz(bytes, dest, /*strip_first=*/ true, false)
+}
+
+/// [`extract_tgz`] that refuses the archive instead of skipping a symlink,
+/// hardlink, device or FIFO entry (a directory artifact is committed as
+/// extracted, so nothing the archive carries may be silently dropped).
+pub(crate) fn extract_tgz_strict(bytes: &[u8], dest: &Path) -> Result<(), String> {
+    extract_tar_gz(bytes, dest, /*strip_first=*/ true, true)
 }
 
 /// Like [`extract_tgz`] but keeps entry paths verbatim (gem `data.tar.gz`
 /// archives carry package content at the root, no prefix dir).
 fn extract_tgz_no_strip(bytes: &[u8], dest: &Path) -> Result<(), String> {
-    extract_tar_gz(bytes, dest, /*strip_first=*/ false)
+    extract_tar_gz(bytes, dest, /*strip_first=*/ false, false)
 }
 
 /// Extract a `.gem`'s package content into `dest`. A `.gem` is a plain
@@ -1179,7 +1239,12 @@ pub(crate) fn extract_gem_data(gem_bytes: &[u8], dest: &Path) -> Result<(), Stri
     Err("the .gem carries no data.tar.gz".to_string())
 }
 
-fn extract_tar_gz(bytes: &[u8], dest: &Path, strip_first: bool) -> Result<(), String> {
+fn extract_tar_gz(
+    bytes: &[u8],
+    dest: &Path,
+    strip_first: bool,
+    strict: bool,
+) -> Result<(), String> {
     use std::io::Read as _;
     let gz = flate2::read::GzDecoder::new(bytes).take(MAX_TOTAL_DECOMPRESSED_BYTES);
     let mut archive = tar::Archive::new(gz);
@@ -1195,7 +1260,21 @@ fn extract_tar_gz(bytes: &[u8], dest: &Path, strip_first: bool) -> Result<(), St
         }
         // Regular files only: symlinks/hardlinks/devices never extract
         // (a symlink could redirect later entries out of the stage).
-        if !entry.header().entry_type().is_file() {
+        let kind = entry.header().entry_type();
+        if !kind.is_file() {
+            if strict
+                && !(kind.is_dir()
+                    || kind.is_pax_global_extensions()
+                    || kind.is_pax_local_extensions())
+            {
+                return Err(format!(
+                    "tarball entry `{}` is not a regular file or directory — refusing the artifact",
+                    entry
+                        .path()
+                        .map(|p| p.display().to_string())
+                        .unwrap_or_default()
+                ));
+            }
             continue;
         }
         let raw = entry
@@ -1934,7 +2013,6 @@ mod tests {
             .dir()
             .join("requests-2.28.0.dist-info/RECORD")
             .is_file());
-
     }
 
     /// poetry.lock records wheel hashes but no URLs: the fetcher resolves the
@@ -1944,7 +2022,10 @@ mod tests {
     async fn pypi_hash_only_entry_is_resolved_through_the_json_api() {
         let wheel = make_zip(&[
             ("requests/__init__.py", b"__version__ = '2.28.0'\n"),
-            ("requests-2.28.0.dist-info/RECORD", b"requests/__init__.py,sha256=abc,24\n"),
+            (
+                "requests-2.28.0.dist-info/RECORD",
+                b"requests/__init__.py,sha256=abc,24\n",
+            ),
         ]);
         let sha = hex::encode(Sha256::digest(&wheel));
         let mock = MockServer::start().await;
@@ -2014,7 +2095,10 @@ mod tests {
     async fn pypi_digest_set_entry_picks_the_pure_wheel_by_hash() {
         let wheel = make_zip(&[
             ("requests/__init__.py", b"__version__ = '2.28.0'\n"),
-            ("requests-2.28.0.dist-info/RECORD", b"requests/__init__.py,sha256=abc,24\n"),
+            (
+                "requests-2.28.0.dist-info/RECORD",
+                b"requests/__init__.py,sha256=abc,24\n",
+            ),
         ]);
         let wheel_sha = hex::encode(Sha256::digest(&wheel));
         let sdist_sha = "0".repeat(64);
@@ -2079,11 +2163,21 @@ mod tests {
         restore();
         let fetched = fetched.unwrap();
         assert!(fetched.dir().join("requests/__init__.py").is_file());
-        assert!(fetched.url.ends_with("requests-2.28.0-py3-none-any.whl"), "{}", fetched.url);
-        for (label, result) in [("no pure wheel", no_pure_result), ("unknown", unknown_result)] {
+        assert!(
+            fetched.url.ends_with("requests-2.28.0-py3-none-any.whl"),
+            "{}",
+            fetched.url
+        );
+        for (label, result) in [
+            ("no pure wheel", no_pure_result),
+            ("unknown", unknown_result),
+        ] {
             match result {
                 Err(FetchError::Unverifiable(msg)) => {
-                    assert!(msg.contains("none-any.whl") && msg.contains("digests"), "{label}: {msg}")
+                    assert!(
+                        msg.contains("none-any.whl") && msg.contains("digests"),
+                        "{label}: {msg}"
+                    )
                 }
                 other => panic!("{label}: expected Unverifiable, got {other:?}"),
             }
@@ -2791,7 +2885,10 @@ mod tests {
         let tmp = tempfile::tempdir().unwrap();
         extract_zip(&bytes, tmp.path(), /*strip_first=*/ false).unwrap();
         assert!(tmp.path().join("m@v1/go.mod").is_file());
-        assert!(!tmp.path().join("m@v1/d").exists(), "dir entry must not materialize");
+        assert!(
+            !tmp.path().join("m@v1/d").exists(),
+            "dir entry must not materialize"
+        );
 
         // The dirhash covers FILES only — the dir entry must not add a line.
         assert_eq!(
@@ -3011,8 +3108,11 @@ mod tests {
         let zip_bytes = make_module_zip("m@v1/", &[("go.mod", b"module m\n")]);
         let h1 = go_h1_of_zip(&zip_bytes).unwrap();
         verify_go_h1(&zip_bytes, &h1).expect("a matching dirhash must verify");
-        let err = verify_go_h1(&zip_bytes, "h1:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=")
-            .unwrap_err();
+        let err = verify_go_h1(
+            &zip_bytes,
+            "h1:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+        )
+        .unwrap_err();
         assert!(err.contains("mismatch"), "{err}");
     }
 
@@ -3044,9 +3144,8 @@ mod tests {
 
         // GoH1 has a dedicated fetch-path verifier; None is reachable from a
         // repair against an npm-era lock recording no integrity. Both refuse.
-        let err =
-            artifact_matches_integrity(b"x", "pkg", &LockIntegrity::GoH1("h1:x".into()))
-                .unwrap_err();
+        let err = artifact_matches_integrity(b"x", "pkg", &LockIntegrity::GoH1("h1:x".into()))
+            .unwrap_err();
         assert!(err.contains("dedicated ecosystem fetcher"), "{err}");
         let err = artifact_matches_integrity(b"x", "pkg", &LockIntegrity::None).unwrap_err();
         assert!(err.contains("no integrity recorded"), "{err}");
diff --git a/crates/socket-patch-core/src/vendor/reuse.rs b/crates/socket-patch-core/src/vendor/reuse.rs
index 79a9eeb5..fd8b19fa 100644
--- a/crates/socket-patch-core/src/vendor/reuse.rs
+++ b/crates/socket-patch-core/src/vendor/reuse.rs
@@ -268,6 +268,58 @@ pub(crate) async fn reusable_committed_artifact(
     verify_committed_artifact(project_root, &entry, record).await
 }
 
+/// DESIGN §4.3 step 2: the committed vlt package dir at `rel_dir`, when
+/// the ledger records it for `record.uuid` with an inventory and the tree
+/// still verifies (no link on the path, the structure rule, only links and
+/// `.bin/` scripts under its `node_modules/`, every member and the whole
+/// inventory). Returns the recorded inventory. Read-only.
+pub(crate) async fn reusable_committed_dir(
+    project_root: &Path,
+    record: &PatchRecord,
+    rel_dir: &str,
+) -> Result<std::collections::BTreeMap<String, String>, ReuseMiss> {
+    if record.files.is_empty() {
+        return Err(ReuseMiss::NoFiles);
+    }
+    let state = load_state(project_root)
+        .await
+        .map_err(|_| ReuseMiss::NoLedger)?;
+    let mut hits: Vec<VendorEntry> = state
+        .entries
+        .into_values()
+        .filter(|e| {
+            e.ecosystem == "npm"
+                && e.uuid == record.uuid
+                && e.flavor.as_deref() == Some(super::vlt_lock::FLAVOR)
+                && norm(&e.artifact.path) == rel_dir
+                && e.artifact.file_inventory.is_some()
+        })
+        .collect();
+    let Some(entry) = hits.pop() else {
+        return Err(ReuseMiss::NoEntry);
+    };
+    if hits
+        .iter()
+        .any(|e| e.artifact.file_inventory != entry.artifact.file_inventory)
+    {
+        return Err(ReuseMiss::Ambiguous);
+    }
+    let mut prefix = project_root.to_path_buf();
+    for seg in rel_dir.split('/') {
+        prefix.push(seg);
+        match tokio::fs::symlink_metadata(&prefix).await {
+            Ok(meta) if meta.file_type().is_symlink() => return Err(ReuseMiss::NotRegular),
+            Ok(_) => {}
+            Err(e) if e.kind() == std::io::ErrorKind::NotFound => return Err(ReuseMiss::Missing),
+            Err(_) => return Err(ReuseMiss::Unreadable),
+        }
+    }
+    super::verify::verify_vendored_patch_record(project_root, &entry, record)
+        .await
+        .map_err(ReuseMiss::MemberMismatch)?;
+    Ok(entry.artifact.file_inventory.unwrap_or_default())
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
diff --git a/crates/socket-patch-core/src/vendor/state.rs b/crates/socket-patch-core/src/vendor/state.rs
index 6dd6f56c..489fe85e 100644
--- a/crates/socket-patch-core/src/vendor/state.rs
+++ b/crates/socket-patch-core/src/vendor/state.rs
@@ -228,8 +228,10 @@ pub struct VendorEntry {
     #[serde(default, skip_serializing_if = "std::ops::Not::not")]
     pub took_over_go_patches: bool,
     /// Which wiring flavor was used, for the multi-flavor ecosystems —
-    /// npm: `package-lock` | `yarn-classic` | `yarn-berry` | `pnpm` | `bun`
-    /// (absent on pre-flavor entries ⇒ `package-lock`); pypi: `uv` | `requirements` |
+    /// npm: `package-lock` | `yarn-classic` | `yarn-berry` | `pnpm` |
+    /// `pnpm-legacy` | `bun` | `vlt` (absent on pre-flavor entries ⇒
+    /// `package-lock`; a `vlt` artifact is a package directory, whose
+    /// `fileInventory` excludes its `node_modules/`); pypi: `uv` | `requirements` |
     /// `poetry` | `pdm` | `pipenv`. Reverts route on this and fail closed
     /// on flavors this build has no backend for.
     #[serde(default, skip_serializing_if = "Option::is_none")]
diff --git a/crates/socket-patch-core/src/vendor/verify.rs b/crates/socket-patch-core/src/vendor/verify.rs
index 2b034320..159328ab 100644
--- a/crates/socket-patch-core/src/vendor/verify.rs
+++ b/crates/socket-patch-core/src/vendor/verify.rs
@@ -92,6 +92,9 @@ pub async fn verify_vendored_patch_record(
     // `.nupkg` (a plain OPC zip) / `.jar` (a plain zip) via the bounded zip
     // reader — their member paths are package-relative, exactly the manifest
     // key space. Everything else is a dir-shaped copy hashed in place.
+    if is_vlt_dir_entry(entry) {
+        return verify_vlt_dir(project_root, &artifact, entry, record).await;
+    }
     let path_str = artifact.to_string_lossy();
     let is_tarball = path_str.ends_with(".tgz") || path_str.ends_with(".tar.gz");
     let is_zip =
@@ -163,6 +166,112 @@ async fn verify_dir_members(
     Ok(())
 }
 
+/// A vlt package-dir entry (DESIGN §4.2): npm, flavor `vlt`, not a tarball.
+pub(crate) fn is_vlt_dir_entry(entry: &VendorEntry) -> bool {
+    entry.ecosystem == "npm"
+        && entry.flavor.as_deref() == Some(super::vlt_lock::FLAVOR)
+        && !artifact_is_file_shaped(&entry.artifact.path)
+}
+
+/// The largest afterHash blob the vlt manifest exemption reads.
+const MAX_MANIFEST_BLOB_BYTES: u64 = 16 * 1024 * 1024;
+
+/// A vlt package dir: the §4.2 structure rule, only links and `.bin/`
+/// scripts under its `node_modules/`, every record member at its afterHash
+/// with the vlt manifest exemption for `package.json` (§4.4), and the
+/// inventory of everything but `node_modules/`.
+async fn verify_vlt_dir(
+    project_root: &Path,
+    dir: &Path,
+    entry: &VendorEntry,
+    record: &PatchRecord,
+) -> Result<(), String> {
+    let Some((name, _)) = parse_vendor_path(&entry.artifact.path)
+        .and_then(|p| super::vlt_lock_text::parse_vendored_dir_leaf(&p.leaf))
+    else {
+        return Err("vendor_path_unsafe".to_string());
+    };
+    if !super::npm_dir::structure_rule_holds(dir, &name).await
+        || !super::npm_dir::node_modules_holds_only_links(dir).await
+    {
+        return Err("vendor_inventory_mismatch".to_string());
+    }
+    let inventory = entry.artifact.file_inventory.as_ref();
+    for (file_name, info) in &record.files {
+        if normalize_file_path(file_name) == "package.json" {
+            if let Some(pin) = inventory.and_then(|inv| inv.get("package.json")) {
+                if vlt_manifest_matches(project_root, dir, pin, &info.after_hash).await {
+                    continue;
+                }
+                return Err("vendor_hash_mismatch".to_string());
+            }
+        }
+        match verify_file_patch(dir, file_name, info).await.status {
+            VerifyStatus::AlreadyPatched => {}
+            VerifyStatus::Ready | VerifyStatus::HashMismatch => {
+                return Err("vendor_hash_mismatch".to_string())
+            }
+            VerifyStatus::NotFound => return Err("file_not_found".to_string()),
+        }
+    }
+    if let Some(inventory) = inventory {
+        let actual = compute_package_dir_inventory(dir)
+            .await
+            .map_err(|_| "vendor_artifact_unreadable".to_string())?;
+        let same = actual.len() == inventory.len()
+            && inventory
+                .iter()
+                .all(|(rel, sha)| actual.get(rel).is_some_and(|a| a.eq_ignore_ascii_case(sha)));
+        if !same {
+            return Err("vendor_inventory_mismatch".to_string());
+        }
+    }
+    Ok(())
+}
+
+/// The vlt manifest exemption (DESIGN §4.4): the committed `package.json`
+/// is post-transform, so it verifies iff it hashes to the inventory pin and,
+/// when the afterHash blob is in the local blob store, the blob with its
+/// devDependencies stripped hashes to that pin too.
+async fn vlt_manifest_matches(
+    project_root: &Path,
+    dir: &Path,
+    pin: &str,
+    after_hash: &str,
+) -> bool {
+    use sha2::{Digest, Sha256};
+    let Ok(on_disk) = crate::utils::fs::read_regular_to_bytes(&dir.join("package.json")).await
+    else {
+        return false;
+    };
+    if !hex::encode(Sha256::digest(&on_disk)).eq_ignore_ascii_case(pin) {
+        return false;
+    }
+    let blob_path = project_root.join(".socket/blobs").join(after_hash);
+    let blob = match tokio::fs::metadata(&blob_path).await {
+        Ok(meta) if meta.is_file() && meta.len() <= MAX_MANIFEST_BLOB_BYTES => {
+            crate::utils::fs::read_regular_to_bytes(&blob_path)
+                .await
+                .ok()
+        }
+        _ => None,
+    };
+    let Some(blob) =
+        blob.filter(|b| compute_git_sha256_from_bytes(b).eq_ignore_ascii_case(after_hash))
+    else {
+        return true;
+    };
+    let Ok(text) = String::from_utf8(blob) else {
+        return false;
+    };
+    let stripped = match super::npm_dir::strip_dev_dependencies(&text) {
+        Ok(Some(stripped)) => stripped,
+        Ok(None) => text,
+        Err(_) => return false,
+    };
+    hex::encode(Sha256::digest(stripped.as_bytes())).eq_ignore_ascii_case(pin)
+}
+
 /// Does the cargo copy's `Cargo.toml`, Socket tag dropped, hash to
 /// `after_hash` — with the tag being exactly `uuid`'s? A manifest tagged for
 /// another patch (a hand edit, a merged vendored tree, a half-applied uuid
@@ -308,6 +417,21 @@ pub fn artifact_is_file_shaped(path: &str) -> bool {
 /// could escape the artifact dir or wedge the audit), a non-UTF-8 name, an
 /// unreadable file, or a tree past the entry cap.
 pub async fn compute_dir_inventory(dir: &Path) -> Result<BTreeMap<String, String>, String> {
+    inventory_walk(dir, false).await
+}
+
+/// [`compute_dir_inventory`] of a vlt package dir, leaving out its top-level
+/// `node_modules/` (vlt's links, never part of the artifact).
+pub(crate) async fn compute_package_dir_inventory(
+    dir: &Path,
+) -> Result<BTreeMap<String, String>, String> {
+    inventory_walk(dir, true).await
+}
+
+async fn inventory_walk(
+    dir: &Path,
+    skip_node_modules: bool,
+) -> Result<BTreeMap<String, String>, String> {
     let root = dir.to_path_buf();
     tokio::task::spawn_blocking(move || {
         use sha2::{Digest, Sha256};
@@ -324,6 +448,9 @@ pub async fn compute_dir_inventory(dir: &Path) -> Result<BTreeMap<String, String
                     .to_str()
                     .ok_or_else(|| format!("non-UTF-8 file name under `{rel}`"))?
                     .to_string();
+                if skip_node_modules && rel.is_empty() && name == "node_modules" {
+                    continue;
+                }
                 let child_rel = if rel.is_empty() {
                     name
                 } else {
@@ -1441,6 +1568,121 @@ mod tests {
         );
     }
 
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn vlt_dirs_verify_with_links_and_refuse_planted_or_extra_entries() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let dir = root.join(&rel);
+        tokio::fs::create_dir_all(dir.join("node_modules/.bin"))
+            .await
+            .unwrap();
+        tokio::fs::write(dir.join("index.js"), PATCHED)
+            .await
+            .unwrap();
+        std::os::unix::fs::symlink("../../../dep", dir.join("node_modules/dep")).unwrap();
+        tokio::fs::write(dir.join("node_modules/.bin/dep"), b"#!/bin/sh\n")
+            .await
+            .unwrap();
+        let rec = record(UUID, "package/index.js");
+        let mut ent = entry("npm", UUID, &rel);
+        ent.flavor = Some("vlt".into());
+        ent.artifact.file_inventory = Some(compute_package_dir_inventory(&dir).await.unwrap());
+        assert_eq!(
+            ent.artifact
+                .file_inventory
+                .as_ref()
+                .unwrap()
+                .keys()
+                .collect::<Vec<_>>(),
+            ["index.js"]
+        );
+        assert_eq!(
+            check_vendored_artifact(root, &ent, &rec).await,
+            ArtifactHealth::Healthy
+        );
+
+        tokio::fs::write(dir.join("node_modules/planted.js"), b"x")
+            .await
+            .unwrap();
+        assert_eq!(
+            verify_vendored_patch_record(root, &ent, &rec).await,
+            Err("vendor_inventory_mismatch".to_string())
+        );
+        tokio::fs::remove_file(dir.join("node_modules/planted.js"))
+            .await
+            .unwrap();
+
+        let beside = root.join(format!(
+            ".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/other"
+        ));
+        tokio::fs::create_dir_all(&beside).await.unwrap();
+        assert_eq!(
+            verify_vendored_patch_record(root, &ent, &rec).await,
+            Err("vendor_inventory_mismatch".to_string())
+        );
+        tokio::fs::remove_dir(&beside).await.unwrap();
+
+        tokio::fs::write(dir.join("extra.js"), b"x").await.unwrap();
+        assert!(matches!(
+            check_vendored_artifact(root, &ent, &rec).await,
+            ArtifactHealth::Corrupt { .. }
+        ));
+    }
+
+    #[tokio::test]
+    async fn vlt_manifest_blob_pins_the_inventory() {
+        use sha2::Digest;
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let rel = format!(".socket/vendor/npm/{UUID}/a-1.0.0/node_modules/a");
+        let dir = root.join(&rel);
+        tokio::fs::create_dir_all(&dir).await.unwrap();
+        let blob: &[u8] = b"{\"name\":\"a\",\"devDependencies\":{\"t\":\"1\"},\"main\":\"m.js\"}";
+        let committed = "{\"name\":\"a\",\"main\":\"x.js\"}";
+        tokio::fs::write(dir.join("package.json"), committed)
+            .await
+            .unwrap();
+        let mut rec = record(UUID, "package/index.js");
+        rec.files.clear();
+        rec.files.insert(
+            "package/package.json".into(),
+            PatchFileInfo {
+                before_hash: "b".into(),
+                after_hash: compute_git_sha256_from_bytes(blob),
+            },
+        );
+        let mut ent = entry("npm", UUID, &rel);
+        ent.flavor = Some("vlt".into());
+        ent.artifact.file_inventory = Some(BTreeMap::from([(
+            "package.json".to_string(),
+            hex::encode(sha2::Sha256::digest(committed.as_bytes())),
+        )]));
+        assert_eq!(verify_vendored_patch_record(root, &ent, &rec).await, Ok(()));
+        let blobs = root.join(".socket/blobs");
+        tokio::fs::create_dir_all(&blobs).await.unwrap();
+        tokio::fs::write(blobs.join(compute_git_sha256_from_bytes(blob)), blob)
+            .await
+            .unwrap();
+        assert_eq!(
+            verify_vendored_patch_record(root, &ent, &rec).await,
+            Err("vendor_hash_mismatch".to_string()),
+            "the blob stripped is not what the inventory pins"
+        );
+        tokio::fs::write(
+            dir.join("package.json"),
+            "{\"name\":\"a\",\"main\":\"m.js\"}",
+        )
+        .await
+        .unwrap();
+        ent.artifact.file_inventory = Some(BTreeMap::from([(
+            "package.json".to_string(),
+            hex::encode(sha2::Sha256::digest(b"{\"name\":\"a\",\"main\":\"m.js\"}")),
+        )]));
+        assert_eq!(verify_vendored_patch_record(root, &ent, &rec).await, Ok(()));
+    }
+
     #[tokio::test]
     async fn unknown_npm_flavor_is_never_judged_by_this_builds_layout() {
         let tmp = tempfile::tempdir().unwrap();
@@ -1454,11 +1696,11 @@ mod tests {
             .unwrap();
         let rec = record(UUID, "package/index.js");
         let mut ent = entry("npm", UUID, &rel);
-        ent.flavor = Some("vlt".into());
+        ent.flavor = Some("future-pm".into());
         assert_eq!(
             check_vendored_artifact(root, &ent, &rec).await,
             ArtifactHealth::UnknownFlavor {
-                flavor: "vlt".into()
+                flavor: "future-pm".into()
             }
         );
         ent.flavor = Some("bun".into());
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
new file mode 100644
index 00000000..f1ffaed9
--- /dev/null
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -0,0 +1,2399 @@
+//! vlt vendor backend: `vlt-lock.json` + importer `package.json` surgery
+//! for a direct dependency (DESIGN §4.5).
+//!
+//! The target's default-registry node becomes a `file` node naming the
+//! directory artifact ([`super::npm_dir`]); its importer edges and the
+//! importers' package.json specs move to `file:<path relative to the
+//! importer>`, and its own outgoing edges are re-keyed to the new DepID.
+//! Every other line of the lock stays byte-identical, and the moved entries
+//! are placed where vlt's own serializer puts them (§4.5.4), so `vlt ci`
+//! keeps the lock byte-stable.
+//!
+//! Transitive targets are refused: vlt re-resolves a non-importer edge to a
+//! `file` node away on the next `install`, `update` or workspace edit, and
+//! nothing tells the user.
+
+use std::cmp::Ordering;
+use std::collections::{BTreeMap, BTreeSet};
+use std::path::Path;
+
+use serde_json::Value;
+
+use crate::constants::npm_family::VLT_LOCK;
+use crate::constants::SOCKET_DIR;
+use crate::manifest::schema::PatchRecord;
+use crate::patch::apply::PatchSources;
+use crate::patch::path_safety::is_safe_multi_segment;
+use crate::utils::fs::{atomic_write_bytes_preserving_mode, read_regular_to_string};
+use crate::utils::socket_dir::remove_tree_and_prune;
+
+use super::common::{already_patched_result, done, refused};
+use super::npm_common::{done_failure_unstage, guard_coordinates, guard_revert_uuid_dir};
+use super::npm_dir::{dependency_token, replace_dependency_token, stage_patch_dir, SpanError};
+use super::state::{
+    load_state, write_marker_or_warn, VendorArtifact, VendorEntry, VendorMarker, WiringAction,
+    WiringRecord,
+};
+use super::vlt_lock_text::{
+    edges_block, entry_text, file_dep_id, is_default_registry, is_importer_dep_id, nodes_block,
+    parse_edge_entry_text, parse_edge_line, parse_node_entry_text, parse_node_line,
+    parse_vendored_dir_path, render_entry_line, render_tuple_with_slots, sniff_lock, split_dep_id,
+    split_lines, vendored_dir_rel, vlt_collate, vlt_edge_cmp, DepIdEra, DepIdKind, LockSniff,
+    ParsedLock, SectionSpan,
+};
+use super::{RevertOpts, RevertOutcome, VendorOutcome, VendorWarning};
+
+/// The flavor string vlt entries record.
+pub const FLAVOR: &str = "vlt";
+
+const KIND_PKG_DEP: &str = "vlt_pkg_dep";
+const KIND_LOCK_NODE: &str = "vlt_lock_node";
+const KIND_LOCK_EDGE: &str = "vlt_lock_edge";
+
+const PACKAGE_JSON: &str = "package.json";
+const UNSUPPORTED: &str = "vendor_lock_entry_unsupported";
+const OUT_OF_SYNC: &str = "vendor_vlt_lock_out_of_sync";
+const NOT_CANONICAL: &str =
+    "vlt-lock.json is not in vlt's canonical layout; re-save it with `vlt install`";
+
+/// A refusal: a stable code and its detail.
+pub type Refusal = (&'static str, String);
+
+/// DESIGN §4.1 lock sniff: a BOM-less JSON object with `lockfileVersion` 0
+/// or 1. The `Err` detail goes with `vendor_lockfile_version_unsupported`.
+pub(crate) fn sniff_vendor_lock(text: &str) -> Result<ParsedLock, String> {
+    match sniff_lock(text) {
+        LockSniff::Readable(lock) if lock.version.is_some() => Ok(lock),
+        LockSniff::Readable(_) => Err(
+            "vlt-lock.json has no lockfileVersion (vlt ≤ 0.0.0-18); re-lock with vlt ≥ 1.0.0"
+                .to_string(),
+        ),
+        LockSniff::UnsupportedVersion(raw) => Err(format!(
+            "vlt-lock.json has lockfileVersion {raw}; update socket-patch"
+        )),
+        LockSniff::Bom => Err(
+            "vlt-lock.json starts with a byte-order mark; re-save vlt-lock.json with `vlt install`"
+                .to_string(),
+        ),
+        LockSniff::NotJsonObject => Err(
+            "vlt-lock.json is not a JSON object; re-save vlt-lock.json with `vlt install`"
+                .to_string(),
+        ),
+    }
+}
+
+// ── lock document ────────────────────────────────────────────────────────
+
+/// One node or edge line: key, raw value, and its own `\r`.
+#[derive(Debug, Clone, PartialEq, Eq)]
+struct Entry {
+    key: String,
+    value: String,
+    cr: bool,
+}
+
+impl Entry {
+    fn text(&self) -> String {
+        entry_text(&self.key, &self.value)
+    }
+
+    fn from_text(text: &str, cr: bool, node: bool) -> Option<Self> {
+        let (key, value) = if node {
+            let entry = parse_node_entry_text(text)?;
+            (entry.key.to_string(), entry.tuple.to_string())
+        } else {
+            let entry = parse_edge_entry_text(text)?;
+            (entry.key.to_string(), entry.raw_value.to_string())
+        };
+        Some(Entry { key, value, cr })
+    }
+
+    fn edge_from(&self) -> &str {
+        self.key.split_once(' ').map_or("", |(from, _)| from)
+    }
+
+    fn edge_dep(&self) -> &str {
+        self.key.split_once(' ').map_or("", |(_, dep)| dep)
+    }
+}
+
+#[derive(Debug, Clone)]
+struct Block {
+    span: Option<SectionSpan>,
+    entries: Vec<Entry>,
+}
+
+/// A lock in vlt's canonical one-entry-per-line layout.
+struct LockDoc {
+    lines: Vec<String>,
+    parsed: ParsedLock,
+    era: DepIdEra,
+    nodes: Block,
+    edges: Block,
+}
+
+fn parse_block(
+    lines: &[&str],
+    span: Option<SectionSpan>,
+    expected: usize,
+    node: bool,
+) -> Option<Block> {
+    let Some(span) = span else {
+        return (expected == 0).then(|| Block {
+            span: None,
+            entries: Vec::new(),
+        });
+    };
+    let range = span.entry_lines();
+    let last = range.end.checked_sub(1);
+    let mut entries = Vec::new();
+    for i in range {
+        let (key, value, comma, cr) = if node {
+            let line = parse_node_line(lines[i])?;
+            (
+                line.entry.key.to_string(),
+                line.entry.tuple.to_string(),
+                line.comma,
+                line.cr,
+            )
+        } else {
+            let line = parse_edge_line(lines[i])?;
+            (
+                line.entry.key.to_string(),
+                line.entry.raw_value.to_string(),
+                line.comma,
+                line.cr,
+            )
+        };
+        if comma == (Some(i) == last) {
+            return None;
+        }
+        entries.push(Entry { key, value, cr });
+    }
+    let unique: BTreeSet<&str> = entries.iter().map(|e| e.key.as_str()).collect();
+    (entries.len() == expected && unique.len() == expected).then_some(Block {
+        span: Some(span),
+        entries,
+    })
+}
+
+fn parse_doc(text: &str) -> Result<LockDoc, Refusal> {
+    let parsed = sniff_vendor_lock(text).map_err(|d| ("vendor_lockfile_version_unsupported", d))?;
+    let lines = split_lines(text);
+    let not_canonical = || {
+        (
+            "vendor_lockfile_version_unsupported",
+            NOT_CANONICAL.to_string(),
+        )
+    };
+    let node_count = parsed.nodes().map_or(0, |n| n.len());
+    let edge_count = parsed.edges().map_or(0, |e| e.len());
+    let nodes =
+        parse_block(&lines, nodes_block(&lines), node_count, true).ok_or_else(not_canonical)?;
+    let edges =
+        parse_block(&lines, edges_block(&lines), edge_count, false).ok_or_else(not_canonical)?;
+    Ok(LockDoc {
+        era: parsed.new_id_era(),
+        lines: lines.into_iter().map(str::to_string).collect(),
+        parsed,
+        nodes,
+        edges,
+    })
+}
+
+fn render_block(out: &mut Vec<String>, header: &str, entries: &[Entry], inline_comma: bool) {
+    if entries.is_empty() {
+        out.push(header.to_string());
+        return;
+    }
+    let open = header.trim_end_matches(['\r']).trim_end_matches(',');
+    let cr = header.ends_with('\r');
+    out.push(format!(
+        "{}{}",
+        open.trim_end_matches('}'),
+        if cr { "\r" } else { "" }
+    ));
+    let last = entries.len() - 1;
+    for (i, e) in entries.iter().enumerate() {
+        out.push(render_entry_line(&e.text(), i != last, e.cr));
+    }
+    out.push(format!(
+        "  }}{}{}",
+        if inline_comma { "," } else { "" },
+        if cr { "\r" } else { "" }
+    ));
+}
+
+impl LockDoc {
+    fn render(&self) -> String {
+        let mut spans: Vec<(SectionSpan, &Block)> = [&self.nodes, &self.edges]
+            .into_iter()
+            .filter_map(|b| b.span.map(|s| (s, b)))
+            .collect();
+        spans.sort_by_key(|(s, _)| match s {
+            SectionSpan::Inline { line } => *line,
+            SectionSpan::Block { open, .. } => *open,
+        });
+        let mut out = Vec::with_capacity(self.lines.len() + 4);
+        let mut i = 0;
+        for (span, block) in spans {
+            match span {
+                SectionSpan::Block { open, close } => {
+                    out.extend(self.lines[i..=open].iter().cloned());
+                    let last = block.entries.len().saturating_sub(1);
+                    for (j, e) in block.entries.iter().enumerate() {
+                        out.push(render_entry_line(&e.text(), j != last, e.cr));
+                    }
+                    i = close;
+                }
+                SectionSpan::Inline { line } => {
+                    out.extend(self.lines[i..line].iter().cloned());
+                    let header = &self.lines[line];
+                    let comma = header.trim_end_matches('\r').ends_with(',');
+                    render_block(&mut out, header, &block.entries, comma);
+                    i = line + 1;
+                }
+            }
+        }
+        out.extend(self.lines[i..].iter().cloned());
+        out.join("\n")
+    }
+
+    fn options(&self) -> Option<&serde_json::Map<String, Value>> {
+        self.parsed.options()
+    }
+
+    fn legacy_default_keys(&self) -> bool {
+        self.nodes.entries.iter().any(|e| e.key.starts_with("··"))
+    }
+}
+
+// ── placement (§4.5.4) ───────────────────────────────────────────────────
+
+fn node_cmp(a: &Entry, b: &Entry) -> Option<Ordering> {
+    vlt_collate(&a.key, &b.key)
+}
+
+fn edge_cmp(a: &Entry, b: &Entry) -> Option<Ordering> {
+    let a_text = a.text();
+    let b_text = b.text();
+    let a = parse_edge_entry_text(&a_text)?;
+    let b = parse_edge_entry_text(&b_text)?;
+    vlt_edge_cmp(a.sort_key(), b.sort_key())
+}
+
+/// Replace the entries at the touched indices with their replacements:
+/// untouched entries keep their order, and each replacement (in the given
+/// order) goes before the first entry it sorts below. When any comparison
+/// is outside the collation table, every replacement stays in place.
+fn place(
+    entries: &[Entry],
+    touched: &[(usize, Entry)],
+    cmp: fn(&Entry, &Entry) -> Option<Ordering>,
+) -> Vec<Entry> {
+    let touched_at: BTreeSet<usize> = touched.iter().map(|(i, _)| *i).collect();
+    let mut list: Vec<Entry> = entries
+        .iter()
+        .enumerate()
+        .filter(|(i, _)| !touched_at.contains(i))
+        .map(|(_, e)| e.clone())
+        .collect();
+    for (_, new) in touched {
+        let mut at = list.len();
+        for (i, e) in list.iter().enumerate() {
+            match cmp(new, e) {
+                Some(Ordering::Less) => {
+                    at = i;
+                    break;
+                }
+                Some(_) => {}
+                None => {
+                    let mut in_place = entries.to_vec();
+                    for (i, replacement) in touched {
+                        in_place[*i] = replacement.clone();
+                    }
+                    return in_place;
+                }
+            }
+        }
+        list.insert(at, new.clone());
+    }
+    list
+}
+
+// ── target analysis (§4.5.1) ─────────────────────────────────────────────
+
+/// An importer edge into the target.
+#[derive(Debug, Clone)]
+struct ImporterEdge {
+    index: usize,
+    edge_type: String,
+    spec: String,
+    dep: String,
+    /// `""` for the root, else the workspace path.
+    dir: String,
+    field: &'static str,
+}
+
+impl ImporterEdge {
+    fn pkg_rel(&self) -> String {
+        if self.dir.is_empty() {
+            PACKAGE_JSON.to_string()
+        } else {
+            format!("{}/{PACKAGE_JSON}", self.dir)
+        }
+    }
+}
+
+/// The target's current node and its importer edges.
+#[derive(Debug, Clone)]
+struct Target {
+    index: usize,
+    key: String,
+    /// The node is already one of socket-patch's vendored dirs.
+    ours: bool,
+    importers: Vec<ImporterEdge>,
+}
+
+fn field_for(edge_type: &str) -> Option<&'static str> {
+    match edge_type {
+        "prod" => Some("dependencies"),
+        "dev" => Some("devDependencies"),
+        "optional" => Some("optionalDependencies"),
+        _ => None,
+    }
+}
+
+fn importer_dir(from: &str) -> Option<String> {
+    if from == "file~_d" || from == "file·." {
+        return Some(String::new());
+    }
+    let dep_id = split_dep_id(from)?;
+    (dep_id.kind == DepIdKind::Workspace && is_safe_multi_segment(&dep_id.first))
+        .then_some(dep_id.first)
+}
+
+fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refusal> {
+    let options = doc.options();
+    let mut defaults = Vec::new();
+    let mut foreign = Vec::new();
+    let mut ours = Vec::new();
+    for (i, e) in doc.nodes.entries.iter().enumerate() {
+        let Some(dep_id) = split_dep_id(&e.key) else {
+            continue;
+        };
+        match dep_id.kind {
+            DepIdKind::Registry if dep_id.registry_identity() == Some((name, version)) => {
+                if is_default_registry(&dep_id.first, options) {
+                    defaults.push((i, dep_id.extra.is_some()));
+                } else {
+                    foreign.push(i);
+                }
+            }
+            DepIdKind::File => {
+                let named = parse_node_entry_text(&e.text())
+                    .and_then(|n| n.name())
+                    .is_some_and(|n| n == name);
+                let vendored = parse_vendored_dir_path(&dep_id.first)
+                    .is_some_and(|p| p.name == name && p.version == version);
+                if named && vendored {
+                    ours.push(i);
+                }
+            }
+            _ => {}
+        }
+    }
+    let key = |i: usize| doc.nodes.entries[i].key.clone();
+    if let Some(&i) = foreign.first() {
+        return Err((
+            UNSUPPORTED,
+            format!(
+                "vlt-lock.json resolves {name}@{version} as {}, which is not from vlt's default \
+                 registry; vendoring rewires only default-registry packages",
+                key(i)
+            ),
+        ));
+    }
+    let (index, is_ours) = match (defaults.as_slice(), ours.as_slice()) {
+        ([(i, false)], []) => (*i, false),
+        ([], [i]) => (*i, true),
+        ([], []) => {
+            return Err((
+                "vendor_lock_entry_not_found",
+                format!(
+                    "vlt-lock.json has no default-registry entry for {name}@{version}; run `vlt \
+                     install` first"
+                ),
+            ))
+        }
+        _ => {
+            let ids: Vec<String> = defaults
+                .iter()
+                .map(|(i, _)| key(*i))
+                .chain(ours.iter().map(|i| key(*i)))
+                .collect();
+            return Err((
+                UNSUPPORTED,
+                format!(
+                    "vlt-lock.json holds {} ({}): peer/modifier variants; use --mode hosted",
+                    if ids.len() == 1 {
+                        "a variant instance".to_string()
+                    } else {
+                        format!("{} instances", ids.len())
+                    },
+                    ids.join(", ")
+                ),
+            ));
+        }
+    };
+    let target_key = key(index);
+    let mut importers = Vec::new();
+    for (i, e) in doc.edges.entries.iter().enumerate() {
+        let text = e.text();
+        let Some(edge) = parse_edge_entry_text(&text) else {
+            continue;
+        };
+        if edge.target() != target_key {
+            continue;
+        }
+        if !is_importer_dep_id(edge.from()) {
+            return Err((
+                "vendor_vlt_transitive_unsupported",
+                format!(
+                    "{name}@{version} is a transitive dependency ({} depends on it); vendored \
+                     mode rewires only direct dependencies of the root or a workspace — use \
+                     --mode hosted",
+                    edge.from()
+                ),
+            ));
+        }
+        let Some(field) = field_for(edge.edge_type()) else {
+            return Err((
+                UNSUPPORTED,
+                format!(
+                    "`{}` reaches {name}@{version} through a {} peer edge; use --mode hosted",
+                    edge.key,
+                    edge.edge_type()
+                ),
+            ));
+        };
+        let Some(dir) = importer_dir(edge.from()) else {
+            return Err((
+                UNSUPPORTED,
+                format!(
+                    "vlt-lock.json importer `{}` is not a safe workspace path",
+                    edge.from()
+                ),
+            ));
+        };
+        importers.push(ImporterEdge {
+            index: i,
+            edge_type: edge.edge_type().to_string(),
+            spec: edge.spec().to_string(),
+            dep: edge.dep_name().to_string(),
+            dir,
+            field,
+        });
+    }
+    if importers.is_empty() {
+        return Err((
+            UNSUPPORTED,
+            format!("no root or workspace importer depends on {name}@{version} in vlt-lock.json"),
+        ));
+    }
+    Ok(Target {
+        index,
+        key: target_key,
+        ours: is_ours,
+        importers,
+    })
+}
+
+/// `posix_relative(from_dir, to)` for project-relative forward-slashed
+/// paths (`""` is the root).
+fn posix_relative(from_dir: &str, to: &str) -> String {
+    let from: Vec<&str> = from_dir.split('/').filter(|s| !s.is_empty()).collect();
+    let to: Vec<&str> = to.split('/').filter(|s| !s.is_empty()).collect();
+    let common = from.iter().zip(&to).take_while(|(a, b)| a == b).count();
+    let mut parts: Vec<&str> = vec![".."; from.len() - common];
+    parts.extend(&to[common..]);
+    parts.join("/")
+}
+
+/// The `file:` spec an importer at `dir` declares for `rel`.
+fn importer_spec(dir: &str, rel: &str) -> String {
+    let r = posix_relative(dir, rel);
+    if r.starts_with("../") {
+        format!("file:{r}")
+    } else {
+        format!("file:./{r}")
+    }
+}
+
+fn json_string(s: &str) -> String {
+    serde_json::to_string(s).expect("a str serializes to JSON infallibly")
+}
+
+/// DESIGN §4.5.1 declaration checks on the importers' package.json files.
+fn check_declarations(
+    target: &Target,
+    pkgs: &BTreeMap<String, String>,
+    rel: &str,
+) -> Result<(), Refusal> {
+    for edge in &target.importers {
+        let pkg_rel = edge.pkg_rel();
+        let text = pkgs.get(&pkg_rel).ok_or_else(|| {
+            (
+                OUT_OF_SYNC,
+                format!("{pkg_rel} is missing; run `vlt install` first"),
+            )
+        })?;
+        let value: Value = serde_json::from_str(crate::package_json::detect::strip_bom(text))
+            .map_err(|_| (OUT_OF_SYNC, format!("{pkg_rel} is not valid JSON")))?;
+        let declared = ["dependencies", "devDependencies", "optionalDependencies"]
+            .iter()
+            .filter(|f| value.get(**f).and_then(|t| t.get(&edge.dep)).is_some())
+            .count();
+        if declared > 1 {
+            return Err((
+                UNSUPPORTED,
+                format!(
+                    "{} is declared in multiple dependency fields of {pkg_rel}; keep it in one \
+                     and re-run `vlt install`",
+                    edge.dep
+                ),
+            ));
+        }
+        let current = value
+            .get(edge.field)
+            .and_then(|t| t.get(&edge.dep))
+            .and_then(Value::as_str);
+        let ours = importer_spec(&edge.dir, rel);
+        if current != Some(edge.spec.as_str()) && current != Some(ours.as_str()) {
+            return Err((
+                OUT_OF_SYNC,
+                format!(
+                    "{pkg_rel} declares {}.{} as {}, but vlt-lock.json locks `{}`; run `vlt \
+                     install` first",
+                    edge.field,
+                    edge.dep,
+                    current.map_or_else(|| "nothing".to_string(), |c| format!("`{c}`")),
+                    edge.spec
+                ),
+            ));
+        }
+        match dependency_token(text, edge.field, &edge.dep) {
+            Ok(_) => {}
+            Err(SpanError::Duplicate(what)) => {
+                return Err((
+                    UNSUPPORTED,
+                    format!("{pkg_rel} declares {what} more than once"),
+                ))
+            }
+            Err(_) => {
+                return Err((
+                    OUT_OF_SYNC,
+                    format!("{pkg_rel} has no string {}.{}", edge.field, edge.dep),
+                ))
+            }
+        }
+    }
+    Ok(())
+}
+
+async fn read_importer_pkgs(project_root: &Path, target: &Target) -> BTreeMap<String, String> {
+    let mut pkgs = BTreeMap::new();
+    for edge in &target.importers {
+        let rel = edge.pkg_rel();
+        if pkgs.contains_key(&rel) {
+            continue;
+        }
+        if let Ok(text) = read_regular_to_string(&project_root.join(&rel)).await {
+            pkgs.insert(rel, text);
+        }
+    }
+    pkgs
+}
+
+/// Everything the vendored wiring decides before touching the artifact:
+/// the parsed lock, the target, and the importer package.json texts.
+struct Analysis {
+    doc: LockDoc,
+    target: Target,
+    pkgs: BTreeMap<String, String>,
+    rel: String,
+}
+
+async fn analyze(
+    project_root: &Path,
+    name: &str,
+    version: &str,
+    uuid: &str,
+) -> Result<Analysis, Refusal> {
+    let text = read_regular_to_string(&project_root.join(VLT_LOCK))
+        .await
+        .map_err(|e| {
+            (
+                "vendor_lockfile_missing",
+                format!("cannot read {VLT_LOCK}: {e} — run `vlt install` first"),
+            )
+        })?;
+    let doc = parse_doc(&text)?;
+    let target = find_target(&doc, name, version)?;
+    let pkgs = read_importer_pkgs(project_root, &target).await;
+    let rel = vendored_dir_rel(uuid, name, version);
+    check_declarations(&target, &pkgs, &rel)?;
+    Ok(Analysis {
+        doc,
+        target,
+        pkgs,
+        rel,
+    })
+}
+
+/// The read-only vendored-mode refusals vlt can decide before any write:
+/// the lock sniff and layout, the target analysis with its declaration
+/// checks, and the installed store copy's `bundleDependencies` and
+/// duplicate `devDependencies` (DESIGN §4.6, core part).
+pub async fn vlt_vendor_preflight(
+    project_root: &Path,
+    purl: &str,
+    uuid: &str,
+) -> Result<(), Refusal> {
+    let Some((name, version)) = super::npm_common::parse_npm_purl(purl) else {
+        return Err((
+            "unsafe_coordinates",
+            format!("cannot parse an npm name@version out of `{purl}`"),
+        ));
+    };
+    let analysis = analyze(project_root, &name, &version, uuid).await?;
+    if analysis.target.ours {
+        return Ok(());
+    }
+    let store = project_root
+        .join(crate::constants::npm_family::VLT_STORE_DIR)
+        .join(&analysis.target.key)
+        .join("node_modules")
+        .join(&name)
+        .join(PACKAGE_JSON);
+    if let Ok(text) = read_regular_to_string(&store).await {
+        if let Ok(pkg) =
+            serde_json::from_str::<Value>(crate::package_json::detect::strip_bom(&text))
+        {
+            if super::npm_common::declares_bundled_deps(&pkg) {
+                return Err((
+                    "vendor_bundled_deps_unsupported",
+                    format!("{name}@{version} declares bundleDependencies; vendoring would drop its bundled node_modules and break installs"),
+                ));
+            }
+        }
+        if let Err(SpanError::Duplicate(_)) = super::npm_dir::strip_dev_dependencies(&text) {
+            return Err((
+                UNSUPPORTED,
+                format!("{name}@{version}'s package.json declares duplicate devDependencies"),
+            ));
+        }
+    }
+    Ok(())
+}
+
+// ── wiring ───────────────────────────────────────────────────────────────
+
+/// A planned edit: the record plus the in-memory change behind it.
+struct Wiring {
+    records: Vec<WiringRecord>,
+    pkgs: BTreeMap<String, String>,
+    lock: Option<String>,
+}
+
+fn wiring_record(
+    file: &str,
+    kind: &str,
+    key: &str,
+    original: Option<String>,
+    new: String,
+) -> WiringRecord {
+    WiringRecord {
+        file: file.to_string(),
+        kind: kind.to_string(),
+        action: WiringAction::Rewritten,
+        key: Some(key.to_string()),
+        original: original.map(Value::String),
+        new: Some(Value::String(new)),
+    }
+}
+
+/// The prior entry's `original` for a record of this file and kind whose
+/// key satisfies `matches`.
+fn prior_original<'p>(
+    prior: Option<&'p VendorEntry>,
+    file: &str,
+    kind: &str,
+    matches: impl Fn(&str) -> bool,
+) -> Option<&'p WiringRecord> {
+    prior?
+        .wiring
+        .iter()
+        .find(|r| r.file == file && r.kind == kind && r.key.as_deref().is_some_and(&matches))
+}
+
+fn original_text(rec: Option<&WiringRecord>) -> Option<String> {
+    rec.and_then(|r| r.original.as_ref())
+        .and_then(Value::as_str)
+        .map(str::to_string)
+}
+
+/// DESIGN §4.5.2–§4.5.4: the records and the new surfaces, or `None` when
+/// every surface already names `rel`.
+fn plan_wiring(
+    analysis: &Analysis,
+    prior: Option<&VendorEntry>,
+) -> Result<Option<Wiring>, Refusal> {
+    let Analysis {
+        doc,
+        target,
+        pkgs,
+        rel,
+    } = analysis;
+    let file_id = file_dep_id(rel, doc.era);
+    let node = &doc.nodes.entries[target.index];
+    let node_text = node.text();
+    let node_entry = parse_node_entry_text(&node_text).ok_or_else(|| {
+        (
+            "vendor_lockfile_version_unsupported",
+            NOT_CANONICAL.to_string(),
+        )
+    })?;
+    let file_tuple =
+        render_tuple_with_slots(&node_entry.elems, Some("null"), Some(&json_string(rel)));
+    let new_node = Entry {
+        key: file_id.clone(),
+        value: file_tuple,
+        cr: node.cr,
+    };
+
+    let mut records = Vec::new();
+    let mut new_pkgs = BTreeMap::new();
+    let mut importers = target.importers.clone();
+    importers.sort_by(|a, b| (&a.dir, a.field, &a.dep).cmp(&(&b.dir, b.field, &b.dep)));
+    for edge in &importers {
+        let pkg_rel = edge.pkg_rel();
+        let text = new_pkgs
+            .get(&pkg_rel)
+            .or_else(|| pkgs.get(&pkg_rel))
+            .cloned()
+            .unwrap_or_default();
+        let current = dependency_token(&text, edge.field, &edge.dep).map_err(|_| {
+            (
+                OUT_OF_SYNC,
+                format!("{pkg_rel} has no string {}.{}", edge.field, edge.dep),
+            )
+        })?;
+        let new = json_string(&importer_spec(&edge.dir, rel));
+        if current == new {
+            continue;
+        }
+        let key = format!("{}/{}", edge.field, edge.dep);
+        let original = if target.ours {
+            original_text(prior_original(prior, &pkg_rel, KIND_PKG_DEP, |k| k == key))
+        } else {
+            Some(current)
+        };
+        let edited = replace_dependency_token(&text, edge.field, &edge.dep, &new)
+            .map_err(|_| (OUT_OF_SYNC, format!("cannot edit {pkg_rel}")))?;
+        new_pkgs.insert(pkg_rel.clone(), edited);
+        records.push(wiring_record(&pkg_rel, KIND_PKG_DEP, &key, original, new));
+    }
+
+    let mut node_touch = Vec::new();
+    if *node != new_node {
+        let (key, original) = if target.ours {
+            let prior_rec = prior_original(prior, VLT_LOCK, KIND_LOCK_NODE, |_| true);
+            (
+                prior_rec
+                    .and_then(|r| r.key.clone())
+                    .unwrap_or_else(|| node.key.clone()),
+                original_text(prior_rec),
+            )
+        } else {
+            (node.key.clone(), Some(node.text()))
+        };
+        records.push(wiring_record(
+            VLT_LOCK,
+            KIND_LOCK_NODE,
+            &key,
+            original,
+            new_node.text(),
+        ));
+        node_touch.push((target.index, new_node));
+    }
+
+    let mut edge_touch = Vec::new();
+    let mut edge_order: Vec<usize> = target.importers.iter().map(|e| e.index).collect();
+    edge_order.sort_unstable();
+    for index in edge_order {
+        let edge = target
+            .importers
+            .iter()
+            .find(|e| e.index == index)
+            .expect("importer index");
+        let current = &doc.edges.entries[index];
+        let spec = importer_spec(&edge.dir, rel);
+        let new = Entry {
+            key: current.key.clone(),
+            value: json_string(&format!("{} {spec} {file_id}", edge.edge_type)),
+            cr: current.cr,
+        };
+        if *current == new {
+            continue;
+        }
+        let original = if target.ours {
+            original_text(prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| {
+                k == current.key
+            }))
+        } else {
+            Some(current.text())
+        };
+        records.push(wiring_record(
+            VLT_LOCK,
+            KIND_LOCK_EDGE,
+            &current.key,
+            original,
+            new.text(),
+        ));
+        edge_touch.push((index, new));
+    }
+    for (index, current) in doc.edges.entries.iter().enumerate() {
+        if current.edge_from() != target.key || target.key == file_id {
+            continue;
+        }
+        let new = Entry {
+            key: format!("{file_id} {}", current.edge_dep()),
+            value: current.value.clone(),
+            cr: current.cr,
+        };
+        let (key, original) = if target.ours {
+            let dep = current.edge_dep().to_string();
+            let prior_rec = prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| {
+                k.split_once(' ')
+                    .is_some_and(|(from, d)| d == dep && !is_importer_dep_id(from))
+            });
+            (
+                prior_rec
+                    .and_then(|r| r.key.clone())
+                    .unwrap_or_else(|| current.key.clone()),
+                original_text(prior_rec),
+            )
+        } else {
+            (current.key.clone(), Some(current.text()))
+        };
+        records.push(wiring_record(
+            VLT_LOCK,
+            KIND_LOCK_EDGE,
+            &key,
+            original,
+            new.text(),
+        ));
+        edge_touch.push((index, new));
+    }
+
+    if records.is_empty() {
+        return Ok(None);
+    }
+    let lock = if node_touch.is_empty() && edge_touch.is_empty() {
+        None
+    } else {
+        let next = LockDoc {
+            lines: doc.lines.clone(),
+            parsed: doc.parsed.clone(),
+            era: doc.era,
+            nodes: Block {
+                span: doc.nodes.span,
+                entries: place(&doc.nodes.entries, &node_touch, node_cmp),
+            },
+            edges: Block {
+                span: doc.edges.span,
+                entries: place(&doc.edges.entries, &edge_touch, edge_cmp),
+            },
+        };
+        Some(next.render())
+    };
+    Ok(Some(Wiring {
+        records,
+        pkgs: new_pkgs,
+        lock,
+    }))
+}
+
+/// Write every changed package.json (path order), then the lock; a lock
+/// write failure puts the package.json files back.
+async fn commit(
+    project_root: &Path,
+    wiring: &Wiring,
+    originals: &BTreeMap<String, String>,
+) -> Result<(), String> {
+    let mut written: Vec<&String> = Vec::new();
+    for (rel, text) in &wiring.pkgs {
+        if let Err(e) =
+            atomic_write_bytes_preserving_mode(&project_root.join(rel), text.as_bytes()).await
+        {
+            unwind(project_root, &written, originals).await;
+            return Err(format!("cannot write {rel}: {e}"));
+        }
+        written.push(rel);
+    }
+    if let Some(lock) = &wiring.lock {
+        if let Err(e) =
+            atomic_write_bytes_preserving_mode(&project_root.join(VLT_LOCK), lock.as_bytes()).await
+        {
+            unwind(project_root, &written, originals).await;
+            return Err(format!(
+                "cannot write {VLT_LOCK}: {e} (package.json files restored to their original bytes)"
+            ));
+        }
+    }
+    Ok(())
+}
+
+async fn unwind(project_root: &Path, written: &[&String], originals: &BTreeMap<String, String>) {
+    for rel in written {
+        if let Some(text) = originals.get(*rel) {
+            let _ =
+                atomic_write_bytes_preserving_mode(&project_root.join(rel), text.as_bytes()).await;
+        }
+    }
+}
+
+/// The ledger entry this project already has for `purl` under vlt.
+async fn prior_vlt_entry(project_root: &Path, purl: &str) -> Option<VendorEntry> {
+    let state = load_state(project_root).await.ok()?;
+    state.entries.into_iter().find_map(|(key, entry)| {
+        (entry.ecosystem == "npm"
+            && entry.flavor.as_deref() == Some(FLAVOR)
+            && entry.covers_purl(&key, purl))
+        .then_some(entry)
+    })
+}
+
+/// Vendor one installed npm package into a vlt project (see the module
+/// doc). Same contract as the other npm backends: refuse-early / wire-last,
+/// `entry` present iff `result.success` and not a dry run, and an in-sync
+/// re-run synthesizes AlreadyPatched with no entry.
+#[allow(clippy::too_many_arguments)]
+pub(crate) async fn vendor_vlt(
+    purl: &str,
+    installed_dir: &Path,
+    project_root: &Path,
+    record: &PatchRecord,
+    sources: &PatchSources<'_>,
+    vendored_at: &str,
+    dry_run: bool,
+    force: bool,
+    service: Option<&super::VendorServiceConfig>,
+) -> VendorOutcome {
+    let coords = match guard_coordinates(purl, record) {
+        Ok(coords) => coords,
+        Err(outcome) => return *outcome,
+    };
+    let (name, version) = (coords.name.as_str(), coords.version.as_str());
+    let analysis = match analyze(project_root, name, version, &record.uuid).await {
+        Ok(analysis) => analysis,
+        Err((code, detail)) => return refused(code, detail),
+    };
+    let mut warnings = Vec::new();
+    if analysis.doc.legacy_default_keys() {
+        warnings.push(VendorWarning::new(
+            "vendor_vlt_legacy_lockfile",
+            "vlt-lock.json was written by vlt 0.0.0-19 … 1.0.0-rc.8 (`··` ids); those releases \
+             install the vendored lock but fail if it is deleted and re-created — upgrade vlt",
+        ));
+    }
+    let prior = prior_vlt_entry(project_root, purl).await;
+    let wiring = match plan_wiring(&analysis, prior.as_ref()) {
+        Ok(wiring) => wiring,
+        Err((code, detail)) => return refused(code, detail),
+    };
+
+    let (staged, result) = match stage_patch_dir(
+        purl,
+        installed_dir,
+        project_root,
+        record,
+        sources,
+        dry_run,
+        force,
+        &mut warnings,
+        service,
+    )
+    .await
+    {
+        Ok(pair) => pair,
+        Err(outcome) => return *outcome,
+    };
+    let Some(staged) = staged else {
+        return done(result, None, warnings);
+    };
+    if staged.staged_pkg_json.is_some() {
+        warnings.push(VendorWarning::new(
+            "vendor_dep_manifest_stale",
+            format!(
+                "the patch rewrites {name}@{version}'s package.json; vlt-lock.json keeps the \
+                 node's recorded dependency edges — if the patch changed dependency ranges, run \
+                 `vlt install` to re-resolve them"
+            ),
+        ));
+    }
+    let entry_for = |wiring: Vec<WiringRecord>| VendorEntry {
+        ecosystem: "npm".to_string(),
+        base_purl: coords.base_purl.clone(),
+        uuid: record.uuid.clone(),
+        artifact: VendorArtifact {
+            path: staged.rel_dir.clone(),
+            sha256: String::new(),
+            size: None,
+            platform_locked: None,
+            file_inventory: Some(staged.inventory.clone()),
+        },
+        wiring,
+        lock: None,
+        took_over_go_patches: false,
+        detached: false,
+        record: None,
+        flavor: Some(FLAVOR.to_string()),
+        uv: None,
+        pnpm: None,
+        poetry: None,
+        pdm: None,
+        pipenv: None,
+    };
+    let marker = VendorMarker::new("npm", &coords.base_purl, record, vendored_at);
+    let uuid_dir = project_root.join(&coords.uuid_dir_rel);
+
+    let Some(wiring) = wiring else {
+        if staged.reused {
+            let rel_abs = project_root.join(&staged.rel_dir);
+            return done(
+                already_patched_result(purl, &rel_abs, &record.files),
+                None,
+                warnings,
+            );
+        }
+        warnings.push(VendorWarning::new(
+            "vendor_artifact_rebuilt",
+            format!(
+                "the committed vendored dir for {name}@{version} was missing or stale; rebuilt \
+                 at {} (vlt-lock.json and package.json untouched)",
+                staged.rel_dir
+            ),
+        ));
+        write_marker_or_warn(&uuid_dir, &marker, &mut warnings).await;
+        return done(result, Some(entry_for(Vec::new())), warnings);
+    };
+    if let Err(e) = commit(project_root, &wiring, &analysis.pkgs).await {
+        return done_failure_unstage(
+            purl,
+            e,
+            project_root,
+            &coords.uuid_dir_rel,
+            staged.uuid_dir_preexisted,
+        )
+        .await;
+    }
+    write_marker_or_warn(&uuid_dir, &marker, &mut warnings).await;
+    done(result, Some(entry_for(wiring.records)), warnings)
+}
+
+/// Rewrite a vlt entry's `<uuid>/.gitignore` and `<uuid>/.gitattributes`
+/// when absent or changed (DESIGN §4.8 health: neither is part of the
+/// artifact, so repairing them is no rebuild).
+pub async fn restore_vlt_uuid_metadata(
+    entry: &VendorEntry,
+    project_root: &Path,
+) -> std::io::Result<()> {
+    let Some(uuid_dir) = super::path::vendor_uuid_dir_rel("npm", &entry.uuid) else {
+        return Err(std::io::Error::other(format!(
+            "`{}` is not a canonical patch uuid",
+            entry.uuid
+        )));
+    };
+    super::npm_dir::restore_uuid_metadata(&project_root.join(uuid_dir)).await
+}
+
+// ── in use ───────────────────────────────────────────────────────────────
+
+fn lock_has_file_node_under(text: &str, uuid: &str) -> Option<bool> {
+    let LockSniff::Readable(lock) = sniff_lock(text) else {
+        return None;
+    };
+    let prefix = format!(".socket/vendor/npm/{uuid}/");
+    Some(lock.nodes().is_some_and(|nodes| {
+        nodes.keys().any(|id| {
+            split_dep_id(id)
+                .is_some_and(|d| d.kind == DepIdKind::File && d.first.starts_with(&prefix))
+        })
+    }))
+}
+
+/// Is this vlt-vendored entry still consumed? Structural: `true` iff some
+/// `file` node's decoded path is under `.socket/vendor/npm/<uuid>/`.
+/// `None` when the lock is missing or unreadable.
+pub async fn vlt_entry_in_use(entry: &VendorEntry, project_root: &Path) -> Option<bool> {
+    let text = read_regular_to_string(&project_root.join(VLT_LOCK))
+        .await
+        .ok()?;
+    lock_has_file_node_under(&text, &entry.uuid)
+}
+
+// ── revert (§4.7) ────────────────────────────────────────────────────────
+
+fn drifted(detail: impl Into<String>) -> VendorWarning {
+    VendorWarning::new("vendor_lock_entry_drifted", detail.into())
+}
+
+async fn guard_unwired(
+    project_root: &Path,
+    entry: &VendorEntry,
+    uuid_dir_rel: &str,
+) -> Option<RevertOutcome> {
+    let clause = match vlt_entry_in_use(entry, project_root).await {
+        Some(false) => return None,
+        Some(true) => format!("{VLT_LOCK} still resolves through it"),
+        None => match tokio::fs::try_exists(project_root.join(VLT_LOCK)).await {
+            Ok(false) => return None,
+            _ => format!(
+                "{VLT_LOCK} exists but could not be read to prove it no longer references it"
+            ),
+        },
+    };
+    let detail = format!(
+        "refusing to remove {uuid_dir_rel}: the ledger entry records no pre-vendor wiring to \
+         replay (it was likely reconstructed by `socket-patch repair`) and {clause} — deleting \
+         the artifact would make every subsequent install fail; restore the registry \
+         dependency in package.json, run `vlt install`, then re-run `vendor --revert`"
+    );
+    Some(RevertOutcome {
+        success: false,
+        warnings: vec![VendorWarning::new(
+            "vendor_wiring_unknown_revert_blocked",
+            detail.clone(),
+        )],
+        error: Some(detail),
+        kept_artifact: false,
+    })
+}
+
+fn fragment(v: &Option<Value>) -> Option<&str> {
+    v.as_ref().and_then(Value::as_str)
+}
+
+/// The recorded key's dependency field and name (`"<F>/<N>"`; the name may
+/// itself contain `/`).
+fn split_pkg_key(key: &str) -> Option<(&str, &str)> {
+    let (field, name) = key.split_once('/')?;
+    matches!(
+        field,
+        "dependencies" | "devDependencies" | "optionalDependencies"
+    )
+    .then_some((field, name))
+}
+
+/// The package.json files a revert may write: the root one, and those of
+/// workspace importers the live lock or the entry's own edge records name.
+fn allowed_pkg_files(doc: Option<&LockDoc>, entry: &VendorEntry) -> BTreeSet<String> {
+    let mut dirs: BTreeSet<String> = BTreeSet::from([String::new()]);
+    let mut add = |from: &str| {
+        if let Some(dir) = importer_dir(from) {
+            dirs.insert(dir);
+        }
+    };
+    if let Some(doc) = doc {
+        for e in &doc.edges.entries {
+            add(e.edge_from());
+        }
+    }
+    for rec in entry.wiring.iter().filter(|r| r.kind == KIND_LOCK_EDGE) {
+        if let Some((from, _)) = rec.key.as_deref().and_then(|k| k.split_once(' ')) {
+            add(from);
+        }
+    }
+    dirs.into_iter()
+        .map(|d| {
+            if d.is_empty() {
+                PACKAGE_JSON.to_string()
+            } else {
+                format!("{d}/{PACKAGE_JSON}")
+            }
+        })
+        .collect()
+}
+
+/// The lock being reverted: each block's entries, restored in place, and
+/// the indices restored so far (re-placed when rendering).
+struct Staged {
+    nodes: Vec<Entry>,
+    edges: Vec<Entry>,
+    touched_nodes: Vec<usize>,
+    touched_edges: Vec<usize>,
+}
+
+enum Step {
+    Applied,
+    AlreadyReverted,
+    Drift(String),
+}
+
+fn slot_value(raw: Option<&str>) -> Option<Value> {
+    raw.filter(|s| *s != "null")
+        .and_then(|s| serde_json::from_str::<Value>(s).ok())
+}
+
+fn revert_node(staged: &mut Staged, rec: &WiringRecord) -> Step {
+    let (Some(new), Some(original)) = (fragment(&rec.new), fragment(&rec.original)) else {
+        return Step::Drift("the vlt_lock_node record has no pre-vendor original".into());
+    };
+    let (Some(new), Some(original)) = (parse_node_entry_text(new), parse_node_entry_text(original))
+    else {
+        return Step::Drift("the vlt_lock_node record is not vlt node entry text".into());
+    };
+    if let Some(i) = staged.nodes.iter().position(|e| e.key == new.key) {
+        let current = staged.nodes[i].clone();
+        let current_text = current.text();
+        let Some(live) = parse_node_entry_text(&current_text) else {
+            return Step::Drift(format!("{} is outside vlt's node grammar", new.key));
+        };
+        if live.slot(2) != Some("null") || slot_value(live.slot(3)) != slot_value(new.slot(3)) {
+            return Step::Drift(format!("{} drifted from the vendored wiring", new.key));
+        }
+        let tuple = render_tuple_with_slots(
+            &live.elems,
+            original.slot(2).filter(|s| *s != "null"),
+            original.slot(3).filter(|s| *s != "null"),
+        );
+        staged.nodes[i] = Entry {
+            key: original.key.to_string(),
+            value: tuple,
+            cr: current.cr,
+        };
+        staged.touched_nodes.push(i);
+        return Step::Applied;
+    }
+    let restored = staged
+        .nodes
+        .iter()
+        .find(|e| e.key == original.key)
+        .and_then(|e| {
+            let text = e.text();
+            parse_node_entry_text(&text)
+                .map(|live| (slot_value(live.slot(2)), slot_value(live.slot(3))))
+        });
+    if restored == Some((slot_value(original.slot(2)), slot_value(original.slot(3)))) {
+        Step::AlreadyReverted
+    } else {
+        Step::Drift(format!("vlt-lock.json no longer has {}", new.key))
+    }
+}
+
+fn revert_edge(staged: &mut Staged, rec: &WiringRecord) -> Step {
+    let (Some(new), Some(original)) = (fragment(&rec.new), fragment(&rec.original)) else {
+        return Step::Drift("the vlt_lock_edge record has no pre-vendor original".into());
+    };
+    let (Some(new), Some(original)) = (
+        Entry::from_text(new, false, false),
+        Entry::from_text(original, false, false),
+    ) else {
+        return Step::Drift("the vlt_lock_edge record is not vlt edge entry text".into());
+    };
+    let find = |key: &str| staged.edges.iter().position(|e| e.key == key);
+    if is_importer_dep_id(original.edge_from()) {
+        return match find(&new.key) {
+            Some(i) if staged.edges[i].value == new.value => {
+                let cr = staged.edges[i].cr;
+                staged.edges[i] = Entry { cr, ..original };
+                staged.touched_edges.push(i);
+                Step::Applied
+            }
+            Some(i) if staged.edges[i].value == original.value => Step::AlreadyReverted,
+            Some(_) => Step::Drift(format!(
+                "vlt-lock.json edge `{}` changed since vendoring",
+                new.key
+            )),
+            None => Step::Drift(format!(
+                "vlt-lock.json no longer has the edge `{}`",
+                new.key
+            )),
+        };
+    }
+    match (find(&new.key), find(&original.key)) {
+        (Some(i), _) => {
+            staged.edges[i].key = original.key.clone();
+            staged.touched_edges.push(i);
+            Step::Applied
+        }
+        (None, Some(_)) => Step::AlreadyReverted,
+        (None, None) => Step::Drift(format!(
+            "vlt-lock.json no longer has the edge `{}`",
+            new.key
+        )),
+    }
+}
+
+fn revert_pkg(pkgs: &mut BTreeMap<String, String>, rec: &WiringRecord) -> Step {
+    let (Some(new), Some(original)) = (fragment(&rec.new), fragment(&rec.original)) else {
+        return Step::Drift(format!(
+            "the {} record has no pre-vendor original",
+            rec.file
+        ));
+    };
+    let Some((field, name)) = rec.key.as_deref().and_then(split_pkg_key) else {
+        return Step::Drift(format!("unknown vlt_pkg_dep key in {}", rec.file));
+    };
+    let Some(text) = pkgs.get(&rec.file) else {
+        return Step::Drift(format!("{} is missing", rec.file));
+    };
+    match dependency_token(text, field, name) {
+        Ok(token) if token == new => match replace_dependency_token(text, field, name, original) {
+            Ok(edited) => {
+                pkgs.insert(rec.file.clone(), edited);
+                Step::Applied
+            }
+            Err(_) => Step::Drift(format!("cannot edit {}", rec.file)),
+        },
+        Ok(token) if token == original => Step::AlreadyReverted,
+        _ => Step::Drift(format!(
+            "{} {field}.{name} changed since vendoring",
+            rec.file
+        )),
+    }
+}
+
+/// The DESIGN §4.7 cross-grammar drift detail: the user re-created the lock
+/// under the other DepID grammar while package.json still names our dir.
+fn cross_grammar_detail(entry: &VendorEntry, doc: &LockDoc) -> Option<String> {
+    let node = entry.wiring.iter().find(|r| r.kind == KIND_LOCK_NODE)?;
+    let recorded = fragment(&node.new).and_then(parse_node_entry_text)?;
+    let recorded_era = split_dep_id(recorded.key)?.era;
+    if recorded_era == doc.era
+        || !doc
+            .nodes
+            .entries
+            .iter()
+            .any(|e| e.key != recorded.key && lock_key_under(&e.key, &entry.uuid))
+    {
+        return None;
+    }
+    let pkg = entry.wiring.iter().find(|r| r.kind == KIND_PKG_DEP)?;
+    let (_, name) = pkg.key.as_deref().and_then(split_pkg_key)?;
+    let original = fragment(&pkg.original)
+        .and_then(|raw| serde_json::from_str::<String>(raw).ok())
+        .unwrap_or_default();
+    Some(format!(
+        "vlt-lock.json was re-created by a different vlt lockfile grammar; set {name} in {} back \
+         to {original}, run `vlt install`, then re-run `socket-patch vendor --revert` to remove \
+         the artifact",
+        pkg.file
+    ))
+}
+
+fn lock_key_under(key: &str, uuid: &str) -> bool {
+    let prefix = format!(".socket/vendor/npm/{uuid}/");
+    split_dep_id(key).is_some_and(|d| d.kind == DepIdKind::File && d.first.starts_with(&prefix))
+}
+
+/// Undo one vlt-vendored package: every record through its §4.5.3 inverse,
+/// all or nothing, then remove the artifact.
+pub async fn revert_vlt_opts(
+    entry: &VendorEntry,
+    project_root: &Path,
+    opts: RevertOpts,
+) -> RevertOutcome {
+    let RevertOpts {
+        dry_run,
+        keep_artifact,
+    } = opts;
+    let uuid_dir_rel = match guard_revert_uuid_dir(&entry.uuid) {
+        Ok(d) => d,
+        Err(outcome) => return outcome,
+    };
+    if !keep_artifact && entry.wiring.is_empty() {
+        if let Some(blocked) = guard_unwired(project_root, entry, &uuid_dir_rel).await {
+            return blocked;
+        }
+    }
+    if dry_run {
+        return RevertOutcome::ok();
+    }
+    let mut outcome = RevertOutcome::ok();
+
+    let lock_text = match read_regular_to_string(&project_root.join(VLT_LOCK)).await {
+        Ok(text) => Some(text),
+        Err(e) if e.kind() == std::io::ErrorKind::NotFound => None,
+        Err(e) => return RevertOutcome::failed(format!("cannot read {VLT_LOCK}: {e}")),
+    };
+    let doc = match lock_text.as_deref().map(parse_doc).transpose() {
+        Ok(doc) => doc,
+        Err((_, detail)) => return RevertOutcome::failed(detail),
+    };
+    let allowed = allowed_pkg_files(doc.as_ref(), entry);
+    let mut pkgs: BTreeMap<String, String> = BTreeMap::new();
+    for rec in &entry.wiring {
+        let known =
+            rec.file == VLT_LOCK || (rec.kind == KIND_PKG_DEP && allowed.contains(&rec.file));
+        if !known {
+            outcome.warnings.push(drifted(format!(
+                "ignoring wiring record `{}` for non-allowlisted file `{}`",
+                rec.kind, rec.file
+            )));
+            continue;
+        }
+        if rec.kind == KIND_PKG_DEP && !pkgs.contains_key(&rec.file) {
+            match read_regular_to_string(&project_root.join(&rec.file)).await {
+                Ok(text) => {
+                    pkgs.insert(rec.file.clone(), text);
+                }
+                Err(e) if e.kind() == std::io::ErrorKind::NotFound => {}
+                Err(e) => return RevertOutcome::failed(format!("cannot read {}: {e}", rec.file)),
+            }
+        }
+    }
+    if outcome.drift_skipped() {
+        outcome.keep_artifact(&uuid_dir_rel);
+        return outcome;
+    }
+
+    let wired_lock = doc.as_ref().is_some_and(|d| {
+        d.nodes
+            .entries
+            .iter()
+            .any(|e| lock_key_under(&e.key, &entry.uuid))
+    });
+    let wired_pkg = entry
+        .wiring
+        .iter()
+        .filter(|r| r.kind == KIND_PKG_DEP)
+        .any(|rec| {
+            let (Some(new), Some((field, name))) = (
+                fragment(&rec.new),
+                rec.key.as_deref().and_then(split_pkg_key),
+            ) else {
+                return false;
+            };
+            pkgs.get(&rec.file)
+                .and_then(|t| dependency_token(t, field, name).ok())
+                .is_some_and(|t| t == new)
+        });
+    let already_reverted = !wired_lock && !wired_pkg;
+
+    if !already_reverted {
+        let mut staged = doc.as_ref().map(|d| Staged {
+            nodes: d.nodes.entries.clone(),
+            edges: d.edges.entries.clone(),
+            touched_nodes: Vec::new(),
+            touched_edges: Vec::new(),
+        });
+        let mut new_pkgs = pkgs.clone();
+        let mut drift: Option<String> = None;
+        for rec in entry.wiring.iter().rev() {
+            let step = match (rec.kind.as_str(), staged.as_mut()) {
+                (KIND_PKG_DEP, _) => revert_pkg(&mut new_pkgs, rec),
+                (KIND_LOCK_NODE, Some(staged)) => revert_node(staged, rec),
+                (KIND_LOCK_EDGE, Some(staged)) => revert_edge(staged, rec),
+                (KIND_LOCK_NODE | KIND_LOCK_EDGE, None) => {
+                    Step::Drift(format!("{VLT_LOCK} no longer exists"))
+                }
+                (other, _) => Step::Drift(format!("unknown vlt wiring kind `{other}`")),
+            };
+            if let Step::Drift(detail) = step {
+                drift = Some(detail);
+                break;
+            }
+        }
+        if let Some(detail) = drift {
+            let detail = doc
+                .as_ref()
+                .and_then(|d| cross_grammar_detail(entry, d))
+                .unwrap_or(detail);
+            outcome.warnings.push(drifted(detail));
+            outcome.keep_artifact(&uuid_dir_rel);
+            return outcome;
+        }
+        let new_lock = match (doc.as_ref(), staged) {
+            (Some(doc), Some(staged)) => Some(render_restored(doc, staged)),
+            _ => None,
+        };
+        if let Some(lock) = new_lock.filter(|l| Some(l) != lock_text.as_ref()) {
+            if let Err(e) =
+                atomic_write_bytes_preserving_mode(&project_root.join(VLT_LOCK), lock.as_bytes())
+                    .await
+            {
+                return RevertOutcome::failed(format!("cannot write {VLT_LOCK}: {e}"));
+            }
+        }
+        for (rel, text) in &new_pkgs {
+            if pkgs.get(rel) == Some(text) {
+                continue;
+            }
+            if let Err(e) =
+                atomic_write_bytes_preserving_mode(&project_root.join(rel), text.as_bytes()).await
+            {
+                return RevertOutcome::failed(format!("cannot write {rel}: {e}"));
+            }
+        }
+    }
+
+    if !keep_artifact {
+        let uuid_dir = project_root.join(&uuid_dir_rel);
+        if let Err(e) = remove_tree_and_prune(&uuid_dir, &project_root.join(SOCKET_DIR)).await {
+            return RevertOutcome::failed(format!("cannot remove {uuid_dir_rel}: {e}"));
+        }
+    }
+    outcome
+}
+
+/// The lock with the restored entries re-placed (§4.5.4), in the forward
+/// record order.
+fn render_restored(doc: &LockDoc, staged: Staged) -> String {
+    let touched = |entries: &[Entry], order: &[usize]| -> Vec<(usize, Entry)> {
+        order
+            .iter()
+            .rev()
+            .map(|&i| (i, entries[i].clone()))
+            .collect()
+    };
+    let nodes = place(
+        &staged.nodes,
+        &touched(&staged.nodes, &staged.touched_nodes),
+        node_cmp,
+    );
+    let edges = place(
+        &staged.edges,
+        &touched(&staged.edges, &staged.touched_edges),
+        edge_cmp,
+    );
+    LockDoc {
+        lines: doc.lines.clone(),
+        parsed: doc.parsed.clone(),
+        era: doc.era,
+        nodes: Block {
+            span: doc.nodes.span,
+            entries: nodes,
+        },
+        edges: Block {
+            span: doc.edges.span,
+            entries: edges,
+        },
+    }
+    .render()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use crate::hash::git_sha256::compute_git_sha256_from_bytes;
+    use crate::manifest::schema::PatchFileInfo;
+    use crate::vendor::state::{save_state, VendorState};
+    use std::collections::HashMap;
+
+    const UUID: &str = "9f6b2c4e-1d3a-4f6b-8c2d-7e5a9b1c3d5f";
+    const UUID2: &str = "0a1b2c3d-4e5f-4a7b-8c9d-0e1f2a3b4c5d";
+    const ORIG: &[u8] = b"module.exports = 'orig';\n";
+    const PATCHED: &[u8] = b"module.exports = 'patched';\n";
+    const PURL: &str = "pkg:npm/left-pad@1.3.0";
+    const REG: &str = "~npm~left-pad@1.3.0";
+    const REG_NODE: &str = r#""~npm~left-pad@1.3.0": [0,"left-pad","sha512-REG==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]"#;
+
+    fn render(version: u8, nodes: &[&str], edges: &[&str]) -> String {
+        let block = |entries: &[&str]| {
+            if entries.is_empty() {
+                return "{}".to_string();
+            }
+            let lines: Vec<String> = entries
+                .iter()
+                .enumerate()
+                .map(|(i, e)| format!("    {e}{}", if i + 1 < entries.len() { "," } else { "" }))
+                .collect();
+            format!("{{\n{}\n  }}", lines.join("\n"))
+        };
+        format!(
+            "{{\n  \"lockfileVersion\": {version},\n  \"options\": {{}},\n  \"nodes\": {},\n  \"edges\": {}\n}}\n",
+            block(nodes),
+            block(edges)
+        )
+    }
+
+    fn basic_lock() -> String {
+        render(
+            1,
+            &[
+                r#""~npm~a@1.0.0": [0,"a","sha512-A=="]"#,
+                REG_NODE,
+                r#""~npm~z@1.0.0": [0,"z","sha512-Z=="]"#,
+            ],
+            &[
+                r#""file~_d a": "prod 1.0.0 ~npm~a@1.0.0""#,
+                r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#,
+                r#""~npm~left-pad@1.3.0 z": "prod ^1.0.0 ~npm~z@1.0.0""#,
+            ],
+        )
+    }
+
+    const ROOT_PKG: &str =
+        "{\n  \"name\": \"root\",\n  \"dependencies\": {\n    \"a\": \"1.0.0\",\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+    struct Fx {
+        _tmp: tempfile::TempDir,
+        root: std::path::PathBuf,
+        installed: std::path::PathBuf,
+        blobs: std::path::PathBuf,
+    }
+
+    async fn fx(lock: &str, pkgs: &[(&str, &str)]) -> Fx {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path().join("p");
+        tokio::fs::create_dir_all(&root).await.unwrap();
+        tokio::fs::write(root.join(VLT_LOCK), lock).await.unwrap();
+        for (rel, text) in pkgs {
+            let path = root.join(rel);
+            tokio::fs::create_dir_all(path.parent().unwrap())
+                .await
+                .unwrap();
+            tokio::fs::write(path, text).await.unwrap();
+        }
+        let installed = tmp.path().join("installed");
+        tokio::fs::create_dir_all(&installed).await.unwrap();
+        tokio::fs::write(
+            installed.join(PACKAGE_JSON),
+            "{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"devDependencies\":{\"t\":\"1\"}}",
+        )
+        .await
+        .unwrap();
+        tokio::fs::write(installed.join("index.js"), ORIG)
+            .await
+            .unwrap();
+        let blobs = tmp.path().join("blobs");
+        tokio::fs::create_dir_all(&blobs).await.unwrap();
+        tokio::fs::write(blobs.join(compute_git_sha256_from_bytes(PATCHED)), PATCHED)
+            .await
+            .unwrap();
+        Fx {
+            _tmp: tmp,
+            root,
+            installed,
+            blobs,
+        }
+    }
+
+    fn record(uuid: &str) -> PatchRecord {
+        let mut files = HashMap::new();
+        files.insert(
+            "package/index.js".to_string(),
+            PatchFileInfo {
+                before_hash: compute_git_sha256_from_bytes(ORIG),
+                after_hash: compute_git_sha256_from_bytes(PATCHED),
+            },
+        );
+        PatchRecord {
+            uuid: uuid.to_string(),
+            exported_at: String::new(),
+            files,
+            vulnerabilities: HashMap::new(),
+            description: String::new(),
+            license: String::new(),
+            tier: String::new(),
+        }
+    }
+
+    async fn run(fx: &Fx, uuid: &str, dry_run: bool) -> VendorOutcome {
+        let sources = PatchSources::blobs_only(&fx.blobs);
+        vendor_vlt(
+            PURL,
+            &fx.installed,
+            &fx.root,
+            &record(uuid),
+            &sources,
+            "t",
+            dry_run,
+            false,
+            None,
+        )
+        .await
+    }
+
+    fn refusal(outcome: VendorOutcome) -> (&'static str, String) {
+        match outcome {
+            VendorOutcome::Refused { code, detail } => (code, detail),
+            other => panic!("expected a refusal, got {other:?}"),
+        }
+    }
+
+    fn entry_of(outcome: VendorOutcome) -> (VendorEntry, Vec<VendorWarning>) {
+        match outcome {
+            VendorOutcome::Done {
+                result,
+                entry: Some(entry),
+                warnings,
+            } if result.success => (entry, warnings),
+            other => panic!("expected a wired entry, got {other:?}"),
+        }
+    }
+
+    async fn read(fx: &Fx, rel: &str) -> String {
+        tokio::fs::read_to_string(fx.root.join(rel)).await.unwrap()
+    }
+
+    async fn persist(fx: &Fx, entry: &VendorEntry) {
+        let mut state = VendorState::new();
+        state.entries.insert(PURL.into(), entry.clone());
+        save_state(&fx.root, &state).await.unwrap();
+    }
+
+    fn entry(key: &str) -> Entry {
+        Entry {
+            key: key.into(),
+            value: "[0,\"x\"]".into(),
+            cr: false,
+        }
+    }
+
+    #[test]
+    fn placement_inserts_among_untouched_entries_and_falls_back_in_place() {
+        let entries = vec![
+            entry("~npm~b@1.0.0"),
+            entry("~npm~d@1.0.0"),
+            entry("~npm~f@1.0.0"),
+        ];
+        let placed = place(&entries, &[(0, entry("~npm~e@1.0.0"))], node_cmp);
+        let keys: Vec<&str> = placed.iter().map(|e| e.key.as_str()).collect();
+        assert_eq!(keys, ["~npm~d@1.0.0", "~npm~e@1.0.0", "~npm~f@1.0.0"]);
+        let placed = place(&entries, &[(1, entry("~npm~z@1.0.0"))], node_cmp);
+        assert_eq!(placed.last().unwrap().key, "~npm~z@1.0.0");
+
+        // `é` is outside the collation table: every replacement stays put.
+        let placed = place(&entries, &[(0, entry("file~é"))], node_cmp);
+        let keys: Vec<&str> = placed.iter().map(|e| e.key.as_str()).collect();
+        assert_eq!(keys, ["file~é", "~npm~d@1.0.0", "~npm~f@1.0.0"]);
+    }
+
+    #[test]
+    fn posix_relative_specs_from_every_importer() {
+        let rel = format!(".socket/vendor/npm/{UUID}/a-1.0.0/node_modules/a");
+        assert_eq!(importer_spec("", &rel), format!("file:./{rel}"));
+        assert_eq!(
+            importer_spec("packages/a", &rel),
+            format!("file:../../{rel}")
+        );
+        assert_eq!(
+            importer_spec(".socket", &rel),
+            format!("file:./{}", &rel[8..])
+        );
+    }
+
+    #[tokio::test]
+    async fn wires_the_node_edges_and_package_json_in_vlt_order() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, warnings) = entry_of(run(&fx, UUID, false).await);
+        assert!(warnings.is_empty(), "{warnings:?}");
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let file_id =
+            format!("file~.socket+vendor+npm+{UUID}+left-pad-1.3.0+node__modules+left-pad");
+        assert_eq!(
+            read(&fx, VLT_LOCK).await,
+            render(
+                1,
+                &[
+                    r#""~npm~a@1.0.0": [0,"a","sha512-A=="]"#,
+                    r#""~npm~z@1.0.0": [0,"z","sha512-Z=="]"#,
+                    &format!(r#""{file_id}": [0,"left-pad",null,"{rel}"]"#),
+                ],
+                &[
+                    r#""file~_d a": "prod 1.0.0 ~npm~a@1.0.0""#,
+                    &format!(r#""file~_d left-pad": "prod file:./{rel} {file_id}""#),
+                    &format!(r#""{file_id} z": "prod ^1.0.0 ~npm~z@1.0.0""#),
+                ],
+            )
+        );
+        assert_eq!(
+            read(&fx, PACKAGE_JSON).await,
+            ROOT_PKG.replace(
+                "\"left-pad\": \"1.3.0\"",
+                &format!("\"left-pad\": \"file:./{rel}\"")
+            )
+        );
+        let kinds: Vec<(&str, Option<&str>)> = entry
+            .wiring
+            .iter()
+            .map(|r| (r.kind.as_str(), r.key.as_deref()))
+            .collect();
+        assert_eq!(
+            kinds,
+            [
+                (KIND_PKG_DEP, Some("dependencies/left-pad")),
+                (KIND_LOCK_NODE, Some(REG)),
+                (KIND_LOCK_EDGE, Some("file~_d left-pad")),
+                (KIND_LOCK_EDGE, Some("~npm~left-pad@1.3.0 z")),
+            ]
+        );
+        assert_eq!(fragment(&entry.wiring[0].original), Some("\"1.3.0\""));
+        assert_eq!(fragment(&entry.wiring[1].original), Some(REG_NODE));
+        assert_eq!(entry.artifact.path, rel);
+        assert!(entry.artifact.sha256.is_empty());
+    }
+
+    #[tokio::test]
+    async fn dry_run_writes_nothing() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        match run(&fx, UUID, true).await {
+            VendorOutcome::Done {
+                result,
+                entry: None,
+                ..
+            } => assert!(result.success),
+            other => panic!("{other:?}"),
+        }
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+        assert!(!fx.root.join(".socket").exists());
+    }
+
+    #[tokio::test]
+    async fn target_analysis_refusals() {
+        let url_node = r#""~npm~left-pad@1.3.0~peer.1": [0,"left-pad","sha512-P=="]"#;
+        let cases: Vec<(String, &str, &str, &str)> = vec![
+            (
+                render(1, &[r#""~acme~left-pad@1.3.0": [0,"left-pad","sha512-A=="]"#], &[r#""file~_d left-pad": "prod 1.3.0 ~acme~left-pad@1.3.0""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "not from vlt's default registry",
+            ),
+            (
+                render(1, &[REG_NODE, url_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "peer/modifier variants; use --mode hosted",
+            ),
+            (
+                render(1, &[url_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0~peer.1""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "peer/modifier variants",
+            ),
+            (
+                render(1, &[r#""~npm~a@1.0.0": [0,"a"]"#], &[]),
+                ROOT_PKG,
+                "vendor_lock_entry_not_found",
+                "no default-registry entry for left-pad@1.3.0",
+            ),
+            (
+                render(1, &[r#""~npm~a@1.0.0": [0,"a"]"#, REG_NODE], &[r#""file~_d a": "prod 1.0.0 ~npm~a@1.0.0""#, r#""~npm~a@1.0.0 left-pad": "prod ^1 ~npm~left-pad@1.3.0""#]),
+                ROOT_PKG,
+                "vendor_vlt_transitive_unsupported",
+                "~npm~a@1.0.0 depends on it",
+            ),
+            (
+                render(1, &[REG_NODE], &[r#""file~_d left-pad": "peer ^1 ~npm~left-pad@1.3.0""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "peer edge",
+            ),
+            (
+                render(1, &[REG_NODE], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#]),
+                "{\"dependencies\":{\"left-pad\":\"1.3.0\"},\"devDependencies\":{\"left-pad\":\"1.3.0\"}}",
+                UNSUPPORTED,
+                "declared in multiple dependency fields",
+            ),
+            (
+                render(1, &[REG_NODE], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#]),
+                "{\"dependencies\":{\"left-pad\":\"^1.3.0\"}}",
+                OUT_OF_SYNC,
+                "declares dependencies.left-pad as `^1.3.0`",
+            ),
+            (
+                render(1, &[REG_NODE], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#]),
+                "{\"devDependencies\":{\"left-pad\":\"1.3.0\"}}",
+                OUT_OF_SYNC,
+                "as nothing",
+            ),
+            (
+                serde_json::to_string_pretty(&serde_json::from_str::<Value>(&basic_lock()).unwrap()).unwrap(),
+                ROOT_PKG,
+                "vendor_lockfile_version_unsupported",
+                "canonical layout",
+            ),
+            (
+                format!("\u{feff}{}", basic_lock()),
+                ROOT_PKG,
+                "vendor_lockfile_version_unsupported",
+                "byte-order mark",
+            ),
+        ];
+        for (lock, pkg, code, needle) in cases {
+            let fx = fx(&lock, &[(PACKAGE_JSON, pkg)]).await;
+            let (got, detail) = refusal(run(&fx, UUID, false).await);
+            assert_eq!(got, code, "{lock}: {detail}");
+            assert!(detail.contains(needle), "{detail}");
+            assert_eq!(read(&fx, VLT_LOCK).await, lock);
+            assert!(!fx.root.join(".socket").exists());
+        }
+    }
+
+    #[tokio::test]
+    async fn a_peer_range_beside_the_dev_edge_is_left_untouched() {
+        let lock = render(
+            1,
+            &[REG_NODE],
+            &[r#""file~_d left-pad": "dev 1.3.0 ~npm~left-pad@1.3.0""#],
+        );
+        let pkg = "{\n  \"devDependencies\": {\n    \"left-pad\": \"1.3.0\"\n  },\n  \"peerDependencies\": {\n    \"left-pad\": \"^1\"\n  }\n}\n";
+        let fx = fx(&lock, &[(PACKAGE_JSON, pkg)]).await;
+        entry_of(run(&fx, UUID, false).await);
+        let after = read(&fx, PACKAGE_JSON).await;
+        assert!(
+            after.contains("\"peerDependencies\": {\n    \"left-pad\": \"^1\""),
+            "{after}"
+        );
+        assert!(
+            after.contains("\"left-pad\": \"file:./.socket/vendor/npm/"),
+            "{after}"
+        );
+    }
+
+    #[tokio::test]
+    async fn the_legacy_era_warns_and_wires_with_its_own_grammar() {
+        let lock = render(
+            0,
+            &[r#""··left-pad@1.3.0": [0,"left-pad","sha512-REG=="]"#],
+            &[r#""file·. left-pad": "prod 1.3.0 ··left-pad@1.3.0""#],
+        );
+        let fx = fx(&lock, &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (_, warnings) = entry_of(run(&fx, UUID, false).await);
+        assert_eq!(warnings[0].code, "vendor_vlt_legacy_lockfile");
+        let wired = read(&fx, VLT_LOCK).await;
+        assert!(
+            wired.contains(&format!(
+                "\"file·.socket§vendor§npm§{UUID}§left-pad-1.3.0§node_modules§left-pad\": [0,\"left-pad\",null,"
+            )),
+            "{wired}"
+        );
+    }
+
+    #[tokio::test]
+    async fn revert_restores_slots_under_a_changed_flag_and_refuses_drift() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let wired = read(&fx, VLT_LOCK).await;
+        let reflagged = wired.replace("[0,\"left-pad\",null,", "[2,\"left-pad\",null,");
+        tokio::fs::write(fx.root.join(VLT_LOCK), &reflagged)
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+        assert_eq!(
+            read(&fx, VLT_LOCK).await,
+            basic_lock().replace(
+                "[0,\"left-pad\",\"sha512-REG==\"",
+                "[2,\"left-pad\",\"sha512-REG==\""
+            )
+        );
+        assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let wired = read(&fx, VLT_LOCK).await;
+        let drifted = wired.replace("\"prod file:./", "\"dev file:./");
+        tokio::fs::write(fx.root.join(VLT_LOCK), &drifted)
+            .await
+            .unwrap();
+        let pkg = read(&fx, PACKAGE_JSON).await;
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(
+            out.success && out.drift_skipped() && out.kept_artifact,
+            "{out:?}"
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, drifted, "a drift writes nothing");
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert!(fx.root.join(&entry.artifact.path).exists());
+    }
+
+    #[tokio::test]
+    async fn revert_after_the_user_already_undid_the_wiring_only_removes_the_artifact() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let relocked = basic_lock()
+            .replace("\"sha512-REG==\"", "\"sha512-NEW==\"")
+            .replace("prod 1.3.0 ~npm~left-pad", "prod ^1.3.0 ~npm~left-pad");
+        tokio::fs::write(fx.root.join(VLT_LOCK), &relocked)
+            .await
+            .unwrap();
+        let pkg = ROOT_PKG.replace("\"left-pad\": \"1.3.0\"", "\"left-pad\": \"^1.3.0\"");
+        tokio::fs::write(fx.root.join(PACKAGE_JSON), &pkg)
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+        assert_eq!(read(&fx, VLT_LOCK).await, relocked);
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert!(!fx.root.join(format!(".socket/vendor/npm/{UUID}")).exists());
+    }
+
+    #[tokio::test]
+    async fn a_cross_grammar_relock_names_the_manual_step() {
+        let lock = render(
+            0,
+            &[r#""·npm·left-pad@1.3.0": [0,"left-pad","sha512-REG=="]"#],
+            &[r#""file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0""#],
+        );
+        let fx = fx(&lock, &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let rel = entry.artifact.path.clone();
+        let file_id =
+            format!("file~.socket+vendor+npm+{UUID}+left-pad-1.3.0+node__modules+left-pad");
+        let relocked = render(
+            1,
+            &[&format!(r#""{file_id}": [0,"left-pad",null,"{rel}"]"#)],
+            &[&format!(
+                r#""file~_d left-pad": "prod file:./{rel} {file_id}""#
+            )],
+        );
+        tokio::fs::write(fx.root.join(VLT_LOCK), &relocked)
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.kept_artifact, "{out:?}");
+        let detail = &out.warnings[0].detail;
+        assert!(
+            detail.contains("re-created by a different vlt lockfile grammar")
+                && detail.contains("set left-pad in package.json back to 1.3.0"),
+            "{detail}"
+        );
+
+        tokio::fs::write(fx.root.join(PACKAGE_JSON), ROOT_PKG)
+            .await
+            .unwrap();
+        tokio::fs::write(fx.root.join(VLT_LOCK), basic_lock())
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && !out.kept_artifact, "{out:?}");
+    }
+
+    #[tokio::test]
+    async fn a_new_uuid_rewires_our_dir_and_keeps_the_pristine_originals() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let (second, _) = entry_of(run(&fx, UUID2, false).await);
+        let lock = read(&fx, VLT_LOCK).await;
+        assert!(lock.contains(UUID2) && !lock.contains(UUID), "{lock}");
+        assert_eq!(second.wiring.len(), first.wiring.len());
+        for (a, b) in first.wiring.iter().zip(&second.wiring) {
+            assert_eq!(
+                (&a.kind, &a.key, &a.original),
+                (&b.kind, &b.key, &b.original)
+            );
+        }
+        let out = revert_vlt_opts(&second, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+    }
+
+    #[tokio::test]
+    async fn uuid_metadata_is_restored_for_the_entry() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let gitignore = fx
+            .root
+            .join(format!(".socket/vendor/npm/{UUID}/.gitignore"));
+        tokio::fs::remove_file(&gitignore).await.unwrap();
+        restore_vlt_uuid_metadata(&entry, &fx.root).await.unwrap();
+        assert_eq!(
+            tokio::fs::read_to_string(&gitignore).await.unwrap(),
+            super::super::npm_dir::UUID_GITIGNORE
+        );
+    }
+
+    #[tokio::test]
+    async fn an_unwired_entry_refuses_while_the_lock_still_names_its_dir() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (mut entry, _) = entry_of(run(&fx, UUID, false).await);
+        entry.wiring.clear();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(!out.success);
+        assert_eq!(out.warnings[0].code, "vendor_wiring_unknown_revert_blocked");
+        assert!(fx.root.join(&entry.artifact.path).exists());
+        assert_eq!(vlt_entry_in_use(&entry, &fx.root).await, Some(true));
+    }
+
+    #[tokio::test]
+    async fn a_lock_write_failure_puts_package_json_back() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let wiring = Wiring {
+            records: Vec::new(),
+            pkgs: BTreeMap::from([(PACKAGE_JSON.to_string(), "{}".to_string())]),
+            lock: Some("{}".to_string()),
+        };
+        tokio::fs::remove_file(fx.root.join(VLT_LOCK))
+            .await
+            .unwrap();
+        tokio::fs::create_dir_all(fx.root.join(VLT_LOCK).join("occupied"))
+            .await
+            .unwrap();
+        let originals = BTreeMap::from([(PACKAGE_JSON.to_string(), ROOT_PKG.to_string())]);
+        let err = commit(&fx.root, &wiring, &originals).await.unwrap_err();
+        assert!(err.contains("package.json files restored"), "{err}");
+        assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+    }
+
+    #[tokio::test]
+    async fn a_manifest_patch_warns_that_the_lock_keeps_its_edges() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let patched_pkg =
+            b"{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"devDependencies\":{\"t\":\"1\"},\"main\":\"i.js\"}";
+        tokio::fs::write(
+            fx.blobs.join(compute_git_sha256_from_bytes(patched_pkg)),
+            patched_pkg,
+        )
+        .await
+        .unwrap();
+        let mut rec = record(UUID);
+        rec.files.insert(
+            "package/package.json".into(),
+            PatchFileInfo {
+                before_hash: String::new(),
+                after_hash: compute_git_sha256_from_bytes(patched_pkg),
+            },
+        );
+        let sources = PatchSources::blobs_only(&fx.blobs);
+        let outcome = vendor_vlt(
+            PURL,
+            &fx.installed,
+            &fx.root,
+            &rec,
+            &sources,
+            "t",
+            false,
+            true,
+            None,
+        )
+        .await;
+        let (entry, warnings) = entry_of(outcome);
+        assert!(
+            warnings
+                .iter()
+                .any(|w| w.code == "vendor_dep_manifest_stale"),
+            "{warnings:?}"
+        );
+        let committed = read(&fx, &format!("{}/package.json", entry.artifact.path)).await;
+        assert_eq!(
+            committed,
+            "{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"main\":\"i.js\"}"
+        );
+        crate::vendor::verify::verify_vendored_patch_record(&fx.root, &entry, &rec)
+            .await
+            .expect("the inventory pin verifies the stripped manifest without the blob");
+        let local_blobs = fx.root.join(".socket/blobs");
+        tokio::fs::create_dir_all(&local_blobs).await.unwrap();
+        tokio::fs::write(
+            local_blobs.join(compute_git_sha256_from_bytes(patched_pkg)),
+            patched_pkg,
+        )
+        .await
+        .unwrap();
+        crate::vendor::verify::verify_vendored_patch_record(&fx.root, &entry, &rec)
+            .await
+            .expect("and with the blob");
+        tokio::fs::write(
+            fx.root.join(&entry.artifact.path).join(PACKAGE_JSON),
+            "{\"name\":\"left-pad\",\"version\":\"6.6.6\"}",
+        )
+        .await
+        .unwrap();
+        assert_eq!(
+            crate::vendor::verify::verify_vendored_patch_record(&fx.root, &entry, &rec).await,
+            Err("vendor_hash_mismatch".to_string())
+        );
+    }
+
+    #[tokio::test]
+    async fn the_preflight_decides_every_refusal_without_writing() {
+        let fx = fx(
+            &render(
+                1,
+                &[REG_NODE],
+                &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#],
+            ),
+            &[(PACKAGE_JSON, ROOT_PKG)],
+        )
+        .await;
+        assert_eq!(vlt_vendor_preflight(&fx.root, PURL, UUID).await, Ok(()));
+        tokio::fs::write(
+            fx.root.join(PACKAGE_JSON),
+            "{\"dependencies\":{\"left-pad\":\"^1\"}}",
+        )
+        .await
+        .unwrap();
+        let (code, _) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+            .await
+            .unwrap_err();
+        assert_eq!(code, OUT_OF_SYNC);
+        tokio::fs::write(fx.root.join(PACKAGE_JSON), ROOT_PKG)
+            .await
+            .unwrap();
+        let store = fx
+            .root
+            .join("node_modules/.vlt")
+            .join(REG)
+            .join("node_modules/left-pad");
+        tokio::fs::create_dir_all(&store).await.unwrap();
+        tokio::fs::write(store.join(PACKAGE_JSON), "{\"bundleDependencies\":true}")
+            .await
+            .unwrap();
+        let (code, _) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+            .await
+            .unwrap_err();
+        assert_eq!(code, "vendor_bundled_deps_unsupported");
+        tokio::fs::write(
+            store.join(PACKAGE_JSON),
+            "{\"devDependencies\":{},\"devDependencies\":{}}",
+        )
+        .await
+        .unwrap();
+        let (code, detail) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+            .await
+            .unwrap_err();
+        assert_eq!(code, UNSUPPORTED);
+        assert!(detail.contains("duplicate devDependencies"), "{detail}");
+    }
+
+    fn service_tgz(entries: &[(&str, tar::EntryType, &[u8])]) -> Vec<u8> {
+        let mut builder = tar::Builder::new(flate2::write::GzEncoder::new(
+            Vec::new(),
+            flate2::Compression::default(),
+        ));
+        for (path, kind, bytes) in entries {
+            let mut header = tar::Header::new_gnu();
+            header.set_entry_type(*kind);
+            header.set_size(bytes.len() as u64);
+            header.set_mode(0o644);
+            if *kind == tar::EntryType::Symlink {
+                header.set_link_name("/etc/passwd").unwrap();
+            }
+            header.set_cksum();
+            builder.append_data(&mut header, path, *bytes).unwrap();
+        }
+        builder.into_inner().unwrap().finish().unwrap()
+    }
+
+    async fn run_with(fx: &Fx, cfg: &crate::vendor::VendorServiceConfig) -> VendorOutcome {
+        let sources = PatchSources::blobs_only(&fx.blobs);
+        vendor_vlt(
+            PURL,
+            &fx.installed,
+            &fx.root,
+            &record(UUID),
+            &sources,
+            "t",
+            false,
+            false,
+            Some(cfg),
+        )
+        .await
+    }
+
+    #[tokio::test]
+    async fn the_service_tree_is_extracted_under_any_first_component_and_transformed() {
+        use crate::vendor::test_support::{mount_granted, request_count, service_cfg};
+        use crate::vendor::VendorSource;
+        let server = wiremock::MockServer::start().await;
+        let tgz = service_tgz(&[
+            (
+                "left-pad/package.json",
+                tar::EntryType::Regular,
+                b"{\"name\":\"left-pad\",\"devDependencies\":{\"x\":\"1\"},\"version\":\"1.3.0\"}",
+            ),
+            ("left-pad/index.js", tar::EntryType::Regular, PATCHED),
+            ("left-pad/README.md", tar::EntryType::Regular, b"service"),
+        ]);
+        mount_granted(&server, UUID, "left-pad-1.3.0.tgz", &tgz).await;
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let cfg = service_cfg(&server.uri(), VendorSource::Auto, false);
+        let (entry, warnings) = entry_of(run_with(&fx, &cfg).await);
+        assert!(
+            warnings
+                .iter()
+                .any(|w| w.code == "vendor_prebuilt_downloaded"),
+            "{warnings:?}"
+        );
+        assert_eq!(
+            read(&fx, &format!("{}/package.json", entry.artifact.path)).await,
+            "{\"name\":\"left-pad\",\"version\":\"1.3.0\"}"
+        );
+        assert_eq!(
+            read(&fx, &format!("{}/README.md", entry.artifact.path)).await,
+            "service"
+        );
+        persist(&fx, &entry).await;
+        let before = request_count(&server).await;
+        match run_with(&fx, &cfg).await {
+            VendorOutcome::Done {
+                entry: None,
+                result,
+                ..
+            } => assert!(result.success),
+            other => panic!("the rerun reuses the committed dir: {other:?}"),
+        }
+        assert_eq!(
+            request_count(&server).await,
+            before,
+            "reuse never calls the service"
+        );
+    }
+
+    #[tokio::test]
+    async fn service_failures_follow_the_tarball_policy() {
+        use crate::vendor::test_support::{mount_503, mount_granted, service_cfg};
+        use crate::vendor::VendorSource;
+
+        let server = wiremock::MockServer::start().await;
+        mount_503(&server).await;
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (_, warnings) =
+            entry_of(run_with(&fx, &service_cfg(&server.uri(), VendorSource::Auto, false)).await);
+        assert!(
+            warnings
+                .iter()
+                .any(|w| w.code == "vendor_prebuilt_unavailable"),
+            "{warnings:?}"
+        );
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        match run_with(
+            &fx,
+            &service_cfg(&server.uri(), VendorSource::Service, false),
+        )
+        .await
+        {
+            VendorOutcome::Done { result, entry, .. } => {
+                assert!(!result.success && entry.is_none(), "{:?}", result.error)
+            }
+            other => panic!("{other:?}"),
+        }
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert!(!fx.root.join(".socket/vendor").exists());
+
+        let server = wiremock::MockServer::start().await;
+        let bad = service_tgz(&[
+            ("package/index.js", tar::EntryType::Regular, PATCHED),
+            ("package/link", tar::EntryType::Symlink, b""),
+        ]);
+        mount_granted(&server, UUID, "left-pad-1.3.0.tgz", &bad).await;
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        match run_with(&fx, &service_cfg(&server.uri(), VendorSource::Auto, false)).await {
+            VendorOutcome::Done { result, entry, .. } => {
+                assert!(!result.success && entry.is_none());
+                assert!(result.error.unwrap().contains("unsafe"));
+            }
+            other => panic!("{other:?}"),
+        }
+        assert!(!fx.root.join(".socket/vendor").exists());
+    }
+}
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
index 684c3454..8df8928d 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -881,14 +881,15 @@ fn leaf_version<'l>(bare: &str, leaf: &'l str) -> Option<&'l str> {
         .filter(|v| is_npm_semver(v))
 }
 
-/// A decoded `file` path of the vendored directory shape, with the name
-/// read from its `node_modules/` segments.
-pub(crate) fn parse_vendored_dir_path(path: &str) -> Option<VendoredPath> {
-    let segments: Vec<&str> = path.strip_prefix(VENDOR_NPM_PREFIX)?.split('/').collect();
-    let (uuid, scope, leaf, bare) = match segments.as_slice() {
-        [uuid, leaf, "node_modules", bare] => (*uuid, None, *leaf, *bare),
-        [uuid, scope, leaf, "node_modules", scope_again, bare] if scope == scope_again => {
-            (*uuid, Some(*scope), *leaf, *bare)
+/// `(name, version)` of a vendored directory leaf below the uuid level,
+/// `[@s/]<bare>-<version>/node_modules/[@s/]<bare>`, with the name read from
+/// its `node_modules/` segments.
+pub(crate) fn parse_vendored_dir_leaf(leaf: &str) -> Option<(String, String)> {
+    let segments: Vec<&str> = leaf.split('/').collect();
+    let (scope, leaf, bare) = match segments.as_slice() {
+        [leaf, "node_modules", bare] => (None, *leaf, *bare),
+        [scope, leaf, "node_modules", scope_again, bare] if scope == scope_again => {
+            (Some(*scope), *leaf, *bare)
         }
         _ => return None,
     };
@@ -897,13 +898,24 @@ pub(crate) fn parse_vendored_dir_path(path: &str) -> Option<VendoredPath> {
         Some(_) => return None,
         None => bare.to_string(),
     };
-    if !is_canonical_uuid(uuid) || !is_registry_package_name(&name) {
+    if !is_registry_package_name(&name) {
+        return None;
+    }
+    Some((name, leaf_version(bare, leaf)?.to_string()))
+}
+
+/// A decoded `file` path of the vendored directory shape, with the name
+/// read from its `node_modules/` segments.
+pub(crate) fn parse_vendored_dir_path(path: &str) -> Option<VendoredPath> {
+    let (uuid, leaf) = path.strip_prefix(VENDOR_NPM_PREFIX)?.split_once('/')?;
+    if !is_canonical_uuid(uuid) {
         return None;
     }
+    let (name, version) = parse_vendored_dir_leaf(leaf)?;
     Some(VendoredPath {
         uuid: uuid.to_string(),
-        version: leaf_version(bare, leaf)?.to_string(),
         name,
+        version,
         shape: VendoredShape::Dir,
     })
 }
@@ -941,10 +953,7 @@ pub(crate) fn parse_vendored_path(path: &str, name: &str) -> Option<VendoredPath
 /// `rel` of the vendored directory artifact:
 /// `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>/node_modules/<name>`.
 pub(crate) fn vendored_dir_rel(uuid: &str, name: &str, version: &str) -> String {
-    let leaf = match name.split_once('/') {
-        Some((scope, bare)) => format!("{scope}/{bare}-{version}"),
-        None => format!("{name}-{version}"),
-    };
+    let leaf = super::npm_common::pkg_rel_leaf(name, version);
     format!("{VENDOR_NPM_PREFIX}{uuid}/{leaf}/node_modules/{name}")
 }
 
diff --git a/crates/socket-patch-core/src/vex/discover/mod.rs b/crates/socket-patch-core/src/vex/discover/mod.rs
index fe3090b0..65006b6b 100644
--- a/crates/socket-patch-core/src/vex/discover/mod.rs
+++ b/crates/socket-patch-core/src/vex/discover/mod.rs
@@ -2904,6 +2904,7 @@ mod tests {
                     "npm-shrinkwrap.json",
                     "package-lock.json",
                     "pnpm-lock.yaml",
+                    "vlt-lock.json",
                     "yarn.lock",
                 ],
             ),
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/case.json
new file mode 100644
index 00000000..18633faa
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/case.json
@@ -0,0 +1,12 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": [
+    [
+      "    \"file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store react\": \"peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0\"",
+      "    \"file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store react\": \"peer 18.2.0 ·npm·react@18.2.0\""
+    ]
+  ]
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/package.json
new file mode 100644
index 00000000..48d192ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/vlt-lock.json
new file mode 100644
index 00000000..b6dcbd0f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias-selfref-peer/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file·. lp": "prod npm:left-pad@1.3.0 ·npm·left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. usx": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store react": "peer 18.2.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/case.json
new file mode 100644
index 00000000..6c9a0f29
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/package.json
new file mode 100644
index 00000000..2246ce1e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/vlt-lock.json
new file mode 100644
index 00000000..2ed10c88
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/alias/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§left-pad-1.3.0§node_modules§left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. usx": "prod npm:use-sync-external-store@1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. lp": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§left-pad-1.3.0§node_modules§left-pad",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/case.json
new file mode 100644
index 00000000..dead58d7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/is-number@7.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/package.json
new file mode 100644
index 00000000..b5085327
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..ad025b2a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/dev-edge/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§is-number-7.0.0§node_modules§is-number": [2,"is-number",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"]
+  },
+  "edges": {
+    "file·. is-number": "dev file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§is-number-7.0.0§node_modules§is-number",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/case.json
new file mode 100644
index 00000000..c98fb091
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/package.json
new file mode 100644
index 00000000..ee2d0698
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/packages/a/package.json
new file mode 100644
index 00000000..17bfc18d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/vlt-lock.json
new file mode 100644
index 00000000..9fe47ca6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/left-pad/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§left-pad-1.3.0§node_modules§left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§left-pad-1.3.0§node_modules§left-pad",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§left-pad-1.3.0§node_modules§left-pad",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/case.json
new file mode 100644
index 00000000..38c6aba5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/debug@4.3.4",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/packages/a/package.json
new file mode 100644
index 00000000..6506dc3d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/vlt-lock.json
new file mode 100644
index 00000000..135d5d40
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/member-only/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§debug-4.3.4§node_modules§debug": [0,"debug",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "workspace·packages§a debug": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§debug-4.3.4§node_modules§debug",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§debug-4.3.4§node_modules§debug ms": "prod 2.1.2 ·npm·ms@2.1.2"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/case.json
new file mode 100644
index 00000000..38775dc8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/escape-string-regexp@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/package.json
new file mode 100644
index 00000000..ef388d4c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..bd8b0641
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/optional-edge/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§escape-string-regexp-4.0.0§node_modules§escape-string-regexp": [1,"escape-string-regexp",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp",null,null,null,{  "engines": {    "node": ">=10"  }}]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§escape-string-regexp-4.0.0§node_modules§escape-string-regexp",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/case.json
new file mode 100644
index 00000000..5bd8da3a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/package.json
new file mode 100644
index 00000000..601ef7bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/vlt-lock.json
new file mode 100644
index 00000000..456ae0e5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/case.json
new file mode 100644
index 00000000..7358fac5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/package.json
new file mode 100644
index 00000000..cb3d0b8c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/vlt-lock.json
new file mode 100644
index 00000000..5a78cf34
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/scoped/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§@isaacs§string-locale-compare-1.1.0§node_modules§@isaacs§string-locale-compare": [0,"@isaacs/string-locale-compare",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare"]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. @isaacs/string-locale-compare": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§@isaacs§string-locale-compare-1.1.0§node_modules§@isaacs§string-locale-compare",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/case.json
new file mode 100644
index 00000000..3d937dc3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/semver@7.6.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/package.json
new file mode 100644
index 00000000..59ac3005
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/vlt-lock.json
new file mode 100644
index 00000000..c9f0e842
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/semver/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§semver-7.6.0§node_modules§semver": [0,"semver",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. semver": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§semver-7.6.0§node_modules§semver",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§semver-7.6.0§node_modules§semver lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/case.json
new file mode 100644
index 00000000..a0f4f351
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/supports-color@7.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/package.json
new file mode 100644
index 00000000..6796bab6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/vlt-lock.json
new file mode 100644
index 00000000..adf35d53
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/supports-color/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§supports-color-7.2.0§node_modules§supports-color": [0,"supports-color",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color"]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "file·. supports-color": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§supports-color-7.2.0§node_modules§supports-color",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§supports-color-7.2.0§node_modules§supports-color has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/transitive/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/transitive/case.json
new file mode 100644
index 00000000..6b2b1999
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/transitive/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/has-flag@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_vlt_transitive_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/package.json
new file mode 100644
index 00000000..25865836
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt-lock.json
new file mode 100644
index 00000000..b7777a5f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="]
+  },
+  "edges": {
+    "file·. lp": "prod npm:left-pad@1.3.0 ·npm·left-pad@1.3.0",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. usx": "prod npm:use-sync-external-store@1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt.json
new file mode 100644
index 00000000..0967ef42
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/alias/vlt.json
@@ -0,0 +1 @@
+{}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt-lock.json
new file mode 100644
index 00000000..c6096c93
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·@isaacs§string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "·npm·debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "·npm·escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "·npm·has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "·npm·is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "·npm·ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "·npm·ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "·npm·supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "·npm·yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="]
+  },
+  "edges": {
+    "file·. is-number": "dev 7.0.0 ·npm·is-number@7.0.0",
+    "file·. escape-string-regexp": "optional 4.0.0 ·npm·escape-string-regexp@4.0.0",
+    "file·. @isaacs/string-locale-compare": "prod 1.1.0 ·npm·@isaacs§string-locale-compare@1.1.0",
+    "file·. left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "file·. ms": "prod 2.1.3 ·npm·ms@2.1.3",
+    "file·. react": "prod 18.2.0 ·npm·react@18.2.0",
+    "file·. semver": "prod 7.6.0 ·npm·semver@7.6.0",
+    "file·. supports-color": "prod 7.2.0 ·npm·supports-color@7.2.0",
+    "file·. use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "workspace·packages§a debug": "prod 4.3.4 ·npm·debug@4.3.4",
+    "workspace·packages§a left-pad": "prod 1.3.0 ·npm·left-pad@1.3.0",
+    "·npm·debug@4.3.4 ms": "prod 2.1.2 ·npm·ms@2.1.2",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·lru-cache@6.0.0 yallist": "prod ^4.0.0 ·npm·yallist@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·semver@7.6.0 lru-cache": "prod ^6.0.0 ·npm·lru-cache@6.0.0",
+    "·npm·supports-color@7.2.0 has-flag": "prod ^4.0.0 ·npm·has-flag@4.0.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt.json
new file mode 100644
index 00000000..d6fc9d95
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/workspace/vlt.json
@@ -0,0 +1,3 @@
+{
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
new file mode 100644
index 00000000..0d80425a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_lock_entry_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/case.json
new file mode 100644
index 00000000..6c9a0f29
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/package.json
new file mode 100644
index 00000000..2246ce1e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/vlt-lock.json
new file mode 100644
index 00000000..416505cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/case.json
new file mode 100644
index 00000000..dead58d7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/is-number@7.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/package.json
new file mode 100644
index 00000000..b5085327
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..199e129a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/dev-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number": [2,"is-number",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"]
+  },
+  "edges": {
+    "file~_d is-number": "dev file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/case.json
new file mode 100644
index 00000000..c98fb091
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/package.json
new file mode 100644
index 00000000..ee2d0698
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/packages/a/package.json
new file mode 100644
index 00000000..17bfc18d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/vlt-lock.json
new file mode 100644
index 00000000..60206682
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/left-pad/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/case.json
new file mode 100644
index 00000000..38c6aba5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/debug@4.3.4",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/packages/a/package.json
new file mode 100644
index 00000000..6506dc3d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/vlt-lock.json
new file mode 100644
index 00000000..8ea8f754
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/member-only/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug": [0,"debug",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a debug": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug ms": "prod 2.1.2 ~npm~ms@2.1.2"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/case.json
new file mode 100644
index 00000000..38775dc8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/escape-string-regexp@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/package.json
new file mode 100644
index 00000000..ef388d4c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..f505e21c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/optional-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp": [1,"escape-string-regexp",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp",null,null,null,{  "engines": {    "node": ">=10"  }}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
new file mode 100644
index 00000000..57104202
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_lock_entry_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/case.json
new file mode 100644
index 00000000..7358fac5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/package.json
new file mode 100644
index 00000000..cb3d0b8c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/vlt-lock.json
new file mode 100644
index 00000000..29b490cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/scoped/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare": [0,"@isaacs/string-locale-compare",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d @isaacs/string-locale-compare": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/case.json
new file mode 100644
index 00000000..3d937dc3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/semver@7.6.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/package.json
new file mode 100644
index 00000000..59ac3005
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/vlt-lock.json
new file mode 100644
index 00000000..41939d03
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/semver/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver": [0,"semver",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d semver": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/case.json
new file mode 100644
index 00000000..a0f4f351
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/supports-color@7.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/package.json
new file mode 100644
index 00000000..6796bab6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/vlt-lock.json
new file mode 100644
index 00000000..aca30652
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/supports-color/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color": [0,"supports-color",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d supports-color": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/transitive/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/transitive/case.json
new file mode 100644
index 00000000..6b2b1999
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/transitive/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/has-flag@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_vlt_transitive_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/package.json
new file mode 100644
index 00000000..25865836
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt-lock.json
new file mode 100644
index 00000000..7c3ca797
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt.json
new file mode 100644
index 00000000..edaf227f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/alias/vlt.json
@@ -0,0 +1,7 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt-lock.json
new file mode 100644
index 00000000..b786105f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/workspace/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
new file mode 100644
index 00000000..0d80425a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_lock_entry_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/case.json
new file mode 100644
index 00000000..6c9a0f29
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/package.json
new file mode 100644
index 00000000..2246ce1e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/vlt-lock.json
new file mode 100644
index 00000000..416505cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d lp": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/case.json
new file mode 100644
index 00000000..dead58d7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/is-number@7.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/package.json
new file mode 100644
index 00000000..b5085327
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..199e129a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/dev-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number": [2,"is-number",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"]
+  },
+  "edges": {
+    "file~_d is-number": "dev file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/case.json
new file mode 100644
index 00000000..c98fb091
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/package.json
new file mode 100644
index 00000000..ee2d0698
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/packages/a/package.json
new file mode 100644
index 00000000..17bfc18d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/vlt-lock.json
new file mode 100644
index 00000000..60206682
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/left-pad/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/case.json
new file mode 100644
index 00000000..38c6aba5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/debug@4.3.4",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/packages/a/package.json
new file mode 100644
index 00000000..6506dc3d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/vlt-lock.json
new file mode 100644
index 00000000..8ea8f754
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/member-only/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug": [0,"debug",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a debug": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug ms": "prod 2.1.2 ~npm~ms@2.1.2"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/case.json
new file mode 100644
index 00000000..38775dc8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/escape-string-regexp@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/package.json
new file mode 100644
index 00000000..ef388d4c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..f505e21c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/optional-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp": [1,"escape-string-regexp",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp",null,null,null,{  "engines": {    "node": ">=10"  }}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
new file mode 100644
index 00000000..57104202
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_lock_entry_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/case.json
new file mode 100644
index 00000000..7358fac5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/package.json
new file mode 100644
index 00000000..cb3d0b8c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/vlt-lock.json
new file mode 100644
index 00000000..29b490cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/scoped/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare": [0,"@isaacs/string-locale-compare",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d @isaacs/string-locale-compare": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/case.json
new file mode 100644
index 00000000..3d937dc3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/semver@7.6.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/package.json
new file mode 100644
index 00000000..59ac3005
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/vlt-lock.json
new file mode 100644
index 00000000..41939d03
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/semver/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver": [0,"semver",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d semver": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/case.json
new file mode 100644
index 00000000..a0f4f351
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/supports-color@7.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/package.json
new file mode 100644
index 00000000..6796bab6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/vlt-lock.json
new file mode 100644
index 00000000..aca30652
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/supports-color/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color": [0,"supports-color",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "file~_d supports-color": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/transitive/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/transitive/case.json
new file mode 100644
index 00000000..6b2b1999
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/transitive/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/has-flag@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_vlt_transitive_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/package.json
new file mode 100644
index 00000000..25865836
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt-lock.json
new file mode 100644
index 00000000..7c3ca797
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt.json
new file mode 100644
index 00000000..edaf227f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/alias/vlt.json
@@ -0,0 +1,7 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt-lock.json
new file mode 100644
index 00000000..b786105f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/workspace/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
new file mode 100755
index 00000000..ab67f0ad
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
@@ -0,0 +1,141 @@
+#!/bin/bash
+# Rebuild the vendored-wiring fixtures with real vlt (the byte-stability
+# oracle of tests/vlt_locks.rs). For each vlt version and target:
+#   1. a cold `vlt install` of the project writes input/vlt-lock.json;
+#   2. surgery.mjs wires the target to its D19 directory artifact;
+#   3. `vlt ci` from a clean node_modules writes expected/vlt-lock.json.
+# Inputs live once per project under <version>/projects/<project>/; each
+# <version>/cases/<case>/ holds case.json and, unless refused, expected/.
+# A lock ci rewrites is recorded in case.json `ciChurn` (pairs of the line
+# surgery wrote and the line vlt wrote); the expected lock is then taken
+# after a second `ci`, which must leave it unchanged.
+#
+# usage: VLT_BIN_DIR=<dir holding <version>/node_modules/vlt/vlt.js> ./regenerate.sh
+set -euo pipefail
+export LANG=C LC_ALL=C VLT_TELEMETRY=0 DO_NOT_TRACK=1 CI=1 NO_COLOR=1
+unset VLT_STORE_LINKER
+HERE=$(cd "$(dirname "$0")" && pwd)
+: "${VLT_BIN_DIR:?set VLT_BIN_DIR}"
+WORK=$(mktemp -d)
+trap 'rm -rf "$WORK"' EXIT
+UUID=11111111-2222-4333-8444-555555555555
+VERSIONS=${VERSIONS:-"1.2.0 1.0.10 1.0.0-rc.14"}
+
+vlt() {
+  local version=$1 xdg=$2
+  shift 2
+  mkdir -p "$xdg"/{cache,config,data,state,run}
+  XDG_CACHE_HOME=$xdg/cache XDG_CONFIG_HOME=$xdg/config XDG_DATA_HOME=$xdg/data \
+    XDG_STATE_HOME=$xdg/state XDG_RUNTIME_DIR=$xdg/run VLT_CACHE=$xdg/cache/vlt \
+    node --no-warnings "$VLT_BIN_DIR/$version/node_modules/vlt/vlt.js" "$@" </dev/null
+}
+
+json() { node -e 'process.stdout.write(JSON.stringify(JSON.parse(process.argv[1]), null, 2) + "\n")' "$1"; }
+
+write_project() {
+  local project=$1 version=$2 dir=$3
+  local cfg=''
+  case $version in 1.*-rc.*) ;; 1.*) cfg='"config":{"registries":{"npm":"https://registry.npmjs.org/"}}' ;; esac
+  mkdir -p "$dir"
+  case $project in
+    workspace)
+      mkdir -p "$dir/packages/a"
+      json "{${cfg:+$cfg,}\"workspaces\":\"packages/*\"}" >"$dir/vlt.json"
+      json '{"name":"root","version":"1.0.0","dependencies":{"left-pad":"1.3.0","ms":"2.1.3","supports-color":"7.2.0","@isaacs/string-locale-compare":"1.1.0","semver":"7.6.0","react":"18.2.0","use-sync-external-store":"1.2.0"},"devDependencies":{"is-number":"7.0.0"},"optionalDependencies":{"escape-string-regexp":"4.0.0"}}' >"$dir/package.json"
+      json '{"name":"a","version":"1.0.0","dependencies":{"left-pad":"1.3.0","debug":"4.3.4"}}' >"$dir/packages/a/package.json"
+      ;;
+    alias)
+      json "{${cfg}}" >"$dir/vlt.json"
+      json '{"name":"root","version":"1.0.0","dependencies":{"lp":"npm:left-pad@1.3.0","react":"18.2.0","usx":"npm:use-sync-external-store@1.2.0"}}' >"$dir/package.json"
+      ;;
+  esac
+}
+
+# case name, project, target
+CASES="left-pad:workspace:left-pad@1.3.0
+supports-color:workspace:supports-color@7.2.0
+scoped:workspace:@isaacs/string-locale-compare@1.1.0
+semver:workspace:semver@7.6.0
+dev-edge:workspace:is-number@7.0.0
+optional-edge:workspace:escape-string-regexp@4.0.0
+member-only:workspace:debug@4.3.4
+peer:workspace:use-sync-external-store@1.2.0
+transitive:workspace:has-flag@4.0.0
+alias:alias:left-pad@1.3.0
+alias-selfref-peer:alias:use-sync-external-store@1.2.0"
+
+copy_inputs() {
+  local from=$1 to=$2
+  mkdir -p "$to"
+  (cd "$from" && find . -name node_modules -prune -o -type f \( -name 'vlt-lock.json' -o -name 'vlt.json' -o -name 'package.json' \) -print) |
+    while read -r f; do mkdir -p "$to/$(dirname "$f")"; cp "$from/$f" "$to/$f"; done
+}
+
+for version in $VERSIONS; do
+  for project in workspace alias; do
+    base=$WORK/$version/$project
+    write_project "$project" "$version" "$base"
+    (cd "$base" && vlt "$version" "$WORK/xdg-$version" install >"$WORK/$version-$project-install.log" 2>&1)
+    rm -rf "$HERE/$version/projects/$project"
+    copy_inputs "$base" "$HERE/$version/projects/$project"
+  done
+  echo "$CASES" | while IFS=: read -r case project target; do
+    base=$WORK/$version/$project
+    out=$HERE/$version/cases/$case
+    rm -rf "$out"
+    mkdir -p "$out"
+    run=$WORK/$version/run-$case
+    copy_inputs "$base" "$run"
+    verdict=$(node "$HERE/surgery.mjs" "$run" "$target" "$UUID")
+    refusal=$(node -e 'const v=JSON.parse(process.argv[1]); process.stdout.write(v.refusal ?? "")' "$verdict")
+    if [ -n "$refusal" ]; then
+      json "{\"project\":\"$project\",\"purl\":\"pkg:npm/$target\",\"uuid\":\"$UUID\",\"refusal\":\"$refusal\"}" >"$out/case.json"
+      echo "$version $case: refused $refusal"
+      continue
+    fi
+    rel=$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).rel)' "$verdict")
+    name=${target%@*}
+    installed=$(node -e '
+      const fs = require("fs"), path = require("path");
+      const [store, name, version] = process.argv.slice(1);
+      for (const id of fs.readdirSync(store)) {
+        const dir = path.join(store, id, "node_modules", name);
+        try {
+          if (JSON.parse(fs.readFileSync(path.join(dir, "package.json"), "utf8")).version === version) {
+            process.stdout.write(dir);
+            process.exit(0);
+          }
+        } catch {}
+      }
+      process.exit(1);
+    ' "$base/node_modules/.vlt" "$name" "${target##*@}")
+    mkdir -p "$run/$(dirname "$rel")"
+    cp -R "$installed" "$run/$rel"
+    rm -rf "$run/$rel/node_modules"
+    node -e 'const f=process.argv[1]; const d=JSON.parse(require("fs").readFileSync(f,"utf8")); delete d.devDependencies; require("fs").writeFileSync(f, JSON.stringify(d,null,2)+"\n")' "$run/$rel/package.json"
+    printf '!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n' >"$run/.socket/vendor/npm/$UUID/.gitignore"
+    printf '* -text\n' >"$run/.socket/vendor/npm/$UUID/.gitattributes"
+    cp "$run/vlt-lock.json" "$WORK/surgery.json"
+    (cd "$run" && vlt "$version" "$WORK/xdg-$version" ci >"$WORK/$version-$case-ci.log" 2>&1)
+    churn='[]'
+    if ! cmp -s "$WORK/surgery.json" "$run/vlt-lock.json"; then
+      churn=$(node -e '
+        const fs = require("fs");
+        const a = fs.readFileSync(process.argv[1], "utf8").split("\n");
+        const b = fs.readFileSync(process.argv[2], "utf8").split("\n");
+        if (a.length !== b.length) { console.error("line count changed"); process.exit(1) }
+        const pairs = a.map((l, i) => [l, b[i]]).filter(([x, y]) => x !== y);
+        process.stdout.write(JSON.stringify(pairs));
+      ' "$WORK/surgery.json" "$run/vlt-lock.json")
+      cp "$run/vlt-lock.json" "$WORK/ci1.json"
+      (cd "$run" && rm -rf node_modules packages/a/node_modules && vlt "$version" "$WORK/xdg-$version" ci >"$WORK/$version-$case-ci2.log" 2>&1)
+      cmp -s "$WORK/ci1.json" "$run/vlt-lock.json" || { echo "$version $case: second ci changed the lock" >&2; exit 1; }
+      echo "$version $case: ci churn $churn"
+    else
+      echo "$version $case: byte-stable"
+    fi
+    json "{\"project\":\"$project\",\"purl\":\"pkg:npm/$target\",\"uuid\":\"$UUID\",\"refusal\":null,\"ciChurn\":$churn}" >"$out/case.json"
+    copy_inputs "$run" "$out/expected"
+    rm -f "$out/expected/vlt.json"
+  done
+done
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs
new file mode 100644
index 00000000..65e2f9d4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs
@@ -0,0 +1,242 @@
+// Independent JS reading of DESIGN §4.5 (vendored vlt wiring of a direct
+// target), used only to build the byte-stability fixtures: its output is
+// handed to real `vlt ci`, and the lock vlt writes back is the expected
+// lock. Orders with Node's own `localeCompare(…, 'en')`, like vlt.
+//
+// usage: node surgery.mjs <project> <name@version> <uuid>
+// prints {"refusal": code, "detail": …} or {"rel": …, "fileId": …}
+import fs from 'node:fs'
+import path from 'node:path'
+
+const [proj, target, uuid] = process.argv.slice(2)
+const at = target.lastIndexOf('@')
+const name = target.slice(0, at)
+const version = target.slice(at + 1)
+
+const lockPath = path.join(proj, 'vlt-lock.json')
+const text = fs.readFileSync(lockPath, 'utf8')
+const lock = JSON.parse(text)
+const v1 = lock.lockfileVersion === 1
+const D = v1 ? '~' : '·'
+const options = lock.options ?? {}
+
+const TILDE_ESC = {
+  _: '__', '+': '_p', '\\': '_b', ':': '_c', '~': '_t', '<': '_l', '>': '_g',
+  '"': '_q', '|': '_i', '?': '_m', '*': '_a', ' ': '_s',
+}
+const TILDE_UNESC = Object.fromEntries(
+  Object.entries(TILDE_ESC).map(([k, v]) => [v, k]),
+)
+const enc = s => {
+  if (!v1) {
+    return encodeURIComponent(s).replaceAll('%40', '@').replaceAll('%2F', '§')
+  }
+  const out = [...s].map(c => (c === '/' ? '+' : (TILDE_ESC[c] ?? c))).join('')
+  return out.endsWith('.') ? out.slice(0, -1) + '_d' : out
+}
+const dec = s => {
+  if (!v1) {
+    return decodeURIComponent(s.replaceAll('@', '%40').replaceAll('§', '%2F'))
+  }
+  let out = ''
+  for (let i = 0; i < s.length; i++) {
+    if (s[i] === '_') {
+      const two = s.slice(i, i + 2)
+      if (two === '_d' && i + 2 === s.length) {
+        out += '.'
+      } else if (TILDE_UNESC[two]) {
+        out += TILDE_UNESC[two]
+      } else {
+        throw new Error('undecodable ' + s)
+      }
+      i++
+    } else {
+      out += s[i] === '+' ? '/' : s[i]
+    }
+  }
+  return out
+}
+
+const lines = text.split('\n')
+const block = header => {
+  const open = lines.findIndex(l => l.replace(/\r$/, '') === `  "${header}": {`)
+  let close = open + 1
+  while (!/^  },?\r?$/.test(lines[close])) close++
+  return [open, close]
+}
+const ENTRY = /^    ("(?:[^"\\]|\\.)*"): (.*?)(,?)(\r?)$/
+const entries = ([open, close]) =>
+  lines.slice(open + 1, close).map(l => {
+    const m = ENTRY.exec(l)
+    return { key: JSON.parse(m[1]), val: m[2], cr: m[4] }
+  })
+const [nOpen, nClose] = block('nodes')
+const [eOpen, eClose] = block('edges')
+let nodes = entries([nOpen, nClose])
+let edges = entries([eOpen, eClose])
+
+const refuse = (code, detail) => {
+  console.log(JSON.stringify({ refusal: code, detail }))
+  process.exit(0)
+}
+
+const registryOf = key => {
+  const parts = key.split(D)
+  if (parts[0] !== '' || parts.length < 3 || parts.length > 4) return null
+  const second = dec(parts[2])
+  const i = second.lastIndexOf('@')
+  return {
+    segment: dec(parts[1]),
+    name: second.slice(0, i),
+    version: second.slice(i + 1),
+    extra: parts[3],
+  }
+}
+const withSlash = u => (u.endsWith('/') ? u : u + '/')
+const isDefault = seg => {
+  const alias = typeof options['default-registry-alias'] === 'string'
+    ? options['default-registry-alias'] : 'npm'
+  if (seg === '' || seg === alias) return true
+  const reg = options.registry
+  return typeof reg === 'string' && /^https?:/.test(seg) &&
+    withSlash(seg) === withSlash(reg)
+}
+const instances = nodes
+  .map(n => ({ n, r: registryOf(n.key) }))
+  .filter(({ r }) => r && r.name === name && r.version === version)
+if (instances.some(({ r }) => !isDefault(r.segment))) {
+  refuse('vendor_lock_entry_unsupported', "not from vlt's default registry")
+}
+if (instances.length > 1 || instances.some(({ r }) => r.extra !== undefined)) {
+  refuse('vendor_lock_entry_unsupported', 'peer/modifier variants; use --mode hosted')
+}
+if (instances.length === 0) refuse('vendor_lock_entry_not_found', `${target}`)
+const reg = instances[0].n
+
+const isImporter = id =>
+  id === 'file~_d' || id === 'file·.' ||
+  (id.startsWith('workspace~') && id.length > 10) ||
+  (id.startsWith('workspace·') && id.length > 10)
+const parseEdge = e => {
+  const from = e.key.slice(0, e.key.indexOf(' '))
+  const dep = e.key.slice(e.key.indexOf(' ') + 1)
+  const v = JSON.parse(e.val)
+  const type = v.slice(0, v.indexOf(' '))
+  const to = v.slice(v.lastIndexOf(' ') + 1)
+  const spec = v.slice(v.indexOf(' ') + 1, v.lastIndexOf(' '))
+  return { from, dep, type, spec, to }
+}
+const inbound = edges.filter(e => parseEdge(e).to === reg.key)
+for (const e of inbound) {
+  const p = parseEdge(e)
+  if (!isImporter(p.from)) refuse('vendor_vlt_transitive_unsupported', e.key)
+  if (!['prod', 'dev', 'optional'].includes(p.type)) {
+    refuse('vendor_lock_entry_unsupported', 'peer edge')
+  }
+}
+
+const scope = name.startsWith('@') ? name.slice(0, name.indexOf('/') + 1) : ''
+const bare = name.slice(scope.length)
+const rel = `.socket/vendor/npm/${uuid}/${scope}${bare}-${version}/node_modules/${name}`
+const fileId = 'file' + D + enc(rel)
+
+const tuple = JSON.parse(reg.val)
+const tail = reg.val.slice(1, -1)
+const elems = []
+{
+  let depth = 0, inStr = false, start = 0
+  for (let i = 0; i < tail.length; i++) {
+    const c = tail[i]
+    if (inStr) {
+      if (c === '\\') i++
+      else if (c === '"') inStr = false
+    } else if (c === '"') inStr = true
+    else if (c === '[' || c === '{') depth++
+    else if (c === ']' || c === '}') depth--
+    else if (c === ',' && depth === 0) {
+      elems.push(tail.slice(start, i))
+      start = i + 1
+    }
+  }
+  elems.push(tail.slice(start))
+}
+if (elems.length !== tuple.length) throw new Error('tuple split')
+const fileElems = [elems[0], elems[1], 'null', JSON.stringify(rel), ...elems.slice(4)]
+const newNode = { key: fileId, val: `[${fileElems.join(',')}]`, cr: reg.cr }
+
+const pkgs = new Map()
+const readPkg = dir => {
+  if (!pkgs.has(dir)) {
+    const file = path.join(proj, dir, 'package.json')
+    pkgs.set(dir, { file, json: JSON.parse(fs.readFileSync(file, 'utf8')) })
+  }
+  return pkgs.get(dir)
+}
+const FIELD = { prod: 'dependencies', dev: 'devDependencies', optional: 'optionalDependencies' }
+const pkgEdits = []
+const importerEdges = []
+for (const e of inbound) {
+  const p = parseEdge(e)
+  const dir = p.from.startsWith('workspace') ? dec(p.from.slice(10)) : ''
+  const r = path.posix.relative(dir || '.', rel)
+  const spec = 'file:' + (r.startsWith('../') ? r : './' + r)
+  const pkg = readPkg(dir)
+  const declared = ['dependencies', 'devDependencies', 'optionalDependencies']
+    .filter(f => pkg.json[f] && Object.hasOwn(pkg.json[f], p.dep))
+  if (declared.length > 1) {
+    refuse('vendor_lock_entry_unsupported', 'declared in multiple dependency fields')
+  }
+  const field = FIELD[p.type]
+  if (pkg.json[field]?.[p.dep] !== p.spec) refuse('vendor_vlt_lock_out_of_sync', e.key)
+  pkgEdits.push({ dir, field, dep: p.dep, spec, pkg })
+  importerEdges.push({
+    key: e.key,
+    val: JSON.stringify(`${p.type} ${spec} ${fileId}`),
+    cr: e.cr,
+  })
+}
+pkgEdits.sort((a, b) =>
+  a.dir < b.dir ? -1 : a.dir > b.dir ? 1
+    : a.field < b.field ? -1 : a.field > b.field ? 1
+      : a.dep < b.dep ? -1 : a.dep > b.dep ? 1 : 0)
+const outgoing = edges
+  .filter(e => parseEdge(e).from === reg.key)
+  .map(e => ({ key: fileId + e.key.slice(reg.key.length), val: e.val, cr: e.cr }))
+
+const touchedEdgeKeys = new Set([...inbound, ...edges.filter(e => parseEdge(e).from === reg.key)]
+  .map(e => e.key))
+nodes = nodes.filter(n => n.key !== reg.key)
+edges = edges.filter(e => !touchedEdgeKeys.has(e.key))
+
+const coll = (a, b) => a.localeCompare(b, 'en')
+const edgeCmp = (a, b) => {
+  const A = parseEdge(a)
+  const B = parseEdge(b)
+  const toA = A.to === 'MISSING' ? '' : A.to
+  const toB = B.to === 'MISSING' ? '' : B.to
+  return (Number(isImporter(B.from)) - Number(isImporter(A.from))) ||
+    coll(A.from, B.from) || coll(A.type, B.type) || coll(toA, toB)
+}
+const insert = (list, items, cmp) => {
+  for (const it of items) {
+    let i = list.findIndex(x => cmp(it, x) < 0)
+    if (i < 0) i = list.length
+    list.splice(i, 0, it)
+  }
+  return list
+}
+nodes = insert(nodes, [newNode], (a, b) => coll(a.key, b.key))
+edges = insert(edges, [...importerEdges, ...outgoing], edgeCmp)
+const render = list =>
+  list.map((x, i) => `    ${JSON.stringify(x.key)}: ${x.val}${i < list.length - 1 ? ',' : ''}${x.cr}`)
+const out = [
+  ...lines.slice(0, nOpen + 1), ...render(nodes),
+  ...lines.slice(nClose, eOpen + 1), ...render(edges),
+  ...lines.slice(eClose),
+]
+fs.writeFileSync(lockPath, out.join('\n'))
+for (const { field, dep, spec, pkg } of pkgEdits) pkg.json[field][dep] = spec
+for (const pkg of pkgs.values()) {
+  fs.writeFileSync(pkg.file, JSON.stringify(pkg.json, null, 2) + '\n')
+}
+console.log(JSON.stringify({ rel, fileId }))
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index 151ae319..82fdb17d 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -3,13 +3,26 @@
 //! change, and the output stays in vlt's own canonical serialization, so
 //! vlt's next save leaves it byte-identical. A CRLF checkout of each capture
 //! gets the same edits, with every line keeping its `\r`.
+//!
+//! The vendored wiring runs against `tests/fixtures/vendor/npm/vlt/`, whose
+//! expected locks real vlt wrote (`regenerate.sh`: an independent surgery,
+//! then `vlt ci`), so byte equality proves `vlt ci` keeps the wired lock
+//! byte-stable; the revert gives the pre-vendor bytes back. The lock
+//! inventory reads the same captures.
 
 use std::collections::BTreeMap;
 use std::fs;
 use std::path::{Path, PathBuf};
 
 use serde_json::Value;
+use socket_patch_core::hash::git_sha256::compute_git_sha256_from_bytes;
+use socket_patch_core::manifest::schema::{PatchFileInfo, PatchRecord};
+use socket_patch_core::patch::apply::PatchSources;
 use socket_patch_core::patch::redirect::{rewrite_registry_redirect, DepOverride};
+use socket_patch_core::vendor::lock_inventory::{inventory_project, LockIntegrity};
+use socket_patch_core::vendor::npm_flavor::{revert_npm_any, vendor_npm_any};
+use socket_patch_core::vendor::VendorOutcome;
+use socket_patch_core::vendor::{save_state, VendorEntry, VendorState};
 
 const TOKEN: &str = "11111111-1111-1111-1111-111111111111";
 
@@ -361,3 +374,496 @@ fn hosted_rewrite_changes_exactly_the_target_slots() {
         assert_eq!(crlf_result.edits, result.edits, "{version}: CRLF");
     }
 }
+
+// ── vendored wiring ──────────────────────────────────────────────────────
+
+const ORIGINAL_JS: &[u8] = b"module.exports = 'orig';\n";
+const PATCHED_JS: &[u8] = b"module.exports = 'patched';\n";
+
+fn vendor_root() -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/vendor/npm/vlt")
+}
+
+struct Case {
+    version: String,
+    name: String,
+    dir: PathBuf,
+    project: PathBuf,
+    purl: String,
+    uuid: String,
+    refusal: Option<String>,
+    churn: Vec<(String, String)>,
+}
+
+fn cases() -> Vec<Case> {
+    let mut out = Vec::new();
+    for version in ["1.2.0", "1.0.10", "1.0.0-rc.14"] {
+        let root = vendor_root().join(version);
+        let mut names: Vec<String> = fs::read_dir(root.join("cases"))
+            .unwrap()
+            .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
+            .collect();
+        names.sort();
+        for name in names {
+            let dir = root.join("cases").join(&name);
+            let case: Value =
+                serde_json::from_str(&fs::read_to_string(dir.join("case.json")).unwrap()).unwrap();
+            let churn = case["ciChurn"]
+                .as_array()
+                .map(|pairs| {
+                    pairs
+                        .iter()
+                        .map(|p| {
+                            (
+                                p[0].as_str().unwrap().to_string(),
+                                p[1].as_str().unwrap().to_string(),
+                            )
+                        })
+                        .collect()
+                })
+                .unwrap_or_default();
+            out.push(Case {
+                version: version.to_string(),
+                project: root
+                    .join("projects")
+                    .join(case["project"].as_str().unwrap()),
+                purl: case["purl"].as_str().unwrap().to_string(),
+                uuid: case["uuid"].as_str().unwrap().to_string(),
+                refusal: case["refusal"].as_str().map(str::to_string),
+                churn,
+                name,
+                dir,
+            });
+        }
+    }
+    out
+}
+
+/// Every file under `dir`, relative, forward-slashed.
+fn tree(dir: &Path) -> BTreeMap<String, Vec<u8>> {
+    let mut out = BTreeMap::new();
+    let mut stack = vec![dir.to_path_buf()];
+    while let Some(d) = stack.pop() {
+        for entry in fs::read_dir(&d).unwrap() {
+            let path = entry.unwrap().path();
+            if path.is_dir() {
+                stack.push(path);
+            } else {
+                let rel = path
+                    .strip_prefix(dir)
+                    .unwrap()
+                    .to_string_lossy()
+                    .replace('\\', "/");
+                out.insert(rel, fs::read(&path).unwrap());
+            }
+        }
+    }
+    out
+}
+
+fn write_tree(root: &Path, files: &BTreeMap<String, Vec<u8>>) {
+    for (rel, bytes) in files {
+        let path = root.join(rel);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(path, bytes).unwrap();
+    }
+}
+
+fn name_version(purl: &str) -> (String, String) {
+    let rest = purl.strip_prefix("pkg:npm/").unwrap();
+    let at = rest.rfind('@').unwrap();
+    (rest[..at].to_string(), rest[at + 1..].to_string())
+}
+
+fn patch_record(uuid: &str) -> PatchRecord {
+    let mut files = std::collections::HashMap::new();
+    files.insert(
+        "package/index.js".to_string(),
+        PatchFileInfo {
+            before_hash: compute_git_sha256_from_bytes(ORIGINAL_JS),
+            after_hash: compute_git_sha256_from_bytes(PATCHED_JS),
+        },
+    );
+    PatchRecord {
+        uuid: uuid.to_string(),
+        exported_at: String::new(),
+        files,
+        vulnerabilities: std::collections::HashMap::new(),
+        description: String::new(),
+        license: String::new(),
+        tier: String::new(),
+    }
+}
+
+/// A project staged from the case's inputs, an installed copy of the target
+/// (with devDependencies, which the artifact must drop) and the patch blob.
+struct Staged {
+    _tmp: tempfile::TempDir,
+    root: PathBuf,
+    installed: PathBuf,
+    blobs: PathBuf,
+}
+
+fn stage(case: &Case, crlf: bool) -> Staged {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path().join("project");
+    let mut inputs = tree(&case.project);
+    if crlf {
+        let lock = String::from_utf8(inputs["vlt-lock.json"].clone()).unwrap();
+        inputs.insert(
+            "vlt-lock.json".into(),
+            lock.replace('\n', "\r\n").into_bytes(),
+        );
+    }
+    write_tree(&root, &inputs);
+    let (name, version) = name_version(&case.purl);
+    let installed = tmp.path().join("installed").join(&name);
+    fs::create_dir_all(&installed).unwrap();
+    fs::write(
+        installed.join("package.json"),
+        format!(
+            "{{\n  \"name\": \"{name}\",\n  \"version\": \"{version}\",\n  \"devDependencies\": {{\n    \"tap\": \"1.0.0\"\n  }},\n  \"main\": \"index.js\"\n}}\n"
+        ),
+    )
+    .unwrap();
+    fs::write(installed.join("index.js"), ORIGINAL_JS).unwrap();
+    let blobs = tmp.path().join("blobs");
+    fs::create_dir_all(&blobs).unwrap();
+    fs::write(
+        blobs.join(compute_git_sha256_from_bytes(PATCHED_JS)),
+        PATCHED_JS,
+    )
+    .unwrap();
+    Staged {
+        _tmp: tmp,
+        root,
+        installed,
+        blobs,
+    }
+}
+
+async fn vendor(case: &Case, staged: &Staged) -> VendorOutcome {
+    let sources = PatchSources {
+        blobs_path: &staged.blobs,
+        packages_path: None,
+        diffs_path: None,
+        mem_blobs: None,
+    };
+    vendor_npm_any(
+        &case.purl,
+        &staged.installed,
+        &staged.root,
+        &patch_record(&case.uuid),
+        &sources,
+        "2026-09-26T00:00:00Z",
+        false,
+        false,
+        None,
+    )
+    .await
+}
+
+fn apply_churn(lock: &str, churn: &[(String, String)]) -> String {
+    let mut lines: Vec<String> = lock.split('\n').map(str::to_string).collect();
+    for (from, to) in churn {
+        let at = lines
+            .iter()
+            .position(|l| l.trim_end_matches(',') == from.trim_end_matches(','))
+            .unwrap_or_else(|| panic!("no churned line {from}"));
+        let comma = if lines[at].ends_with(',') { "," } else { "" };
+        lines[at] = format!("{}{comma}", to.trim_end_matches(','));
+    }
+    lines.join("\n")
+}
+
+fn expected_files(case: &Case) -> BTreeMap<String, Vec<u8>> {
+    let mut want = tree(&case.project);
+    want.extend(tree(&case.dir.join("expected")));
+    want
+}
+
+fn project_files(root: &Path) -> BTreeMap<String, Vec<u8>> {
+    tree(root)
+        .into_iter()
+        .filter(|(rel, _)| !rel.starts_with(".socket/"))
+        .collect()
+}
+
+fn expect_done(outcome: VendorOutcome, label: &str) -> VendorEntry {
+    let VendorOutcome::Done {
+        result,
+        entry,
+        warnings,
+    } = outcome
+    else {
+        panic!("{label}: expected Done, got {outcome:?}");
+    };
+    assert!(result.success, "{label}: {:?}", result.error);
+    assert!(
+        warnings
+            .iter()
+            .all(|w| w.code != "vendor_multiple_lockfiles"),
+        "{label}: {warnings:?}"
+    );
+    entry.unwrap_or_else(|| panic!("{label}: no ledger entry"))
+}
+
+#[test]
+fn every_vendored_case_is_a_regenerated_fixture() {
+    let all = cases();
+    assert_eq!(all.len(), 33, "11 cases on each of 3 vlt versions");
+    for case in &all {
+        assert_eq!(
+            case.refusal.is_none(),
+            case.dir.join("expected/vlt-lock.json").is_file(),
+            "{} {}",
+            case.version,
+            case.name
+        );
+    }
+}
+
+#[tokio::test]
+async fn vendored_wiring_matches_what_vlt_ci_writes_and_reverts_byte_exact() {
+    for case in cases() {
+        let label = format!("{} {}", case.version, case.name);
+        let staged = stage(&case, false);
+        let before = project_files(&staged.root);
+        let outcome = vendor(&case, &staged).await;
+        if let Some(code) = &case.refusal {
+            let VendorOutcome::Refused { code: got, detail } = outcome else {
+                panic!("{label}: expected {code}, got {outcome:?}");
+            };
+            assert_eq!(got, code.as_str(), "{label}: {detail}");
+            assert_eq!(
+                project_files(&staged.root),
+                before,
+                "{label}: refusal writes nothing"
+            );
+            assert!(!staged.root.join(".socket").exists(), "{label}");
+            continue;
+        }
+        let entry = expect_done(outcome, &label);
+        let mut got = project_files(&staged.root);
+        let lock = String::from_utf8(got["vlt-lock.json"].clone()).unwrap();
+        got.insert(
+            "vlt-lock.json".into(),
+            apply_churn(&lock, &case.churn).into_bytes(),
+        );
+        let want = expected_files(&case);
+        for (rel, bytes) in &want {
+            assert_eq!(
+                String::from_utf8_lossy(&got[rel]),
+                String::from_utf8_lossy(bytes),
+                "{label}: {rel}"
+            );
+        }
+        assert_eq!(got.len(), want.len(), "{label}");
+
+        let (name, version) = name_version(&case.purl);
+        let rel_dir = entry.artifact.path.clone();
+        assert!(
+            rel_dir.ends_with(&format!("/node_modules/{name}")),
+            "{label}: {rel_dir}"
+        );
+        assert_eq!(entry.flavor.as_deref(), Some("vlt"), "{label}");
+        let inventory = entry.artifact.file_inventory.clone().expect("inventory");
+        assert_eq!(
+            inventory.keys().cloned().collect::<Vec<_>>(),
+            ["index.js", "package.json"],
+            "{label}"
+        );
+        let uuid_dir = staged
+            .root
+            .join(format!(".socket/vendor/npm/{}", case.uuid));
+        assert_eq!(
+            fs::read_to_string(uuid_dir.join(".gitignore")).unwrap(),
+            "!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n"
+        );
+        assert_eq!(
+            fs::read_to_string(uuid_dir.join(".gitattributes")).unwrap(),
+            "* -text\n"
+        );
+        let artifact = staged.root.join(&rel_dir);
+        assert_eq!(
+            fs::read(artifact.join("index.js")).unwrap(),
+            PATCHED_JS,
+            "{label}"
+        );
+        assert_eq!(
+            fs::read_to_string(artifact.join("package.json")).unwrap(),
+            format!(
+                "{{\n  \"name\": \"{name}\",\n  \"version\": \"{version}\",\n  \"main\": \"index.js\"\n}}\n"
+            ),
+            "{label}: devDependencies cut out as a span"
+        );
+
+        let mut state = VendorState::new();
+        state.entries.insert(case.purl.clone(), entry.clone());
+        save_state(&staged.root, &state).await.unwrap();
+        let wired = project_files(&staged.root);
+        match vendor(&case, &staged).await {
+            VendorOutcome::Done {
+                result,
+                entry: None,
+                ..
+            } => assert!(result.success, "{label}"),
+            other => panic!("{label}: a rerun is in sync, got {other:?}"),
+        }
+        assert_eq!(
+            project_files(&staged.root),
+            wired,
+            "{label}: the rerun writes nothing"
+        );
+
+        let reverted = revert_npm_any(&entry, &staged.root, false).await;
+        assert!(reverted.success, "{label}: {:?}", reverted.error);
+        assert!(
+            reverted.warnings.is_empty(),
+            "{label}: {:?}",
+            reverted.warnings
+        );
+        let mut after = project_files(&staged.root);
+        after.remove(".socket/vendor/state.json");
+        assert_eq!(
+            after, before,
+            "{label}: revert restores the pre-vendor bytes"
+        );
+        assert!(!uuid_dir.exists(), "{label}: the artifact is removed");
+    }
+}
+
+#[tokio::test]
+async fn revert_of_the_lock_vlt_ci_wrote_keeps_its_rewritten_outgoing_values() {
+    for case in cases().into_iter().filter(|c| c.refusal.is_none()) {
+        let label = format!("{} {}", case.version, case.name);
+        let staged = stage(&case, false);
+        let before = project_files(&staged.root);
+        let entry = expect_done(vendor(&case, &staged).await, &label);
+        write_tree(&staged.root, &tree(&case.dir.join("expected")));
+        let reverted = revert_npm_any(&entry, &staged.root, false).await;
+        assert!(reverted.success, "{label}: {:?}", reverted.error);
+        assert!(
+            !reverted.drift_skipped(),
+            "{label}: {:?}",
+            reverted.warnings
+        );
+        let got = project_files(&staged.root);
+        let mut want = before.clone();
+        if !case.churn.is_empty() {
+            let lock = String::from_utf8(want["vlt-lock.json"].clone()).unwrap();
+            let file_key = |line: &str| line.trim().split_once("\": ").unwrap().0.to_string();
+            let value = |line: &str| {
+                line.trim()
+                    .trim_end_matches(',')
+                    .split_once("\": ")
+                    .unwrap()
+                    .1
+                    .to_string()
+            };
+            let mut lines: Vec<String> = lock.split('\n').map(str::to_string).collect();
+            for (from, to) in &case.churn {
+                let dep = file_key(from).rsplit_once(' ').unwrap().1.to_string();
+                let at = lines
+                    .iter()
+                    .position(|l| l.contains(&format!(" {dep}\": {}", value(from))))
+                    .unwrap_or_else(|| panic!("{label}: no pre-vendor twin of {from}"));
+                lines[at] = lines[at].replace(&value(from), &value(to));
+            }
+            want.insert("vlt-lock.json".into(), lines.join("\n").into_bytes());
+        }
+        assert_eq!(got, want, "{label}");
+    }
+}
+
+#[tokio::test]
+async fn a_crlf_lock_is_wired_with_every_line_keeping_its_cr() {
+    for case in cases()
+        .into_iter()
+        .filter(|c| c.refusal.is_none() && c.churn.is_empty())
+    {
+        let label = format!("{} {}", case.version, case.name);
+        let staged = stage(&case, true);
+        let before = project_files(&staged.root);
+        let entry = expect_done(vendor(&case, &staged).await, &label);
+        let want = fs::read_to_string(case.dir.join("expected/vlt-lock.json"))
+            .unwrap()
+            .replace('\n', "\r\n");
+        assert_eq!(
+            fs::read_to_string(staged.root.join("vlt-lock.json")).unwrap(),
+            want,
+            "{label}"
+        );
+        let reverted = revert_npm_any(&entry, &staged.root, false).await;
+        assert!(reverted.success, "{label}: {:?}", reverted.error);
+        assert_eq!(project_files(&staged.root), before, "{label}");
+    }
+}
+
+#[tokio::test]
+async fn lock_inventory_reads_every_capture_and_drops_vendored_nodes() {
+    for (version, _, _) in CAPTURES {
+        let tmp = tempfile::tempdir().unwrap();
+        for (name, text) in read_capture(version) {
+            fs::write(tmp.path().join(name), text).unwrap();
+        }
+        let lock: Value = serde_json::from_str(&read_capture(version)["vlt-lock.json"]).unwrap();
+        let registry_nodes = lock["nodes"]
+            .as_object()
+            .unwrap()
+            .keys()
+            .filter(|k| k.starts_with('~') || k.starts_with('·'))
+            .count();
+        let entries = inventory_project(tmp.path()).await;
+        assert_eq!(entries.len(), registry_nodes, "{version}");
+        for e in &entries {
+            let url = e.resolved.as_deref().unwrap_or_default();
+            let bare = e.name.rsplit('/').next().unwrap();
+            assert!(
+                url.ends_with(&format!("{bare}-{}.tgz", e.version)),
+                "{version}: {} → {url}",
+                e.purl
+            );
+            assert!(
+                matches!(e.integrity, LockIntegrity::Sri(_)),
+                "{version} {}",
+                e.purl
+            );
+        }
+    }
+
+    let hosted = rewrite_registry_redirect(&read_capture("1.2.0"), &overrides());
+    let tmp = tempfile::tempdir().unwrap();
+    fs::write(
+        tmp.path().join("vlt-lock.json"),
+        &hosted.files["vlt-lock.json"],
+    )
+    .unwrap();
+    let entries = inventory_project(tmp.path()).await;
+    let left_pad = entries
+        .iter()
+        .find(|e| e.name == "left-pad" && e.version == "1.3.0")
+        .expect("a hosted entry stays installed-by-lock");
+    let uuid = TARGETS.iter().find(|t| t.0 == "left-pad").unwrap().2;
+    assert_eq!(
+        left_pad.resolved.as_deref(),
+        Some(hosted_url("left-pad", "1.3.0", uuid).as_str())
+    );
+    assert_eq!(left_pad.integrity, LockIntegrity::Sri(patched_sha(uuid)));
+
+    for case in cases().into_iter().filter(|c| c.refusal.is_none()) {
+        let tmp = tempfile::tempdir().unwrap();
+        write_tree(tmp.path(), &expected_files(&case));
+        let (name, version) = name_version(&case.purl);
+        let entries = inventory_project(tmp.path()).await;
+        assert!(
+            !entries
+                .iter()
+                .any(|e| e.name == name && e.version == version),
+            "{} {}: the vendored file node is not a registry entry",
+            case.version,
+            case.name
+        );
+        assert!(!entries.is_empty(), "{} {}", case.version, case.name);
+    }
+}

From efe259cdb7c56e06886f268c5bc08d666afc6362 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 01:22:58 -0400
Subject: [PATCH 16/46] Harden vlt vendoring revert and rebuild paths

`vendor --revert` on a vlt project no longer writes a lock with
duplicate keys when `vlt install` has since added a registry copy of the
vendored package beside it: the vendored entries fold into the matching
registry ones, and a mismatching copy is reported as drift with nothing
written and the artifact kept.

Re-vendoring a new patch over a dir whose ledger entry lost its
pre-vendor wiring now refuses with vendor_wiring_unknown and says how to
recover, instead of recording wiring that could never be reverted.

A rebuild of the committed package dir replaces the whole version-level
directory, so stray files beside the package no longer cause an endless
corrupt-then-rebuild loop, and it keeps vlt's dependency links (or says
to run `vlt install` when they had to be discarded). Prebuilt service
trees are pruned of node_modules and bundling packages refuse, as the
local build already did. The git-ignore probe now parses rule sources
that contain a colon, such as Windows drive-letter paths.

New tests pin every revert inverse's already-reverted branch, the
importer allowlist, dry-run revert, the rebuild branch, the reuse-time
.gitignore restore, the gitignored refusal, both bundleDependencies
refusals, the service layout fallback, local dir artifact staging and
the FIFO-safe vlt-lock.json inventory.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../src/vendor/lock_inventory/tests.rs        |  21 +-
 .../socket-patch-core/src/vendor/npm_dir.rs   | 154 ++--
 .../src/vendor/registry_fetch.rs              |  39 +
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 699 ++++++++++++++++--
 4 files changed, 818 insertions(+), 95 deletions(-)

diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs b/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
index a7366e5c..de51325f 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/tests.rs
@@ -1849,6 +1849,7 @@ async fn fifo_lockfiles_fail_fast_instead_of_wedging() {
         "yarn.lock",
         "bun.lock",
         "shrinkwrap.yaml",
+        "vlt-lock.json",
     ];
     for name in names {
         mkfifo(&root.join(name));
@@ -1870,6 +1871,7 @@ async fn fifo_lockfiles_fail_fast_instead_of_wedging() {
             inventory_yarn_classic(&root).await,
             inventory_yarn_berry(&root).await,
             inventory_bun(&root).await,
+            inventory_vlt(&root).await,
             inventory_pnpm_lock_at(&root.join("shrinkwrap.yaml")).await,
             gem_remotes(&root).await,
             wired_vendor_integrity(&root, ".socket/vendor/npm/x/x.tgz").await,
@@ -1885,8 +1887,22 @@ async fn fifo_lockfiles_fail_fast_instead_of_wedging() {
         }
         panic!("lockfile inventories must fail fast on FIFO lockfiles");
     };
-    let (cargo, go, composer, gem, pypi, npm, pnpm, yarn_c, yarn_b, bun, legacy, remotes, wired) =
-        results;
+    let (
+        cargo,
+        go,
+        composer,
+        gem,
+        pypi,
+        npm,
+        pnpm,
+        yarn_c,
+        yarn_b,
+        bun,
+        vlt,
+        legacy,
+        remotes,
+        wired,
+    ) = results;
     for (label, opt) in [
         ("cargo", cargo),
         ("go", go),
@@ -1898,6 +1914,7 @@ async fn fifo_lockfiles_fail_fast_instead_of_wedging() {
         ("yarn classic", yarn_c),
         ("yarn berry", yarn_b),
         ("bun", bun),
+        ("vlt", vlt),
         ("pnpm legacy", legacy),
     ] {
         assert!(
diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
index d847a637..7168edd4 100644
--- a/crates/socket-patch-core/src/vendor/npm_dir.rs
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -61,6 +61,9 @@ pub(super) struct NpmStagedDir {
     pub staged_pkg_json: Option<Value>,
     /// The committed dir passed the reuse check; nothing was written.
     pub reused: bool,
+    /// A rebuild discarded the old dir's `node_modules/` (it held more
+    /// than vlt's links), so the package needs `vlt install` to re-link.
+    pub links_dropped: bool,
 }
 
 // ── package.json spans ───────────────────────────────────────────────────
@@ -431,24 +434,17 @@ pub(crate) async fn gitignored(project_root: &Path, paths: &[String]) -> Option<
     if inside.trim() != "true" {
         return None;
     }
-    let input: String = paths.iter().map(|p| format!("{p}\n")).collect();
+    let input: String = paths.iter().map(|p| format!("{p}\0")).collect();
     let (code, out) = git_output(
         &git,
         project_root,
-        &["check-ignore", "-v", "--no-index", "--stdin"],
+        &["check-ignore", "-v", "-z", "--no-index", "--stdin"],
         Some(input),
     )
     .await?;
-    let lines: Vec<&str> = out
-        .lines()
-        .filter(|line| {
-            let rule = line.split('\t').next().unwrap_or_default();
-            let pattern = rule.splitn(3, ':').nth(2).unwrap_or_default();
-            !pattern.is_empty() && !pattern.starts_with('!')
-        })
-        .collect();
+    let lines = ignoring_rules(&out);
     (code == 0 && !lines.is_empty()).then(|| {
-        let shown: Vec<&str> = lines.iter().take(3).copied().collect();
+        let shown: Vec<&str> = lines.iter().take(3).map(String::as_str).collect();
         let more = lines.len().saturating_sub(shown.len());
         let mut detail = shown.join("; ");
         if more > 0 {
@@ -458,6 +454,19 @@ pub(crate) async fn gitignored(project_root: &Path, paths: &[String]) -> Option<
     })
 }
 
+/// The non-negated matches of `git check-ignore -v -z` output
+/// (`<source> NUL <linenum> NUL <pattern> NUL <pathname> NUL` per path), as
+/// `<source>:<linenum>:<pattern>\t<pathname>`. A source may hold a colon
+/// (a Windows drive letter), so the fields are split on NUL only.
+fn ignoring_rules(out: &str) -> Vec<String> {
+    let fields: Vec<&str> = out.split('\0').collect();
+    fields
+        .chunks_exact(4)
+        .filter(|f| !f[2].is_empty() && !f[2].starts_with('!'))
+        .map(|f| format!("{}:{}:{}\t{}", f[0], f[1], f[2], f[3]))
+        .collect()
+}
+
 fn gitignored_refusal(rel_dir: &str, rules: &str) -> VendorOutcome {
     refused(
         "vendor_artifact_gitignored",
@@ -519,6 +528,7 @@ pub(super) async fn stage_patch_dir(
                         uuid_dir_preexisted: true,
                         staged_pkg_json,
                         reused: true,
+                        links_dropped: false,
                     }),
                     result,
                 ));
@@ -561,6 +571,7 @@ pub(super) async fn stage_patch_dir(
     }
     let result = match result {
         Some(result) => {
+            prune_staged_node_modules(purl, &stage, &coords.name, &coords.version).await?;
             apply_transforms(&stage, &coords.name, &coords.version).await?;
             result
         }
@@ -571,24 +582,7 @@ pub(super) async fn stage_patch_dir(
                     format!("cannot stage a copy of the installed package: {e}"),
                 )));
             }
-            if let Err(e) = remove_tree(&stage.join(NODE_MODULES)).await {
-                return Err(Box::new(done_failure(
-                    purl,
-                    format!("cannot prune staged node_modules: {e}"),
-                )));
-            }
-            if let Ok(pkg) = read_manifest(&stage).await {
-                if declares_bundled_deps(&pkg) {
-                    return Err(Box::new(refused(
-                        "vendor_bundled_deps_unsupported",
-                        format!(
-                            "{}@{} declares bundleDependencies; vendoring would drop its \
-                             bundled node_modules and break installs",
-                            coords.name, coords.version
-                        ),
-                    )));
-                }
-            }
+            prune_staged_node_modules(purl, &stage, &coords.name, &coords.version).await?;
             let result = super::force_apply_staged(
                 purl,
                 &stage,
@@ -622,11 +616,14 @@ pub(super) async fn stage_patch_dir(
             uuid_dir_preexisted,
         )
     };
-    if let Err(e) = write_into_place(&stage, &uuid_dir, &rel_abs).await {
-        return Err(Box::new(
-            unstage(format!("cannot write {rel_dir}: {e}")).await,
-        ));
-    }
+    let links_dropped = match write_into_place(&stage, &uuid_dir, &rel_abs, &coords.name).await {
+        Ok(dropped) => dropped,
+        Err(e) => {
+            return Err(Box::new(
+                unstage(format!("cannot write {rel_dir}: {e}")).await,
+            ))
+        }
+    };
     if let Err(e) = restore_uuid_metadata(&uuid_dir).await {
         return Err(Box::new(
             unstage(format!(
@@ -667,11 +664,40 @@ pub(super) async fn stage_patch_dir(
             uuid_dir_preexisted,
             staged_pkg_json,
             reused: false,
+            links_dropped,
         }),
         result,
     ))
 }
 
+/// DESIGN §4.3 step 5 on any staged tree: prune its `node_modules/` and
+/// refuse a package that bundles dependencies.
+async fn prune_staged_node_modules(
+    purl: &str,
+    stage: &Path,
+    name: &str,
+    version: &str,
+) -> Result<(), Box<VendorOutcome>> {
+    if let Err(e) = remove_tree(&stage.join(NODE_MODULES)).await {
+        return Err(Box::new(done_failure(
+            purl,
+            format!("cannot prune staged node_modules: {e}"),
+        )));
+    }
+    if let Ok(pkg) = read_manifest(stage).await {
+        if declares_bundled_deps(&pkg) {
+            return Err(Box::new(refused(
+                "vendor_bundled_deps_unsupported",
+                format!(
+                    "{name}@{version} declares bundleDependencies; vendoring would drop its \
+                     bundled node_modules and break installs"
+                ),
+            )));
+        }
+    }
+    Ok(())
+}
+
 async fn read_manifest(dir: &Path) -> Result<Value, String> {
     let text = crate::utils::fs::read_regular_to_string(&dir.join("package.json"))
         .await
@@ -680,30 +706,56 @@ async fn read_manifest(dir: &Path) -> Result<Value, String> {
         .map_err(|e| format!("package.json is not parseable JSON: {e}"))
 }
 
-/// Copy the stage to `<uuid>/.tmp-*`, then rename it over `rel_abs`.
-async fn write_into_place(stage: &Path, uuid_dir: &Path, rel_abs: &Path) -> std::io::Result<()> {
-    tokio::fs::create_dir_all(uuid_dir).await?;
-    let parent: PathBuf = rel_abs
+/// Build the whole `<leaf>` level in `<uuid>/.tmp-*` and rename it over
+/// the old one, so nothing but the package dir survives beside it. The old
+/// dir's `node_modules/` moves along when it holds only vlt's links;
+/// `Ok(true)` when it held anything else and was discarded.
+async fn write_into_place(
+    stage: &Path,
+    uuid_dir: &Path,
+    rel_abs: &Path,
+    name: &str,
+) -> std::io::Result<bool> {
+    let mut leaf_abs = rel_abs.to_path_buf();
+    for _ in name.split('/') {
+        leaf_abs.pop();
+    }
+    leaf_abs.pop();
+    let parent: PathBuf = leaf_abs
         .parent()
         .map(Path::to_path_buf)
         .ok_or_else(|| std::io::Error::other("artifact path has no parent"))?;
+    tokio::fs::create_dir_all(uuid_dir).await?;
     tokio::fs::create_dir_all(&parent).await?;
     let tmp = tempfile::Builder::new()
         .prefix(".tmp-")
         .tempdir_in(uuid_dir)?
         .keep();
-    if let Err(e) = fresh_copy(stage, &tmp, None).await {
+    let tmp_pkg = tmp.join(NODE_MODULES).join(name);
+    if let Err(e) = fresh_copy(stage, &tmp_pkg, None).await {
         let _ = remove_tree(&tmp).await;
         return Err(e);
     }
-    if tokio::fs::symlink_metadata(rel_abs).await.is_ok() {
-        remove_tree(rel_abs).await?;
+    let old_links = rel_abs.join(NODE_MODULES);
+    let mut dropped = false;
+    if tokio::fs::symlink_metadata(&old_links).await.is_ok() {
+        if node_modules_holds_only_links(rel_abs).await {
+            if let Err(e) = tokio::fs::rename(&old_links, tmp_pkg.join(NODE_MODULES)).await {
+                let _ = remove_tree(&tmp).await;
+                return Err(e);
+            }
+        } else {
+            dropped = true;
+        }
+    }
+    if tokio::fs::symlink_metadata(&leaf_abs).await.is_ok() {
+        remove_tree(&leaf_abs).await?;
     }
-    if let Err(e) = tokio::fs::rename(&tmp, rel_abs).await {
+    if let Err(e) = tokio::fs::rename(&tmp, &leaf_abs).await {
         let _ = remove_tree(&tmp).await;
         return Err(e);
     }
-    Ok(())
+    Ok(dropped)
 }
 
 /// Every record file of the extracted tree hashes to its afterHash (the
@@ -989,6 +1041,22 @@ mod tests {
         }
     }
 
+    #[test]
+    fn check_ignore_records_split_on_nul_so_a_drive_letter_source_parses() {
+        let out = "C:/Users/u/.gitignore_global\x003\x00!dist/\x00.socket/p/dist/i.js\x00\
+                   C:/Users/u/.gitignore_global\x004\x00*.map\x00.socket/p/i.js.map\x00\
+                   .gitignore\x001\x00.socket/\x00.socket/p/a.js\x00";
+        assert_eq!(
+            ignoring_rules(out),
+            [
+                "C:/Users/u/.gitignore_global:4:*.map\t.socket/p/i.js.map",
+                ".gitignore:1:.socket/\t.socket/p/a.js",
+            ]
+        );
+        assert!(ignoring_rules("").is_empty());
+        assert!(ignoring_rules("C:/g\x002\x00!x\x00x\x00").is_empty());
+    }
+
     #[cfg(unix)]
     #[tokio::test]
     async fn the_gitignore_probe_ignores_tracked_state_and_names_the_rule() {
diff --git a/crates/socket-patch-core/src/vendor/registry_fetch.rs b/crates/socket-patch-core/src/vendor/registry_fetch.rs
index bd53dea5..d5196555 100644
--- a/crates/socket-patch-core/src/vendor/registry_fetch.rs
+++ b/crates/socket-patch-core/src/vendor/registry_fetch.rs
@@ -1621,6 +1621,45 @@ mod tests {
         }
     }
 
+    #[tokio::test]
+    async fn stage_local_dir_artifact_verifies_the_inventory_and_drops_node_modules() {
+        let tmp = tempfile::tempdir().unwrap();
+        let dir = tmp.path().join("left-pad");
+        std::fs::create_dir_all(dir.join("node_modules/.bin")).unwrap();
+        std::fs::write(dir.join("package.json"), b"{}").unwrap();
+        std::fs::write(dir.join("index.js"), b"x").unwrap();
+        std::fs::write(dir.join("node_modules/.bin/tool"), b"#!/bin/sh\n").unwrap();
+        #[cfg(unix)]
+        std::os::unix::fs::symlink("../../elsewhere", dir.join("node_modules/dep")).unwrap();
+        let inventory = super::super::verify::compute_package_dir_inventory(&dir)
+            .await
+            .unwrap();
+        assert_eq!(inventory.len(), 2, "{inventory:?}");
+
+        let staged = stage_local_dir_artifact(&dir, Some(&inventory))
+            .await
+            .unwrap();
+        assert_eq!(std::fs::read(staged.dir().join("index.js")).unwrap(), b"x");
+        assert!(!staged.dir().join("node_modules").exists());
+        assert_eq!(staged.url, format!("file:{}", dir.display()));
+
+        std::fs::write(dir.join("planted.js"), b"y").unwrap();
+        match stage_local_dir_artifact(&dir, Some(&inventory)).await {
+            Err(FetchError::Failed(msg)) => assert!(msg.contains("file inventory"), "{msg}"),
+            other => panic!("a planted file must fail, got {other:?}"),
+        }
+        std::fs::remove_file(dir.join("planted.js")).unwrap();
+        std::fs::write(dir.join("index.js"), b"modified").unwrap();
+        match stage_local_dir_artifact(&dir, Some(&inventory)).await {
+            Err(FetchError::Failed(msg)) => assert!(msg.contains("file inventory"), "{msg}"),
+            other => panic!("a modified file must fail, got {other:?}"),
+        }
+        match stage_local_dir_artifact(&dir, None).await {
+            Err(FetchError::Unverifiable(_)) => {}
+            other => panic!("no inventory is unverifiable, got {other:?}"),
+        }
+    }
+
     #[tokio::test]
     async fn cargo_crate_fetch_verifies_sha256_and_extracts() {
         // .crate = tar.gz with a {name}-{version}/ top dir.
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index f1ffaed9..69ff733d 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -706,19 +706,13 @@ struct Wiring {
     lock: Option<String>,
 }
 
-fn wiring_record(
-    file: &str,
-    kind: &str,
-    key: &str,
-    original: Option<String>,
-    new: String,
-) -> WiringRecord {
+fn wiring_record(file: &str, kind: &str, key: &str, original: String, new: String) -> WiringRecord {
     WiringRecord {
         file: file.to_string(),
         kind: kind.to_string(),
         action: WiringAction::Rewritten,
         key: Some(key.to_string()),
-        original: original.map(Value::String),
+        original: Some(Value::String(original)),
         new: Some(Value::String(new)),
     }
 }
@@ -743,6 +737,28 @@ fn original_text(rec: Option<&WiringRecord>) -> Option<String> {
         .map(str::to_string)
 }
 
+/// A re-vendor over our own dir carries the prior record's key and
+/// original forward; without them the new records could never be reverted.
+fn carried(
+    target: &Target,
+    rec: Option<&WiringRecord>,
+    what: &str,
+) -> Result<(String, String), Refusal> {
+    match (rec.and_then(|r| r.key.clone()), original_text(rec)) {
+        (Some(key), Some(original)) => Ok((key, original)),
+        _ => Err((
+            "vendor_wiring_unknown",
+            format!(
+                "vlt-lock.json already resolves this package through {}, but the vendor ledger \
+                 records no pre-vendor {what} to carry forward (it was likely reconstructed by \
+                 `socket-patch repair`); restore the registry spec in package.json, run `vlt \
+                 install`, then vendor again",
+                target.key
+            ),
+        )),
+    }
+}
+
 /// DESIGN §4.5.2–§4.5.4: the records and the new surfaces, or `None` when
 /// every surface already names `rel`.
 fn plan_wiring(
@@ -795,9 +811,10 @@ fn plan_wiring(
         }
         let key = format!("{}/{}", edge.field, edge.dep);
         let original = if target.ours {
-            original_text(prior_original(prior, &pkg_rel, KIND_PKG_DEP, |k| k == key))
+            let rec = prior_original(prior, &pkg_rel, KIND_PKG_DEP, |k| k == key);
+            carried(target, rec, &format!("{pkg_rel} {key} spec"))?.1
         } else {
-            Some(current)
+            current
         };
         let edited = replace_dependency_token(&text, edge.field, &edge.dep, &new)
             .map_err(|_| (OUT_OF_SYNC, format!("cannot edit {pkg_rel}")))?;
@@ -808,15 +825,10 @@ fn plan_wiring(
     let mut node_touch = Vec::new();
     if *node != new_node {
         let (key, original) = if target.ours {
-            let prior_rec = prior_original(prior, VLT_LOCK, KIND_LOCK_NODE, |_| true);
-            (
-                prior_rec
-                    .and_then(|r| r.key.clone())
-                    .unwrap_or_else(|| node.key.clone()),
-                original_text(prior_rec),
-            )
+            let rec = prior_original(prior, VLT_LOCK, KIND_LOCK_NODE, |_| true);
+            carried(target, rec, "registry node")?
         } else {
-            (node.key.clone(), Some(node.text()))
+            (node.key.clone(), node.text())
         };
         records.push(wiring_record(
             VLT_LOCK,
@@ -848,11 +860,10 @@ fn plan_wiring(
             continue;
         }
         let original = if target.ours {
-            original_text(prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| {
-                k == current.key
-            }))
+            let rec = prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| k == current.key);
+            carried(target, rec, &format!("edge `{}`", current.key))?.1
         } else {
-            Some(current.text())
+            current.text()
         };
         records.push(wiring_record(
             VLT_LOCK,
@@ -874,18 +885,13 @@ fn plan_wiring(
         };
         let (key, original) = if target.ours {
             let dep = current.edge_dep().to_string();
-            let prior_rec = prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| {
+            let rec = prior_original(prior, VLT_LOCK, KIND_LOCK_EDGE, |k| {
                 k.split_once(' ')
                     .is_some_and(|(from, d)| d == dep && !is_importer_dep_id(from))
             });
-            (
-                prior_rec
-                    .and_then(|r| r.key.clone())
-                    .unwrap_or_else(|| current.key.clone()),
-                original_text(prior_rec),
-            )
+            carried(target, rec, &format!("edge `{}`", current.key))?
         } else {
-            (current.key.clone(), Some(current.text()))
+            (current.key.clone(), current.text())
         };
         records.push(wiring_record(
             VLT_LOCK,
@@ -1078,11 +1084,17 @@ pub(crate) async fn vendor_vlt(
                 warnings,
             );
         }
+        let relink = if staged.links_dropped {
+            "; its node_modules/ held more than vlt's dependency links and was discarded, so \
+             run `vlt install` to re-link its dependencies"
+        } else {
+            ""
+        };
         warnings.push(VendorWarning::new(
             "vendor_artifact_rebuilt",
             format!(
                 "the committed vendored dir for {name}@{version} was missing or stale; rebuilt \
-                 at {} (vlt-lock.json and package.json untouched)",
+                 at {} (vlt-lock.json and package.json untouched){relink}",
                 staged.rel_dir
             ),
         ));
@@ -1234,6 +1246,9 @@ struct Staged {
     edges: Vec<Entry>,
     touched_nodes: Vec<usize>,
     touched_edges: Vec<usize>,
+    /// Vendored entries dropped in favor of a live registry twin.
+    merged_nodes: BTreeSet<usize>,
+    merged_edges: BTreeSet<usize>,
 }
 
 enum Step {
@@ -1247,6 +1262,11 @@ fn slot_value(raw: Option<&str>) -> Option<Value> {
         .and_then(|s| serde_json::from_str::<Value>(s).ok())
 }
 
+fn registry_slots(entry: &Entry) -> Option<(Option<Value>, Option<Value>)> {
+    let text = entry.text();
+    parse_node_entry_text(&text).map(|n| (slot_value(n.slot(2)), slot_value(n.slot(3))))
+}
+
 fn revert_node(staged: &mut Staged, rec: &WiringRecord) -> Step {
     let (Some(new), Some(original)) = (fragment(&rec.new), fragment(&rec.original)) else {
         return Step::Drift("the vlt_lock_node record has no pre-vendor original".into());
@@ -1264,6 +1284,17 @@ fn revert_node(staged: &mut Staged, rec: &WiringRecord) -> Step {
         if live.slot(2) != Some("null") || slot_value(live.slot(3)) != slot_value(new.slot(3)) {
             return Step::Drift(format!("{} drifted from the vendored wiring", new.key));
         }
+        let wanted = (slot_value(original.slot(2)), slot_value(original.slot(3)));
+        if let Some(twin) = staged.nodes.iter().find(|e| e.key == original.key) {
+            if registry_slots(twin) != Some(wanted) {
+                return Step::Drift(format!(
+                    "vlt-lock.json holds both {} and a different {}",
+                    new.key, original.key
+                ));
+            }
+            staged.merged_nodes.insert(i);
+            return Step::Applied;
+        }
         let tuple = render_tuple_with_slots(
             &live.elems,
             original.slot(2).filter(|s| *s != "null"),
@@ -1281,11 +1312,7 @@ fn revert_node(staged: &mut Staged, rec: &WiringRecord) -> Step {
         .nodes
         .iter()
         .find(|e| e.key == original.key)
-        .and_then(|e| {
-            let text = e.text();
-            parse_node_entry_text(&text)
-                .map(|live| (slot_value(live.slot(2)), slot_value(live.slot(3))))
-        });
+        .and_then(registry_slots);
     if restored == Some((slot_value(original.slot(2)), slot_value(original.slot(3)))) {
         Step::AlreadyReverted
     } else {
@@ -1324,7 +1351,15 @@ fn revert_edge(staged: &mut Staged, rec: &WiringRecord) -> Step {
         };
     }
     match (find(&new.key), find(&original.key)) {
-        (Some(i), _) => {
+        (Some(i), Some(j)) if staged.edges[i].value == staged.edges[j].value => {
+            staged.merged_edges.insert(i);
+            Step::Applied
+        }
+        (Some(_), Some(_)) => Step::Drift(format!(
+            "vlt-lock.json holds both `{}` and a different `{}`",
+            new.key, original.key
+        )),
+        (Some(i), None) => {
             staged.edges[i].key = original.key.clone();
             staged.touched_edges.push(i);
             Step::Applied
@@ -1489,6 +1524,8 @@ pub async fn revert_vlt_opts(
             edges: d.edges.entries.clone(),
             touched_nodes: Vec::new(),
             touched_edges: Vec::new(),
+            merged_nodes: BTreeSet::new(),
+            merged_edges: BTreeSet::new(),
         });
         let mut new_pkgs = pkgs.clone();
         let mut drift: Option<String> = None;
@@ -1549,24 +1586,39 @@ pub async fn revert_vlt_opts(
     outcome
 }
 
-/// The lock with the restored entries re-placed (§4.5.4), in the forward
-/// record order.
+/// A block without its merged entries, the restored ones re-placed
+/// (§4.5.4) in the forward record order.
+fn restored_block(
+    entries: &[Entry],
+    touched: &[usize],
+    merged: &BTreeSet<usize>,
+    cmp: fn(&Entry, &Entry) -> Option<Ordering>,
+) -> Vec<Entry> {
+    let kept: Vec<Entry> = entries
+        .iter()
+        .enumerate()
+        .filter(|(i, _)| !merged.contains(i))
+        .map(|(_, e)| e.clone())
+        .collect();
+    let touched: Vec<(usize, Entry)> = touched
+        .iter()
+        .rev()
+        .map(|&i| (i - merged.range(..i).count(), entries[i].clone()))
+        .collect();
+    place(&kept, &touched, cmp)
+}
+
 fn render_restored(doc: &LockDoc, staged: Staged) -> String {
-    let touched = |entries: &[Entry], order: &[usize]| -> Vec<(usize, Entry)> {
-        order
-            .iter()
-            .rev()
-            .map(|&i| (i, entries[i].clone()))
-            .collect()
-    };
-    let nodes = place(
+    let nodes = restored_block(
         &staged.nodes,
-        &touched(&staged.nodes, &staged.touched_nodes),
+        &staged.touched_nodes,
+        &staged.merged_nodes,
         node_cmp,
     );
-    let edges = place(
+    let edges = restored_block(
         &staged.edges,
-        &touched(&staged.edges, &staged.touched_edges),
+        &staged.touched_edges,
+        &staged.merged_edges,
         edge_cmp,
     );
     LockDoc {
@@ -2396,4 +2448,551 @@ mod tests {
         }
         assert!(!fx.root.join(".socket/vendor").exists());
     }
+
+    fn file_id() -> String {
+        format!("file~.socket+vendor+npm+{UUID}+left-pad-1.3.0+node__modules+left-pad")
+    }
+
+    fn uuid_dir(fx: &Fx, uuid: &str) -> std::path::PathBuf {
+        fx.root.join(format!(".socket/vendor/npm/{uuid}"))
+    }
+
+    type DoneParts = (
+        (bool, Option<String>),
+        Option<VendorEntry>,
+        Vec<VendorWarning>,
+    );
+
+    fn done_parts(outcome: VendorOutcome) -> DoneParts {
+        match outcome {
+            VendorOutcome::Done {
+                result,
+                entry,
+                warnings,
+            } => ((result.success, result.error), entry, warnings),
+            other => panic!("expected Done, got {other:?}"),
+        }
+    }
+
+    fn codes(warnings: &[VendorWarning]) -> Vec<&str> {
+        warnings.iter().map(|w| w.code).collect()
+    }
+
+    #[tokio::test]
+    async fn revert_beside_a_registry_twin_merges_into_it_or_drifts() {
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let file_id = file_id();
+        let file_node = format!(r#""{file_id}": [0,"left-pad",null,"{rel}"]"#);
+        let file_edge = format!(r#""file~_d left-pad": "prod file:./{rel} {file_id}""#);
+        let file_out = format!(r#""{file_id} z": "prod ^1.0.0 ~npm~z@1.0.0""#);
+        let ws_edge = r#""workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#;
+        let a_node = r#""~npm~a@1.0.0": [0,"a","sha512-A=="]"#;
+        let z_node = r#""~npm~z@1.0.0": [0,"z","sha512-Z=="]"#;
+        let a_edge = r#""file~_d a": "prod 1.0.0 ~npm~a@1.0.0""#;
+        let reg_out = r#""~npm~left-pad@1.3.0 z": "prod ^1.0.0 ~npm~z@1.0.0""#;
+        let cases = [
+            (REG_NODE.to_string(), reg_out.to_string(), true),
+            (
+                REG_NODE.replace("sha512-REG==", "sha512-OTHER=="),
+                reg_out.to_string(),
+                false,
+            ),
+            (
+                REG_NODE.to_string(),
+                reg_out.replace("~npm~z@1.0.0", "~npm~z@1.0.1"),
+                false,
+            ),
+        ];
+        for (twin_node, twin_out, merges) in cases {
+            let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+            let (entry, _) = entry_of(run(&fx, UUID, false).await);
+            let twin = render(
+                1,
+                &[a_node, &twin_node, z_node, &file_node],
+                &[a_edge, &file_edge, ws_edge, &file_out, &twin_out],
+            );
+            tokio::fs::write(fx.root.join(VLT_LOCK), &twin)
+                .await
+                .unwrap();
+            let pkg = read(&fx, PACKAGE_JSON).await;
+            let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+            if merges {
+                assert!(out.success && out.warnings.is_empty(), "{out:?}");
+                assert_eq!(
+                    read(&fx, VLT_LOCK).await,
+                    render(
+                        1,
+                        &[a_node, REG_NODE, z_node],
+                        &[
+                            a_edge,
+                            r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#,
+                            ws_edge,
+                            reg_out,
+                        ],
+                    )
+                );
+                assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+                assert!(!uuid_dir(&fx, UUID).exists());
+                assert!(parse_doc(&read(&fx, VLT_LOCK).await).is_ok());
+            } else {
+                assert!(
+                    out.success && out.drift_skipped() && out.kept_artifact,
+                    "{out:?}"
+                );
+                assert!(
+                    out.warnings[0].detail.contains("holds both"),
+                    "{:?}",
+                    out.warnings
+                );
+                assert_eq!(read(&fx, VLT_LOCK).await, twin, "a drift writes nothing");
+                assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+                assert!(fx.root.join(&entry.artifact.path).exists());
+            }
+        }
+    }
+
+    #[tokio::test]
+    async fn revert_finishes_a_partial_revert_record_by_record() {
+        let file_id = file_id();
+        let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+        let wired_pkg = ROOT_PKG.replace(
+            "\"left-pad\": \"1.3.0\"",
+            &format!("\"left-pad\": \"file:./{rel}\""),
+        );
+        type Undo = fn(&str, &str) -> (Option<String>, bool);
+        let undos: [(&str, Undo); 3] = [
+            ("the lock was already restored", |_, _| {
+                (Some(basic_lock()), false)
+            }),
+            (
+                "only the outgoing edge was re-keyed back",
+                |wired, file_id| {
+                    (
+                        Some(
+                            wired.replace(&format!("\"{file_id} z\""), "\"~npm~left-pad@1.3.0 z\""),
+                        ),
+                        false,
+                    )
+                },
+            ),
+            ("package.json was already restored", |_, _| (None, true)),
+        ];
+        for (label, undo) in undos {
+            let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+            let (entry, _) = entry_of(run(&fx, UUID, false).await);
+            assert_eq!(read(&fx, PACKAGE_JSON).await, wired_pkg);
+            let wired = read(&fx, VLT_LOCK).await;
+            let (lock, pkg_restored) = undo(&wired, &file_id);
+            if let Some(lock) = lock {
+                tokio::fs::write(fx.root.join(VLT_LOCK), lock)
+                    .await
+                    .unwrap();
+            }
+            if pkg_restored {
+                tokio::fs::write(fx.root.join(PACKAGE_JSON), ROOT_PKG)
+                    .await
+                    .unwrap();
+            }
+            let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+            assert!(out.success && out.warnings.is_empty(), "{label}: {out:?}");
+            assert_eq!(read(&fx, VLT_LOCK).await, basic_lock(), "{label}");
+            assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG, "{label}");
+            assert!(!uuid_dir(&fx, UUID).exists(), "{label}");
+        }
+    }
+
+    #[tokio::test]
+    async fn revert_never_follows_a_record_outside_the_importer_allowlist() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (mut entry, _) = entry_of(run(&fx, UUID, false).await);
+        let pkg_rec = entry.wiring[0].clone();
+        let new = fragment(&pkg_rec.new).unwrap().to_string();
+        let planted = format!("{{\"dependencies\":{{\"left-pad\":{new}}}}}");
+        let outside = ["vendor/x/package.json", "../escape/package.json"];
+        for rel in outside {
+            let path = fx.root.join(rel);
+            tokio::fs::create_dir_all(path.parent().unwrap())
+                .await
+                .unwrap();
+            tokio::fs::write(&path, &planted).await.unwrap();
+            entry.wiring.insert(
+                0,
+                WiringRecord {
+                    file: rel.to_string(),
+                    ..pkg_rec.clone()
+                },
+            );
+        }
+        let lock = read(&fx, VLT_LOCK).await;
+        let pkg = read(&fx, PACKAGE_JSON).await;
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.drift_skipped() && out.kept_artifact, "{out:?}");
+        for rel in outside {
+            assert!(
+                out.warnings
+                    .iter()
+                    .any(|w| w.code == "vendor_lock_entry_drifted"
+                        && w.detail.contains("non-allowlisted")
+                        && w.detail.contains(rel)),
+                "{rel}: {:?}",
+                out.warnings
+            );
+            assert_eq!(read(&fx, rel).await, planted, "{rel} is never written");
+        }
+        assert_eq!(read(&fx, VLT_LOCK).await, lock);
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert!(fx.root.join(&entry.artifact.path).exists());
+    }
+
+    #[tokio::test]
+    async fn a_dry_run_revert_writes_nothing() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let lock = read(&fx, VLT_LOCK).await;
+        let pkg = read(&fx, PACKAGE_JSON).await;
+        let inventory = crate::vendor::verify::compute_package_dir_inventory(
+            &fx.root.join(&entry.artifact.path),
+        )
+        .await
+        .unwrap();
+        let out = revert_vlt_opts(
+            &entry,
+            &fx.root,
+            RevertOpts {
+                dry_run: true,
+                keep_artifact: false,
+            },
+        )
+        .await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+        assert_eq!(read(&fx, VLT_LOCK).await, lock);
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert_eq!(
+            crate::vendor::verify::compute_package_dir_inventory(
+                &fx.root.join(&entry.artifact.path)
+            )
+            .await
+            .unwrap(),
+            inventory
+        );
+        assert!(uuid_dir(&fx, UUID).join(".gitignore").is_file());
+    }
+
+    #[tokio::test]
+    async fn a_new_uuid_over_an_unwired_prior_refuses_before_any_write() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (mut first, _) = entry_of(run(&fx, UUID, false).await);
+        first.wiring.clear();
+        persist(&fx, &first).await;
+        let lock = read(&fx, VLT_LOCK).await;
+        let pkg = read(&fx, PACKAGE_JSON).await;
+        let (code, detail) = refusal(run(&fx, UUID2, false).await);
+        assert_eq!(code, "vendor_wiring_unknown", "{detail}");
+        assert!(
+            detail.contains("run `vlt install`") && detail.contains(&file_id()),
+            "{detail}"
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, lock);
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert!(!uuid_dir(&fx, UUID2).exists());
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (mut partial, _) = entry_of(run(&fx, UUID, false).await);
+        partial.wiring[1].original = None;
+        persist(&fx, &partial).await;
+        let (code, _) = refusal(run(&fx, UUID2, false).await);
+        assert_eq!(code, "vendor_wiring_unknown");
+        assert!(!uuid_dir(&fx, UUID2).exists());
+    }
+
+    #[tokio::test]
+    async fn a_stale_committed_dir_is_rebuilt_under_in_sync_wiring() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let lock = read(&fx, VLT_LOCK).await;
+        let pkg = read(&fx, PACKAGE_JSON).await;
+        let index = fx.root.join(&first.artifact.path).join("index.js");
+        tokio::fs::remove_file(&index).await.unwrap();
+
+        let (result, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(result.0, "{result:?}");
+        let mut entry = entry.expect("a rebuild returns its entry");
+        assert_eq!(codes(&warnings), ["vendor_artifact_rebuilt"]);
+        assert!(!warnings[0].detail.contains("vlt install"), "{warnings:?}");
+        assert_eq!(tokio::fs::read(&index).await.unwrap(), PATCHED);
+        assert_eq!(read(&fx, VLT_LOCK).await, lock);
+        assert_eq!(read(&fx, PACKAGE_JSON).await, pkg);
+        assert_eq!(entry.artifact.path, first.artifact.path);
+        assert_eq!(entry.artifact.file_inventory, first.artifact.file_inventory);
+        assert!(entry.wiring.is_empty());
+        crate::vendor::state::carry_forward_wiring(&first, &mut entry);
+        assert_eq!(entry.wiring, first.wiring);
+    }
+
+    #[tokio::test]
+    async fn a_rebuild_clears_strays_beside_the_package_dir_and_ends_healthy() {
+        use crate::vendor::verify::{check_vendored_artifact, ArtifactHealth};
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let rec = record(UUID);
+        let leaf = uuid_dir(&fx, UUID).join("left-pad-1.3.0");
+        tokio::fs::write(leaf.join("node_modules/.DS_Store"), b"x")
+            .await
+            .unwrap();
+        tokio::fs::write(leaf.join("stray.txt"), b"x")
+            .await
+            .unwrap();
+        assert_eq!(
+            check_vendored_artifact(&fx.root, &first, &rec).await,
+            ArtifactHealth::Corrupt {
+                reason: "vendor_inventory_mismatch".into()
+            }
+        );
+        let (result, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(result.0, "{result:?}");
+        assert_eq!(codes(&warnings), ["vendor_artifact_rebuilt"]);
+        let mut entry = entry.unwrap();
+        crate::vendor::state::carry_forward_wiring(&first, &mut entry);
+        persist(&fx, &entry).await;
+        assert_eq!(
+            check_vendored_artifact(&fx.root, &entry, &rec).await,
+            ArtifactHealth::Healthy
+        );
+        assert!(!leaf.join("node_modules/.DS_Store").exists());
+        assert!(!leaf.join("stray.txt").exists());
+        let (result, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(
+            result.0 && entry.is_none() && warnings.is_empty(),
+            "{warnings:?}"
+        );
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn a_rebuild_keeps_vlt_links_and_says_to_reinstall_when_it_cannot() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let rel_abs = fx.root.join(&first.artifact.path);
+        let links = rel_abs.join("node_modules");
+        tokio::fs::create_dir_all(links.join(".bin")).await.unwrap();
+        std::os::unix::fs::symlink(
+            "../../../../../../../../node_modules/.vlt/z",
+            links.join("z"),
+        )
+        .unwrap();
+        tokio::fs::write(links.join(".bin/tool"), b"#!/bin/sh\n")
+            .await
+            .unwrap();
+        tokio::fs::remove_file(rel_abs.join("index.js"))
+            .await
+            .unwrap();
+
+        let (_, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(entry.is_some());
+        assert_eq!(codes(&warnings), ["vendor_artifact_rebuilt"]);
+        assert!(!warnings[0].detail.contains("vlt install"), "{warnings:?}");
+        assert_eq!(
+            std::fs::read_link(links.join("z")).unwrap(),
+            std::path::Path::new("../../../../../../../../node_modules/.vlt/z")
+        );
+        assert!(links.join(".bin/tool").is_file());
+        assert_eq!(
+            tokio::fs::read(rel_abs.join("index.js")).await.unwrap(),
+            PATCHED
+        );
+
+        tokio::fs::write(links.join("planted.js"), b"x")
+            .await
+            .unwrap();
+        let (_, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(entry.is_some());
+        assert_eq!(codes(&warnings), ["vendor_artifact_rebuilt"]);
+        assert!(
+            warnings[0].detail.contains("run `vlt install`"),
+            "{warnings:?}"
+        );
+        assert!(!links.exists());
+    }
+
+    #[tokio::test]
+    async fn an_in_sync_rerun_restores_the_uuid_metadata() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let dir = uuid_dir(&fx, UUID);
+        tokio::fs::write(dir.join(".gitignore"), b"*\n")
+            .await
+            .unwrap();
+        tokio::fs::remove_file(dir.join(".gitattributes"))
+            .await
+            .unwrap();
+        let (result, entry, warnings) = done_parts(run(&fx, UUID, false).await);
+        assert!(
+            result.0 && entry.is_none() && warnings.is_empty(),
+            "{warnings:?}"
+        );
+        assert_eq!(
+            tokio::fs::read_to_string(dir.join(".gitignore"))
+                .await
+                .unwrap(),
+            super::super::npm_dir::UUID_GITIGNORE
+        );
+        assert_eq!(
+            tokio::fs::read_to_string(dir.join(".gitattributes"))
+                .await
+                .unwrap(),
+            super::super::npm_dir::UUID_GITATTRIBUTES
+        );
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn a_gitignored_payload_refuses_and_unwinds() {
+        let Some(git) = crate::utils::process::resolve_tool("git") else {
+            return;
+        };
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let status = std::process::Command::new(&git)
+            .args(["init", "-q"])
+            .current_dir(&fx.root)
+            .status()
+            .unwrap();
+        assert!(status.success());
+        tokio::fs::write(fx.root.join(".gitignore"), ".socket/\n")
+            .await
+            .unwrap();
+        let (code, detail) = refusal(run(&fx, UUID, false).await);
+        assert_eq!(code, "vendor_artifact_gitignored", "{detail}");
+        assert!(detail.contains(".gitignore:1:.socket/"), "{detail}");
+        assert!(!uuid_dir(&fx, UUID).exists());
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
+    }
+
+    #[tokio::test]
+    async fn a_bundling_package_refuses_on_the_local_build() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        tokio::fs::write(
+            fx.installed.join(PACKAGE_JSON),
+            "{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"bundleDependencies\":[\"x\"]}",
+        )
+        .await
+        .unwrap();
+        let (code, _) = refusal(run(&fx, UUID, false).await);
+        assert_eq!(code, "vendor_bundled_deps_unsupported");
+        assert!(!fx.root.join(".socket").exists());
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+    }
+
+    #[tokio::test]
+    async fn the_service_tree_is_pruned_and_a_bundling_one_refuses() {
+        use crate::vendor::test_support::{mount_granted, service_cfg};
+        use crate::vendor::verify::{check_vendored_artifact, ArtifactHealth};
+        use crate::vendor::VendorSource;
+        let server = wiremock::MockServer::start().await;
+        let tgz = service_tgz(&[
+            (
+                "package/package.json",
+                tar::EntryType::Regular,
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}",
+            ),
+            ("package/index.js", tar::EntryType::Regular, PATCHED),
+            (
+                "package/node_modules/x/index.js",
+                tar::EntryType::Regular,
+                b"bundled",
+            ),
+        ]);
+        mount_granted(&server, UUID, "left-pad-1.3.0.tgz", &tgz).await;
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let cfg = service_cfg(&server.uri(), VendorSource::Auto, false);
+        let (entry, warnings) = entry_of(run_with(&fx, &cfg).await);
+        assert!(
+            codes(&warnings).contains(&"vendor_prebuilt_downloaded"),
+            "{warnings:?}"
+        );
+        assert!(!fx
+            .root
+            .join(&entry.artifact.path)
+            .join("node_modules")
+            .exists());
+        assert_eq!(
+            check_vendored_artifact(&fx.root, &entry, &record(UUID)).await,
+            ArtifactHealth::Healthy
+        );
+
+        let server = wiremock::MockServer::start().await;
+        let tgz = service_tgz(&[
+            (
+                "package/package.json",
+                tar::EntryType::Regular,
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"bundleDependencies\":[\"x\"]}",
+            ),
+            ("package/index.js", tar::EntryType::Regular, PATCHED),
+            (
+                "package/node_modules/x/index.js",
+                tar::EntryType::Regular,
+                b"bundled",
+            ),
+        ]);
+        mount_granted(&server, UUID, "left-pad-1.3.0.tgz", &tgz).await;
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let cfg = service_cfg(&server.uri(), VendorSource::Auto, false);
+        let (code, _) = refusal(run_with(&fx, &cfg).await);
+        assert_eq!(code, "vendor_bundled_deps_unsupported");
+        assert!(!fx.root.join(".socket/vendor").exists());
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+    }
+
+    #[tokio::test]
+    async fn a_service_tree_without_the_patched_files_falls_back_or_fails_closed() {
+        use crate::vendor::test_support::{mount_granted, service_cfg};
+        use crate::vendor::VendorSource;
+        let server = wiremock::MockServer::start().await;
+        let tgz = service_tgz(&[
+            (
+                "package/package.json",
+                tar::EntryType::Regular,
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}",
+            ),
+            (
+                "package/index.js",
+                tar::EntryType::Regular,
+                b"not the patch",
+            ),
+        ]);
+        mount_granted(&server, UUID, "left-pad-1.3.0.tgz", &tgz).await;
+
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let cfg = service_cfg(&server.uri(), VendorSource::Auto, false);
+        let (entry, warnings) = entry_of(run_with(&fx, &cfg).await);
+        assert!(
+            codes(&warnings).contains(&"vendor_prebuilt_layout_mismatch"),
+            "{warnings:?}"
+        );
+        assert_eq!(
+            tokio::fs::read(fx.root.join(&entry.artifact.path).join("index.js"))
+                .await
+                .unwrap(),
+            PATCHED,
+            "the local build replaced the service tree"
+        );
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let cfg = service_cfg(&server.uri(), VendorSource::Service, false);
+        let (result, entry, _) = done_parts(run_with(&fx, &cfg).await);
+        assert!(!result.0 && entry.is_none(), "{result:?}");
+        assert!(
+            result
+                .1
+                .unwrap()
+                .contains("does not carry the patched files"),
+            "fails closed"
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert!(!fx.root.join(".socket/vendor").exists());
+    }
 }

From 0ffa6effc5fd3037f740158a83d96e2079393745 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 02:01:48 -0400
Subject: [PATCH 17/46] Attest vlt locks in manifest-less VEX

`socket-patch vex` and every embedded `--vex` now read vlt-lock.json:
a Socket-hosted registry node (patch URL plus sha512, any DepID era)
and a vendored vlt package directory become attestation inputs, so a
vlt project attests its patches without .socket/manifest.json or the
ledgers, and a redirect or vendor ledger stays live only while the vlt
lock still wires it. A lock vlt cannot read (BOM, unknown version)
wires nothing.

Hosted npm packages are now judged by every store variant of their
installed copies (pnpm and vlt peer, modifier and registry-alias
instances), and a vlt package that another registry also resolves at
the same version no longer attests before install. Vendored vlt
directories verify with the package.json exemption, including the
out-of-sync check of the installed link, and setup.manual accepts
`vlt`.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   11 +
 crates/socket-patch-cli/CLI_CONTRACT.md       |    1 +
 .../socket-patch-cli/src/commands/scan/mod.rs |   46 +
 crates/socket-patch-cli/src/commands/vex.rs   |    3 +-
 .../src/commands/vex_consumed.rs              |   68 +-
 .../src/commands/vex_sources.rs               |   38 +-
 .../tests/e2e_embedded_vex.rs                 |   95 +
 .../tests/e2e_vex_lockfile/main.rs            |    1 +
 .../tests/e2e_vex_lockfile/vlt.rs             |  296 +
 .../tests/e2e_vex_redirect.rs                 |  131 +-
 .../tests/vex_e2e_common/vlt.rs               |  357 ++
 .../src/patch/redirect/mod.rs                 |    2 +-
 .../src/vendor/lock_inventory/vlt.rs          |   21 +-
 crates/socket-patch-core/src/vendor/verify.rs |   43 +
 .../socket-patch-core/src/vex/discover/mod.rs |  110 +-
 .../socket-patch-core/src/vex/discover/vlt.rs |  764 +++
 crates/socket-patch-core/src/vex/verify.rs    |   96 +-
 .../vex-discover-golden/redirect-npm.json     | 4787 ++++++++++++++++-
 .../vex-discover-golden/vlt-locks.json        |  716 ++-
 crates/socket-patch-core/tests/vlt_locks.rs   |   95 +-
 20 files changed, 7354 insertions(+), 327 deletions(-)
 create mode 100644 crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
 create mode 100644 crates/socket-patch-core/src/vex/discover/vlt.rs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a5aa36ae..f102e8df 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -332,6 +332,17 @@ into the new version's section — see docs/releasing.md.
   slots and outgoing edge values vlt rewrote since) or keeps everything on
   drift. Lock inventory reads `vlt-lock.json` too, Socket-hosted pins
   included.
+- **`vex` reads `vlt-lock.json`.** Manifest-less VEX (and the ledger
+  liveness gates behind `vex`, `scan`'s takeovers and the
+  `hosted_wiring_retained` advisory) discovers hosted vlt nodes (a Socket
+  URL and sha512 on a registry node, every DepID era) and vendored vlt
+  package directories, and verifies a vendored directory with the vlt
+  `package.json` exemption, including the out-of-sync check of the
+  installed link. A lock vlt cannot read (BOM, other `lockfileVersion`)
+  wires nothing. A hosted npm package is now judged by every store variant
+  of its installed copies (pnpm and vlt peer, modifier and registry-alias
+  instances), and a same-version instance on another registry keeps a vlt
+  hosted pin from attesting before install. `setup.manual` accepts `vlt`.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 1947b076..9c7fecf6 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -199,6 +199,7 @@ Discovery is read-only, never touches the network, and never fails the run: a ma
 | pnpm | `pnpm-lock.yaml` (every `lockfileVersion`); `shrinkwrap.yaml` only when there is no `pnpm-lock.yaml`; with `rush.json`, `common/config/rush/pnpm-lock.yaml` + `common/config/subspaces/*/pnpm-lock.yaml` | `packages:` `resolution.tarball` on the patch host | `file:.socket/vendor/npm/…` tarball + key | `integrity`, required |
 | yarn | `yarn.lock` (classic and berry) | classic `resolved`; berry `resolution: …::__archiveUrl=<url>` | classic `resolved "file:./.socket/vendor/npm/…#<sha1>"`; berry `file:` entry **plus** a root `package.json` `resolutions` mapping onto the same artifact (without it the entry is orphaned: diagnosed, no ref) | classic `integrity` / `#sha1`, berry `checksum`, required |
 | bun | `bun.lock`; `bun.lockb` only when there is no `bun.lock` (bun reads exactly one) | URL tuple / binary remote-tarball resolution; version from the URL leaf | `.socket/vendor/npm/<uuid>/<name>-<ver>.tgz` tuple / local-tarball resolution | `sha512-…`, required. A 2-tuple that Bun < 1.3.10 re-saved without its digest is still a reference, but it attests only from an installed tree. |
+| vlt | `vlt-lock.json` (lockfileVersion absent, `0` or `1`; a BOM-prefixed, non-object or other-version lock is unreadable to vlt: diagnosed, no ref). `vlt.json` and `node_modules/.vlt-lock.json` are never wiring. | a registry node (any segment) whose slot [3] is on the patch host with the leaf `<bare>-<ver>.tgz` of its DepID's `name@version` and slot [1] == name; version from the DepID | a `file` node `.socket/vendor/npm/<uuid>/<name>-<ver>/node_modules/<name>` (or a user-installed `<name>-<ver>.tgz`) with slot [1] == name; version from the path. A same-`name@version` registry node beside it is diagnosed, no ref. | slot [2] `sha512-…`, required (a hosted node without one is no reference). A same-`name@version` node on another registry keeps the reference but withholds the lockfile basis: only an installed tree whose every store copy verifies attests. |
 | cargo | `Cargo.lock`, `Cargo.toml`, `.cargo/config` (else `.cargo/config.toml`) | `Cargo.lock` `source = "sparse+…/<uuid>/index/"`, confirmed by `Cargo.toml`: a crate the root manifest declares must pin `registry = "socket-patch-<uuid>"`. A reverted pin is diagnosed, no ref. | `[patch.<source>] <key> = { path = ".socket/vendor/cargo/<uuid>/<name>-<ver>" }` — primarily the root `Cargo.toml` (v5 `vendor`; key-agnostic: `<name>` is `package` when renamed, else the key, so `<name>-socket-<uuid8>` keys count), also the project config (pre-v5 wiring), live only while the lock holds a sourceless entry for it that is not in `[[patch.unused]]`; a manifest entry cargo ignores — the project config redefines its key with another path, or a `[patch."https://github.com/rust-lang/crates.io-index"]` table replaces `[patch.crates-io]` — is diagnosed (`patched_ref_invalid`), no ref | `checksum` (v1: `[metadata]`), required |
 | golang | `go.mod`, `go.work`, `go.sum`, `go.work.sum` | `replace M v => patch.socket.dev/gopatch/<uuid> <sver>` | `replace M v => ./.socket/vendor/golang/<uuid>/M@v` | both go.sum lines, required. A replace that `require` no longer selects (`require M v'`) is inert: diagnosed, no ref. |
 | pypi | `uv.lock` (confirmed by `pyproject.toml` `[tool.uv.sources]` when present), PEP 723 `<script>.py.lock`, `pylock.toml` / `pylock.<name>.toml`, `poetry.lock`, `pdm.lock`, `Pipfile.lock`, `requirements.txt` + its in-root `-r` includes, PEP 508 direct references in `pyproject.toml` / `hatch.toml` | Socket-host artifact url | `.socket/vendor/pypi/<uuid>/<wheel>` naming the entry's own dist | sha256, required |
diff --git a/crates/socket-patch-cli/src/commands/scan/mod.rs b/crates/socket-patch-cli/src/commands/scan/mod.rs
index 4618af42..0f9fc739 100644
--- a/crates/socket-patch-cli/src/commands/scan/mod.rs
+++ b/crates/socket-patch-cli/src/commands/scan/mod.rs
@@ -3281,6 +3281,52 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn hosted_retained_probe_reads_the_vlt_lock() {
+        let purl = "pkg:npm/minimist@1.2.2";
+        let scanned: HashSet<String> = [purl.to_string()].into_iter().collect();
+        let url = format!(
+            "https://patch.socket.dev/patch/npm/minimist/1.2.2/tok/{TAKEOVER_UUID}/minimist-1.2.2.tgz"
+        );
+        let lock = |slot2: &str, slot3: &str| {
+            format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+                 \"~npm~minimist@1.2.2\": [0,\"minimist\",\"{slot2}\",\"{slot3}\"]\n  }},\n  \
+                 \"edges\": {{}}\n}}\n"
+            )
+        };
+        let hosted = lock("sha512-patched==", &url);
+        let registry = lock(
+            "sha512-orig==",
+            "https://registry.npmjs.org/minimist/-/minimist-1.2.2.tgz",
+        );
+        for (what, text, live) in [
+            ("hosted pin", hosted.clone(), true),
+            ("reverted to the registry", registry, false),
+            (
+                "BOM-prefixed pin vlt cannot read",
+                format!("\u{feff}{hosted}"),
+                false,
+            ),
+        ] {
+            let tmp = tempfile::tempdir().unwrap();
+            write_redirect_ledger_with_edit(tmp.path(), &[purl]).await;
+            tokio::fs::write(tmp.path().join("vlt-lock.json"), text)
+                .await
+                .unwrap();
+            let ledger = load_ledger(tmp.path()).await;
+            let retained =
+                hosted_wiring_retained_purls(&common_at(tmp.path()), ledger.as_ref(), &scanned)
+                    .await;
+            let want = if live {
+                vec![purl.to_string()]
+            } else {
+                Vec::new()
+            };
+            assert_eq!(retained, want, "{what}");
+        }
+    }
+
     #[test]
     fn agent_retention_details_name_packages_and_safe_remediation() {
         let purls = vec!["pkg:npm/minimist@1.2.2".to_string()];
diff --git a/crates/socket-patch-cli/src/commands/vex.rs b/crates/socket-patch-cli/src/commands/vex.rs
index 720a4838..016df964 100644
--- a/crates/socket-patch-cli/src/commands/vex.rs
+++ b/crates/socket-patch-cli/src/commands/vex.rs
@@ -464,7 +464,7 @@ fn org_looks_like_path(org: Option<&str>) -> Option<String> {
 /// Unrecognized names yield `None` and are ignored.
 fn ecosystem_from_manual_name(name: &str) -> Option<Ecosystem> {
     match name.to_ascii_lowercase().as_str() {
-        "npm" | "yarn" | "pnpm" | "bun" => Some(Ecosystem::Npm),
+        "npm" | "yarn" | "pnpm" | "bun" | "vlt" => Some(Ecosystem::Npm),
         "pypi" | "python" => Some(Ecosystem::Pypi),
         "gem" | "ruby" => Some(Ecosystem::Gem),
         "cargo" | "rust" => Some(Ecosystem::Cargo),
@@ -1522,6 +1522,7 @@ mod tests {
     #[test]
     fn ecosystem_from_manual_name_maps_every_ecosystem() {
         assert_eq!(ecosystem_from_manual_name("npm"), Some(Ecosystem::Npm));
+        assert_eq!(ecosystem_from_manual_name("vlt"), Some(Ecosystem::Npm));
         assert_eq!(ecosystem_from_manual_name("PyPI"), Some(Ecosystem::Pypi)); // case-insensitive
         assert_eq!(ecosystem_from_manual_name("python"), Some(Ecosystem::Pypi));
         assert_eq!(ecosystem_from_manual_name("ruby"), Some(Ecosystem::Gem));
diff --git a/crates/socket-patch-cli/src/commands/vex_consumed.rs b/crates/socket-patch-cli/src/commands/vex_consumed.rs
index 8b4dc668..88067513 100644
--- a/crates/socket-patch-cli/src/commands/vex_consumed.rs
+++ b/crates/socket-patch-cli/src/commands/vex_consumed.rs
@@ -23,7 +23,7 @@
 //! | golang | the REPLACEMENT module `$GOMODCACHE/patch.socket.dev/gopatch/<uuid>@<sver>` (the ref's `url`, else go.mod's hosted `replace`) | the original `M@v` |
 //! | cargo | `registry/src/<host>-<hash>/<name>-<version>` for the lock source's host; several such registries (one per patch uuid) are narrowed to the one whose cached `.crate` has the lock's pinned checksum. A `vendor/` source tree or `--global-prefix` is taken as given | crates.io's / any other registry's extraction |
 //! | maven | `<repo>/<g>/<a>/<base>-socket.<hex8>/` (the version the pom pins), its artifact files matched under the suffixed name | the `<base>` version dir |
-//! | npm | every `node_modules` copy the crawler finds (pnpm and vlt store copies included), plus alias installs (`node_modules/<alias>` holding the package) in the root's and every workspace member's tree | — each serves some dependent: ALL must verify |
+//! | npm | every `node_modules` copy the crawler finds (pnpm and vlt store copies included), every peer / modifier / registry variant of those in the same `.pnpm` / `.vlt` store, plus alias installs (`node_modules/<alias>` holding the package) in the root's and every workspace member's tree | — each serves some dependent: ALL must verify |
 //! | pypi | every copy in the crawler's environment set (the project's venvs when it has any, else the interpreters) | — any may be the one that runs the project: ALL must verify |
 //! | gem | every copy in bundler's gem path | — bundler loads whichever `Gem.path` home it hits first: ALL must verify |
 //!
@@ -40,6 +40,7 @@
 use std::collections::{BTreeMap, HashMap};
 use std::path::{Path, PathBuf};
 
+use socket_patch_core::crawlers::npm_crawler::find_store_peer_variant_copies;
 use socket_patch_core::crawlers::{
     CargoCrawler, CrawlerOptions, Ecosystem, GoCrawler, MavenCrawler, NpmCrawler,
 };
@@ -94,9 +95,13 @@ pub(crate) async fn hosted_consumed_copies(
             None => HashMap::new(),
         };
         npm_identity_fallback(shared.get(&Ecosystem::Npm), &options, &mut all, &aliases).await;
+        let npm: Vec<&String> = shared.get(&Ecosystem::Npm).into_iter().flatten().collect();
         for purl in shared.values().flatten() {
             let mut paths = all.remove(purl).unwrap_or_default();
             paths.extend(aliases.remove(purl).unwrap_or_default());
+            if npm.contains(&purl) {
+                paths = with_store_variants(paths).await;
+            }
             out.insert(
                 purl.clone(),
                 HostedCopies {
@@ -271,6 +276,28 @@ async fn npm_identity_fallback(
     all.extend(npm_paths_by_identity(options, &missing).await);
 }
 
+/// `paths` plus every store variant of each (a pnpm peer suffix, a vlt peer
+/// or modifier extra, a vlt registry-alias instance of the same
+/// `name@version`): the crawler resolves a store copy only for a package
+/// with no importer copy, leaving the variants to apply's fan-out, but each
+/// variant is what some dependent loads.
+async fn with_store_variants(paths: Vec<PathBuf>) -> Vec<PathBuf> {
+    let mut seen: std::collections::HashSet<PathBuf> = std::collections::HashSet::new();
+    for path in &paths {
+        seen.insert(tokio::fs::canonicalize(path).await.unwrap_or(path.clone()));
+    }
+    let mut out = paths.clone();
+    for path in &paths {
+        for copy in find_store_peer_variant_copies(path).await {
+            let canonical = tokio::fs::canonicalize(&copy).await.unwrap_or(copy.clone());
+            if seen.insert(canonical) {
+                out.push(copy);
+            }
+        }
+    }
+    out
+}
+
 // ── golang ───────────────────────────────────────────────────────────────
 
 /// Under `replace M v => patch.socket.dev/gopatch/<uuid> <sver>` the build
@@ -700,6 +727,45 @@ mod tests {
         assert!(npm_alias_copies(&global, &purls).await.is_empty());
     }
 
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn store_variants_of_a_consumed_copy_are_consumed_too() {
+        let tmp = tempfile::tempdir().unwrap();
+        let nm = tmp.path().join("node_modules");
+        for id in [
+            "~npm~left-pad@1.3.0",
+            "~npm~left-pad@1.3.0~peer.0df72515a50372ba",
+            "~acme~left-pad@1.3.0",
+            "~npm~left-pad@1.4.0",
+        ] {
+            let version = if id.contains("1.4.0") {
+                "1.4.0"
+            } else {
+                "1.3.0"
+            };
+            pkg(
+                &nm.join(format!(".vlt/{id}/node_modules/left-pad")),
+                "left-pad",
+                version,
+            );
+        }
+        std::os::unix::fs::symlink(
+            ".vlt/~npm~left-pad@1.3.0/node_modules/left-pad",
+            nm.join("left-pad"),
+        )
+        .unwrap();
+        let mut got = with_store_variants(vec![nm.join("left-pad")]).await;
+        got.sort();
+        let mut want = vec![
+            nm.join("left-pad"),
+            nm.join(".vlt/~acme~left-pad@1.3.0/node_modules/left-pad"),
+            nm.join(".vlt/~npm~left-pad@1.3.0~peer.0df72515a50372ba/node_modules/left-pad"),
+        ];
+        want.sort();
+        assert_eq!(got, want);
+        assert!(with_store_variants(Vec::new()).await.is_empty());
+    }
+
     /// vlt twin of the `.pnpm` case: every importer entry is a link into
     /// the `.vlt` store (the alias `lp` too), so the alias walk yields
     /// nothing, while the crawler resolves the alias's package from its
diff --git a/crates/socket-patch-cli/src/commands/vex_sources.rs b/crates/socket-patch-cli/src/commands/vex_sources.rs
index 77b69e3c..ea19befc 100644
--- a/crates/socket-patch-cli/src/commands/vex_sources.rs
+++ b/crates/socket-patch-cli/src/commands/vex_sources.rs
@@ -771,8 +771,13 @@ fn vendored_entry_for(cand: &Cand, vref: &PatchedRef) -> VendorEntry {
         wiring: Vec::new(),
         lock: None,
         took_over_go_patches: false,
-        // Bun's workspace-mirror integrity check keys off the flavor.
-        flavor: (source == "bun.lock" || source == "bun.lockb").then(|| "bun".to_string()),
+        // Bun's workspace-mirror integrity check and the vlt package-dir
+        // verifier (structure rule, manifest exemption) key off the flavor.
+        flavor: match source.as_ref() {
+            "bun.lock" | "bun.lockb" => Some("bun".to_string()),
+            "vlt-lock.json" => Some("vlt".to_string()),
+            _ => None,
+        },
         uv: None,
         pnpm: None,
         poetry: None,
@@ -1036,6 +1041,35 @@ mod tests {
         d
     }
 
+    #[test]
+    fn a_synthesized_vendored_entry_carries_the_source_locks_flavor() {
+        let vendor = VendorState::new();
+        for (source, artifact, flavor) in [
+            (
+                "vlt-lock.json",
+                format!(".socket/vendor/npm/{U1}/x-1.0.0/node_modules/x"),
+                Some("vlt"),
+            ),
+            (
+                "bun.lock",
+                format!(".socket/vendor/npm/{U1}/x-1.0.0.tgz"),
+                Some("bun"),
+            ),
+            (
+                "package-lock.json",
+                format!(".socket/vendor/npm/{U1}/x-1.0.0.tgz"),
+                None,
+            ),
+        ] {
+            let vref = vendor_ref(&artifact).unwrap();
+            let r = PatchedRef::vendored("pkg:npm/x@1.0.0".into(), &vref, source, None);
+            let entry = vendored_entry_for(&Cand::from_ref(&r, &vendor), &r);
+            assert_eq!(entry.flavor.as_deref(), flavor, "{source}");
+            assert_eq!(entry.artifact.path, artifact, "{source}");
+            assert!(entry.detached && entry.artifact.file_inventory.is_none());
+        }
+    }
+
     /// The lockfile wires U2; the manifest records U1 and the redirect
     /// ledger U2 under the same key: the WIRED uuid's record wins.
     #[tokio::test]
diff --git a/crates/socket-patch-cli/tests/e2e_embedded_vex.rs b/crates/socket-patch-cli/tests/e2e_embedded_vex.rs
index 5edfa980..7ea4f1f0 100644
--- a/crates/socket-patch-cli/tests/e2e_embedded_vex.rs
+++ b/crates/socket-patch-cli/tests/e2e_embedded_vex.rs
@@ -273,6 +273,101 @@ fn apply_vex_writes_document_on_success() {
     );
 }
 
+/// vlt: agent `apply --vex` patches every `.vlt` store copy (a peer
+/// variant included) and attests it, with the ecosystem declared manual
+/// under its package-manager name `vlt`.
+#[test]
+fn apply_vex_attests_a_vlt_store_install_declared_manual_as_vlt() {
+    let tmp = tempfile::tempdir().unwrap();
+    let cwd = tmp.path();
+    let before = b"before contents\n";
+    let after = b"after contents\n";
+    let before_hash = compute_git_sha256_from_bytes(before);
+    let after_hash = compute_git_sha256_from_bytes(after);
+    std::fs::write(
+        cwd.join("vlt-lock.json"),
+        "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
+         \"~npm~vuln-pkg@1.0.0\": [0,\"vuln-pkg\",\"sha512-x==\"]\n  },\n  \"edges\": {}\n}\n",
+    )
+    .unwrap();
+    let copies = [
+        "node_modules/.vlt/~npm~vuln-pkg@1.0.0/node_modules/vuln-pkg",
+        "node_modules/.vlt/~npm~vuln-pkg@1.0.0~peer.0df72515a50372ba/node_modules/vuln-pkg",
+    ];
+    for copy in copies {
+        let pkg = cwd.join(copy);
+        std::fs::create_dir_all(&pkg).unwrap();
+        std::fs::write(
+            pkg.join("package.json"),
+            r#"{"name":"vuln-pkg","version":"1.0.0"}"#,
+        )
+        .unwrap();
+        std::fs::write(pkg.join("index.js"), before).unwrap();
+    }
+    let mut manifest = PatchManifest::new();
+    manifest.patches.insert(
+        "pkg:npm/vuln-pkg@1.0.0".to_string(),
+        make_record(
+            "11111111-1111-4111-8111-111111111111",
+            "package/index.js",
+            &before_hash,
+            &after_hash,
+            "GHSA-aaaa-bbbb-cccc",
+            &["CVE-2024-0001"],
+        ),
+    );
+    manifest.setup = Some(SetupConfig {
+        exclude: Vec::new(),
+        manual: vec!["vlt".to_string()],
+    });
+    let socket = cwd.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    std::fs::write(
+        socket.join("manifest.json"),
+        serde_json::to_string_pretty(&manifest).unwrap(),
+    )
+    .unwrap();
+    std::fs::write(socket.join("blobs").join(&after_hash), after).unwrap();
+    let vex_path = cwd.join("apply.vex.json");
+
+    let out = cli()
+        .args([
+            "apply",
+            "--cwd",
+            cwd.to_str().unwrap(),
+            "--offline",
+            "--vex",
+            vex_path.to_str().unwrap(),
+            "--vex-product",
+            "pkg:npm/my-app@1.0.0",
+        ])
+        .output()
+        .expect("invoke apply");
+    assert!(
+        out.status.success(),
+        "apply --vex should exit 0. stderr:\n{}",
+        String::from_utf8_lossy(&out.stderr)
+    );
+    for copy in copies {
+        let on_disk = std::fs::read(cwd.join(copy).join("index.js")).unwrap();
+        assert_eq!(
+            compute_git_sha256_from_bytes(&on_disk),
+            after_hash,
+            "{copy}"
+        );
+    }
+    let doc: Value = serde_json::from_str(&std::fs::read_to_string(&vex_path).unwrap()).unwrap();
+    let stmts = doc["statements"].as_array().unwrap();
+    assert_eq!(stmts.len(), 1, "{doc}");
+    assert_not_affected_statement(
+        &stmts[0],
+        "GHSA-aaaa-bbbb-cccc",
+        "CVE-2024-0001",
+        "pkg:npm/my-app@1.0.0",
+        "pkg:npm/vuln-pkg@1.0.0",
+    );
+}
+
 #[test]
 fn apply_json_envelope_carries_vex_summary() {
     let tmp = tempfile::tempdir().unwrap();
diff --git a/crates/socket-patch-cli/tests/e2e_vex_lockfile/main.rs b/crates/socket-patch-cli/tests/e2e_vex_lockfile/main.rs
index 9f3bff17..0953f4b0 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_lockfile/main.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_lockfile/main.rs
@@ -45,6 +45,7 @@ mod pipenv;
 mod pnpm;
 mod poetry;
 mod uv;
+mod vlt;
 mod yarn;
 mod yarn_berry;
 mod yarn_classic;
diff --git a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
new file mode 100644
index 00000000..ba7e2b57
--- /dev/null
+++ b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
@@ -0,0 +1,296 @@
+//! Hermetic manifest-less VEX cells for vlt — every `vlt-lock.json` grammar
+//! era, no vlt binary, all three OSes, never `#[ignore]`d.
+//!
+//! The real-vlt halves live in `e2e_redirect_vlt_build.rs` (hosted) and
+//! `e2e_vendor_vlt_build.rs` (vendored), which end in
+//! [`run_vlt_vex_matrix`]. This suite covers the evidence edges a real
+//! install cannot stage, over the eras the hosted rewriter writes
+//! (`lockfileVersion: 1` tilde ids, `0` legacy `·npm·` ids, and the
+//! version-less `··` ids):
+//!
+//! * hosted — the REAL `scan --mode hosted` (a wiremock patch API that also
+//!   serves the artifact the vlt preflight fetches, so the hosted URL is on
+//!   the mock origin and `vex` gets it as `--patch-server-url`) rewrites the
+//!   lock over an importer copy; then vlt's installed state is staged (the
+//!   importer copy and `node_modules/.vlt/<DepID>/node_modules/left-pad`)
+//!   and, with the manifest deleted:
+//!   - the redirect ledger's embedded record attests offline;
+//!   - with the ledgers deleted too, installed + patched attests
+//!     `(redirected)` from the patch API's record;
+//!   - a tampered or pristine store copy is omitted (`hash_mismatch` /
+//!     `not_applied`) even though the importer copy is patched;
+//!   - not installed attests from the lock's sha512 pin;
+//!   - a record naming another package, or another patch, is omitted
+//!     (`record_mismatch`);
+//!   - `--offline` is omitted (`record_unavailable`) with zero requests;
+//!   - the same URL off the configured origin, on a look-alike host, or with
+//!     an uppercase patch uuid is not a reference to that patch;
+//!   - a BOM-prefixed lock (vlt cannot read it) references nothing.
+//! * a same-`name@version` instance a named alias still resolves from its
+//!   registry keeps the hosted ref off the lockfile basis: only an installed
+//!   tree whose every copy verifies attests.
+//!
+//! The vendored cells (committed dir artifact, tampered, mismatch, offline,
+//! unwired) run `vendor --offline` and live with the vendored CLI.
+
+use std::path::{Path, PathBuf};
+
+use wiremock::MockServer;
+
+#[path = "../vlt_hosted_common/mod.rs"]
+mod hosted;
+#[path = "../vex_e2e_common/vlt.rs"]
+mod vlt_vex;
+
+use hosted::{Era, NAME, PATCHED, PRISTINE, PURL, UUID, VERSION};
+use vlt_vex::{
+    assert_absent, assert_attested, assert_not_attested, binary, git_sha256, patch_view, run_vex,
+    run_vlt_vex_matrix, strip_ledgers, Marker, PatchApi, VexRun, VltMode, VltVexCase, VLT_LOCK,
+};
+
+const VULNS: &[(&str, &[&str])] = &[(hosted::GHSA, &["CVE-2026-4242"])];
+const TAMPERED: &[u8] = b"module.exports = 'not the patch'\n";
+const ERAS: &[(Era, &str)] = &[(Era::V1, "v1"), (Era::V0, "v0"), (Era::A0, "a0")];
+
+/// The view the API serves: real before/after hashes of `index.js`, so a
+/// pristine install reads `not_applied` and a foreign one `hash_mismatch`.
+fn view(uuid: &str, purl: &str) -> serde_json::Value {
+    let mut v = patch_view(
+        uuid,
+        purl,
+        &[("package/index.js", &git_sha256(PATCHED))],
+        VULNS,
+    );
+    v["files"]["package/index.js"]["beforeHash"] = serde_json::Value::String(git_sha256(PRISTINE));
+    v
+}
+
+fn api_with(uuid: &str, purl: &str) -> PatchApi {
+    PatchApi::start(vec![(UUID.to_string(), view(uuid, purl))])
+}
+
+/// vlt's installed state for `id`: the importer copy and its store entry,
+/// both holding `index`.
+fn install(root: &Path, id: &str, index: &[u8]) {
+    let _ = std::fs::remove_dir_all(root.join("node_modules"));
+    hosted::install_importer(root, index);
+    hosted::install_store(root, id, index);
+}
+
+struct HostedProject {
+    root: PathBuf,
+    /// The mock origin the lock's hosted URL is on.
+    origin: String,
+    /// The lock `scan --mode hosted` wrote.
+    lock: String,
+    /// The lock before the scan.
+    registry_lock: String,
+}
+
+/// `scan --mode hosted` over a registry lock of `era` with a pristine
+/// importer copy (nothing in vlt's store, so the heal has nothing to do).
+fn hosted_project(tmp: &Path, era: Era, tag: &str) -> HostedProject {
+    let root = tmp.join(format!("hosted-{tag}"));
+    std::fs::create_dir_all(&root).unwrap();
+    hosted::write_vlt_project(&root, era);
+    let registry_lock = hosted::read(&root, VLT_LOCK);
+    let rt = tokio::runtime::Runtime::new().unwrap();
+    let server = rt.block_on(MockServer::start());
+    rt.block_on(hosted::mock_all(&server));
+    let (code, doc) = hosted::scan_hosted(&root, &server, &[], &[]);
+    assert_eq!(code, 0, "[{tag}] scan: {doc:#}");
+    assert_eq!(hosted::redirected(&doc), 1, "[{tag}] scan: {doc:#}");
+    let lock = hosted::read(&root, VLT_LOCK);
+    let url = hosted::artifact_url(&server);
+    let pin = hosted::sha512_sri(&hosted::patched_tarball());
+    assert!(
+        lock.contains(&url) && lock.contains(&pin),
+        "[{tag}] the lock must pin the hosted tarball:\n{lock}"
+    );
+    assert!(!root.join(".socket/manifest.json").exists());
+    assert!(hosted::ledger_path(&root).is_file(), "[{tag}]");
+    HostedProject {
+        root,
+        origin: server.uri(),
+        lock,
+        registry_lock,
+    }
+}
+
+#[test]
+fn hosted_every_vlt_era_manifestless_evidence_cells() {
+    let tmp = tempfile::tempdir().unwrap();
+    let bin = binary();
+    for (era, tag) in ERAS {
+        let p = hosted_project(tmp.path(), *era, tag);
+        let root = &p.root;
+        let id = era.dep_id();
+        let online = |api: &PatchApi| VexRun {
+            patch_server_url: Some(p.origin.clone()),
+            ..VexRun::online(api)
+        };
+        install(root, id, PATCHED);
+
+        let silent = PatchApi::empty();
+        let out = run_vex(
+            &bin,
+            root,
+            &VexRun {
+                patch_server_url: Some(p.origin.clone()),
+                proxy_url: Some(silent.uri()),
+                ..VexRun::offline()
+            },
+        );
+        assert_eq!(out.code, Some(0), "[{tag}] ledger, offline: {out}");
+        assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+        silent.assert_no_requests();
+        strip_ledgers(root);
+
+        let api = api_with(UUID, PURL);
+        let out = run_vex(&bin, root, &online(&api));
+        assert_eq!(out.code, Some(0), "[{tag}] patched: {out}");
+        assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+        assert!(api.view_requests(UUID) >= 1, "[{tag}]");
+
+        for (index, reason) in [(TAMPERED, "hash_mismatch"), (PRISTINE, "not_applied")] {
+            hosted::install_store(root, id, index);
+            let out = run_vex(&bin, root, &online(&api));
+            assert_eq!(out.code, Some(1), "[{tag}] store {reason}: {out}");
+            assert_not_attested(&out.envelope, PURL, reason);
+            assert_absent(out.doc.as_ref(), PURL);
+        }
+
+        std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+        let out = run_vex(&bin, root, &online(&api));
+        assert_eq!(out.code, Some(0), "[{tag}] not installed: {out}");
+        assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+        install(root, id, PATCHED);
+
+        for (what, uuid, purl) in [
+            ("another purl", UUID, "pkg:npm/right-pad@1.3.0"),
+            ("another uuid", "0f0f0f0f-0f0f-4f0f-8f0f-0f0f0f0f0f0f", PURL),
+        ] {
+            let api = api_with(uuid, purl);
+            let out = run_vex(&bin, root, &online(&api));
+            assert_eq!(out.code, Some(1), "[{tag}] record names {what}: {out}");
+            assert_not_attested(&out.envelope, PURL, "record_mismatch");
+            assert_absent(out.doc.as_ref(), PURL);
+        }
+
+        let silent = PatchApi::empty();
+        let out = run_vex(
+            &bin,
+            root,
+            &VexRun {
+                patch_server_url: Some(p.origin.clone()),
+                proxy_url: Some(silent.uri()),
+                ..VexRun::offline()
+            },
+        );
+        assert_eq!(out.code, Some(1), "[{tag}] offline: {out}");
+        assert_not_attested(&out.envelope, PURL, "record_unavailable");
+        silent.assert_no_requests();
+
+        let api = api_with(UUID, PURL);
+        let out = run_vex(&bin, root, &VexRun::online(&api));
+        assert_eq!(out.code, Some(2), "[{tag}] origin not configured: {out}");
+        assert_eq!(out.envelope["error"]["code"], "manifest_not_found", "{out}");
+        api.assert_no_requests();
+
+        let (host, port) = p
+            .origin
+            .trim_start_matches("http://")
+            .rsplit_once(':')
+            .unwrap();
+        for (what, lock) in [
+            (
+                "look-alike host",
+                p.lock
+                    .replace(&p.origin, &format!("http://{host}.evil.test:{port}")),
+            ),
+            (
+                "uppercase patch uuid",
+                p.lock.replace(UUID, &UUID.to_ascii_uppercase()),
+            ),
+        ] {
+            assert_ne!(lock, p.lock, "[{tag}] {what}");
+            std::fs::write(root.join(VLT_LOCK), &lock).unwrap();
+            let api = api_with(UUID, PURL);
+            let out = run_vex(&bin, root, &online(&api));
+            assert_ne!(out.code, Some(0), "[{tag}] {what}: {out}");
+            assert_absent(out.doc.as_ref(), PURL);
+            assert_eq!(api.view_requests(UUID), 0, "[{tag}] {what}");
+        }
+
+        std::fs::write(root.join(VLT_LOCK), format!("\u{feff}{}", p.lock)).unwrap();
+        let api = api_with(UUID, PURL);
+        let out = run_vex(&bin, root, &online(&api));
+        assert_eq!(out.code, Some(2), "[{tag}] BOM lock: {out}");
+        assert_eq!(out.envelope["error"]["code"], "manifest_not_found", "{out}");
+        api.assert_no_requests();
+        std::fs::write(root.join(VLT_LOCK), &p.lock).unwrap();
+        assert_ne!(p.lock, p.registry_lock);
+        eprintln!("hosted vlt {tag}: all cells OK");
+    }
+}
+
+#[test]
+fn hosted_vlt_checkout_runs_the_shared_manifestless_matrix() {
+    let tmp = tempfile::tempdir().unwrap();
+    let p = hosted_project(tmp.path(), Era::V1, "matrix");
+    let case = VltVexCase {
+        tag: "hermetic-v1",
+        mode: VltMode::Hosted,
+        purl: PURL,
+        uuid: UUID,
+        files: vec![("package/index.js".to_string(), git_sha256(PATCHED))],
+        vulns: VULNS,
+        registry_lock: p.registry_lock.clone().into_bytes(),
+        patch_server_url: Some(p.origin.clone()),
+    };
+    run_vlt_vex_matrix(&p.root, tmp.path(), &case, |checkout| {
+        assert!(!checkout.join("node_modules").exists());
+        install(checkout, Era::V1.dep_id(), PATCHED);
+    });
+}
+
+#[test]
+fn a_same_version_alias_registry_instance_needs_every_copy_to_verify() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let url = format!(
+        "https://patch.socket.dev/patch/npm/{NAME}/{VERSION}/{}/{UUID}/{NAME}-{VERSION}.tgz",
+        hosted::TOKEN
+    );
+    let pin = hosted::sha512_sri(&hosted::patched_tarball());
+    let foreign = "~acme~left-pad@1.3.0";
+    let lock = hosted::vlt_lock(
+        Era::V1,
+        &[
+            hosted::node(foreign, hosted::UPSTREAM_SHA512, hosted::REGISTRY_URL),
+            hosted::node(Era::V1.dep_id(), &pin, &url),
+        ],
+    )
+    .replace(
+        "\"options\": {}",
+        "\"options\": {\"registries\": {\"acme\": \"https://npm.acme.example/\"}}",
+    );
+    hosted::write_package_json(root);
+    std::fs::write(root.join(VLT_LOCK), lock).unwrap();
+    let api = api_with(UUID, PURL);
+
+    let out = run_vex(&binary(), root, &VexRun::online(&api));
+    assert_eq!(out.code, Some(1), "not installed: {out}");
+    assert_not_attested(&out.envelope, PURL, "package_not_found");
+
+    install(root, Era::V1.dep_id(), PATCHED);
+    hosted::install_store(root, foreign, PRISTINE);
+    let out = run_vex(&binary(), root, &VexRun::online(&api));
+    assert_eq!(out.code, Some(1), "foreign copy pristine: {out}");
+    assert_not_attested(&out.envelope, PURL, "not_applied");
+
+    hosted::install_store(root, foreign, PATCHED);
+    let out = run_vex(&binary(), root, &VexRun::online(&api));
+    assert_eq!(out.code, Some(0), "every copy patched: {out}");
+    assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vex_redirect.rs b/crates/socket-patch-cli/tests/e2e_vex_redirect.rs
index c7e556eb..37d41e16 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_redirect.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_redirect.rs
@@ -1306,7 +1306,9 @@ fn redirect_fixture(rel: &str) -> String {
 ///   version;
 /// * nuget: a source + mapping whose lock no longer restores the id (the
 ///   dependency was dropped and the lock regenerated);
-/// * pnpm: only the `shrinkwrap.yaml` debris pnpm never reads names it.
+/// * pnpm: only the `shrinkwrap.yaml` debris pnpm never reads names it;
+/// * vlt: a BOM-prefixed `vlt-lock.json` (vlt cannot read it), and a pin
+///   whose slot [1] names another package.
 #[test]
 fn rejected_hosted_wiring_never_keeps_a_redirect_ledger_alive() {
     let go_mod = redirect_fixture("golang/gomod/basic/expected/go.mod");
@@ -1319,6 +1321,9 @@ fn rejected_hosted_wiring_never_keeps_a_redirect_ledger_alive() {
     let nuget_lock = redirect_fixture("nuget/packages-lock/basic/expected/packages.lock.json");
     let pnpm_hosted = redirect_fixture("npm/pnpm/basic/expected/pnpm-lock.yaml");
     let pnpm_registry = redirect_fixture("npm/pnpm/basic/input/pnpm-lock.yaml");
+    let vlt_hosted = redirect_fixture("npm/vlt/basic/expected/vlt-lock.json");
+    let vlt_misnamed = vlt_hosted.replace("[0,\"left-pad\"", "[0,\"right-pad\"");
+    assert_ne!(vlt_misnamed, vlt_hosted);
 
     let bumped = go_mod.replace(
         "require github.com/foo/bar v1.4.2",
@@ -1404,6 +1409,20 @@ fn rejected_hosted_wiring_never_keeps_a_redirect_ledger_alive() {
             ],
             vec![("pnpm-lock.yaml", pnpm_hosted.clone())],
         ),
+        (
+            "vlt BOM-prefixed lock",
+            "pkg:npm/left-pad@1.3.0",
+            "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+            vec![("vlt-lock.json", format!("\u{feff}{vlt_hosted}"))],
+            vec![("vlt-lock.json", vlt_hosted.clone())],
+        ),
+        (
+            "vlt pin naming another package",
+            "pkg:npm/left-pad@1.3.0",
+            "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+            vec![("vlt-lock.json", vlt_misnamed)],
+            vec![("vlt-lock.json", vlt_hosted.clone())],
+        ),
     ];
 
     for (name, purl, uuid, stale, live) in cases {
@@ -1480,7 +1499,8 @@ fn rejected_hosted_wiring_never_keeps_a_redirect_ledger_alive() {
 /// lock while a SIBLING lock resolves the same version from the registry —
 /// a stale `yarn.lock` beside the hosted `package-lock.json`, a registry
 /// `uv.lock` (what `uv sync --frozen` installs) beside a hosted
-/// `requirements.txt`. Which one the build installs from depends on the
+/// `requirements.txt`, a registry `vlt-lock.json` beside a hosted
+/// `package-lock.json`. Which one the build installs from depends on the
 /// package manager that runs, so the record is not attested
 /// (`redirect_unwired`, with a note naming the contesting lock) where it
 /// used to be `not_affected (redirected)`. Without the stale lock it attests.
@@ -1517,6 +1537,29 @@ fn a_sibling_lock_resolving_the_registry_contests_a_ledger_record() {
                 ),
             ),
         ),
+        (
+            "npm + registry vlt-lock.json",
+            "pkg:npm/foo@1.0.0",
+            vec![(
+                "package-lock.json",
+                serde_json::json!({
+                    "name": "app", "lockfileVersion": 3, "requires": true,
+                    "packages": {
+                        "": {"name": "app", "dependencies": {"foo": "1.0.0"}},
+                        "node_modules/foo": {"version": "1.0.0", "resolved": npm_url, "integrity": SRI},
+                    }
+                })
+                .to_string(),
+            )],
+            (
+                "vlt-lock.json",
+                format!(
+                    "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+                     \"~npm~foo@1.0.0\": [0,\"foo\",\"{SRI}\",\"https://registry.npmjs.org/foo/-/foo-1.0.0.tgz\"]\n  \
+                     }},\n  \"edges\": {{\n    \"file~_d foo\": \"prod 1.0.0 ~npm~foo@1.0.0\"\n  }}\n}}\n"
+                ),
+            ),
+        ),
         (
             "requirements + registry uv.lock",
             "pkg:pypi/vexdemo@1.2.3",
@@ -1978,3 +2021,87 @@ fn every_project_environment_copy_of_a_hosted_ref_must_verify() {
     let (code, env) = vex_json(cwd, &args);
     assert_attested(cwd, code, &env, UUID, "every environment's copy verifies");
 }
+
+/// vlt: a redirect-ledger record attests while `vlt-lock.json` still pins
+/// the hosted artifact, judged by vlt's store copy (vlt installs every
+/// package at `node_modules/.vlt/<DepID>/node_modules/<name>`); once the
+/// lock is back on the registry the leftover ledger and patched store copy
+/// no longer attest, `--no-verify` included.
+#[test]
+fn vlt_redirect_ledger_is_judged_by_the_vlt_store_copy_while_the_lock_pins_it() {
+    let (pristine, patched) = (
+        &b"module.exports = 'pristine'\n"[..],
+        &b"module.exports = 'patched'\n"[..],
+    );
+    let purl = "pkg:npm/left-pad@1.3.0";
+    let tmp = tempfile::tempdir().unwrap();
+    let cwd = tmp.path();
+    let lock = |slot2: &str, slot3: &str| {
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+             \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"{slot2}\",\"{slot3}\"]\n  }},\n  \
+             \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0\"\n  }}\n}}\n"
+        )
+    };
+    put(
+        cwd,
+        "package.json",
+        br#"{ "name": "app", "version": "1.0.0", "dependencies": { "left-pad": "1.3.0" } }"#,
+    );
+    put(
+        cwd,
+        "vlt-lock.json",
+        lock(SRI, &hosted_npm_url("left-pad", "1.3.0", UUID)).as_bytes(),
+    );
+    let store = "node_modules/.vlt/~npm~left-pad@1.3.0/node_modules/left-pad";
+    put(
+        cwd,
+        &format!("{store}/package.json"),
+        br#"{ "name": "left-pad", "version": "1.3.0" }"#,
+    );
+    put(cwd, &format!("{store}/index.js"), patched);
+    let mut record = make_record(
+        UUID,
+        &compute_git_sha256_from_bytes(patched),
+        "GHSA-vlt-ledger",
+        &["CVE-2026-61"],
+    );
+    record
+        .files
+        .get_mut("package/index.js")
+        .unwrap()
+        .before_hash = compute_git_sha256_from_bytes(pristine);
+    write_redirect_ledger(
+        cwd,
+        &[(purl, record)],
+        &[("vlt-lock.json", "redirect_vlt_lock_node")],
+    );
+
+    let (code, env) = vex_json(cwd, &["--offline"]);
+    assert_attested(cwd, code, &env, UUID, "patched store copy");
+
+    put(cwd, &format!("{store}/index.js"), pristine);
+    let (code, env) = vex_json(cwd, &["--offline"]);
+    assert_eq!(code, Some(1), "{env}");
+    assert_eq!(skipped_reason(&env, purl), "not_applied", "{env}");
+
+    put(cwd, &format!("{store}/index.js"), patched);
+    put(
+        cwd,
+        "vlt-lock.json",
+        lock(
+            SRI,
+            "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
+        )
+        .as_bytes(),
+    );
+    for extra in [&["--offline"][..], &["--offline", "--no-verify"][..]] {
+        let (code, env) = vex_json(cwd, extra);
+        assert_eq!(code, Some(1), "{extra:?}: {env}");
+        assert_eq!(
+            skipped_reason(&env, purl),
+            "redirect_unwired",
+            "{extra:?}: {env}"
+        );
+    }
+}
diff --git a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
new file mode 100644
index 00000000..b3547398
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
@@ -0,0 +1,357 @@
+//! The manifest-less VEX step every REAL-vlt hosted / vendored e2e flow ends
+//! with (`e2e_redirect_vlt_build`, `e2e_vendor_vlt_build`,
+//! `mode_migration_vlt`), plus the hermetic `e2e_vex_lockfile` vlt cells.
+//!
+//! Pull it in with (it re-exports the shared `vex_e2e_common` helper):
+//!
+//! ```ignore
+//! #[path = "vex_e2e_common/vlt.rs"]
+//! mod vlt_vex;
+//! ```
+//!
+//! [`run_vlt_vex_matrix`] takes the project a flow left behind (its
+//! committed state: package.json, `vlt-lock.json`, `vlt.json`, workspace
+//! members, `.socket/`) and proves, on a FRESH CHECKOUT with
+//! `.socket/manifest.json` deleted and a real `vlt ci` run by the caller's
+//! closure:
+//!
+//! 1. `manifest-deleted` — standalone `vex --json --output` against a mock
+//!    patch API attests the patched purl with the right `(redirected)` /
+//!    `(vendored)` marker and exactly the expected vulnerability ids (+ CVE
+//!    aliases); the embedded `apply --vex` (and, vendored, `vendor --vex`)
+//!    attest the same without touching the lock.
+//! 2. `ledgers-deleted` — `.socket/vendor/state.json` and
+//!    `redirect-state.json` deleted too: still attested, now from lockfile
+//!    discovery + the patch API (the view route is hit).
+//! 3. `offline` — `--offline` with no ledgers: `record_unavailable`, exit 1,
+//!    ZERO requests to the API.
+//! 4. `reverted` — the lock put back to the registry version (ledgers and
+//!    committed artifacts kept, the patched install left in node_modules):
+//!    NOT attested (`redirect_unwired` / `vendor_unwired`), also under
+//!    `--no-verify`.
+//!
+//! The checkout copies what git would commit: the root `node_modules/` is
+//! left out, and so is vlt's `node_modules/` inside a vendored package dir
+//! (links only; the `<uuid>/.gitignore` excludes it).
+//!
+//! Each passed step prints `VLT-VEX <tag> <mode> <step> ok` so a matrix log
+//! reads as a per-version results table.
+
+#![allow(dead_code)]
+
+use std::path::{Component, Path, PathBuf};
+
+#[path = "mod.rs"]
+mod common;
+pub use common::*;
+
+/// The lock every vlt flow commits.
+pub const VLT_LOCK: &str = "vlt-lock.json";
+
+/// Which wiring the flow produced.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum VltMode {
+    Hosted,
+    Vendored,
+}
+
+impl VltMode {
+    pub fn marker(self) -> Marker {
+        match self {
+            VltMode::Hosted => Marker::Redirected,
+            VltMode::Vendored => Marker::Vendored,
+        }
+    }
+
+    /// The omission a ledger-backed record gets once the lock no longer
+    /// references it.
+    pub fn unwired_reason(self) -> &'static str {
+        match self {
+            VltMode::Hosted => "redirect_unwired",
+            VltMode::Vendored => "vendor_unwired",
+        }
+    }
+
+    fn label(self) -> &'static str {
+        match self {
+            VltMode::Hosted => "hosted",
+            VltMode::Vendored => "vendored",
+        }
+    }
+}
+
+/// What the flow patched and how to judge it.
+pub struct VltVexCase<'a> {
+    /// Log / directory tag (unique per call within one scratch dir).
+    pub tag: &'a str,
+    pub mode: VltMode,
+    pub purl: &'a str,
+    pub uuid: &'a str,
+    /// The patch record's files: (`package/<path>`, afterHash).
+    pub files: Vec<(String, String)>,
+    /// Vulnerability ids (+ CVE aliases) the record carries — the flow's
+    /// own mock / staged manifest must carry the same set.
+    pub vulns: &'a [(&'a str, &'a [&'a str])],
+    /// `vlt-lock.json` BEFORE the patch (the registry wiring) — the
+    /// `reverted` step writes it back.
+    pub registry_lock: Vec<u8>,
+    /// `--patch-server-url` for a hosted URL on a mock origin (a hosted ref
+    /// counts only on a Socket host or the configured one).
+    pub patch_server_url: Option<String>,
+}
+
+/// Whether root-relative `rel` is vlt's link dir inside a package dir
+/// (`…/node_modules/[@s/]<name>/node_modules`), which git never commits.
+fn is_nested_link_dir(rel: &Path) -> bool {
+    let parts: Vec<&str> = rel
+        .components()
+        .filter_map(|c| match c {
+            Component::Normal(s) => s.to_str(),
+            _ => None,
+        })
+        .collect();
+    let Some((last, head)) = parts.split_last() else {
+        return false;
+    };
+    if *last != "node_modules" {
+        return false;
+    }
+    match head {
+        [.., "node_modules", _] => true,
+        [.., "node_modules", scope, _] => scope.starts_with('@'),
+        _ => false,
+    }
+}
+
+/// Copy `project`'s committable state into `dest`: everything except the
+/// root `node_modules`, vlt's link dirs inside vendored packages, symlinks,
+/// the manifest, the apply lock and prior VEX output.
+pub fn manifestless_checkout(project: &Path, dest: &Path) -> PathBuf {
+    fn walk(src: &Path, dst: &Path, root: &Path) {
+        std::fs::create_dir_all(dst).unwrap();
+        for entry in std::fs::read_dir(src).unwrap() {
+            let entry = entry.unwrap();
+            let name = entry.file_name();
+            let path = entry.path();
+            let rel = path.strip_prefix(root).unwrap();
+            if rel == Path::new("node_modules")
+                || is_nested_link_dir(rel)
+                || rel == Path::new(".socket/manifest.json")
+                || rel == Path::new(".socket/apply.lock")
+                || rel == Path::new(DEFAULT_OUTPUT)
+            {
+                continue;
+            }
+            let ty = entry.file_type().unwrap();
+            if ty.is_dir() {
+                walk(&path, &dst.join(&name), root);
+            } else if ty.is_file() {
+                std::fs::copy(&path, dst.join(&name)).unwrap();
+            }
+        }
+    }
+    if dest.exists() {
+        std::fs::remove_dir_all(dest).unwrap();
+    }
+    walk(project, dest, project);
+    assert!(
+        !dest.join(".socket/manifest.json").exists(),
+        "the checkout must carry no manifest"
+    );
+    dest.to_path_buf()
+}
+
+fn ledger_paths(root: &Path) -> [PathBuf; 2] {
+    [
+        root.join(socket_patch_core::vendor::VENDOR_STATE_REL),
+        root.join(socket_patch_core::patch::redirect::REDIRECT_STATE_REL),
+    ]
+}
+
+/// Run the four-step manifest-less VEX matrix (module doc) on a fresh
+/// checkout of `project` under `scratch`. `install` runs the REAL `vlt ci`
+/// in the checkout (or, hermetically, stages its result) and asserts the
+/// patched bytes landed. Runs on its own thread, so it is callable from
+/// sync tests and from inside any tokio runtime alike (the mock API owns a
+/// runtime).
+pub fn run_vlt_vex_matrix<F>(project: &Path, scratch: &Path, case: &VltVexCase<'_>, install: F)
+where
+    F: FnOnce(&Path) + Send,
+{
+    outside_runtime(|| matrix(project, scratch, case, install))
+}
+
+/// Run `f` on its own thread: the mock [`PatchApi`] owns a tokio runtime,
+/// which cannot be driven (or dropped) from inside another runtime.
+pub fn outside_runtime<R: Send>(f: impl FnOnce() -> R + Send) -> R {
+    std::thread::scope(|s| {
+        s.spawn(f)
+            .join()
+            .unwrap_or_else(|panic| std::panic::resume_unwind(panic))
+    })
+}
+
+/// [`assert_not_attested`] for either spelling of an npm scope: a purl the
+/// record spells `pkg:npm/%40scope/pkg@v` is reported by lockfile discovery
+/// in its canonical `pkg:npm/@scope/pkg@v` form.
+pub fn assert_skipped<'a>(
+    envelope: &'a serde_json::Value,
+    purl: &str,
+    reason: &str,
+) -> &'a serde_json::Value {
+    let canonical = purl.replace("%40", "@");
+    let about =
+        |e: &serde_json::Value, p: &str| e["purl"].as_str().is_some_and(|q| purl_matches(q, p));
+    let events: Vec<&serde_json::Value> = envelope["events"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .collect();
+    assert!(
+        !events
+            .iter()
+            .any(|e| e["action"] == "verified" && (about(e, purl) || about(e, &canonical))),
+        "{purl} was attested: {envelope:#}"
+    );
+    let chosen = if events.iter().any(|e| about(e, purl)) {
+        purl
+    } else {
+        canonical.as_str()
+    };
+    assert_not_attested(envelope, chosen, reason)
+}
+
+fn matrix<F: FnOnce(&Path)>(project: &Path, scratch: &Path, case: &VltVexCase<'_>, install: F) {
+    let bin = binary();
+    let mode = case.mode;
+    let what = format!("{} {}", case.tag, mode.label());
+    let ok = |step: &str| eprintln!("VLT-VEX {} {} {step} ok", case.tag, mode.label());
+    let checkout = manifestless_checkout(project, &scratch.join(format!("vex-{}", case.tag)));
+    install(&checkout);
+    let lock_path = checkout.join(VLT_LOCK);
+    let wired_lock = std::fs::read(&lock_path).unwrap();
+
+    let files: Vec<(&str, &str)> = case
+        .files
+        .iter()
+        .map(|(k, v)| (k.as_str(), v.as_str()))
+        .collect();
+    let api = PatchApi::start(vec![(
+        case.uuid.to_string(),
+        patch_view(case.uuid, case.purl, &files, case.vulns),
+    )]);
+    let online = || VexRun {
+        patch_server_url: case.patch_server_url.clone(),
+        ..VexRun::online(&api)
+    };
+
+    let out = run_vex(&bin, &checkout, &online());
+    assert_eq!(out.code, Some(0), "{what} manifest-deleted: {out}");
+    assert_attested(out.doc(), case.purl, case.uuid, mode.marker(), case.vulns);
+    ok("manifest-deleted");
+    let mut embedded = vec![VexVia::Apply];
+    if mode == VltMode::Vendored {
+        embedded.push(VexVia::Vendor);
+    }
+    for via in embedded {
+        let out = run_vex(&bin, &checkout, &online().via(via));
+        assert_eq!(out.code, Some(0), "{what} embedded {via:?}: {out}");
+        assert_eq!(
+            out.envelope["status"], "noManifest",
+            "{what} embedded {via:?}: {out}"
+        );
+        assert_attested(out.doc(), case.purl, case.uuid, mode.marker(), case.vulns);
+        assert_eq!(
+            std::fs::read(&lock_path).unwrap(),
+            wired_lock,
+            "{what} embedded {via:?} must not touch {VLT_LOCK}"
+        );
+        assert!(
+            !checkout.join(".socket/manifest.json").exists(),
+            "{what} embedded {via:?} must not write a manifest"
+        );
+        ok(&format!("embedded-{via:?}"));
+    }
+
+    let ledgers: Vec<(PathBuf, Option<Vec<u8>>)> = ledger_paths(&checkout)
+        .into_iter()
+        .map(|p| {
+            let bytes = std::fs::read(&p).ok();
+            (p, bytes)
+        })
+        .collect();
+    strip_ledgers(&checkout);
+    let views_before = api.view_requests(case.uuid);
+    let out = run_vex(&bin, &checkout, &online());
+    assert_eq!(out.code, Some(0), "{what} ledgers-deleted: {out}");
+    assert_attested(out.doc(), case.purl, case.uuid, mode.marker(), case.vulns);
+    assert!(
+        api.view_requests(case.uuid) > views_before,
+        "{what} ledgers-deleted: the record must come from the patch API: {:?}",
+        api.requests()
+    );
+    ok("ledgers-deleted");
+
+    let requests_before = api.request_count();
+    let out = run_vex(
+        &bin,
+        &checkout,
+        &VexRun {
+            patch_server_url: case.patch_server_url.clone(),
+            ..VexRun::offline()
+        },
+    );
+    assert_eq!(out.code, Some(1), "{what} offline: {out}");
+    assert_skipped(&out.envelope, case.purl, "record_unavailable");
+    assert_absent(out.doc.as_ref(), case.purl);
+    assert_eq!(
+        api.request_count(),
+        requests_before,
+        "{what} offline must make zero API requests: {:?}",
+        api.requests()
+    );
+    ok("offline");
+
+    for (path, bytes) in &ledgers {
+        if let Some(bytes) = bytes {
+            std::fs::write(path, bytes).unwrap();
+        }
+    }
+    assert!(
+        ledgers.iter().any(|(_, b)| b.is_some()),
+        "{what}: the flow left no ledger — the reverted step would be vacuous"
+    );
+    std::fs::write(&lock_path, &case.registry_lock).unwrap();
+    for no_verify in [false, true] {
+        let run = VexRun {
+            no_verify,
+            ..online()
+        };
+        let out = run_vex(&bin, &checkout, &run);
+        assert_eq!(
+            out.code,
+            Some(1),
+            "{what} reverted (no_verify={no_verify}): {out}"
+        );
+        assert_skipped(&out.envelope, case.purl, mode.unwired_reason());
+        assert_absent(out.doc.as_ref(), case.purl);
+    }
+    ok("reverted");
+}
+
+#[test]
+fn nested_link_dirs_are_left_out_of_the_checkout() {
+    for (rel, nested) in [
+        ("node_modules", false),
+        (".socket/vendor/npm/u/a-1.0.0/node_modules/a/node_modules", true),
+        (
+            ".socket/vendor/npm/u/@s/a-1.0.0/node_modules/@s/a/node_modules",
+            true,
+        ),
+        (".socket/vendor/npm/u/a-1.0.0/node_modules", false),
+        (".socket/vendor/npm/u/a-1.0.0/node_modules/a", false),
+        ("packages/a/node_modules", false),
+    ] {
+        assert_eq!(is_nested_link_dir(Path::new(rel)), nested, "{rel}");
+    }
+}
diff --git a/crates/socket-patch-core/src/patch/redirect/mod.rs b/crates/socket-patch-core/src/patch/redirect/mod.rs
index ea8cfc74..b0f318cc 100644
--- a/crates/socket-patch-core/src/patch/redirect/mod.rs
+++ b/crates/socket-patch-core/src/patch/redirect/mod.rs
@@ -52,7 +52,7 @@ pub use state::{
 };
 /// Hosted-artifact leaf ownership rule, shared with `vex`'s bun lockfile
 /// discovery (which recovers a URL tuple's version from that leaf).
-pub(crate) use takeover::hosted_url_version;
+pub(crate) use takeover::{hosted_url_names, hosted_url_version};
 pub use takeover::{
     redirect_revert_supported, revert_cargo_redirect_purl, revert_golang_redirect_purl,
     revert_npm_redirect_purl, revert_redirect_purl, RedirectRevert,
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
index e05d69db..d8b0982d 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
@@ -15,10 +15,12 @@ use super::{http_url, LockIntegrity, LockfileEntry};
 
 // ── entry model ──
 
-/// One node of a readable `vlt-lock.json`: its DepID split, slot [1] (the
-/// package name) and the raw slot [2] integrity and slot [3] location.
+/// One node of a readable `vlt-lock.json`: its raw DepID key and split,
+/// slot [1] (the package name) and the raw slot [2] integrity and slot [3]
+/// location.
 #[derive(Debug, Clone)]
 pub(crate) struct VltLockNode {
+    pub(crate) key: String,
     pub(crate) dep_id: DepId,
     pub(crate) name: String,
     pub(crate) integrity: Option<String>,
@@ -35,8 +37,16 @@ pub(crate) struct VltLock {
 /// The nodes of a lock vlt itself can read; `None` for a BOM-prefixed,
 /// unparseable or unknown-version lock (never BOM-stripped).
 pub(crate) fn vlt_lock_nodes(text: &str) -> Option<VltLock> {
-    let LockSniff::Readable(lock) = sniff_lock(text) else {
-        return None;
+    vlt_lock_model(text).ok()
+}
+
+/// [`vlt_lock_nodes`], with why vlt cannot read the lock as the error.
+pub(crate) fn vlt_lock_model(text: &str) -> Result<VltLock, String> {
+    let lock = match sniff_lock(text) {
+        LockSniff::Readable(lock) => lock,
+        LockSniff::Bom => return Err("starts with a UTF-8 BOM, which vlt cannot read".into()),
+        LockSniff::NotJsonObject => return Err("is not a JSON object".into()),
+        LockSniff::UnsupportedVersion(raw) => return Err(format!("has lockfileVersion {raw}")),
     };
     let string_slot = |tuple: &[Value], i: usize| {
         tuple
@@ -53,6 +63,7 @@ pub(crate) fn vlt_lock_nodes(text: &str) -> Option<VltLock> {
                 .filter_map(|(id, tuple)| {
                     let tuple = tuple.as_array()?;
                     Some(VltLockNode {
+                        key: id.clone(),
                         dep_id: split_dep_id(id)?,
                         name: tuple.get(1)?.as_str()?.to_string(),
                         integrity: string_slot(tuple, 2),
@@ -62,7 +73,7 @@ pub(crate) fn vlt_lock_nodes(text: &str) -> Option<VltLock> {
                 .collect()
         })
         .unwrap_or_default();
-    Some(VltLock {
+    Ok(VltLock {
         options: lock.options().cloned(),
         nodes,
     })
diff --git a/crates/socket-patch-core/src/vendor/verify.rs b/crates/socket-patch-core/src/vendor/verify.rs
index 159328ab..f5dcdb2e 100644
--- a/crates/socket-patch-core/src/vendor/verify.rs
+++ b/crates/socket-patch-core/src/vendor/verify.rs
@@ -229,6 +229,49 @@ async fn verify_vlt_dir(
     Ok(())
 }
 
+/// Whether `installed`, an installed copy of the vlt package-dir `entry`,
+/// carries `record`. vlt links a `file:` dependency straight to the
+/// committed directory, so a copy that resolves to it is the artifact
+/// itself; any other copy verifies each member, `package.json` under the
+/// vlt manifest exemption.
+pub(crate) async fn vlt_installed_copy_matches(
+    project_root: &Path,
+    installed: &Path,
+    entry: &VendorEntry,
+    record: &PatchRecord,
+) -> bool {
+    let artifact = project_root.join(normalize_file_path(&entry.artifact.path));
+    if let (Ok(a), Ok(b)) = (
+        tokio::fs::canonicalize(installed).await,
+        tokio::fs::canonicalize(&artifact).await,
+    ) {
+        if a == b {
+            return true;
+        }
+    }
+    let pin = entry
+        .artifact
+        .file_inventory
+        .as_ref()
+        .and_then(|inv| inv.get("package.json"));
+    for (file_name, info) in &record.files {
+        if normalize_file_path(file_name) == "package.json" {
+            if let Some(pin) = pin {
+                if !vlt_manifest_matches(project_root, installed, pin, &info.after_hash).await {
+                    return false;
+                }
+                continue;
+            }
+        }
+        if verify_file_patch(installed, file_name, info).await.status
+            != VerifyStatus::AlreadyPatched
+        {
+            return false;
+        }
+    }
+    true
+}
+
 /// The vlt manifest exemption (DESIGN §4.4): the committed `package.json`
 /// is post-transform, so it verifies iff it hashes to the inventory pin and,
 /// when the afterHash blob is in the local blob store, the blob with its
diff --git a/crates/socket-patch-core/src/vex/discover/mod.rs b/crates/socket-patch-core/src/vex/discover/mod.rs
index 65006b6b..654c686a 100644
--- a/crates/socket-patch-core/src/vex/discover/mod.rs
+++ b/crates/socket-patch-core/src/vex/discover/mod.rs
@@ -31,9 +31,10 @@
 //! through ONE shared reader that yields EVERY entry, Socket-owned ones
 //! included: the npm-family entry models in `lock_inventory`
 //! (`npm_lock_nodes`, `pnpm::pnpm_packages`, `yarn::classic_entries` /
-//! `berry_entries`, `BunLockb::parse_packages`) and, for the other formats,
-//! the readers the writers own (`cargo_lock` / `cargo_config`, `go_mod_edit`
-//! / `go_sum_edit`, `gemfile_lock`, `composer_lock_packages`, the
+//! `berry_entries`, `BunLockb::parse_packages`, `vlt::vlt_lock_model`) and,
+//! for the other formats, the readers the writers own (`cargo_lock` /
+//! `cargo_config`, `go_mod_edit` / `go_sum_edit`, `gemfile_lock`,
+//! `composer_lock_packages`, the
 //! `utils::python_lock` / `poetry_lock` / `requirements` / `hatch` readers,
 //! `maven_pom`, `nuget_config` / `nuget_feed`). The inventory's registry
 //! views drop the Socket-owned entries (they feed registry discovery and
@@ -46,8 +47,9 @@
 //!
 //! One submodule per package-manager group — [`npm`] (package-lock /
 //! npm-shrinkwrap, pnpm modern + legacy), [`yarn`] (classic + berry),
-//! [`bun`] (`bun.lock` text + `bun.lockb`), [`cargo`], [`golang`],
-//! [`pypi_locks`] (uv.lock, poetry.lock, pdm.lock, pylock.toml),
+//! [`bun`] (`bun.lock` text + `bun.lockb`), [`vlt`] (`vlt-lock.json`),
+//! [`cargo`], [`golang`], [`pypi_locks`] (uv.lock, poetry.lock, pdm.lock,
+//! pylock.toml),
 //! [`pypi_other`] (Pipfile.lock, requirements*.txt, hatch), [`gem`],
 //! [`composer`], [`maven`], [`nuget`], [`deno`]. Each exports exactly
 //!
@@ -169,12 +171,13 @@
 //!     name whose own element (a maven `<repository>`, a nuget `<add>`) is
 //!     on the Socket host but names another patch.
 //! 12. **npm-family extractors iterate the entry models only.** The npm,
-//!     pnpm, yarn and bun extractors walk the `lock_inventory` entry models,
-//!     never the grammar primitives those wrap (`scan_blocks`, the pnpm
-//!     grammar's `entries` / `resolution`, `bun_lock_text`'s section reader,
-//!     `BunLockb::parse`) nor a parser of their own (a JSON read of
-//!     `bun.lock`), so discovery and the inventory see one entry walk per
-//!     format (an architecture test in this module enforces it).
+//!     pnpm, yarn, bun and vlt extractors walk the `lock_inventory` entry
+//!     models, never the grammar primitives those wrap (`scan_blocks`, the
+//!     pnpm grammar's `entries` / `resolution`, `bun_lock_text`'s section
+//!     reader, `BunLockb::parse`, `vlt_lock_text`'s sniff and DepID split)
+//!     nor a parser of their own (a JSON read of `bun.lock` or
+//!     `vlt-lock.json`), so discovery and the inventory see one entry walk
+//!     per format (an architecture test in this module enforces it).
 
 use std::collections::BTreeSet;
 use std::path::{Path, PathBuf};
@@ -202,6 +205,7 @@ pub(crate) mod npm;
 pub(crate) mod nuget;
 pub(crate) mod pypi_locks;
 pub(crate) mod pypi_other;
+pub(crate) mod vlt;
 pub(crate) mod yarn;
 
 // ── diagnostics ──────────────────────────────────────────────────────────
@@ -708,6 +712,7 @@ pub async fn discover_patched_refs_with(root: &Path, opts: &DiscoverOptions) ->
     npm::extract(&ctx, &mut out).await;
     yarn::extract(&ctx, &mut out).await;
     bun::extract(&ctx, &mut out).await;
+    vlt::extract(&ctx, &mut out).await;
     cargo::extract(&ctx, &mut out).await;
     golang::extract(&ctx, &mut out).await;
     pypi_locks::extract(&ctx, &mut out).await;
@@ -894,7 +899,9 @@ pub(crate) fn socket_patch_name_uuid(name: &str, vendored: bool) -> Option<Strin
 ///
 /// * [`WiringMode::Vendored`]: `.socket/vendor/<eco>/<uuid>` ANYWHERE — a
 ///   `../` / absolute / other-checkout spelling or a traversal leaf
-///   included (the ledger's raw-text fallback would match those too);
+///   included (the ledger's raw-text fallback would match those too) — and
+///   the same path as a vlt `file` DepID spells it (`/` as `+` in tilde
+///   ids, `§` in legacy ids), since a vlt node key may be its only mention;
 /// * [`WiringMode::Hosted`]: every canonical-uuid path segment of a url on
 ///   an accepted patch-server origin
 ///   ([`crate::patch::redirect::hosted_patch_url_uuids`]: plain,
@@ -916,17 +923,19 @@ fn socket_identities(text: &str, origins: &[String]) -> BTreeSet<(String, Wiring
         .replace('\\', "/");
     let bytes = norm.as_bytes();
 
-    let anchor = format!("{VENDOR_DIR}/");
-    for (at, _) in norm.match_indices(anchor.as_str()) {
-        let rest = &norm[at + anchor.len()..];
-        for eco in ECOSYSTEM_DIRS {
-            let uuid = rest
-                .strip_prefix(eco)
-                .and_then(|r| r.strip_prefix('/'))
-                .and_then(|r| r.get(..36))
-                .filter(|u| is_canonical_uuid(u));
-            if let Some(uuid) = uuid {
-                found.insert((uuid.to_string(), WiringMode::Vendored));
+    for sep in ['/', '+', '§'] {
+        let anchor = format!("{VENDOR_DIR}/").replace('/', &sep.to_string());
+        for (at, _) in norm.match_indices(anchor.as_str()) {
+            let rest = &norm[at + anchor.len()..];
+            for eco in ECOSYSTEM_DIRS {
+                let uuid = rest
+                    .strip_prefix(eco)
+                    .and_then(|r| r.strip_prefix(sep))
+                    .and_then(|r| r.get(..36))
+                    .filter(|u| is_canonical_uuid(u));
+                if let Some(uuid) = uuid {
+                    found.insert((uuid.to_string(), WiringMode::Vendored));
+                }
             }
         }
     }
@@ -1880,6 +1889,7 @@ fn hosted_file_role(rel: &str) -> HostedFileRole {
                 | ".yarnrc.yml"
                 | "pnpm-workspace.yaml"
                 | "bunfig.toml"
+                | "vlt.json"
                 | "settings.xml"
                 | "go.sum"
                 | "go.work.sum"
@@ -2770,6 +2780,10 @@ mod tests {
             format!("registry=https://patch.socket.dev/{a}/\n"),
         );
         p.write("settings.xml", format!("<id>socket-patch-{a}</id>"));
+        p.write(
+            "vlt.json",
+            format!("{{\"registries\":{{\"npm\":\"https://patch.socket.dev/{a}/\"}}}}\n"),
+        );
         // maven: `<repository>` without the version-suffix pin.
         let repo = format!(
             "<repositories><repository><id>socket-patch-{a}</id>\
@@ -2805,6 +2819,7 @@ mod tests {
             "go.sum",
             ".npmrc",
             "settings.xml",
+            "vlt.json",
             "pom.xml",
             "nuget.config",
             "pyproject.toml",
@@ -2840,8 +2855,21 @@ mod tests {
                 "[project]\ndependencies = [\n  \"six @ https://patch.socket.dev/patch/pypi/six/1.16.0/{TOKEN}/{a}/six-1.16.0.whl\",\n]\n"
             ),
         );
+        q.write(
+            "vlt-lock.json",
+            format!(
+                "{{\"nodes\":{{\"~npm~x@1.0.0\":[0,\"x\",\"sha512-x\",\"{}\"]}}}}\n",
+                hosted_url("npm", "x", "1.0.0", a, "x-1.0.0.tgz")
+            ),
+        );
         let root = q.root();
-        for file in ["Cargo.toml", "pom.xml", "nuget.config", "pyproject.toml"] {
+        for file in [
+            "Cargo.toml",
+            "pom.xml",
+            "nuget.config",
+            "pyproject.toml",
+            "vlt-lock.json",
+        ] {
             assert!(
                 hosted_wiring_in_files(root, &[file], a).await,
                 "{file}: a pin proves hosted wiring"
@@ -3233,6 +3261,8 @@ mod tests {
             format!("<url>file://${{project.basedir}}/.socket/vendor/maven/{a}</url>"),
             format!(".socket/vendor/npm/{a}/../../../etc/passwd"),
             format!("# ./.socket/vendor/pypi/{a}/six-1.16.0-py3-none-any.whl"),
+            format!("\"file~.socket+vendor+npm+{a}+x-1.0.0+node__modules+x\": [0,\"x\"]"),
+            format!("\"file·.socket§vendor§npm§{a}§x-1.0.0§node_modules§x\": [0,\"x\"]"),
         ] {
             assert_eq!(vendored(&text), vec![a.to_string()], "{text}");
             assert!(hosted(&text).is_empty(), "{text}");
@@ -3246,6 +3276,8 @@ mod tests {
             format!("registry = \"socket-patch-{a}\""),
             format!("<id>socket-patch-vendor-{a}</id>"),
             format!(".socket/vendor/jsr/{a}/x.tgz"),
+            format!("file~.socket+vendor+jsr+{a}+x"),
+            format!("file~.socket+vendor/npm+{a}+x"),
             format!(".socket/vendor/npm/{}/x.tgz", a.to_ascii_uppercase()),
             ".socket/vendor/npm/not-a-uuid/x.tgz".to_string(),
             "https://patch.socket.dev/patch/npm/x/1.0.0/tok/placeholder/x.tgz".to_string(),
@@ -3522,14 +3554,28 @@ mod tests {
         ];
         // Per-file: a second whole-document parser of a lock whose entry
         // model already exists.
-        let per_file: &[(&str, &[&str])] = &[(
-            "bun.rs",
-            &[
-                "serde_json::from_str(",
-                "serde_json::from_slice(",
-                "check_lock_version(",
-            ],
-        )];
+        let per_file: &[(&str, &[&str])] = &[
+            (
+                "bun.rs",
+                &[
+                    "serde_json::from_str(",
+                    "serde_json::from_slice(",
+                    "check_lock_version(",
+                ],
+            ),
+            (
+                "vlt.rs",
+                &[
+                    "serde_json::from_str(",
+                    "serde_json::from_slice(",
+                    "sniff_lock(",
+                    "split_dep_id(",
+                    "nodes_block(",
+                    "parse_node_line(",
+                    "parse_node_entry_text(",
+                ],
+            ),
+        ];
         let mut checked = 0;
         for entry in std::fs::read_dir(&dir).expect("read discover dir") {
             let path = entry.expect("dir entry").path();
diff --git a/crates/socket-patch-core/src/vex/discover/vlt.rs b/crates/socket-patch-core/src/vex/discover/vlt.rs
new file mode 100644
index 00000000..e8f9c24c
--- /dev/null
+++ b/crates/socket-patch-core/src/vex/discover/vlt.rs
@@ -0,0 +1,764 @@
+//! vlt: the root `vlt-lock.json` (lockfileVersion absent, `0` or `1`; legacy
+//! `·` and tilde `~` DepIDs alike), read through the lock inventory's entry
+//! model ([`vlt_lock_model`]).
+//!
+//! ## Shapes recognized
+//!
+//! | shape | written by | recognized node | ref |
+//! |---|---|---|---|
+//! | hosted | `patch::redirect::vlt` (`scan --mode hosted`, the depscan twin) | a registry node (any segment) whose slot [3] is a Socket-hosted URL whose leaf is `<bare>-<version>.tgz` of the DepID's `name@version`, slot [1] == name, slot [2] a `sha512-` SRI | `Hosted { purl, uuid, integrity: slot [2] }` |
+//! | vendored | `vendor::vlt_lock` (`vendor`, `scan --mode vendored`) | a `file` node whose decoded path is `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>/node_modules/[@s/]<bare>`, slot [1] == name, slot [3] (when a string) == the path | `Vendored { purl, uuid, path }` |
+//! | vendored (read-only) | a user's `vlt install` of an npm-flavor artifact | a `file` node whose decoded path is `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>.tgz`, same slot rules | `Vendored { purl, uuid, path }` |
+//!
+//! Anything else is not a ref: git, remote and workspace nodes, a registry
+//! node on any other host (a look-alike host or an uppercase uuid
+//! included), and a Socket-shaped node whose name, version, path or
+//! integrity disagree, which is diagnosed ([`DIAG_REF_INVALID`]).
+//!
+//! The version comes from the DepID for a hosted node and from the path's
+//! `<bare>-<version>` leaf for a vendored one (a committed `file` node
+//! carries no version). A vendored ref carries no lock integrity (slot [2]
+//! is `null`): the committed directory is hashed, with the vlt manifest
+//! exemption for its `package.json`.
+//!
+//! ## Integrity (`integrity_required`)
+//!
+//! The hosted rewriter refuses a dependency without a sha512
+//! (`redirect_vlt_missing_sha512`) and always writes the patched artifact's
+//! sha512 into slot [2], so a hosted node with a missing or non-sha512
+//! slot [2] is not Socket-written and is no ref at all.
+//!
+//! ## One lock, several instances
+//!
+//! vlt keeps one node per instance: peer and modifier variants of one
+//! `name@version` share the purl, and the hosted rewriter rewrites every
+//! default-registry instance. An instance of the same `name@version` that
+//! still resolves from a registry (a named alias or scoped registry the
+//! rewriter skips with `redirect_vlt_custom_registry_skipped`) installs the
+//! unpatched package for its dependents:
+//!
+//! * a hosted ref beside it keeps no lock pin, so the not-installed
+//!   lockfile basis never attests it (every installed copy must verify
+//!   instead);
+//! * a vendored ref beside it is diagnosed ([`DIAG_REF_UNATTRIBUTABLE`])
+//!   and not emitted, since only the committed directory would be hashed.
+//!
+//! Every other registry instance is evidence against another lock's wiring
+//! of the same package ([`Discovery::resolved_elsewhere`]).
+//!
+//! ## Parsing
+//!
+//! A BOM-prefixed (never stripped), non-object or unknown-`lockfileVersion`
+//! lock is one vlt cannot read: [`DIAG_LOCKFILE_UNPARSEABLE`], no refs, and
+//! whatever it mentions is recognized as unwired (rule 11). The canonical
+//! one-entry-per-line layout is not required here (the writers check it).
+//!
+//! Non-goals: nested `*/vlt-lock.json` (a separate project, DESIGN D3), the
+//! hidden `node_modules/.vlt-lock.json` (install state, not wiring) and
+//! `vlt.json` (registry definitions only).
+
+use std::collections::BTreeSet;
+
+use super::{
+    npm_purl, vendor_ref, DiscoverCtx, Discovery, PatchedRef, DIAG_LOCKFILE_UNPARSEABLE,
+    DIAG_REF_INVALID, DIAG_REF_UNATTRIBUTABLE,
+};
+use crate::constants::npm_family::VLT_LOCK;
+use crate::patch::redirect::hosted_url_names;
+use crate::utils::digest::is_sri_pin;
+use crate::vendor::lock_inventory::vlt::{vlt_lock_model, VltLockNode};
+use crate::vendor::lock_inventory::LockIntegrity;
+use crate::vendor::vlt_lock_text::{parse_vendored_path, DepIdKind};
+
+pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
+    let Some(text) = ctx.read_text(VLT_LOCK, out).await else {
+        return;
+    };
+    let lock = match vlt_lock_model(&text) {
+        Ok(lock) => lock,
+        Err(why) => {
+            out.diag(
+                DIAG_LOCKFILE_UNPARSEABLE,
+                VLT_LOCK,
+                format!("{VLT_LOCK} {why}; vlt cannot read it, so nothing in it is wired"),
+            );
+            return;
+        }
+    };
+    let classified: Vec<Classified> = lock.nodes.iter().map(|n| classify(ctx, n)).collect();
+    let registry: BTreeSet<&str> = classified
+        .iter()
+        .filter_map(|c| match c {
+            Classified::Registry(purl) => Some(purl.as_str()),
+            _ => None,
+        })
+        .collect();
+    for (node, found) in lock.nodes.iter().zip(&classified) {
+        match found {
+            Classified::Registry(purl) => out.resolved_elsewhere(VLT_LOCK, Some(purl.clone())),
+            Classified::Hosted {
+                purl,
+                uuid,
+                url,
+                integrity,
+            } => {
+                let pin = (!registry.contains(purl.as_str()))
+                    .then(|| LockIntegrity::Sri(integrity.clone()));
+                out.push(PatchedRef::hosted(
+                    purl.clone(),
+                    uuid.clone(),
+                    VLT_LOCK,
+                    Some(url),
+                    pin,
+                    true,
+                ));
+            }
+            Classified::Vendored { purl, path } if registry.contains(purl.as_str()) => {
+                out.diag(
+                    DIAG_REF_UNATTRIBUTABLE,
+                    VLT_LOCK,
+                    format!(
+                        "{VLT_LOCK}: {}: {purl} is wired to {path}, but the lock also resolves \
+                         the same version from a registry for other dependents, so the \
+                         vendored patch is not attested; re-run `socket-patch vendor` or \
+                         `vlt install`",
+                        node.key
+                    ),
+                );
+            }
+            Classified::Vendored { purl, path } => {
+                if let Some(vref) = vendor_ref(path) {
+                    out.push(PatchedRef::vendored(purl.clone(), &vref, VLT_LOCK, None));
+                }
+            }
+            Classified::Invalid(why) => {
+                out.diag(DIAG_REF_INVALID, VLT_LOCK, format!("{VLT_LOCK}: {why}"));
+            }
+            Classified::Other => {}
+        }
+    }
+}
+
+/// What one node is, before the lock-wide instance rule applies.
+enum Classified {
+    /// A registry instance not wired to a Socket patch.
+    Registry(String),
+    Hosted {
+        purl: String,
+        uuid: String,
+        url: String,
+        integrity: String,
+    },
+    Vendored {
+        purl: String,
+        path: String,
+    },
+    /// Socket-shaped, but not what a Socket writer produces.
+    Invalid(String),
+    /// Git, remote, workspace and non-Socket file nodes.
+    Other,
+}
+
+fn classify(ctx: &DiscoverCtx<'_>, node: &VltLockNode) -> Classified {
+    match node.dep_id.kind {
+        DepIdKind::Registry => classify_registry(ctx, node),
+        DepIdKind::File => classify_file(node),
+        DepIdKind::Git | DepIdKind::Remote | DepIdKind::Workspace => Classified::Other,
+    }
+}
+
+fn classify_registry(ctx: &DiscoverCtx<'_>, node: &VltLockNode) -> Classified {
+    let key = &node.key;
+    let Some((name, version)) = node.dep_id.registry_identity() else {
+        return Classified::Other;
+    };
+    let hosted = node.location.as_deref().and_then(|url| {
+        let uuid = ctx.hosted_uuid(url)?;
+        Some((url, uuid))
+    });
+    let Some((url, uuid)) = hosted else {
+        return match npm_purl(name, version) {
+            Some(purl) if node.name == name => Classified::Registry(purl),
+            _ => Classified::Other,
+        };
+    };
+    if node.name != name {
+        return Classified::Invalid(format!(
+            "{key}: names {:?} in slot [1] but its DepID is {name}@{version}; it is ignored",
+            node.name
+        ));
+    }
+    if !hosted_url_names(url, name, version) {
+        return Classified::Invalid(format!(
+            "{key}: {url:?} is not an artifact of {name}@{version} (its leaf must be the \
+             package's own <name>-<version>.tgz); it is ignored"
+        ));
+    }
+    let Some(integrity) = node
+        .integrity
+        .as_deref()
+        .filter(|sri| sri.starts_with("sha512-") && is_sri_pin(sri))
+    else {
+        return Classified::Invalid(format!(
+            "{key}: is wired to {url:?} without the sha512 the hosted rewriter always writes; \
+             it is ignored"
+        ));
+    };
+    let Some(purl) = npm_purl(name, version) else {
+        return Classified::Invalid(format!(
+            "{key}: Socket-wired node {name:?}@{version:?} has unsafe coordinates"
+        ));
+    };
+    Classified::Hosted {
+        purl,
+        uuid,
+        url: url.to_string(),
+        integrity: integrity.to_string(),
+    }
+}
+
+fn classify_file(node: &VltLockNode) -> Classified {
+    let key = &node.key;
+    let path = node.dep_id.first.as_str();
+    if !path.starts_with(".socket/vendor/") {
+        return Classified::Other;
+    }
+    let Some(vendored) = parse_vendored_path(path, &node.name) else {
+        return Classified::Invalid(format!(
+            "{key}: {path:?} is not a vendored vlt artifact of {:?} (.socket/vendor/npm/<uuid>/\
+             <name>-<version>/node_modules/<name>); it is ignored",
+            node.name
+        ));
+    };
+    if node.location.as_deref().is_some_and(|slot| slot != path) {
+        return Classified::Invalid(format!(
+            "{key}: records location {:?} for the vendored path {path:?}; it is ignored",
+            node.location.as_deref().unwrap_or_default()
+        ));
+    }
+    let Some(purl) = npm_purl(&vendored.name, &vendored.version) else {
+        return Classified::Invalid(format!(
+            "{key}: vendored node {:?}@{:?} has unsafe coordinates",
+            vendored.name, vendored.version
+        ));
+    };
+    if vendor_ref(path).is_none() {
+        return Classified::Invalid(format!("{key}: {path:?} is not a safe vendored path"));
+    }
+    Classified::Vendored {
+        purl,
+        path: path.to_string(),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::super::{testing::*, *};
+
+    const SRI: &str = "sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==";
+    const UPSTREAM: &str = "sha512-UPSTREAMupstreamUPSTREAMupstream==";
+    /// The patch uuid the `redirect/npm/vlt` fixtures wire.
+    const FIXTURE_UUID: &str = "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa";
+    /// The uuid the `vendor/npm/vlt` fixtures and `vendored-entry` wire.
+    const VENDOR_UUID: &str = "11111111-2222-4333-8444-555555555555";
+    const PURL: &str = "pkg:npm/left-pad@1.3.0";
+
+    fn lock(version: Option<u64>, nodes: &[String]) -> String {
+        let version = version
+            .map(|v| format!("  \"lockfileVersion\": {v},\n"))
+            .unwrap_or_default();
+        format!(
+            "{{\n{version}  \"options\": {{}},\n  \"nodes\": {{\n{}\n  }},\n  \"edges\": {{}}\n}}\n",
+            nodes
+                .iter()
+                .map(|n| format!("    {n}"))
+                .collect::<Vec<_>>()
+                .join(",\n")
+        )
+    }
+
+    fn node(id: &str, name: &str, sri: Option<&str>, location: Option<&str>) -> String {
+        let q = |v: Option<&str>| v.map_or("null".to_string(), |s| format!("{s:?}"));
+        format!("{id:?}: [0,{name:?},{},{}]", q(sri), q(location))
+    }
+
+    fn url(uuid: &str, leaf: &str) -> String {
+        hosted_url("npm", "left-pad", "1.3.0", uuid, leaf)
+    }
+
+    fn dir_path(uuid: &str) -> String {
+        format!(".socket/vendor/npm/{uuid}/left-pad-1.3.0/node_modules/left-pad")
+    }
+
+    fn file_id(path: &str) -> String {
+        format!("file~{}", path.replace('_', "__").replace('/', "+"))
+    }
+
+    async fn discover(text: &str) -> Discovery {
+        let p = Project::new();
+        p.write("vlt-lock.json", text);
+        p.run(|c, o| Box::pin(super::extract(c, o))).await
+    }
+
+    #[tokio::test]
+    async fn hosted_nodes_of_every_era_are_refs_with_their_sha512() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        for (version, id) in [
+            (Some(1), "~npm~left-pad@1.3.0"),
+            (Some(1), "~npm~left-pad@1.3.0~peer.0df72515a50372ba"),
+            (Some(0), "·npm·left-pad@1.3.0"),
+            (None, "··left-pad@1.3.0"),
+            (Some(1), "~acme~left-pad@1.3.0"),
+        ] {
+            let out = discover(&lock(
+                version,
+                &[node(id, "left-pad", Some(SRI), Some(&hosted))],
+            ))
+            .await;
+            assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+            let r = &out.refs[0];
+            assert_eq!(
+                r.locked_integrity,
+                Some(LockIntegrity::Sri(SRI.into())),
+                "{id}"
+            );
+            assert!(r.integrity_required && r.lockfile_basis_ok(), "{id}");
+            assert_eq!(r.url.as_deref(), Some(hosted.as_str()));
+            assert!(out.diagnostics.is_empty(), "{id}: {:?}", out.diagnostics);
+        }
+    }
+
+    #[tokio::test]
+    async fn committed_hosted_and_vendored_fixtures_are_refs() {
+        let p = Project::new();
+        p.copy_fixture("redirect/npm/vlt/basic/expected");
+        let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+        assert_refs(&out, &[(PURL, FIXTURE_UUID, WiringMode::Hosted)]);
+        assert!(out.elsewhere.iter().any(|e| e.purl == "pkg:npm/ms@2.1.3"));
+
+        let p = Project::new();
+        p.copy_fixture("redirect/npm/vlt/scoped-package/expected");
+        let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+        assert_refs(
+            &out,
+            &[(
+                "pkg:npm/@a/b@1.0.0",
+                "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+                WiringMode::Hosted,
+            )],
+        );
+
+        for case in ["vendored-entry", "vendored-entry-tgz"] {
+            let p = Project::new();
+            p.copy_fixture(&format!("redirect/npm/vlt/{case}/input"));
+            let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+            assert_refs(&out, &[(PURL, VENDOR_UUID, WiringMode::Vendored)]);
+            let want = if case == "vendored-entry" {
+                dir_path(VENDOR_UUID)
+            } else {
+                format!(".socket/vendor/npm/{VENDOR_UUID}/left-pad-1.3.0.tgz")
+            };
+            assert_eq!(out.refs[0].artifact_rel.as_deref(), Some(want.as_str()));
+            assert_eq!(out.refs[0].locked_integrity, None);
+        }
+
+        let p = Project::new();
+        p.copy_fixture("vendor/npm/vlt/1.2.0/cases/scoped/expected");
+        let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+        let vendored: Vec<_> = ref_triples(&out)
+            .into_iter()
+            .filter(|(_, _, m)| *m == WiringMode::Vendored)
+            .collect();
+        assert_eq!(vendored.len(), 1, "{:?}", out.refs);
+        assert!(vendored[0].0.starts_with("pkg:npm/@"), "{vendored:?}");
+    }
+
+    #[tokio::test]
+    async fn every_vendored_capture_wires_its_case_purl() {
+        let root = fixture_path("vendor/npm/vlt");
+        let mut checked = 0;
+        for version in ["1.2.0", "1.0.10", "1.0.0-rc.14"] {
+            let cases = root.join(version).join("cases");
+            for case in std::fs::read_dir(&cases).unwrap() {
+                let dir = case.unwrap().path();
+                let meta: serde_json::Value =
+                    serde_json::from_str(&std::fs::read_to_string(dir.join("case.json")).unwrap())
+                        .unwrap();
+                if !meta["refusal"].is_null() {
+                    continue;
+                }
+                let rel = dir
+                    .join("expected")
+                    .strip_prefix(fixture_path(""))
+                    .unwrap()
+                    .to_string_lossy()
+                    .into_owned();
+                let p = Project::new();
+                p.copy_fixture(&rel);
+                let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+                let purl = meta["purl"].as_str().unwrap();
+                let uuid = meta["uuid"].as_str().unwrap();
+                assert!(
+                    out.wires(purl, uuid, WiringMode::Vendored),
+                    "{rel}: {:?} {:?}",
+                    out.refs,
+                    out.diagnostics
+                );
+                assert!(out.diagnostics.is_empty(), "{rel}: {:?}", out.diagnostics);
+                checked += 1;
+            }
+        }
+        assert!(checked >= 20, "only {checked} vendored captures checked");
+    }
+
+    #[tokio::test]
+    async fn non_socket_and_mismatched_hosted_nodes_are_never_refs() {
+        let id = "~npm~left-pad@1.3.0";
+        let good = url(UUID_A, "left-pad-1.3.0.tgz");
+        let cases: Vec<(&str, String, bool)> = vec![
+            (
+                "look-alike host",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&good.replace("patch.socket.dev", "patch.socket.dev.evil.test")),
+                ),
+                false,
+            ),
+            (
+                "foreign host with a uuid",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&format!(
+                        "https://evil.example/patch/npm/{TOKEN}/{UUID_A}/left-pad-1.3.0.tgz"
+                    )),
+                ),
+                false,
+            ),
+            (
+                "uppercase uuid",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&format!(
+                        "https://patch.socket.dev/patch/npm/tok/{}/left-pad-1.3.0.tgz",
+                        UUID_A.to_uppercase()
+                    )),
+                ),
+                false,
+            ),
+            (
+                "slot [1] names another package",
+                node(id, "right-pad", Some(SRI), Some(&good)),
+                true,
+            ),
+            (
+                "leaf names another version",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&url(UUID_A, "left-pad-1.4.0.tgz")),
+                ),
+                true,
+            ),
+            (
+                "leaf names another package",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&url(UUID_A, "right-pad-1.3.0.tgz")),
+                ),
+                true,
+            ),
+            (
+                "missing sha512",
+                node(id, "left-pad", None, Some(&good)),
+                true,
+            ),
+            (
+                "sha1 integrity",
+                node(
+                    id,
+                    "left-pad",
+                    Some("sha1-AAAAAAAAAAAAAAAAAAAAAAAAAAA="),
+                    Some(&good),
+                ),
+                true,
+            ),
+        ];
+        for (what, n, diagnosed) in cases {
+            let out = discover(&lock(Some(1), &[n])).await;
+            assert!(out.refs.is_empty(), "{what}: {:?}", out.refs);
+            assert_eq!(
+                diag_codes(&out),
+                if diagnosed {
+                    vec![DIAG_REF_INVALID]
+                } else {
+                    vec![]
+                },
+                "{what}: {:?}",
+                out.diagnostics
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn git_remote_workspace_and_user_file_nodes_are_not_refs() {
+        let nodes = [
+            node("git~github_c:a+b~abc", "b", None, None),
+            node(
+                "remote~https_c++example.com+x.tgz",
+                "x",
+                Some(SRI),
+                Some("https://example.com/x.tgz"),
+            ),
+            node("workspace~packages+a", "a", None, None),
+            node(
+                "file~vendor+left-pad",
+                "left-pad",
+                None,
+                Some("vendor/left-pad"),
+            ),
+        ];
+        let out = discover(&lock(Some(1), &nodes)).await;
+        assert!(out.refs.is_empty(), "{:?}", out.refs);
+        assert!(out.diagnostics.is_empty(), "{:?}", out.diagnostics);
+        assert!(out.elsewhere.is_empty(), "{:?}", out.elsewhere);
+    }
+
+    #[tokio::test]
+    async fn vendored_nodes_must_match_the_path_rule_name_and_location() {
+        let path = dir_path(UUID_B);
+        let id = file_id(&path);
+        let out = discover(&lock(Some(1), &[node(&id, "left-pad", None, Some(&path))])).await;
+        assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
+        let out = discover(&lock(Some(1), &[node(&id, "left-pad", None, None)])).await;
+        assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
+
+        let traversal =
+            format!(".socket/vendor/npm/{UUID_B}/../left-pad-1.3.0/node_modules/left-pad");
+        let cases = [
+            (
+                "slot [1] names another package",
+                node(&id, "right-pad", None, Some(&path)),
+            ),
+            (
+                "slot [3] names another path",
+                node(&id, "left-pad", None, Some(&dir_path(UUID_A))),
+            ),
+            ("node_modules segment names another package", {
+                let other =
+                    format!(".socket/vendor/npm/{UUID_B}/left-pad-1.3.0/node_modules/right-pad");
+                node(&file_id(&other), "left-pad", None, Some(&other))
+            }),
+            ("non-semver version", {
+                let other =
+                    format!(".socket/vendor/npm/{UUID_B}/left-pad-1.3/node_modules/left-pad");
+                node(&file_id(&other), "left-pad", None, Some(&other))
+            }),
+            ("non-canonical uuid", {
+                let other = dir_path(&UUID_B.to_uppercase());
+                node(&file_id(&other), "left-pad", None, Some(&other))
+            }),
+            (
+                "path traversal",
+                node(&file_id(&traversal), "left-pad", None, Some(&traversal)),
+            ),
+            ("tgz of another package", {
+                let other = format!(".socket/vendor/npm/{UUID_B}/right-pad-1.3.0.tgz");
+                node(&file_id(&other), "left-pad", None, Some(&other))
+            }),
+        ];
+        for (what, n) in cases {
+            let out = discover(&lock(Some(1), &[n])).await;
+            assert!(out.refs.is_empty(), "{what}: {:?}", out.refs);
+            assert_eq!(
+                diag_codes(&out),
+                vec![DIAG_REF_INVALID],
+                "{what}: {:?}",
+                out.diagnostics
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn a_legacy_encoded_vendored_node_is_a_ref() {
+        let path = dir_path(UUID_B);
+        let id = format!("file·{}", path.replace('/', "§"));
+        let out = discover(&lock(Some(0), &[node(&id, "left-pad", None, Some(&path))])).await;
+        assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
+    }
+
+    #[tokio::test]
+    async fn a_same_version_registry_instance_withholds_the_lock_basis() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        let foreign = "https://npm.acme.example/left-pad/-/left-pad-1.3.0.tgz";
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node("~npm~left-pad@1.3.0", "left-pad", Some(SRI), Some(&hosted)),
+                node(
+                    "~acme~left-pad@1.3.0",
+                    "left-pad",
+                    Some(UPSTREAM),
+                    Some(foreign),
+                ),
+            ],
+        ))
+        .await;
+        assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+        assert_eq!(out.refs[0].locked_integrity, None);
+        assert!(!out.refs[0].lockfile_basis_ok());
+        assert!(out.hosted_claim(PURL, UUID_A) == Some(true));
+
+        let path = dir_path(UUID_B);
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node(&file_id(&path), "left-pad", None, Some(&path)),
+                node("~npm~left-pad@1.3.0", "left-pad", Some(UPSTREAM), None),
+            ],
+        ))
+        .await;
+        assert!(out.refs.is_empty(), "{:?}", out.refs);
+        assert_eq!(diag_codes(&out), vec![DIAG_REF_UNATTRIBUTABLE]);
+        assert_eq!(out.vendored_claim(PURL, UUID_B, &path), Some(false));
+
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node(&file_id(&path), "left-pad", None, Some(&path)),
+                node("~npm~left-pad@1.4.0", "left-pad", Some(UPSTREAM), None),
+            ],
+        ))
+        .await;
+        assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
+    }
+
+    #[tokio::test]
+    async fn unreadable_locks_are_no_wiring_source_but_are_recognized() {
+        let good = lock(
+            Some(1),
+            &[node(
+                "~npm~left-pad@1.3.0",
+                "left-pad",
+                Some(SRI),
+                Some(&url(UUID_A, "left-pad-1.3.0.tgz")),
+            )],
+        );
+        for (what, text) in [
+            ("BOM", format!("\u{feff}{good}")),
+            (
+                "version 2",
+                good.replace("\"lockfileVersion\": 1", "\"lockfileVersion\": 2"),
+            ),
+            (
+                "version 1.0",
+                good.replace("\"lockfileVersion\": 1", "\"lockfileVersion\": 1.0"),
+            ),
+            ("not an object", format!("[{good}]")),
+            ("truncated", good[..good.len() - 12].to_string()),
+        ] {
+            let out = discover(&text).await;
+            assert!(out.refs.is_empty(), "{what}: {:?}", out.refs);
+            assert_eq!(diag_codes(&out), vec![DIAG_LOCKFILE_UNPARSEABLE], "{what}");
+            assert!(out.recognizes(UUID_A, WiringMode::Hosted), "{what}");
+            assert_eq!(out.hosted_claim(PURL, UUID_A), Some(false), "{what}");
+        }
+    }
+
+    #[tokio::test]
+    async fn only_the_root_lock_is_read() {
+        let p = Project::new();
+        p.write(
+            "packages/a/vlt-lock.json",
+            lock(
+                Some(1),
+                &[node(
+                    "~npm~left-pad@1.3.0",
+                    "left-pad",
+                    Some(SRI),
+                    Some(&url(UUID_A, "left-pad-1.3.0.tgz")),
+                )],
+            ),
+        );
+        let out = p.discover().await;
+        assert!(
+            out.refs.is_empty() && out.recognized.is_empty(),
+            "{:?}",
+            out.refs
+        );
+    }
+
+    #[tokio::test]
+    async fn a_registry_vlt_lock_contests_a_hosted_package_lock_and_vice_versa() {
+        let p = Project::new();
+        p.copy_fixture("redirect/npm/vlt/sibling-package-lock/input");
+        p.write(
+            "package-lock.json",
+            serde_json::json!({
+                "lockfileVersion": 3,
+                "packages": { "node_modules/left-pad": {
+                    "version": "1.3.0",
+                    "resolved": url(UUID_A, "left-pad-1.3.0.tgz"),
+                    "integrity": SRI,
+                } }
+            })
+            .to_string(),
+        );
+        let out = p.discover().await;
+        assert!(
+            !out.wires(PURL, UUID_A, WiringMode::Hosted),
+            "{:?}",
+            out.refs
+        );
+        assert!(
+            diag_codes(&out).contains(&DIAG_REF_UNATTRIBUTABLE),
+            "{:?}",
+            out.diagnostics
+        );
+
+        let p = Project::new();
+        p.copy_fixture("redirect/npm/vlt/sibling-package-lock/expected");
+        let out = p.discover().await;
+        assert!(out.wires(
+            PURL,
+            "11111111-1111-4111-8111-111111111111",
+            WiringMode::Hosted
+        ));
+        assert!(
+            !diag_codes(&out).contains(&DIAG_REF_UNATTRIBUTABLE),
+            "both locks rewritten: {:?}",
+            out.diagnostics
+        );
+    }
+
+    #[tokio::test]
+    async fn a_configured_patch_server_origin_counts() {
+        let origin = "http://127.0.0.1:4026";
+        let local =
+            format!("{origin}/patch/npm/left-pad/1.3.0/{TOKEN}/{UUID_A}/left-pad-1.3.0.tgz");
+        let text = lock(
+            Some(1),
+            &[node(
+                "~npm~left-pad@1.3.0",
+                "left-pad",
+                Some(SRI),
+                Some(&local),
+            )],
+        );
+        let p = Project::new().with_origin(origin);
+        p.write("vlt-lock.json", &text);
+        let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+        assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+        let out = discover(&text).await;
+        assert!(out.refs.is_empty());
+        assert_eq!(out.elsewhere.len(), 1, "{:?}", out.elsewhere);
+    }
+}
diff --git a/crates/socket-patch-core/src/vex/verify.rs b/crates/socket-patch-core/src/vex/verify.rs
index 4b2e792a..5a509733 100644
--- a/crates/socket-patch-core/src/vex/verify.rs
+++ b/crates/socket-patch-core/src/vex/verify.rs
@@ -18,7 +18,9 @@ use std::path::{Path, PathBuf};
 use crate::manifest::schema::{PatchManifest, PatchRecord};
 use crate::patch::apply::{verify_file_patch, VerifyStatus};
 use crate::vendor::state::{lookup_entry, VendorEntry};
-use crate::vendor::verify::verify_vendored_patch_record;
+use crate::vendor::verify::{
+    is_vlt_dir_entry, verify_vendored_patch_record, vlt_installed_copy_matches,
+};
 
 /// One entry per manifest PURL that did NOT pass verification. The
 /// `reason` is a short snake_case tag the CLI can route on (matches
@@ -162,7 +164,7 @@ pub async fn applied_patches_with_vendor(
         match result {
             Ok(()) => {
                 out.applied.push(purl.clone());
-                if vendor_entry.is_some() {
+                if let Some((ctx, entry)) = vendor_entry {
                     out.vendored.push(purl.clone());
                     // Disclosure probe: with the vendor artifact healthy,
                     // also check whether the LIVE installed tree (when the
@@ -181,7 +183,13 @@ pub async fn applied_patches_with_vendor(
                     // it" is advice no `go` command can follow.
                     let go_cache_copy = purl.starts_with("pkg:golang/");
                     if let Some(pkg_path) = package_paths.get(purl).filter(|_| !go_cache_copy) {
-                        if verify_patch_record(pkg_path, record).await.is_err() {
+                        let in_sync = if is_vlt_dir_entry(entry) {
+                            vlt_installed_copy_matches(&ctx.project_root, pkg_path, entry, record)
+                                .await
+                        } else {
+                            verify_patch_record(pkg_path, record).await.is_ok()
+                        };
+                        if !in_sync {
                             out.vendored_out_of_sync.push(purl.clone());
                         }
                     }
@@ -1582,4 +1590,86 @@ mod tests {
             "not a whole component"
         );
     }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn a_vlt_link_to_the_vendored_dir_is_in_sync_under_the_manifest_exemption() {
+        use sha2::Digest;
+        use std::collections::BTreeMap;
+        let root = tempfile::tempdir().unwrap();
+        let root = root.path();
+        let purl = "pkg:npm/a@1.0.0";
+        let rel = format!(".socket/vendor/npm/{VUUID}/a-1.0.0/node_modules/a");
+        let dir = root.join(&rel);
+        tokio::fs::create_dir_all(dir.join("node_modules"))
+            .await
+            .unwrap();
+        let blob: &[u8] = b"{\"name\":\"a\",\"devDependencies\":{\"t\":\"1\"}}";
+        let stripped: &[u8] = b"{\"name\":\"a\"}";
+        let index: &[u8] = b"patched";
+        tokio::fs::write(dir.join("package.json"), stripped)
+            .await
+            .unwrap();
+        tokio::fs::write(dir.join("index.js"), index).await.unwrap();
+        let mut rec = record_with_one_file(&compute_git_sha256_from_bytes(index));
+        rec.uuid = VUUID.to_string();
+        rec.files.insert(
+            "package.json".to_string(),
+            crate::manifest::schema::PatchFileInfo {
+                before_hash: "b".repeat(64),
+                after_hash: compute_git_sha256_from_bytes(blob),
+            },
+        );
+        let mut entry = vendor_entry(purl, &rel);
+        entry.ecosystem = "npm".to_string();
+        entry.flavor = Some("vlt".to_string());
+        entry.artifact.file_inventory = Some(BTreeMap::from([
+            (
+                "index.js".to_string(),
+                hex::encode(sha2::Sha256::digest(index)),
+            ),
+            (
+                "package.json".to_string(),
+                hex::encode(sha2::Sha256::digest(stripped)),
+            ),
+        ]));
+        let mut manifest = PatchManifest::new();
+        manifest.patches.insert(purl.to_string(), rec);
+        let ctx = VendorContext {
+            project_root: root.to_path_buf(),
+            entries: HashMap::from([(purl.to_string(), entry)]),
+            go_patches: HashMap::new(),
+            hosted: HashMap::new(),
+        };
+        let link = root.join("node_modules/a");
+        tokio::fs::create_dir_all(root.join("node_modules"))
+            .await
+            .unwrap();
+        tokio::fs::symlink(&dir, &link).await.unwrap();
+        let paths = HashMap::from([(purl.to_string(), link.clone())]);
+        let out = applied_patches_with_vendor(&manifest, &paths, Some(&ctx)).await;
+        assert_eq!(out.vendored, vec![purl.to_string()], "{:?}", out.failed);
+        assert!(
+            out.vendored_out_of_sync.is_empty(),
+            "the link IS the artifact"
+        );
+
+        let copy = root.join("copy");
+        tokio::fs::create_dir_all(&copy).await.unwrap();
+        tokio::fs::write(copy.join("package.json"), stripped)
+            .await
+            .unwrap();
+        tokio::fs::write(copy.join("index.js"), index)
+            .await
+            .unwrap();
+        let paths = HashMap::from([(purl.to_string(), copy.clone())]);
+        let out = applied_patches_with_vendor(&manifest, &paths, Some(&ctx)).await;
+        assert!(out.vendored_out_of_sync.is_empty(), "exempt package.json");
+
+        tokio::fs::write(copy.join("index.js"), b"pristine")
+            .await
+            .unwrap();
+        let out = applied_patches_with_vendor(&manifest, &paths, Some(&ctx)).await;
+        assert_eq!(out.vendored_out_of_sync, vec![purl.to_string()]);
+    }
 }
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 144e514d..87b35620 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -926,283 +926,3189 @@
     "live_claims": []
   },
   "redirect/npm/vlt/alias-edge/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/alias-edge/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/alias-url-equals-registry/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/alias-url-equals-registry/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/basic/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/basic/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/bins-and-platform-slots/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/bins-and-platform-slots/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/bom-refusal/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json starts with a UTF-8 BOM, which vlt cannot read; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-0.0.0-1/expected": {
-    "refs": [],
-    "diagnostics": [],
-    "recognized": [],
-    "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
-  },
-  "redirect/npm/vlt/capture-0.0.0-1/input": {
-    "refs": [],
-    "diagnostics": [],
-    "recognized": [],
-    "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
-  },
-  "redirect/npm/vlt/capture-0.0.0-16/expected": {
-    "refs": [],
-    "diagnostics": [],
-    "recognized": [],
-    "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
-  },
-  "redirect/npm/vlt/capture-0.0.0-16/input": {
-    "refs": [],
-    "diagnostics": [],
-    "recognized": [],
-    "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
-  },
-  "redirect/npm/vlt/capture-0.0.0-19/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
-  },
-  "redirect/npm/vlt/capture-0.0.0-19/input": {
-    "refs": [],
-    "diagnostics": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
+  },
+  "redirect/npm/vlt/capture-0.0.0-1/input": {
+    "refs": [],
+    "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
-  "redirect/npm/vlt/capture-0.0.0-32/expected": {
+  "redirect/npm/vlt/capture-0.0.0-16/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
+  },
+  "redirect/npm/vlt/capture-0.0.0-16/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-19/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
+  },
+  "redirect/npm/vlt/capture-0.0.0-19/input": {
+    "refs": [],
+    "diagnostics": [],
+    "recognized": [],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": []
+  },
+  "redirect/npm/vlt/capture-0.0.0-32/expected": {
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
+    "diagnostics": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "unlocked_pins": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-0.0.0-32/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.0-rc.14/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.0-rc.14/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.0-rc.15/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.0-rc.15/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.0-rc.32/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.0-rc.32/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.0-rc.33/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.0-rc.33/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.0-rc.8/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.0-rc.8/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.0.10/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.0.10/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.1.1/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.1.1/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/capture-1.2.0/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "00000000-0000-4000-8000-000000000000",
+        "purl": "pkg:npm/fsevents@2.3.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "ffffffff-ffff-4fff-8fff-ffffffffffff",
+        "purl": "pkg:npm/semver@7.6.0"
+      }
+    ]
   },
   "redirect/npm/vlt/capture-1.2.0/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/crlf/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/crlf/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/custom-registry-skipped/input": {
@@ -1210,23 +4116,62 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/default-registry-alias/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/default-registry-alias/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/hidden-lock-sentinel/input": {
@@ -1247,223 +4192,700 @@
   },
   "redirect/npm/vlt/invalid-json/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
     "live_claims": []
   },
   "redirect/npm/vlt/jsr-skipped/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@std/path@1.0.0",
+        "uuid": "33333333-3333-4333-8333-333333333333",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": null,
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/33333333-3333-4333-8333-333333333333/path-1.0.0.tgz",
+        "lockfile_basis_ok": false
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "33333333-3333-4333-8333-333333333333",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@std/path@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "33333333-3333-4333-8333-333333333333",
+        "purl": "pkg:npm/@std/path@1.0.0"
+      }
+    ]
   },
   "redirect/npm/vlt/jsr-skipped/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@std/path@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/legacy-mixed-default-segments/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/legacy-mixed-default-segments/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-absent-version/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-absent-version/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-absent-version-warning/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-absent-version-warning/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-alias-url-equals-registry/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-alias-url-equals-registry/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-default-registry-alias/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-default-registry-alias/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-empty-segment/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-empty-segment/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-empty-segment-old-lockfile-warning/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-npm-segment/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-npm-segment/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v0-url-segment-old-lockfile-warning/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v1-3tuple/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v1-3tuple/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v1-both-registry-keys/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v1-both-registry-keys/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-v1-scalar-registry-3tuple/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/lock-v1-scalar-registry-3tuple/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/lock-version-exponent/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json has lockfileVersion 1e0; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
@@ -1471,7 +4893,13 @@
   },
   "redirect/npm/vlt/lock-version-float/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json has lockfileVersion 1.0; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
@@ -1479,7 +4907,13 @@
   },
   "redirect/npm/vlt/lock-version-string/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json has lockfileVersion \"1\"; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
@@ -1487,7 +4921,13 @@
   },
   "redirect/npm/vlt/lock-version-unsupported/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json has lockfileVersion 2; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
@@ -1495,26 +4935,66 @@
   },
   "redirect/npm/vlt/lone-surrogate-string/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
     "live_claims": []
   },
   "redirect/npm/vlt/mirror-registries-npm/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/mirror-registries-npm/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/missing-sha512/input": {
@@ -1522,55 +5002,234 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/mixed-eol/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      }
+    ]
   },
   "redirect/npm/vlt/mixed-eol/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/modifier-extra/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "uuid": "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee/debug-4.3.4.tgz",
+        "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "dddddddd-dddd-4ddd-8ddd-dddddddddddd",
+        "purl": "pkg:npm/ms@2.1.3"
+      },
+      {
+        "mode": "hosted",
+        "uuid": "eeeeeeee-eeee-4eee-8eee-eeeeeeeeeeee",
+        "purl": "pkg:npm/debug@4.3.4"
+      }
+    ]
   },
   "redirect/npm/vlt/modifier-extra/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/multiple-versions/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/multiple-versions/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/no-lockfile-vlt-json/input": {
@@ -1586,143 +5245,477 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/not-json-object/input": {
     "refs": [],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "lockfile_unparseable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+      }
+    ],
     "recognized": [],
     "unlocked_pins": [],
     "elsewhere": [],
     "live_claims": []
   },
   "redirect/npm/vlt/peer-extras/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "cccccccc-cccc-4ccc-8ccc-cccccccccccc",
+        "purl": "pkg:npm/use-sync-external-store@1.2.0"
+      }
+    ]
   },
   "redirect/npm/vlt/peer-extras/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/re-redirect-stale-url/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/re-redirect-stale-url/input": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "66666666-6666-4666-8666-666666666666",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/22222222-2222-2222-2222-222222222222/66666666-6666-4666-8666-666666666666/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "22222222-2222-2222-2222-222222222222",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "66666666-6666-4666-8666-666666666666",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "66666666-6666-4666-8666-666666666666",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/remote-file-git-untouched/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/remote-file-git-untouched/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/rerun-noop/input": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/residual-gate-duplicate-nodes/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/scalar-registry-v0-with-registries-npm/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/scalar-registry-v0-with-registries-npm/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/scalar-registry-warning/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/scalar-registry-warning/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/scoped-package/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@a/b@1.0.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/b@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@a/b@1.0.0"
+      }
+    ]
   },
   "redirect/npm/vlt/scoped-package/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@a/b@1.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/b@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/scoped-registry-skipped/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/@a/b@1.0.0",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": null,
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/b-1.0.0.tgz",
+        "lockfile_basis_ok": false
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
-    "elsewhere": [],
-    "live_claims": []
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@a/b@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb",
+        "purl": "pkg:npm/@a/b@1.0.0"
+      }
+    ]
   },
   "redirect/npm/vlt/scoped-registry-skipped/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@a/b@1.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/sibling-package-lock/expected": {
@@ -1737,6 +5730,17 @@
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
         "lockfile_basis_ok": true
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
       }
     ],
     "diagnostics": [],
@@ -1746,10 +5750,20 @@
         "mode": "hosted",
         "file": "package-lock.json"
       },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
       {
         "uuid": "11111111-1111-4111-8111-111111111111",
         "mode": "hosted",
         "file": "package-lock.json"
+      },
+      {
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
       }
     ],
     "unlocked_pins": [],
@@ -1757,6 +5771,10 @@
       {
         "purl": "pkg:npm/ms@2.1.3",
         "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
       }
     ],
     "live_claims": [
@@ -1777,9 +5795,17 @@
         "purl": "pkg:npm/left-pad@1.3.0",
         "file": "package-lock.json"
       },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
       {
         "purl": "pkg:npm/ms@2.1.3",
         "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
       }
     ],
     "live_claims": []
@@ -1798,29 +5824,45 @@
         "lockfile_basis_ok": true
       },
       {
-        "purl": "pkg:npm/ms@2.1.3",
-        "uuid": "22222222-2222-4222-8222-222222222222",
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-1111-4111-8111-111111111111",
         "mode": "hosted",
-        "source_file": "package-lock.json",
+        "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-22222222222222222222222222222222222222222222222222222222222222222222222222222222222222==\")",
+        "locked_integrity": "Sri(\"sha512-11111111111111111111111111111111111111111111111111111111111111111111111111111111111111==\")",
         "integrity_required": true,
-        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/22222222-2222-4222-8222-222222222222/ms-2.1.3.tgz",
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/11111111-1111-4111-8111-111111111111/left-pad-1.3.0.tgz",
         "lockfile_basis_ok": true
       }
     ],
-    "diagnostics": [],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "package-lock.json",
+        "detail": "package-lock.json: pkg:npm/ms@2.1.3 is wired to Socket patch 22222222-2222-4222-8222-222222222222, but vlt-lock.json resolves the same version from elsewhere (not a Socket patch) — which lock the build installs from depends on the package manager that runs, so the patch is not attested; rewire both locks (re-run `socket-patch scan` / `vendor`) or delete the stale one"
+      }
+    ],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
         "mode": "hosted",
         "file": "package-lock.json"
       },
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
       {
         "uuid": "11111111-1111-4111-8111-111111111111",
         "mode": "hosted",
         "file": "package-lock.json"
       },
+      {
+        "uuid": "11111111-1111-4111-8111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
       {
         "uuid": "22222222-2222-4222-8222-222222222222",
         "mode": "hosted",
@@ -1828,17 +5870,17 @@
       }
     ],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": [
       {
         "mode": "hosted",
         "uuid": "11111111-1111-4111-8111-111111111111",
         "purl": "pkg:npm/left-pad@1.3.0"
-      },
-      {
-        "mode": "hosted",
-        "uuid": "22222222-2222-4222-8222-222222222222",
-        "purl": "pkg:npm/ms@2.1.3"
       }
     ]
   },
@@ -1852,9 +5894,17 @@
         "purl": "pkg:npm/left-pad@1.3.0",
         "file": "package-lock.json"
       },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
       {
         "purl": "pkg:npm/ms@2.1.3",
         "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
       }
     ],
     "live_claims": []
@@ -1911,9 +5961,17 @@
         "purl": "pkg:npm/left-pad@1.3.0",
         "file": "package-lock.json"
       },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
       {
         "purl": "pkg:npm/ms@2.1.3",
         "file": "package-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
       }
     ],
     "live_claims": []
@@ -1923,87 +5981,282 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/url-segment-default/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/url-segment-default/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/url-segment-trailing-slash/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/url-segment-trailing-slash/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/vendored-entry/input": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "mode": "vendored",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": ".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+        "locked_integrity": null,
+        "integrity_required": false,
+        "url": null,
+        "lockfile_basis_ok": false
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "mode": "vendored",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "vendored",
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "artifact_rel": ".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"
+      }
+    ]
   },
   "redirect/npm/vlt/vendored-entry-tgz/input": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "mode": "vendored",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": ".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0.tgz",
+        "locked_integrity": null,
+        "integrity_required": false,
+        "url": null,
+        "lockfile_basis_ok": false
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "mode": "vendored",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "vendored",
+        "uuid": "11111111-2222-4333-8444-555555555555",
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "artifact_rel": ".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0.tgz"
+      }
+    ]
   },
   "redirect/npm/vlt/vlt-json-bom/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/vlt-json-bom/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/vlt/workspace/expected": {
-    "refs": [],
+    "refs": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "source_file": "vlt-lock.json",
+        "artifact_rel": null,
+        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "integrity_required": true,
+        "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
+        "lockfile_basis_ok": true
+      }
+    ],
     "diagnostics": [],
-    "recognized": [],
+    "recognized": [
+      {
+        "uuid": "11111111-1111-1111-1111-111111111111",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      },
+      {
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "mode": "hosted",
+        "file": "vlt-lock.json"
+      }
+    ],
     "unlocked_pins": [],
     "elsewhere": [],
-    "live_claims": []
+    "live_claims": [
+      {
+        "mode": "hosted",
+        "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+        "purl": "pkg:npm/left-pad@1.3.0"
+      }
+    ]
   },
   "redirect/npm/vlt/workspace/input": {
     "refs": [],
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "redirect/npm/yarn-berry/basic/expected": {
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
index 9d2f41df..08448f87 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/vlt-locks.json
@@ -4,7 +4,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/0.0.0-16": {
@@ -12,7 +69,68 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/0.0.0-19": {
@@ -20,7 +138,68 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.3.1",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/0.0.0-32": {
@@ -28,7 +207,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.0-rc.14": {
@@ -36,7 +272,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.0-rc.15": {
@@ -44,7 +337,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.0-rc.32": {
@@ -52,7 +402,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.0-rc.33": {
@@ -60,7 +467,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.0-rc.8": {
@@ -68,7 +532,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.0.10": {
@@ -76,7 +597,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.1.1": {
@@ -84,7 +662,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   },
   "vlt-locks/1.2.0": {
@@ -92,7 +727,64 @@
     "diagnostics": [],
     "recognized": [],
     "unlocked_pins": [],
-    "elsewhere": [],
+    "elsewhere": [
+      {
+        "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/debug@4.3.4",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/fsevents@2.3.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/left-pad@1.3.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.2",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/ms@2.1.3",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/react@18.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/semver@7.6.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/use-sync-external-store@1.2.0",
+        "file": "vlt-lock.json"
+      },
+      {
+        "purl": "pkg:npm/yallist@4.0.0",
+        "file": "vlt-lock.json"
+      }
+    ],
     "live_claims": []
   }
 }
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index 82fdb17d..cde9a128 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -8,7 +8,7 @@
 //! expected locks real vlt wrote (`regenerate.sh`: an independent surgery,
 //! then `vlt ci`), so byte equality proves `vlt ci` keeps the wired lock
 //! byte-stable; the revert gives the pre-vendor bytes back. The lock
-//! inventory reads the same captures.
+//! inventory and VEX lockfile discovery read the same captures.
 
 use std::collections::BTreeMap;
 use std::fs;
@@ -23,6 +23,7 @@ use socket_patch_core::vendor::lock_inventory::{inventory_project, LockIntegrity
 use socket_patch_core::vendor::npm_flavor::{revert_npm_any, vendor_npm_any};
 use socket_patch_core::vendor::VendorOutcome;
 use socket_patch_core::vendor::{save_state, VendorEntry, VendorState};
+use socket_patch_core::vex::discover::{discover_patched_refs, WiringMode};
 
 const TOKEN: &str = "11111111-1111-1111-1111-111111111111";
 
@@ -867,3 +868,95 @@ async fn lock_inventory_reads_every_capture_and_drops_vendored_nodes() {
         assert!(!entries.is_empty(), "{} {}", case.version, case.name);
     }
 }
+
+#[tokio::test]
+async fn vex_discovers_every_hosted_rewrite_and_nothing_before_it() {
+    let overrides = overrides();
+    for (version, targets, _) in CAPTURES {
+        let files = read_capture(version);
+        let rewritten = rewrite_registry_redirect(&files, &overrides);
+        for (label, text) in [
+            ("input", files["vlt-lock.json"].clone()),
+            ("output", rewritten.files["vlt-lock.json"].clone()),
+            (
+                "output crlf",
+                rewritten.files["vlt-lock.json"].replace('\n', "\r\n"),
+            ),
+        ] {
+            let tmp = tempfile::tempdir().unwrap();
+            fs::write(tmp.path().join("vlt-lock.json"), &text).unwrap();
+            let out = discover_patched_refs(tmp.path()).await;
+            assert!(
+                out.diagnostics.is_empty(),
+                "{version} {label}: {:?}",
+                out.diagnostics
+            );
+            let mut got: Vec<(String, String)> = out
+                .refs
+                .iter()
+                .map(|r| {
+                    assert_eq!(r.mode, WiringMode::Hosted, "{version} {label}");
+                    assert_eq!(
+                        r.locked_integrity,
+                        Some(LockIntegrity::Sri(patched_sha(&r.uuid))),
+                        "{version} {label}"
+                    );
+                    (r.purl.clone(), r.uuid.clone())
+                })
+                .collect();
+            got.sort();
+            let mut want: Vec<(String, String)> = if label == "input" {
+                Vec::new()
+            } else {
+                TARGETS
+                    .iter()
+                    .filter(|(name, v, _)| {
+                        let bare = format!("{}@{v}", name.replace('/', "+"));
+                        let legacy = format!("{}@{v}", name.replace('/', "§"));
+                        targets
+                            .iter()
+                            .any(|id| id.contains(&bare) || id.contains(&legacy))
+                    })
+                    .map(|(name, v, uuid)| (format!("pkg:npm/{name}@{v}"), uuid.to_string()))
+                    .collect()
+            };
+            want.sort();
+            assert_eq!(got, want, "{version} {label}");
+        }
+    }
+}
+
+#[tokio::test]
+async fn vex_discovers_the_vendored_wiring_until_it_is_reverted() {
+    for case in cases().into_iter().filter(|c| c.refusal.is_none()) {
+        let label = format!("{} {}", case.version, case.name);
+        let staged = stage(&case, false);
+        assert!(
+            discover_patched_refs(&staged.root).await.refs.is_empty(),
+            "{label}: nothing is wired before vendoring"
+        );
+        let entry = expect_done(vendor(&case, &staged).await, &label);
+        let out = discover_patched_refs(&staged.root).await;
+        assert!(out.diagnostics.is_empty(), "{label}: {:?}", out.diagnostics);
+        assert_eq!(out.refs.len(), 1, "{label}: {:?}", out.refs);
+        let r = &out.refs[0];
+        assert_eq!(r.mode, WiringMode::Vendored, "{label}");
+        assert_eq!(r.uuid, case.uuid, "{label}");
+        assert_eq!(r.purl, case.purl, "{label}");
+        assert_eq!(
+            r.artifact_rel.as_deref(),
+            Some(entry.artifact.path.as_str()),
+            "{label}"
+        );
+        assert!(out.vendor_entry_live(&staged.root, &entry).await, "{label}");
+
+        let reverted = revert_npm_any(&entry, &staged.root, false).await;
+        assert!(reverted.success, "{label}: {:?}", reverted.error);
+        let out = discover_patched_refs(&staged.root).await;
+        assert!(out.refs.is_empty(), "{label}: {:?}", out.refs);
+        assert!(
+            !out.vendor_entry_live(&staged.root, &entry).await,
+            "{label}"
+        );
+    }
+}

From b5e5dd33e01d5a789a206359b199a3bbeaf48507 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 02:27:42 -0400
Subject: [PATCH 18/46] Tighten vlt VEX refs and ledger-less checks

A hosted vlt-lock.json node now attests only when its patch URL's
embedded package name and version (scope included) match the node, so
a lock pointing one package at another package's patch URL is no
longer read as patched. A Socket-shaped node that fails these checks
counts against its siblings of the same version: a hosted pin next to
it no longer attests before install, and a vendored directory next to
it is not attested.

A vendored vlt directory checked without its vendor ledger now
verifies a package.json with devDependencies stripped against the
patched blob in .socket/blobs. When that blob is missing, the package
is left out with the new reason vendor_manifest_unverifiable instead
of a misleading hash mismatch.

The warnings for an unreadable vlt-lock.json and for an unattributable
vendored node now describe the actual cause and a fix that works.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   9 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   4 +-
 crates/socket-patch-cli/src/commands/vex.rs   |   6 +
 .../src/commands/vex_sources.rs               |   3 +-
 .../tests/vex_e2e_common/vlt.rs               |   5 +-
 .../src/vendor/lock_inventory/vlt.rs          |  16 +-
 crates/socket-patch-core/src/vendor/verify.rs |  87 ++++--
 .../socket-patch-core/src/vendor/vlt_lock.rs  |  74 +++++
 .../socket-patch-core/src/vex/discover/mod.rs |   5 +-
 .../socket-patch-core/src/vex/discover/vlt.rs | 253 +++++++++++++++---
 .../vex-discover-golden/redirect-npm.json     |  16 +-
 11 files changed, 399 insertions(+), 79 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f102e8df..deabf982 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -341,8 +341,13 @@ into the new version's section — see docs/releasing.md.
   installed link. A lock vlt cannot read (BOM, other `lockfileVersion`)
   wires nothing. A hosted npm package is now judged by every store variant
   of its installed copies (pnpm and vlt peer, modifier and registry-alias
-  instances), and a same-version instance on another registry keeps a vlt
-  hosted pin from attesting before install. `setup.manual` accepts `vlt`.
+  instances), and a same-version instance on another registry (or a
+  Socket-shaped one that does not verify) keeps a vlt hosted pin from
+  attesting before install. A vendored vlt directory verified without its
+  vendor ledger checks a devDependencies-stripped `package.json` against
+  the patched blob in `.socket/blobs`, and is omitted as
+  `vendor_manifest_unverifiable` when that blob is absent. `setup.manual`
+  accepts `vlt`.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 9c7fecf6..0e876349 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -199,7 +199,7 @@ Discovery is read-only, never touches the network, and never fails the run: a ma
 | pnpm | `pnpm-lock.yaml` (every `lockfileVersion`); `shrinkwrap.yaml` only when there is no `pnpm-lock.yaml`; with `rush.json`, `common/config/rush/pnpm-lock.yaml` + `common/config/subspaces/*/pnpm-lock.yaml` | `packages:` `resolution.tarball` on the patch host | `file:.socket/vendor/npm/…` tarball + key | `integrity`, required |
 | yarn | `yarn.lock` (classic and berry) | classic `resolved`; berry `resolution: …::__archiveUrl=<url>` | classic `resolved "file:./.socket/vendor/npm/…#<sha1>"`; berry `file:` entry **plus** a root `package.json` `resolutions` mapping onto the same artifact (without it the entry is orphaned: diagnosed, no ref) | classic `integrity` / `#sha1`, berry `checksum`, required |
 | bun | `bun.lock`; `bun.lockb` only when there is no `bun.lock` (bun reads exactly one) | URL tuple / binary remote-tarball resolution; version from the URL leaf | `.socket/vendor/npm/<uuid>/<name>-<ver>.tgz` tuple / local-tarball resolution | `sha512-…`, required. A 2-tuple that Bun < 1.3.10 re-saved without its digest is still a reference, but it attests only from an installed tree. |
-| vlt | `vlt-lock.json` (lockfileVersion absent, `0` or `1`; a BOM-prefixed, non-object or other-version lock is unreadable to vlt: diagnosed, no ref). `vlt.json` and `node_modules/.vlt-lock.json` are never wiring. | a registry node (any segment) whose slot [3] is on the patch host with the leaf `<bare>-<ver>.tgz` of its DepID's `name@version` and slot [1] == name; version from the DepID | a `file` node `.socket/vendor/npm/<uuid>/<name>-<ver>/node_modules/<name>` (or a user-installed `<name>-<ver>.tgz`) with slot [1] == name; version from the path. A same-`name@version` registry node beside it is diagnosed, no ref. | slot [2] `sha512-…`, required (a hosted node without one is no reference). A same-`name@version` node on another registry keeps the reference but withholds the lockfile basis: only an installed tree whose every store copy verifies attests. |
+| vlt | `vlt-lock.json` (lockfileVersion absent, `0` or `1`; a BOM-prefixed, unparseable, non-object or other-version lock is not read: diagnosed, no ref). `vlt.json` and `node_modules/.vlt-lock.json` are never wiring. | a registry node (any segment) whose slot [3] is a `/patch/npm/…` URL on the patch host with the leaf `<bare>-<ver>.tgz` of its DepID's `name@version`, whose embedded `<name>/<ver>` path (when present) is that `name@version`, and slot [1] == name; version from the DepID | a `file` node `.socket/vendor/npm/<uuid>/<name>-<ver>/node_modules/<name>` (or a user-installed `<name>-<ver>.tgz`) with slot [1] == name; version from the path. A same-`name@version` registry node, or a diagnosed Socket-shaped one, beside it is diagnosed, no ref. | slot [2] `sha512-…`, required (a hosted node without one is no reference). A same-`name@version` node on another registry, or a diagnosed Socket-shaped one, keeps the reference but withholds the lockfile basis: only an installed tree whose every store copy verifies attests. |
 | cargo | `Cargo.lock`, `Cargo.toml`, `.cargo/config` (else `.cargo/config.toml`) | `Cargo.lock` `source = "sparse+…/<uuid>/index/"`, confirmed by `Cargo.toml`: a crate the root manifest declares must pin `registry = "socket-patch-<uuid>"`. A reverted pin is diagnosed, no ref. | `[patch.<source>] <key> = { path = ".socket/vendor/cargo/<uuid>/<name>-<ver>" }` — primarily the root `Cargo.toml` (v5 `vendor`; key-agnostic: `<name>` is `package` when renamed, else the key, so `<name>-socket-<uuid8>` keys count), also the project config (pre-v5 wiring), live only while the lock holds a sourceless entry for it that is not in `[[patch.unused]]`; a manifest entry cargo ignores — the project config redefines its key with another path, or a `[patch."https://github.com/rust-lang/crates.io-index"]` table replaces `[patch.crates-io]` — is diagnosed (`patched_ref_invalid`), no ref | `checksum` (v1: `[metadata]`), required |
 | golang | `go.mod`, `go.work`, `go.sum`, `go.work.sum` | `replace M v => patch.socket.dev/gopatch/<uuid> <sver>` | `replace M v => ./.socket/vendor/golang/<uuid>/M@v` | both go.sum lines, required. A replace that `require` no longer selects (`require M v'`) is inert: diagnosed, no ref. |
 | pypi | `uv.lock` (confirmed by `pyproject.toml` `[tool.uv.sources]` when present), PEP 723 `<script>.py.lock`, `pylock.toml` / `pylock.<name>.toml`, `poetry.lock`, `pdm.lock`, `Pipfile.lock`, `requirements.txt` + its in-root `-r` includes, PEP 508 direct references in `pyproject.toml` / `hatch.toml` | Socket-host artifact url | `.socket/vendor/pypi/<uuid>/<wheel>` naming the entry's own dist | sha256, required |
@@ -1232,7 +1232,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_unwired`          | `skipped`        | vex: a vendor-ledger entry whose committed artifact no lockfile/config wires any more (reverted lock, leftover ledger or artifact). Applies under `--no-verify` too. |
 | `redirect_unwired`        | `skipped`        | vex: a redirect-ledger record whose hosted patch no lockfile wires any more (and no manifest entry owns the purl). Applies under `--no-verify` too. |
 | `wiring_conflict`         | `skipped`        | vex (manifest-less): the lockfiles wire one package to two or more different patches (e.g. a stale sibling lock); which one the build installs is undecidable, so none is attested. |
-| `hash_mismatch` / `not_applied` / `file_not_found` / `package_not_found` / `no_files` / `vendor_*` | `skipped` | vex: verification omissions — the installed copy (agent / hosted) or the committed artifact (`vendor_hash_mismatch`, `vendor_artifact_missing`, `vendor_artifact_unreadable`, `vendor_inventory_mismatch`, `vendor_uuid_mismatch`, `vendor_path_unsafe`) does not carry the patched bytes, or nothing is installed. A lockfile-pinned hosted reference with nothing installed attests instead of `package_not_found` (see "Manifest-less VEX"). |
+| `hash_mismatch` / `not_applied` / `file_not_found` / `package_not_found` / `no_files` / `vendor_*` | `skipped` | vex: verification omissions — the installed copy (agent / hosted) or the committed artifact (`vendor_hash_mismatch`, `vendor_artifact_missing`, `vendor_artifact_unreadable`, `vendor_inventory_mismatch`, `vendor_uuid_mismatch`, `vendor_path_unsafe`) does not carry the patched bytes, or nothing is installed. `vendor_manifest_unverifiable`: a vendored vlt directory verified without its vendor ledger (from `vlt-lock.json` alone) holds a `package.json` with its devDependencies stripped, and the patched `package.json` blob is not in `.socket/blobs`, so it cannot be checked. A lockfile-pinned hosted reference with nothing installed attests instead of `package_not_found` (see "Manifest-less VEX"). |
 | `lockfile_unreadable` / `lockfile_unparseable` / `patched_ref_invalid` / `patched_ref_unattributable` | run-level `warnings[]` | vex (every form): lockfile-discovery diagnostics — see "Manifest-less VEX (lockfile discovery)". Never flip the exit on their own. |
 | `vendor_multiple_lockfiles` / `pypi_multiple_lockfiles` | `skipped` (warning) | vendor: a sibling lockfile of another package manager will still install UNPATCHED bytes; names the wired winner + the ignored locks. |
 | `vendor_yarn_berry_unsupported` | `failed` | vendor (npm): yarn-berry Plug'n'Play layout; use its native `yarn patch` workflow. |
diff --git a/crates/socket-patch-cli/src/commands/vex.rs b/crates/socket-patch-cli/src/commands/vex.rs
index 016df964..87b1e2b8 100644
--- a/crates/socket-patch-cli/src/commands/vex.rs
+++ b/crates/socket-patch-cli/src/commands/vex.rs
@@ -1416,6 +1416,11 @@ fn omission_phrase(reason: &str) -> &'static str {
         "vendor_inventory_mismatch" => {
             "the vendored artifact's contents do not match its ledger inventory"
         }
+        "vendor_manifest_unverifiable" => {
+            "the vendored package.json has its devDependencies stripped, and neither a vendor \
+             ledger inventory nor the patched package.json in .socket/blobs is there to check it \
+             against"
+        }
         "stale_install" => "the installed copy is not patched",
         RECORD_UNAVAILABLE => {
             "a lockfile wires the patch, but no local record exists and the patch API could not \
@@ -1700,6 +1705,7 @@ mod tests {
             "no_files",
             "vendor_hash_mismatch",
             "vendor_artifact_missing",
+            "vendor_manifest_unverifiable",
             "stale_install",
             RECORD_UNAVAILABLE,
             RECORD_MISMATCH,
diff --git a/crates/socket-patch-cli/src/commands/vex_sources.rs b/crates/socket-patch-cli/src/commands/vex_sources.rs
index ea19befc..4960225f 100644
--- a/crates/socket-patch-cli/src/commands/vex_sources.rs
+++ b/crates/socket-patch-cli/src/commands/vex_sources.rs
@@ -772,7 +772,8 @@ fn vendored_entry_for(cand: &Cand, vref: &PatchedRef) -> VendorEntry {
         lock: None,
         took_over_go_patches: false,
         // Bun's workspace-mirror integrity check and the vlt package-dir
-        // verifier (structure rule, manifest exemption) key off the flavor.
+        // verifier (structure rule, manifest exemption by the local blob,
+        // since there is no inventory pin) key off the flavor.
         flavor: match source.as_ref() {
             "bun.lock" | "bun.lockb" => Some("bun".to_string()),
             "vlt-lock.json" => Some("vlt".to_string()),
diff --git a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
index b3547398..a772c5bd 100644
--- a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
+++ b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
@@ -343,7 +343,10 @@ fn matrix<F: FnOnce(&Path)>(project: &Path, scratch: &Path, case: &VltVexCase<'_
 fn nested_link_dirs_are_left_out_of_the_checkout() {
     for (rel, nested) in [
         ("node_modules", false),
-        (".socket/vendor/npm/u/a-1.0.0/node_modules/a/node_modules", true),
+        (
+            ".socket/vendor/npm/u/a-1.0.0/node_modules/a/node_modules",
+            true,
+        ),
         (
             ".socket/vendor/npm/u/@s/a-1.0.0/node_modules/@s/a/node_modules",
             true,
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
index d8b0982d..0190ee06 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
@@ -34,19 +34,25 @@ pub(crate) struct VltLock {
     pub(crate) nodes: Vec<VltLockNode>,
 }
 
-/// The nodes of a lock vlt itself can read; `None` for a BOM-prefixed,
-/// unparseable or unknown-version lock (never BOM-stripped).
+/// The nodes of a readable lock; `None` for a BOM-prefixed, unparseable or
+/// unknown-version lock (never BOM-stripped).
 pub(crate) fn vlt_lock_nodes(text: &str) -> Option<VltLock> {
     vlt_lock_model(text).ok()
 }
 
-/// [`vlt_lock_nodes`], with why vlt cannot read the lock as the error.
+/// [`vlt_lock_nodes`], with why the lock is not read as the error.
 pub(crate) fn vlt_lock_model(text: &str) -> Result<VltLock, String> {
     let lock = match sniff_lock(text) {
         LockSniff::Readable(lock) => lock,
         LockSniff::Bom => return Err("starts with a UTF-8 BOM, which vlt cannot read".into()),
-        LockSniff::NotJsonObject => return Err("is not a JSON object".into()),
-        LockSniff::UnsupportedVersion(raw) => return Err(format!("has lockfileVersion {raw}")),
+        LockSniff::NotJsonObject => {
+            return Err("is not a JSON object socket-patch can parse".into())
+        }
+        LockSniff::UnsupportedVersion(raw) => {
+            return Err(format!(
+                "has lockfileVersion {raw}, which this socket-patch does not read"
+            ))
+        }
     };
     let string_slot = |tuple: &[Value], i: usize| {
         tuple
diff --git a/crates/socket-patch-core/src/vendor/verify.rs b/crates/socket-patch-core/src/vendor/verify.rs
index f5dcdb2e..cde54904 100644
--- a/crates/socket-patch-core/src/vendor/verify.rs
+++ b/crates/socket-patch-core/src/vendor/verify.rs
@@ -12,7 +12,8 @@
 //! Fail-closed order (each failure is a stable snake_case routing tag):
 //! `no_files` → `vendor_path_unsafe` → `vendor_uuid_mismatch` →
 //! `vendor_artifact_missing` → `vendor_artifact_unreadable` /
-//! `file_not_found` / `vendor_hash_mismatch` / `vendor_inventory_mismatch`
+//! `file_not_found` / `vendor_hash_mismatch` / `vendor_inventory_mismatch` /
+//! `vendor_manifest_unverifiable`
 //! (dir-shaped artifacts with a recorded [`file_inventory`] additionally
 //! verify their FULL file tree — missing, extra and modified unpatched
 //! files all fail; entries without one keep member-only verification).
@@ -24,7 +25,7 @@ use std::io::Read;
 use std::path::{Path, PathBuf};
 
 use crate::hash::git_sha256::compute_git_sha256_from_bytes;
-use crate::manifest::schema::PatchRecord;
+use crate::manifest::schema::{PatchFileInfo, PatchRecord};
 use crate::patch::apply::{normalize_file_path, verify_file_patch, VerifyStatus};
 use crate::patch::package::read_archive_to_map;
 
@@ -205,6 +206,8 @@ async fn verify_vlt_dir(
                 }
                 return Err("vendor_hash_mismatch".to_string());
             }
+            unpinned_vlt_manifest(project_root, dir, file_name, info).await?;
+            continue;
         }
         match verify_file_patch(dir, file_name, info).await.status {
             VerifyStatus::AlreadyPatched => {}
@@ -256,12 +259,18 @@ pub(crate) async fn vlt_installed_copy_matches(
         .and_then(|inv| inv.get("package.json"));
     for (file_name, info) in &record.files {
         if normalize_file_path(file_name) == "package.json" {
-            if let Some(pin) = pin {
-                if !vlt_manifest_matches(project_root, installed, pin, &info.after_hash).await {
-                    return false;
+            let matches = match pin {
+                Some(pin) => {
+                    vlt_manifest_matches(project_root, installed, pin, &info.after_hash).await
                 }
-                continue;
+                None => unpinned_vlt_manifest(project_root, installed, file_name, info)
+                    .await
+                    .is_ok(),
+            };
+            if !matches {
+                return false;
             }
+            continue;
         }
         if verify_file_patch(installed, file_name, info).await.status
             != VerifyStatus::AlreadyPatched
@@ -290,6 +299,46 @@ async fn vlt_manifest_matches(
     if !hex::encode(Sha256::digest(&on_disk)).eq_ignore_ascii_case(pin) {
         return false;
     }
+    let Some(blob) = local_after_blob(project_root, after_hash).await else {
+        return true;
+    };
+    stripped_manifest(blob)
+        .is_some_and(|stripped| hex::encode(Sha256::digest(&stripped)).eq_ignore_ascii_case(pin))
+}
+
+/// The vlt manifest exemption for an entry with no inventory pin (one
+/// built from `vlt-lock.json` alone): `package.json` verifies at its
+/// afterHash, or as the local afterHash blob with its devDependencies
+/// stripped. Without that blob a transformed manifest cannot be judged
+/// (`vendor_manifest_unverifiable`).
+async fn unpinned_vlt_manifest(
+    project_root: &Path,
+    dir: &Path,
+    file_name: &str,
+    info: &PatchFileInfo,
+) -> Result<(), String> {
+    match verify_file_patch(dir, file_name, info).await.status {
+        VerifyStatus::AlreadyPatched => return Ok(()),
+        VerifyStatus::NotFound => return Err("file_not_found".to_string()),
+        VerifyStatus::Ready | VerifyStatus::HashMismatch => {}
+    }
+    let Some(blob) = local_after_blob(project_root, &info.after_hash).await else {
+        return Err("vendor_manifest_unverifiable".to_string());
+    };
+    let Ok(on_disk) = crate::utils::fs::read_regular_to_bytes(&dir.join("package.json")).await
+    else {
+        return Err("vendor_artifact_unreadable".to_string());
+    };
+    if stripped_manifest(blob).is_some_and(|stripped| stripped == on_disk) {
+        Ok(())
+    } else {
+        Err("vendor_hash_mismatch".to_string())
+    }
+}
+
+/// The afterHash blob from the local blob store, when present, bounded and
+/// intact.
+async fn local_after_blob(project_root: &Path, after_hash: &str) -> Option<Vec<u8>> {
     let blob_path = project_root.join(".socket/blobs").join(after_hash);
     let blob = match tokio::fs::metadata(&blob_path).await {
         Ok(meta) if meta.is_file() && meta.len() <= MAX_MANIFEST_BLOB_BYTES => {
@@ -299,20 +348,18 @@ async fn vlt_manifest_matches(
         }
         _ => None,
     };
-    let Some(blob) =
-        blob.filter(|b| compute_git_sha256_from_bytes(b).eq_ignore_ascii_case(after_hash))
-    else {
-        return true;
-    };
-    let Ok(text) = String::from_utf8(blob) else {
-        return false;
-    };
-    let stripped = match super::npm_dir::strip_dev_dependencies(&text) {
-        Ok(Some(stripped)) => stripped,
-        Ok(None) => text,
-        Err(_) => return false,
-    };
-    hex::encode(Sha256::digest(stripped.as_bytes())).eq_ignore_ascii_case(pin)
+    blob.filter(|b| compute_git_sha256_from_bytes(b).eq_ignore_ascii_case(after_hash))
+}
+
+/// `blob` with its top-level devDependencies stripped (§4.4); `None` when
+/// the transform refuses it.
+fn stripped_manifest(blob: Vec<u8>) -> Option<Vec<u8>> {
+    let text = String::from_utf8(blob).ok()?;
+    match super::npm_dir::strip_dev_dependencies(&text) {
+        Ok(Some(stripped)) => Some(stripped.into_bytes()),
+        Ok(None) => Some(text.into_bytes()),
+        Err(_) => None,
+    }
 }
 
 /// Does the cargo copy's `Cargo.toml`, Socket tag dropped, hash to
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 69ff733d..c7c9e466 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -2265,6 +2265,80 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn a_ledgerless_entry_verifies_a_stripped_manifest_by_its_blob() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let patched_pkg =
+            b"{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"devDependencies\":{\"t\":\"1\"},\"main\":\"i.js\"}";
+        let stripped = "{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"main\":\"i.js\"}";
+        let after_hash = compute_git_sha256_from_bytes(patched_pkg);
+        tokio::fs::write(fx.blobs.join(&after_hash), patched_pkg)
+            .await
+            .unwrap();
+        let mut rec = record(UUID);
+        rec.files.insert(
+            "package/package.json".into(),
+            PatchFileInfo {
+                before_hash: String::new(),
+                after_hash: after_hash.clone(),
+            },
+        );
+        let sources = PatchSources::blobs_only(&fx.blobs);
+        let outcome = vendor_vlt(
+            PURL,
+            &fx.installed,
+            &fx.root,
+            &rec,
+            &sources,
+            "t",
+            false,
+            true,
+            None,
+        )
+        .await;
+        let (mut entry, _) = entry_of(outcome);
+        entry.artifact.file_inventory = None;
+        let copy = fx.root.join("copy");
+        tokio::fs::create_dir_all(&copy).await.unwrap();
+        tokio::fs::write(copy.join("index.js"), PATCHED)
+            .await
+            .unwrap();
+        tokio::fs::write(copy.join(PACKAGE_JSON), stripped)
+            .await
+            .unwrap();
+        let verify = || crate::vendor::verify::verify_vendored_patch_record(&fx.root, &entry, &rec);
+        let copy_matches =
+            || crate::vendor::verify::vlt_installed_copy_matches(&fx.root, &copy, &entry, &rec);
+        assert_eq!(
+            verify().await,
+            Err("vendor_manifest_unverifiable".to_string())
+        );
+        assert!(!copy_matches().await);
+
+        let local_blobs = fx.root.join(".socket/blobs");
+        tokio::fs::create_dir_all(&local_blobs).await.unwrap();
+        tokio::fs::write(local_blobs.join(&after_hash), patched_pkg)
+            .await
+            .unwrap();
+        assert_eq!(verify().await, Ok(()));
+        assert!(copy_matches().await);
+
+        tokio::fs::write(
+            fx.root.join(&entry.artifact.path).join(PACKAGE_JSON),
+            "{\"name\":\"left-pad\",\"version\":\"6.6.6\"}",
+        )
+        .await
+        .unwrap();
+        tokio::fs::write(copy.join(PACKAGE_JSON), patched_pkg)
+            .await
+            .unwrap();
+        assert_eq!(verify().await, Err("vendor_hash_mismatch".to_string()));
+        assert!(
+            copy_matches().await,
+            "the untransformed manifest is at its afterHash"
+        );
+    }
+
     #[tokio::test]
     async fn the_preflight_decides_every_refusal_without_writing() {
         let fx = fx(
diff --git a/crates/socket-patch-core/src/vex/discover/mod.rs b/crates/socket-patch-core/src/vex/discover/mod.rs
index 654c686a..4289cc3b 100644
--- a/crates/socket-patch-core/src/vex/discover/mod.rs
+++ b/crates/socket-patch-core/src/vex/discover/mod.rs
@@ -1723,8 +1723,9 @@ pub async fn vendored_wiring_live(root: &Path, recorded: &[&str], eco: &str, uui
 }
 
 /// The root files a vendored `eco` artifact can be wired from — every
-/// vendor backend's lockfile / wiring config for that ecosystem (npm: all
-/// five npm-family locks; cargo: the `[patch.crates-io]` config; maven /
+/// vendor backend's lockfile / wiring config for that ecosystem (npm: every
+/// npm-family lock the `vendor_probe` table flags, `vlt-lock.json`
+/// included; cargo: the `[patch.crates-io]` config; maven /
 /// nuget: the repository / source that serves the vendored dir). Manifests
 /// such as package.json are deliberately absent: the lock is what the
 /// install consumes.
diff --git a/crates/socket-patch-core/src/vex/discover/vlt.rs b/crates/socket-patch-core/src/vex/discover/vlt.rs
index e8f9c24c..950c6516 100644
--- a/crates/socket-patch-core/src/vex/discover/vlt.rs
+++ b/crates/socket-patch-core/src/vex/discover/vlt.rs
@@ -6,7 +6,7 @@
 //!
 //! | shape | written by | recognized node | ref |
 //! |---|---|---|---|
-//! | hosted | `patch::redirect::vlt` (`scan --mode hosted`, the depscan twin) | a registry node (any segment) whose slot [3] is a Socket-hosted URL whose leaf is `<bare>-<version>.tgz` of the DepID's `name@version`, slot [1] == name, slot [2] a `sha512-` SRI | `Hosted { purl, uuid, integrity: slot [2] }` |
+//! | hosted | `patch::redirect::vlt` (`scan --mode hosted`, the depscan twin) | a registry node (any segment) whose slot [3] is a Socket-hosted `/patch/npm/…` URL whose leaf is `<bare>-<version>.tgz` of the DepID's `name@version` and whose embedded `<name>/<version>` (when the URL has them) is that `name@version`, slot [1] == name, slot [2] a `sha512-` SRI | `Hosted { purl, uuid, integrity: slot [2] }` |
 //! | vendored | `vendor::vlt_lock` (`vendor`, `scan --mode vendored`) | a `file` node whose decoded path is `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>/node_modules/[@s/]<bare>`, slot [1] == name, slot [3] (when a string) == the path | `Vendored { purl, uuid, path }` |
 //! | vendored (read-only) | a user's `vlt install` of an npm-flavor artifact | a `file` node whose decoded path is `.socket/vendor/npm/<uuid>/[@s/]<bare>-<version>.tgz`, same slot rules | `Vendored { purl, uuid, path }` |
 //!
@@ -35,7 +35,8 @@
 //! default-registry instance. An instance of the same `name@version` that
 //! still resolves from a registry (a named alias or scoped registry the
 //! rewriter skips with `redirect_vlt_custom_registry_skipped`) installs the
-//! unpatched package for its dependents:
+//! unpatched package for its dependents, and a Socket-shaped instance that
+//! is diagnosed ([`DIAG_REF_INVALID`]) installs bytes no ref vouches for:
 //!
 //! * a hosted ref beside it keeps no lock pin, so the not-installed
 //!   lockfile basis never attests it (every installed copy must verify
@@ -48,9 +49,10 @@
 //!
 //! ## Parsing
 //!
-//! A BOM-prefixed (never stripped), non-object or unknown-`lockfileVersion`
-//! lock is one vlt cannot read: [`DIAG_LOCKFILE_UNPARSEABLE`], no refs, and
-//! whatever it mentions is recognized as unwired (rule 11). The canonical
+//! A BOM-prefixed (never stripped), unparseable, non-object or
+//! unknown-`lockfileVersion` lock is not read (a BOM or an unknown version
+//! is one vlt cannot read either): [`DIAG_LOCKFILE_UNPARSEABLE`], no refs,
+//! and whatever it mentions is recognized as unwired (rule 11). The canonical
 //! one-entry-per-line layout is not required here (the writers check it).
 //!
 //! Non-goals: nested `*/vlt-lock.json` (a separate project, DESIGN D3), the
@@ -66,6 +68,7 @@ use super::{
 use crate::constants::npm_family::VLT_LOCK;
 use crate::patch::redirect::hosted_url_names;
 use crate::utils::digest::is_sri_pin;
+use crate::utils::purl::percent_decode_purl_component;
 use crate::vendor::lock_inventory::vlt::{vlt_lock_model, VltLockNode};
 use crate::vendor::lock_inventory::LockIntegrity;
 use crate::vendor::vlt_lock_text::{parse_vendored_path, DepIdKind};
@@ -80,16 +83,19 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
             out.diag(
                 DIAG_LOCKFILE_UNPARSEABLE,
                 VLT_LOCK,
-                format!("{VLT_LOCK} {why}; vlt cannot read it, so nothing in it is wired"),
+                format!("{VLT_LOCK} {why}, so nothing in it is wired"),
             );
             return;
         }
     };
     let classified: Vec<Classified> = lock.nodes.iter().map(|n| classify(ctx, n)).collect();
-    let registry: BTreeSet<&str> = classified
+    let unattested: BTreeSet<&str> = classified
         .iter()
         .filter_map(|c| match c {
-            Classified::Registry(purl) => Some(purl.as_str()),
+            Classified::Registry(purl)
+            | Classified::Invalid {
+                purl: Some(purl), ..
+            } => Some(purl.as_str()),
             _ => None,
         })
         .collect();
@@ -102,7 +108,7 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                 url,
                 integrity,
             } => {
-                let pin = (!registry.contains(purl.as_str()))
+                let pin = (!unattested.contains(purl.as_str()))
                     .then(|| LockIntegrity::Sri(integrity.clone()));
                 out.push(PatchedRef::hosted(
                     purl.clone(),
@@ -113,15 +119,17 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                     true,
                 ));
             }
-            Classified::Vendored { purl, path } if registry.contains(purl.as_str()) => {
+            Classified::Vendored { purl, path } if unattested.contains(purl.as_str()) => {
                 out.diag(
                     DIAG_REF_UNATTRIBUTABLE,
                     VLT_LOCK,
                     format!(
-                        "{VLT_LOCK}: {}: {purl} is wired to {path}, but the lock also resolves \
-                         the same version from a registry for other dependents, so the \
-                         vendored patch is not attested; re-run `socket-patch vendor` or \
-                         `vlt install`",
+                        "{VLT_LOCK}: {}: {purl} is wired to {path}, but the lock also installs \
+                         the same version for other dependents from a node this patch does not \
+                         wire (a registry resolution or a diagnosed Socket-shaped node), so the \
+                         vendored patch is not attested; `socket-patch scan --mode hosted` \
+                         pins every default-registry instance, otherwise remove the \
+                         dependents that resolve the other instance",
                         node.key
                     ),
                 );
@@ -131,7 +139,7 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                     out.push(PatchedRef::vendored(purl.clone(), &vref, VLT_LOCK, None));
                 }
             }
-            Classified::Invalid(why) => {
+            Classified::Invalid { why, .. } => {
                 out.diag(DIAG_REF_INVALID, VLT_LOCK, format!("{VLT_LOCK}: {why}"));
             }
             Classified::Other => {}
@@ -153,8 +161,12 @@ enum Classified {
         purl: String,
         path: String,
     },
-    /// Socket-shaped, but not what a Socket writer produces.
-    Invalid(String),
+    /// Socket-shaped, but not what a Socket writer produces; `purl` is the
+    /// instance's identity when its coordinates parse.
+    Invalid {
+        why: String,
+        purl: Option<String>,
+    },
     /// Git, remote, workspace and non-Socket file nodes.
     Other,
 }
@@ -182,16 +194,21 @@ fn classify_registry(ctx: &DiscoverCtx<'_>, node: &VltLockNode) -> Classified {
             _ => Classified::Other,
         };
     };
+    let invalid = |why: String| Classified::Invalid {
+        why,
+        purl: npm_purl(name, version),
+    };
     if node.name != name {
-        return Classified::Invalid(format!(
+        return invalid(format!(
             "{key}: names {:?} in slot [1] but its DepID is {name}@{version}; it is ignored",
             node.name
         ));
     }
-    if !hosted_url_names(url, name, version) {
-        return Classified::Invalid(format!(
+    if !hosted_url_names(url, name, version) || !embedded_identity_agrees(url, name, version) {
+        return invalid(format!(
             "{key}: {url:?} is not an artifact of {name}@{version} (its leaf must be the \
-             package's own <name>-<version>.tgz); it is ignored"
+             package's own <name>-<version>.tgz and its path must embed that name and \
+             version, if any); it is ignored"
         ));
     }
     let Some(integrity) = node
@@ -199,13 +216,13 @@ fn classify_registry(ctx: &DiscoverCtx<'_>, node: &VltLockNode) -> Classified {
         .as_deref()
         .filter(|sri| sri.starts_with("sha512-") && is_sri_pin(sri))
     else {
-        return Classified::Invalid(format!(
+        return invalid(format!(
             "{key}: is wired to {url:?} without the sha512 the hosted rewriter always writes; \
              it is ignored"
         ));
     };
     let Some(purl) = npm_purl(name, version) else {
-        return Classified::Invalid(format!(
+        return invalid(format!(
             "{key}: Socket-wired node {name:?}@{version:?} has unsafe coordinates"
         ));
     };
@@ -217,6 +234,34 @@ fn classify_registry(ctx: &DiscoverCtx<'_>, node: &VltLockNode) -> Classified {
     }
 }
 
+/// Whether the Socket artifact path `url` (`/patch/npm/<name>/<version>/
+/// <token>/<uuid>/<leaf>`, the name spelled over one or more segments,
+/// each percent-decoded) embeds `name@version`. The token-only
+/// `/patch/npm/<token>/<uuid>/<leaf>` shape embeds neither and agrees; any
+/// other path does not.
+fn embedded_identity_agrees(url: &str, name: &str, version: &str) -> bool {
+    let Ok(parsed) = reqwest::Url::parse(url) else {
+        return false;
+    };
+    let Some(segments) = parsed.path_segments() else {
+        return false;
+    };
+    let segments: Vec<String> = segments
+        .map(|s| percent_decode_purl_component(s).into_owned())
+        .collect();
+    let Some(rest) = segments
+        .strip_prefix(&["patch".to_string(), "npm".to_string()])
+        .filter(|rest| rest.len() == 3 || rest.len() >= 5)
+    else {
+        return false;
+    };
+    if rest.len() == 3 {
+        return true;
+    }
+    let (embedded_name, tail) = rest.split_at(rest.len() - 4);
+    embedded_name.join("/") == name && tail[0] == version
+}
+
 fn classify_file(node: &VltLockNode) -> Classified {
     let key = &node.key;
     let path = node.dep_id.first.as_str();
@@ -224,26 +269,39 @@ fn classify_file(node: &VltLockNode) -> Classified {
         return Classified::Other;
     }
     let Some(vendored) = parse_vendored_path(path, &node.name) else {
-        return Classified::Invalid(format!(
-            "{key}: {path:?} is not a vendored vlt artifact of {:?} (.socket/vendor/npm/<uuid>/\
-             <name>-<version>/node_modules/<name>); it is ignored",
-            node.name
-        ));
+        return Classified::Invalid {
+            why: format!(
+                "{key}: {path:?} is not a vendored vlt artifact of {:?} (.socket/vendor/npm/\
+                 <uuid>/<name>-<version>/node_modules/<name>); it is ignored",
+                node.name
+            ),
+            purl: None,
+        };
     };
+    let purl = npm_purl(&vendored.name, &vendored.version);
     if node.location.as_deref().is_some_and(|slot| slot != path) {
-        return Classified::Invalid(format!(
-            "{key}: records location {:?} for the vendored path {path:?}; it is ignored",
-            node.location.as_deref().unwrap_or_default()
-        ));
+        return Classified::Invalid {
+            why: format!(
+                "{key}: records location {:?} for the vendored path {path:?}; it is ignored",
+                node.location.as_deref().unwrap_or_default()
+            ),
+            purl,
+        };
     }
-    let Some(purl) = npm_purl(&vendored.name, &vendored.version) else {
-        return Classified::Invalid(format!(
-            "{key}: vendored node {:?}@{:?} has unsafe coordinates",
-            vendored.name, vendored.version
-        ));
+    let Some(purl) = purl else {
+        return Classified::Invalid {
+            why: format!(
+                "{key}: vendored node {:?}@{:?} has unsafe coordinates",
+                vendored.name, vendored.version
+            ),
+            purl: None,
+        };
     };
     if vendor_ref(path).is_none() {
-        return Classified::Invalid(format!("{key}: {path:?} is not a safe vendored path"));
+        return Classified::Invalid {
+            why: format!("{key}: {path:?} is not a safe vendored path"),
+            purl: Some(purl),
+        };
     }
     Classified::Vendored {
         purl,
@@ -476,6 +534,60 @@ mod tests {
                 ),
                 true,
             ),
+            (
+                "wrong-url-name",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&hosted_url(
+                        "npm",
+                        "right-pad",
+                        "1.3.0",
+                        UUID_A,
+                        "left-pad-1.3.0.tgz",
+                    )),
+                ),
+                true,
+            ),
+            (
+                "wrong-url-version",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&hosted_url(
+                        "npm",
+                        "left-pad",
+                        "9.9.9",
+                        UUID_A,
+                        "left-pad-1.3.0.tgz",
+                    )),
+                ),
+                true,
+            ),
+            (
+                "neither the token-only nor the name-embedding path",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&format!(
+                        "https://patch.socket.dev/patch/npm/1.3.0/{TOKEN}/{UUID_A}/left-pad-1.3.0.tgz"
+                    )),
+                ),
+                true,
+            ),
+            (
+                "not under /patch/npm/",
+                node(
+                    id,
+                    "left-pad",
+                    Some(SRI),
+                    Some(&good.replace("/patch/npm/", "/patch/pypi/")),
+                ),
+                true,
+            ),
             (
                 "missing sha512",
                 node(id, "left-pad", None, Some(&good)),
@@ -508,6 +620,33 @@ mod tests {
         }
     }
 
+    #[tokio::test]
+    async fn the_embedded_name_keeps_its_scope() {
+        let purl = "pkg:npm/@a/b@1.0.0";
+        let at = |name: &str| hosted_url("npm", name, "1.0.0", UUID_A, "b-1.0.0.tgz");
+        let token_only = format!("https://patch.socket.dev/patch/npm/{TOKEN}/{UUID_A}/b-1.0.0.tgz");
+        for (what, location, wired) in [
+            ("scope as two segments", at("@a/b"), true),
+            ("scope percent-encoded", at("%40a%2Fb"), true),
+            ("token-only", token_only, true),
+            ("wrong-url-scope", at("@c/b"), false),
+            ("scope dropped", at("b"), false),
+        ] {
+            let out = discover(&lock(
+                Some(1),
+                &[node("~npm~@a+b@1.0.0", "@a/b", Some(SRI), Some(&location))],
+            ))
+            .await;
+            if wired {
+                assert_refs(&out, &[(purl, UUID_A, WiringMode::Hosted)]);
+                assert!(out.diagnostics.is_empty(), "{what}: {:?}", out.diagnostics);
+            } else {
+                assert!(out.refs.is_empty(), "{what}: {:?}", out.refs);
+                assert_eq!(diag_codes(&out), vec![DIAG_REF_INVALID], "{what}");
+            }
+        }
+    }
+
     #[tokio::test]
     async fn git_remote_workspace_and_user_file_nodes_are_not_refs() {
         let nodes = [
@@ -641,6 +780,44 @@ mod tests {
         assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
     }
 
+    #[tokio::test]
+    async fn a_diagnosed_same_version_instance_withholds_the_lock_basis() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node("~npm~left-pad@1.3.0", "left-pad", Some(SRI), Some(&hosted)),
+                node(
+                    "~npm~left-pad@1.3.0~peer.0df72515a50372ba",
+                    "left-pad",
+                    Some(SRI),
+                    Some(&url(UUID_A, "left-pad-1.4.0.tgz")),
+                ),
+            ],
+        ))
+        .await;
+        assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+        assert_eq!(out.refs[0].locked_integrity, None);
+        assert!(!out.refs[0].lockfile_basis_ok());
+        assert_eq!(diag_codes(&out), vec![DIAG_REF_INVALID]);
+
+        let path = dir_path(UUID_B);
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node(&file_id(&path), "left-pad", None, Some(&path)),
+                node("~npm~left-pad@1.3.0", "right-pad", Some(SRI), Some(&hosted)),
+            ],
+        ))
+        .await;
+        assert!(out.refs.is_empty(), "{:?}", out.refs);
+        assert_eq!(
+            diag_codes(&out),
+            vec![DIAG_REF_INVALID, DIAG_REF_UNATTRIBUTABLE]
+        );
+        assert_eq!(out.vendored_claim(PURL, UUID_B, &path), Some(false));
+    }
+
     #[tokio::test]
     async fn unreadable_locks_are_no_wiring_source_but_are_recognized() {
         let good = lock(
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 87b35620..799f0596 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -1165,7 +1165,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json starts with a UTF-8 BOM, which vlt cannot read; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json starts with a UTF-8 BOM, which vlt cannot read, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4196,7 +4196,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json is not a JSON object socket-patch can parse, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4883,7 +4883,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json has lockfileVersion 1e0; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json has lockfileVersion 1e0, which this socket-patch does not read, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4897,7 +4897,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json has lockfileVersion 1.0; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json has lockfileVersion 1.0, which this socket-patch does not read, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4911,7 +4911,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json has lockfileVersion \"1\"; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json has lockfileVersion \"1\", which this socket-patch does not read, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4925,7 +4925,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json has lockfileVersion 2; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json has lockfileVersion 2, which this socket-patch does not read, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -4939,7 +4939,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json is not a JSON object socket-patch can parse, so nothing in it is wired"
       }
     ],
     "recognized": [],
@@ -5263,7 +5263,7 @@
       {
         "code": "lockfile_unparseable",
         "file": "vlt-lock.json",
-        "detail": "vlt-lock.json is not a JSON object; vlt cannot read it, so nothing in it is wired"
+        "detail": "vlt-lock.json is not a JSON object socket-patch can parse, so nothing in it is wired"
       }
     ],
     "recognized": [],

From 6da8de21db93c999c743a9340c056f5ab81335ab Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 03:20:09 -0400
Subject: [PATCH 19/46] Preflight vendored vlt in every command

vendor, scan --mode vendored and get --mode vendored now refuse every
vlt project the vlt backend would refuse (lock version or layout,
transitive, peer or foreign-registry targets, multi-field or
out-of-sync declarations, a flavor switch, bundled or duplicate
devDependencies, a git rule ignoring .socket/) before any patch is
downloaded, anything is written, or a live hosted redirect is reverted
for a takeover; dry runs preview the same codes.

A fresh clone re-vendors from the committed vlt directory artifact,
verified against the ledger inventory, and vlt's own link to that
directory is never used as a pristine source. A hosted to vendored
takeover removes the store copies vlt installed from the hosted pin.
repair finds, rebuilds and reconstructs vlt directory artifacts and
restores their .gitignore and .gitattributes; the human output names
the vlt files to commit and `vlt install`.

rollback now fetches a before-blob that only a pnpm or vlt store peer
variant still needs instead of failing that copy.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   24 +
 .../src/commands/bun_preflight.rs             |   25 +
 crates/socket-patch-cli/src/commands/get.rs   |   77 +-
 crates/socket-patch-cli/src/commands/mod.rs   |    1 +
 .../src/commands/repair_vendor.rs             |   93 +-
 .../socket-patch-cli/src/commands/rollback.rs |   24 +-
 .../src/commands/scan/hosted.rs               |    1 +
 .../src/commands/scan/hosted/vlt.rs           |   49 +
 .../socket-patch-cli/src/commands/scan/mod.rs |    2 +-
 .../src/commands/scan/vendor_flow.rs          |   31 +-
 .../socket-patch-cli/src/commands/vendor.rs   |   95 +-
 .../src/commands/vlt_preflight.rs             |  287 ++++
 .../tests/apply_invariants.rs                 |   48 +
 ...overage_fix_scan_hosted_dryrun_vendored.rs |   96 +-
 .../tests/covgap_commands_get.rs              |   64 +
 .../tests/covgap_commands_list.rs             |   30 +-
 .../tests/covgap_commands_remove.rs           |   46 +-
 .../tests/covgap_commands_repair_vendor.rs    |   35 +-
 .../tests/covgap_commands_scan_mod.rs         |  197 ++-
 .../tests/covgap_commands_scan_vendor_flow.rs |   44 +
 .../tests/covgap_commands_vendor.rs           |   35 +
 .../tests/e2e_vex_lockfile/vlt.rs             |  168 ++-
 .../socket-patch-cli/tests/e2e_vex_vendor.rs  |   67 +
 .../socket-patch-cli/tests/get_modes_e2e.rs   |   98 ++
 .../tests/in_process_get_modes.rs             |   74 ++
 .../in_process_remove_repair_lifecycle.rs     |   52 +
 .../tests/in_process_rollback_vendored.rs     |   56 +
 .../tests/in_process_vendor.rs                |    7 +-
 .../tests/in_process_vendor/vlt.rs            | 1178 +++++++++++++++++
 .../tests/in_process_vendor_bun_takeover.rs   |    7 +-
 .../in_process_vendor_bun_takeover/vlt.rs     |  444 +++++++
 .../tests/remove_duality_invariants.rs        |   78 +-
 .../tests/remove_invariants.rs                |   35 +-
 .../tests/repair_vendor_e2e.rs                |   38 +
 .../tests/repair_vendor_flavors_e2e.rs        |   34 +-
 .../tests/repair_vendor_flavors_e2e/vlt.rs    |  334 +++++
 .../tests/rollback_invariants.rs              |   30 +
 .../tests/rollback_multicopy_blob_gate.rs     |   78 ++
 .../socket-patch-cli/tests/scan_invariants.rs |   49 +
 .../socket-patch-cli/tests/scan_vendor_e2e.rs |  114 ++
 .../tests/vex_e2e_common/vlt.rs               |   11 +-
 .../tests/vlt_hosted_common/vendored.rs       |   74 ++
 .../tests/vlt_vendor_common/mod.rs            |  474 +++++++
 crates/socket-patch-core/src/vendor/mod.rs    |    4 +-
 .../socket-patch-core/src/vendor/npm_dir.rs   |   15 +-
 .../src/vendor/npm_flavor.rs                  |   39 +-
 crates/socket-patch-core/src/vendor/verify.rs |    4 +-
 .../socket-patch-core/src/vendor/vlt_lock.rs  |   56 +-
 48 files changed, 4801 insertions(+), 121 deletions(-)
 create mode 100644 crates/socket-patch-cli/src/commands/vlt_preflight.rs
 create mode 100644 crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/vlt_hosted_common/vendored.rs
 create mode 100644 crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index deabf982..2b2eac87 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -332,6 +332,30 @@ into the new version's section — see docs/releasing.md.
   slots and outgoing edge values vlt rewrote since) or keeps everything on
   drift. Lock inventory reads `vlt-lock.json` too, Socket-hosted pins
   included.
+- **Vendored vlt through every command.** `vendor`, `scan --mode vendored`
+  and `get --mode vendored` run the complete vlt vendored preflight (lock
+  version and layout, transitive, peer or foreign-registry targets,
+  dependencies declared in several fields, out-of-sync specs, a package
+  already vendored through another lockfile flavor, the installed copy's
+  `bundleDependencies` or duplicate `devDependencies`, a git rule that
+  ignores `.socket/`) before any patch is downloaded, anything is written,
+  or a hosted redirect is reverted for the takeover; the dry-run previews
+  report the same codes as `would_refuse`. A committed vlt directory
+  artifact is staged inventory-verified when nothing is installed (a fresh
+  clone), and vlt's own link to it is never taken as a pristine source.
+  After a hosted → vendored takeover the store copies vlt installed from
+  the hosted pin are removed (`redirect_vlt_reinstall_required`). `repair`
+  finds vlt references in `vlt-lock.json` and workspace `package.json`
+  files, rebuilds vlt directories against the inventory that leaves out
+  vlt's `node_modules/` links, restores a missing `<uuid>/.gitignore` or
+  `.gitattributes`, and stamps reconstructed entries `flavor: "vlt"`. The
+  human output names the vlt committables and `vlt install`. A Bun lock
+  beside `vlt-lock.json` no longer triggers the Bun vendored preflight.
+- **`rollback` fetches a before-blob that only a store peer variant
+  needs.** The before-blob gate now probes every pnpm and vlt store variant
+  copy the rollback restores, so an online rollback no longer fails
+  `Before blob not found` for a still-patched variant beside an
+  already-original copy.
 - **`vex` reads `vlt-lock.json`.** Manifest-less VEX (and the ledger
   liveness gates behind `vex`, `scan`'s takeovers and the
   `hosted_wiring_retained` advisory) discovers hosted vlt nodes (a Socket
diff --git a/crates/socket-patch-cli/src/commands/bun_preflight.rs b/crates/socket-patch-cli/src/commands/bun_preflight.rs
index ccee0f70..f972b7e6 100644
--- a/crates/socket-patch-cli/src/commands/bun_preflight.rs
+++ b/crates/socket-patch-cli/src/commands/bun_preflight.rs
@@ -116,6 +116,14 @@ async fn preflight_pairs(
     if !pairs.iter().any(|(purl, _)| purl.starts_with("pkg:npm/")) {
         return None;
     }
+    // vlt wins the router (DESIGN D2): a Bun lock beside `vlt-lock.json`
+    // is never the one vendoring rewires.
+    if socket_patch_core::vendor::npm_flavor::vlt_routes(cwd)
+        .await
+        .is_some()
+    {
+        return None;
+    }
     let (code, detail) = socket_patch_core::vendor::bun_lock::preflight_vendor(cwd)
         .await
         .err()?;
@@ -322,6 +330,23 @@ mod tests {
         assert!(refusal.applies_to(PURL));
     }
 
+    /// vlt wins the router: a Bun lock beside `vlt-lock.json`, readable or
+    /// not, is never judged by the Bun preflight.
+    #[tokio::test]
+    async fn a_vlt_lock_takes_the_project_out_of_bun_scope() {
+        let tmp = tempfile::tempdir().unwrap();
+        std::fs::write(tmp.path().join("bun.lockb"), b"\x00binary").unwrap();
+        let npm = vec![sel(UUID, PURL)];
+        assert!(bun_vendor_preflight(tmp.path(), &npm).await.is_some());
+        for vlt in ["{\n  \"lockfileVersion\": 1\n}\n", "\u{feff}{}"] {
+            std::fs::write(tmp.path().join("vlt-lock.json"), vlt).unwrap();
+            assert!(
+                bun_vendor_preflight(tmp.path(), &npm).await.is_none(),
+                "{vlt:?}"
+            );
+        }
+    }
+
     /// The lock-derived exemption: on a pre-v2 workspace lock whose every
     /// instance of the purl is already ours, a SUPERSEDING uuid (ledger at
     /// the old uuid) and a WIPED ledger are both exempt — the engine
diff --git a/crates/socket-patch-cli/src/commands/get.rs b/crates/socket-patch-cli/src/commands/get.rs
index 2e32ee27..070a1b46 100644
--- a/crates/socket-patch-cli/src/commands/get.rs
+++ b/crates/socket-patch-cli/src/commands/get.rs
@@ -32,6 +32,9 @@ use crate::commands::bun_preflight::{
     bun_vendor_preflight, bun_vendor_preflight_with_ledger, BunVendorRefusal,
 };
 use crate::commands::lock_cli::lock_failure;
+use crate::commands::vlt_preflight::{
+    vlt_refusal_for, vlt_vendor_preflight_selected, VltVendorRefusal,
+};
 use crate::ecosystem_dispatch::{
     crawl_all_ecosystems, find_packages_for_rollback, partition_purls,
 };
@@ -1774,19 +1777,36 @@ impl FetchBatch {
     }
 }
 
+/// The vendored-mode preflight verdicts the download phase refuses by
+/// (Bun's project-level one, vlt's per purl); agent downloads pass none.
+#[derive(Clone, Copy, Default)]
+struct VendorRefusals<'a> {
+    bun: Option<&'a BunVendorRefusal>,
+    vlt: &'a [(String, VltVendorRefusal)],
+}
+
+impl VendorRefusals<'_> {
+    fn for_purl(&self, purl: &str) -> Option<(&'static str, &str)> {
+        self.bun
+            .filter(|r| r.applies_to(purl))
+            .map(|r| (r.code, r.detail.as_str()))
+            .or_else(|| vlt_refusal_for(self.vlt, purl).map(|r| (r.code, r.detail.as_str())))
+    }
+}
+
 /// The fetch loop both download engines share: installed-release
-/// narrowing, the caller's Bun refusal, the per-store skip decision, the
-/// view fetch (served from `prefetched` when the narrowing or the caller
-/// already holds the view), the no-applicable-files guardrail, optional
-/// blob persistence, and every per-patch failure record. Every pinned
-/// stderr line and JSON action lives here once.
+/// narrowing, the caller's Bun and vlt refusals, the per-store skip
+/// decision, the view fetch (served from `prefetched` when the narrowing or
+/// the caller already holds the view), the no-applicable-files guardrail,
+/// optional blob persistence, and every per-patch failure record. Every
+/// pinned stderr line and JSON action lives here once.
 async fn fetch_selected_patches(
     selected: &[PatchSearchResult],
     params: &DownloadParams,
     api_client: &ApiClient,
     store: RecordStore<'_>,
     blobs_dir: Option<&Path>,
-    bun_refusal: Option<&BunVendorRefusal>,
+    refusals: VendorRefusals<'_>,
     mut prefetched: HashMap<String, PatchResponse>,
 ) -> FetchBatch {
     let quiet = params.quiet();
@@ -1833,17 +1853,14 @@ async fn fetch_selected_patches(
         // unwired it, so UUID equality alone never exempts a purl — the
         // lock-derived exemption inside `applies_to` decides. Code-tagged so
         // a `--silent` operator can grep the stable code.
-        if let Some(refusal) = bun_refusal.filter(|r| r.applies_to(purl)) {
+        if let Some((code, detail)) = refusals.for_purl(purl) {
             batch.fail(
                 params.json,
-                Some(format!(
-                    "[error] {purl} ({}): {}",
-                    refusal.code, refusal.detail
-                )),
+                Some(format!("[error] {purl} ({code}): {detail}")),
                 purl,
                 uuid,
-                &refusal.detail,
-                Some(refusal.code),
+                detail,
+                Some(code),
             );
             continue;
         }
@@ -2066,6 +2083,14 @@ pub(crate) async fn download_patch_records_with(
         vendor_state.as_ref().map(|s| &s.entries),
     )
     .await;
+    // The vlt twin: every lock-, manifest- and ledger-decidable vlt refusal
+    // (see `crate::commands::vlt_preflight`), per purl.
+    let vlt_refusals = vlt_vendor_preflight_selected(
+        &params.cwd,
+        selected,
+        vendor_state.as_ref().map(|s| &s.entries),
+    )
+    .await;
     download_patch_records_preflighted(
         selected,
         params,
@@ -2073,6 +2098,7 @@ pub(crate) async fn download_patch_records_with(
         prefetched,
         vendor_state,
         bun_refusal.as_ref(),
+        &vlt_refusals,
     )
     .await
 }
@@ -2089,6 +2115,7 @@ async fn download_patch_records_preflighted(
     prefetched: HashMap<String, PatchResponse>,
     vendor_state: std::io::Result<VendorState>,
     bun_refusal: Option<&BunVendorRefusal>,
+    vlt_refusals: &[(String, VltVendorRefusal)],
 ) -> DetachedDownload {
     let vendor_state = vendor_state.unwrap_or_default();
 
@@ -2099,7 +2126,10 @@ async fn download_patch_records_preflighted(
         api_client,
         RecordStore::Ledger(&vendor_state.entries),
         params.persist_blobs.then_some(blobs_dir.as_path()),
-        bun_refusal,
+        VendorRefusals {
+            bun: bun_refusal,
+            vlt: vlt_refusals,
+        },
         prefetched,
     )
     .await;
@@ -2317,7 +2347,7 @@ pub async fn download_and_apply_patches_with(
         run.api_client,
         RecordStore::Manifest(&manifest),
         params.persist_blobs.then_some(blobs_dir.as_path()),
-        None,
+        VendorRefusals::default(),
         HashMap::new(),
     )
     .await;
@@ -3539,6 +3569,7 @@ async fn run_get_vendored(
     // phase below (which otherwise runs its own): the pre-record refusal
     // shape is this path's, so it owns the read.
     let mut bun_refusal: Option<BunVendorRefusal> = None;
+    let mut vlt_refusals: Vec<(String, VltVendorRefusal)> = Vec::new();
     if let Some(patch) = prefetched {
         // Bun preflight (see `BunVendorRefusal`): refuse BEFORE the engine
         // and the vendor step, so the tree stays exactly as it was (no
@@ -3561,8 +3592,19 @@ async fn run_get_vendored(
         // Human: `Error (<code>): <detail>` on stderr — an error, so it is
         // exempt from `--silent` like every other `Error (…)` line here.
         bun_refusal = bun_vendor_preflight(&args.common.cwd, selected).await;
-        if let Some(refusal) = bun_refusal.as_ref().filter(|r| r.applies_to(&patch.purl)) {
-            let BunVendorRefusal { code, detail, .. } = refusal;
+        let ledger = load_state(&args.common.cwd).await;
+        vlt_refusals = vlt_vendor_preflight_selected(
+            &args.common.cwd,
+            selected,
+            ledger.as_ref().map(|s| &s.entries),
+        )
+        .await;
+        let refusal = bun_refusal
+            .as_ref()
+            .filter(|r| r.applies_to(&patch.purl))
+            .map(|r| (&r.code, &r.detail))
+            .or_else(|| vlt_refusal_for(&vlt_refusals, &patch.purl).map(|r| (&r.code, &r.detail)));
+        if let Some((code, detail)) = refusal {
             // Same failure telemetry as the vendor-step Err arm below: this
             // run exits 1 without vendoring anything.
             socket_patch_core::telemetry::track_patch_vendor_failed(
@@ -3618,6 +3660,7 @@ async fn run_get_vendored(
             prefetched_views,
             vendor_state,
             bun_refusal.as_ref(),
+            &vlt_refusals,
         ))
         .await
     } else {
diff --git a/crates/socket-patch-cli/src/commands/mod.rs b/crates/socket-patch-cli/src/commands/mod.rs
index 11ce2634..ccc5ed1d 100644
--- a/crates/socket-patch-cli/src/commands/mod.rs
+++ b/crates/socket-patch-cli/src/commands/mod.rs
@@ -15,6 +15,7 @@ pub mod vendor;
 pub mod vex;
 pub(crate) mod vex_consumed;
 pub(crate) mod vex_sources;
+pub(crate) mod vlt_preflight;
 
 use std::path::Path;
 
diff --git a/crates/socket-patch-cli/src/commands/repair_vendor.rs b/crates/socket-patch-cli/src/commands/repair_vendor.rs
index 8d03076c..06823219 100644
--- a/crates/socket-patch-cli/src/commands/repair_vendor.rs
+++ b/crates/socket-patch-cli/src/commands/repair_vendor.rs
@@ -104,6 +104,7 @@ struct Candidate {
 /// The Python locks the root LISTS (`pylock*.toml`, `*.py.lock` + script)
 /// and the requirements `-r` include tree are appended at scan time.
 const WIRING_FILES: &[&str] = &[
+    "vlt-lock.json",
     "package-lock.json",
     "npm-shrinkwrap.json",
     "pnpm-lock.yaml",
@@ -155,6 +156,7 @@ pub(crate) async fn scan_vendor_references(project_root: &Path) -> Vec<(String,
         .iter()
         .map(|file| (*file).to_string())
         .collect();
+    files.extend(vendor::vlt_lock::vlt_importer_package_jsons(project_root).await);
     if let Ok(paths) = socket_patch_core::utils::python_lock::python_lock_paths(project_root) {
         for path in paths {
             if let Some(script) =
@@ -245,7 +247,7 @@ fn synth_entry(eco: &str, uuid: &str, artifact_path: &str, base_purl: &str) -> V
 /// backend's unwired-revert guard probes ITS OWN lockfile — a
 /// pnpm-reconstructed entry left at flavor-None would be guarded against
 /// package-lock.json instead of pnpm-lock.yaml. Locks are checked in the
-/// vendor router's own precedence order (bun > pnpm > yarn > npm) for the
+/// vendor router's own precedence order (vlt > bun > pnpm > yarn > npm) for the
 /// pathological multi-lock case; content sniffs mirror
 /// `detect_npm_lock_flavor` (crate-private to core, so re-derived here).
 /// `None` when genuinely unknowable — no recognizable lock carries the
@@ -286,6 +288,11 @@ async fn detect_reference_flavor(project_root: &Path, eco: &str, uuid: &str) ->
     let read = |name: &'static str| async move {
         read_regular_to_string(&project_root.join(name)).await.ok()
     };
+    if let Some(text) = read("vlt-lock.json").await {
+        if text.contains(&needle) {
+            return vendor::vlt_lock::vlt_lock_sniff_ok(&text).then(|| "vlt".to_string());
+        }
+    }
     if read("bun.lock").await.is_some_and(|t| t.contains(&needle)) {
         return Some("bun".to_string());
     }
@@ -773,6 +780,26 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
         }
         match health {
             ArtifactHealth::Healthy => {
+                // vlt's `<uuid>/.gitignore` and `.gitattributes` are not
+                // part of the artifact: a missing or edited one is simply
+                // rewritten (DESIGN §4.8).
+                if entry.ecosystem == "npm"
+                    && entry.flavor.as_deref() == Some(vendor::vlt_lock::FLAVOR)
+                    && !common.dry_run
+                {
+                    if let Err(e) =
+                        vendor::vlt_lock::restore_vlt_uuid_metadata(&entry, &common.cwd).await
+                    {
+                        fail(
+                            env,
+                            common.json,
+                            purl,
+                            "vendor_artifact_unrepairable",
+                            format!("cannot restore the vendored dir's .gitignore: {e}"),
+                        );
+                        continue;
+                    }
+                }
                 // Dir-shaped artifacts from pre-inventory vendors: the
                 // health check above could only verify the PATCHED members
                 // — unpatched-file drift is invisible until a re-vendor
@@ -1281,6 +1308,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
     // The rollback variant fans each base path back out to every qualified
     // caller purl — the same fix `vendor_records` carries.
     let mut all_packages = find_packages_for_rollback(&partitioned, &crawler_options, quiet).await;
+    crate::commands::vendor::drop_vendored_installs(&common.cwd, &mut all_packages);
     let inventory = lock_inventory::inventory_project(&common.cwd).await;
     let client = registry_fetch::build_registry_client();
     let mut holders: Vec<registry_fetch::FetchedPackage> = Vec::new();
@@ -1495,15 +1523,20 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                         continue;
                     }
                 };
-                for name in [
+                let mut names: Vec<String> = [
+                    "vlt-lock.json",
                     "package-lock.json",
                     "npm-shrinkwrap.json",
                     "pnpm-lock.yaml",
                     "yarn.lock",
                     "bun.lock",
                     "bun.lockb",
-                    "package.json",
-                ] {
+                ]
+                .iter()
+                .map(|n| (*n).to_string())
+                .collect();
+                names.extend(vendor::vlt_lock::vlt_importer_package_jsons(&common.cwd).await);
+                for name in names {
                     let p = common.cwd.join(name);
                     if let Ok(bytes) = tokio::fs::read(&p).await {
                         snap.push((p, Some(bytes)));
@@ -1687,7 +1720,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                     let abs = common
                         .cwd
                         .join(check_entry.artifact.path.replace('\\', "/"));
-                    if let Ok(inv) = compute_dir_inventory(&abs).await {
+                    if let Ok(inv) = artifact_dir_inventory(&check_entry, &abs).await {
                         check_entry.artifact.file_inventory = Some(inv);
                         health =
                             check_vendored_artifact(&common.cwd, &check_entry, &c.record).await;
@@ -1780,7 +1813,7 @@ async fn fill_artifact_fingerprint(project_root: &Path, entry: &mut VendorEntry)
     let norm = entry.artifact.path.replace('\\', "/");
     let abs = project_root.join(&norm);
     if !artifact_is_file_shaped(&norm) {
-        entry.artifact.file_inventory = compute_dir_inventory(&abs).await.ok();
+        entry.artifact.file_inventory = artifact_dir_inventory(entry, &abs).await.ok();
         return;
     }
     if let Some(hex) = file_sha256_hex(&abs).await {
@@ -1791,6 +1824,19 @@ async fn fill_artifact_fingerprint(project_root: &Path, entry: &mut VendorEntry)
     }
 }
 
+/// A dir artifact's inventory: an npm dir (vlt's package dir) leaves out
+/// its `node_modules/`, which holds vlt's links and is never part of it.
+async fn artifact_dir_inventory(
+    entry: &VendorEntry,
+    abs: &Path,
+) -> Result<std::collections::BTreeMap<String, String>, String> {
+    if entry.ecosystem == "npm" {
+        vendor::compute_package_dir_inventory(abs).await
+    } else {
+        compute_dir_inventory(abs).await
+    }
+}
+
 fn workspace_copy_issue(health: &ArtifactHealth) -> bool {
     matches!(health, ArtifactHealth::Corrupt { reason }
         if reason == "vendor_workspace_artifact_missing" || reason == "vendor_workspace_artifact_corrupt")
@@ -2285,6 +2331,41 @@ mod tests {
         )
         .await;
         case(vec![("bun.lock", mention.clone())], Some("bun")).await;
+        let vlt_lock = |version: &str| {
+            format!(
+                "{{\n  \"lockfileVersion\": {version},\n  \"nodes\": {{\n    \"file~x\": \
+                 [0,\"left-pad\",null,\".socket/vendor/npm/{uuid}/left-pad-1.3.0/node_modules/\
+                 left-pad\"]\n  }}\n}}\n"
+            )
+        };
+        case(vec![("vlt-lock.json", vlt_lock("1"))], Some("vlt")).await;
+        case(vec![("vlt-lock.json", vlt_lock("0"))], Some("vlt")).await;
+        // vlt precedes every other lock, and an unreadable one is unknowable.
+        case(
+            vec![
+                ("vlt-lock.json", vlt_lock("1")),
+                ("bun.lock", mention.clone()),
+                ("package-lock.json", mention.clone()),
+            ],
+            Some("vlt"),
+        )
+        .await;
+        case(
+            vec![
+                ("vlt-lock.json", vlt_lock("2")),
+                ("package-lock.json", mention.clone()),
+            ],
+            None,
+        )
+        .await;
+        case(
+            vec![
+                ("vlt-lock.json", "{}".to_string()),
+                ("package-lock.json", mention.clone()),
+            ],
+            Some("package-lock"),
+        )
+        .await;
 
         // Unknowable stays None: unrecognized grammars, or no referencing
         // lock at all (an unreferenced lock must not claim the entry).
diff --git a/crates/socket-patch-cli/src/commands/rollback.rs b/crates/socket-patch-cli/src/commands/rollback.rs
index ff42597e..3f117270 100644
--- a/crates/socket-patch-cli/src/commands/rollback.rs
+++ b/crates/socket-patch-cli/src/commands/rollback.rs
@@ -2556,14 +2556,32 @@ pub(crate) async fn rollback_patches_inner(
             // only a representative copy skipped the download and wedged the
             // online rollback with a mid-run `MissingBlob` failure. Mirrors
             // apply's `mismatch_blob_gaps`.
-            let pkg_paths = all_packages_multi
+            let mut pkg_paths = all_packages_multi
                 .get(purl)
-                .expect("gate manifest holds only attempted targets, which the crawler discovered");
+                .expect("gate manifest holds only attempted targets, which the crawler discovered")
+                .clone();
+            // The engine also restores every pnpm/vlt store peer variant of
+            // an npm copy, so each of those is a copy that may need a blob.
+            if purl.starts_with("pkg:npm/") {
+                let found = pkg_paths.clone();
+                for path in &found {
+                    for copy in
+                        socket_patch_core::crawlers::npm_crawler::find_store_peer_variant_copies(
+                            path,
+                        )
+                        .await
+                    {
+                        if !pkg_paths.contains(&copy) {
+                            pkg_paths.push(copy);
+                        }
+                    }
+                }
+            }
             for (file, info) in &patch.files {
                 if info.before_hash.is_empty() || !absent_blobs.contains(&info.before_hash) {
                     continue;
                 }
-                for pkg_path in pkg_paths {
+                for pkg_path in &pkg_paths {
                     let v = verify_file_rollback(pkg_path, file, info, &blobs_path).await;
                     if v.status == VerifyRollbackStatus::MissingBlob {
                         missing_blobs.insert(info.before_hash.clone());
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 191ca64d..1a553c75 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -19,6 +19,7 @@ mod python;
 mod vlt;
 
 pub(crate) use vlt::rollback_heal as vlt_rollback_heal;
+pub(crate) use vlt::takeover_heal as vlt_takeover_heal;
 
 /// Candidate lockfiles / registry configs the redirect rewriters may touch —
 /// read from the project when present and handed to `rewrite_registry_redirect`.
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index 2e1d1878..374f4a28 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -437,6 +437,55 @@ pub(crate) async fn rollback_heal(
     vec![(REINSTALL_REQUIRED.to_string(), detail)]
 }
 
+/// The hosted→vendored heal (DESIGN §4.10 step 4): once a purl is
+/// vendored over its reverted hosted pin, the lock no longer names the
+/// registry DepID, so a store copy still holding the hosted bytes is stale
+/// against the pristine expectation and is invalidated like a rollback's.
+pub(crate) async fn takeover_heal(
+    common: &crate::args::GlobalArgs,
+    targets: &[LedgerTarget],
+) -> Option<String> {
+    if targets.is_empty() || common.dry_run {
+        return None;
+    }
+    let classified: Vec<(Target<'_>, &str)> = targets
+        .iter()
+        .map(|t| {
+            (
+                Target {
+                    dep_id: &t.dep_id,
+                    name: &t.name,
+                    lock_sha512: None,
+                    record: t.record.as_ref(),
+                    artifact: None,
+                },
+                t.purl.as_str(),
+            )
+        })
+        .collect();
+    let tally = heal_targets(common, &classified, Expected::Pristine).await;
+    let vendored: BTreeSet<&str> = targets.iter().map(|t| t.purl.as_str()).collect();
+    let detail = if tally.stale_left > 0 {
+        format!(
+            "vendored {} hosted-pinned packages, but node_modules still holds {} copies of the \
+             hosted artifacts; run `vlt install` (or re-run without --no-vlt-install-cleanup)",
+            vendored.len(),
+            tally.stale_left
+        )
+    } else if tally.undeterminable > 0 {
+        undeterminable_detail(tally.undeterminable)
+    } else if tally.invalidated > 0 {
+        format!(
+            "vendored {} hosted-pinned packages; removed their hosted installed copies, so \
+             node_modules is incomplete until you run `vlt install`",
+            vendored.len()
+        )
+    } else {
+        return None;
+    };
+    Some(detail)
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
diff --git a/crates/socket-patch-cli/src/commands/scan/mod.rs b/crates/socket-patch-cli/src/commands/scan/mod.rs
index 0f9fc739..bafc1c3b 100644
--- a/crates/socket-patch-cli/src/commands/scan/mod.rs
+++ b/crates/socket-patch-cli/src/commands/scan/mod.rs
@@ -49,7 +49,7 @@ pub(crate) use self::discovery::unsupported_layout_warnings;
 use self::gc::gc_json;
 pub(crate) use self::hosted::boxed_run_redirect_selected;
 use self::hosted::run_redirect;
-pub(crate) use self::hosted::vlt_rollback_heal;
+pub(crate) use self::hosted::{vlt_rollback_heal, vlt_takeover_heal};
 pub(crate) use self::vendor_flow::{
     boxed_scan_vendor_step, preview_vendor_json, print_dry_run_refusals,
 };
diff --git a/crates/socket-patch-cli/src/commands/scan/vendor_flow.rs b/crates/socket-patch-cli/src/commands/scan/vendor_flow.rs
index 662bc2ee..e8f3f52f 100644
--- a/crates/socket-patch-cli/src/commands/scan/vendor_flow.rs
+++ b/crates/socket-patch-cli/src/commands/scan/vendor_flow.rs
@@ -37,6 +37,7 @@ use crate::commands::lock_cli::lock_failure;
 use crate::commands::vendor::{
     note_classic_migration_risk, track_outcomes_for_vendor, vendor_records,
 };
+use crate::commands::vlt_preflight::{vlt_refusal_for, vlt_vendor_preflight_selected};
 use crate::json_envelope::{Command as EnvelopeCommand, Envelope};
 use crate::ui::{plural, print_json};
 
@@ -69,16 +70,17 @@ type VendorStepResult = Result<(bool, Envelope), VendorStepError>;
 /// Action values are part of the CLI contract: `would_vendor` (no ledger
 /// entry), `already_vendored` (entry at this uuid), `would_revendor` +
 /// `oldUuid` (entry at an older uuid), and — additive — `would_refuse` +
-/// `errorCode` + `error` for npm purls the wet run's Bun preflight
-/// ([`crate::commands::bun_preflight::BunVendorRefusal`]) would refuse
-/// before any download. The preview stays a ledger classification otherwise
-/// (engine refusals outside the preflight are not predicted), and it never
-/// flips the run's status or exit code: `would_refuse` is best-effort
-/// advice so a preview never advertises vendoring the wet run is known to
-/// refuse. The preflight reads `bun.lock`/`bun.lockb` (plus, on a refused
-/// workspace lock, the lock once more per npm purl for the exemption) —
-/// the only disk access here — and runs only when the selection holds an
-/// npm purl.
+/// `errorCode` + `error` for npm purls the wet run's Bun or vlt preflight
+/// ([`crate::commands::bun_preflight::BunVendorRefusal`],
+/// [`crate::commands::vlt_preflight`]) would refuse before any download.
+/// The preview stays a ledger classification otherwise (engine refusals
+/// outside the preflights are not predicted), and it never flips the run's
+/// status or exit code: `would_refuse` is best-effort advice so a preview
+/// never advertises vendoring the wet run is known to refuse. The
+/// preflights read `bun.lock`/`bun.lockb` (plus, on a refused workspace
+/// lock, the lock once more per npm purl for the exemption) or
+/// `vlt-lock.json` with its importer package.json files — the only disk
+/// access here — and run only when the selection holds an npm purl.
 pub(crate) async fn preview_vendor_json(
     cwd: &Path,
     selected: &[PatchSearchResult],
@@ -91,6 +93,8 @@ pub(crate) async fn preview_vendor_json(
     let state = load_state(cwd).await;
     let refusal =
         bun_vendor_preflight_with_ledger(cwd, selected, state.as_ref().map(|s| &s.entries)).await;
+    let vlt_refusals =
+        vlt_vendor_preflight_selected(cwd, selected, state.as_ref().map(|s| &s.entries)).await;
     let state = state.unwrap_or_default();
     let mut patches: Vec<serde_json::Value> = selected
         .iter()
@@ -104,6 +108,13 @@ pub(crate) async fn preview_vendor_json(
                     "errorCode": r.code, "error": r.detail,
                 })
             }
+            _ if vlt_refusal_for(&vlt_refusals, &p.purl).is_some() => {
+                let r = vlt_refusal_for(&vlt_refusals, &p.purl).expect("checked by the guard");
+                serde_json::json!({
+                    "purl": p.purl, "uuid": p.uuid, "action": "would_refuse",
+                    "errorCode": r.code, "error": r.detail,
+                })
+            }
             Some(e) if e.uuid == p.uuid => serde_json::json!({
                 "purl": p.purl, "uuid": p.uuid, "action": "already_vendored",
             }),
diff --git a/crates/socket-patch-cli/src/commands/vendor.rs b/crates/socket-patch-cli/src/commands/vendor.rs
index 04cd4227..bd95af8c 100644
--- a/crates/socket-patch-cli/src/commands/vendor.rs
+++ b/crates/socket-patch-cli/src/commands/vendor.rs
@@ -46,6 +46,7 @@ use crate::commands::rollback::VendorRevertStep;
 use crate::commands::vex::{
     generate_vex_from_manifest_path, generate_vex_without_manifest, ManifestlessVex, VexEmbedArgs,
 };
+use crate::commands::vlt_preflight::{vlt_refusal_for, vlt_vendor_preflight_pairs};
 use crate::ecosystem_dispatch::{
     find_packages_for_rollback, npm_paths_by_identity, partition_purls,
 };
@@ -1260,6 +1261,7 @@ pub(crate) async fn vendor_records(
     for (purl, paths) in npm_paths_by_identity(&crawler_options, &missing_npm).await {
         all_packages.insert(purl, paths[0].clone());
     }
+    drop_vendored_installs(&common.cwd, &mut all_packages);
 
     // ── Auto-fetch: lockfile-resolved packages with no installed copy ────
     // A manifest patch whose package is not on disk but IS resolvable from
@@ -1294,11 +1296,13 @@ pub(crate) async fn vendor_records(
             // no registry traffic.
             for purl in &missing {
                 let ledger_entry = lookup_entry(&state.entries, purl);
-                if let Some(entry) = ledger_entry
-                    .filter(|e| e.ecosystem == "npm" && e.artifact.path.ends_with(".tgz"))
-                {
-                    let tgz = common.cwd.join(&entry.artifact.path);
-                    if tokio::fs::metadata(&tgz).await.is_err() {
+                if let Some(entry) = ledger_entry.filter(|e| {
+                    e.ecosystem == "npm"
+                        && (e.artifact.path.ends_with(".tgz")
+                            || !vendor::artifact_is_file_shaped(&e.artifact.path))
+                }) {
+                    let committed = common.cwd.join(&entry.artifact.path);
+                    if tokio::fs::metadata(&committed).await.is_err() {
                         // The committed artifact is GONE (gitignored or
                         // deleted): not corruption — fall through to the
                         // registry ladder, which recovers the pre-vendor
@@ -1317,9 +1321,17 @@ pub(crate) async fn vendor_records(
                             common,
                         );
                     } else {
-                        match registry_fetch::stage_local_artifact(&tgz, &entry.artifact.sha256)
+                        let staged = if entry.artifact.path.ends_with(".tgz") {
+                            registry_fetch::stage_local_artifact(&committed, &entry.artifact.sha256)
+                                .await
+                        } else {
+                            registry_fetch::stage_local_dir_artifact(
+                                &committed,
+                                entry.artifact.file_inventory.as_ref(),
+                            )
                             .await
-                        {
+                        };
+                        match staged {
                             Ok(staged) => {
                                 all_packages.insert(purl.clone(), staged.dir().to_path_buf());
                                 fetched_holders.push(staged);
@@ -1429,6 +1441,12 @@ pub(crate) async fn vendor_records(
         .filter_map(|p| records.get(p).map(|r| (p.as_str(), r.uuid.as_str())))
         .collect();
     let bun_refusal = bun_vendor_preflight_pairs(&common.cwd, &bun_pairs, Ok(&state.entries)).await;
+    // The vlt twin (see `crate::commands::vlt_preflight`): every refusal
+    // the vlt backend can decide from the lock, the package.json files,
+    // the ledger and the installed copy, consulted per candidate before
+    // the takeover below reverts a live hosted redirect.
+    let vlt_refusals =
+        vlt_vendor_preflight_pairs(&common.cwd, &bun_pairs, Ok(&state.entries)).await;
 
     // Release-variant grouping (pypi `?artifact_id=`, gem `?platform=`):
     // the crawler emits base purls; match the manifest's qualified variants
@@ -1472,6 +1490,12 @@ pub(crate) async fn vendor_records(
     let berry_takeover_refusal: tokio::sync::OnceCell<Option<(&'static str, String)>> =
         tokio::sync::OnceCell::new();
     let pipenv_version = tokio::sync::OnceCell::new();
+    // The vlt store entries each hosted→vendored takeover unpinned, healed
+    // once the purl is vendored (DESIGN §4.10).
+    let mut vlt_takeover_targets: HashMap<
+        String,
+        Vec<socket_patch_core::patch::redirect::vlt_heal::LedgerTarget>,
+    > = HashMap::new();
     let mut dry_in_sync: u32 = 0;
     // Sorted, so per-package lines print in the same order every run.
     let mut all_packages: Vec<(String, std::path::PathBuf)> = all_packages.into_iter().collect();
@@ -1546,6 +1570,15 @@ pub(crate) async fn vendor_records(
                 report_vendor_failure(common, candidate, &refusal.detail);
                 continue;
             }
+            if let Some(refusal) = vlt_refusal_for(&vlt_refusals, candidate) {
+                has_errors = true;
+                env.record(
+                    PatchEvent::new(PatchAction::Failed, candidate.clone())
+                        .with_error(refusal.code, refusal.detail.clone()),
+                );
+                report_vendor_failure(common, candidate, &refusal.detail);
+                continue;
+            }
 
             // Cross-mode takeover: vendoring over a LIVE hosted redirect
             // must first revert the hosted edits from the redirect ledger.
@@ -1685,6 +1718,10 @@ pub(crate) async fn vendor_records(
                     }
                 } else if claimed {
                     let ledger = redirect_ledger.as_mut().expect("claimed implies Some");
+                    let targets = socket_patch_core::patch::redirect::vlt_heal::ledger_targets(
+                        ledger,
+                        std::slice::from_ref(candidate),
+                    );
                     match socket_patch_core::patch::redirect::revert_redirect_purl(
                         &common.cwd,
                         ledger,
@@ -1743,6 +1780,9 @@ pub(crate) async fn vendor_records(
                                 "the hosted lockfile edits back to their pre-redirect \
                                  registry values"
                             };
+                            if !targets.is_empty() {
+                                vlt_takeover_targets.insert(candidate.clone(), targets);
+                            }
                             record_warning(
                                 env,
                                 candidate,
@@ -1928,6 +1968,20 @@ pub(crate) async fn vendor_records(
                         )
                         .await;
                     }
+                    if result.success {
+                        if let Some(targets) = vlt_takeover_targets.remove(candidate) {
+                            if let Some(detail) =
+                                crate::commands::scan::vlt_takeover_heal(common, &targets).await
+                            {
+                                record_warning(
+                                    env,
+                                    candidate,
+                                    &VendorWarning::new("redirect_vlt_reinstall_required", detail),
+                                    common,
+                                );
+                            }
+                        }
+                    }
                 }
             }
         }
@@ -2001,6 +2055,8 @@ pub(crate) async fn vendor_records(
                      pnpm-workspace.yaml to make the patches portable (pnpm >=11 reads \
                      the vendored override only from pnpm-workspace.yaml)."
                 );
+            } else if wired_flavors.contains("vlt") {
+                println!("{VLT_COMMIT_HINT}");
             } else {
                 println!(
                     "Commit .socket/vendor/ and the updated lockfiles to make the patches \
@@ -2028,6 +2084,11 @@ pub(crate) async fn vendor_records(
     has_errors
 }
 
+/// The committable-files hint of a vlt-wired run (DESIGN §4.9).
+const VLT_COMMIT_HINT: &str = "Commit package.json (and workspace package.json files), \
+     vlt-lock.json and .socket/vendor/ (the .gitignore there re-includes the payload and keeps \
+     vlt's node_modules links out of git); CI: `vlt ci`.";
+
 /// The install command that re-materializes the project tree from the wired
 /// lockfile, per npm-family flavor. Vendoring edits ONLY the lockfile/config
 /// wiring — the already-installed node_modules keeps its pre-vendor bytes
@@ -2043,10 +2104,29 @@ fn flavor_install_command(flavor: &str) -> Option<&'static str> {
         // specifiers, so `--frozen-lockfile` only passes at the vendoring path.
         "pnpm" | "pnpm-legacy" => Some("pnpm install"),
         "bun" => Some("bun install"),
+        "vlt" => Some("vlt install"),
         _ => None,
     }
 }
 
+/// Drop installed npm copies that resolve into `.socket/vendor/` (or no
+/// longer resolve at all): vlt links a vendored `file:` dependency straight
+/// to its committed dir, which is this tool's own artifact and never a
+/// pristine source. The committed-artifact rung stages it
+/// inventory-verified instead.
+pub(crate) fn drop_vendored_installs(
+    cwd: &Path,
+    packages: &mut HashMap<String, std::path::PathBuf>,
+) {
+    let Ok(vendor_root) = std::fs::canonicalize(cwd.join(SOCKET_DIR).join("vendor")) else {
+        return;
+    };
+    packages.retain(|purl, path| {
+        !purl.starts_with("pkg:npm/")
+            || std::fs::canonicalize(path).is_ok_and(|real| !real.starts_with(&vendor_root))
+    });
+}
+
 /// Ledger entries whose patch is gone from the manifest — the stale test
 /// shared by [`reconcile_dropped`] and [`run_vendor_gc`]. Respects this
 /// run's --ecosystems scope: a `vendor --ecosystems npm` invocation must
@@ -3797,6 +3877,7 @@ mod scope_and_hint_tests {
         assert_eq!(flavor_install_command("pnpm"), Some("pnpm install"));
         assert_eq!(flavor_install_command("pnpm-legacy"), Some("pnpm install"));
         assert_eq!(flavor_install_command("bun"), Some("bun install"));
+        assert_eq!(flavor_install_command("vlt"), Some("vlt install"));
         assert_eq!(flavor_install_command("cargo"), None);
         assert_eq!(flavor_install_command(""), None);
     }
diff --git a/crates/socket-patch-cli/src/commands/vlt_preflight.rs b/crates/socket-patch-cli/src/commands/vlt_preflight.rs
new file mode 100644
index 00000000..0945773f
--- /dev/null
+++ b/crates/socket-patch-cli/src/commands/vlt_preflight.rs
@@ -0,0 +1,287 @@
+//! The vlt vendored-mode preflight (DESIGN §4.6), the per-purl twin of
+//! [`crate::commands::bun_preflight`]: every refusal the vlt backend can
+//! decide from `vlt-lock.json`, the importer package.json files, the vendor
+//! ledger and the installed store copy, evaluated read-only before any
+//! `/patches/view/` fetch, any write and any hosted→vendored takeover.
+//!
+//! Callers: `vendor` ([`crate::commands::vendor::vendor_records`], before
+//! the takeover reverts a live hosted redirect), `scan`/`get --mode
+//! vendored` (the download phase and the dry-run preview's
+//! `would_refuse`) and `get <uuid> --mode vendored`. Agent mode never runs
+//! it. After it passes, only network and build failures remain for the
+//! engine.
+
+use std::path::Path;
+
+use socket_patch_core::api::types::PatchSearchResult;
+use socket_patch_core::vendor::npm_flavor::{vlt_flavor_change_refusal, vlt_routes};
+use socket_patch_core::vendor::vlt_lock::vlt_vendor_preflight;
+
+use crate::commands::bun_preflight::LedgerLoad;
+
+/// A purl the vlt backend would refuse: the engine's code and detail.
+#[derive(Debug, Clone, PartialEq, Eq)]
+pub(crate) struct VltVendorRefusal {
+    pub(crate) code: &'static str,
+    pub(crate) detail: String,
+}
+
+/// The refusal (if any) the preflight recorded for `purl`.
+pub(crate) fn vlt_refusal_for<'a>(
+    refusals: &'a [(String, VltVendorRefusal)],
+    purl: &str,
+) -> Option<&'a VltVendorRefusal> {
+    refusals
+        .iter()
+        .find_map(|(p, refusal)| (p == purl).then_some(refusal))
+}
+
+/// Run the preflight for `(purl, uuid)` pairs. Only npm purls of a project
+/// the router sends to vlt are judged; every other pair passes. The order
+/// matches the engine's: an unreadable ledger, the lock sniff, the flavor
+/// guard, then the core target analysis, store copy and gitignore checks.
+pub(crate) async fn vlt_vendor_preflight_pairs(
+    project_root: &Path,
+    pairs: &[(&str, &str)],
+    ledger: LedgerLoad<'_>,
+) -> Vec<(String, VltVendorRefusal)> {
+    let npm: Vec<&(&str, &str)> = pairs
+        .iter()
+        .filter(|(purl, _)| purl.starts_with("pkg:npm/"))
+        .collect();
+    if npm.is_empty() {
+        return Vec::new();
+    }
+    let Some(route) = vlt_routes(project_root).await else {
+        return Vec::new();
+    };
+    let mut out = Vec::new();
+    for (purl, uuid) in npm {
+        let (code, detail) = match (&route, ledger) {
+            (_, Err(e)) => ("vendor_state_unreadable", e.to_string()),
+            (Err((code, detail)), Ok(_)) => (*code, detail.clone()),
+            (Ok(()), Ok(entries)) => match vlt_flavor_change_refusal(entries, purl) {
+                Some(detail) => ("vendor_flavor_changed", detail),
+                None => match vlt_vendor_preflight(project_root, purl, uuid).await {
+                    Ok(()) => continue,
+                    Err(refusal) => refusal,
+                },
+            },
+        };
+        out.push(((*purl).to_string(), VltVendorRefusal { code, detail }));
+    }
+    out
+}
+
+/// [`vlt_vendor_preflight_pairs`] over search results (the `scan`/`get`
+/// selection).
+pub(crate) async fn vlt_vendor_preflight_selected(
+    project_root: &Path,
+    selected: &[PatchSearchResult],
+    ledger: LedgerLoad<'_>,
+) -> Vec<(String, VltVendorRefusal)> {
+    let pairs: Vec<(&str, &str)> = selected
+        .iter()
+        .map(|s| (s.purl.as_str(), s.uuid.as_str()))
+        .collect();
+    vlt_vendor_preflight_pairs(project_root, &pairs, ledger).await
+}
+
+#[cfg(test)]
+mod tests {
+    use std::collections::HashMap;
+
+    use socket_patch_core::vendor::state::VendorEntry;
+
+    use super::*;
+
+    const UUID: &str = "9f6b2c4e-1d3a-4f6b-8c2d-7e5a9b1c3d5f";
+    const PURL: &str = "pkg:npm/left-pad@1.3.0";
+
+    fn lock(nodes: &[&str], edges: &[&str]) -> String {
+        let block = |entries: &[&str]| {
+            let lines: Vec<String> = entries
+                .iter()
+                .enumerate()
+                .map(|(i, e)| format!("    {e}{}", if i + 1 < entries.len() { "," } else { "" }))
+                .collect();
+            format!("{{\n{}\n  }}", lines.join("\n"))
+        };
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {},\n  \"edges\": {}\n}}\n",
+            block(nodes),
+            block(edges)
+        )
+    }
+
+    fn direct_lock() -> String {
+        lock(
+            &[r#""~npm~left-pad@1.3.0": [0,"left-pad","sha512-REG=="]"#],
+            &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#],
+        )
+    }
+
+    fn project(lock: &str, pkg: &str) -> tempfile::TempDir {
+        let tmp = tempfile::tempdir().unwrap();
+        std::fs::write(tmp.path().join("vlt-lock.json"), lock).unwrap();
+        std::fs::write(tmp.path().join("package.json"), pkg).unwrap();
+        tmp
+    }
+
+    const PKG: &str = r#"{"dependencies":{"left-pad":"1.3.0"}}"#;
+
+    fn entry(flavor: Option<&str>) -> VendorEntry {
+        serde_json::from_value(serde_json::json!({
+            "ecosystem": "npm",
+            "basePurl": PURL,
+            "uuid": UUID,
+            "artifact": { "path": format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0.tgz") },
+            "wiring": [],
+            "flavor": flavor,
+        }))
+        .unwrap()
+    }
+
+    async fn run(root: &Path, ledger: LedgerLoad<'_>) -> Vec<(String, VltVendorRefusal)> {
+        vlt_vendor_preflight_pairs(root, &[(PURL, UUID), ("pkg:pypi/x@1.0.0", UUID)], ledger).await
+    }
+
+    #[tokio::test]
+    async fn a_direct_dependency_passes_and_other_projects_are_never_judged() {
+        let empty = HashMap::new();
+        let tmp = project(&direct_lock(), PKG);
+        assert!(run(tmp.path(), Ok(&empty)).await.is_empty());
+
+        let npm = tempfile::tempdir().unwrap();
+        std::fs::write(npm.path().join("package-lock.json"), "{}").unwrap();
+        assert!(run(npm.path(), Ok(&empty)).await.is_empty());
+
+        let pnp = project("not json", PKG);
+        std::fs::write(pnp.path().join(".pnp.cjs"), "").unwrap();
+        assert!(
+            run(pnp.path(), Ok(&empty)).await.is_empty(),
+            "the PnP refusal is not vlt's"
+        );
+    }
+
+    #[tokio::test]
+    async fn every_lock_decidable_refusal_is_reported_per_npm_purl() {
+        let empty = HashMap::new();
+        let cases = [
+            (
+                "\u{feff}{}".to_string(),
+                PKG,
+                "vendor_lockfile_version_unsupported",
+            ),
+            (
+                direct_lock().replace("\"lockfileVersion\": 1", "\"lockfileVersion\": 2"),
+                PKG,
+                "vendor_lockfile_version_unsupported",
+            ),
+            (
+                direct_lock().replace("    \"~npm", "  \"~npm"),
+                PKG,
+                "vendor_lockfile_version_unsupported",
+            ),
+            (
+                direct_lock(),
+                r#"{"dependencies":{"left-pad":"^1.3.0"}}"#,
+                "vendor_vlt_lock_out_of_sync",
+            ),
+            (
+                direct_lock(),
+                r#"{"dependencies":{"left-pad":"1.3.0"},"devDependencies":{"left-pad":"1.3.0"}}"#,
+                "vendor_lock_entry_unsupported",
+            ),
+            (
+                lock(
+                    &[
+                        r#""~npm~has@1.0.0": [0,"has","sha512-H=="]"#,
+                        r#""~npm~left-pad@1.3.0": [0,"left-pad","sha512-REG=="]"#,
+                    ],
+                    &[
+                        r#""file~_d has": "prod 1.0.0 ~npm~has@1.0.0""#,
+                        r#""~npm~has@1.0.0 left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#,
+                    ],
+                ),
+                r#"{"dependencies":{"has":"1.0.0"}}"#,
+                "vendor_vlt_transitive_unsupported",
+            ),
+        ];
+        for (lock, pkg, code) in cases {
+            let tmp = project(&lock, pkg);
+            let refusals = run(tmp.path(), Ok(&empty)).await;
+            assert_eq!(refusals.len(), 1, "{code}: {refusals:?}");
+            let refusal = vlt_refusal_for(&refusals, PURL).unwrap();
+            assert_eq!(refusal.code, code, "{}", refusal.detail);
+            assert!(vlt_refusal_for(&refusals, "pkg:pypi/x@1.0.0").is_none());
+        }
+    }
+
+    #[tokio::test]
+    async fn the_ledger_decides_before_the_lock() {
+        let tmp = project(&direct_lock(), PKG);
+        let err = std::io::Error::other("corrupt state.json: synthetic");
+        let refusals = run(tmp.path(), Err(&err)).await;
+        assert_eq!(refusals[0].1.code, "vendor_state_unreadable");
+        assert_eq!(refusals[0].1.detail, "corrupt state.json: synthetic");
+
+        let pnpm = HashMap::from([(PURL.to_string(), entry(Some("pnpm")))]);
+        let refusals = run(tmp.path(), Ok(&pnpm)).await;
+        assert_eq!(refusals[0].1.code, "vendor_flavor_changed");
+        assert!(refusals[0].1.detail.contains("`pnpm`"), "{refusals:?}");
+
+        let vlt = HashMap::from([(PURL.to_string(), entry(Some("vlt")))]);
+        assert!(run(tmp.path(), Ok(&vlt)).await.is_empty());
+    }
+
+    #[tokio::test]
+    async fn the_installed_store_copy_is_checked() {
+        let tmp = project(&direct_lock(), PKG);
+        let store = tmp
+            .path()
+            .join("node_modules/.vlt/~npm~left-pad@1.3.0/node_modules/left-pad");
+        std::fs::create_dir_all(&store).unwrap();
+        let empty = HashMap::new();
+        for (pkg, code) in [
+            (
+                r#"{"name":"left-pad","bundleDependencies":["x"]}"#,
+                "vendor_bundled_deps_unsupported",
+            ),
+            (
+                r#"{"name":"left-pad","devDependencies":{},"devDependencies":{}}"#,
+                "vendor_lock_entry_unsupported",
+            ),
+        ] {
+            std::fs::write(store.join("package.json"), pkg).unwrap();
+            let refusals = run(tmp.path(), Ok(&empty)).await;
+            assert_eq!(refusals[0].1.code, code, "{refusals:?}");
+        }
+    }
+
+    #[tokio::test]
+    async fn a_root_socket_ignore_refuses_before_any_write() {
+        let Some(git) = socket_patch_core::utils::process::resolve_tool("git") else {
+            eprintln!("git not found; skipping");
+            return;
+        };
+        let tmp = project(&direct_lock(), PKG);
+        let status = std::process::Command::new(git)
+            .args(["init", "-q"])
+            .current_dir(tmp.path())
+            .status()
+            .unwrap();
+        assert!(status.success());
+        let empty = HashMap::new();
+        std::fs::write(tmp.path().join(".gitignore"), "dist/\nnode_modules\n").unwrap();
+        assert!(run(tmp.path(), Ok(&empty)).await.is_empty());
+        std::fs::write(tmp.path().join(".gitignore"), ".socket/\n").unwrap();
+        let refusals = run(tmp.path(), Ok(&empty)).await;
+        assert_eq!(refusals[0].1.code, "vendor_artifact_gitignored");
+        assert!(
+            refusals[0].1.detail.contains(".gitignore:1:.socket/"),
+            "{refusals:?}"
+        );
+        assert!(!tmp.path().join(".socket").exists());
+    }
+}
diff --git a/crates/socket-patch-cli/tests/apply_invariants.rs b/crates/socket-patch-cli/tests/apply_invariants.rs
index 1f2e553f..8e70e46a 100644
--- a/crates/socket-patch-cli/tests/apply_invariants.rs
+++ b/crates/socket-patch-cli/tests/apply_invariants.rs
@@ -684,3 +684,51 @@ fn unmatched_purl_exit_semantics_are_pinned() {
     );
     assert_eq!(v2["status"], "partialFailure", "{v2}");
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// A vlt-vendored purl: `apply` yields it to the vendor ledger (the
+/// committed dir artifact is what vlt installs), leaves `.socket/`
+/// byte-identical and patches nothing in place.
+#[test]
+fn apply_yields_a_vlt_vendored_purl_and_leaves_socket_untouched() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let before = snapshot_dir(&root.join(".socket"));
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(root, &["apply", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert!(v.to_string().contains("vendored"), "{v:#}");
+    assert_eq!(snapshot_dir(&root.join(".socket")), before);
+    assert_eq!(
+        std::fs::read(root.join("node_modules/left-pad/index.js")).unwrap(),
+        hosted::PRISTINE
+    );
+}
+
+fn snapshot_dir(dir: &Path) -> std::collections::BTreeMap<String, Vec<u8>> {
+    let mut out = std::collections::BTreeMap::new();
+    let mut stack = vec![dir.to_path_buf()];
+    while let Some(d) = stack.pop() {
+        for e in std::fs::read_dir(&d).unwrap() {
+            let e = e.unwrap();
+            if e.file_type().unwrap().is_dir() {
+                stack.push(e.path());
+            } else {
+                let rel = e
+                    .path()
+                    .strip_prefix(dir)
+                    .unwrap()
+                    .to_string_lossy()
+                    .to_string();
+                out.insert(rel, std::fs::read(e.path()).unwrap());
+            }
+        }
+    }
+    out
+}
diff --git a/crates/socket-patch-cli/tests/coverage_fix_scan_hosted_dryrun_vendored.rs b/crates/socket-patch-cli/tests/coverage_fix_scan_hosted_dryrun_vendored.rs
index 1315877d..7fcd503e 100644
--- a/crates/socket-patch-cli/tests/coverage_fix_scan_hosted_dryrun_vendored.rs
+++ b/crates/socket-patch-cli/tests/coverage_fix_scan_hosted_dryrun_vendored.rs
@@ -18,6 +18,9 @@
 
 use std::path::Path;
 
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+
 use serde_json::{json, Value};
 use serial_test::serial;
 use socket_patch_core::hash::git_sha256::compute_git_sha256_from_bytes;
@@ -219,7 +222,13 @@ fn run_cli(cwd: &Path, args: &[&str]) -> (i32, String, String) {
 fn vendor_cli(cwd: &Path) -> (i32, Value) {
     let (code, stdout, stderr) = run_cli(
         cwd,
-        &["vendor", "--json", "--offline", "--cwd", cwd.to_str().unwrap()],
+        &[
+            "vendor",
+            "--json",
+            "--offline",
+            "--cwd",
+            cwd.to_str().unwrap(),
+        ],
     );
     let env: Value = serde_json::from_str(&stdout).unwrap_or_else(|e| {
         panic!("vendor --json must emit an envelope: {e}\nstdout:\n{stdout}\nstderr:\n{stderr}")
@@ -442,10 +451,9 @@ async fn dry_run_refuses_unrevertable_vendored_state_like_the_wet_run() {
         "a refused purl must not also be promised a takeover: {doc:#}"
     );
     assert!(
-        doc["redirect"]["skipped"]
-            .as_array()
-            .is_some_and(|s| s.iter().any(|e| e["purl"] == PURL
-                && e["reason"] == "vendored_revert_failed")),
+        doc["redirect"]["skipped"].as_array().is_some_and(|s| s
+            .iter()
+            .any(|e| e["purl"] == PURL && e["reason"] == "vendored_revert_failed")),
         "the refusal must be accounted as skipped: {doc:#}"
     );
     assert_eq!(
@@ -640,3 +648,81 @@ async fn dry_run_package_lock_takeover_previews_the_npmrc_write() {
         "the wet run writes what the preview promised"
     );
 }
+
+/// vlt twin: the vendored `file` node and its edges are reverted to the
+/// registry node before the rewrite, so the dry run previews
+/// `redirected: 1` (never `redirect_vlt_entry_vendored`) and writes
+/// nothing; the wet run lands the same outcome.
+#[tokio::test]
+#[serial]
+async fn vlt_dry_run_over_vendored_project_previews_the_wet_takeover() {
+    use vlt_hosted_common as hosted;
+    let server = MockServer::start().await;
+    hosted::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let registry_lock = format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {}\n  }},\n  \
+         \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.3.0 {}\"\n  }}\n}}\n",
+        hosted::registry_node(hosted::TILDE_ID),
+        hosted::TILDE_ID
+    );
+    std::fs::write(root.join("vlt-lock.json"), &registry_lock).unwrap();
+    hosted::write_package_json(root);
+    hosted::install_importer(root, hosted::PRISTINE);
+    let socket = root.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    let mut record = hosted::view_body();
+    record.as_object_mut().unwrap().remove("purl");
+    record["exportedAt"] = json!("2026-01-01T00:00:00Z");
+    std::fs::write(
+        socket.join("manifest.json"),
+        json!({ "patches": { hosted::PURL: record } }).to_string(),
+    )
+    .unwrap();
+    std::fs::write(
+        socket
+            .join("blobs")
+            .join(hosted::git_sha256(hosted::PATCHED)),
+        hosted::PATCHED,
+    )
+    .unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = hosted::run_json(root, &["vendor", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    std::fs::remove_file(socket.join("manifest.json")).unwrap();
+    let vendored_lock = std::fs::read(root.join("vlt-lock.json")).unwrap();
+    let vendored_state = std::fs::read(root.join(".socket/vendor/state.json")).unwrap();
+    let vendored_pkg = std::fs::read(root.join("package.json")).unwrap();
+
+    let (_, doc) = hosted::scan_hosted(root, &server, &["--dry-run"], &[]);
+    let codes = hosted::warning_codes(&doc);
+    assert!(
+        codes.contains(&"redirect_would_revert_vendored".to_string()),
+        "{doc:#}"
+    );
+    assert!(
+        !codes.contains(&"redirect_vlt_entry_vendored".to_string()),
+        "{doc:#}"
+    );
+    assert_eq!(hosted::redirected(&doc), 1, "{doc:#}");
+    assert_eq!(
+        std::fs::read(root.join("vlt-lock.json")).unwrap(),
+        vendored_lock
+    );
+    assert_eq!(
+        std::fs::read(root.join("package.json")).unwrap(),
+        vendored_pkg
+    );
+    assert_eq!(
+        std::fs::read(root.join(".socket/vendor/state.json")).unwrap(),
+        vendored_state
+    );
+    assert!(!hosted::ledger_path(root).exists());
+
+    let (_, wet) = hosted::scan_hosted(root, &server, &[], &[]);
+    assert_eq!(hosted::redirected(&wet), 1, "{wet:#}");
+    let lock = hosted::read(root, "vlt-lock.json");
+    assert!(lock.contains(&hosted::artifact_url(&server)), "{lock}");
+    assert!(!lock.contains(".socket/vendor"), "{lock}");
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_get.rs b/crates/socket-patch-cli/tests/covgap_commands_get.rs
index 078647d3..be0c85d8 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_get.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_get.rs
@@ -52,6 +52,10 @@ async fn download_and_apply_patches(
 
 #[path = "common/mod.rs"]
 mod common;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
 
 const ORG: &str = "test-org";
 const UUID: &str = "11111111-1111-4111-8111-111111111111";
@@ -3057,3 +3061,63 @@ async fn human_vendored_search_all_downloads_failed_prints_empty_run_line() {
         "stdout={stdout}\nstderr={stderr}"
     );
 }
+
+/// The human vendored dry run of `get <purl>` on a vlt project the vlt
+/// preflight refuses (a transitive target) prints the code-tagged
+/// `[would-refuse]` line and writes nothing.
+#[tokio::test]
+async fn get_vendored_dry_run_human_prints_the_vlt_would_refuse_line() {
+    use vlt_hosted_common as hosted;
+    let server = wiremock::MockServer::start().await;
+    hosted::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::write_project(root);
+    let lock = format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+         \"~npm~has@1.0.0\": [0,\"has\",\"sha512-H==\"],\n    {}\n  }},\n  \"edges\": {{\n    \
+         \"file~_d has\": \"prod 1.0.0 ~npm~has@1.0.0\",\n    \"~npm~has@1.0.0 left-pad\": \
+         \"prod 1.3.0 {}\"\n  }}\n}}\n",
+        hosted::registry_node(hosted::TILDE_ID),
+        hosted::TILDE_ID
+    );
+    std::fs::write(root.join("vlt-lock.json"), &lock).unwrap();
+    std::fs::write(
+        root.join("package.json"),
+        "{\n  \"dependencies\": {\n    \"has\": \"1.0.0\"\n  }\n}\n",
+    )
+    .unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = server.uri();
+    let out = hosted::scrubbed_cli()
+        .args([
+            "get",
+            hosted::PURL,
+            "--mode",
+            "vendored",
+            "--dry-run",
+            "--yes",
+            "--cwd",
+            &cwd,
+            "--api-url",
+            &uri,
+            "--org",
+            hosted::ORG,
+            "--api-token",
+            "fake",
+        ])
+        .current_dir(root)
+        .output()
+        .unwrap();
+    let stdout = String::from_utf8_lossy(&out.stdout);
+    assert_eq!(out.status.code(), Some(0), "{stdout}");
+    assert!(
+        stdout.contains(&format!(
+            "[would-refuse] {} (vendor_vlt_transitive_unsupported)",
+            hosted::PURL
+        )),
+        "{stdout}"
+    );
+    assert_eq!(hosted::read(root, "vlt-lock.json"), lock);
+    assert!(!root.join(".socket").exists());
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_list.rs b/crates/socket-patch-cli/tests/covgap_commands_list.rs
index 480f7765..02176eee 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_list.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_list.rs
@@ -21,6 +21,10 @@ use wiremock::MockServer;
 
 #[path = "common/mod.rs"]
 mod common;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
 
 // ---------------------------------------------------------------------------
 // `--debug` provenance echoes (list.rs telemetry_credentials, config layer)
@@ -253,11 +257,8 @@ fn list_non_json_minimal_record_omits_empty_sections() {
     let tmp = tempfile::tempdir().unwrap();
     write_sparse_manifest(tmp.path());
 
-    let (code, stdout, stderr) = common::run_with_env(
-        tmp.path(),
-        &["list"],
-        &[("SOCKET_TELEMETRY_DISABLED", "1")],
-    );
+    let (code, stdout, stderr) =
+        common::run_with_env(tmp.path(), &["list"], &[("SOCKET_TELEMETRY_DISABLED", "1")]);
     assert_eq!(code, 0, "stderr:\n{stderr}");
     assert!(
         stdout.contains("Found 2 patches:"),
@@ -307,3 +308,22 @@ fn list_non_json_minimal_record_omits_empty_sections() {
         "an empty description must be omitted; got: {bare_block}"
     );
 }
+
+/// A vlt vendored entry (the `flavor: "vlt"` directory artifact) lists as a
+/// vendored record once no manifest holds it.
+#[test]
+fn list_json_labels_a_vlt_vendored_entry() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, false);
+    assert_eq!(
+        vlt_vendored::state(root)["entries"][vlt_hosted_common::PURL]["flavor"],
+        "vlt"
+    );
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = vlt_hosted_common::run_json(root, &["list", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let text = env.to_string();
+    assert!(text.contains(vlt_hosted_common::PURL), "{env:#}");
+    assert!(text.contains("vendored"), "{env:#}");
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_remove.rs b/crates/socket-patch-cli/tests/covgap_commands_remove.rs
index ab4c469f..0d4641a2 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_remove.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_remove.rs
@@ -18,6 +18,10 @@ use std::path::{Path, PathBuf};
 
 #[path = "common/mod.rs"]
 mod common;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
 
 /// Spawn `socket-patch remove` with the scrubbed env plus telemetry
 /// disabled; `env` entries land last so per-test injections survive.
@@ -1441,7 +1445,9 @@ fn remove_multi_variant_blast_radius_prints_expansion() {
     let (code, stdout, stderr) = run_remove(tmp.path(), &[base, "--yes", "--offline"], &[]);
     assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
     assert!(
-        stderr.contains(&format!("{base} matches 2 release variants — all will be removed:")),
+        stderr.contains(&format!(
+            "{base} matches 2 release variants — all will be removed:"
+        )),
         "the blast-radius line must reach stderr; got:\n{stderr}"
     );
     assert!(
@@ -1777,9 +1783,8 @@ mod pty {
         let mut child = pair.slave.spawn_command(cmd).expect("spawn in PTY");
         drop(pair.slave);
 
-        let reader_handle = crate::pty_io::PtyOutput::spawn(
-            pair.master.try_clone_reader().expect("clone reader"),
-        );
+        let reader_handle =
+            crate::pty_io::PtyOutput::spawn(pair.master.try_clone_reader().expect("clone reader"));
 
         let mut killer = child.clone_killer();
         std::thread::spawn(move || {
@@ -1794,7 +1799,10 @@ mod pty {
         let status = child.wait().expect("child.wait");
         drop(pair.master);
         let output = reader_handle.finish();
-        (status.exit_code() as i32, String::from_utf8_lossy(&output).to_string())
+        (
+            status.exit_code() as i32,
+            String::from_utf8_lossy(&output).to_string(),
+        )
     }
 
     /// Declining the hosted-only confirm prompt must cancel cleanly (exit
@@ -2065,3 +2073,31 @@ fn remove_ledger_only_entry_without_detached_flag_reverts() {
         "the lock file never outlives the run"
     );
 }
+
+/// `remove <purl>` of a vlt-vendored patch reverts the `file` node, its
+/// edges and package.json byte for byte and deletes the directory
+/// artifact.
+#[test]
+fn remove_reverts_a_vlt_vendored_entry() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = vlt_hosted_common::run_json(
+        root,
+        &["remove", vlt_hosted_common::PURL, "--cwd", &cwd],
+        &[],
+    );
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(
+        vlt_hosted_common::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert_eq!(
+        vlt_hosted_common::read(root, "package.json"),
+        vlt_vendored::PACKAGE_JSON
+    );
+    assert!(!root
+        .join(format!(".socket/vendor/npm/{}", vlt_hosted_common::UUID))
+        .exists());
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_repair_vendor.rs b/crates/socket-patch-cli/tests/covgap_commands_repair_vendor.rs
index 02e42671..b4dc42f2 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_repair_vendor.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_repair_vendor.rs
@@ -1855,7 +1855,9 @@ async fn repair_human_output_lines() {
     let (code, stdout, stderr) = run_cli_human(tmp.path(), &mock.uri(), &["repair"]);
     assert_eq!(code, 1, "stdout={stdout} stderr={stderr}");
     assert!(
-        stderr.contains(&format!("Error: Cannot repair vendored artifact for {PURL}")),
+        stderr.contains(&format!(
+            "Error: Cannot repair vendored artifact for {PURL}"
+        )),
         "the failure line is printed to stderr: {stderr}"
     );
 }
@@ -2724,3 +2726,34 @@ async fn repair_inventory_refresh_persist_failure_stays_loud() {
         "the member-verified rebuild is kept on disk"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// A lost ledger over a vlt dir artifact, offline and with nothing
+/// installed: no lock integrity anchors a dir, so the entry is restored
+/// fingerprint-less with `vendor_inventory_unverified` (never the live
+/// tree fingerprinted), stamped `flavor: "vlt"`, the artifact kept.
+#[test]
+fn repair_offline_restores_a_vlt_entry_without_a_fingerprint() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    std::fs::remove_file(root.join(".socket/vendor/state.json")).unwrap();
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) =
+        vlt_hosted_common::run_json(root, &["repair", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        env.to_string().contains("vendor_inventory_unverified"),
+        "{env:#}"
+    );
+    let entry = vlt_vendored::state(root)["entries"][vlt_hosted_common::PURL].clone();
+    assert_eq!(entry["flavor"], "vlt", "{entry:#}");
+    assert_eq!(entry["artifact"]["path"], vlt_vendored::rel(), "{entry:#}");
+    assert!(entry["artifact"]["fileInventory"].is_null(), "{entry:#}");
+    assert!(root.join(vlt_vendored::rel()).join("index.js").is_file());
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_scan_mod.rs b/crates/socket-patch-cli/tests/covgap_commands_scan_mod.rs
index 69c1fd40..532f076f 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_scan_mod.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_scan_mod.rs
@@ -32,6 +32,10 @@
 
 #[path = "common/pty_io.rs"]
 mod pty_io;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
 use std::path::{Path, PathBuf};
 use std::process::Command;
 
@@ -692,7 +696,9 @@ async fn scan_human_detail_fetch_failure_errors_once() {
     let (code, stdout, stderr) = run_scan_human(tmp.path(), &mock.uri(), &[]);
     assert_eq!(code, 1, "stdout={stdout}; stderr={stderr}");
     assert!(
-        stderr.contains(&format!("Error: could not fetch patch details for {purl}: ")),
+        stderr.contains(&format!(
+            "Error: could not fetch patch details for {purl}: "
+        )),
         "the terminal error names the purl and the cause; got {stderr:?}"
     );
     assert!(
@@ -751,7 +757,10 @@ async fn scan_human_partial_detail_fetch_failure_warns_per_package() {
         1,
         "one warning naming the failed purl; got {stderr:?}"
     );
-    assert!(!stderr.contains("Error:"), "a partial failure is not an error: {stderr:?}");
+    assert!(
+        !stderr.contains("Error:"),
+        "a partial failure is not an error: {stderr:?}"
+    );
     assert!(
         stdout.contains("[dry-run] Would download and apply 1 patch."),
         "the resolved package still goes through; got {stdout:?}"
@@ -798,7 +807,9 @@ async fn scan_human_skips_vendored_purls_without_downloading() {
     let (code, stdout, stderr) = run_scan_human(tmp.path(), &mock.uri(), &["--yes"]);
     assert_eq!(code, 0, "stdout={stdout}; stderr={stderr}");
     assert!(
-        stdout.contains(&format!("[skip] {purl} (vendored; run `socket-patch scan --mode vendored` to update it)")),
+        stdout.contains(&format!(
+            "[skip] {purl} (vendored; run `socket-patch scan --mode vendored` to update it)"
+        )),
         "the vendored skip line must name the purl and the remedy; got {stdout:?}"
     );
     assert!(
@@ -1285,7 +1296,8 @@ async fn scan_bare_human_non_tty_is_report_only() {
         "the per-patch preview still prints; got {stdout:?}"
     );
     assert!(
-        stdout.contains("To apply a single patch, run:") && stdout.contains("socket-patch get <CVE-ID>"),
+        stdout.contains("To apply a single patch, run:")
+            && stdout.contains("socket-patch get <CVE-ID>"),
         "the get-hint must print; got {stdout:?}"
     );
     assert!(
@@ -1495,8 +1507,7 @@ async fn scan_hosted_human_prints_table_updates_and_confirms() {
         "the summary must print in hosted mode; got {stdout:?}"
     );
     assert!(
-        stdout.contains("[UPDATE]")
-            && stdout.contains("1 package has a newer patch available."),
+        stdout.contains("[UPDATE]") && stdout.contains("1 package has a newer patch available."),
         "update detection must run in hosted mode; got {stdout:?}"
     );
     // `--mode hosted` is explicit intent: the new prompt auto-accepts on a
@@ -1604,9 +1615,8 @@ mod pty {
         let mut child = pair.slave.spawn_command(cmd).expect("spawn in PTY");
         drop(pair.slave);
 
-        let reader_handle = crate::pty_io::PtyOutput::spawn(
-            pair.master.try_clone_reader().expect("clone reader"),
-        );
+        let reader_handle =
+            crate::pty_io::PtyOutput::spawn(pair.master.try_clone_reader().expect("clone reader"));
 
         let mut killer = child.clone_killer();
         std::thread::spawn(move || {
@@ -1828,8 +1838,8 @@ mod pty {
         assert_eq!(code, 0, "the run must finish on its own; output:\n{output}");
         // The pty merges stdout and stderr; the envelope is the only `{…}`.
         let text = output.replace("\r\n", "\n");
-        let json_text = &text[text.find('{').expect("JSON envelope")
-            ..=text.rfind('}').expect("JSON envelope end")];
+        let json_text = &text
+            [text.find('{').expect("JSON envelope")..=text.rfind('}').expect("JSON envelope end")];
         let json: serde_json::Value = serde_json::from_str(json_text)
             .unwrap_or_else(|e| panic!("envelope must parse ({e}); got:\n{output}"));
         assert_eq!(json["status"], "success", "{json}");
@@ -1898,7 +1908,11 @@ mod pty {
             "screen:\n{}",
             screen.join("\n")
         );
-        for transient in ["Scanning packages", "Querying API", "Fetching patch details"] {
+        for transient in [
+            "Scanning packages",
+            "Querying API",
+            "Fetching patch details",
+        ] {
             assert!(
                 !screen.iter().any(|l| l.contains(transient)),
                 "transient status {transient:?} must not stay on screen:\n{}",
@@ -2337,7 +2351,10 @@ async fn scan_human_prune_runs_gc_even_when_no_patches_are_available() {
         "the dry run previews the GC; got {stdout:?}"
     );
     let manifest = std::fs::read_to_string(tmp.path().join(".socket/manifest.json")).unwrap();
-    assert!(manifest.contains("pkg:npm/gone@1.0.0"), "a preview must not prune");
+    assert!(
+        manifest.contains("pkg:npm/gone@1.0.0"),
+        "a preview must not prune"
+    );
 
     let (code, stdout, stderr) = run_scan_human(tmp.path(), &mock.uri(), &["--prune"]);
     assert_eq!(code, 0, "stdout={stdout}; stderr={stderr}");
@@ -2367,7 +2384,10 @@ fn scan_prune_on_empty_crawl_warns_the_gc_was_skipped() {
     assert!(stdout.contains("No packages found."), "{stdout:?}");
     let (code, stdout, stderr) = run_scan(tmp.path(), &["--prune", "--silent"]);
     assert_eq!(code, 0);
-    assert!(stdout.is_empty() && stderr.is_empty(), "{stdout:?} {stderr:?}");
+    assert!(
+        stdout.is_empty() && stderr.is_empty(),
+        "{stdout:?} {stderr:?}"
+    );
 }
 
 /// `--ecosystems` that filters everything out names the filter instead of
@@ -2474,7 +2494,11 @@ async fn scan_human_does_not_offer_an_already_recorded_patch() {
     );
     assert!(!stdout.contains("Patches to apply:"), "{stdout:?}");
     assert!(!stderr.contains("Download and apply"), "{stderr:?}");
-    assert_eq!(view_gets(&recorded(&mock).await), 0, "nothing is downloaded");
+    assert_eq!(
+        view_gets(&recorded(&mock).await),
+        0,
+        "nothing is downloaded"
+    );
 }
 
 /// The human table's PACKAGE column grows to fit the PURL (the old fixed
@@ -2515,3 +2539,146 @@ async fn scan_human_table_shows_full_purl_with_version() {
     let rule = stdout.lines().find(|l| l.starts_with("===")).unwrap();
     assert_eq!(rule.len(), header.len().max(row.len()), "{stdout}");
 }
+
+// ---------------------------------------------------------------------------
+// vlt vendored ledgers: the GC probe and the degraded-ledger `~` boundary
+// ---------------------------------------------------------------------------
+
+/// `scan --mode vendored --prune`: the lock-driven GC keeps the vlt entry
+/// `vlt-lock.json` still resolves to its dir (`vendored_entry_in_use` is
+/// structural: a `file` node under the uuid) and reclaims one it does not.
+#[tokio::test]
+async fn scan_prune_keeps_a_wired_vlt_uuid_and_sweeps_an_unwired_one() {
+    use vlt_hosted_common as hosted;
+    let server = MockServer::start().await;
+    hosted::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, false);
+    let unwired = "22222222-2222-4222-8222-222222222222";
+    let other = "pkg:npm/right-pad@1.0.0";
+    let other_rel = format!(".socket/vendor/npm/{unwired}/right-pad-1.0.0/node_modules/right-pad");
+    std::fs::create_dir_all(root.join(&other_rel)).unwrap();
+    std::fs::write(root.join(&other_rel).join("index.js"), "x\n").unwrap();
+    let mut state = vlt_vendored::state(root);
+    let mut entry = state["entries"][hosted::PURL].clone();
+    entry["basePurl"] = serde_json::json!(other);
+    entry["uuid"] = serde_json::json!(unwired);
+    entry["artifact"]["path"] = serde_json::json!(other_rel);
+    entry["artifact"]["fileInventory"] = serde_json::json!({ "index.js": "0" });
+    entry["wiring"] = serde_json::json!([]);
+    state["entries"][other] = entry;
+    std::fs::write(
+        root.join(".socket/vendor/state.json"),
+        serde_json::to_vec_pretty(&state).unwrap(),
+    )
+    .unwrap();
+
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = server.uri();
+    let (code, env, stderr) = hosted::run_json(
+        root,
+        &[
+            "scan",
+            "--mode",
+            "vendored",
+            "--prune",
+            "--yes",
+            "--cwd",
+            &cwd,
+            "--api-url",
+            &uri,
+            "--org",
+            hosted::ORG,
+            "--api-token",
+            "fake",
+        ],
+        &[],
+    );
+    assert!(code == 0 || code == 1, "{env:#}\n{stderr}");
+    let after = vlt_vendored::state(root);
+    assert!(
+        after["entries"][hosted::PURL].is_object(),
+        "the wired entry stays: {after:#}\n{env:#}"
+    );
+    assert!(root.join(vlt_vendored::rel()).join("index.js").is_file());
+    assert!(
+        after["entries"].get(other).is_none(),
+        "the unwired entry is reclaimed: {after:#}\n{env:#}"
+    );
+    assert!(
+        !root.join(format!(".socket/vendor/npm/{unwired}")).exists(),
+        "{env:#}"
+    );
+}
+
+/// The degraded-ledger overlap through the CLI: a redirect ledger holding
+/// only a vlt node edit (no records) keyed at a peer variant of the
+/// vendored package's DepID is superseded by the vendored wiring (warned
+/// and reconciled), at the `~` boundary only.
+#[tokio::test]
+async fn scan_vendored_warns_on_a_degraded_vlt_edit_at_the_tilde_boundary() {
+    use socket_patch_core::patch::redirect::{FileEdit, RedirectState};
+    use vlt_hosted_common as hosted;
+    for (key, overlaps) in [
+        ("left-pad@1.3.0~peer.2", true),
+        ("left-pad@1.3.00~peer.2", false),
+    ] {
+        let server = MockServer::start().await;
+        hosted::mock_all(&server).await;
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        vlt_vendored::vendored_project(root, false);
+        let mut ledger = RedirectState::new();
+        ledger.edits = vec![FileEdit {
+            path: "vlt-lock.json".to_string(),
+            kind: socket_patch_core::patch::redirect::vlt::KIND.to_string(),
+            action: "modified".to_string(),
+            key: Some(key.to_string()),
+            original: None,
+            new: None,
+        }];
+        std::fs::write(
+            hosted::ledger_path(root),
+            serde_json::to_string_pretty(&ledger).unwrap(),
+        )
+        .unwrap();
+        let cwd = root.to_str().unwrap().to_string();
+        let uri = server.uri();
+        let (_, env, stderr) = hosted::run_json(
+            root,
+            &[
+                "scan",
+                "--mode",
+                "vendored",
+                "--yes",
+                "--cwd",
+                &cwd,
+                "--api-url",
+                &uri,
+                "--org",
+                hosted::ORG,
+                "--api-token",
+                "fake",
+            ],
+            &[],
+        );
+        let text = env.to_string();
+        let warned = text.contains("vendor_supersedes_redirect");
+        assert_eq!(warned, overlaps, "{key}: {env:#}\n{stderr}");
+        let edits = std::fs::read(hosted::ledger_path(root))
+            .ok()
+            .map(|b| {
+                serde_json::from_slice::<RedirectState>(&b)
+                    .unwrap()
+                    .edits
+                    .len()
+            })
+            .unwrap_or(0);
+        assert_eq!(
+            edits,
+            usize::from(!overlaps),
+            "{key}: the reconciliation drops exactly the claimed edit: {env:#}"
+        );
+    }
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_scan_vendor_flow.rs b/crates/socket-patch-cli/tests/covgap_commands_scan_vendor_flow.rs
index b98c05ab..e0e6d697 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_scan_vendor_flow.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_scan_vendor_flow.rs
@@ -659,3 +659,47 @@ async fn scan_vendor_staging_error_interactive_prints_error_line() {
         "an aborted step leaves no .socket/ behind; stdout={stdout}; stderr={stderr}"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// The dry-run preview over a vlt project already vendored at the offered
+/// uuid: the lock's `file` node is ours, so the vlt preflight exempts it
+/// and the record reads `already_vendored`, never `would_refuse`.
+#[tokio::test]
+async fn scan_vendor_dry_run_reports_already_vendored_for_vlt() {
+    use vlt_hosted_common as hosted;
+    let server = MockServer::start().await;
+    hosted::mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, false);
+    let lock = hosted::read(root, "vlt-lock.json");
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = server.uri();
+    let (code, env, stderr) = hosted::run_json(
+        root,
+        &[
+            "scan",
+            "--mode",
+            "vendored",
+            "--dry-run",
+            "--yes",
+            "--cwd",
+            &cwd,
+            "--api-url",
+            &uri,
+            "--org",
+            hosted::ORG,
+            "--api-token",
+            "fake",
+        ],
+        &[],
+    );
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let rec = &env["vendor"]["patches"][0];
+    assert_eq!(rec["action"], "already_vendored", "{env:#}");
+    assert_eq!(hosted::read(root, "vlt-lock.json"), lock);
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_vendor.rs b/crates/socket-patch-cli/tests/covgap_commands_vendor.rs
index 5785b504..694abed0 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_vendor.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_vendor.rs
@@ -1800,3 +1800,38 @@ async fn pdm_relock_rescan_under_outage_rewires_the_committed_wheel() {
         "rollback restores the relocked bytes"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// The vlt twin of the pnpm committables line: a vlt-wired run names
+/// package.json (and workspace package.json files), vlt-lock.json and
+/// `.socket/vendor/`, points CI at `vlt ci`, and names `vlt install` as
+/// the reinstall; `vendor --revert` names `vlt install` too.
+#[test]
+fn human_vlt_vendor_names_vlt_committables_and_vlt_install() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::write_project(root);
+    vlt_vendored::seed_manifest(root);
+    let cwd = root.to_str().unwrap();
+    let (code, stdout, stderr) = run_cli(root, &["vendor", "--offline", "--cwd", cwd], &[]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert!(
+        stdout.contains(
+            "Commit package.json (and workspace package.json files), vlt-lock.json and \
+             .socket/vendor/ (the .gitignore there re-includes the payload and keeps vlt's \
+             node_modules links out of git); CI: `vlt ci`."
+        ),
+        "{stdout}"
+    );
+    assert!(
+        stdout.contains("Run `vlt install` to update the installed tree"),
+        "{stdout}"
+    );
+    let (code, stdout, stderr) = run_cli(root, &["vendor", "--revert", "--cwd", cwd], &[]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert!(stdout.contains("Run `vlt install` to resync"), "{stdout}");
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
index ba7e2b57..6c3f2769 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
@@ -30,8 +30,16 @@
 //!   registry keeps the hosted ref off the lockfile basis: only an installed
 //!   tree whose every copy verifies attests.
 //!
-//! The vendored cells (committed dir artifact, tampered, mismatch, offline,
-//! unwired) run `vendor --offline` and live with the vendored CLI.
+//! * vendored — the REAL `vendor --offline` wires the `lockfileVersion` 1
+//!   and 0 locks to the committed directory artifact; with the manifest,
+//!   the ledgers and `node_modules` deleted:
+//!   - the committed dir attests `(vendored)` from the lock + patch API;
+//!   - a record naming another package is omitted (`record_mismatch`);
+//!   - `--offline` is omitted (`record_unavailable`);
+//!   - a tampered committed member is omitted (`vendor_hash_mismatch`);
+//!   - the wiring reverted with the ledger and artifact left behind is
+//!     `vendor_unwired`, also under `--no-verify`;
+//!   and the shared matrix runs over a vendored checkout.
 
 use std::path::{Path, PathBuf};
 
@@ -45,7 +53,8 @@ mod vlt_vex;
 use hosted::{Era, NAME, PATCHED, PRISTINE, PURL, UUID, VERSION};
 use vlt_vex::{
     assert_absent, assert_attested, assert_not_attested, binary, git_sha256, patch_view, run_vex,
-    run_vlt_vex_matrix, strip_ledgers, Marker, PatchApi, VexRun, VltMode, VltVexCase, VLT_LOCK,
+    run_vlt_vex_matrix, strip_ledgers, strip_manifest, Marker, PatchApi, VexRun, VltMode,
+    VltVexCase, VLT_LOCK,
 };
 
 const VULNS: &[(&str, &[&str])] = &[(hosted::GHSA, &["CVE-2026-4242"])];
@@ -246,6 +255,7 @@ fn hosted_vlt_checkout_runs_the_shared_manifestless_matrix() {
         files: vec![("package/index.js".to_string(), git_sha256(PATCHED))],
         vulns: VULNS,
         registry_lock: p.registry_lock.clone().into_bytes(),
+        registry_manifests: Vec::new(),
         patch_server_url: Some(p.origin.clone()),
     };
     run_vlt_vex_matrix(&p.root, tmp.path(), &case, |checkout| {
@@ -294,3 +304,155 @@ fn a_same_version_alias_registry_instance_needs_every_copy_to_verify() {
     assert_eq!(out.code, Some(0), "every copy patched: {out}");
     assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
 }
+
+// ── vendored ─────────────────────────────────────────────────────────────
+
+const PACKAGE_JSON: &str =
+    "{\n  \"name\": \"consumer\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+/// A registry lock of `era` with the root importer edge the vendored
+/// backend rewires.
+fn vendorable_lock(era: Era) -> String {
+    let id = era.dep_id();
+    let (version, importer) = match era {
+        Era::V1 => ("1", "file~_d"),
+        _ => ("0", "file·."),
+    };
+    format!(
+        "{{\n  \"lockfileVersion\": {version},\n  \"options\": {{}},\n  \"nodes\": {{\n    {}\n  \
+         }},\n  \"edges\": {{\n    \"{importer} left-pad\": \"prod 1.3.0 {id}\"\n  }}\n}}\n",
+        hosted::registry_node(id)
+    )
+}
+
+fn vendored_rel() -> String {
+    format!(".socket/vendor/npm/{UUID}/{NAME}-{VERSION}/node_modules/{NAME}")
+}
+
+/// `vendor --offline` over a pristine importer copy; returns the pristine
+/// lock.
+fn vendored_project(root: &Path, era: Era) -> String {
+    std::fs::create_dir_all(root.join(".socket/blobs")).unwrap();
+    let lock = vendorable_lock(era);
+    std::fs::write(root.join(VLT_LOCK), &lock).unwrap();
+    std::fs::write(root.join("package.json"), PACKAGE_JSON).unwrap();
+    hosted::install_importer(root, PRISTINE);
+    let mut record = view(UUID, PURL);
+    record.as_object_mut().unwrap().remove("purl");
+    record["exportedAt"] = serde_json::json!("2026-01-01T00:00:00Z");
+    std::fs::write(
+        root.join(".socket/manifest.json"),
+        serde_json::json!({ "patches": { PURL: record } }).to_string(),
+    )
+    .unwrap();
+    std::fs::write(
+        root.join(".socket/blobs").join(git_sha256(PATCHED)),
+        PATCHED,
+    )
+    .unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = hosted::run_json(root, &["vendor", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "vendor: {env:#}\n{stderr}");
+    assert_eq!(env["summary"]["applied"], 1, "vendor: {env:#}");
+    assert!(root.join(vendored_rel()).join("index.js").is_file());
+    lock
+}
+
+/// vlt's install of the vendored lock: the importer copy is the vendored
+/// dir (a copy, so the cell runs everywhere).
+fn install_vendored(root: &Path) {
+    let dest = root.join("node_modules").join(NAME);
+    let _ = std::fs::remove_dir_all(&dest);
+    std::fs::create_dir_all(&dest).unwrap();
+    for file in ["package.json", "index.js"] {
+        std::fs::copy(root.join(vendored_rel()).join(file), dest.join(file)).unwrap();
+    }
+}
+
+#[test]
+fn vendored_every_vlt_era_manifestless_evidence_cells() {
+    let tmp = tempfile::tempdir().unwrap();
+    let bin = binary();
+    for (era, tag) in [(Era::V1, "v1"), (Era::V0, "v0")] {
+        let root = tmp.path().join(format!("vendored-{tag}"));
+        std::fs::create_dir_all(&root).unwrap();
+        let pristine_lock = vendored_project(&root, era);
+        let wired_lock = hosted::read(&root, VLT_LOCK);
+        let wired_pkg = hosted::read(&root, "package.json");
+        let state = std::fs::read(root.join(".socket/vendor/state.json")).unwrap();
+        strip_manifest(&root);
+        strip_ledgers(&root);
+        std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+
+        let api = api_with(UUID, PURL);
+        let out = run_vex(&bin, &root, &VexRun::online(&api));
+        assert_eq!(out.code, Some(0), "[{tag}] vendored: {out}");
+        assert_attested(out.doc(), PURL, UUID, Marker::Vendored, VULNS);
+
+        install_vendored(&root);
+        let out = run_vex(&bin, &root, &VexRun::online(&api));
+        assert_eq!(out.code, Some(0), "[{tag}] installed: {out}");
+        assert_attested(out.doc(), PURL, UUID, Marker::Vendored, VULNS);
+        std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+
+        let bad = api_with(UUID, "pkg:npm/right-pad@1.3.0");
+        let out = run_vex(&bin, &root, &VexRun::online(&bad));
+        assert_eq!(out.code, Some(1), "[{tag}] mismatch: {out}");
+        assert_not_attested(&out.envelope, PURL, "record_mismatch");
+
+        let out = run_vex(&bin, &root, &VexRun::offline());
+        assert_eq!(out.code, Some(1), "[{tag}] offline: {out}");
+        assert_not_attested(&out.envelope, PURL, "record_unavailable");
+
+        let member = root.join(vendored_rel()).join("index.js");
+        std::fs::write(&member, TAMPERED).unwrap();
+        let out = run_vex(&bin, &root, &VexRun::online(&api));
+        assert_eq!(out.code, Some(1), "[{tag}] tampered: {out}");
+        assert_not_attested(&out.envelope, PURL, "vendor_hash_mismatch");
+        assert_absent(out.doc.as_ref(), PURL);
+        std::fs::write(&member, PATCHED).unwrap();
+
+        std::fs::write(root.join(".socket/vendor/state.json"), &state).unwrap();
+        std::fs::write(root.join(VLT_LOCK), &pristine_lock).unwrap();
+        std::fs::write(root.join("package.json"), PACKAGE_JSON).unwrap();
+        for no_verify in [false, true] {
+            let out = run_vex(
+                &bin,
+                &root,
+                &VexRun {
+                    no_verify,
+                    ..VexRun::online(&api)
+                },
+            );
+            assert_eq!(out.code, Some(1), "[{tag}] unwired: {out}");
+            assert_not_attested(&out.envelope, PURL, "vendor_unwired");
+            assert_absent(out.doc.as_ref(), PURL);
+        }
+        assert_ne!(wired_lock, pristine_lock);
+        assert_ne!(wired_pkg, PACKAGE_JSON);
+        eprintln!("vendored vlt {tag}: all cells OK");
+    }
+}
+
+#[test]
+fn vendored_vlt_checkout_runs_the_shared_manifestless_matrix() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path().join("project");
+    std::fs::create_dir_all(&root).unwrap();
+    let registry_lock = vendored_project(&root, Era::V1);
+    let case = VltVexCase {
+        tag: "hermetic-vendored-v1",
+        mode: VltMode::Vendored,
+        purl: PURL,
+        uuid: UUID,
+        files: vec![("package/index.js".to_string(), git_sha256(PATCHED))],
+        vulns: VULNS,
+        registry_lock: registry_lock.into_bytes(),
+        registry_manifests: vec![("package.json".to_string(), PACKAGE_JSON.as_bytes().to_vec())],
+        patch_server_url: None,
+    };
+    run_vlt_vex_matrix(&root, tmp.path(), &case, |checkout| {
+        assert!(!checkout.join("node_modules").exists());
+        install_vendored(checkout);
+    });
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vex_vendor.rs b/crates/socket-patch-cli/tests/e2e_vex_vendor.rs
index f5550a65..da40701c 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_vendor.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_vendor.rs
@@ -2312,3 +2312,70 @@ fn rejected_vendored_wiring_never_keeps_a_vendor_ledger_alive() {
         }
     }
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// `vex` over a vlt directory artifact: attested `(vendored)` with nothing
+/// installed, from the ledger's inventory; a tampered committed member is
+/// omitted with `vendor_hash_mismatch`.
+#[test]
+fn vex_attests_a_vlt_vendored_dir_and_omits_a_tampered_one() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    let out = root.join("vex.json");
+    let cwd = root.to_str().unwrap().to_string();
+    let out_s = out.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &[
+            "vex",
+            "--offline",
+            "--product",
+            "pkg:npm/app@1.0.0",
+            "--cwd",
+            &cwd,
+            "--output",
+            &out_s,
+        ],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    let doc = std::fs::read_to_string(&out).unwrap();
+    assert!(
+        doc.contains(hosted::PURL) && doc.contains("(vendored)"),
+        "{doc}"
+    );
+
+    std::fs::write(
+        root.join(vlt_vendored::rel()).join("index.js"),
+        "tampered\n",
+    )
+    .unwrap();
+    let _ = std::fs::remove_file(&out);
+    let (code, v, _) = hosted::run_json(
+        root,
+        &[
+            "vex",
+            "--offline",
+            "--product",
+            "pkg:npm/app@1.0.0",
+            "--cwd",
+            &cwd,
+            "--output",
+            &out_s,
+        ],
+        &[],
+    );
+    assert_ne!(code, 0, "{v:#}");
+    assert!(v.to_string().contains("vendor_hash_mismatch"), "{v:#}");
+    assert!(
+        !hosted::vex_attests(&out),
+        "a tampered dir is never attested"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/get_modes_e2e.rs b/crates/socket-patch-cli/tests/get_modes_e2e.rs
index 23177bf2..e99a8f0a 100644
--- a/crates/socket-patch-cli/tests/get_modes_e2e.rs
+++ b/crates/socket-patch-cli/tests/get_modes_e2e.rs
@@ -1103,6 +1103,104 @@ async fn get_save_only_agent_ignores_bun_preflight() {
     );
 }
 
+// ---------------------------------------------------------------------------
+// vlt vendored-mode preflight through `get` (DESIGN §4.6)
+// ---------------------------------------------------------------------------
+
+const VLT_SYNC_CODE: &str = "vendor_vlt_lock_out_of_sync";
+
+/// `write_project` re-locked by vlt, with package.json edited afterwards
+/// (`^1.0.0` against the lock's `1.0.0` edge): the vlt backend refuses it,
+/// and so must every vendored `get` before fetching or writing anything.
+fn write_vlt_out_of_sync_project(root: &Path) {
+    write_project(root);
+    std::fs::remove_file(root.join("package-lock.json")).unwrap();
+    std::fs::write(
+        root.join("package.json"),
+        format!(r#"{{ "name": "consumer", "dependencies": {{ "{NAME}": "^1.0.0" }} }}"#),
+    )
+    .unwrap();
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+             \"~npm~{NAME}@1.0.0\": [0,\"{NAME}\",\"sha512-UPSTREAMupstream==\"]\n  }},\n  \
+             \"edges\": {{\n    \"file~_d {NAME}\": \"prod 1.0.0 ~npm~{NAME}@1.0.0\"\n  }}\n}}\n"
+        ),
+    )
+    .unwrap();
+}
+
+#[tokio::test]
+async fn get_vendored_vlt_refusal_visible_under_silent() {
+    let server = MockServer::start().await;
+    mock_view(&server, UUID1, PURL1).await;
+    mock_by_package(&server).await;
+    for (label, ident) in [("purl", PURL1), ("uuid", UUID1)] {
+        let tmp = tempfile::tempdir().unwrap();
+        write_vlt_out_of_sync_project(tmp.path());
+        let lock_before = std::fs::read(tmp.path().join("vlt-lock.json")).unwrap();
+        let (code, stdout, stderr) = run_get(
+            tmp.path(),
+            &server.uri(),
+            &[
+                ident,
+                "--mode",
+                "vendored",
+                "--vendor-source",
+                "build",
+                "--silent",
+            ],
+        );
+        assert_eq!(code, 1, "{label}: stdout={stdout}\nstderr={stderr}");
+        assert!(stdout.trim().is_empty(), "{label}: {stdout}");
+        assert!(stderr.contains(VLT_SYNC_CODE), "{label}: {stderr}");
+        assert_eq!(
+            std::fs::read(tmp.path().join("vlt-lock.json")).unwrap(),
+            lock_before,
+            "{label}"
+        );
+        assert!(!tmp.path().join(".socket/vendor").exists(), "{label}");
+    }
+}
+
+#[tokio::test]
+async fn get_vendored_dry_run_reports_vlt_refusal() {
+    let server = MockServer::start().await;
+    mock_view(&server, UUID1, PURL1).await;
+    mock_by_package(&server).await;
+    for (label, ident) in [("purl", PURL1), ("uuid", UUID1)] {
+        let tmp = tempfile::tempdir().unwrap();
+        write_vlt_out_of_sync_project(tmp.path());
+        let (code, stdout, stderr) = run_get(
+            tmp.path(),
+            &server.uri(),
+            &[ident, "--mode", "vendored", "--dry-run", "--json"],
+        );
+        assert_eq!(code, 0, "{label}: stdout={stdout}\nstderr={stderr}");
+        let v = parse_single_json_doc(&stdout);
+        let rec = &v["vendor"]["patches"][0];
+        assert_eq!(rec["action"], "would_refuse", "{label}: {v}");
+        assert_eq!(rec["errorCode"], VLT_SYNC_CODE, "{label}: {v}");
+        assert!(!tmp.path().join(".socket").exists(), "{label}");
+    }
+}
+
+#[tokio::test]
+async fn get_save_only_agent_ignores_vlt_preflight() {
+    let server = MockServer::start().await;
+    mock_view(&server, UUID1, PURL1).await;
+    mock_by_package(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_out_of_sync_project(tmp.path());
+    let (code, stdout, stderr) =
+        run_get(tmp.path(), &server.uri(), &[PURL1, "--save-only", "--json"]);
+    assert_eq!(code, 0, "stdout={stdout}\nstderr={stderr}");
+    let v = parse_single_json_doc(&stdout);
+    assert_eq!(v["patches"][0]["action"], "added", "{v}");
+    assert!(v["patches"][0].get("errorCode").is_none(), "{v}");
+}
+
 /// Manifest-less VEX over what `get <uuid> --mode hosted` and `get <uuid>
 /// --mode vendored` commit for an npm project: a checkout of package.json,
 /// the lock and `.socket/` (no manifest — hosted never writes one, vendored's
diff --git a/crates/socket-patch-cli/tests/in_process_get_modes.rs b/crates/socket-patch-cli/tests/in_process_get_modes.rs
index 0a493c4c..1b30aa30 100644
--- a/crates/socket-patch-cli/tests/in_process_get_modes.rs
+++ b/crates/socket-patch-cli/tests/in_process_get_modes.rs
@@ -949,3 +949,77 @@ async fn get_ghsa_unknown_ecosystem_is_never_narrowed() {
         "an unknown-ecosystem purl must be kept, never claimed not-installed"
     );
 }
+
+/// A vlt project: `getmodes-pkg@1.0.0` direct from the root in
+/// `vlt-lock.json`, installed in vlt's store; `spec` is the package.json
+/// range (the lock's edge says `1.0.0`).
+fn write_vlt_project(root: &Path, spec: &str) {
+    std::fs::write(
+        root.join("package.json"),
+        format!("{{\n  \"name\": \"consumer\",\n  \"dependencies\": {{\n    \"{NAME}\": \"{spec}\"\n  }}\n}}\n"),
+    )
+    .unwrap();
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+             \"~npm~{NAME}@1.0.0\": [0,\"{NAME}\",\"sha512-UPSTREAMupstream==\"]\n  }},\n  \
+             \"edges\": {{\n    \"file~_d {NAME}\": \"prod 1.0.0 ~npm~{NAME}@1.0.0\"\n  }}\n}}\n"
+        ),
+    )
+    .unwrap();
+    let store = root.join(format!(
+        "node_modules/.vlt/~npm~{NAME}@1.0.0/node_modules/{NAME}"
+    ));
+    std::fs::create_dir_all(&store).unwrap();
+    std::fs::write(
+        store.join("package.json"),
+        format!(r#"{{ "name": "{NAME}", "version": "1.0.0" }}"#),
+    )
+    .unwrap();
+    std::fs::write(store.join("index.js"), BEFORE_BYTES).unwrap();
+}
+
+/// `get <uuid> --mode vendored` on a vlt project vendors the directory
+/// artifact; on an out-of-sync package.json the vlt preflight refuses it
+/// with nothing written, and agent mode (`get` without `--mode`) never runs
+/// that preflight.
+#[tokio::test]
+#[serial]
+async fn get_uuid_vendored_vlt_vendors_refuses_and_agent_bypasses() {
+    let server = MockServer::start().await;
+    mock_view(&server, UUID1, PURL1).await;
+
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), "1.0.0");
+    let mut args = get_args(UUID1, tmp.path(), server.uri());
+    args.mode = Some(ScanMode::Vendored);
+    assert_eq!(socket_patch_cli::commands::get::run(args).await, 0);
+    let rel = format!(".socket/vendor/npm/{UUID1}/{NAME}-1.0.0/node_modules/{NAME}");
+    assert_eq!(
+        std::fs::read(tmp.path().join(&rel).join("index.js")).unwrap(),
+        AFTER_BYTES
+    );
+    let lock = std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap();
+    assert!(lock.contains(&format!("file:./{rel}")), "{lock}");
+
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_project(tmp.path(), "^1.0.0");
+    let lock = std::fs::read(tmp.path().join("vlt-lock.json")).unwrap();
+    let mut args = get_args(UUID1, tmp.path(), server.uri());
+    args.mode = Some(ScanMode::Vendored);
+    assert_eq!(socket_patch_cli::commands::get::run(args).await, 1);
+    assert_eq!(
+        std::fs::read(tmp.path().join("vlt-lock.json")).unwrap(),
+        lock
+    );
+    assert!(!tmp.path().join(".socket").exists());
+
+    let args = get_args(UUID1, tmp.path(), server.uri());
+    assert_eq!(socket_patch_cli::commands::get::run(args).await, 0);
+    assert_eq!(read_manifest_purls(tmp.path()), vec![PURL1.to_string()]);
+    let store = tmp.path().join(format!(
+        "node_modules/.vlt/~npm~{NAME}@1.0.0/node_modules/{NAME}"
+    ));
+    assert_eq!(std::fs::read(store.join("index.js")).unwrap(), AFTER_BYTES);
+}
diff --git a/crates/socket-patch-cli/tests/in_process_remove_repair_lifecycle.rs b/crates/socket-patch-cli/tests/in_process_remove_repair_lifecycle.rs
index 7ad18fa4..2f286618 100644
--- a/crates/socket-patch-cli/tests/in_process_remove_repair_lifecycle.rs
+++ b/crates/socket-patch-cli/tests/in_process_remove_repair_lifecycle.rs
@@ -871,3 +871,55 @@ async fn repair_telemetry_attributed_to_env_credentials() {
         "repair telemetry must use the env-resolved token/org (org-scoped endpoint)"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// vlt lifecycle in-process: `repair` rebuilds a deleted directory artifact
+/// offline from the installed copy (the `<uuid>/.gitignore` with it), and
+/// `remove` then reverts the vlt wiring and deletes the artifact.
+#[tokio::test]
+#[serial]
+async fn vlt_repair_rebuilds_the_dir_then_remove_reverts_it() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let uuid_dir = root.join(format!(".socket/vendor/npm/{}", hosted::UUID));
+    std::fs::remove_dir_all(&uuid_dir).unwrap();
+
+    let mut args = make_repair_args(root, "diff");
+    args.common.offline = true;
+    assert_eq!(repair_run(args).await, 0);
+    assert_eq!(
+        std::fs::read(root.join(vlt_vendored::rel()).join("index.js")).unwrap(),
+        hosted::PATCHED
+    );
+    assert!(uuid_dir.join(".gitignore").is_file());
+
+    let args = RemoveArgs {
+        common: socket_patch_cli::args::GlobalArgs {
+            cwd: root.to_path_buf(),
+            manifest_path: ".socket/manifest.json".to_string(),
+            yes: true,
+            json: true,
+            offline: true,
+            ..socket_patch_cli::args::GlobalArgs::default()
+        },
+        identifier: hosted::PURL.to_string(),
+        skip_rollback: false,
+        preserve_state: false,
+    };
+    assert_eq!(remove_run(args).await, 0);
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert_eq!(
+        hosted::read(root, "package.json"),
+        vlt_vendored::PACKAGE_JSON
+    );
+    assert!(!uuid_dir.exists());
+}
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_vendored.rs b/crates/socket-patch-cli/tests/in_process_rollback_vendored.rs
index 10e14d1d..58774101 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_vendored.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_vendored.rs
@@ -707,3 +707,59 @@ async fn rollbacks_stop_manifest_less_attestation() {
         }
     }
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// vlt: `rollback --preserve-state` unwires the lock and package.json but
+/// keeps the directory artifact and the ledger entry; a re-vendor re-wires
+/// from the live registry lock; an unscoped rollback then removes it all.
+#[test]
+fn vlt_preserve_state_rollback_then_revendor_then_rollback() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let wired = hosted::read(root, "vlt-lock.json");
+    let state = std::fs::read(root.join(".socket/vendor/state.json")).unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &["rollback", "--preserve-state", "--offline", "--cwd", &cwd],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert_eq!(
+        hosted::read(root, "package.json"),
+        vlt_vendored::PACKAGE_JSON
+    );
+    assert!(root.join(vlt_vendored::rel()).join("index.js").is_file());
+    assert_eq!(
+        std::fs::read(root.join(".socket/vendor/state.json")).unwrap(),
+        state
+    );
+
+    let (code, v, stderr) = hosted::run_json(root, &["vendor", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        wired,
+        "re-wired from the live lock"
+    );
+
+    let (code, v, stderr) = hosted::run_json(root, &["rollback", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert!(!root
+        .join(format!(".socket/vendor/npm/{}", hosted::UUID))
+        .exists());
+}
diff --git a/crates/socket-patch-cli/tests/in_process_vendor.rs b/crates/socket-patch-cli/tests/in_process_vendor.rs
index 54ddc426..a4edae7e 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor.rs
@@ -1,7 +1,8 @@
 //! In-process + envelope contract tests for `socket-patch vendor` (npm
 //! backend, plus the golang apply-yields-to-vendor handshake, plus the gem
 //! backend's `scan --vendor` arm — the one route into the vendor engine no
-//! gem project had ever been driven through).
+//! gem project had ever been driven through). The vlt legs live in
+//! `in_process_vendor/vlt.rs`.
 //!
 //! The lifecycle tests call `socket_patch_cli::commands::vendor::run(args)`
 //! directly (the in-process convention of `in_process_cargo_apply.rs` /
@@ -31,6 +32,10 @@ use socket_patch_core::hash::git_sha256::compute_git_sha256_from_bytes;
 mod npm_e2e_common;
 #[path = "vex_e2e_common/mod.rs"]
 mod vex_e2e_common;
+#[path = "in_process_vendor/vlt.rs"]
+mod vlt;
+#[path = "vlt_vendor_common/mod.rs"]
+mod vlt_vendor;
 
 /// Canonical-grammar patch UUID — the vendor path layer validates the uuid
 /// path level fail-closed, so fixtures must use the real shape.
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
new file mode 100644
index 00000000..fbc84f72
--- /dev/null
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -0,0 +1,1178 @@
+//! vlt vendored legs (DESIGN §4, §8.2): `vendor` through the scrubbed
+//! binary against the real-vlt captures (byte oracles for the wired lock
+//! and package.json files), the synthetic shapes the captures lack, every
+//! lock-, manifest- and ledger-decidable refusal, the patch-service fast
+//! path, the committed-dir auto-fetch, and the revert inverses.
+
+use std::path::Path;
+
+use serde_json::{json, Value};
+use wiremock::matchers::{method, path};
+use wiremock::{Mock, MockServer, ResponseTemplate};
+
+use crate::vlt_vendor::*;
+
+// ── the real-vlt captures ────────────────────────────────────────────────
+
+/// Vendor one capture case: a refusal case must fail with its code and
+/// leave the project untouched; a wired case must write exactly the lock
+/// and package.json files real vlt kept stable through `vlt ci`, re-run
+/// in sync, and revert byte-exact.
+fn run_capture_case(vlt: &str, name: &str) {
+    let case = cases(vlt)
+        .into_iter()
+        .find(|c| c.name == name)
+        .unwrap_or_else(|| panic!("no capture case {vlt}/{name}"));
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    capture_project(root, &case);
+    let tracked = ["vlt-lock.json", "package.json", "packages/a/package.json"];
+    let before: Vec<Option<Vec<u8>>> = tracked
+        .iter()
+        .map(|f| std::fs::read(root.join(f)).ok())
+        .collect();
+    let what = format!("{vlt}/{name}");
+
+    let (code, env, stderr) = vendor(root, &[]);
+    if let Some(refusal) = &case.refusal {
+        assert_eq!(code, 1, "[{what}] {env:#}\n{stderr}");
+        assert_eq!(failure(&env, &case.purl).0, *refusal, "[{what}] {env:#}");
+        for (f, b) in tracked.iter().zip(&before) {
+            assert_eq!(
+                &std::fs::read(root.join(f)).ok(),
+                b,
+                "[{what}] {f} untouched"
+            );
+        }
+        assert!(
+            !root.join(".socket/vendor/npm").exists(),
+            "[{what}] nothing staged"
+        );
+        return;
+    }
+    assert_eq!(code, 0, "[{what}] {env:#}\n{stderr}");
+    assert_eq!(env["summary"]["applied"], 1, "[{what}] {env:#}");
+    let (pkg_name, pkg_version) = case.coords();
+    let rel = rel_dir(FIXTURE_UUID, &pkg_name, &pkg_version);
+    let churn = std::fs::read_to_string(case.dir().join("case.json"))
+        .unwrap()
+        .contains("\"ciChurn\": [\n    [");
+    if !churn {
+        for f in tracked {
+            let expected = case.dir().join("expected").join(f);
+            if let Ok(want) = std::fs::read(&expected) {
+                assert_eq!(
+                    String::from_utf8_lossy(&std::fs::read(root.join(f)).unwrap()),
+                    String::from_utf8_lossy(&want),
+                    "[{what}] {f} must be the bytes real vlt keeps stable"
+                );
+            }
+        }
+    }
+    let entry = ledger_entry(root, &case.purl);
+    assert_eq!(entry["flavor"], "vlt", "[{what}] {entry:#}");
+    assert_eq!(entry["artifact"]["path"], rel, "[{what}] {entry:#}");
+    assert!(
+        entry["artifact"]["fileInventory"]["index.js"].is_string(),
+        "[{what}] {entry:#}"
+    );
+    assert_eq!(read(root, &format!("{rel}/index.js")).as_bytes(), PATCHED);
+    let uuid = uuid_dir(root, FIXTURE_UUID);
+    assert_eq!(
+        read(
+            root,
+            &format!(".socket/vendor/npm/{FIXTURE_UUID}/.gitignore")
+        ),
+        UUID_GITIGNORE
+    );
+    assert_eq!(
+        std::fs::read_to_string(uuid.join(".gitattributes")).unwrap(),
+        UUID_GITATTRIBUTES
+    );
+    let wired: Vec<Option<Vec<u8>>> = tracked
+        .iter()
+        .map(|f| std::fs::read(root.join(f)).ok())
+        .collect();
+
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "[{what}] rerun: {env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"already_vendored".to_string()),
+        "[{what}] {env:#}"
+    );
+    for (f, w) in tracked.iter().zip(&wired) {
+        assert_eq!(
+            &std::fs::read(root.join(f)).ok(),
+            w,
+            "[{what}] rerun kept {f}"
+        );
+    }
+
+    let cwd = root.to_str().unwrap();
+    let (code, env, stderr) = socket(root, &["vendor", "--revert", "--json", "--cwd", cwd], &[]);
+    assert_eq!(code, 0, "[{what}] revert: {env:#}\n{stderr}");
+    for (f, b) in tracked.iter().zip(&before) {
+        assert_eq!(
+            std::fs::read(root.join(f))
+                .ok()
+                .map(|b| String::from_utf8_lossy(&b).to_string()),
+            b.as_ref().map(|b| String::from_utf8_lossy(b).to_string()),
+            "[{what}] revert restores {f} byte for byte"
+        );
+    }
+    assert!(!uuid.exists(), "[{what}] revert removes the artifact");
+}
+
+#[test]
+fn vendor_vlt_every_capture_case() {
+    for vlt in CAPTURED {
+        for case in cases(vlt) {
+            run_capture_case(vlt, &case.name);
+            eprintln!("vendor vlt capture {vlt}/{}: OK", case.name);
+        }
+    }
+}
+
+#[test]
+fn vendor_vlt_direct_v1() {
+    run_capture_case("1.2.0", "left-pad");
+}
+
+#[test]
+fn vendor_vlt_direct_v0() {
+    run_capture_case("1.0.0-rc.14", "left-pad");
+}
+
+#[test]
+fn vendor_vlt_workspace_member() {
+    run_capture_case("1.2.0", "member-only");
+}
+
+#[test]
+fn vendor_vlt_alias_edge() {
+    run_capture_case("1.2.0", "alias");
+}
+
+#[test]
+fn vendor_vlt_scoped() {
+    run_capture_case("1.2.0", "scoped");
+}
+
+#[test]
+fn vendor_vlt_dev_edge() {
+    run_capture_case("1.2.0", "dev-edge");
+}
+
+#[test]
+fn vendor_vlt_optional_edge() {
+    run_capture_case("1.2.0", "optional-edge");
+}
+
+#[test]
+fn vendor_vlt_with_deps_rekeys_edges() {
+    run_capture_case("1.2.0", "supports-color");
+    run_capture_case("1.0.10", "semver");
+}
+
+#[test]
+fn vendor_vlt_refuses_transitive() {
+    run_capture_case("1.2.0", "transitive");
+}
+
+#[test]
+fn vendor_vlt_refuses_peer_variants() {
+    run_capture_case("1.2.0", "peer");
+    run_capture_case("1.0.10", "alias-selfref-peer");
+}
+
+// ── synthetic shapes ─────────────────────────────────────────────────────
+
+fn revert(root: &Path) -> (i32, Value, String) {
+    let cwd = root.to_str().unwrap().to_string();
+    socket(root, &["vendor", "--revert", "--json", "--cwd", &cwd], &[])
+}
+
+/// Vendor `root`, then revert it and require the original lock and
+/// package.json back byte for byte. Returns the wired lock.
+fn vendor_and_revert(root: &Path) -> String {
+    let lock = read(root, VLT_LOCK);
+    let pkg = read(root, "package.json");
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(env["summary"]["applied"], 1, "{env:#}");
+    let wired = read(root, VLT_LOCK);
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "revert: {env:#}\n{stderr}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert_eq!(read(root, "package.json"), pkg);
+    assert!(!uuid_dir(root, UUID).exists());
+    wired
+}
+
+fn file_spec() -> String {
+    format!("file:./{}", rel_dir(UUID, NAME, VERSION))
+}
+
+#[test]
+fn vendor_vlt_barespec_with_spaces() {
+    let tmp = tempfile::tempdir().unwrap();
+    let lock = Lock::v1(
+        &[&reg_node("~npm~left-pad@1.3.0")],
+        &["\"file~_d left-pad\": \"prod >=1 <2 ~npm~left-pad@1.3.0\""],
+    );
+    project(
+        tmp.path(),
+        &lock,
+        &ROOT_PKG.replace("\"1.3.0\"", "\">=1 <2\""),
+        "~npm~left-pad@1.3.0",
+    );
+    let wired = vendor_and_revert(tmp.path());
+    let rel = rel_dir(UUID, NAME, VERSION);
+    assert!(
+        wired.contains(&format!(
+            "\"file~_d left-pad\": \"prod {} {}\"",
+            file_spec(),
+            file_id_v1(&rel)
+        )),
+        "{wired}"
+    );
+}
+
+#[test]
+fn vendor_vlt_crlf_lock() {
+    let tmp = tempfile::tempdir().unwrap();
+    let mut lock = direct_lock();
+    lock.crlf = true;
+    project(tmp.path(), &lock, ROOT_PKG, "~npm~left-pad@1.3.0");
+    let wired = vendor_and_revert(tmp.path());
+    assert!(
+        wired
+            .split('\n')
+            .filter(|l| !l.is_empty())
+            .all(|l| l.ends_with('\r')),
+        "every line keeps its CR: {wired:?}"
+    );
+    assert!(wired.contains(&file_spec()), "{wired}");
+}
+
+#[test]
+fn vendor_vlt_peer_range_left_untouched() {
+    let tmp = tempfile::tempdir().unwrap();
+    let pkg = "{\n  \"name\": \"lib\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  },\n  \"peerDependencies\": {\n    \"left-pad\": \"^1.0.0\"\n  }\n}\n";
+    project(tmp.path(), &direct_lock(), pkg, "~npm~left-pad@1.3.0");
+    let (code, env, stderr) = vendor(tmp.path(), &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let after = read(tmp.path(), "package.json");
+    assert_eq!(
+        after,
+        pkg.replace(
+            "\"left-pad\": \"1.3.0\"",
+            &format!("\"left-pad\": \"{}\"", file_spec())
+        ),
+        "only the dependencies spec moves"
+    );
+}
+
+#[test]
+fn vendor_vlt_legacy_lockfile_warning() {
+    let tmp = tempfile::tempdir().unwrap();
+    let lock = Lock::v0(
+        &[&reg_node("··left-pad@1.3.0")],
+        &["\"file·. left-pad\": \"prod 1.3.0 ··left-pad@1.3.0\""],
+    );
+    project(tmp.path(), &lock, ROOT_PKG, "··left-pad@1.3.0");
+    let (code, env, stderr) = vendor(tmp.path(), &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_vlt_legacy_lockfile".to_string()),
+        "{env:#}"
+    );
+    let wired = read(tmp.path(), VLT_LOCK);
+    assert!(
+        wired.contains(&format!(
+            "\"file·.socket§vendor§npm§{UUID}§left-pad-1.3.0§node_modules§left-pad\""
+        )),
+        "the legacy grammar is kept: {wired}"
+    );
+}
+
+#[test]
+fn vendor_vlt_package_json_patch_with_devdeps_verifies() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let before_pkg = "{\n  \"name\": \"left-pad\",\n  \"version\": \"1.3.0\",\n  \"devDependencies\": {\n    \"tap\": \"^16\"\n  }\n}\n";
+    let after_pkg = "{\n  \"name\": \"left-pad\",\n  \"version\": \"1.3.0\",\n  \"main\": \"index.js\",\n  \"devDependencies\": {\n    \"tap\": \"^16\"\n  }\n}\n";
+    project(root, &direct_lock(), ROOT_PKG, "~npm~left-pad@1.3.0");
+    install_store(
+        root,
+        "~npm~left-pad@1.3.0",
+        NAME,
+        VERSION,
+        PRISTINE,
+        Some(before_pkg),
+    );
+    stage_patch(
+        root,
+        &[PURL],
+        UUID,
+        &[(
+            "package/package.json",
+            before_pkg.as_bytes(),
+            after_pkg.as_bytes(),
+        )],
+    );
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_dep_manifest_stale".to_string()),
+        "{env:#}"
+    );
+    let rel = rel_dir(UUID, NAME, VERSION);
+    let committed = read(root, &format!("{rel}/package.json"));
+    assert_eq!(
+        committed,
+        "{\n  \"name\": \"left-pad\",\n  \"version\": \"1.3.0\",\n  \"main\": \"index.js\"\n}\n",
+        "the committed manifest drops devDependencies"
+    );
+
+    // Every verifier applies the vlt manifest exemption: repair sees a
+    // healthy artifact (no Corrupt → rebuild loop), and so does a re-run.
+    let cwd = root.to_str().unwrap();
+    let (code, env, stderr) = socket(root, &["repair", "--json", "--offline", "--cwd", cwd], &[]);
+    assert_eq!(code, 0, "repair: {env:#}\n{stderr}");
+    assert!(
+        !env.to_string().contains("vendor_artifact_corrupt"),
+        "repair must not judge the stripped manifest corrupt: {env:#}"
+    );
+    assert_eq!(read(root, &format!("{rel}/package.json")), committed);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(
+        codes(&env).contains(&"already_vendored".to_string()),
+        "{env:#}"
+    );
+
+    // A tampered committed manifest is caught.
+    std::fs::write(root.join(&rel).join("package.json"), after_pkg).unwrap();
+    let (code, env, _) = socket(
+        root,
+        &["repair", "--json", "--offline", "--dry-run", "--cwd", cwd],
+        &[],
+    );
+    assert_eq!(code, 0, "{env:#}");
+    assert!(env.to_string().contains("wouldRebuild"), "{env:#}");
+}
+
+// ── refusals ─────────────────────────────────────────────────────────────
+
+/// Vendor must refuse `root` with `code` and write nothing.
+fn assert_refused(root: &Path, code: &str) -> String {
+    let before = snapshot(root);
+    let (exit, env, stderr) = vendor(root, &[]);
+    assert_eq!(exit, 1, "{env:#}\n{stderr}");
+    let (got, detail) = failure(&env, PURL);
+    assert_eq!(got, code, "{detail}\n{env:#}");
+    assert_eq!(snapshot(root), before, "a refusal writes nothing");
+    detail
+}
+
+fn refused_with(lock: &str, pkg: &str, code: &str) -> String {
+    let tmp = tempfile::tempdir().unwrap();
+    project(tmp.path(), &direct_lock(), pkg, "~npm~left-pad@1.3.0");
+    std::fs::write(tmp.path().join(VLT_LOCK), lock).unwrap();
+    assert_refused(tmp.path(), code)
+}
+
+#[test]
+fn vendor_vlt_refuses_importer_peer_edge() {
+    let lock = direct_lock()
+        .render()
+        .replace("\"prod 1.3.0", "\"peer 1.3.0");
+    let pkg = "{\"peerDependencies\":{\"left-pad\":\"1.3.0\"}}";
+    let detail = refused_with(&lock, pkg, "vendor_lock_entry_unsupported");
+    assert!(detail.contains("peer"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_foreign_registry() {
+    let mut lock = Lock::v1(
+        &[&reg_node("~acme~left-pad@1.3.0")],
+        &["\"file~_d left-pad\": \"prod acme:left-pad@1.3.0 ~acme~left-pad@1.3.0\""],
+    );
+    lock.options = "{\"registries\": {\"acme\": \"https://npm.acme.example/\"}}".into();
+    let tmp = tempfile::tempdir().unwrap();
+    project(
+        tmp.path(),
+        &lock,
+        &ROOT_PKG.replace("\"1.3.0\"", "\"acme:left-pad@1.3.0\""),
+        "~acme~left-pad@1.3.0",
+    );
+    let detail = assert_refused(tmp.path(), "vendor_lock_entry_unsupported");
+    assert!(detail.contains("default registry"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_multi_field_declaration() {
+    let pkg =
+        "{\"dependencies\":{\"left-pad\":\"1.3.0\"},\"devDependencies\":{\"left-pad\":\"1.3.0\"}}";
+    let detail = refused_with(
+        &direct_lock().render(),
+        pkg,
+        "vendor_lock_entry_unsupported",
+    );
+    assert!(detail.contains("multiple dependency fields"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_out_of_sync() {
+    refused_with(
+        &direct_lock().render(),
+        &ROOT_PKG.replace("\"1.3.0\"", "\"^1.3.0\""),
+        "vendor_vlt_lock_out_of_sync",
+    );
+}
+
+#[test]
+fn vendor_vlt_refuses_absent_version() {
+    let mut lock = direct_lock();
+    lock.version = None;
+    let detail = refused_with(
+        &lock.render(),
+        ROOT_PKG,
+        "vendor_lockfile_version_unsupported",
+    );
+    assert!(detail.contains("no lockfileVersion"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_v2() {
+    let mut lock = direct_lock();
+    lock.version = Some(2);
+    let detail = refused_with(
+        &lock.render(),
+        ROOT_PKG,
+        "vendor_lockfile_version_unsupported",
+    );
+    assert!(detail.contains("lockfileVersion 2"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_bom() {
+    let lock = format!("\u{feff}{}", direct_lock().render());
+    refused_with(&lock, ROOT_PKG, "vendor_lockfile_version_unsupported");
+}
+
+#[test]
+fn vendor_vlt_refuses_unparseable() {
+    refused_with(
+        "{ \"lockfileVersion\": 1,",
+        ROOT_PKG,
+        "vendor_lockfile_version_unsupported",
+    );
+}
+
+#[test]
+fn vendor_vlt_refuses_non_canonical() {
+    let pretty = serde_json::to_string_pretty(
+        &serde_json::from_str::<Value>(&direct_lock().render()).unwrap(),
+    )
+    .unwrap();
+    let detail = refused_with(&pretty, ROOT_PKG, "vendor_lockfile_version_unsupported");
+    assert!(detail.contains("canonical layout"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_duplicate_devdependencies() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    install_store(
+        tmp.path(),
+        "~npm~left-pad@1.3.0",
+        NAME,
+        VERSION,
+        PRISTINE,
+        Some("{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"devDependencies\":{},\"devDependencies\":{}}"),
+    );
+    let detail = assert_refused(tmp.path(), "vendor_lock_entry_unsupported");
+    assert!(detail.contains("duplicate devDependencies"), "{detail}");
+}
+
+#[test]
+fn vendor_vlt_refuses_bundled_deps() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    install_store(
+        tmp.path(),
+        "~npm~left-pad@1.3.0",
+        NAME,
+        VERSION,
+        PRISTINE,
+        Some("{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"bundleDependencies\":[\"x\"]}"),
+    );
+    assert_refused(tmp.path(), "vendor_bundled_deps_unsupported");
+}
+
+#[test]
+fn vendor_vlt_refuses_flavor_changed() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    let state = json!({
+        "version": 1,
+        "entries": { PURL: {
+            "ecosystem": "npm",
+            "basePurl": PURL,
+            "uuid": UUID,
+            "artifact": { "path": format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0.tgz") },
+            "wiring": [],
+            "flavor": "pnpm",
+        }}
+    });
+    std::fs::create_dir_all(tmp.path().join(".socket/vendor")).unwrap();
+    std::fs::write(
+        tmp.path().join(".socket/vendor/state.json"),
+        serde_json::to_vec_pretty(&state).unwrap(),
+    )
+    .unwrap();
+    let detail = assert_refused(tmp.path(), "vendor_flavor_changed");
+    assert!(
+        detail.contains("`pnpm`") && detail.contains("`vlt`"),
+        "{detail}"
+    );
+}
+
+#[test]
+fn vendor_vlt_refuses_gitignored_payload() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    if !git_init(tmp.path()) {
+        eprintln!("git not available; skipping");
+        return;
+    }
+    std::fs::write(tmp.path().join(".gitignore"), ".socket/\n").unwrap();
+    let detail = assert_refused(tmp.path(), "vendor_artifact_gitignored");
+    assert!(detail.contains(".gitignore:1:.socket/"), "{detail}");
+    let cwd = tmp.path().to_str().unwrap();
+    let (code, env, _) = socket(
+        tmp.path(),
+        &["vendor", "--json", "--offline", "--dry-run", "--cwd", cwd],
+        &[],
+    );
+    assert_eq!(code, 1, "the dry run previews the refusal: {env:#}");
+    assert_eq!(failure(&env, PURL).0, "vendor_artifact_gitignored");
+}
+
+#[test]
+fn vendor_vlt_payload_tracked_under_hostile_root_gitignore() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let store = store_dir(root, "~npm~left-pad@1.3.0", NAME);
+    std::fs::create_dir_all(store.join("dist")).unwrap();
+    std::fs::write(store.join("dist/index.js"), "x\n").unwrap();
+    std::fs::write(store.join("dist/index.js.map"), "{}\n").unwrap();
+    if !git_init(root) {
+        eprintln!("git not available; skipping");
+        return;
+    }
+    std::fs::write(root.join(".gitignore"), "node_modules\ndist/\n*.map\n").unwrap();
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let rel = rel_dir(UUID, NAME, VERSION);
+    assert!(root.join(&rel).join("dist/index.js.map").is_file());
+    let out = std::process::Command::new(git().unwrap())
+        .args(["check-ignore", "--no-index", "--stdin"])
+        .current_dir(root)
+        .stdin(std::process::Stdio::piped())
+        .stdout(std::process::Stdio::piped())
+        .spawn()
+        .and_then(|mut child| {
+            use std::io::Write as _;
+            let mut stdin = child.stdin.take().unwrap();
+            for f in [
+                "index.js",
+                "package.json",
+                "dist/index.js",
+                "dist/index.js.map",
+            ] {
+                writeln!(stdin, "{rel}/{f}")?;
+            }
+            drop(stdin);
+            child.wait_with_output()
+        })
+        .unwrap();
+    assert_eq!(
+        String::from_utf8_lossy(&out.stdout),
+        "",
+        "git commits every payload file"
+    );
+}
+
+// ── committed dir artifact, reuse, re-vendor ─────────────────────────────
+
+#[test]
+fn vendor_vlt_reuse_is_churn_free() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let lock = read(root, VLT_LOCK);
+    let artifact = snapshot(&uuid_dir(root, UUID));
+    let state = read(root, ".socket/vendor/state.json");
+    std::fs::remove_file(uuid_dir(root, UUID).join(".gitignore")).unwrap();
+    for run in 0..2 {
+        let (code, env, _) = vendor(root, &[]);
+        assert_eq!(code, 0, "[{run}] {env:#}");
+        assert_eq!(env["summary"]["applied"], 0, "[{run}] {env:#}");
+        assert!(
+            codes(&env).contains(&"already_vendored".to_string()),
+            "[{run}] {env:#}"
+        );
+        assert_eq!(read(root, VLT_LOCK), lock);
+        assert_eq!(
+            snapshot(&uuid_dir(root, UUID)),
+            artifact,
+            "[{run}] the gitignore is restored"
+        );
+        assert_eq!(read(root, ".socket/vendor/state.json"), state);
+    }
+}
+
+#[test]
+fn vendor_vlt_auto_fetch_stages_the_committed_dir_artifact() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let lock = read(root, VLT_LOCK);
+    // A fresh clone: nothing installed, the committed dir artifact only.
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"already_vendored".to_string()),
+        "{env:#}"
+    );
+    assert!(
+        !codes(&env).contains(&"package_not_installed".to_string()),
+        "{env:#}"
+    );
+    assert_eq!(read(root, VLT_LOCK), lock);
+
+    // vlt links the vendored dir itself into node_modules; that link is
+    // never taken as a pristine source (the committed rung verifies it).
+    let rel = rel_dir(UUID, NAME, VERSION);
+    let link = root.join("node_modules").join(NAME);
+    std::fs::create_dir_all(root.join("node_modules")).unwrap();
+    #[cfg(unix)]
+    std::os::unix::fs::symlink(root.join(&rel), &link).unwrap();
+    #[cfg(windows)]
+    std::os::windows::fs::symlink_dir(root.join(&rel), &link).unwrap();
+    std::fs::write(root.join(&rel).join("extra.js"), "tampered\n").unwrap();
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 1, "{env:#}");
+    let (got, detail) = failure(&env, PURL);
+    assert_eq!(got, "vendor_fetch_failed", "{env:#}");
+    assert!(detail.contains("socket-patch repair"), "{detail}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+}
+
+#[test]
+fn vendor_vlt_revendor_new_uuid() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let pkg = read(root, "package.json");
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    stage_patch(root, &[PURL], UUID2, &[]);
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        !uuid_dir(root, UUID).exists(),
+        "the old uuid dir is removed"
+    );
+    let rel2 = rel_dir(UUID2, NAME, VERSION);
+    assert!(root.join(&rel2).join("index.js").is_file());
+    let wired = read(root, VLT_LOCK);
+    assert!(
+        wired.contains(&file_id_v1(&rel2)) && !wired.contains(UUID),
+        "{wired}"
+    );
+    assert_eq!(
+        read(root, "package.json"),
+        pkg.replace("\"1.3.0\"", &format!("\"file:./{rel2}\""))
+    );
+    let entry = ledger_entry(root, PURL);
+    assert_eq!(entry["uuid"], UUID2, "{entry:#}");
+    let node = entry["wiring"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .find(|r| r["kind"] == "vlt_lock_node")
+        .unwrap()
+        .clone();
+    assert_eq!(node["key"], "~npm~left-pad@1.3.0", "{node:#}");
+    let (code, env, _) = revert(root);
+    assert_eq!(code, 0, "{env:#}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert_eq!(read(root, "package.json"), pkg);
+}
+
+// ── revert inverses ──────────────────────────────────────────────────────
+
+#[test]
+fn vendor_vlt_revert_byte_exact() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    vendor_and_revert(tmp.path());
+    let tmp = tempfile::tempdir().unwrap();
+    project(
+        tmp.path(),
+        &direct_lock_v0(),
+        ROOT_PKG,
+        "·npm·left-pad@1.3.0",
+    );
+    vendor_and_revert(tmp.path());
+}
+
+#[test]
+fn vendor_vlt_revert_after_outgoing_peer_value_rewrite() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let lock = Lock::v1(
+        &[
+            &reg_node("~npm~left-pad@1.3.0"),
+            "\"~npm~react@18.2.0\": [0,\"react\",\"sha512-R==\"]",
+        ],
+        &[
+            "\"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0\"",
+            "\"file~_d react\": \"prod 18.2.0 ~npm~react@18.2.0\"",
+            "\"~npm~left-pad@1.3.0 react\": \"peer ^16 || ^18 ~npm~react@18.2.0\"",
+        ],
+    );
+    let pkg = "{\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\",\n    \"react\": \"18.2.0\"\n  }\n}\n";
+    project(root, &lock, pkg, "~npm~left-pad@1.3.0");
+    let original = read(root, VLT_LOCK);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let wired = read(root, VLT_LOCK);
+    let file_id = file_id_v1(&rel_dir(UUID, NAME, VERSION));
+    assert!(
+        wired.contains(&format!("\"{file_id} react\": \"peer ^16 || ^18")),
+        "{wired}"
+    );
+    // vlt rc.14 rewrites a `file:` dependency's peer spec on `ci`.
+    std::fs::write(
+        root.join(VLT_LOCK),
+        wired.replace("\"peer ^16 || ^18 ~npm~react", "\"peer 18.2.0 ~npm~react"),
+    )
+    .unwrap();
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(
+        read(root, VLT_LOCK),
+        original.replace("\"peer ^16 || ^18 ~npm~react", "\"peer 18.2.0 ~npm~react"),
+        "the re-key restores the key and keeps vlt's current value"
+    );
+    assert_eq!(read(root, "package.json"), pkg);
+}
+
+#[test]
+fn vendor_vlt_revert_identity_already_reverted() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let pkg = read(root, "package.json");
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    // The user put the registry dependency back and re-locked by hand.
+    let relocked = lock.clone();
+    std::fs::write(root.join(VLT_LOCK), &relocked).unwrap();
+    std::fs::write(root.join("package.json"), &pkg).unwrap();
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(read(root, VLT_LOCK), relocked);
+    assert_eq!(read(root, "package.json"), pkg);
+    assert!(
+        !uuid_dir(root, UUID).exists(),
+        "only the artifact removal remained"
+    );
+}
+
+#[test]
+fn vendor_vlt_revert_cross_grammar_drift_detail() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    project(root, &direct_lock_v0(), ROOT_PKG, "·npm·left-pad@1.3.0");
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let wired_pkg = read(root, "package.json");
+    // A vlt upgrade rejected the v0 lock; the user deleted and re-created it
+    // (tilde ids, the `file:` spec kept from package.json).
+    let rel = rel_dir(UUID, NAME, VERSION);
+    let file_id = file_id_v1(&rel);
+    let relocked = Lock::v1(
+        &[&format!("\"{file_id}\": [0,\"left-pad\",null,\"{rel}\"]")],
+        &[&format!(
+            "\"file~_d left-pad\": \"prod file:./{rel} {file_id}\""
+        )],
+    )
+    .render();
+    std::fs::write(root.join(VLT_LOCK), &relocked).unwrap();
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "a drift is kept, not failed: {env:#}\n{stderr}");
+    let drift = events(&env)
+        .into_iter()
+        .find(|e| e["errorCode"] == "vendor_lock_entry_drifted")
+        .unwrap_or_else(|| panic!("{env:#}"));
+    assert_eq!(
+        drift["reason"],
+        "vlt-lock.json was re-created by a different vlt lockfile grammar; set left-pad in \
+         package.json back to 1.3.0, run `vlt install`, then re-run `socket-patch vendor \
+         --revert` to remove the artifact"
+    );
+    assert!(uuid_dir(root, UUID).exists(), "a drift keeps the artifact");
+    assert_eq!(read(root, VLT_LOCK), relocked, "no writes on drift");
+    assert_eq!(read(root, "package.json"), wired_pkg);
+
+    // Following the detail: the spec back, `vlt install`, then the re-run.
+    std::fs::write(root.join("package.json"), ROOT_PKG).unwrap();
+    std::fs::write(root.join(VLT_LOCK), direct_lock().render()).unwrap();
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(!uuid_dir(root, UUID).exists());
+    assert_eq!(read(root, VLT_LOCK), direct_lock().render());
+}
+
+// ── the patch service ────────────────────────────────────────────────────
+
+const PACKAGE_PATH: &str = "/v0/orgs/acme/patches/package";
+
+fn sri(bytes: &[u8]) -> String {
+    use base64::Engine as _;
+    use sha2::Digest as _;
+    format!(
+        "sha512-{}",
+        base64::engine::general_purpose::STANDARD.encode(sha2::Sha512::digest(bytes))
+    )
+}
+
+/// A prebuilt tarball: `entries` of `(path, bytes)` plus optional raw
+/// headers (`(path, entry type, link target)`).
+fn tarball(entries: &[(&str, &[u8])], special: &[(&str, tar::EntryType, &str)]) -> Vec<u8> {
+    let gz = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+    let mut builder = tar::Builder::new(gz);
+    for (name, data) in entries {
+        let mut header = tar::Header::new_gnu();
+        header.set_size(data.len() as u64);
+        header.set_mode(0o644);
+        header.set_cksum();
+        builder.append_data(&mut header, name, *data).unwrap();
+    }
+    for (name, kind, target) in special {
+        let mut header = tar::Header::new_gnu();
+        header.set_entry_type(*kind);
+        header.set_size(0);
+        header.set_mode(0o644);
+        if !target.is_empty() {
+            header.set_link_name(target).unwrap();
+        }
+        header.set_path(name).ok();
+        if header.path().is_err() || name.contains("..") {
+            let bytes = name.as_bytes();
+            header.as_old_mut().name[..bytes.len()].copy_from_slice(bytes);
+        }
+        header.set_cksum();
+        builder.append(&header, std::io::empty()).unwrap();
+    }
+    builder.into_inner().unwrap().finish().unwrap()
+}
+
+fn prebuilt(first: &str) -> Vec<u8> {
+    tarball(
+        &[
+            (
+                &format!("{first}/package.json"),
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}\n",
+            ),
+            (&format!("{first}/index.js"), PATCHED),
+            (&format!("{first}/README.md"), b"from the service\n"),
+        ],
+        &[],
+    )
+}
+
+async fn mount_grant(server: &MockServer, bytes: &[u8], sha512: &str) {
+    let serve = format!("/serve/{UUID}/left-pad-1.3.0.tgz");
+    let url = format!("{}{serve}", server.uri());
+    Mock::given(method("POST"))
+        .and(path(PACKAGE_PATH))
+        .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+            "results": { UUID: { "status": "granted", "url": url,
+                "artifacts": [{ "kind": "tarball", "url": url,
+                                "integrity": { "sha512": sha512 } }] } }
+        })))
+        .mount(server)
+        .await;
+    Mock::given(method("GET"))
+        .and(path(serve))
+        .respond_with(ResponseTemplate::new(200).set_body_bytes(bytes.to_vec()))
+        .mount(server)
+        .await;
+}
+
+async fn mount_status(server: &MockServer, status: u16, body: Value) {
+    Mock::given(method("POST"))
+        .and(path(PACKAGE_PATH))
+        .respond_with(ResponseTemplate::new(status).set_body_json(body))
+        .mount(server)
+        .await;
+}
+
+fn vendor_via_service(root: &Path, uri: &str, extra: &[&str]) -> (i32, Value, String) {
+    let cwd = root.to_str().unwrap().to_string();
+    let mut args = vec![
+        "vendor",
+        "--json",
+        "--cwd",
+        &cwd,
+        "--api-url",
+        uri,
+        "--vendor-url",
+        uri,
+        "--api-token",
+        "sktsec_placeholder_value_for_tests_api",
+        "--org",
+        "acme",
+        "--lock-timeout",
+        "5",
+    ];
+    args.extend_from_slice(extra);
+    socket(root, &args, &[])
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_service_dir_extract() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let server = MockServer::start().await;
+    let bytes = prebuilt("left-pad");
+    mount_grant(&server, &bytes, &sri(&bytes)).await;
+    let (code, env, stderr) = vendor_via_service(root, &server.uri(), &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_prebuilt_downloaded".to_string()),
+        "{env:#}"
+    );
+    let rel = rel_dir(UUID, NAME, VERSION);
+    assert_eq!(
+        read(root, &format!("{rel}/README.md")),
+        "from the service\n",
+        "the first path component is stripped whatever it is called"
+    );
+    assert_eq!(read(root, &format!("{rel}/index.js")).as_bytes(), PATCHED);
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_service_integrity_mismatch_hard_fails() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let server = MockServer::start().await;
+    let bytes = prebuilt("package");
+    mount_grant(&server, &bytes, &sri(b"something else")).await;
+    let (code, env, stderr) = vendor_via_service(root, &server.uri(), &[]);
+    assert_eq!(code, 1, "{env:#}\n{stderr}");
+    assert!(env.to_string().contains("integrity"), "{env:#}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert!(!uuid_dir(root, UUID).exists());
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_service_policy_fail_closed() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let server = MockServer::start().await;
+    mount_status(&server, 503, json!({"error": "down"})).await;
+    let (code, env, stderr) =
+        vendor_via_service(root, &server.uri(), &["--vendor-source", "service"]);
+    assert_eq!(code, 1, "{env:#}\n{stderr}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert!(!uuid_dir(root, UUID).exists());
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_service_auto_falls_back_to_build() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let server = MockServer::start().await;
+    mount_status(&server, 503, json!({"error": "down"})).await;
+    let (code, env, stderr) = vendor_via_service(root, &server.uri(), &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_prebuilt_unavailable".to_string()),
+        "{env:#}"
+    );
+    let rel = rel_dir(UUID, NAME, VERSION);
+    assert_eq!(read(root, &format!("{rel}/index.js")).as_bytes(), PATCHED);
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_service_pending_falls_back_to_build() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let server = MockServer::start().await;
+    mount_status(
+        &server,
+        200,
+        json!({ "results": { UUID: { "status": "pending_build" } } }),
+    )
+    .await;
+    let (code, env, stderr) = vendor_via_service(root, &server.uri(), &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_prebuilt_pending".to_string()),
+        "{env:#}"
+    );
+}
+
+async fn assert_archive_refused(special: (&str, tar::EntryType, &str)) {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let server = MockServer::start().await;
+    let bytes = tarball(
+        &[
+            (
+                "package/package.json",
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}\n",
+            ),
+            ("package/index.js", PATCHED),
+        ],
+        &[special],
+    );
+    mount_grant(&server, &bytes, &sri(&bytes)).await;
+    let (code, env, stderr) = vendor_via_service(root, &server.uri(), &[]);
+    assert_eq!(code, 1, "{:?}: {env:#}\n{stderr}", special.0);
+    assert!(env.to_string().contains("unsafe"), "{env:#}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert!(!uuid_dir(root, UUID).exists());
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_archive_symlink_refused() {
+    assert_archive_refused(("package/link.js", tar::EntryType::Symlink, "index.js")).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_archive_hardlink_refused() {
+    assert_archive_refused(("package/hard.js", tar::EntryType::Link, "package/index.js")).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_archive_device_refused() {
+    assert_archive_refused(("package/dev", tar::EntryType::Char, "")).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_archive_escape_refused() {
+    assert_archive_refused(("package/../../escape.js", tar::EntryType::Regular, "")).await;
+}
+
+// ── hints ────────────────────────────────────────────────────────────────
+
+#[test]
+fn vendor_vlt_human_hints_name_vlt_files_and_install() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    let cwd = tmp.path().to_str().unwrap();
+    let (code, stdout, stderr) = socket_human(tmp.path(), &["vendor", "--offline", "--cwd", cwd]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert!(
+        stdout.contains("vlt-lock.json and .socket/vendor/") && stdout.contains("CI: `vlt ci`"),
+        "{stdout}"
+    );
+    assert!(stdout.contains("Run `vlt install`"), "{stdout}");
+    let (code, stdout, stderr) = socket_human(tmp.path(), &["vendor", "--revert", "--cwd", cwd]);
+    assert_eq!(code, 0, "{stdout}\n{stderr}");
+    assert!(stdout.contains("Run `vlt install`"), "{stdout}");
+}
+
+/// From a workspace member's directory no root lock is visible: vendor
+/// refuses with the missing-lockfile code and writes no package-lock.
+#[test]
+fn vendor_vlt_workspace_member_cwd_sees_no_root_lock() {
+    let case = cases("1.2.0")
+        .into_iter()
+        .find(|c| c.name == "member-only")
+        .unwrap();
+    let tmp = tempfile::tempdir().unwrap();
+    capture_project(tmp.path(), &case);
+    let member = tmp.path().join("packages/a");
+    let before = snapshot(tmp.path());
+    stage_patch(&member, &[&case.purl], FIXTURE_UUID, &[]);
+    let cwd = member.to_str().unwrap();
+    let (_, env, _) = socket(
+        &member,
+        &["vendor", "--json", "--offline", "--cwd", cwd],
+        &[],
+    );
+    assert_eq!(env["summary"]["applied"], 0, "{env:#}");
+    assert!(!member.join("package-lock.json").exists());
+    assert!(!member.join("vlt-lock.json").exists());
+    let after = snapshot(tmp.path());
+    let changed: Vec<&String> = after
+        .keys()
+        .filter(|k| before.get(*k) != after.get(*k))
+        .filter(|k| !k.starts_with("packages/a/.socket"))
+        .collect();
+    assert!(changed.is_empty(), "{changed:?}");
+}
+
+/// The lock is written last; when that write fails the package.json files
+/// already rewritten go back and the staged artifact is unwound. An
+/// immutable file (`chflags uchg`) is the one hermetic way to fail only
+/// the lock's rename.
+#[cfg(target_os = "macos")]
+#[test]
+fn vendor_vlt_lock_write_failure_unwinds_package_json() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let lock = read(root, VLT_LOCK);
+    let chflags = |flag: &str| {
+        std::process::Command::new("chflags")
+            .arg(flag)
+            .arg(root.join(VLT_LOCK))
+            .status()
+            .is_ok_and(|s| s.success())
+    };
+    if !chflags("uchg") {
+        eprintln!("chflags unavailable; skipping");
+        return;
+    }
+    let (code, env, stderr) = vendor(root, &[]);
+    assert!(chflags("nouchg"));
+    assert_eq!(code, 1, "{env:#}\n{stderr}");
+    assert!(
+        env.to_string().contains("package.json files restored"),
+        "{env:#}"
+    );
+    assert_eq!(read(root, "package.json"), ROOT_PKG);
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert!(
+        !uuid_dir(root, UUID).exists(),
+        "the staged artifact is unwound"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover.rs
index df2ff462..994460f4 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover.rs
@@ -1,4 +1,5 @@
-//! Hermetic bun mode-takeover contract tests through the built binary.
+//! Hermetic npm-family mode-takeover contract tests through the built
+//! binary: bun below, vlt in `in_process_vendor_bun_takeover/vlt.rs`.
 //!
 //! Twin of the yarn legs in `mode_migration_npm.rs` and the pnpm
 //! `hosted_to_vendor_conversion` module in `in_process_vendor.rs`, for the
@@ -45,6 +46,10 @@ use wiremock::{Mock, MockServer, ResponseTemplate};
 
 #[path = "vex_e2e_common/bun.rs"]
 mod bun_vex;
+#[path = "in_process_vendor_bun_takeover/vlt.rs"]
+mod vlt;
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
 
 const ORG: &str = "test-org";
 const NAME: &str = "left-pad";
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
new file mode 100644
index 00000000..5fa128fe
--- /dev/null
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
@@ -0,0 +1,444 @@
+//! vlt mode takeovers (DESIGN §4.10) through the built binary:
+//!
+//! 1. hosted → vendored by `scan --mode vendored` and by `vendor`: the
+//!    takeover restores the pristine registry node from the redirect
+//!    ledger, the vendor ledger records REGISTRY originals (never the
+//!    hosted URL), the store copy vlt installed from the hosted pin is
+//!    invalidated, and `vendor --revert` lands on the registry lock;
+//! 2. vendored → hosted by `scan --mode hosted` and `get <uuid> --mode
+//!    hosted`: the vlt revert restores node, edges and package.json before
+//!    the hosted rewrite, and `rollback` lands on the registry lock;
+//! 3. refusals fire BEFORE the other mode is reverted: the complete vlt
+//!    vendored preflight in front of a hosted revert, and the hosted
+//!    artifact preflight in front of a vendored revert.
+
+use std::path::Path;
+
+use base64::Engine as _;
+use serde_json::{json, Value};
+use wiremock::matchers::{method, path};
+use wiremock::{Mock, MockServer, ResponseTemplate};
+
+use crate::vlt_hosted_common as hosted;
+use hosted::{ORG, PATCHED, PRISTINE, PURL, TILDE_ID, UUID};
+
+fn registry_lock() -> String {
+    format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {}\n  }},\n  \
+         \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.3.0 {TILDE_ID}\"\n  }}\n}}\n",
+        hosted::registry_node(TILDE_ID)
+    )
+}
+
+const PACKAGE_JSON: &str =
+    "{\n  \"name\": \"consumer\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+fn write_project(root: &Path) {
+    std::fs::write(root.join("vlt-lock.json"), registry_lock()).unwrap();
+    std::fs::write(root.join("package.json"), PACKAGE_JSON).unwrap();
+    hosted::install_importer(root, PRISTINE);
+}
+
+/// The manifest record + after-hash blob `vendor --offline` reads.
+fn seed_manifest(root: &Path) {
+    let socket = root.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    let mut record = hosted::view_body();
+    record.as_object_mut().unwrap().remove("purl");
+    record["exportedAt"] = json!("2026-01-01T00:00:00Z");
+    std::fs::write(
+        socket.join("manifest.json"),
+        serde_json::to_vec_pretty(&json!({ "patches": { PURL: record } })).unwrap(),
+    )
+    .unwrap();
+    std::fs::write(
+        socket.join("blobs").join(hosted::git_sha256(PATCHED)),
+        PATCHED,
+    )
+    .unwrap();
+}
+
+/// Discovery, grant, the artifact, and a view carrying the blob (the
+/// vendored download phase stages it from `blobContent`).
+async fn mock_api(server: &MockServer) {
+    let mut view = hosted::view_body();
+    view["files"]["package/index.js"]["blobContent"] =
+        json!(base64::engine::general_purpose::STANDARD.encode(PATCHED));
+    Mock::given(method("GET"))
+        .and(path(format!("/v0/orgs/{ORG}/patches/view/{UUID}")))
+        .respond_with(ResponseTemplate::new(200).set_body_json(view))
+        .mount(server)
+        .await;
+    hosted::mock_discovery(server).await;
+    hosted::mock_reference(server).await;
+    hosted::mock_artifact(server).await;
+}
+
+fn args<'a>(root: &'a str, uri: &'a str, head: &[&'a str]) -> Vec<&'a str> {
+    let mut out = head.to_vec();
+    out.extend([
+        "--yes",
+        "--cwd",
+        root,
+        "--api-url",
+        uri,
+        "--org",
+        ORG,
+        "--api-token",
+        "fake",
+    ]);
+    out
+}
+
+fn scan(root: &Path, server: &MockServer, mode: &str, extra: &[&str]) -> (i32, Value, String) {
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = server.uri();
+    let mut argv = args(&cwd, &uri, &["scan", "--mode", mode]);
+    argv.extend_from_slice(extra);
+    hosted::run_json(root, &argv, &[])
+}
+
+fn vendor(root: &Path, extra: &[&str]) -> (i32, Value, String) {
+    let cwd = root.to_str().unwrap().to_string();
+    let mut argv = vec!["vendor", "--offline", "--cwd", &cwd];
+    argv.extend_from_slice(extra);
+    hosted::run_json(root, &argv, &[])
+}
+
+fn all_codes(env: &Value) -> Vec<String> {
+    let mut out = Vec::new();
+    fn walk(v: &Value, out: &mut Vec<String>) {
+        match v {
+            Value::Object(map) => {
+                for (k, v) in map {
+                    if (k == "errorCode" || k == "code") && v.is_string() {
+                        out.push(v.as_str().unwrap().to_string());
+                    }
+                    walk(v, out);
+                }
+            }
+            Value::Array(items) => items.iter().for_each(|i| walk(i, out)),
+            _ => {}
+        }
+    }
+    walk(env, &mut out);
+    out
+}
+
+fn detail_of(env: &Value, code: &str) -> String {
+    fn walk(v: &Value, code: &str) -> Option<String> {
+        match v {
+            Value::Object(map) => {
+                if map
+                    .get("errorCode")
+                    .or(map.get("code"))
+                    .and_then(Value::as_str)
+                    == Some(code)
+                {
+                    for key in ["reason", "detail", "error", "message"] {
+                        if let Some(s) = map.get(key).and_then(Value::as_str) {
+                            return Some(s.to_string());
+                        }
+                    }
+                }
+                map.values().find_map(|v| walk(v, code))
+            }
+            Value::Array(items) => items.iter().find_map(|i| walk(i, code)),
+            _ => None,
+        }
+    }
+    walk(env, code).unwrap_or_else(|| panic!("no `{code}` in {env:#}"))
+}
+
+fn rel() -> String {
+    format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad")
+}
+
+fn redirect_ledger(root: &Path) -> Option<Value> {
+    std::fs::read(hosted::ledger_path(root))
+        .ok()
+        .map(|b| serde_json::from_slice(&b).unwrap())
+}
+
+fn vendor_entry(root: &Path) -> Option<Value> {
+    let bytes = std::fs::read(root.join(".socket/vendor/state.json")).ok()?;
+    let state: Value = serde_json::from_slice(&bytes).unwrap();
+    let entry = state["entries"][PURL].clone();
+    (!entry.is_null()).then_some(entry)
+}
+
+/// The hosted pin, plus vlt's warm install of it: the store entry holding
+/// the patched bytes and a hidden lock recording the hosted integrity.
+async fn hosted_project(root: &Path, server: &MockServer) -> String {
+    write_project(root);
+    let (code, env, stderr) = scan(root, server, "hosted", &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(hosted::redirected(&env), 1, "{env:#}");
+    let lock = hosted::read(root, "vlt-lock.json");
+    assert!(lock.contains(&hosted::artifact_url(server)), "{lock}");
+    hosted::install_store(root, TILDE_ID, PATCHED);
+    hosted::write_hidden_lock(root, &[hosted::pinned_node(TILDE_ID, server)]);
+    lock
+}
+
+fn assert_vendored_from_registry(root: &Path) {
+    let lock = hosted::read(root, "vlt-lock.json");
+    assert!(lock.contains(&rel()), "{lock}");
+    assert!(
+        !lock.contains("/patch/npm/"),
+        "the hosted pin is gone: {lock}"
+    );
+    let entry = vendor_entry(root).expect("a vendor ledger entry");
+    assert_eq!(entry["flavor"], "vlt", "{entry:#}");
+    let node = entry["wiring"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .find(|r| r["kind"] == "vlt_lock_node")
+        .unwrap()
+        .clone();
+    assert_eq!(
+        node["original"],
+        hosted::registry_node(TILDE_ID),
+        "the vendor ledger records the REGISTRY node: {node:#}"
+    );
+    let ledger = redirect_ledger(root);
+    assert!(
+        ledger.as_ref().is_none_or(|l| l["records"]
+            .as_object()
+            .is_none_or(|r| !r.contains_key(PURL))),
+        "the redirect record is dropped: {ledger:#?}"
+    );
+    assert!(
+        !hosted::store_dir(root, TILDE_ID).exists(),
+        "the hosted store copy is invalidated"
+    );
+    assert!(!root.join("node_modules/.vlt-lock.json").exists());
+}
+
+fn revert_lands_on_registry(root: &Path) {
+    let (code, env, stderr) = vendor(root, &["--revert"]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(hosted::read(root, "vlt-lock.json"), registry_lock());
+    assert_eq!(hosted::read(root, "package.json"), PACKAGE_JSON);
+    assert!(!root.join(format!(".socket/vendor/npm/{UUID}")).exists());
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_hosted_then_scan_vendored_takeover_round_trips_to_registry() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    hosted_project(root, &server).await;
+
+    let (code, env, stderr) = scan(root, &server, "vendored", &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let codes = all_codes(&env);
+    assert!(
+        codes.contains(&"vendor_takeover_reverted_redirect".to_string()),
+        "{env:#}"
+    );
+    assert_eq!(
+        detail_of(&env, "redirect_vlt_reinstall_required"),
+        "vendored 1 hosted-pinned packages; removed their hosted installed copies, so \
+         node_modules is incomplete until you run `vlt install`"
+    );
+    assert_vendored_from_registry(root);
+    assert!(!root.join(".socket/manifest.json").exists());
+    revert_lands_on_registry(root);
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_vendor_dry_run_previews_the_takeover_then_wet_vendor_completes_it() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    let hosted_lock = hosted_project(root, &server).await;
+    seed_manifest(root);
+    let ledger = std::fs::read(hosted::ledger_path(root)).unwrap();
+
+    let (code, env, stderr) = vendor(root, &["--dry-run"]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let codes = all_codes(&env);
+    assert!(
+        codes.contains(&"vendor_would_revert_redirect".to_string()),
+        "{env:#}"
+    );
+    assert!(
+        !codes.contains(&"vendor_lock_entry_not_found".to_string()),
+        "the hosted node is registry-shaped: {env:#}"
+    );
+    assert_eq!(hosted::read(root, "vlt-lock.json"), hosted_lock);
+    assert_eq!(std::fs::read(hosted::ledger_path(root)).unwrap(), ledger);
+    assert!(
+        hosted::store_dir(root, TILDE_ID).exists(),
+        "a dry run heals nothing"
+    );
+
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        all_codes(&env).contains(&"vendor_takeover_reverted_redirect".to_string()),
+        "{env:#}"
+    );
+    assert_vendored_from_registry(root);
+    revert_lands_on_registry(root);
+}
+
+/// A vendored project, then the hosted takeover by `driver`.
+async fn vendored_then_hosted(driver: &str) {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    write_project(root);
+    seed_manifest(root);
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(hosted::read(root, "vlt-lock.json").contains(&rel()));
+    std::fs::remove_file(root.join(".socket/manifest.json")).unwrap();
+
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    let (code, env, stderr) = if driver == "scan" {
+        scan(root, &server, "hosted", &[])
+    } else {
+        let cwd = root.to_str().unwrap().to_string();
+        let uri = server.uri();
+        let argv = args(&cwd, &uri, &["get", UUID, "--mode", "hosted"]);
+        hosted::run_json(root, &argv, &[])
+    };
+    assert_eq!(code, 0, "[{driver}] {env:#}\n{stderr}");
+    let lock = hosted::read(root, "vlt-lock.json");
+    assert!(
+        lock.contains(&hosted::artifact_url(&server)) && !lock.contains(&rel()),
+        "[{driver}] the registry node is back and pinned to the hosted artifact: {lock}"
+    );
+    assert!(
+        lock.contains(&format!("\"file~_d left-pad\": \"prod 1.3.0 {TILDE_ID}\"")),
+        "[{driver}] the importer edge is restored: {lock}"
+    );
+    assert_eq!(
+        hosted::read(root, "package.json"),
+        PACKAGE_JSON,
+        "[{driver}]"
+    );
+    assert!(
+        vendor_entry(root).is_none(),
+        "[{driver}] the vendor entry is dropped"
+    );
+    assert!(
+        !root.join(format!(".socket/vendor/npm/{UUID}")).exists(),
+        "[{driver}] the vendored artifact is removed"
+    );
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = hosted::run_json(root, &["rollback", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "[{driver}] rollback: {env:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        registry_lock(),
+        "[{driver}]"
+    );
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_vendored_then_scan_hosted_takeover_round_trips_to_registry() {
+    vendored_then_hosted("scan").await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_vendored_then_get_hosted_takeover_round_trips_to_registry() {
+    vendored_then_hosted("get").await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_vendored_preflight_refuses_before_the_hosted_revert() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    let hosted_lock = hosted_project(root, &server).await;
+    seed_manifest(root);
+    // Declared in two dependency fields: the vlt backend would refuse it,
+    // so no driver may strip the live hosted pin on its behalf.
+    let pkg = "{\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  },\n  \"devDependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+    std::fs::write(root.join("package.json"), pkg).unwrap();
+    let ledger = std::fs::read(hosted::ledger_path(root)).unwrap();
+    let assert_intact = |what: &str| {
+        assert_eq!(hosted::read(root, "vlt-lock.json"), hosted_lock, "[{what}]");
+        assert_eq!(hosted::read(root, "package.json"), pkg, "[{what}]");
+        assert_eq!(
+            std::fs::read(hosted::ledger_path(root)).unwrap(),
+            ledger,
+            "[{what}]"
+        );
+        assert!(vendor_entry(root).is_none(), "[{what}]");
+        assert!(hosted::store_dir(root, TILDE_ID).exists(), "[{what}]");
+    };
+    for (what, dry) in [("vendor --dry-run", true), ("vendor", false)] {
+        let extra: &[&str] = if dry { &["--dry-run"] } else { &[] };
+        let (code, env, stderr) = vendor(root, extra);
+        assert_eq!(code, 1, "[{what}] {env:#}\n{stderr}");
+        assert!(
+            detail_of(&env, "vendor_lock_entry_unsupported").contains("multiple dependency fields"),
+            "[{what}] {env:#}"
+        );
+        assert!(
+            !all_codes(&env).contains(&"vendor_takeover_reverted_redirect".to_string()),
+            "[{what}] {env:#}"
+        );
+        assert_intact(what);
+    }
+    std::fs::remove_file(root.join(".socket/manifest.json")).unwrap();
+    let (code, env, stderr) = scan(root, &server, "vendored", &[]);
+    assert_ne!(code, 0, "[scan] {env:#}\n{stderr}");
+    assert!(
+        all_codes(&env).contains(&"vendor_lock_entry_unsupported".to_string()),
+        "[scan] {env:#}"
+    );
+    assert_intact("scan --mode vendored");
+    let (code, env, _) = scan(root, &server, "vendored", &["--dry-run"]);
+    assert_eq!(code, 0, "[scan --dry-run] {env:#}");
+    let preview = env.to_string();
+    assert!(
+        preview.contains("would_refuse") && preview.contains("vendor_lock_entry_unsupported"),
+        "[scan --dry-run] {env:#}"
+    );
+    assert_intact("scan --mode vendored --dry-run");
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_hosted_artifact_preflight_refuses_before_the_vendored_revert() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    write_project(root);
+    seed_manifest(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    std::fs::remove_file(root.join(".socket/manifest.json")).unwrap();
+    let lock = hosted::read(root, "vlt-lock.json");
+    let pkg = hosted::read(root, "package.json");
+    let state = std::fs::read(root.join(".socket/vendor/state.json")).unwrap();
+
+    let server = MockServer::start().await;
+    hosted::mock_discovery(&server).await;
+    hosted::mock_reference(&server).await;
+    hosted::mock_view(&server).await;
+    hosted::mock_artifact_with(&server, ResponseTemplate::new(404)).await;
+    let (_, env, stderr) = scan(root, &server, "hosted", &[]);
+    assert!(
+        hosted::warning_codes(&env).contains(&hosted::UNVERIFIABLE.to_string()),
+        "{env:#}\n{stderr}"
+    );
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        lock,
+        "the vendored wiring stays"
+    );
+    assert_eq!(hosted::read(root, "package.json"), pkg);
+    assert_eq!(
+        std::fs::read(root.join(".socket/vendor/state.json")).unwrap(),
+        state
+    );
+    assert!(root.join(rel()).join("index.js").is_file());
+}
diff --git a/crates/socket-patch-cli/tests/remove_duality_invariants.rs b/crates/socket-patch-cli/tests/remove_duality_invariants.rs
index 7012492e..41baadd2 100644
--- a/crates/socket-patch-cli/tests/remove_duality_invariants.rs
+++ b/crates/socket-patch-cli/tests/remove_duality_invariants.rs
@@ -37,8 +37,8 @@ fn run_remove(cwd: &Path, args: &[&str], env: &[(&str, &str)]) -> (i32, String,
 }
 
 fn read_json_file(path: &Path) -> serde_json::Value {
-    let body = std::fs::read_to_string(path)
-        .unwrap_or_else(|e| panic!("read {}: {e}", path.display()));
+    let body =
+        std::fs::read_to_string(path).unwrap_or_else(|e| panic!("read {}: {e}", path.display()));
     serde_json::from_str(&body).unwrap_or_else(|e| panic!("parse {}: {e}", path.display()))
 }
 
@@ -134,7 +134,13 @@ fn preserve_state_restores_but_keeps_entry() {
 
     let (code, stdout, stderr) = run_remove(
         tmp.path(),
-        &[PRESERVE_PURL, "--json", "--yes", "--offline", "--preserve-state"],
+        &[
+            PRESERVE_PURL,
+            "--json",
+            "--yes",
+            "--offline",
+            "--preserve-state",
+        ],
         &[],
     );
     assert_eq!(
@@ -420,7 +426,12 @@ fn default_remove_sweeps_archives_too() {
 
     let (code, stdout, stderr) = run_remove(
         tmp.path(),
-        &["pkg:npm/__archive_a__@1.0.0", "--json", "--yes", "--skip-rollback"],
+        &[
+            "pkg:npm/__archive_a__@1.0.0",
+            "--json",
+            "--yes",
+            "--skip-rollback",
+        ],
         &[],
     );
     assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
@@ -436,11 +447,17 @@ fn default_remove_sweeps_archives_too() {
     // A's archives are gone from BOTH archive dirs; B's survive in both.
     for dir in ["diffs", "packages"] {
         assert!(
-            !socket.join(dir).join(format!("{ARCH_UUID_A}.tar.gz")).exists(),
+            !socket
+                .join(dir)
+                .join(format!("{ARCH_UUID_A}.tar.gz"))
+                .exists(),
             "the removed entry's {dir} archive must be swept"
         );
         assert!(
-            socket.join(dir).join(format!("{ARCH_UUID_B}.tar.gz")).exists(),
+            socket
+                .join(dir)
+                .join(format!("{ARCH_UUID_B}.tar.gz"))
+                .exists(),
             "the kept entry's {dir} archive must survive"
         );
     }
@@ -770,7 +787,10 @@ fn hosted_only_unsupported_remove_without_manifest_fails_closed() {
     assert_eq!(code, 1, "stdout=\n{stdout}\nstderr=\n{stderr}");
     let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
     assert_eq!(v["status"], "error", "envelope={v}");
-    assert_eq!(v["error"]["code"], "hosted_revert_unsupported", "envelope={v}");
+    assert_eq!(
+        v["error"]["code"], "hosted_revert_unsupported",
+        "envelope={v}"
+    );
     let msg = v["error"]["message"].as_str().unwrap_or_default();
     assert!(
         msg.contains(GEM_PURL) && msg.contains("socket-patch rollback"),
@@ -850,3 +870,47 @@ fn drift_kept_vendored_remove_is_partial_failure() {
         "the vendored artifact must survive a drift-keep"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// `remove --preserve-state` of a vlt-vendored purl restores the registry
+/// lock and package.json but keeps the directory artifact and the ledger
+/// entry (byte-identical).
+#[test]
+fn remove_preserve_state_unwires_a_vlt_entry_and_keeps_the_artifact() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let state = std::fs::read(root.join(".socket/vendor/state.json")).unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &[
+            "remove",
+            hosted::PURL,
+            "--preserve-state",
+            "--offline",
+            "--cwd",
+            &cwd,
+        ],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert_eq!(
+        hosted::read(root, "package.json"),
+        vlt_vendored::PACKAGE_JSON
+    );
+    assert!(root.join(vlt_vendored::rel()).join("index.js").is_file());
+    assert_eq!(
+        std::fs::read(root.join(".socket/vendor/state.json")).unwrap(),
+        state
+    );
+}
diff --git a/crates/socket-patch-cli/tests/remove_invariants.rs b/crates/socket-patch-cli/tests/remove_invariants.rs
index d9aea922..47e3700e 100644
--- a/crates/socket-patch-cli/tests/remove_invariants.rs
+++ b/crates/socket-patch-cli/tests/remove_invariants.rs
@@ -192,7 +192,10 @@ fn remove_with_schema_invalid_manifest_emits_manifest_invalid() {
     std::fs::write(socket.join("manifest.json"), r#"{"not_patches": {}}"#).unwrap();
 
     let (code, stdout) = run_remove(tmp.path(), "pkg:npm/foo@1.0.0", &[]);
-    assert_eq!(code, 1, "schema-invalid manifest must exit 1; stdout=\n{stdout}");
+    assert_eq!(
+        code, 1,
+        "schema-invalid manifest must exit 1; stdout=\n{stdout}"
+    );
     let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
     assert_eq!(v["status"], "error");
     assert_eq!(
@@ -1037,3 +1040,33 @@ fn remove_dry_run_with_rollback_does_not_create_blobs_dir() {
         .collect();
     assert!(litter.is_empty(), "no stage litter: {litter:?}");
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// `remove --skip-rollback` of a vlt-vendored purl drops the manifest
+/// record only: the vlt wiring, the directory artifact and the ledger entry
+/// stay.
+#[test]
+fn remove_skip_rollback_keeps_a_vlt_vendored_entry_wired() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let lock = hosted::read(root, "vlt-lock.json");
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &["remove", hosted::PURL, "--skip-rollback", "--cwd", &cwd],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(hosted::read(root, "vlt-lock.json"), lock);
+    assert!(root.join(vlt_vendored::rel()).join("index.js").is_file());
+    assert_eq!(
+        vlt_vendored::state(root)["entries"][hosted::PURL]["flavor"],
+        "vlt"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/repair_vendor_e2e.rs b/crates/socket-patch-cli/tests/repair_vendor_e2e.rs
index 776519de..9b5e77dd 100644
--- a/crates/socket-patch-cli/tests/repair_vendor_e2e.rs
+++ b/crates/socket-patch-cli/tests/repair_vendor_e2e.rs
@@ -2091,3 +2091,41 @@ async fn repaired_vendored_state_attests_manifest_less() {
         });
     }
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// `repair --dry-run` over a deleted vlt directory artifact previews the
+/// rebuild (`wouldRebuild`, the dir path) and writes nothing; the wet run
+/// rebuilds it offline from the installed copy.
+#[test]
+fn repair_previews_then_rebuilds_a_deleted_vlt_dir() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let uuid_dir = root.join(format!(".socket/vendor/npm/{}", hosted::UUID));
+    std::fs::remove_dir_all(&uuid_dir).unwrap();
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &["repair", "--dry-run", "--offline", "--cwd", &cwd],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    let text = v.to_string();
+    assert!(
+        text.contains("wouldRebuild") && text.contains(&vlt_vendored::rel()),
+        "{v:#}"
+    );
+    assert!(!uuid_dir.exists());
+    let (code, v, stderr) = hosted::run_json(root, &["repair", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        std::fs::read(root.join(vlt_vendored::rel()).join("index.js")).unwrap(),
+        hosted::PATCHED
+    );
+    assert!(uuid_dir.join(".gitignore").is_file());
+}
diff --git a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
index 17168c4f..080dab93 100644
--- a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
+++ b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e.rs
@@ -1,6 +1,7 @@
 //! End-to-end tests for `repair`'s vendored-artifact phase across the npm
 //! FLAVORS — pnpm (lockfileVersion 9.0), yarn berry (4.x, node-modules
-//! linker), and bun (text bun.lock). The npm-classic (`package-lock.json`)
+//! linker), bun (text bun.lock), and vlt's directory artifacts
+//! (`repair_vendor_flavors_e2e/vlt.rs`). The npm-classic (`package-lock.json`)
 //! flavor is covered by `repair_vendor_e2e.rs`; this file is the flavor
 //! generalization of the same invariants:
 //!
@@ -30,6 +31,8 @@ use wiremock::{Mock, MockServer, ResponseTemplate};
 mod bun_vex;
 #[path = "common/mod.rs"]
 mod common;
+#[path = "repair_vendor_flavors_e2e/vlt.rs"]
+mod vlt;
 
 const ORG_SLUG: &str = "test-org";
 const UUID: &str = "1a2b3c4d-5e6f-4a1b-8c2d-0123456789ab";
@@ -325,8 +328,29 @@ fn write_fixture(root: &Path, flavor: Flavor) {
 /// vendor/repair in-memory staging has the patch content (same shape as
 /// repair_vendor_e2e.rs / scan_vendor_e2e.rs).
 async fn mount_patch_api(mock: &MockServer) {
+    mount_patch_api_with(mock, &[]).await;
+}
+
+/// [`mount_patch_api`] whose patch also carries `extra` files
+/// (`(path, before, after)`).
+async fn mount_patch_api_with(mock: &MockServer, extra: &[(&str, &[u8], &[u8])]) {
     let before_hash = git_sha256(BEFORE);
     let after_hash = git_sha256(AFTER);
+    let mut files = serde_json::json!({
+        "package/index.js": {
+            "beforeHash": before_hash,
+            "afterHash":  after_hash,
+            "blobContent": AFTER_B64,
+        }
+    });
+    for (file, before, after) in extra {
+        use base64::Engine as _;
+        files[*file] = serde_json::json!({
+            "beforeHash": git_sha256(before),
+            "afterHash": git_sha256(after),
+            "blobContent": base64::engine::general_purpose::STANDARD.encode(after),
+        });
+    }
     Mock::given(method("POST"))
         .and(path(format!("/v0/orgs/{ORG_SLUG}/patches/batch")))
         .respond_with(ResponseTemplate::new(200).set_body_json(serde_json::json!({
@@ -363,13 +387,7 @@ async fn mount_patch_api(mock: &MockServer) {
             "uuid": UUID,
             "purl": PURL,
             "publishedAt": "2026-01-01T00:00:00Z",
-            "files": {
-                "package/index.js": {
-                    "beforeHash": before_hash,
-                    "afterHash":  after_hash,
-                    "blobContent": AFTER_B64,
-                }
-            },
+            "files": files,
             "vulnerabilities": {
                 "GHSA-aaaa-bbbb-cccc": {
                     "cves": ["CVE-2026-0001"], "summary": "test vuln",
diff --git a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
new file mode 100644
index 00000000..ba82ca8a
--- /dev/null
+++ b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
@@ -0,0 +1,334 @@
+//! `repair` over vlt DIRECTORY artifacts (DESIGN §4.8), for both lock
+//! grammars (`lockfileVersion` 1 tilde ids, 0 legacy `·npm·` ids): the
+//! artifact is `.socket/vendor/npm/<uuid>/left-pad-1.3.0/node_modules/
+//! left-pad/`, its ledger `fileInventory` leaves out the package's own
+//! `node_modules/` (vlt's links), and `<uuid>/.gitignore` /
+//! `.gitattributes` are not part of it.
+//!
+//! (a) deleted dir → rebuilt to the recorded inventory, lock untouched;
+//! (b) vlt's links inside the package dir are healthy; a modified member
+//!     → corrupt, rebuilt;
+//! (c) a planted regular file under the package's `node_modules/` →
+//!     corrupt (`vendor_inventory_mismatch`), rebuilt without it;
+//! (d) ledger deleted → reconstructed from `vlt-lock.json` (flavor `vlt`),
+//!     rebuilt member-verified, and its revert blocked by the unwired guard;
+//! (e) the orphan sweep keeps a lock-wired dir leaf and removes an
+//!     unreferenced one;
+//! (f) a deleted `<uuid>/.gitignore` is rewritten, no rebuild;
+//! (g) a package.json-touching patch of a package with devDependencies is
+//!     healthy (the vlt manifest exemption; no Corrupt → rebuild loop).
+
+use std::path::{Path, PathBuf};
+
+use super::{
+    common, events_of, mount_patch_api, parse_env, run_cli, AFTER, BEFORE, DEP, DEP_VERSION, PURL,
+    UUID,
+};
+
+#[derive(Clone, Copy, Debug)]
+enum VltLock {
+    V0,
+    V1,
+}
+
+const LOCKS: [VltLock; 2] = [VltLock::V0, VltLock::V1];
+
+impl VltLock {
+    fn lock(self) -> String {
+        let (version, id, importer) = match self {
+            VltLock::V0 => (0, "·npm·left-pad@1.3.0", "file·."),
+            VltLock::V1 => (1, "~npm~left-pad@1.3.0", "file~_d"),
+        };
+        format!(
+            "{{\n  \"lockfileVersion\": {version},\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+             \"{id}\": [0,\"{DEP}\",\"sha512-orig==\",\"https://registry.npmjs.org/left-pad/-/\
+             left-pad-1.3.0.tgz\"]\n  }},\n  \"edges\": {{\n    \"{importer} {DEP}\": \"prod \
+             {DEP_VERSION} {id}\"\n  }}\n}}\n"
+        )
+    }
+}
+
+fn rel() -> String {
+    format!(".socket/vendor/npm/{UUID}/{DEP}-{DEP_VERSION}/node_modules/{DEP}")
+}
+
+fn write_fixture(root: &Path, lock: VltLock, package_json: Option<&str>) {
+    std::fs::write(
+        root.join("package.json"),
+        format!(
+            "{{\n  \"name\": \"repair-vlt\",\n  \"dependencies\": {{\n    \"{DEP}\": \"{DEP_VERSION}\"\n  }}\n}}\n"
+        ),
+    )
+    .unwrap();
+    std::fs::write(root.join("vlt-lock.json"), lock.lock()).unwrap();
+    let pkg = root.join("node_modules").join(DEP);
+    std::fs::create_dir_all(&pkg).unwrap();
+    std::fs::write(
+        pkg.join("package.json"),
+        package_json
+            .map(str::to_string)
+            .unwrap_or_else(|| format!(r#"{{"name":"{DEP}","version":"{DEP_VERSION}"}}"#)),
+    )
+    .unwrap();
+    std::fs::write(pkg.join("index.js"), BEFORE).unwrap();
+}
+
+/// `scan --vendor --yes` over the fixture; returns the artifact dir.
+fn vendor_project(root: &Path, uri: &str, lock: VltLock) -> PathBuf {
+    let (code, stdout, stderr) = run_cli(root, uri, &["scan", "--vendor", "--yes"]);
+    assert_eq!(code, 0, "{lock:?}: vendor setup: {stdout}\n{stderr}");
+    let dir = root.join(rel());
+    assert!(dir.join("index.js").is_file(), "{lock:?}: {stdout}");
+    assert!(
+        std::fs::read_to_string(root.join("vlt-lock.json"))
+            .unwrap()
+            .contains(&rel()),
+        "{lock:?}"
+    );
+    dir
+}
+
+fn state(root: &Path) -> serde_json::Value {
+    serde_json::from_slice(&std::fs::read(root.join(".socket/vendor/state.json")).unwrap()).unwrap()
+}
+
+fn repair(root: &Path, uri: &str) -> serde_json::Value {
+    let (code, stdout, stderr) = run_cli(root, uri, &["repair"]);
+    assert_eq!(code, 0, "repair: {stdout}\n{stderr}");
+    parse_env(&stdout)
+}
+
+fn rebuilt(v: &serde_json::Value) -> bool {
+    events_of(v)
+        .iter()
+        .any(|e| e["action"] == "rebuilt" && e["purl"] == PURL)
+}
+
+fn inventory(root: &Path) -> serde_json::Value {
+    state(root)["entries"][PURL]["artifact"]["fileInventory"].clone()
+}
+
+/// vlt's links inside the vendored package dir: a dependency link (a real
+/// dir here, so the suite runs everywhere) and a `.bin` script.
+fn add_vlt_links(dir: &Path) {
+    std::fs::create_dir_all(dir.join("node_modules/dep")).unwrap();
+    std::fs::create_dir_all(dir.join("node_modules/.bin")).unwrap();
+    std::fs::write(dir.join("node_modules/.bin/tool"), "#!/bin/sh\n").unwrap();
+}
+
+#[tokio::test]
+async fn vlt_repair_rebuilds_a_deleted_dir() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        let dir = vendor_project(tmp.path(), &mock.uri(), lock);
+        let inv = inventory(tmp.path());
+        assert!(inv["index.js"].is_string(), "{lock:?}: {inv}");
+        let wired = std::fs::read(tmp.path().join("vlt-lock.json")).unwrap();
+        std::fs::remove_dir_all(tmp.path().join(format!(".socket/vendor/npm/{UUID}"))).unwrap();
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(rebuilt(&v), "{lock:?}: {v}");
+        assert_eq!(std::fs::read(dir.join("index.js")).unwrap(), AFTER);
+        assert_eq!(inventory(tmp.path()), inv, "{lock:?}");
+        assert_eq!(
+            std::fs::read(tmp.path().join("vlt-lock.json")).unwrap(),
+            wired,
+            "{lock:?}: repair never touches the lock"
+        );
+        assert!(tmp
+            .path()
+            .join(format!(".socket/vendor/npm/{UUID}/.gitignore"))
+            .is_file());
+    }
+}
+
+#[tokio::test]
+async fn vlt_repair_rebuilds_a_corrupt_member() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        let dir = vendor_project(tmp.path(), &mock.uri(), lock);
+        add_vlt_links(&dir);
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(
+            !rebuilt(&v),
+            "{lock:?}: vlt's links are not a mismatch: {v}"
+        );
+        std::fs::write(dir.join("index.js"), b"tampered\n").unwrap();
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(rebuilt(&v), "{lock:?}: {v}");
+        assert_eq!(std::fs::read(dir.join("index.js")).unwrap(), AFTER);
+        assert_eq!(inventory(tmp.path())["index.js"], common::sha256_hex(AFTER));
+    }
+}
+
+#[tokio::test]
+async fn vlt_repair_rebuilds_over_a_planted_file() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        let dir = vendor_project(tmp.path(), &mock.uri(), lock);
+        std::fs::create_dir_all(dir.join("node_modules")).unwrap();
+        std::fs::write(dir.join("node_modules/evil.js"), b"planted\n").unwrap();
+        let (_, stdout, _) = run_cli(tmp.path(), &mock.uri(), &["repair", "--dry-run"]);
+        let dry = parse_env(&stdout);
+        assert!(
+            dry.to_string().contains("vendor_artifact_corrupt"),
+            "{lock:?}: {dry}"
+        );
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(rebuilt(&v), "{lock:?}: {v}");
+        assert!(!dir.join("node_modules/evil.js").exists(), "{lock:?}");
+        assert_eq!(std::fs::read(dir.join("index.js")).unwrap(), AFTER);
+    }
+}
+
+#[tokio::test]
+async fn vlt_repair_reconstructs_the_ledger_from_the_lock() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        super::mount_blob(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        vendor_project(tmp.path(), &mock.uri(), lock);
+        let inv = inventory(tmp.path());
+        std::fs::remove_file(tmp.path().join(".socket/vendor/state.json")).unwrap();
+        let v = repair(tmp.path(), &mock.uri());
+        let entry = state(tmp.path())["entries"][PURL].clone();
+        assert_eq!(entry["flavor"], "vlt", "{lock:?}: {entry:#}\n{v}");
+        assert_eq!(entry["artifact"]["path"], rel(), "{lock:?}");
+        assert_eq!(
+            entry["artifact"]["fileInventory"], inv,
+            "{lock:?}: the fingerprint comes from a member-verified rebuild: {v}"
+        );
+        assert!(
+            v["warnings"]
+                .as_array()
+                .into_iter()
+                .flatten()
+                .any(|w| w["code"] == "vendor_wiring_unknown"),
+            "{lock:?}: {v}"
+        );
+        let (code, stdout, _) = common::run_with_env(
+            tmp.path(),
+            &["vendor", "--revert", "--json"],
+            &[("SOCKET_TELEMETRY_DISABLED", "1")],
+        );
+        let r = parse_env(&stdout);
+        assert_ne!(code, 0, "{lock:?}: {r}");
+        assert!(
+            events_of(&r)
+                .iter()
+                .any(|e| e["errorCode"] == "vendor_wiring_unknown_revert_blocked"),
+            "{lock:?}: the unwired guard: {r}"
+        );
+        assert!(tmp.path().join(rel()).join("index.js").is_file());
+    }
+}
+
+#[tokio::test]
+async fn vlt_orphan_sweep_keeps_a_wired_dir_leaf() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        let dir = vendor_project(tmp.path(), &mock.uri(), lock);
+        let other = "33333333-3333-4333-8333-333333333333";
+        let orphan = tmp.path().join(format!(
+            ".socket/vendor/npm/{other}/{DEP}-{DEP_VERSION}/node_modules/{DEP}"
+        ));
+        std::fs::create_dir_all(&orphan).unwrap();
+        std::fs::write(orphan.join("index.js"), AFTER).unwrap();
+        std::fs::write(
+            tmp.path().join(".socket/vendor/state.json"),
+            "{\"version\":1,\"entries\":{}}",
+        )
+        .unwrap();
+        let (code, stdout, stderr) = common::run_with_env(
+            tmp.path(),
+            &["vendor", "--revert", "--json"],
+            &[("SOCKET_TELEMETRY_DISABLED", "1")],
+        );
+        assert_eq!(code, 0, "{lock:?}: {stdout}\n{stderr}");
+        assert!(
+            dir.join("index.js").is_file(),
+            "{lock:?}: the lock still installs it"
+        );
+        assert!(
+            !tmp.path()
+                .join(format!(".socket/vendor/npm/{other}"))
+                .exists(),
+            "{lock:?}: the unreferenced dir leaf is swept: {stdout}"
+        );
+    }
+}
+
+#[tokio::test]
+async fn vlt_repair_restores_the_uuid_gitignore() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        vendor_project(tmp.path(), &mock.uri(), lock);
+        let uuid = tmp.path().join(format!(".socket/vendor/npm/{UUID}"));
+        let ignore = std::fs::read(uuid.join(".gitignore")).unwrap();
+        std::fs::remove_file(uuid.join(".gitignore")).unwrap();
+        std::fs::write(uuid.join(".gitattributes"), "* text=auto\n").unwrap();
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(!rebuilt(&v), "{lock:?}: no rebuild: {v}");
+        assert_eq!(std::fs::read(uuid.join(".gitignore")).unwrap(), ignore);
+        assert_eq!(
+            std::fs::read_to_string(uuid.join(".gitattributes")).unwrap(),
+            "* -text\n"
+        );
+    }
+}
+
+#[tokio::test]
+async fn vlt_repair_keeps_a_devdependency_stripped_manifest_healthy() {
+    let before_pkg =
+        format!("{{\"name\":\"{DEP}\",\"version\":\"{DEP_VERSION}\",\"devDependencies\":{{\"tap\":\"1\"}}}}");
+    let after_pkg = format!(
+        "{{\"name\":\"{DEP}\",\"version\":\"{DEP_VERSION}\",\"main\":\"index.js\",\"devDependencies\":{{\"tap\":\"1\"}}}}"
+    );
+    let mock = wiremock::MockServer::start().await;
+    super::mount_patch_api_with(
+        &mock,
+        &[(
+            "package/package.json",
+            before_pkg.as_bytes(),
+            after_pkg.as_bytes(),
+        )],
+    )
+    .await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_fixture(tmp.path(), VltLock::V1, Some(&before_pkg));
+    let dir = vendor_project(tmp.path(), &mock.uri(), VltLock::V1);
+    let committed = std::fs::read_to_string(dir.join("package.json")).unwrap();
+    assert!(!committed.contains("devDependencies"), "{committed}");
+    assert_eq!(
+        inventory(tmp.path())["package.json"],
+        common::sha256_hex(committed.as_bytes()),
+    );
+    for run in 0..2 {
+        let v = repair(tmp.path(), &mock.uri());
+        assert!(!rebuilt(&v), "[{run}] no Corrupt → rebuild loop: {v}");
+        assert!(
+            !v.to_string().contains("vendor_artifact_corrupt"),
+            "[{run}] {v}"
+        );
+    }
+    assert_eq!(
+        std::fs::read_to_string(dir.join("package.json")).unwrap(),
+        committed
+    );
+}
diff --git a/crates/socket-patch-cli/tests/rollback_invariants.rs b/crates/socket-patch-cli/tests/rollback_invariants.rs
index 8304a101..676b8509 100644
--- a/crates/socket-patch-cli/tests/rollback_invariants.rs
+++ b/crates/socket-patch-cli/tests/rollback_invariants.rs
@@ -1194,3 +1194,33 @@ fn rollback_honors_manifest_path_override() {
         "stdout={stdout}"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// An unscoped `rollback` over a vlt-vendored project reverts the `file`
+/// node, its edges and package.json to the registry bytes and removes the
+/// directory artifact.
+#[test]
+fn rollback_unscoped_reverts_a_vlt_vendored_entry() {
+    use vlt_hosted_common as hosted;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, true);
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, v, stderr) = hosted::run_json(root, &["rollback", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    assert_eq!(
+        hosted::read(root, "vlt-lock.json"),
+        vlt_vendored::registry_lock()
+    );
+    assert_eq!(
+        hosted::read(root, "package.json"),
+        vlt_vendored::PACKAGE_JSON
+    );
+    assert!(!root
+        .join(format!(".socket/vendor/npm/{}", hosted::UUID))
+        .exists());
+}
diff --git a/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs b/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
index b6edc7f1..c1e97b7e 100644
--- a/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
+++ b/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
@@ -295,3 +295,81 @@ fn rollback_offline_succeeds_when_every_copy_already_original() {
     assert_eq!(std::fs::read(&index_a).unwrap(), original);
     assert_eq!(std::fs::read(&index_b).unwrap(), original);
 }
+
+/// vlt twin: the importer copy (vlt's link to the plain store entry) is
+/// already original while a peer-variant store entry of the same
+/// `name@version` is still patched. The gate must probe the variant too and
+/// fetch the before-blob it needs.
+#[test]
+fn rollback_downloads_blob_needed_only_by_a_vlt_store_peer_variant() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let (index_a, index_b, before_hash, original, patched) = build_diverged_two_copy_tree(root);
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    let store = |id: &str| {
+        root.join("node_modules/.vlt")
+            .join(id)
+            .join("node_modules/gatedup")
+    };
+    let plain = write_copy(&store("~npm~gatedup@1.0.0"), "gatedup", "1.0.0", &original);
+    let variant = write_copy(
+        &store("~npm~gatedup@1.0.0~peer.0df72515a50372ba"),
+        "gatedup",
+        "1.0.0",
+        &patched,
+    );
+    let importer = write_copy(
+        &root.join("node_modules/gatedup"),
+        "gatedup",
+        "1.0.0",
+        &original,
+    );
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
+         \"~npm~gatedup@1.0.0\": [0,\"gatedup\",\"sha512-G==\"],\n    \
+         \"~npm~gatedup@1.0.0~peer.0df72515a50372ba\": [0,\"gatedup\",\"sha512-G==\"]\n  },\n  \
+         \"edges\": {\n    \"file~_d gatedup\": \"prod 1.0.0 ~npm~gatedup@1.0.0\"\n  }\n}\n",
+    )
+    .unwrap();
+    let _ = (index_a, index_b);
+
+    let (port, seen_paths) = spawn_blob_server(before_hash.clone(), original.clone());
+    let out = rollback_cmd(root)
+        .args([
+            "--json",
+            "--ecosystems",
+            "npm",
+            "--api-url",
+            &format!("http://127.0.0.1:{port}"),
+            "--api-token",
+            "test-token",
+            "--org",
+            "testorg",
+        ])
+        .output()
+        .expect("run socket-patch rollback");
+    let stdout = String::from_utf8_lossy(&out.stdout);
+    let stderr = String::from_utf8_lossy(&out.stderr);
+    assert!(
+        seen_paths
+            .lock()
+            .unwrap()
+            .iter()
+            .any(|p| p == &format!("/v0/orgs/testorg/patches/blob/{before_hash}")),
+        "the gate must fetch the blob the patched variant needs.\nstdout: {stdout}\nstderr: {stderr}"
+    );
+    assert_eq!(
+        out.status.code(),
+        Some(0),
+        "stdout: {stdout}\nstderr: {stderr}"
+    );
+    for index in [&plain, &variant, &importer] {
+        assert_eq!(
+            std::fs::read(index).unwrap(),
+            original,
+            "{}",
+            index.display()
+        );
+    }
+}
diff --git a/crates/socket-patch-cli/tests/scan_invariants.rs b/crates/socket-patch-cli/tests/scan_invariants.rs
index 458bd303..2aab0020 100644
--- a/crates/socket-patch-cli/tests/scan_invariants.rs
+++ b/crates/socket-patch-cli/tests/scan_invariants.rs
@@ -2096,3 +2096,52 @@ async fn ecosystems_filter_keeps_records_but_not_wiring_live() {
          even though the lock provably pins the patch server; envelope={v}"
     );
 }
+
+#[path = "vlt_hosted_common/mod.rs"]
+mod vlt_hosted_common;
+#[path = "vlt_hosted_common/vendored.rs"]
+mod vlt_vendored;
+
+/// vlt twin of `scan_agent_over_vendored_purl_surfaces_run_level_warning`:
+/// an agent scan over a purl a vlt directory artifact vendors skips it
+/// (`vendored`), names the retained ownership, and patches nothing in
+/// place.
+#[tokio::test]
+async fn scan_agent_over_vlt_vendored_purl_surfaces_run_level_warning() {
+    use vlt_hosted_common as hosted;
+    let mock = MockServer::start().await;
+    hosted::mock_all(&mock).await;
+    let tmp = tempfile::tempdir().expect("tempdir");
+    let root = tmp.path();
+    vlt_vendored::vendored_project(root, false);
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = mock.uri();
+    let (code, v, stderr) = hosted::run_json(
+        root,
+        &[
+            "scan",
+            "--mode",
+            "agent",
+            "--yes",
+            "--cwd",
+            &cwd,
+            "--api-url",
+            &uri,
+            "--org",
+            hosted::ORG,
+            "--api-token",
+            "fake",
+        ],
+        &[],
+    );
+    assert_eq!(code, 0, "{v:#}\n{stderr}");
+    let patches = v["apply"]["patches"].as_array().expect("apply.patches");
+    assert_eq!(patches[0]["errorCode"], "vendored", "{v:#}");
+    let w = find_warning(&v, "vendored_ownership_retained").unwrap_or_else(|| panic!("{v:#}"));
+    assert!(w["detail"].as_str().unwrap().contains(hosted::PURL), "{w}");
+    assert_eq!(
+        std::fs::read(root.join("node_modules/left-pad/index.js")).unwrap(),
+        hosted::PRISTINE,
+        "agent mode yields a vendored purl"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/scan_vendor_e2e.rs b/crates/socket-patch-cli/tests/scan_vendor_e2e.rs
index 91a53a98..fa871684 100644
--- a/crates/socket-patch-cli/tests/scan_vendor_e2e.rs
+++ b/crates/socket-patch-cli/tests/scan_vendor_e2e.rs
@@ -1977,6 +1977,120 @@ async fn scan_vendored_bun_silent_human_names_code_on_stderr() {
     assert!(!tmp.path().join(".socket/vendor").exists());
 }
 
+// ---------------------------------------------------------------------------
+// vlt vendored mode through `scan` (DESIGN §4.6): the preflight in the
+// download phase and the dry-run preview, and a direct dependency vendored
+// ---------------------------------------------------------------------------
+
+const VLT_TRANSITIVE_CODE: &str = "vendor_vlt_transitive_unsupported";
+
+/// `left-pad` in vlt's store, reached from the root through `has` (a
+/// transitive target) or directly.
+fn write_vlt_fixture(root: &Path, transitive: bool) {
+    write_fixture(root);
+    std::fs::remove_file(root.join("package-lock.json")).unwrap();
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    let store = root.join("node_modules/.vlt/~npm~left-pad@1.3.0/node_modules/left-pad");
+    std::fs::create_dir_all(&store).unwrap();
+    std::fs::write(
+        store.join("package.json"),
+        br#"{"name":"left-pad","version":"1.3.0"}"#,
+    )
+    .unwrap();
+    std::fs::write(store.join("index.js"), BEFORE).unwrap();
+    let (dep, nodes, edges) = if transitive {
+        (
+            "has",
+            "    \"~npm~has@1.0.0\": [0,\"has\",\"sha512-H==\"],\n    \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-orig==\"]",
+            "    \"file~_d has\": \"prod 1.0.0 ~npm~has@1.0.0\",\n    \"~npm~has@1.0.0 left-pad\": \"prod ^1.3.0 ~npm~left-pad@1.3.0\"",
+        )
+    } else {
+        (
+            "left-pad",
+            "    \"~npm~left-pad@1.3.0\": [0,\"left-pad\",\"sha512-orig==\"]",
+            "    \"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0\"",
+        )
+    };
+    let spec = if transitive { "1.0.0" } else { "1.3.0" };
+    std::fs::write(
+        root.join("package.json"),
+        format!("{{\n  \"name\": \"scan-vendor-test\",\n  \"dependencies\": {{\n    \"{dep}\": \"{spec}\"\n  }}\n}}\n"),
+    )
+    .unwrap();
+    std::fs::write(
+        root.join("vlt-lock.json"),
+        format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n{nodes}\n  }},\n  \"edges\": {{\n{edges}\n  }}\n}}\n"
+        ),
+    )
+    .unwrap();
+}
+
+#[tokio::test]
+async fn scan_vendored_vlt_transitive_refuses_in_download_phase() {
+    let mock = MockServer::start().await;
+    mount_patch_api(&mock, UUID).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_fixture(tmp.path(), true);
+    let lock_before = std::fs::read(tmp.path().join("vlt-lock.json")).unwrap();
+    let (code, stdout, stderr) = run_scan_vendor(tmp.path(), &mock.uri(), &["--mode", "vendored"]);
+    assert_eq!(code, 1, "stdout={stdout}; stderr={stderr}");
+    let v: serde_json::Value = serde_json::from_str(stdout.trim()).expect("valid JSON");
+    let dl = &v["download"];
+    assert_eq!(dl["failed"], 1, "envelope={v}");
+    assert_eq!(
+        dl["patches"][0]["errorCode"], VLT_TRANSITIVE_CODE,
+        "envelope={v}"
+    );
+    assert_eq!(
+        view_fetches(&mock).await,
+        0,
+        "a refused patch is never fetched"
+    );
+    assert_eq!(
+        std::fs::read(tmp.path().join("vlt-lock.json")).unwrap(),
+        lock_before
+    );
+    assert!(!tmp.path().join(".socket").exists());
+
+    let (code, stdout, stderr) = run_scan_vendor(
+        tmp.path(),
+        &mock.uri(),
+        &["--mode", "vendored", "--dry-run"],
+    );
+    assert_eq!(code, 0, "stdout={stdout}; stderr={stderr}");
+    let v: serde_json::Value = serde_json::from_str(stdout.trim()).expect("valid JSON");
+    let text = v.to_string();
+    assert!(
+        text.contains("would_refuse") && text.contains(VLT_TRANSITIVE_CODE),
+        "envelope={v}"
+    );
+    assert!(!tmp.path().join(".socket").exists());
+}
+
+#[tokio::test]
+async fn scan_vendored_vlt_direct_dependency_vendors() {
+    let mock = MockServer::start().await;
+    mount_patch_api(&mock, UUID).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_vlt_fixture(tmp.path(), false);
+    let (code, stdout, stderr) = run_scan_vendor(tmp.path(), &mock.uri(), &["--mode", "vendored"]);
+    assert_eq!(code, 0, "stdout={stdout}; stderr={stderr}");
+    let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+    assert_eq!(
+        std::fs::read(tmp.path().join(&rel).join("index.js")).unwrap(),
+        AFTER
+    );
+    let lock = std::fs::read_to_string(tmp.path().join("vlt-lock.json")).unwrap();
+    assert!(lock.contains(&format!("prod file:./{rel} ")), "{lock}");
+    let state: serde_json::Value = serde_json::from_str(
+        &std::fs::read_to_string(tmp.path().join(".socket/vendor/state.json")).unwrap(),
+    )
+    .unwrap();
+    assert_eq!(state["entries"][PURL]["flavor"], "vlt", "{state}");
+    assert_socket_dir_lean(tmp.path());
+}
+
 /// Manifest-less VEX over the committed state `scan --vendor` leaves
 /// (manifest-free since 5.0 — the ledger's `detached` entries embed the
 /// records, and the hidden `--detached` flag is a no-op, so there is one
diff --git a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
index a772c5bd..5a771c10 100644
--- a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
+++ b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
@@ -25,8 +25,9 @@
 //!    discovery + the patch API (the view route is hit).
 //! 3. `offline` — `--offline` with no ledgers: `record_unavailable`, exit 1,
 //!    ZERO requests to the API.
-//! 4. `reverted` — the lock put back to the registry version (ledgers and
-//!    committed artifacts kept, the patched install left in node_modules):
+//! 4. `reverted` — the lock (and, vendored, the importer package.json
+//!    files) put back to the registry version (ledgers and committed
+//!    artifacts kept, the patched install left in node_modules):
 //!    NOT attested (`redirect_unwired` / `vendor_unwired`), also under
 //!    `--no-verify`.
 //!
@@ -95,6 +96,9 @@ pub struct VltVexCase<'a> {
     /// `vlt-lock.json` BEFORE the patch (the registry wiring) — the
     /// `reverted` step writes it back.
     pub registry_lock: Vec<u8>,
+    /// Project-relative package.json files BEFORE a vendored wiring (their
+    /// `file:` specs are wiring too); the `reverted` step writes them back.
+    pub registry_manifests: Vec<(String, Vec<u8>)>,
     /// `--patch-server-url` for a hosted URL on a mock origin (a hosted ref
     /// counts only on a Socket host or the configured one).
     pub patch_server_url: Option<String>,
@@ -322,6 +326,9 @@ fn matrix<F: FnOnce(&Path)>(project: &Path, scratch: &Path, case: &VltVexCase<'_
         "{what}: the flow left no ledger — the reverted step would be vacuous"
     );
     std::fs::write(&lock_path, &case.registry_lock).unwrap();
+    for (rel, bytes) in &case.registry_manifests {
+        std::fs::write(checkout.join(rel), bytes).unwrap();
+    }
     for no_verify in [false, true] {
         let run = VexRun {
             no_verify,
diff --git a/crates/socket-patch-cli/tests/vlt_hosted_common/vendored.rs b/crates/socket-patch-cli/tests/vlt_hosted_common/vendored.rs
new file mode 100644
index 00000000..8cf524b9
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt_hosted_common/vendored.rs
@@ -0,0 +1,74 @@
+//! A vlt project vendored at [`super::UUID`] with the hosted fixture's
+//! bytes, for the suites that pair a vendored vlt ledger with the hosted
+//! wiremock API (takeovers, overlap warnings, GC, list, remove).
+//!
+//! Include as a child of `vlt_hosted_common`:
+//! `#[path = "vlt_hosted_common/vendored.rs"] mod vlt_vendored;` next to
+//! `mod vlt_hosted_common;`, then `use crate::vlt_hosted_common as hosted;`.
+
+#![allow(dead_code)]
+
+use std::path::Path;
+
+use serde_json::json;
+
+use crate::vlt_hosted_common::{self as hosted, PATCHED, PRISTINE, PURL, TILDE_ID, UUID};
+
+pub const PACKAGE_JSON: &str =
+    "{\n  \"name\": \"consumer\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+pub fn registry_lock() -> String {
+    format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {}\n  }},\n  \
+         \"edges\": {{\n    \"file~_d left-pad\": \"prod 1.3.0 {TILDE_ID}\"\n  }}\n}}\n",
+        hosted::registry_node(TILDE_ID)
+    )
+}
+
+pub fn rel() -> String {
+    format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad")
+}
+
+/// The registry project (lock, package.json, a pristine importer copy).
+pub fn write_project(root: &Path) {
+    std::fs::write(root.join("vlt-lock.json"), registry_lock()).unwrap();
+    std::fs::write(root.join("package.json"), PACKAGE_JSON).unwrap();
+    hosted::install_importer(root, PRISTINE);
+}
+
+/// The manifest record + after-hash blob `vendor --offline` reads.
+pub fn seed_manifest(root: &Path) {
+    let socket = root.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    let mut record = hosted::view_body();
+    record.as_object_mut().unwrap().remove("purl");
+    record["exportedAt"] = json!("2026-01-01T00:00:00Z");
+    std::fs::write(
+        socket.join("manifest.json"),
+        serde_json::to_vec_pretty(&json!({ "patches": { PURL: record } })).unwrap(),
+    )
+    .unwrap();
+    std::fs::write(
+        socket.join("blobs").join(hosted::git_sha256(PATCHED)),
+        PATCHED,
+    )
+    .unwrap();
+}
+
+/// [`write_project`] vendored by `vendor --offline`; `keep_manifest`
+/// leaves the manifest in place (manifest-driven entry).
+pub fn vendored_project(root: &Path, keep_manifest: bool) {
+    write_project(root);
+    seed_manifest(root);
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = hosted::run_json(root, &["vendor", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "vendor: {env:#}\n{stderr}");
+    assert!(root.join(rel()).join("index.js").is_file());
+    if !keep_manifest {
+        std::fs::remove_file(root.join(".socket/manifest.json")).unwrap();
+    }
+}
+
+pub fn state(root: &Path) -> serde_json::Value {
+    serde_json::from_slice(&std::fs::read(root.join(".socket/vendor/state.json")).unwrap()).unwrap()
+}
diff --git a/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs b/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs
new file mode 100644
index 00000000..76639107
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs
@@ -0,0 +1,474 @@
+//! Hermetic vlt vendored-mode fixtures shared by the vendor, takeover,
+//! repair, scan/get, VEX and lifecycle suites.
+//!
+//! Two project sources:
+//! * the committed real-vlt captures under
+//!   `socket-patch-core/tests/fixtures/vendor/npm/vlt/<vlt version>/`
+//!   (projects plus the expected lock and package.json files real vlt kept
+//!   byte-stable through `vlt ci`), used as byte oracles;
+//! * a small synthetic `left-pad` project ([`Lock`], [`project`]) for the
+//!   shapes no capture has.
+//!
+//! The installed copy is staged as vlt's store entry
+//! `node_modules/.vlt/<DepID>/node_modules/<name>` (a real dir, so the
+//! suites run on every OS), and every run is `--offline` against a staged
+//! manifest record plus its after-hash blob, unless a test says otherwise.
+//!
+//! Include with `#[path = "vlt_vendor_common/mod.rs"] mod vlt_vendor;`.
+
+#![allow(dead_code)]
+
+use std::path::{Path, PathBuf};
+use std::process::Command;
+
+use serde_json::{json, Value};
+use sha2::{Digest, Sha256};
+
+pub const UUID: &str = "9f6b2c4e-1d3a-4f6b-8c2d-7e5a9b1c3d5f";
+pub const UUID2: &str = "0a1b2c3d-4e5f-4a7b-8c9d-0e1f2a3b4c5d";
+/// The uuid the real-vlt captures were taken with.
+pub const FIXTURE_UUID: &str = "11111111-2222-4333-8444-555555555555";
+pub const NAME: &str = "left-pad";
+pub const VERSION: &str = "1.3.0";
+pub const PURL: &str = "pkg:npm/left-pad@1.3.0";
+pub const PRISTINE: &[u8] = b"module.exports = 'pristine';\n";
+pub const PATCHED: &[u8] = b"module.exports = 'patched';\n";
+pub const REG_SHA: &str = "sha512-REGISTRYregistryREGISTRYregistry==";
+pub const REG_URL: &str = "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz";
+pub const VLT_LOCK: &str = "vlt-lock.json";
+
+/// The real-vlt versions whose captures are committed.
+pub const CAPTURED: &[&str] = &["1.2.0", "1.0.10", "1.0.0-rc.14"];
+
+pub fn git_sha256(bytes: &[u8]) -> String {
+    let mut hasher = Sha256::new();
+    hasher.update(format!("blob {}\0", bytes.len()).as_bytes());
+    hasher.update(bytes);
+    hex::encode(hasher.finalize())
+}
+
+pub fn fixtures() -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("../socket-patch-core/tests/fixtures/vendor/npm/vlt")
+}
+
+/// `.socket/vendor/npm/<uuid>/<leaf>/node_modules/<name>` (DESIGN §4.2).
+pub fn rel_dir(uuid: &str, name: &str, version: &str) -> String {
+    let (scope, bare) = match name.split_once('/') {
+        Some((scope, bare)) => (format!("{scope}/"), bare),
+        None => (String::new(), name),
+    };
+    format!(".socket/vendor/npm/{uuid}/{scope}{bare}-{version}/node_modules/{name}")
+}
+
+pub fn uuid_dir(root: &Path, uuid: &str) -> PathBuf {
+    root.join(format!(".socket/vendor/npm/{uuid}"))
+}
+
+/// The file DepID of `rel` in a `lockfileVersion: 1` lock.
+pub fn file_id_v1(rel: &str) -> String {
+    format!("file~{}", rel.replace('_', "__").replace('/', "+"))
+}
+
+pub fn copy_dir(src: &Path, dst: &Path) {
+    std::fs::create_dir_all(dst).unwrap();
+    for entry in std::fs::read_dir(src).unwrap() {
+        let entry = entry.unwrap();
+        let to = dst.join(entry.file_name());
+        if entry.file_type().unwrap().is_dir() {
+            copy_dir(&entry.path(), &to);
+        } else {
+            std::fs::copy(entry.path(), &to).unwrap();
+        }
+    }
+}
+
+/// Every file under `dir` (relative, forward-slashed) with its bytes.
+pub fn snapshot(dir: &Path) -> std::collections::BTreeMap<String, Vec<u8>> {
+    fn walk(root: &Path, dir: &Path, out: &mut std::collections::BTreeMap<String, Vec<u8>>) {
+        let Ok(entries) = std::fs::read_dir(dir) else {
+            return;
+        };
+        for entry in entries {
+            let entry = entry.unwrap();
+            let path = entry.path();
+            if entry.file_type().unwrap().is_dir() {
+                walk(root, &path, out);
+            } else {
+                let rel = path.strip_prefix(root).unwrap();
+                let rel = rel.to_string_lossy().replace('\\', "/");
+                out.insert(rel, std::fs::read(&path).unwrap());
+            }
+        }
+    }
+    let mut out = std::collections::BTreeMap::new();
+    walk(dir, dir, &mut out);
+    out
+}
+
+// ── lock builder ─────────────────────────────────────────────────────────
+
+/// A canonical `vlt-lock.json` (one entry per line, vlt's layout).
+#[derive(Clone)]
+pub struct Lock {
+    pub version: Option<u8>,
+    pub options: String,
+    pub nodes: Vec<String>,
+    pub edges: Vec<String>,
+    pub crlf: bool,
+}
+
+impl Lock {
+    pub fn v1(nodes: &[&str], edges: &[&str]) -> Self {
+        Lock {
+            version: Some(1),
+            options: "{}".into(),
+            nodes: nodes.iter().map(|s| s.to_string()).collect(),
+            edges: edges.iter().map(|s| s.to_string()).collect(),
+            crlf: false,
+        }
+    }
+
+    pub fn v0(nodes: &[&str], edges: &[&str]) -> Self {
+        Lock {
+            version: Some(0),
+            ..Lock::v1(nodes, edges)
+        }
+    }
+
+    pub fn render(&self) -> String {
+        let block = |entries: &[String]| {
+            if entries.is_empty() {
+                return "{}".to_string();
+            }
+            let lines: Vec<String> = entries
+                .iter()
+                .enumerate()
+                .map(|(i, e)| format!("    {e}{}", if i + 1 < entries.len() { "," } else { "" }))
+                .collect();
+            format!("{{\n{}\n  }}", lines.join("\n"))
+        };
+        let version = self
+            .version
+            .map(|v| format!("  \"lockfileVersion\": {v},\n"))
+            .unwrap_or_default();
+        let text = format!(
+            "{{\n{version}  \"options\": {},\n  \"nodes\": {},\n  \"edges\": {}\n}}\n",
+            self.options,
+            block(&self.nodes),
+            block(&self.edges)
+        );
+        if self.crlf {
+            text.replace('\n', "\r\n")
+        } else {
+            text
+        }
+    }
+}
+
+pub fn reg_node(id: &str) -> String {
+    format!("\"{id}\": [0,\"{NAME}\",\"{REG_SHA}\",\"{REG_URL}\"]")
+}
+
+/// The one-dependency project: `left-pad` direct from the root.
+pub fn direct_lock() -> Lock {
+    Lock::v1(
+        &[&reg_node("~npm~left-pad@1.3.0")],
+        &["\"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0\""],
+    )
+}
+
+pub fn direct_lock_v0() -> Lock {
+    Lock::v0(
+        &[&reg_node("·npm·left-pad@1.3.0")],
+        &["\"file·. left-pad\": \"prod 1.3.0 ·npm·left-pad@1.3.0\""],
+    )
+}
+
+pub const ROOT_PKG: &str =
+    "{\n  \"name\": \"consumer\",\n  \"version\": \"0.0.0\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+pub fn store_dir(root: &Path, dep_id: &str, name: &str) -> PathBuf {
+    root.join("node_modules/.vlt")
+        .join(dep_id)
+        .join("node_modules")
+        .join(name)
+}
+
+/// vlt's installed store copy of `name@version` under `dep_id`, holding
+/// `index` and `package_json` (default: name and version only).
+pub fn install_store(
+    root: &Path,
+    dep_id: &str,
+    name: &str,
+    version: &str,
+    index: &[u8],
+    package_json: Option<&str>,
+) -> PathBuf {
+    let dir = store_dir(root, dep_id, name);
+    std::fs::create_dir_all(&dir).unwrap();
+    let pkg = package_json
+        .map(str::to_string)
+        .unwrap_or_else(|| format!("{{\"name\":\"{name}\",\"version\":\"{version}\"}}\n"));
+    std::fs::write(dir.join("package.json"), pkg).unwrap();
+    std::fs::write(dir.join("index.js"), index).unwrap();
+    dir
+}
+
+/// A manifest record for `uuid` patching `index.js` (and optionally
+/// `package.json`), plus the after-hash blobs, so `vendor --offline` runs.
+pub fn stage_patch(root: &Path, purls: &[&str], uuid: &str, extra: &[(&str, &[u8], &[u8])]) {
+    let socket = root.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    let mut files = serde_json::Map::new();
+    let mut all: Vec<(&str, &[u8], &[u8])> = vec![("package/index.js", PRISTINE, PATCHED)];
+    all.extend_from_slice(extra);
+    for (file, before, after) in all {
+        files.insert(
+            file.to_string(),
+            json!({ "beforeHash": git_sha256(before), "afterHash": git_sha256(after) }),
+        );
+        std::fs::write(socket.join("blobs").join(git_sha256(after)), after).unwrap();
+    }
+    let record = json!({
+        "uuid": uuid,
+        "exportedAt": "2026-01-01T00:00:00Z",
+        "files": files,
+        "vulnerabilities": {},
+        "description": "vlt vendor fixture",
+        "license": "MIT",
+        "tier": "free"
+    });
+    let mut patches = serde_json::Map::new();
+    for purl in purls {
+        patches.insert(purl.to_string(), record.clone());
+    }
+    std::fs::write(
+        socket.join("manifest.json"),
+        serde_json::to_vec_pretty(&json!({ "patches": patches })).unwrap(),
+    )
+    .unwrap();
+}
+
+/// The synthetic project: `lock`, root package.json `pkg`, the left-pad
+/// store copy under `store_id`, and a staged patch at [`UUID`].
+pub fn project(root: &Path, lock: &Lock, pkg: &str, store_id: &str) {
+    std::fs::create_dir_all(root).unwrap();
+    std::fs::write(root.join(VLT_LOCK), lock.render()).unwrap();
+    std::fs::write(root.join("package.json"), pkg).unwrap();
+    install_store(root, store_id, NAME, VERSION, PRISTINE, None);
+    stage_patch(root, &[PURL], UUID, &[]);
+}
+
+pub fn direct_project(root: &Path) {
+    project(root, &direct_lock(), ROOT_PKG, "~npm~left-pad@1.3.0");
+}
+
+/// A capture's case, read from its `case.json`.
+pub struct Case {
+    pub vlt: String,
+    pub name: String,
+    pub project: String,
+    pub purl: String,
+    pub refusal: Option<String>,
+}
+
+impl Case {
+    pub fn dir(&self) -> PathBuf {
+        fixtures().join(&self.vlt).join("cases").join(&self.name)
+    }
+
+    pub fn project_dir(&self) -> PathBuf {
+        fixtures()
+            .join(&self.vlt)
+            .join("projects")
+            .join(&self.project)
+    }
+
+    pub fn coords(&self) -> (String, String) {
+        let rest = self.purl.strip_prefix("pkg:npm/").unwrap();
+        let (name, version) = rest.rsplit_once('@').unwrap();
+        (name.to_string(), version.to_string())
+    }
+}
+
+pub fn cases(vlt: &str) -> Vec<Case> {
+    let mut out = Vec::new();
+    let dir = fixtures().join(vlt).join("cases");
+    let mut names: Vec<String> = std::fs::read_dir(&dir)
+        .unwrap()
+        .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
+        .collect();
+    names.sort();
+    for name in names {
+        let case: Value =
+            serde_json::from_slice(&std::fs::read(dir.join(&name).join("case.json")).unwrap())
+                .unwrap();
+        out.push(Case {
+            vlt: vlt.to_string(),
+            name,
+            project: case["project"].as_str().unwrap().to_string(),
+            purl: case["purl"].as_str().unwrap().to_string(),
+            refusal: case["refusal"].as_str().map(str::to_string),
+        });
+    }
+    out
+}
+
+/// The node keys of `lock` whose tuple names `name` at `version`.
+pub fn dep_ids(lock: &str, name: &str, version: &str) -> Vec<String> {
+    let doc: Value = serde_json::from_str(lock).unwrap();
+    doc["nodes"]
+        .as_object()
+        .unwrap()
+        .iter()
+        .filter(|(key, tuple)| {
+            tuple[1] == name
+                && (key.ends_with(&format!("@{version}")) || key.contains(&format!("@{version}~")))
+                && !key.starts_with("file")
+        })
+        .map(|(key, _)| key.clone())
+        .collect()
+}
+
+/// A capture's project copied to `root`, the target installed in vlt's
+/// store (every instance) and its patch staged at [`FIXTURE_UUID`].
+pub fn capture_project(root: &Path, case: &Case) {
+    copy_dir(&case.project_dir(), root);
+    let lock = std::fs::read_to_string(root.join(VLT_LOCK)).unwrap();
+    let (name, version) = case.coords();
+    for id in dep_ids(&lock, &name, &version) {
+        install_store(root, &id, &name, &version, PRISTINE, None);
+    }
+    stage_patch(root, &[&case.purl], FIXTURE_UUID, &[]);
+}
+
+// ── CLI ──────────────────────────────────────────────────────────────────
+
+/// The `socket-patch` binary with the ambient `SOCKET_*`, `VLT_*` and proxy
+/// environment scrubbed (telemetry disabled).
+pub fn cli() -> Command {
+    let mut cmd = Command::new(env!("CARGO_BIN_EXE_socket-patch"));
+    for (key, _) in std::env::vars_os() {
+        let name = key.to_string_lossy().to_string();
+        let proxy = ["http_proxy", "https_proxy", "all_proxy", "no_proxy"]
+            .iter()
+            .any(|p| name.eq_ignore_ascii_case(p));
+        if proxy
+            || name.starts_with("VLT_")
+            || (name.starts_with("SOCKET_") && name != "SOCKET_NO_CONFIG")
+        {
+            cmd.env_remove(&key);
+        }
+    }
+    for key in [
+        "SOCKET_OFFLINE",
+        "SOCKET_DRY_RUN",
+        "SOCKET_API_URL",
+        "SOCKET_PROXY_URL",
+        "SOCKET_NO_VLT_INSTALL_CLEANUP",
+    ] {
+        cmd.env_remove(key);
+    }
+    cmd.env("SOCKET_TELEMETRY_DISABLED", "1")
+        .env("SOCKET_NO_CONFIG", "1")
+        .env("SOCKET_NO_UPDATE_CHECK", "1");
+    cmd
+}
+
+/// `socket-patch <args>` in `cwd`: `(exit code, stdout JSON, stderr)`.
+pub fn socket(cwd: &Path, args: &[&str], env: &[(&str, &str)]) -> (i32, Value, String) {
+    let mut cmd = cli();
+    cmd.args(args).current_dir(cwd);
+    for (k, v) in env {
+        cmd.env(k, v);
+    }
+    let out = cmd.output().expect("spawn socket-patch");
+    let stdout = String::from_utf8_lossy(&out.stdout).to_string();
+    let stderr = String::from_utf8_lossy(&out.stderr).to_string();
+    let doc = serde_json::from_str(&stdout).unwrap_or_else(|e| {
+        panic!("stdout must be one JSON document ({e});\nstdout=\n{stdout}\nstderr=\n{stderr}")
+    });
+    (out.status.code().unwrap_or(-1), doc, stderr)
+}
+
+/// `socket-patch <args>` in `cwd`, human output: `(exit code, stdout,
+/// stderr)`.
+pub fn socket_human(cwd: &Path, args: &[&str]) -> (i32, String, String) {
+    let out = cli()
+        .args(args)
+        .current_dir(cwd)
+        .output()
+        .expect("spawn socket-patch");
+    (
+        out.status.code().unwrap_or(-1),
+        String::from_utf8_lossy(&out.stdout).to_string(),
+        String::from_utf8_lossy(&out.stderr).to_string(),
+    )
+}
+
+/// `vendor --json --offline` plus `extra`.
+pub fn vendor(root: &Path, extra: &[&str]) -> (i32, Value, String) {
+    let cwd = root.to_str().unwrap().to_string();
+    let mut args = vec!["vendor", "--json", "--offline", "--cwd", &cwd];
+    args.extend_from_slice(extra);
+    socket(root, &args, &[])
+}
+
+pub fn events(env: &Value) -> Vec<Value> {
+    env["events"].as_array().cloned().unwrap_or_default()
+}
+
+/// Every event `errorCode` of the envelope, in order.
+pub fn codes(env: &Value) -> Vec<String> {
+    events(env)
+        .iter()
+        .filter_map(|e| e["errorCode"].as_str().map(str::to_string))
+        .collect()
+}
+
+/// The `failed` event's `(errorCode, error)` for `purl`.
+pub fn failure(env: &Value, purl: &str) -> (String, String) {
+    events(env)
+        .iter()
+        .find(|e| e["action"] == "failed" && e["purl"] == purl)
+        .map(|e| {
+            (
+                e["errorCode"].as_str().unwrap_or_default().to_string(),
+                e["error"].as_str().unwrap_or_default().to_string(),
+            )
+        })
+        .unwrap_or_else(|| panic!("expected a failed event for {purl}: {env:#}"))
+}
+
+pub fn read(root: &Path, rel: &str) -> String {
+    std::fs::read_to_string(root.join(rel)).unwrap_or_else(|e| panic!("read {rel}: {e}"))
+}
+
+pub fn ledger(root: &Path) -> Value {
+    serde_json::from_slice(&std::fs::read(root.join(".socket/vendor/state.json")).unwrap()).unwrap()
+}
+
+/// The ledger entry for `purl`.
+pub fn ledger_entry(root: &Path, purl: &str) -> Value {
+    ledger(root)["entries"][purl].clone()
+}
+
+/// The exact `<uuid>/.gitignore` and `.gitattributes` bytes (DESIGN §4.2).
+pub const UUID_GITIGNORE: &str =
+    "!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n";
+pub const UUID_GITATTRIBUTES: &str = "* -text\n";
+
+pub fn git() -> Option<PathBuf> {
+    socket_patch_core::utils::process::resolve_tool("git")
+}
+
+pub fn git_init(root: &Path) -> bool {
+    let Some(git) = git() else {
+        return false;
+    };
+    Command::new(git)
+        .args(["init", "-q"])
+        .current_dir(root)
+        .status()
+        .is_ok_and(|s| s.success())
+}
diff --git a/crates/socket-patch-core/src/vendor/mod.rs b/crates/socket-patch-core/src/vendor/mod.rs
index 8bdd68db..59647758 100644
--- a/crates/socket-patch-core/src/vendor/mod.rs
+++ b/crates/socket-patch-core/src/vendor/mod.rs
@@ -114,8 +114,8 @@ pub use state::{
 // The hosted→vendored takeover refuses a berry project the backend would
 // refuse BEFORE it reverts the hosted redirect.
 pub use verify::{
-    artifact_is_file_shaped, check_vendored_artifact, compute_dir_inventory, file_sha256_hex,
-    ArtifactHealth,
+    artifact_is_file_shaped, check_vendored_artifact, compute_dir_inventory,
+    compute_package_dir_inventory, file_sha256_hex, ArtifactHealth,
 };
 pub use yarn_berry_lock::yarn_berry_vendor_preflight;
 
diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
index 7168edd4..ba0643f2 100644
--- a/crates/socket-patch-core/src/vendor/npm_dir.rs
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -468,12 +468,15 @@ fn ignoring_rules(out: &str) -> Vec<String> {
 }
 
 fn gitignored_refusal(rel_dir: &str, rules: &str) -> VendorOutcome {
-    refused(
-        "vendor_artifact_gitignored",
-        format!(
-            "git would not commit the vendored artifact at {rel_dir} ({rules}); remove the \
-             rule that ignores .socket/ (or .socket/vendor/) and vendor again"
-        ),
+    refused(GITIGNORED, gitignored_detail(rel_dir, rules))
+}
+
+pub(crate) const GITIGNORED: &str = "vendor_artifact_gitignored";
+
+pub(crate) fn gitignored_detail(rel: &str, rules: &str) -> String {
+    format!(
+        "git would not commit the vendored artifact at {rel} ({rules}); remove the rule that \
+         ignores .socket/ (or .socket/vendor/) and vendor again"
     )
 }
 
diff --git a/crates/socket-patch-core/src/vendor/npm_flavor.rs b/crates/socket-patch-core/src/vendor/npm_flavor.rs
index 04ddb38d..761468c6 100644
--- a/crates/socket-patch-core/src/vendor/npm_flavor.rs
+++ b/crates/socket-patch-core/src/vendor/npm_flavor.rs
@@ -428,7 +428,24 @@ async fn flavor_change_refusal(
     detected: NpmLockFlavor,
 ) -> Option<String> {
     let state = super::state::load_state(project_root).await.ok()?;
-    state.entries.iter().find_map(|(key, entry)| {
+    flavor_change_detail(&state.entries, purl, detected)
+}
+
+/// [`flavor_change_refusal`] for a project [`vlt_routes`] routes to vlt,
+/// over a ledger the caller already loaded (the vendored preflight).
+pub fn vlt_flavor_change_refusal(
+    entries: &std::collections::HashMap<String, VendorEntry>,
+    purl: &str,
+) -> Option<String> {
+    flavor_change_detail(entries, purl, NpmLockFlavor::Vlt)
+}
+
+fn flavor_change_detail(
+    entries: &std::collections::HashMap<String, VendorEntry>,
+    purl: &str,
+    detected: NpmLockFlavor,
+) -> Option<String> {
+    entries.iter().find_map(|(key, entry)| {
         if entry.ecosystem != "npm" || !entry.covers_purl(key, purl) {
             return None;
         }
@@ -448,6 +465,26 @@ async fn flavor_change_refusal(
     })
 }
 
+/// Does the router send this project's npm purls to the vlt backend?
+/// `Some(Ok(()))` when it detects [`NpmLockFlavor::Vlt`], `Some(Err(_))`
+/// with the refusal the §4.1 `vlt-lock.json` sniff raised, `None` when a
+/// PnP loader, another lockfile or no lockfile decides.
+pub async fn vlt_routes(project_root: &Path) -> Option<Result<(), (&'static str, String)>> {
+    match detect_npm_lock_flavor(project_root).await {
+        Ok((NpmLockFlavor::Vlt, _)) => Some(Ok(())),
+        Ok(_) => None,
+        Err(refusal) => {
+            let pnp = PNP_MARKERS
+                .iter()
+                .any(|m| std::fs::symlink_metadata(project_root.join(m)).is_ok());
+            let vlt = tokio::fs::metadata(project_root.join(VLT_LOCK))
+                .await
+                .is_ok();
+            (vlt && !pnp).then_some(Err(refusal))
+        }
+    }
+}
+
 /// Is this npm-vendored entry still consumed by its lockfile's dependency
 /// graph?
 ///
diff --git a/crates/socket-patch-core/src/vendor/verify.rs b/crates/socket-patch-core/src/vendor/verify.rs
index cde54904..f8bd2a04 100644
--- a/crates/socket-patch-core/src/vendor/verify.rs
+++ b/crates/socket-patch-core/src/vendor/verify.rs
@@ -512,9 +512,7 @@ pub async fn compute_dir_inventory(dir: &Path) -> Result<BTreeMap<String, String
 
 /// [`compute_dir_inventory`] of a vlt package dir, leaving out its top-level
 /// `node_modules/` (vlt's links, never part of the artifact).
-pub(crate) async fn compute_package_dir_inventory(
-    dir: &Path,
-) -> Result<BTreeMap<String, String>, String> {
+pub async fn compute_package_dir_inventory(dir: &Path) -> Result<BTreeMap<String, String>, String> {
     inventory_walk(dir, true).await
 }
 
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index c7c9e466..d671a85d 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -653,8 +653,9 @@ async fn analyze(
 
 /// The read-only vendored-mode refusals vlt can decide before any write:
 /// the lock sniff and layout, the target analysis with its declaration
-/// checks, and the installed store copy's `bundleDependencies` and
-/// duplicate `devDependencies` (DESIGN §4.6, core part).
+/// checks, the installed store copy's `bundleDependencies` and duplicate
+/// `devDependencies`, and a git ignore rule covering the would-be marker
+/// (DESIGN §4.6, core part).
 pub async fn vlt_vendor_preflight(
     project_root: &Path,
     purl: &str,
@@ -694,6 +695,15 @@ pub async fn vlt_vendor_preflight(
             ));
         }
     }
+    if let Some(uuid_dir) = super::path::vendor_uuid_dir_rel("npm", uuid) {
+        let marker = format!("{uuid_dir}/{}", super::state::VENDOR_MARKER_FILE);
+        if let Some(rules) = super::npm_dir::gitignored(project_root, &[marker]).await {
+            return Err((
+                super::npm_dir::GITIGNORED,
+                super::npm_dir::gitignored_detail(&analysis.rel, &rules),
+            ));
+        }
+    }
     Ok(())
 }
 
@@ -1131,6 +1141,38 @@ pub async fn restore_vlt_uuid_metadata(
     super::npm_dir::restore_uuid_metadata(&project_root.join(uuid_dir)).await
 }
 
+/// Whether `text` passes the §4.1 router sniff (a BOM-less JSON object
+/// with `lockfileVersion` 0 or 1).
+pub fn vlt_lock_sniff_ok(text: &str) -> bool {
+    sniff_vendor_lock(text).is_ok()
+}
+
+/// The importer package.json files of the project's canonical
+/// `vlt-lock.json`, project-relative: the root one plus every workspace
+/// importer its edges name. Just the root one when the lock is missing or
+/// not canonical.
+pub async fn vlt_importer_package_jsons(project_root: &Path) -> Vec<String> {
+    let doc = read_regular_to_string(&project_root.join(VLT_LOCK))
+        .await
+        .ok()
+        .and_then(|text| parse_doc(&text).ok());
+    let mut dirs: BTreeSet<String> = BTreeSet::from([String::new()]);
+    for e in doc.iter().flat_map(|d| &d.edges.entries) {
+        if let Some(dir) = importer_dir(e.edge_from()) {
+            dirs.insert(dir);
+        }
+    }
+    dirs.into_iter().map(|d| pkg_json_rel(&d)).collect()
+}
+
+fn pkg_json_rel(dir: &str) -> String {
+    if dir.is_empty() {
+        PACKAGE_JSON.to_string()
+    } else {
+        format!("{dir}/{PACKAGE_JSON}")
+    }
+}
+
 // ── in use ───────────────────────────────────────────────────────────────
 
 fn lock_has_file_node_under(text: &str, uuid: &str) -> Option<bool> {
@@ -1228,15 +1270,7 @@ fn allowed_pkg_files(doc: Option<&LockDoc>, entry: &VendorEntry) -> BTreeSet<Str
             add(from);
         }
     }
-    dirs.into_iter()
-        .map(|d| {
-            if d.is_empty() {
-                PACKAGE_JSON.to_string()
-            } else {
-                format!("{d}/{PACKAGE_JSON}")
-            }
-        })
-        .collect()
+    dirs.into_iter().map(|d| pkg_json_rel(&d)).collect()
 }
 
 /// The lock being reverted: each block's entries, restored in place, and

From c2ba78344017a26f82ee10706f730685ebb880e5 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 03:56:47 -0400
Subject: [PATCH 20/46] Fix vlt vendoring review findings

A root .gitignore rule like `*.json` no longer makes vendored vlt
refuse `vendor_artifact_gitignored`: the preflight now asks git only
about the uuid directory, so it refuses just the rules (such as
`.socket/`) that the directory's own .gitignore cannot override.

Re-vendoring under a newer patch with nothing installed no longer
builds the new artifact from the old patch's committed artifact, for
every npm lockfile flavor. It fetches the pristine package instead,
and `--offline` skips it with the reason.

When vlt's link to the committed directory is the only installed
copy, vendor now names it instead of claiming nothing is installed.
A lost ledger entry fails `vendor_ledger_entry_missing` and points at
`socket-patch repair`.

A hosted to vendored takeover whose vendoring then fails still
removes the store copies vlt installed from the hosted pin, and prints
the reinstall advisory. Before, the redirect record was gone and
nothing could find those copies again.

The rollback before-blob fix is filed under Fixed, with a pnpm store
peer-variant test beside the vlt one. New tests cover the get uuid-path
refusal line, vlt references that only the lock or a workspace
package.json carries, and restoring vlt wiring files after a failed
repair post-verify.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  26 ++-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   3 +-
 .../src/commands/repair_vendor.rs             |  51 +++++
 .../socket-patch-cli/src/commands/vendor.rs   | 120 ++++++++++--
 .../socket-patch-cli/tests/get_modes_e2e.rs   |  10 +
 .../tests/in_process_vendor/vlt.rs            | 180 ++++++++++++++++++
 .../in_process_vendor_bun_takeover/vlt.rs     |  68 +++++++
 .../tests/repair_vendor_flavors_e2e/vlt.rs    | 110 ++++++++++-
 .../tests/rollback_multicopy_blob_gate.rs     |  60 +++---
 .../socket-patch-core/src/vendor/vlt_lock.rs  |  42 +++-
 10 files changed, 616 insertions(+), 54 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b2eac87..0a2d21d2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -351,11 +351,14 @@ into the new version's section — see docs/releasing.md.
   `.gitattributes`, and stamps reconstructed entries `flavor: "vlt"`. The
   human output names the vlt committables and `vlt install`. A Bun lock
   beside `vlt-lock.json` no longer triggers the Bun vendored preflight.
-- **`rollback` fetches a before-blob that only a store peer variant
-  needs.** The before-blob gate now probes every pnpm and vlt store variant
-  copy the rollback restores, so an online rollback no longer fails
-  `Before blob not found` for a still-patched variant beside an
-  already-original copy.
+  The git-ignore check refuses only a rule that ignores the vendored
+  uuid directory itself (such as `.socket/`), not one like `*.json` that
+  the directory's own `.gitignore` overrides. A takeover whose vendoring
+  then fails still removes the hosted store copies against the restored
+  registry pin. When vlt's link to the committed directory is the only
+  installed copy, `vendor` says so (`vendor_ledger_entry_missing`, run
+  `socket-patch repair`, when the vendor ledger lost the entry) instead of
+  reporting the package as not installed.
 - **`vex` reads `vlt-lock.json`.** Manifest-less VEX (and the ledger
   liveness gates behind `vex`, `scan`'s takeovers and the
   `hosted_wiring_retained` advisory) discovers hosted vlt nodes (a Socket
@@ -736,6 +739,19 @@ into the new version's section — see docs/releasing.md.
 
 ### Fixed
 
+- **`rollback` fetches a before-blob that only a store peer variant
+  needs.** The before-blob gate now probes every pnpm and vlt store variant
+  copy the rollback restores, so an online rollback no longer fails
+  `Before blob not found` for a still-patched variant beside an
+  already-original copy.
+
+- **Re-vendoring under a newer patch never builds from the old patch's
+  artifact.** With no installed copy, `vendor` staged the committed
+  artifact of the previous patch as the build source, so a file only the
+  old patch changed reached the new artifact unnoticed. The committed
+  artifact is now staged only for the patch that built it; a newer patch
+  fetches the pristine package per the lockfile (`--offline` skips it).
+
 - **Ledgers written by a newer socket-patch are never half-reverted.**
   A hosted redirect edit kind this release does not understand used to
   let `rollback` drop the npm record beside it, leaving that lockfile
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 0e876349..56c2cb52 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -114,7 +114,7 @@ For a **9.0 root lock**, the CLI ensures `pnpm-workspace.yaml` carries `trustLoc
 
 **Lockfile supplement (v3.4)**: `scan` discovery is no longer limited to installed trees. The project's lockfiles (`package-lock.json`/`npm-shrinkwrap.json`, `pnpm-lock.yaml` v9, `yarn.lock` classic + berry, `bun.lock`, `Cargo.lock`, `go.sum`, `composer.lock`, `Gemfile.lock`, `uv.lock`/`poetry.lock`/pinned `requirements.txt`) are inventoried and dependencies with NO installed copy join discovery — counts, the API lookup, the table (flagged ` [NOT INSTALLED]`, plus a stderr note), and the prune "scanned" set (a wiped node_modules no longer prunes lockfile-listed entries). JSON gains a top-level `lockfileOnlyPackages` count and an additive `notInstalled: true` on matching `packages[]` entries. `--apply` partitions lockfile-only patches out BEFORE download (calm `skipped`/`package_not_installed` records — never an error exit, never a manifest write); `--vendor` passes them through to the vendor engine's auto-fetch. Vendored-ledger entries likewise stay discoverable on a fresh clone (the committed artifact is the dependency). Global scans (`--global`) get no supplement. **Rush monorepos** (no root lockfile, `rush.json` present): the npm-lock inventory falls back to the Rush source-of-truth locks — `common/config/rush/pnpm-lock.yaml` plus every `common/config/subspaces/*/pnpm-lock.yaml` (`read_dir`-sorted, repo-relative paths preserved) — so a Rush repo's dependencies still join discovery. **Plug'n'Play layouts are an explicit refusal, not an empty inventory**: a `.pnp.*` loader means the npm packages are structurally unreachable in EVERY mode (under yarn PnP the installed-tree crawl is empty too — no `node_modules/`), so `scan` surfaces an additive top-level `warnings[]` array (`{code, detail}` objects, omitted when empty) carrying `yarn_pnp_unsupported` (same code as apply's refusal; remedy `yarn patch <pkg>`) or `pnpm_pnp_unsupported` (pnpm's `node-linker=pnp` twin; pnpm remedies), plus a stderr `Warning (<code>): …` line on the human path. Exit code and `status` are deliberately unchanged (exit 0 / `success` — the same posture as hosted refusals, which exit 0 with `redirected: 0`); the warning is the machine-readable signal that nothing was checked. Pinned by `tests/e2e_safety_yarn_pnp.rs`.
 
-**Vendor auto-fetch (v3.4)**: `vendor`/`scan --vendor` no longer fail on lockfile-resolved packages with no installed copy. Already-vendored purls stage from their committed artifact (sha256-verified against the vendor ledger; offline-safe). Otherwise the pristine artifact is fetched per the lockfile resolution and verified against the lock's recorded integrity FAIL-CLOSED before any write: npm SRI (or yarn classic's sha1 fragment), yarn berry's cache-zip checksum (rebuilt from the fetched tarball; cacheKey 10c0 only), Cargo.lock sha256 over the .crate, go.sum `h1:` dirhash over the module zip, composer `dist.shasum` (sha1), Gemfile.lock `CHECKSUMS` sha256, uv.lock wheel sha256 (pure `py3-none-any` wheels only). Entries the lock cannot verify are NEVER fetched (`vendor_fetch_unverifiable` warning + the calm `package_not_installed` skip). Registry bases honor `SOCKET_NPM_REGISTRY`, `SOCKET_CRATES_REGISTRY`, `SOCKET_GOPROXY` (else `GOPROXY`, `GONOPROXY` and `GOPRIVATE` the way go reads them — see the env table); npm/yarn/composer/gem/uv lock-recorded URLs are used verbatim. `--offline` refuses the fetch with the calm skip (the detail names the lockfile resolution). The fetch stages into a private tempdir — the project tree is never touched.
+**Vendor auto-fetch (v3.4)**: `vendor`/`scan --vendor` no longer fail on lockfile-resolved packages with no installed copy. Already-vendored purls stage from their committed artifact (sha256-verified against the vendor ledger; offline-safe) when the ledger entry is at the manifest record's patch uuid; a superseding uuid fetches the pristine package instead, since the older artifact holds the older patch's bytes. Otherwise the pristine artifact is fetched per the lockfile resolution and verified against the lock's recorded integrity FAIL-CLOSED before any write: npm SRI (or yarn classic's sha1 fragment), yarn berry's cache-zip checksum (rebuilt from the fetched tarball; cacheKey 10c0 only), Cargo.lock sha256 over the .crate, go.sum `h1:` dirhash over the module zip, composer `dist.shasum` (sha1), Gemfile.lock `CHECKSUMS` sha256, uv.lock wheel sha256 (pure `py3-none-any` wheels only). Entries the lock cannot verify are NEVER fetched (`vendor_fetch_unverifiable` warning + the calm `package_not_installed` skip). Registry bases honor `SOCKET_NPM_REGISTRY`, `SOCKET_CRATES_REGISTRY`, `SOCKET_GOPROXY` (else `GOPROXY`, `GONOPROXY` and `GOPRIVATE` the way go reads them — see the env table); npm/yarn/composer/gem/uv lock-recorded URLs are used verbatim. `--offline` refuses the fetch with the calm skip (the detail names the lockfile resolution). The fetch stages into a private tempdir — the project tree is never touched.
 
 `scan --sync` is sugar for `--apply --prune` — the canonical single-flag bot invocation. `scan --json --sync --yes` discovers, applies, and reconciles state in one pass.
 
@@ -1259,6 +1259,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_fetched_missing` | `skipped` (warning) | vendor: the package was not installed; its pristine artifact was fetched per the lockfile resolution (or staged from the committed vendor artifact), integrity-verified, and vendored — the project tree was not touched. For `poetry.lock` (which records hashes but no URLs) the pure-Python wheel's sha256 selects the file through PyPI's JSON API (`SOCKET_PYPI_JSON_API` overrides the endpoint); Poetry 0.12's bare `[metadata.hashes]` names no wheel, so those locks still need an installed copy (`vendor_fetch_unverifiable`). |
 | `vendor_fetch_failed` | `failed` | vendor: the lockfile-resolved fetch was attempted and failed (HTTP error, size cap, integrity mismatch, or a PRESENT-but-corrupt committed artifact — pointed at `socket-patch repair`). A MISSING committed artifact no longer lands here: it falls through to the ledger-recovered registry fetch. Suppresses the duplicate `package_not_installed` skip. |
 | `vendor_fetch_unverifiable` | `skipped` (warning) | vendor: the lockfile records no usable integrity for the missing package; nothing was fetched (fail-closed) and the `package_not_installed` skip follows. |
+| `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
 | `vendor_artifact_missing` | `skipped` (warning) / `failed` | vendor: the committed artifact is gone — the registry resolution is recovered from the ledger and the artifact rebuilt (warning); repair `--offline` with no local source surfaces it as the per-entry failure instead. |
 | `vendor_artifact_corrupt` | `failed` | repair `--offline`: the committed artifact fails verification (member afterHashes or the ledger's whole-file sha256) and no local source can rebuild it. Online repairs rebuild instead. |
 | `vendor_artifact_reused` | `skipped` (verbose note) | vendor / scan `--vendor` (pypi): the wiring was dropped by a relock but the committed wheel the ledger vouches for verified, so it was re-wired as-is — no service download, no rebuild; the lock pins the first run's sha again. |
diff --git a/crates/socket-patch-cli/src/commands/repair_vendor.rs b/crates/socket-patch-cli/src/commands/repair_vendor.rs
index 06823219..0944f81e 100644
--- a/crates/socket-patch-cli/src/commands/repair_vendor.rs
+++ b/crates/socket-patch-cli/src/commands/repair_vendor.rs
@@ -2101,6 +2101,57 @@ mod tests {
         );
     }
 
+    #[tokio::test]
+    async fn scan_recovers_vlt_lock_and_workspace_package_json_references() {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let in_lock = "11111111-1111-4111-8111-111111111111";
+        let in_member = "22222222-2222-4222-8222-222222222222";
+        let lock_path =
+            format!(".socket/vendor/npm/{in_lock}/left-pad-1.3.0/node_modules/left-pad");
+        let member_path = format!(".socket/vendor/npm/{in_member}/debug-4.3.4/node_modules/debug");
+        let node_id = format!(
+            "file~{}",
+            lock_path
+                .replace('/', "+")
+                .replace("node_modules", "node__modules")
+        );
+        tokio::fs::write(
+            root.join("vlt-lock.json"),
+            format!(
+                "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    \
+                 \"{node_id}\": [0,\"left-pad\",null,\"{lock_path}\"],\n    \
+                 \"~npm~debug@4.3.4\": [0,\"debug\",\"sha512-D==\"]\n  }},\n  \"edges\": {{\n    \
+                 \"file~_d left-pad\": \"prod file:./{lock_path} {node_id}\",\n    \
+                 \"workspace~packages+a debug\": \"prod 4.3.4 ~npm~debug@4.3.4\"\n  }}\n}}\n"
+            ),
+        )
+        .await
+        .unwrap();
+        tokio::fs::write(
+            root.join("package.json"),
+            "{\"dependencies\":{\"left-pad\":\"1.3.0\"}}",
+        )
+        .await
+        .unwrap();
+        tokio::fs::create_dir_all(root.join("packages/a"))
+            .await
+            .unwrap();
+        tokio::fs::write(
+            root.join("packages/a/package.json"),
+            format!("{{\"dependencies\":{{\"debug\":\"file:../../{member_path}\"}}}}"),
+        )
+        .await
+        .unwrap();
+        assert_eq!(
+            scan_vendor_references(root).await,
+            vec![
+                ("npm".to_string(), in_lock.to_string(), lock_path),
+                ("npm".to_string(), in_member.to_string(), member_path),
+            ]
+        );
+    }
+
     #[tokio::test]
     async fn scan_recovers_script_and_pep751_vendor_references() {
         let tmp = tempfile::tempdir().unwrap();
diff --git a/crates/socket-patch-cli/src/commands/vendor.rs b/crates/socket-patch-cli/src/commands/vendor.rs
index bd95af8c..c0bd837c 100644
--- a/crates/socket-patch-cli/src/commands/vendor.rs
+++ b/crates/socket-patch-cli/src/commands/vendor.rs
@@ -1261,7 +1261,7 @@ pub(crate) async fn vendor_records(
     for (purl, paths) in npm_paths_by_identity(&crawler_options, &missing_npm).await {
         all_packages.insert(purl, paths[0].clone());
     }
-    drop_vendored_installs(&common.cwd, &mut all_packages);
+    let vendored_installs = drop_vendored_installs(&common.cwd, &mut all_packages);
 
     // ── Auto-fetch: lockfile-resolved packages with no installed copy ────
     // A manifest patch whose package is not on disk but IS resolvable from
@@ -1293,11 +1293,14 @@ pub(crate) async fn vendor_records(
             // Artifact-staging path: an already-vendored purl with no
             // installed copy (fresh clone) stages from its own committed
             // artifact, sha256-verified against the ledger — offline-safe,
-            // no registry traffic.
+            // no registry traffic. Only at the record's own uuid: an older
+            // patch's artifact holds that patch's bytes, never a pristine
+            // source for a superseding one.
             for purl in &missing {
                 let ledger_entry = lookup_entry(&state.entries, purl);
                 if let Some(entry) = ledger_entry.filter(|e| {
                     e.ecosystem == "npm"
+                        && records.get(purl).is_some_and(|r| r.uuid == e.uuid)
                         && (e.artifact.path.ends_with(".tgz")
                             || !vendor::artifact_is_file_shaped(&e.artifact.path))
                 }) {
@@ -1840,6 +1843,8 @@ pub(crate) async fn vendor_records(
             )
             .await;
             status.finish();
+            let vendored =
+                matches!(&outcome, Some(VendorOutcome::Done { result, .. }) if result.success);
 
             match outcome {
                 None => {
@@ -1968,20 +1973,28 @@ pub(crate) async fn vendor_records(
                         )
                         .await;
                     }
-                    if result.success {
-                        if let Some(targets) = vlt_takeover_targets.remove(candidate) {
-                            if let Some(detail) =
-                                crate::commands::scan::vlt_takeover_heal(common, &targets).await
-                            {
-                                record_warning(
-                                    env,
-                                    candidate,
-                                    &VendorWarning::new("redirect_vlt_reinstall_required", detail),
-                                    common,
-                                );
-                            }
-                        }
-                    }
+                }
+            }
+            // The reverted hosted pin is gone either way: a vendored purl
+            // is healed against its new wiring, a failed one against the
+            // restored registry pin (DESIGN §4.10 step 4).
+            if let Some(targets) = vlt_takeover_targets.remove(candidate) {
+                let detail = if vendored {
+                    crate::commands::scan::vlt_takeover_heal(common, &targets).await
+                } else {
+                    crate::commands::scan::vlt_rollback_heal(common, &targets)
+                        .await
+                        .into_iter()
+                        .map(|(_, detail)| detail)
+                        .next()
+                };
+                if let Some(detail) = detail {
+                    record_warning(
+                        env,
+                        candidate,
+                        &VendorWarning::new("redirect_vlt_reinstall_required", detail),
+                        common,
+                    );
                 }
             }
         }
@@ -2021,6 +2034,55 @@ pub(crate) async fn vendor_records(
             HashSet::new()
         };
         for purl in &unmatched {
+            if let Some(dir) = vendored_installs.get(purl) {
+                // The only installed copy is this tool's own artifact, which
+                // is never a pristine source: say so, not "not installed".
+                match lookup_entry(&state.entries, purl) {
+                    None => {
+                        let detail = format!(
+                            "installed from the vendored artifact {dir}, but the vendor ledger \
+                             has no entry for it; run `socket-patch repair` to restore the entry"
+                        );
+                        report_vendor_failure(common, purl, &detail);
+                        env.record(
+                            PatchEvent::new(PatchAction::Failed, purl.clone())
+                                .with_error("vendor_ledger_entry_missing", detail),
+                        );
+                        continue;
+                    }
+                    Some(entry) if records.get(purl).is_some_and(|r| r.uuid != entry.uuid) => {
+                        let blocked = if common.offline {
+                            "--offline prevents fetching the pristine artifact from the registry"
+                        } else {
+                            "no pristine artifact could be fetched"
+                        };
+                        let detail = format!(
+                            "the only installed copy is the vendored artifact {dir} of patch \
+                             {}, which is not a pristine source for this patch; {blocked}",
+                            entry.uuid
+                        );
+                        report_vendor_failure(common, purl, &detail);
+                        env.record(
+                            PatchEvent::new(PatchAction::Skipped, purl.clone())
+                                .with_reason("package_not_installed", detail),
+                        );
+                        continue;
+                    }
+                    Some(_) => {
+                        let detail = format!(
+                            "the only installed copy is the vendored artifact {dir}, which is \
+                             not a pristine source, and its ledger entry records no file \
+                             inventory to stage the committed artifact against"
+                        );
+                        report_vendor_failure(common, purl, &detail);
+                        env.record(
+                            PatchEvent::new(PatchAction::Skipped, purl.clone())
+                                .with_reason("package_not_installed", detail),
+                        );
+                        continue;
+                    }
+                }
+            }
             // Honesty order: every purl here is first and foremost a crawler
             // miss — nothing on disk matched — so the on-disk cause leads.
             // The --offline note is strictly secondary and only stated when
@@ -2113,18 +2175,34 @@ fn flavor_install_command(flavor: &str) -> Option<&'static str> {
 /// longer resolve at all): vlt links a vendored `file:` dependency straight
 /// to its committed dir, which is this tool's own artifact and never a
 /// pristine source. The committed-artifact rung stages it
-/// inventory-verified instead.
+/// inventory-verified instead. Returns the dropped purls whose copy
+/// resolved into a vendored uuid dir, with that dir
+/// (`.socket/vendor/<eco>/<uuid>/`).
 pub(crate) fn drop_vendored_installs(
     cwd: &Path,
     packages: &mut HashMap<String, std::path::PathBuf>,
-) {
+) -> HashMap<String, String> {
+    let mut dropped = HashMap::new();
     let Ok(vendor_root) = std::fs::canonicalize(cwd.join(SOCKET_DIR).join("vendor")) else {
-        return;
+        return dropped;
     };
     packages.retain(|purl, path| {
-        !purl.starts_with("pkg:npm/")
-            || std::fs::canonicalize(path).is_ok_and(|real| !real.starts_with(&vendor_root))
+        if !purl.starts_with("pkg:npm/") {
+            return true;
+        }
+        let Ok(real) = std::fs::canonicalize(path) else {
+            return false;
+        };
+        let Ok(rest) = real.strip_prefix(&vendor_root) else {
+            return true;
+        };
+        let mut parts = rest.components().map(|c| c.as_os_str().to_string_lossy());
+        if let (Some(eco), Some(uuid)) = (parts.next(), parts.next()) {
+            dropped.insert(purl.clone(), format!(".socket/vendor/{eco}/{uuid}/"));
+        }
+        false
     });
+    dropped
 }
 
 /// Ledger entries whose patch is gone from the manifest — the stale test
diff --git a/crates/socket-patch-cli/tests/get_modes_e2e.rs b/crates/socket-patch-cli/tests/get_modes_e2e.rs
index e99a8f0a..0a3a2a42 100644
--- a/crates/socket-patch-cli/tests/get_modes_e2e.rs
+++ b/crates/socket-patch-cli/tests/get_modes_e2e.rs
@@ -1155,6 +1155,16 @@ async fn get_vendored_vlt_refusal_visible_under_silent() {
         assert_eq!(code, 1, "{label}: stdout={stdout}\nstderr={stderr}");
         assert!(stdout.trim().is_empty(), "{label}: {stdout}");
         assert!(stderr.contains(VLT_SYNC_CODE), "{label}: {stderr}");
+        let download_line = format!("[error] {PURL1} ({VLT_SYNC_CODE}):");
+        if label == "purl" {
+            assert!(stderr.contains(&download_line), "{label}: {stderr}");
+        } else {
+            assert!(
+                stderr.contains(&format!("Error ({VLT_SYNC_CODE}):")),
+                "the uuid path refuses before the download: {stderr}"
+            );
+            assert!(!stderr.contains(&download_line), "{label}: {stderr}");
+        }
         assert_eq!(
             std::fs::read(tmp.path().join("vlt-lock.json")).unwrap(),
             lock_before,
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
index fbc84f72..46f2d73d 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -721,6 +721,186 @@ fn vendor_vlt_revendor_new_uuid() {
     assert_eq!(read(root, "package.json"), pkg);
 }
 
+/// vlt's post-install layout: `node_modules/<name>` links the committed
+/// dir of `uuid`, and the store copy is gone.
+fn link_vendored_dir(root: &Path, uuid: &str) {
+    std::fs::remove_dir_all(root.join("node_modules")).unwrap();
+    std::fs::create_dir_all(root.join("node_modules")).unwrap();
+    let target = Path::new("..").join(rel_dir(uuid, NAME, VERSION));
+    let link = root.join("node_modules").join(NAME);
+    #[cfg(unix)]
+    std::os::unix::fs::symlink(&target, &link).unwrap();
+    #[cfg(windows)]
+    std::os::windows::fs::symlink_dir(root.join(rel_dir(uuid, NAME, VERSION)), &link).unwrap();
+}
+
+#[test]
+fn vendor_vlt_linked_install_without_a_ledger_entry_points_at_repair() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    link_vendored_dir(root, UUID);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(
+        codes(&env).contains(&"already_vendored".to_string()),
+        "{env:#}"
+    );
+    let lock = read(root, VLT_LOCK);
+    std::fs::remove_file(root.join(".socket/vendor/state.json")).unwrap();
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 1, "{env:#}");
+    let (got, detail) = failure(&env, PURL);
+    assert_eq!(got, "vendor_ledger_entry_missing", "{env:#}");
+    assert_eq!(
+        detail,
+        format!(
+            "installed from the vendored artifact .socket/vendor/npm/{UUID}/, but the vendor \
+             ledger has no entry for it; run `socket-patch repair` to restore the entry"
+        )
+    );
+    assert!(
+        !codes(&env).contains(&"package_not_installed".to_string()),
+        "{env:#}"
+    );
+    assert_eq!(read(root, VLT_LOCK), lock);
+
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, _) = socket(root, &["repair", "--json", "--offline", "--cwd", &cwd], &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let entry = ledger_entry(root, PURL);
+    assert_eq!(entry["flavor"], "vlt", "{env:#}");
+    assert_eq!(entry["uuid"], UUID, "{env:#}");
+    // The reconstructed entry has no inventory: the rerun says so instead
+    // of claiming nothing is installed.
+    assert!(entry["artifact"]["fileInventory"].is_null(), "{entry:#}");
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 1, "{env:#}");
+    let skip = events(&env)
+        .into_iter()
+        .find(|e| e["errorCode"] == "package_not_installed")
+        .unwrap_or_else(|| panic!("{env:#}"));
+    assert_eq!(
+        skip["reason"],
+        format!(
+            "the only installed copy is the vendored artifact .socket/vendor/npm/{UUID}/, which \
+             is not a pristine source, and its ledger entry records no file inventory to stage \
+             the committed artifact against"
+        )
+    );
+    assert_eq!(read(root, VLT_LOCK), lock);
+}
+
+const EXTRA: (&str, &[u8], &[u8]) = ("package/extra.js", b"orig\n", b"v1-only\n");
+
+/// A project vendored at [`UUID`] by a patch that also changes
+/// `extra.js`, then linked the way `vlt install` links it, with a
+/// superseding [`UUID2`] patch that leaves `extra.js` alone.
+fn superseded_linked_project(root: &Path, lock: &Lock) {
+    project(root, lock, ROOT_PKG, "~npm~left-pad@1.3.0");
+    std::fs::write(
+        store_dir(root, "~npm~left-pad@1.3.0", NAME).join("extra.js"),
+        EXTRA.1,
+    )
+    .unwrap();
+    stage_patch(root, &[PURL], UUID, &[EXTRA]);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert_eq!(
+        read(root, &format!("{}/extra.js", rel_dir(UUID, NAME, VERSION))).as_bytes(),
+        EXTRA.2
+    );
+    link_vendored_dir(root, UUID);
+    stage_patch(root, &[PURL], UUID2, &[]);
+}
+
+#[test]
+fn vendor_vlt_revendor_new_uuid_never_builds_from_the_old_dir() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    superseded_linked_project(root, &direct_lock());
+    let lock = read(root, VLT_LOCK);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 1, "{env:#}");
+    let skip = events(&env)
+        .into_iter()
+        .find(|e| e["errorCode"] == "package_not_installed")
+        .unwrap_or_else(|| panic!("{env:#}"));
+    assert_eq!(
+        skip["reason"],
+        format!(
+            "the only installed copy is the vendored artifact .socket/vendor/npm/{UUID}/ of \
+             patch {UUID}, which is not a pristine source for this patch; --offline prevents \
+             fetching the pristine artifact from the registry"
+        ),
+        "{env:#}"
+    );
+    assert!(!uuid_dir(root, UUID2).exists(), "{env:#}");
+    assert_eq!(read(root, VLT_LOCK), lock);
+    assert_eq!(ledger_entry(root, PURL)["uuid"], UUID);
+}
+
+#[tokio::test(flavor = "multi_thread")]
+async fn vendor_vlt_revendor_new_uuid_fetches_the_pristine_package() {
+    let server = MockServer::start().await;
+    let pristine = tarball(
+        &[
+            (
+                "package/package.json",
+                b"{\"name\":\"left-pad\",\"version\":\"1.3.0\"}\n",
+            ),
+            ("package/index.js", PRISTINE),
+            ("package/extra.js", EXTRA.1),
+        ],
+        &[],
+    );
+    Mock::given(method("GET"))
+        .and(path("/left-pad/-/left-pad-1.3.0.tgz"))
+        .respond_with(ResponseTemplate::new(200).set_body_bytes(pristine.clone()))
+        .mount(&server)
+        .await;
+    let url = format!("{}/left-pad/-/left-pad-1.3.0.tgz", server.uri());
+    let lock = Lock::v1(
+        &[&format!(
+            "\"~npm~left-pad@1.3.0\": [0,\"{NAME}\",\"{}\",\"{url}\"]",
+            sri(&pristine)
+        )],
+        &["\"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0\""],
+    );
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    superseded_linked_project(root, &lock);
+    let cwd = root.to_str().unwrap().to_string();
+    let (code, env, stderr) = socket(
+        root,
+        &[
+            "vendor",
+            "--json",
+            "--vendor-source",
+            "build",
+            "--cwd",
+            &cwd,
+        ],
+        &[],
+    );
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        codes(&env).contains(&"vendor_fetched_missing".to_string()),
+        "{env:#}"
+    );
+    let rel2 = rel_dir(UUID2, NAME, VERSION);
+    assert_eq!(read(root, &format!("{rel2}/index.js")).as_bytes(), PATCHED);
+    assert_eq!(
+        read(root, &format!("{rel2}/extra.js")).as_bytes(),
+        EXTRA.1,
+        "the old patch's extra.js never reaches the new artifact"
+    );
+    assert!(!uuid_dir(root, UUID).exists());
+    assert_eq!(ledger_entry(root, PURL)["uuid"], UUID2);
+}
+
 // ── revert inverses ──────────────────────────────────────────────────────
 
 #[test]
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
index 5fa128fe..04eddde0 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
@@ -442,3 +442,71 @@ async fn vlt_hosted_artifact_preflight_refuses_before_the_vendored_revert() {
     );
     assert!(root.join(rel()).join("index.js").is_file());
 }
+
+/// A vendor that fails after the takeover revert was persisted (here a
+/// patch-service artifact failing its integrity check) still heals the
+/// hosted store copy against the restored registry pin: the redirect
+/// record is gone, so no later run could find it again.
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_failed_vendor_after_the_takeover_revert_still_heals_the_store() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    hosted_project(root, &server).await;
+    seed_manifest(root);
+
+    let service = MockServer::start().await;
+    hosted::mock_reference_at(
+        &service,
+        &hosted::artifact_url(&service),
+        "sha512-bm90IHRoZSBieXRlcw==",
+    )
+    .await;
+    hosted::mock_artifact(&service).await;
+    let cwd = root.to_str().unwrap().to_string();
+    let uri = service.uri();
+    let argv = [
+        "vendor",
+        "--cwd",
+        &cwd,
+        "--api-url",
+        &uri,
+        "--vendor-url",
+        &uri,
+        "--org",
+        ORG,
+        "--api-token",
+        "fake",
+    ];
+    let (code, env, stderr) = hosted::run_json(root, &argv, &[]);
+    assert_eq!(code, 1, "{env:#}\n{stderr}");
+    let codes = all_codes(&env);
+    assert!(
+        codes.contains(&"vendor_takeover_reverted_redirect".to_string()),
+        "{env:#}"
+    );
+    assert!(
+        detail_of(&env, "apply_failed").contains("integrity"),
+        "{env:#}"
+    );
+    assert_eq!(
+        detail_of(&env, "redirect_vlt_reinstall_required"),
+        "restored registry pins for 1 packages; removed the patched installed copies, so \
+         node_modules is incomplete until you run `vlt install` (or `vlt ci`)"
+    );
+    assert_eq!(hosted::read(root, "vlt-lock.json"), registry_lock());
+    assert_eq!(hosted::read(root, "package.json"), PACKAGE_JSON);
+    assert!(vendor_entry(root).is_none());
+    assert!(
+        redirect_ledger(root).is_none_or(|l| l["records"]
+            .as_object()
+            .is_none_or(|r| !r.contains_key(PURL))),
+        "the redirect record is dropped"
+    );
+    assert!(
+        !hosted::store_dir(root, TILDE_ID).exists(),
+        "the hosted store copy is invalidated"
+    );
+    assert!(!root.join("node_modules/.vlt-lock.json").exists());
+}
diff --git a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
index ba82ca8a..efdfb896 100644
--- a/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
+++ b/crates/socket-patch-cli/tests/repair_vendor_flavors_e2e/vlt.rs
@@ -16,7 +16,11 @@
 //!     unreferenced one;
 //! (f) a deleted `<uuid>/.gitignore` is rewritten, no rebuild;
 //! (g) a package.json-touching patch of a package with devDependencies is
-//!     healthy (the vlt manifest exemption; no Corrupt → rebuild loop).
+//!     healthy (the vlt manifest exemption; no Corrupt → rebuild loop);
+//! (h) a reference only `vlt-lock.json` carries is kept by the orphan
+//!     sweep and judged by a ledger-less repair;
+//! (i) a failed must-verify post-verify puts `vlt-lock.json` and every
+//!     importer package.json back byte-for-byte.
 
 use std::path::{Path, PathBuf};
 
@@ -332,3 +336,107 @@ async fn vlt_repair_keeps_a_devdependency_stripped_manifest_healthy() {
         committed
     );
 }
+
+/// `package.json` edited back to the registry spec since vendoring: only
+/// `vlt-lock.json` names the vendored dir. The orphan sweep keeps it, and
+/// a ledger-less repair finds the reference and refuses the out-of-sync
+/// declaration instead of dropping the dir.
+#[tokio::test]
+async fn vlt_lock_only_reference_is_kept_and_judged() {
+    for lock in LOCKS {
+        let mock = wiremock::MockServer::start().await;
+        mount_patch_api(&mock).await;
+        super::mount_blob(&mock).await;
+        let tmp = tempfile::tempdir().unwrap();
+        write_fixture(tmp.path(), lock, None);
+        let registry_pkg = std::fs::read(tmp.path().join("package.json")).unwrap();
+        let dir = vendor_project(tmp.path(), &mock.uri(), lock);
+        // package.json edited back since vendoring: only the lock names
+        // the vendored dir now.
+        std::fs::write(tmp.path().join("package.json"), &registry_pkg).unwrap();
+        std::fs::write(
+            tmp.path().join(".socket/vendor/state.json"),
+            "{\"version\":1,\"entries\":{}}",
+        )
+        .unwrap();
+        let (code, stdout, stderr) = common::run_with_env(
+            tmp.path(),
+            &["vendor", "--revert", "--json"],
+            &[("SOCKET_TELEMETRY_DISABLED", "1")],
+        );
+        assert_eq!(code, 0, "{lock:?}: {stdout}\n{stderr}");
+        assert!(
+            dir.join("index.js").is_file(),
+            "{lock:?}: the lock still installs it: {stdout}"
+        );
+        std::fs::remove_file(tmp.path().join(".socket/vendor/state.json")).unwrap();
+        let (code, stdout, stderr) = run_cli(tmp.path(), &mock.uri(), &["repair"]);
+        assert_eq!(code, 1, "{lock:?}: {stdout}\n{stderr}");
+        let v = parse_env(&stdout);
+        assert!(
+            events_of(&v).iter().any(|e| e["action"] == "failed"
+                && e["purl"] == PURL
+                && e["errorCode"] == "vendor_vlt_lock_out_of_sync"),
+            "{lock:?}: the lock-only reference is found and judged: {v}"
+        );
+        assert!(dir.join("index.js").is_file(), "{lock:?}: {v}");
+    }
+}
+
+/// A must-verify rebuild (a pnpm-wired entry reconstructed from its lock
+/// integrity) in a project that also carries `vlt-lock.json`: the vlt
+/// backend drives the re-wire, the rebuilt artifact fails the post-verify,
+/// and every wiring file, vlt's included, is put back byte-for-byte.
+#[tokio::test]
+async fn vlt_wiring_files_are_restored_after_a_failed_post_verify() {
+    let mock = wiremock::MockServer::start().await;
+    mount_patch_api(&mock).await;
+    super::mount_blob(&mock).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    super::write_fixture(root, super::Flavor::Pnpm);
+    super::vendor_project(root, &mock.uri(), super::Flavor::Pnpm);
+    let lock = VltLock::V1.lock().replace(
+        "\n  }\n}\n",
+        &format!(",\n    \"workspace~packages+a {DEP}\": \"prod {DEP_VERSION} ~npm~left-pad@1.3.0\"\n  }}\n}}\n"),
+    );
+    std::fs::write(root.join("vlt-lock.json"), &lock).unwrap();
+    std::fs::create_dir_all(root.join("packages/a")).unwrap();
+    std::fs::write(
+        root.join("packages/a/package.json"),
+        format!("{{\n  \"name\": \"a\",\n  \"dependencies\": {{\n    \"{DEP}\": \"{DEP_VERSION}\"\n  }}\n}}\n"),
+    )
+    .unwrap();
+    let files = [
+        "vlt-lock.json",
+        "package.json",
+        "packages/a/package.json",
+        "pnpm-lock.yaml",
+    ];
+    let before: Vec<Vec<u8>> = files
+        .iter()
+        .map(|f| std::fs::read(root.join(f)).unwrap())
+        .collect();
+    std::fs::remove_dir_all(root.join(".socket/vendor")).unwrap();
+
+    let (code, stdout, stderr) = run_cli(root, &mock.uri(), &["repair", "--download-mode", "file"]);
+    assert_eq!(code, 1, "{stdout}\n{stderr}");
+    let v = parse_env(&stdout);
+    assert!(
+        events_of(&v)
+            .iter()
+            .any(|e| e["action"] == "failed" && e["purl"] == PURL),
+        "{v}"
+    );
+    for (file, bytes) in files.iter().zip(&before) {
+        assert_eq!(
+            &std::fs::read(root.join(file)).unwrap(),
+            bytes,
+            "{file} is restored: {v}"
+        );
+    }
+    assert!(
+        !root.join(format!(".socket/vendor/npm/{UUID}")).exists(),
+        "{v}"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs b/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
index c1e97b7e..248ec933 100644
--- a/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
+++ b/crates/socket-patch-cli/tests/rollback_multicopy_blob_gate.rs
@@ -296,42 +296,36 @@ fn rollback_offline_succeeds_when_every_copy_already_original() {
     assert_eq!(std::fs::read(&index_b).unwrap(), original);
 }
 
-/// vlt twin: the importer copy (vlt's link to the plain store entry) is
-/// already original while a peer-variant store entry of the same
-/// `name@version` is still patched. The gate must probe the variant too and
-/// fetch the before-blob it needs.
-#[test]
-fn rollback_downloads_blob_needed_only_by_a_vlt_store_peer_variant() {
+/// A store layout: the importer copy is already original while a
+/// peer-variant store entry of the same `name@version` is still patched.
+/// The gate must probe the variant too and fetch the before-blob it needs.
+fn store_peer_variant_rollback(
+    store_dir: &str,
+    plain_id: &str,
+    variant_id: &str,
+    lock: Option<(&str, &str)>,
+) {
     let tmp = tempfile::tempdir().unwrap();
     let root = tmp.path();
     let (index_a, index_b, before_hash, original, patched) = build_diverged_two_copy_tree(root);
     std::fs::remove_dir_all(root.join("node_modules")).unwrap();
     let store = |id: &str| {
-        root.join("node_modules/.vlt")
+        root.join("node_modules")
+            .join(store_dir)
             .join(id)
             .join("node_modules/gatedup")
     };
-    let plain = write_copy(&store("~npm~gatedup@1.0.0"), "gatedup", "1.0.0", &original);
-    let variant = write_copy(
-        &store("~npm~gatedup@1.0.0~peer.0df72515a50372ba"),
-        "gatedup",
-        "1.0.0",
-        &patched,
-    );
+    let plain = write_copy(&store(plain_id), "gatedup", "1.0.0", &original);
+    let variant = write_copy(&store(variant_id), "gatedup", "1.0.0", &patched);
     let importer = write_copy(
         &root.join("node_modules/gatedup"),
         "gatedup",
         "1.0.0",
         &original,
     );
-    std::fs::write(
-        root.join("vlt-lock.json"),
-        "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
-         \"~npm~gatedup@1.0.0\": [0,\"gatedup\",\"sha512-G==\"],\n    \
-         \"~npm~gatedup@1.0.0~peer.0df72515a50372ba\": [0,\"gatedup\",\"sha512-G==\"]\n  },\n  \
-         \"edges\": {\n    \"file~_d gatedup\": \"prod 1.0.0 ~npm~gatedup@1.0.0\"\n  }\n}\n",
-    )
-    .unwrap();
+    if let Some((name, text)) = lock {
+        std::fs::write(root.join(name), text).unwrap();
+    }
     let _ = (index_a, index_b);
 
     let (port, seen_paths) = spawn_blob_server(before_hash.clone(), original.clone());
@@ -373,3 +367,25 @@ fn rollback_downloads_blob_needed_only_by_a_vlt_store_peer_variant() {
         );
     }
 }
+
+#[test]
+fn rollback_downloads_blob_needed_only_by_a_vlt_store_peer_variant() {
+    store_peer_variant_rollback(
+        ".vlt",
+        "~npm~gatedup@1.0.0",
+        "~npm~gatedup@1.0.0~peer.0df72515a50372ba",
+        Some((
+            "vlt-lock.json",
+            "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {\n    \
+             \"~npm~gatedup@1.0.0\": [0,\"gatedup\",\"sha512-G==\"],\n    \
+             \"~npm~gatedup@1.0.0~peer.0df72515a50372ba\": [0,\"gatedup\",\"sha512-G==\"]\n  \
+             },\n  \"edges\": {\n    \"file~_d gatedup\": \"prod 1.0.0 ~npm~gatedup@1.0.0\"\n  \
+             }\n}\n",
+        )),
+    );
+}
+
+#[test]
+fn rollback_downloads_blob_needed_only_by_a_pnpm_store_peer_variant() {
+    store_peer_variant_rollback(".pnpm", "gatedup@1.0.0", "gatedup@1.0.0_react@18.2.0", None);
+}
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index d671a85d..bf0268d8 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -654,8 +654,10 @@ async fn analyze(
 /// The read-only vendored-mode refusals vlt can decide before any write:
 /// the lock sniff and layout, the target analysis with its declaration
 /// checks, the installed store copy's `bundleDependencies` and duplicate
-/// `devDependencies`, and a git ignore rule covering the would-be marker
-/// (DESIGN §4.6, core part).
+/// `devDependencies`, and a git rule ignoring the would-be uuid dir
+/// (DESIGN §4.6, core part). The dir form matches only directory
+/// exclusions: every other rule is overridden by the `!*` the engine
+/// writes into that dir.
 pub async fn vlt_vendor_preflight(
     project_root: &Path,
     purl: &str,
@@ -696,8 +698,9 @@ pub async fn vlt_vendor_preflight(
         }
     }
     if let Some(uuid_dir) = super::path::vendor_uuid_dir_rel("npm", uuid) {
-        let marker = format!("{uuid_dir}/{}", super::state::VENDOR_MARKER_FILE);
-        if let Some(rules) = super::npm_dir::gitignored(project_root, &[marker]).await {
+        if let Some(rules) =
+            super::npm_dir::gitignored(project_root, &[format!("{uuid_dir}/")]).await
+        {
             return Err((
                 super::npm_dir::GITIGNORED,
                 super::npm_dir::gitignored_detail(&analysis.rel, &rules),
@@ -2424,6 +2427,37 @@ mod tests {
         assert!(detail.contains("duplicate devDependencies"), "{detail}");
     }
 
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn the_preflight_refuses_only_rules_the_uuid_gitignore_cannot_undo() {
+        let Some(git) = crate::utils::process::resolve_tool("git") else {
+            return;
+        };
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let status = std::process::Command::new(&git)
+            .args(["init", "-q"])
+            .current_dir(&fx.root)
+            .status()
+            .unwrap();
+        assert!(status.success());
+        let ignore = fx.root.join(".gitignore");
+        tokio::fs::write(&ignore, "*.json\n!package.json\n!vlt-lock.json\n")
+            .await
+            .unwrap();
+        assert_eq!(vlt_vendor_preflight(&fx.root, PURL, UUID).await, Ok(()));
+        for rule in [".socket/", ".socket/vendor/", "npm/", UUID] {
+            tokio::fs::write(&ignore, format!("*.json\n{rule}\n"))
+                .await
+                .unwrap();
+            let (code, detail) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+                .await
+                .unwrap_err();
+            assert_eq!(code, super::super::npm_dir::GITIGNORED, "{rule}");
+            assert!(detail.contains(&format!(".gitignore:2:{rule}")), "{detail}");
+            assert!(!detail.contains("*.json"), "{detail}");
+        }
+    }
+
     fn service_tgz(entries: &[(&str, tar::EntryType, &[u8])]) -> Vec<u8> {
         let mut builder = tar::Builder::new(flate2::write::GzEncoder::new(
             Vec::new(),

From f6f36259e78cd0e4cdf2e2d680e58c71fe699778 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 04:21:57 -0400
Subject: [PATCH 21/46] Wire vlt projects in setup

`socket-patch setup` now recognizes a vlt project (vlt-lock.json,
vlt.json, node_modules/.vlt-lock.json or a node_modules/.vlt directory
in the project root, ahead of any pnpm marker) and writes npm's npx
hook into its package.json. A vlt workspace, declared in vlt.json or
the legacy vlt-workspaces.json, is wired at the root only, because vlt
runs the root hook once per install. `setup --json` and the setup
telemetry report the package manager as "vlt".

vlt releases before 1.0.0-rc.13 never run a root postinstall, so setup
now warns `vlt_root_scripts_not_run`: definitely when the vlt on PATH
reports such a version (checked with telemetry off and a 5 second
limit), and as a "may" when no usable vlt is found and vlt-lock.json
has lockfileVersion 0 or none. The hook is still written.

The setup-matrix gains vlt single-project and workspace cases, and the
npm test image moves to Node 22 with vlt 1.2.0 installed.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  12 +
 crates/socket-patch-cli/CLI_CONTRACT.md       |  14 +-
 crates/socket-patch-cli/src/commands/setup.rs | 203 ++++++++-
 .../socket-patch-cli/tests/cli_parse_setup.rs |  75 ++++
 .../tests/covgap_commands_setup.rs            | 135 +++++-
 .../tests/setup_contract_gaps.rs              |  52 +++
 .../tests/setup_invariants.rs                 | 285 +++++++++++++
 .../tests/setup_matrix_common/mod.rs          |   3 +-
 .../tests/setup_matrix_monorepo.rs            |  51 +++
 .../tests/setup_matrix_npm.rs                 |  18 +-
 .../tests/setup_terminal_output.rs            |  37 ++
 .../src/package_json/detect.rs                |  35 +-
 .../src/package_json/find.rs                  | 385 +++++++++++++++++-
 .../src/package_json/update.rs                |  16 +
 crates/socket-patch-core/src/telemetry.rs     |   4 +-
 tests/docker/Dockerfile.npm                   |  41 +-
 tests/docker/README.md                        |   8 +-
 tests/setup_matrix/README.md                  |  35 +-
 tests/setup_matrix/matrix.json                |  16 +-
 tests/setup_matrix/run-case.sh                |  34 +-
 20 files changed, 1409 insertions(+), 50 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0a2d21d2..7b5cea2d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -375,6 +375,18 @@ into the new version's section — see docs/releasing.md.
   the patched blob in `.socket/blobs`, and is omitted as
   `vendor_manifest_unverifiable` when that blob is absent. `setup.manual`
   accepts `vlt`.
+- **`setup` wires vlt projects.** A `vlt-lock.json`, `vlt.json`,
+  `node_modules/.vlt-lock.json` or `node_modules/.vlt/` directory in the
+  project root makes `setup` treat it as vlt, ahead of any pnpm marker. The
+  hook is npm's `npx @socketsecurity/socket-patch apply --silent --ecosystems
+  npm`, and a vlt workspace (vlt.json `workspaces`, or vlt <= 0.0.0-12's
+  `vlt-workspaces.json`) is wired at the root only, because vlt runs the
+  root hook once per install. The `setup --json` `packageManager` and the
+  `patch_setup` telemetry `manager` report `vlt`. vlt before 1.0.0-rc.13
+  never runs a root `postinstall`: `setup` still wires the project and
+  warns `vlt_root_scripts_not_run` — definitely when the `vlt` on `PATH`
+  reports such a version, and as a "may" when no usable `vlt` is found and
+  `vlt-lock.json` has `lockfileVersion` 0 or none.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 56c2cb52..c1d27e1c 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -364,7 +364,7 @@ still show up in VEX).
 
 | Ecosystem | Hook `setup` installs | Repatch trigger | Notes |
 |---|---|---|---|
-| npm / yarn / pnpm / bun | `scripts.postinstall` + `scripts.dependencies` | `npm/pnpm install` (+ `install <pkg>`) | pnpm: root package only |
+| npm / yarn / pnpm / bun / vlt | `scripts.postinstall` + `scripts.dependencies` | `npm/pnpm install` (+ `install <pkg>`); vlt: every install that changes the graph (`vlt install`, `install <pkg>`, `vlt ci`), never a no-op install | pnpm and vlt: root package only. vlt gets npm's `npx` hook (never `vlx`) and is detected by `vlt-lock.json`, `vlt.json`, `node_modules/.vlt-lock.json` or a `node_modules/.vlt/` directory in `--cwd` (before the pnpm markers; an ancestor `vlt.json` is ignored). vlt < 1.0.0-rc.13 never runs a root `postinstall`: `setup` still wires it and warns `vlt_root_scripts_not_run`. A failing hook aborts and rolls back the whole `vlt install`, so `apply --silent` exits 0 when there is nothing to do (no manifest); a manifest whose only patch targets a package that is not installed exits 1 and aborts the install, as it fails `npm install` |
 | pypi | `socket-patch[hook]` dependency → `.pth` startup hook | Python interpreter startup after installed-set change | manifest = `pyproject.toml` (uv/poetry/pdm/hatch) or `requirements.txt` (pip) |
 | gem | managed `plugin "socket-patch"` block in the `Gemfile` → committed in-tree Bundler plugin under `.socket/bundler-plugin/` | every `bundle install` (cached + fresh: load-time digest gate + `after-install-all` hook) | the plugin is `path:`-sourced (a `git:` dir source is uncloneable — the generated dir is not a git repo — and fails `bundle install`); the dir must be committed so clones/CI have it; CLI must be on `PATH`. Phase 2 (follow-up) switches to a published `socket-patch-bundler` gem |
 | composer | `socket-patch apply` appended to `composer.json`'s `post-install-cmd` + `post-update-cmd` script events | every `composer install` / `composer update` | CLI must be on `PATH` |
@@ -396,8 +396,11 @@ in `setup.manual` for VEX attestation.
 How `setup` (and the underlying `scan`/`apply` crawlers) find subprojects differs by ecosystem, and
 the model is **not uniform** today:
 
-- **Workspace-aware (walk members):** npm / yarn / pnpm / bun (`workspaces` / `pnpm-workspace.yaml`).
-  One repo-root invocation discovers and configures every member. *Single level only* — see property
+- **Workspace-aware (walk members):** npm / yarn / pnpm / bun / vlt (`workspaces` / `pnpm-workspace.yaml` /
+  vlt.json `workspaces` — a glob, a list, or named groups of either — or vlt <= 0.0.0-12's
+  `vlt-workspaces.json`; vlt's declaration wins over the others and vlt never reads package.json
+  `workspaces`). One repo-root invocation discovers and configures every member (pnpm and vlt: the
+  root package only — vlt runs the root hook once per install, even one started from a member). *Single level only* — see property
   9's nested-workspace gap.
 - **cwd-only (single project):** gem, pypi, composer. The crawler inspects only the project
   rooted at `--cwd` (pypi looks at `$VIRTUAL_ENV`, `<cwd>/.venv` / `venv`, then a Poetry project's out-of-tree virtualenv(s) under Poetry's `virtualenvs.path`; composer at the vendor tree); it does **not**
@@ -474,11 +477,11 @@ plugin — emitted only when a registration existed; `status: error` carries the
   "updated":            0,
   "alreadyConfigured":  0,
   "errors":             0,
-  "packageManager":      "npm" | "pnpm",                 // always emitted; defaults to "npm", only meaningful when npm files were found
+  "packageManager":      "npm" | "pnpm" | "vlt",         // always emitted; defaults to "npm", only meaningful when npm files were found ("vlt" is additive)
   "pythonPackageManager":"pip" | "uv" | "poetry" | "pdm" | "hatch",  // present only when Python detected
   "dryRun":   true,                                      // only on status=dry_run
   "wouldUpdate": 0,                                      // only on status=dry_run
-  "warnings": [ "..." ],                                 // only when non-empty (e.g. lockfile refresh)
+  "warnings": [ "..." ],                                 // only when non-empty (e.g. lockfile refresh; "vlt_root_scripts_not_run: <detail>")
   "files": [
     { "kind": "package_json", "path": "...", "status": "updated" | "already_configured" | "error",
       "error": null | "..." }
@@ -1298,6 +1301,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
 | `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
+| `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Without a usable `vlt` (absent, non-zero exit, timeout) it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none. Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
 | `vendor_*` / `pypi_*` / `gemfile_*` / `lock_*` / `locked_version_mismatch` / `user_authored_*` / `native_extensions_unsupported` / `platform_gem_unsupported` | `failed`/`skipped` | vendor: per-ecosystem refusal + drift vocabulary; see the Vendor command contract section. New tags are additive (MINOR). |
diff --git a/crates/socket-patch-cli/src/commands/setup.rs b/crates/socket-patch-cli/src/commands/setup.rs
index 3f9c81c7..e65429e2 100644
--- a/crates/socket-patch-cli/src/commands/setup.rs
+++ b/crates/socket-patch-cli/src/commands/setup.rs
@@ -5,8 +5,8 @@ use socket_patch_core::manifest::operations::{read_manifest, write_manifest};
 use socket_patch_core::manifest::schema::{PatchManifest, SetupConfig};
 use socket_patch_core::package_json::detect::{is_setup_configured_str, PackageManager};
 use socket_patch_core::package_json::find::{
-    detect_package_manager, find_package_json_files, PackageJsonFindResult, PackageJsonLocation,
-    WorkspaceType,
+    detect_package_manager, find_package_json_files, legacy_vlt_lock, LegacyVltLock,
+    PackageJsonFindResult, PackageJsonLocation, WorkspaceType,
 };
 use socket_patch_core::package_json::update::{
     remove_package_json, update_package_json, RemoveResult, RemoveStatus, UpdateResult,
@@ -22,9 +22,11 @@ use socket_patch_core::setup::pypi::edit::{
     PthEditResult, PthStatus,
 };
 use socket_patch_core::telemetry::track_patch_setup;
+use socket_patch_core::utils::process::{command_for, resolve_tool};
 use socket_patch_core::vex::applied_patches_with_vendor;
 use std::io;
 use std::path::{Path, PathBuf};
+use std::process::Stdio;
 use std::time::Duration;
 
 use crate::args::{apply_env_toggles, GlobalArgs};
@@ -36,6 +38,92 @@ fn manager_name(pm: PackageManager) -> &'static str {
     match pm {
         PackageManager::Npm => "npm",
         PackageManager::Pnpm => "pnpm",
+        PackageManager::Vlt => "vlt",
+    }
+}
+
+const VLT_ROOT_SCRIPTS_NOT_RUN: &str = "vlt_root_scripts_not_run";
+const VLT_ROOT_SCRIPTS_REMEDY: &str = "vlt before 1.0.0-rc.13 does not run the root postinstall \
+                                       hook; upgrade vlt or run `socket-patch apply` after `vlt ci`";
+/// The first vlt release that runs a root `postinstall` without an
+/// `install` script.
+const VLT_ROOT_SCRIPTS_FLOOR: &str = "1.0.0-rc.13";
+const VLT_VERSION_TIMEOUT: Duration = Duration::from_secs(5);
+
+/// What `vlt --version` said, when a `vlt` resolved on PATH and exited 0
+/// within [`VLT_VERSION_TIMEOUT`].
+#[derive(Debug, Clone, PartialEq)]
+enum VltVersionProbe {
+    Reported(String),
+    Unavailable,
+}
+
+async fn probe_vlt_version(cwd: &Path) -> VltVersionProbe {
+    let Some(program) = resolve_tool("vlt") else {
+        return VltVersionProbe::Unavailable;
+    };
+    let mut cmd = tokio::process::Command::from(command_for(&program));
+    cmd.arg("--version")
+        .env("VLT_TELEMETRY", "0")
+        .current_dir(cwd)
+        .stdin(Stdio::null())
+        .kill_on_drop(true);
+    match tokio::time::timeout(VLT_VERSION_TIMEOUT, cmd.output()).await {
+        Ok(Ok(out)) if out.status.success() => {
+            VltVersionProbe::Reported(String::from_utf8_lossy(&out.stdout).trim().to_string())
+        }
+        _ => VltVersionProbe::Unavailable,
+    }
+}
+
+/// The `vlt_root_scripts_not_run` detail, if any. A reported version
+/// decides alone (an unparseable one never warns); without one, a lock
+/// only an old vlt writes makes the warning a "may".
+fn vlt_root_scripts_advisory(
+    probe: &VltVersionProbe,
+    lock: Option<LegacyVltLock>,
+) -> Option<String> {
+    match probe {
+        VltVersionProbe::Reported(raw) => {
+            let floor = semver::Version::parse(VLT_ROOT_SCRIPTS_FLOOR).ok()?;
+            let version = semver::Version::parse(raw).ok()?;
+            (version < floor)
+                .then(|| format!("{VLT_ROOT_SCRIPTS_REMEDY} (`vlt --version` reports {raw})"))
+        }
+        VltVersionProbe::Unavailable => lock.map(|lock| {
+            let version = match lock {
+                LegacyVltLock::NoVersion => "has no lockfileVersion",
+                LegacyVltLock::VersionZero => "has lockfileVersion 0",
+            };
+            format!(
+                "{VLT_ROOT_SCRIPTS_REMEDY} (vlt-lock.json {version}, so this project may be \
+                 installed by such a vlt)"
+            )
+        }),
+    }
+}
+
+/// The run's `(code, detail)` advisories for a vlt project `setup` wires.
+async fn vlt_setup_advisories(cwd: &Path) -> Vec<(&'static str, String)> {
+    let probe = probe_vlt_version(cwd).await;
+    let lock = match probe {
+        VltVersionProbe::Reported(_) => None,
+        VltVersionProbe::Unavailable => legacy_vlt_lock(cwd).await,
+    };
+    vlt_root_scripts_advisory(&probe, lock)
+        .map(|detail| (VLT_ROOT_SCRIPTS_NOT_RUN, detail))
+        .into_iter()
+        .collect()
+}
+
+/// `Warning (<code>): <detail>` on stderr in human mode; `--json` carries
+/// them in the envelope's `warnings` and `--silent` mutes them.
+fn print_advisories(common: &GlobalArgs, advisories: &[(&str, String)]) {
+    if common.json || common.silent {
+        return;
+    }
+    for (code, detail) in advisories {
+        eprintln!("Warning ({code}): {detail}");
     }
 }
 
@@ -168,7 +256,7 @@ fn warn_unmatched_excludes(common: &GlobalArgs, unmatched: &[String]) {
     }
 }
 
-/// Apply the pnpm root-only rule and drop excluded members.
+/// Apply the pnpm/vlt root-only rule and drop excluded members.
 fn select_members(
     found: PackageJsonFindResult,
     cwd: &Path,
@@ -176,9 +264,13 @@ fn select_members(
 ) -> Vec<PackageJsonLocation> {
     // For pnpm monorepos, only update root package.json. pnpm runs root
     // postinstall on `pnpm install`, so workspace-level postinstall scripts are
-    // unnecessary and would fail under pnpm's strict module isolation.
+    // unnecessary and would fail under pnpm's strict module isolation. vlt
+    // has one root store and runs the root hook once per install, even one
+    // started from a member directory.
     let files: Vec<PackageJsonLocation> = match found.workspace_type {
-        WorkspaceType::Pnpm => found.files.into_iter().filter(|loc| loc.is_root).collect(),
+        WorkspaceType::Pnpm | WorkspaceType::Vlt => {
+            found.files.into_iter().filter(|loc| loc.is_root).collect()
+        }
         _ => found.files,
     };
 
@@ -1999,6 +2091,11 @@ async fn run_setup(args: &SetupArgs) -> i32 {
     let extra_preview = merge_outcomes(gem_preview, composer_preview);
 
     let npm_pm = detect_package_manager(&common.cwd).await;
+    let advisories = if npm_pm == PackageManager::Vlt && !npm_files.is_empty() {
+        vlt_setup_advisories(&common.cwd).await
+    } else {
+        Vec::new()
+    };
 
     // `patch_setup` telemetry ("a successful setup") fires only on the two
     // exit-0, non-dry-run paths below — never for a dry run, an aborted
@@ -2045,6 +2142,7 @@ async fn run_setup(args: &SetupArgs) -> i32 {
             )
         );
     }
+    print_advisories(common, &advisories);
 
     let preview_errors = npm_preview
         .iter()
@@ -2083,6 +2181,7 @@ async fn run_setup(args: &SetupArgs) -> i32 {
                 npm_pm,
                 py_plan.as_ref(),
                 &warnings,
+                &advisories,
             );
         } else if !common.silent {
             if preview_errors > 0 {
@@ -2122,6 +2221,7 @@ async fn run_setup(args: &SetupArgs) -> i32 {
                 npm_pm,
                 py_plan.as_ref(),
                 &[],
+                &advisories,
             );
         } else if !common.silent {
             println!("\nSummary (dry run):");
@@ -2210,6 +2310,7 @@ async fn run_setup(args: &SetupArgs) -> i32 {
             npm_pm,
             py_plan.as_ref(),
             &warnings,
+            &advisories,
         );
     } else if !common.silent {
         let updated = npm_results
@@ -2344,6 +2445,7 @@ fn print_setup_envelope(
     npm_pm: PackageManager,
     py_plan: Option<&PythonPlan>,
     warnings: &[String],
+    advisories: &[(&str, String)],
 ) {
     let updated = npm
         .iter()
@@ -2410,6 +2512,15 @@ fn print_setup_envelope(
     if let Some(plan) = py_plan {
         obj["pythonPackageManager"] = serde_json::json!(plan.pm.as_str());
     }
+    let warnings: Vec<String> = warnings
+        .iter()
+        .cloned()
+        .chain(
+            advisories
+                .iter()
+                .map(|(code, detail)| format!("{code}: {detail}")),
+        )
+        .collect();
     if !warnings.is_empty() {
         obj["warnings"] = serde_json::json!(warnings);
     }
@@ -2747,4 +2858,86 @@ mod tests {
             "no trailing blank line: {out:?}"
         );
     }
+
+    #[test]
+    fn vlt_is_its_own_telemetry_and_envelope_manager() {
+        assert_eq!(manager_name(PackageManager::Vlt), "vlt");
+        assert_eq!(
+            telemetry_manager_str(true, true, false, false, PackageManager::Vlt),
+            "vlt+pypi"
+        );
+    }
+
+    #[test]
+    fn vlt_root_scripts_advisory_is_definite_only_below_rc13() {
+        let reported = |v: &str| VltVersionProbe::Reported(v.to_string());
+        for old in [
+            "0.0.0-1",
+            "0.0.0-0.1733957343934",
+            "0.0.0-32",
+            "1.0.0-rc.9",
+            "1.0.0-rc.12",
+        ] {
+            assert_eq!(
+                vlt_root_scripts_advisory(&reported(old), None).as_deref(),
+                Some(
+                    format!(
+                        "vlt before 1.0.0-rc.13 does not run the root postinstall hook; \
+                         upgrade vlt or run `socket-patch apply` after `vlt ci` (`vlt \
+                         --version` reports {old})"
+                    )
+                    .as_str()
+                ),
+                "{old}"
+            );
+        }
+        for new in ["1.0.0-rc.13", "1.0.0-rc.14", "1.0.0", "1.2.0"] {
+            for lock in [None, Some(LegacyVltLock::VersionZero)] {
+                assert_eq!(
+                    vlt_root_scripts_advisory(&reported(new), lock),
+                    None,
+                    "{new}"
+                );
+            }
+        }
+    }
+
+    #[test]
+    fn vlt_root_scripts_advisory_never_fires_on_an_unparseable_version() {
+        for raw in [
+            "",
+            "vlt 1.0.0-rc.12",
+            "v0.0.0-32",
+            "rc.12",
+            "1.0.0-rc.12\nextra",
+        ] {
+            assert_eq!(
+                vlt_root_scripts_advisory(
+                    &VltVersionProbe::Reported(raw.to_string()),
+                    Some(LegacyVltLock::NoVersion)
+                ),
+                None,
+                "{raw:?}"
+            );
+        }
+    }
+
+    #[test]
+    fn vlt_root_scripts_advisory_falls_back_to_a_may_from_the_lock() {
+        let probe = VltVersionProbe::Unavailable;
+        assert_eq!(vlt_root_scripts_advisory(&probe, None), None);
+        assert_eq!(
+            vlt_root_scripts_advisory(&probe, Some(LegacyVltLock::VersionZero)).as_deref(),
+            Some(
+                "vlt before 1.0.0-rc.13 does not run the root postinstall hook; upgrade vlt \
+                 or run `socket-patch apply` after `vlt ci` (vlt-lock.json has lockfileVersion \
+                 0, so this project may be installed by such a vlt)"
+            )
+        );
+        assert!(
+            vlt_root_scripts_advisory(&probe, Some(LegacyVltLock::NoVersion))
+                .unwrap()
+                .contains("(vlt-lock.json has no lockfileVersion, so this project may")
+        );
+    }
 }
diff --git a/crates/socket-patch-cli/tests/cli_parse_setup.rs b/crates/socket-patch-cli/tests/cli_parse_setup.rs
index 597b839e..a17bfe31 100644
--- a/crates/socket-patch-cli/tests/cli_parse_setup.rs
+++ b/crates/socket-patch-cli/tests/cli_parse_setup.rs
@@ -481,3 +481,78 @@ fn subprocess_already_configured_is_idempotent() {
         "an idempotent re-run must not rewrite package.json"
     );
 }
+
+// ---------------------------------------------------------------------------
+// vlt: `packageManager` gains the additive value "vlt", and the hook is the
+// same `npx` command npm projects get.
+// ---------------------------------------------------------------------------
+
+#[tokio::test]
+async fn run_vlt_project_dry_run_writes_nothing() {
+    let tempdir = tempfile::tempdir().expect("tempdir");
+    let original = "{\n  \"name\": \"demo\"\n}\n";
+    std::fs::write(tempdir.path().join("package.json"), original).unwrap();
+    std::fs::write(
+        tempdir.path().join("vlt-lock.json"),
+        "{\"lockfileVersion\":1}",
+    )
+    .unwrap();
+    let args = SetupArgs {
+        check: false,
+        remove: false,
+        exclude: Vec::new(),
+        common: socket_patch_cli::args::GlobalArgs {
+            cwd: tempdir.path().to_path_buf(),
+            dry_run: true,
+            yes: true,
+            json: true,
+            ..socket_patch_cli::args::GlobalArgs::default()
+        },
+    };
+    assert_eq!(run(args).await, 0);
+    assert_eq!(
+        std::fs::read_to_string(tempdir.path().join("package.json")).unwrap(),
+        original
+    );
+}
+
+#[test]
+fn subprocess_vlt_project_json_shape() {
+    let tempdir = tempfile::tempdir().expect("tempdir");
+    let empty_path = tempfile::tempdir().expect("PATH dir");
+    std::fs::write(
+        tempdir.path().join("package.json"),
+        r#"{"name":"demo","version":"1.0.0"}"#,
+    )
+    .unwrap();
+    std::fs::write(tempdir.path().join("vlt.json"), "{}").unwrap();
+
+    let output = Command::new(env!("CARGO_BIN_EXE_socket-patch"))
+        .arg("setup")
+        .arg("--cwd")
+        .arg(tempdir.path())
+        .arg("--json")
+        .arg("--yes")
+        .env("SOCKET_TELEMETRY_DISABLED", "1")
+        .env("PATH", empty_path.path())
+        .output()
+        .expect("spawn socket-patch");
+    assert!(
+        output.status.success(),
+        "stderr: {}",
+        String::from_utf8_lossy(&output.stderr)
+    );
+    let v: serde_json::Value = serde_json::from_slice(&output.stdout).expect("JSON stdout");
+    assert_eq!(v["status"], "success", "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_eq!(v["updated"], 1, "{v}");
+    assert!(v.get("warnings").is_none(), "{v}");
+    let pkg: serde_json::Value = serde_json::from_str(
+        &std::fs::read_to_string(tempdir.path().join("package.json")).unwrap(),
+    )
+    .unwrap();
+    assert_eq!(
+        pkg["scripts"]["postinstall"],
+        "npx @socketsecurity/socket-patch apply --silent --ecosystems npm"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/covgap_commands_setup.rs b/crates/socket-patch-cli/tests/covgap_commands_setup.rs
index 8d412528..35afa135 100644
--- a/crates/socket-patch-cli/tests/covgap_commands_setup.rs
+++ b/crates/socket-patch-cli/tests/covgap_commands_setup.rs
@@ -681,9 +681,8 @@ mod pty {
         let mut child = pair.slave.spawn_command(cmd).expect("spawn in PTY");
         drop(pair.slave);
 
-        let reader_handle = crate::pty_io::PtyOutput::spawn(
-            pair.master.try_clone_reader().expect("clone reader"),
-        );
+        let reader_handle =
+            crate::pty_io::PtyOutput::spawn(pair.master.try_clone_reader().expect("clone reader"));
 
         let mut killer = child.clone_killer();
         std::thread::spawn(move || {
@@ -1738,7 +1737,14 @@ fn setup_does_not_persist_an_unmatched_exclude() {
 
     let (code, stdout, stderr) = run(
         cwd,
-        &["setup", "--yes", "--exclude", "nope", "--exclude", "packages/a"],
+        &[
+            "setup",
+            "--yes",
+            "--exclude",
+            "nope",
+            "--exclude",
+            "packages/a",
+        ],
     );
     assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
     assert_eq!(
@@ -1849,3 +1855,124 @@ fn check_reports_an_unreadable_vendor_ledger_instead_of_configured() {
         "--check never rewrites or quarantines the ledger"
     );
 }
+
+// ---------------------------------------------------------------------------
+// vlt: the human advisory line, its muting, scope gating, and the byte-exact
+// remove round trip of the npx hook.
+// ---------------------------------------------------------------------------
+
+/// A PATH directory whose only tool is a `vlt` reporting `version`.
+fn old_vlt_path(version: &str) -> tempfile::TempDir {
+    let dir = tempfile::tempdir().expect("PATH dir");
+    if cfg!(windows) {
+        write(
+            &dir.path().join("vlt.cmd"),
+            &format!("@echo off\r\necho {version}\r\n"),
+        );
+    } else {
+        let shim = dir.path().join("vlt");
+        write(&shim, &format!("#!/bin/sh\necho {version}\n"));
+        #[cfg(unix)]
+        chmod(&shim, 0o755);
+    }
+    dir
+}
+
+const VLT_PACKAGE_JSON: &str = "{\n  \"name\": \"covgap\",\n  \"version\": \"1.0.0\"\n}\n";
+
+fn vlt_fixture(cwd: &Path) {
+    write(&cwd.join("package.json"), VLT_PACKAGE_JSON);
+    write(&cwd.join("vlt.json"), "{}\n");
+}
+
+const VLT_ADVISORY_LINE: &str = "Warning (vlt_root_scripts_not_run): vlt before 1.0.0-rc.13 does \
+                                 not run the root postinstall hook; upgrade vlt or run \
+                                 `socket-patch apply` after `vlt ci` (`vlt --version` reports \
+                                 0.0.0-32)";
+
+#[test]
+fn setup_vlt_advisory_prints_on_stderr_in_human_mode() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    vlt_fixture(tmp.path());
+    let path = old_vlt_path("0.0.0-32");
+    let path_env = [("PATH", path.path().to_str().unwrap())];
+    for args in [
+        &["setup", "--dry-run"][..],
+        &["setup", "--yes"],
+        &["setup", "--yes"],
+    ] {
+        let (code, stdout, stderr) = run_env(tmp.path(), args, &path_env);
+        assert_eq!(code, 0, "{args:?}: stdout=\n{stdout}\nstderr=\n{stderr}");
+        assert_eq!(
+            stderr.matches(VLT_ADVISORY_LINE).count(),
+            1,
+            "{args:?}: stderr=\n{stderr}"
+        );
+        assert!(!stdout.contains("vlt_root_scripts_not_run"), "{stdout}");
+    }
+
+    let (code, stdout, stderr) = run_env(tmp.path(), &["setup", "--yes", "--silent"], &path_env);
+    assert_eq!(code, 0);
+    assert!(stdout.is_empty() && stderr.is_empty(), "{stdout}{stderr}");
+
+    let (code, stdout, stderr) = run_env(tmp.path(), &["setup", "--yes", "--json"], &path_env);
+    assert_eq!(code, 0);
+    assert!(
+        stderr.is_empty(),
+        "--json keeps it in the envelope: {stderr}"
+    );
+    let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
+    assert_eq!(v["status"], "already_configured", "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_eq!(
+        v["warnings"][0].as_str().unwrap(),
+        VLT_ADVISORY_LINE
+            .strip_prefix("Warning (vlt_root_scripts_not_run): ")
+            .map(|d| format!("vlt_root_scripts_not_run: {d}"))
+            .unwrap()
+    );
+}
+
+#[test]
+fn setup_vlt_advisory_needs_npm_in_scope() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    vlt_fixture(tmp.path());
+    write(&tmp.path().join("requirements.txt"), REQUIREMENTS_NO_HOOK);
+    let path = old_vlt_path("0.0.0-32");
+    let (code, stdout, stderr) = run_env(
+        tmp.path(),
+        &["setup", "--yes", "--json", "-e", "pypi"],
+        &[("PATH", path.path().to_str().unwrap())],
+    );
+    assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
+    let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
+    assert!(entries_of(&v, "package_json").is_empty(), "{v}");
+    assert!(v.get("warnings").is_none(), "{v}");
+    assert_eq!(read(&tmp.path().join("package.json")), VLT_PACKAGE_JSON);
+}
+
+#[test]
+fn setup_vlt_check_and_remove_round_trip_byte_exact() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    let cwd = tmp.path();
+    vlt_fixture(cwd);
+    let path = old_vlt_path("1.2.0");
+    let path_env = [("PATH", path.path().to_str().unwrap())];
+
+    let (code, ..) = run_env(cwd, &["setup", "--check"], &path_env);
+    assert_eq!(code, 1);
+    let (code, stdout, stderr) = run_env(cwd, &["setup", "--yes", "--json"], &path_env);
+    assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
+    let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert!(v.get("warnings").is_none(), "vlt 1.2.0 runs the hook: {v}");
+    assert!(read(&cwd.join("package.json")).contains(
+        "\"postinstall\": \"npx @socketsecurity/socket-patch apply --silent --ecosystems npm\""
+    ));
+    let (code, ..) = run_env(cwd, &["setup", "--check"], &path_env);
+    assert_eq!(code, 0);
+    let (code, stdout, stderr) = run_env(cwd, &["setup", "--remove", "--yes"], &path_env);
+    assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
+    assert_eq!(read(&cwd.join("package.json")), VLT_PACKAGE_JSON);
+    assert_eq!(read(&cwd.join("vlt.json")), "{}\n");
+}
diff --git a/crates/socket-patch-cli/tests/setup_contract_gaps.rs b/crates/socket-patch-cli/tests/setup_contract_gaps.rs
index 2bb71f37..00a3fa25 100644
--- a/crates/socket-patch-cli/tests/setup_contract_gaps.rs
+++ b/crates/socket-patch-cli/tests/setup_contract_gaps.rs
@@ -789,3 +789,55 @@ fn setup_exclude_covers_manifests_nested_below_the_excluded_member() {
         "no manifest under the excluded member may appear in the envelope:\n{stdout}"
     );
 }
+
+// ===========================================================================
+// Additive contract values for vlt: the setup envelope's `packageManager`
+// and the `patch_setup` telemetry `manager` both say "vlt" for a vlt project
+// (the hook itself is npm's `npx` form).
+// ===========================================================================
+
+#[tokio::test]
+async fn setup_reports_vlt_in_the_envelope_and_telemetry() {
+    use wiremock::MockServer;
+
+    let server = MockServer::start().await;
+    let tmp = tempfile::tempdir().unwrap();
+    let home = tempfile::tempdir().unwrap();
+    let path = tempfile::tempdir().unwrap();
+    write(
+        &tmp.path().join("package.json"),
+        "{\n  \"name\": \"vlt-proj\",\n  \"version\": \"1.0.0\"\n}\n",
+    );
+    write(&tmp.path().join("vlt.json"), "{}\n");
+
+    let mut cmd = Command::new(binary());
+    cmd.args(["setup", "--json", "--yes"])
+        .current_dir(tmp.path());
+    for (name, _) in std::env::vars() {
+        if name.starts_with("SOCKET_") || name == "VITEST" {
+            cmd.env_remove(name);
+        }
+    }
+    cmd.env("HOME", home.path())
+        .env("PATH", path.path())
+        .env("SOCKET_NO_CONFIG", "1")
+        .env("SOCKET_NO_UPDATE_CHECK", "1")
+        .env("SOCKET_TELEMETRY_DISABLED", "0")
+        .env("SOCKET_PROXY_URL", server.uri());
+    let out = cmd.output().expect("run socket-patch");
+    let stdout = String::from_utf8_lossy(&out.stdout);
+    assert_eq!(out.status.code(), Some(0), "stdout=\n{stdout}");
+    let v: serde_json::Value = serde_json::from_str(&stdout).expect("valid JSON");
+    assert_eq!(v["status"], "success", "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+
+    let reqs = server.received_requests().await.unwrap_or_default();
+    let events: Vec<serde_json::Value> = reqs
+        .iter()
+        .filter(|r| r.url.path() == "/patch/telemetry")
+        .map(|r| serde_json::from_slice(&r.body).expect("telemetry body is JSON"))
+        .collect();
+    assert_eq!(events.len(), 1, "one patch_setup event: {events:?}");
+    assert_eq!(events[0]["event_type"], "patch_setup", "{}", events[0]);
+    assert_eq!(events[0]["metadata"]["manager"], "vlt", "{}", events[0]);
+}
diff --git a/crates/socket-patch-cli/tests/setup_invariants.rs b/crates/socket-patch-cli/tests/setup_invariants.rs
index 9bf497ca..c91b1149 100644
--- a/crates/socket-patch-cli/tests/setup_invariants.rs
+++ b/crates/socket-patch-cli/tests/setup_invariants.rs
@@ -1072,3 +1072,288 @@ fn setup_gem_materialization_honors_manifest_path() {
          the default `.socket/manifest.json`; stdout=\n{stdout}"
     );
 }
+
+// ---------------------------------------------------------------------------
+// vlt: npm's npx hook, root-only workspaces, and the
+// `vlt_root_scripts_not_run` advisory. Every run pins PATH to a directory
+// holding at most a fake `vlt`, so the host's own vlt never decides.
+// ---------------------------------------------------------------------------
+
+const NPX_HOOK: &str = "npx @socketsecurity/socket-patch apply --silent --ecosystems npm";
+const VLT_ADVISORY_PREFIX: &str = "vlt_root_scripts_not_run: vlt before 1.0.0-rc.13 does not run \
+                                   the root postinstall hook; upgrade vlt or run `socket-patch \
+                                   apply` after `vlt ci`";
+
+/// A PATH directory with a `vlt` that runs `unix` (a `/bin/sh` body) or,
+/// on Windows, `windows` (a `vlt.cmd` body). `None` leaves it empty.
+fn vlt_path(bodies: Option<(&str, &str)>) -> tempfile::TempDir {
+    let dir = tempfile::tempdir().expect("tempdir");
+    if let Some((unix, windows)) = bodies {
+        if cfg!(windows) {
+            write(
+                &dir.path().join("vlt.cmd"),
+                &format!("@echo off\r\n{windows}\r\n"),
+            );
+        } else {
+            let shim = dir.path().join("vlt");
+            write(&shim, &format!("#!/bin/sh\n{unix}\n"));
+            #[cfg(unix)]
+            {
+                use std::os::unix::fs::PermissionsExt;
+                std::fs::set_permissions(&shim, std::fs::Permissions::from_mode(0o755))
+                    .expect("chmod shim");
+            }
+        }
+    }
+    dir
+}
+
+/// A `vlt --version` that reports `version`, but only when the probe
+/// disabled vlt's telemetry for the child.
+fn vlt_reporting(version: &str) -> tempfile::TempDir {
+    vlt_path(Some((
+        &format!("if [ \"$VLT_TELEMETRY\" = 0 ]; then echo {version}; else echo telemetry-on; fi"),
+        &format!("if \"%VLT_TELEMETRY%\"==\"0\" (echo {version}) else (echo telemetry-on)"),
+    )))
+}
+
+fn run_setup_with_path(cwd: &Path, path: &Path, extra: &[&str]) -> (i32, serde_json::Value) {
+    let mut args = vec!["setup", "--json"];
+    args.extend_from_slice(extra);
+    let out = setup_command(cwd, &args)
+        .env("PATH", path)
+        .output()
+        .expect("run socket-patch");
+    let stdout = String::from_utf8_lossy(&out.stdout).to_string();
+    let v = serde_json::from_str(&stdout).unwrap_or_else(|e| {
+        panic!(
+            "stdout must be JSON ({e}); stdout=\n{stdout}\nstderr=\n{}",
+            String::from_utf8_lossy(&out.stderr)
+        )
+    });
+    (out.status.code().unwrap_or(-1), v)
+}
+
+fn warnings(v: &serde_json::Value) -> Vec<String> {
+    v["warnings"]
+        .as_array()
+        .map(|w| {
+            w.iter()
+                .map(|s| s.as_str().expect("warning string").to_string())
+                .collect()
+        })
+        .unwrap_or_default()
+}
+
+fn vlt_project(lock: Option<&str>) -> tempfile::TempDir {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    write(
+        &tmp.path().join("package.json"),
+        "{ \"name\": \"vlt-proj\", \"version\": \"1.0.0\" }\n",
+    );
+    match lock {
+        Some(lock) => write(&tmp.path().join("vlt-lock.json"), lock),
+        None => write(&tmp.path().join("vlt.json"), "{}\n"),
+    }
+    tmp
+}
+
+const VLT_LOCK_V1: &str =
+    "{\n  \"lockfileVersion\": 1,\n  \"options\": {},\n  \"nodes\": {},\n  \"edges\": {}\n}\n";
+const VLT_LOCK_V0: &str =
+    "{\n  \"lockfileVersion\": 0,\n  \"options\": {},\n  \"nodes\": {},\n  \"edges\": {}\n}\n";
+
+fn assert_npx_hooks(root: &Path) {
+    let pkg: serde_json::Value =
+        serde_json::from_str(&std::fs::read_to_string(root.join("package.json")).unwrap()).unwrap();
+    assert_eq!(pkg["scripts"]["postinstall"], NPX_HOOK, "{pkg}");
+    assert_eq!(pkg["scripts"]["dependencies"], NPX_HOOK, "{pkg}");
+}
+
+#[test]
+fn setup_detects_vlt_from_lockfile() {
+    let tmp = vlt_project(Some(VLT_LOCK_V1));
+    let path = vlt_path(None);
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert_eq!(v["status"], "success", "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_npx_hooks(tmp.path());
+    assert!(
+        warnings(&v).is_empty(),
+        "no vlt on PATH and a v1 lock: no advisory; {v}"
+    );
+}
+
+#[test]
+fn setup_detects_vlt_from_vlt_json() {
+    let tmp = vlt_project(None);
+    // pnpm markers lose to vlt's.
+    write(
+        &tmp.path().join("pnpm-lock.yaml"),
+        "lockfileVersion: '9.0'\n",
+    );
+    let path = vlt_path(None);
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_npx_hooks(tmp.path());
+    assert!(warnings(&v).is_empty(), "{v}");
+}
+
+#[test]
+fn setup_detects_vlt_from_install_state() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    write(
+        &tmp.path().join("package.json"),
+        "{ \"name\": \"vlt-proj\", \"version\": \"1.0.0\" }\n",
+    );
+    std::fs::create_dir_all(tmp.path().join("node_modules/.vlt")).unwrap();
+    let path = vlt_path(None);
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_npx_hooks(tmp.path());
+}
+
+#[test]
+fn setup_vlt_workspace_only_updates_root() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    write(
+        &tmp.path().join("package.json"),
+        "{ \"name\": \"vlt-root\", \"version\": \"1.0.0\" }\n",
+    );
+    write(
+        &tmp.path().join("vlt.json"),
+        "{ \"workspaces\": { \"apps\": \"packages/*\" } }\n",
+    );
+    let members = ["packages/a/package.json", "packages/b/package.json"];
+    for member in members {
+        write(
+            &tmp.path().join(member),
+            "{ \"name\": \"m\", \"version\": \"1.0.0\" }\n",
+        );
+    }
+    let path = vlt_path(None);
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert_eq!(v["packageManager"], "vlt", "{v}");
+    assert_eq!(v["updated"], 1, "{v}");
+    let files = v["files"].as_array().expect("files array");
+    assert_eq!(files.len(), 1, "{v}");
+    assert_npx_hooks(tmp.path());
+    for member in members {
+        let content = std::fs::read_to_string(tmp.path().join(member)).unwrap();
+        assert!(!content.contains("socket-patch"), "{member}: {content}");
+    }
+
+    let out = setup_command(tmp.path(), &["setup", "--check", "--json"])
+        .env("PATH", path.path())
+        .output()
+        .unwrap();
+    assert_eq!(out.status.code(), Some(0));
+    let check: serde_json::Value = serde_json::from_slice(&out.stdout).unwrap();
+    assert_eq!(check["status"], "configured", "{check}");
+    assert_eq!(check["configured"], 1, "root only: {check}");
+}
+
+#[test]
+fn setup_vlt_before_rc13_emits_the_definite_advisory() {
+    let tmp = vlt_project(Some(VLT_LOCK_V1));
+    let path = vlt_reporting("1.0.0-rc.12");
+    let definite = format!("{VLT_ADVISORY_PREFIX} (`vlt --version` reports 1.0.0-rc.12)");
+    for extra in [&["--dry-run"][..], &["--yes"], &["--yes"]] {
+        let (code, v) = run_setup_with_path(tmp.path(), path.path(), extra);
+        assert_eq!(code, 0, "{extra:?}: {v}");
+        assert_eq!(warnings(&v), vec![definite.clone()], "{extra:?}: {v}");
+    }
+    assert_npx_hooks(tmp.path());
+}
+
+#[test]
+fn setup_vlt_rc13_and_later_emits_no_advisory_even_with_a_v0_lock() {
+    for version in ["1.0.0-rc.13", "1.2.0"] {
+        let tmp = vlt_project(Some(VLT_LOCK_V0));
+        let path = vlt_reporting(version);
+        let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+        assert_eq!(code, 0, "{version}: {v}");
+        assert!(warnings(&v).is_empty(), "{version}: {v}");
+    }
+}
+
+#[test]
+fn setup_vlt_unparseable_version_emits_no_advisory() {
+    let tmp = vlt_project(Some(VLT_LOCK_V0));
+    let path = vlt_reporting("not-a-version");
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert!(warnings(&v).is_empty(), "{v}");
+}
+
+#[test]
+fn setup_vlt_without_a_usable_vlt_reads_the_lock() {
+    let may_v0 = format!(
+        "{VLT_ADVISORY_PREFIX} (vlt-lock.json has lockfileVersion 0, so this project may be \
+         installed by such a vlt)"
+    );
+    let may_a0 = format!(
+        "{VLT_ADVISORY_PREFIX} (vlt-lock.json has no lockfileVersion, so this project may be \
+         installed by such a vlt)"
+    );
+    let failing = vlt_path(Some((
+        "echo 1.0.0-rc.12; exit 3",
+        "echo 1.0.0-rc.12\r\nexit /b 3",
+    )));
+    let missing = vlt_path(None);
+    for (path, lock, want) in [
+        (&missing, VLT_LOCK_V0, Some(&may_v0)),
+        (&missing, "{\"nodes\":{},\"edges\":{}}\n", Some(&may_a0)),
+        (&missing, VLT_LOCK_V1, None),
+        (&failing, VLT_LOCK_V0, Some(&may_v0)),
+        (&failing, VLT_LOCK_V1, None),
+    ] {
+        let tmp = vlt_project(Some(lock));
+        let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+        assert_eq!(code, 0, "{lock}: {v}");
+        let want: Vec<String> = want.into_iter().cloned().collect();
+        assert_eq!(warnings(&v), want, "{lock}: {v}");
+    }
+}
+
+#[cfg(unix)]
+#[test]
+fn setup_vlt_version_probe_times_out_to_the_lock_sniff() {
+    let tmp = vlt_project(Some(VLT_LOCK_V0));
+    let path = vlt_path(Some(("exec /bin/sleep 60", "")));
+    let started = std::time::Instant::now();
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    let elapsed = started.elapsed();
+    assert_eq!(code, 0, "{v}");
+    assert!(
+        elapsed >= std::time::Duration::from_secs(5)
+            && elapsed < std::time::Duration::from_secs(30),
+        "the probe must wait out its 5 s budget and no longer: {elapsed:?}"
+    );
+    assert_eq!(
+        warnings(&v),
+        vec![format!(
+            "{VLT_ADVISORY_PREFIX} (vlt-lock.json has lockfileVersion 0, so this project may \
+             be installed by such a vlt)"
+        )],
+        "{v}"
+    );
+}
+
+#[test]
+fn setup_npm_project_never_probes_vlt() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    write(
+        &tmp.path().join("package.json"),
+        "{ \"name\": \"npm-proj\", \"version\": \"1.0.0\" }\n",
+    );
+    let path = vlt_reporting("1.0.0-rc.12");
+    let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
+    assert_eq!(code, 0, "{v}");
+    assert_eq!(v["packageManager"], "npm", "{v}");
+    assert!(warnings(&v).is_empty(), "{v}");
+}
diff --git a/crates/socket-patch-cli/tests/setup_matrix_common/mod.rs b/crates/socket-patch-cli/tests/setup_matrix_common/mod.rs
index 49d54a92..c04c4c98 100644
--- a/crates/socket-patch-cli/tests/setup_matrix_common/mod.rs
+++ b/crates/socket-patch-cli/tests/setup_matrix_common/mod.rs
@@ -151,7 +151,8 @@ impl Case {
     /// are the surface `setup` actually configures today — the only cases
     /// where the check/remove round-trip is expected to do real work.
     fn is_npm_family(&self) -> bool {
-        matches!(self.pm.as_str(), "npm" | "yarn" | "pnpm" | "bun") || self.layout == "monorepo"
+        matches!(self.pm.as_str(), "npm" | "yarn" | "pnpm" | "bun" | "vlt")
+            || self.layout == "monorepo"
     }
 
     fn sm_env(&self) -> Vec<(String, String)> {
diff --git a/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs b/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
index e19a8aa6..519b7d2e 100644
--- a/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
+++ b/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
@@ -327,3 +327,54 @@ fn driver_round_trip_still_gated_on_monorepo_layout() {
          the monorepo would skip the check/remove + LEAK assertions:\n{body}"
     );
 }
+
+/// vlt is an npm-family row of the matrix: it runs in the npm image, gets
+/// npm's `npx` hook, takes the round-trip path, and its scaffolds carry the
+/// vlt.json marker (with registry config) that `setup` detects vlt by.
+/// The docker legs soft-skip, so this pins the wiring they would exercise.
+#[test]
+fn vlt_targets_route_through_the_npm_round_trip() {
+    let spec: serde_json::Value =
+        serde_json::from_str(&read("tests/setup_matrix/matrix.json")).expect("parse matrix.json");
+    for section in ["targets", "workspace_targets"] {
+        let vlt: Vec<&serde_json::Value> = spec[section]
+            .as_array()
+            .unwrap_or_else(|| panic!("{section} array"))
+            .iter()
+            .filter(|t| t["pm"] == "vlt")
+            .collect();
+        assert_eq!(vlt.len(), 1, "{section}: one vlt target");
+        let t = vlt[0];
+        assert_eq!(t["ecosystem"], "npm", "{section}");
+        assert_eq!(t["image"], "npm", "{section}");
+        assert_eq!(t["hook_family"], "npm", "{section}: vlt uses the npx hook");
+        assert_eq!(t["baseline_supported"], true, "{section}");
+    }
+
+    let script = read("tests/setup_matrix/run-case.sh");
+    assert!(
+        bash_fn_body(&script, "is_npm_family").contains("vlt"),
+        "vlt must take the check/remove round trip"
+    );
+    for scaffold in ["scaffold_project", "scaffold_workspace"] {
+        let body = bash_fn_body(&script, scaffold);
+        let arm = body
+            .split("\n    vlt)")
+            .nth(1)
+            .unwrap_or_else(|| panic!("{scaffold} has no vlt arm"));
+        let arm = &arm[..arm.find(";;").expect("vlt arm ends")];
+        assert!(
+            arm.contains("vlt_json"),
+            "{scaffold}: vlt.json marker:\n{arm}"
+        );
+    }
+    assert!(
+        bash_fn_body(&script, "scaffold_workspace").contains("\"workspaces\""),
+        "the vlt workspace is declared in vlt.json"
+    );
+    let vlt_json = bash_fn_body(&script, "vlt_json");
+    assert!(
+        vlt_json.contains("\"registries\"") && vlt_json.contains("\"registry\""),
+        "vlt >= 1.0.0-rc.33 installs need a registry config:\n{vlt_json}"
+    );
+}
diff --git a/crates/socket-patch-cli/tests/setup_matrix_npm.rs b/crates/socket-patch-cli/tests/setup_matrix_npm.rs
index db55d45c..10109bb9 100644
--- a/crates/socket-patch-cli/tests/setup_matrix_npm.rs
+++ b/crates/socket-patch-cli/tests/setup_matrix_npm.rs
@@ -1,4 +1,4 @@
-//! setup-matrix: npm ecosystem (npm / yarn / pnpm / bun).
+//! setup-matrix: npm ecosystem (npm / yarn / pnpm / bun / vlt).
 //!
 //! These are the ecosystems `socket-patch setup` actually supports
 //! today (it writes a package.json postinstall hook), so the
@@ -36,11 +36,17 @@ fn bun() {
     smc::run_pm("npm", "bun");
 }
 
+#[test]
+#[serial_test::serial]
+fn vlt() {
+    smc::run_pm("npm", "vlt");
+}
+
 // ── Nested-workspace layouts ──────────────────────────────────────────
 // A root + several members (incl. a deeply-nested one and a member with
 // no dependency on the patched package). Exercises `setup`'s workspace
-// handling (npm/yarn write the hook to every member; pnpm only to the
-// root) plus the cross-workspace apply on the root install. These should
+// handling (npm/yarn write the hook to every member; pnpm and vlt only to
+// the root) plus the cross-workspace apply on the root install. These should
 // PASS — they're real regression guards, not gap documentation.
 
 #[test]
@@ -61,6 +67,12 @@ fn yarn_workspace() {
     smc::run_workspace_pm("npm", "yarn");
 }
 
+#[test]
+#[serial_test::serial]
+fn vlt_workspace() {
+    smc::run_workspace_pm("npm", "vlt");
+}
+
 // ─────────────────────────────────────────────────────────────────────────
 // Real, non-skippable regression guard for npm `setup`.
 //
diff --git a/crates/socket-patch-cli/tests/setup_terminal_output.rs b/crates/socket-patch-cli/tests/setup_terminal_output.rs
index 23744e1b..a1c31ad2 100644
--- a/crates/socket-patch-cli/tests/setup_terminal_output.rs
+++ b/crates/socket-patch-cli/tests/setup_terminal_output.rs
@@ -234,3 +234,40 @@ fn remove_dry_run_layout() {
         "{stdout:?}"
     );
 }
+
+#[test]
+fn vlt_preview_shows_the_npx_hook_and_the_advisory_on_stderr() {
+    let tmp = tempfile::tempdir().unwrap();
+    write(
+        &tmp.path().join("package.json"),
+        "{\n  \"name\": \"root\"\n}\n",
+    );
+    write(
+        &tmp.path().join("vlt-lock.json"),
+        "{\"lockfileVersion\":0,\"nodes\":{},\"edges\":{}}\n",
+    );
+    let empty_path = tempfile::tempdir().unwrap();
+    let (code, stdout, stderr) = common::run_with_env(
+        tmp.path(),
+        &["setup", "--dry-run"],
+        &[
+            ("SOCKET_TELEMETRY_DISABLED", "1"),
+            ("PATH", empty_path.path().to_str().unwrap()),
+        ],
+    );
+    assert_eq!(code, 0, "stdout=\n{stdout}\nstderr=\n{stderr}");
+    assert!(
+        stdout.contains(
+            "  + package.json\n    -> postinstall: \"npx @socketsecurity/socket-patch apply \
+             --silent --ecosystems npm\"\n"
+        ),
+        "{stdout:?}"
+    );
+    assert_eq!(
+        stderr,
+        "Warning (vlt_root_scripts_not_run): vlt before 1.0.0-rc.13 does not run the root \
+         postinstall hook; upgrade vlt or run `socket-patch apply` after `vlt ci` \
+         (vlt-lock.json has lockfileVersion 0, so this project may be installed by such a \
+         vlt)\n"
+    );
+}
diff --git a/crates/socket-patch-core/src/package_json/detect.rs b/crates/socket-patch-core/src/package_json/detect.rs
index 74f9f679..c0e4d811 100644
--- a/crates/socket-patch-core/src/package_json/detect.rs
+++ b/crates/socket-patch-core/src/package_json/detect.rs
@@ -5,12 +5,18 @@ use crate::vendor::common::JsonLayout;
 pub enum PackageManager {
     Npm,
     Pnpm,
+    Vlt,
 }
 
 /// Get the socket-patch apply command for the given package manager.
+/// vlt gets npm's `npx` hook: npx ships with every vlt install (vlt is
+/// distributed through npm), while `vlx`'s argument parsing changed at
+/// 1.0.0-rc.28 in a way that breaks either spelling on one side.
 fn socket_patch_command(pm: PackageManager) -> &'static str {
     match pm {
-        PackageManager::Npm => "npx @socketsecurity/socket-patch apply --silent --ecosystems npm",
+        PackageManager::Npm | PackageManager::Vlt => {
+            "npx @socketsecurity/socket-patch apply --silent --ecosystems npm"
+        }
         PackageManager::Pnpm => {
             "pnpm dlx @socketsecurity/socket-patch apply --silent --ecosystems npm"
         }
@@ -587,6 +593,18 @@ mod tests {
         );
     }
 
+    #[test]
+    fn test_generate_empty_vlt() {
+        assert_eq!(
+            generate_updated_script("", PackageManager::Vlt),
+            generate_updated_script("", PackageManager::Npm),
+        );
+        assert_eq!(
+            generate_updated_script("echo done", PackageManager::Vlt),
+            "npx @socketsecurity/socket-patch apply --silent --ecosystems npm && echo done"
+        );
+    }
+
     #[test]
     fn test_generate_prepend_npm() {
         assert_eq!(
@@ -1231,4 +1249,19 @@ mod tests {
             .unwrap()
             .contains("pnpm dlx"));
     }
+
+    #[test]
+    fn test_update_content_vlt_round_trips_through_remove() {
+        let content = "{\n  \"name\": \"test\"\n}\n";
+        let (modified, updated, _, new_pi, _, new_dep) =
+            update_package_json_content(content, PackageManager::Vlt).unwrap();
+        assert!(modified);
+        let npx = "npx @socketsecurity/socket-patch apply --silent --ecosystems npm";
+        assert_eq!(new_pi, npx);
+        assert_eq!(new_dep, npx);
+        assert!(!is_setup_configured_str(&updated).needs_update);
+        let (removed, restored, _) = remove_package_json_content(&updated).unwrap();
+        assert!(removed);
+        assert_eq!(restored, content);
+    }
 }
diff --git a/crates/socket-patch-core/src/package_json/find.rs b/crates/socket-patch-core/src/package_json/find.rs
index 9091cafe..46d1112e 100644
--- a/crates/socket-patch-core/src/package_json/find.rs
+++ b/crates/socket-patch-core/src/package_json/find.rs
@@ -2,14 +2,29 @@ use std::path::{Path, PathBuf};
 use tokio::fs;
 
 use super::detect::{strip_bom, PackageManager};
+use crate::constants::npm_family;
 use crate::utils::fs::{entry_file_type, is_dir, list_dir_entries, read_regular_to_string};
+use crate::vendor::vlt_lock_text::{sniff_lock, LockSniff};
 
 /// Detect the package manager based on lockfiles in the project root.
-/// The accepted pnpm marker spellings (including the `pnpm-lock.yml`
-/// variant no other subsystem accepts) live in the shared
-/// [`npm_family`](crate::constants::npm_family) table.
+/// vlt's markers ([`VLT_SETUP_MARKERS`](npm_family::VLT_SETUP_MARKERS)) win
+/// over pnpm's, and only the start directory is consulted: an ancestor
+/// `vlt.json` does not make a nested package a vlt project. The accepted
+/// pnpm marker spellings (including the `pnpm-lock.yml` variant no other
+/// subsystem accepts) live in the shared [`npm_family`] table.
 pub async fn detect_package_manager(start_path: &Path) -> PackageManager {
-    for name in crate::constants::npm_family::names_with(|r| r.detects_pnpm) {
+    for name in npm_family::VLT_SETUP_MARKERS {
+        let path = start_path.join(name);
+        let present = if name == npm_family::VLT_STORE_DIR {
+            is_dir(&path).await
+        } else {
+            fs::metadata(&path).await.is_ok()
+        };
+        if present {
+            return PackageManager::Vlt;
+        }
+    }
+    for name in npm_family::names_with(|r| r.detects_pnpm) {
         if fs::metadata(start_path.join(name)).await.is_ok() {
             return PackageManager::Pnpm;
         }
@@ -17,11 +32,40 @@ pub async fn detect_package_manager(start_path: &Path) -> PackageManager {
     PackageManager::Npm
 }
 
+/// A `vlt-lock.json` written by a vlt that may predate 1.0.0-rc.13, the
+/// first release that runs a root `postinstall` without an `install`
+/// script.
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum LegacyVltLock {
+    /// No `lockfileVersion` key (vlt <= 0.0.0-18).
+    NoVersion,
+    /// `lockfileVersion: 0` (vlt < 1.0.0-rc.15; rc.13 and rc.14 included).
+    VersionZero,
+}
+
+/// The start directory's `vlt-lock.json`, when its `lockfileVersion` is
+/// absent or `0`. Any other lock, an unreadable one or none yields `None`.
+pub async fn legacy_vlt_lock(start_path: &Path) -> Option<LegacyVltLock> {
+    let text = read_regular_to_string(&start_path.join(npm_family::VLT_LOCK))
+        .await
+        .ok()?;
+    match sniff_lock(&text) {
+        LockSniff::Readable(lock) => match lock.version {
+            None => Some(LegacyVltLock::NoVersion),
+            Some(0) => Some(LegacyVltLock::VersionZero),
+            Some(_) => None,
+        },
+        _ => None,
+    }
+}
+
 /// Workspace configuration type.
 #[derive(Debug, Clone)]
 pub enum WorkspaceType {
     Npm,
     Pnpm,
+    /// vlt.json `workspaces` (or vlt <= 0.0.0-12's `vlt-workspaces.json`).
+    Vlt,
     None,
 }
 
@@ -121,6 +165,12 @@ async fn detect_workspaces(package_json_path: &Path) -> WorkspaceConfig {
     // JSONC, or simply broken) root manifest would wrongly demote a real pnpm
     // workspace to "no workspace".
     let dir = package_json_path.parent().unwrap_or(Path::new("."));
+    if let Some(patterns) = vlt_workspace_patterns(dir).await {
+        return WorkspaceConfig {
+            ws_type: WorkspaceType::Vlt,
+            patterns,
+        };
+    }
     let pnpm_workspace = dir.join("pnpm-workspace.yaml");
     // Every manifest/config read here lives inside the (untrusted) project
     // tree — and the workspace walk reads the package.json of *every*
@@ -173,6 +223,55 @@ async fn detect_workspaces(package_json_path: &Path) -> WorkspaceConfig {
     default
 }
 
+/// vlt's workspace globs for `dir`: vlt.json `workspaces` (vlt >= 0.0.0-13)
+/// or, without one, the legacy `vlt-workspaces.json` (vlt <= 0.0.0-12; the
+/// two eras never read each other's file). vlt never reads package.json
+/// `workspaces`. `None` when neither file declares workspaces.
+async fn vlt_workspace_patterns(dir: &Path) -> Option<Vec<String>> {
+    if let Some(workspaces) = read_json_config(&dir.join(npm_family::VLT_CONFIG))
+        .await
+        .and_then(|mut config| config.get_mut("workspaces").map(serde_json::Value::take))
+        .filter(|workspaces| !workspaces.is_null())
+    {
+        return Some(parse_vlt_workspaces(&workspaces));
+    }
+    read_json_config(&dir.join(npm_family::VLT_LEGACY_WORKSPACES))
+        .await
+        .filter(|legacy| !legacy.is_null())
+        .map(|legacy| parse_vlt_workspaces(&legacy))
+}
+
+/// A JSON config file inside the project (FIFO-safe read, BOM stripped), or
+/// `None` when it is missing, unreadable or not JSON.
+async fn read_json_config(path: &Path) -> Option<serde_json::Value> {
+    let text = read_regular_to_string(path).await.ok()?;
+    serde_json::from_str(strip_bom(&text)).ok()
+}
+
+/// vlt's workspace declaration: a glob, a list of globs, or an object of
+/// named groups whose values are either. Non-string entries are ignored.
+fn parse_vlt_workspaces(value: &serde_json::Value) -> Vec<String> {
+    fn globs(value: &serde_json::Value, out: &mut Vec<String>) {
+        match value {
+            serde_json::Value::String(glob) => out.push(glob.clone()),
+            serde_json::Value::Array(items) => {
+                out.extend(items.iter().filter_map(|v| v.as_str().map(String::from)))
+            }
+            _ => {}
+        }
+    }
+    let mut patterns = Vec::new();
+    match value {
+        serde_json::Value::Object(groups) => {
+            for group in groups.values() {
+                globs(group, &mut patterns);
+            }
+        }
+        other => globs(other, &mut patterns),
+    }
+    patterns
+}
+
 /// Simple parser for pnpm-workspace.yaml packages field.
 fn parse_pnpm_workspace_patterns(yaml_content: &str) -> Vec<String> {
     let mut patterns = Vec::new();
@@ -1716,4 +1815,282 @@ mod tests {
         let pm = detect_package_manager(dir.path()).await;
         assert_eq!(pm, PackageManager::Pnpm);
     }
+
+    // ── vlt ─────────────────────────────────────────────────────────
+
+    #[tokio::test]
+    async fn test_detect_vlt_from_each_setup_marker() {
+        for marker in npm_family::VLT_SETUP_MARKERS {
+            let dir = tempfile::tempdir().unwrap();
+            let path = dir.path().join(marker);
+            if marker == npm_family::VLT_STORE_DIR {
+                fs::create_dir_all(&path).await.unwrap();
+            } else {
+                fs::create_dir_all(path.parent().unwrap()).await.unwrap();
+                fs::write(&path, "{}").await.unwrap();
+            }
+            assert_eq!(
+                detect_package_manager(dir.path()).await,
+                PackageManager::Vlt,
+                "{marker}"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn test_detect_vlt_store_marker_must_be_a_directory() {
+        let dir = tempfile::tempdir().unwrap();
+        fs::create_dir_all(dir.path().join("node_modules"))
+            .await
+            .unwrap();
+        fs::write(dir.path().join(npm_family::VLT_STORE_DIR), "")
+            .await
+            .unwrap();
+        assert_eq!(
+            detect_package_manager(dir.path()).await,
+            PackageManager::Npm
+        );
+    }
+
+    #[tokio::test]
+    async fn test_detect_vlt_wins_over_pnpm_markers() {
+        let dir = tempfile::tempdir().unwrap();
+        fs::write(dir.path().join("pnpm-lock.yaml"), "lockfileVersion: 9.0\n")
+            .await
+            .unwrap();
+        fs::write(dir.path().join("pnpm-workspace.yaml"), "packages:\n")
+            .await
+            .unwrap();
+        fs::write(dir.path().join("vlt-lock.json"), "{}")
+            .await
+            .unwrap();
+        assert_eq!(
+            detect_package_manager(dir.path()).await,
+            PackageManager::Vlt
+        );
+    }
+
+    #[tokio::test]
+    async fn test_detect_vlt_ignores_an_ancestor_vlt_json() {
+        let dir = tempfile::tempdir().unwrap();
+        fs::write(dir.path().join("vlt.json"), "{}").await.unwrap();
+        let nested = dir.path().join("packages").join("a");
+        fs::create_dir_all(&nested).await.unwrap();
+        assert_eq!(detect_package_manager(&nested).await, PackageManager::Npm);
+    }
+
+    async fn vlt_workspace_root(vlt_json: &str) -> tempfile::TempDir {
+        let dir = tempfile::tempdir().unwrap();
+        fs::write(dir.path().join("package.json"), r#"{"name":"root"}"#)
+            .await
+            .unwrap();
+        fs::write(dir.path().join("vlt.json"), vlt_json)
+            .await
+            .unwrap();
+        dir
+    }
+
+    #[tokio::test]
+    async fn test_detect_workspaces_vlt_shapes() {
+        for (vlt_json, want) in [
+            (r#"{"workspaces":"packages/*"}"#, vec!["packages/*"]),
+            (
+                r#"{"workspaces":["packages/*","apps/*",7]}"#,
+                vec!["packages/*", "apps/*"],
+            ),
+            (
+                r#"{"workspaces":{"libs":"libs/*","apps":["apps/*","tools/x"],"bad":1}}"#,
+                vec!["libs/*", "apps/*", "tools/x"],
+            ),
+            (
+                "\u{feff}{\"workspaces\":[\"packages/*\"]}",
+                vec!["packages/*"],
+            ),
+            (r#"{"workspaces":[]}"#, vec![]),
+        ] {
+            let dir = vlt_workspace_root(vlt_json).await;
+            let config = detect_workspaces(&dir.path().join("package.json")).await;
+            assert!(
+                matches!(config.ws_type, WorkspaceType::Vlt),
+                "{vlt_json}: {config:?}"
+            );
+            assert_eq!(config.patterns, want, "{vlt_json}");
+        }
+    }
+
+    #[tokio::test]
+    async fn test_detect_workspaces_vlt_json_without_workspaces_falls_through() {
+        for vlt_json in [
+            r#"{"config":{"registry":"https://registry.npmjs.org/"}}"#,
+            r#"{"workspaces":null}"#,
+            "not json",
+        ] {
+            let dir = tempfile::tempdir().unwrap();
+            fs::write(
+                dir.path().join("package.json"),
+                r#"{"workspaces":["packages/*"]}"#,
+            )
+            .await
+            .unwrap();
+            fs::write(dir.path().join("vlt.json"), vlt_json)
+                .await
+                .unwrap();
+            let config = detect_workspaces(&dir.path().join("package.json")).await;
+            assert!(
+                matches!(config.ws_type, WorkspaceType::Npm),
+                "{vlt_json}: {config:?}"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn test_detect_workspaces_vlt_wins_over_pnpm_and_bad_package_json() {
+        let dir = tempfile::tempdir().unwrap();
+        fs::write(dir.path().join("package.json"), "{ // jsonc\n}")
+            .await
+            .unwrap();
+        fs::write(
+            dir.path().join("pnpm-workspace.yaml"),
+            "packages:\n  - pnpm/*",
+        )
+        .await
+        .unwrap();
+        fs::write(dir.path().join("vlt.json"), r#"{"workspaces":"vlt/*"}"#)
+            .await
+            .unwrap();
+        let config = detect_workspaces(&dir.path().join("package.json")).await;
+        assert!(matches!(config.ws_type, WorkspaceType::Vlt), "{config:?}");
+        assert_eq!(config.patterns, vec!["vlt/*"]);
+    }
+
+    #[tokio::test]
+    async fn test_detect_workspaces_legacy_vlt_workspaces_json() {
+        for (legacy, want) in [
+            (r#"{"packages":"packages/*"}"#, vec!["packages/*"]),
+            (
+                r#"{"packages":["packages/*","apps/*"]}"#,
+                vec!["packages/*", "apps/*"],
+            ),
+        ] {
+            let dir = tempfile::tempdir().unwrap();
+            fs::write(dir.path().join("package.json"), r#"{"name":"root"}"#)
+                .await
+                .unwrap();
+            fs::write(dir.path().join("vlt-workspaces.json"), legacy)
+                .await
+                .unwrap();
+            let config = detect_workspaces(&dir.path().join("package.json")).await;
+            assert!(matches!(config.ws_type, WorkspaceType::Vlt), "{legacy}");
+            assert_eq!(config.patterns, want, "{legacy}");
+        }
+
+        let dir = vlt_workspace_root(r#"{"workspaces":"current/*"}"#).await;
+        fs::write(
+            dir.path().join("vlt-workspaces.json"),
+            r#"{"packages":"legacy/*"}"#,
+        )
+        .await
+        .unwrap();
+        let config = detect_workspaces(&dir.path().join("package.json")).await;
+        assert_eq!(config.patterns, vec!["current/*"]);
+    }
+
+    #[tokio::test]
+    async fn test_find_vlt_workspaces_discovers_members_with_the_shared_matcher() {
+        let dir =
+            vlt_workspace_root(r#"{"workspaces":{"a":"packages/*","b":["!packages/skip"]}}"#).await;
+        for member in ["packages/a", "packages/b", "packages/skip"] {
+            let path = dir.path().join(member);
+            fs::create_dir_all(&path).await.unwrap();
+            fs::write(path.join("package.json"), "{}").await.unwrap();
+        }
+        let result = find_package_json_files(dir.path()).await;
+        assert!(matches!(result.workspace_type, WorkspaceType::Vlt));
+        let mut members: Vec<String> = result
+            .files
+            .iter()
+            .filter(|f| f.is_workspace)
+            .map(|f| {
+                f.path
+                    .parent()
+                    .unwrap()
+                    .strip_prefix(dir.path())
+                    .unwrap()
+                    .to_string_lossy()
+                    .replace('\\', "/")
+            })
+            .collect();
+        members.sort();
+        assert_eq!(members, vec!["packages/a", "packages/b"]);
+        assert!(result.files[0].is_root);
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn vlt_json_fifo_does_not_wedge_discovery() {
+        for name in ["vlt.json", "vlt-workspaces.json"] {
+            let dir = tempfile::tempdir().unwrap();
+            fs::write(
+                dir.path().join("package.json"),
+                r#"{"workspaces": ["packages/*"]}"#,
+            )
+            .await
+            .unwrap();
+            let fifo = dir.path().join(name);
+            mkfifo(&fifo);
+            let deadline = std::time::Duration::from_secs(5);
+            let Ok(result) =
+                tokio::time::timeout(deadline, find_package_json_files(dir.path())).await
+            else {
+                let _ = std::fs::OpenOptions::new().write(true).open(&fifo);
+                panic!("discovery must complete promptly with a FIFO {name}");
+            };
+            assert!(
+                matches!(result.workspace_type, WorkspaceType::Npm),
+                "{name}"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn test_legacy_vlt_lock_reads_only_version_zero_or_absent() {
+        for (lock, want) in [
+            (None, None),
+            (
+                Some(r#"{"nodes":{},"edges":{}}"#),
+                Some(LegacyVltLock::NoVersion),
+            ),
+            (
+                Some(r#"{"lockfileVersion":0,"nodes":{}}"#),
+                Some(LegacyVltLock::VersionZero),
+            ),
+            (Some(r#"{"lockfileVersion":1,"nodes":{}}"#), None),
+            (Some(r#"{"lockfileVersion":"0"}"#), None),
+            (Some("\u{feff}{\"lockfileVersion\":0}"), None),
+            (Some("[]"), None),
+            (Some("not json"), None),
+        ] {
+            let dir = tempfile::tempdir().unwrap();
+            if let Some(lock) = lock {
+                fs::write(dir.path().join("vlt-lock.json"), lock)
+                    .await
+                    .unwrap();
+            }
+            assert_eq!(legacy_vlt_lock(dir.path()).await, want, "{lock:?}");
+        }
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn test_legacy_vlt_lock_fifo_does_not_wedge() {
+        let dir = tempfile::tempdir().unwrap();
+        let fifo = dir.path().join("vlt-lock.json");
+        mkfifo(&fifo);
+        let deadline = std::time::Duration::from_secs(5);
+        let Ok(result) = tokio::time::timeout(deadline, legacy_vlt_lock(dir.path())).await else {
+            let _ = std::fs::OpenOptions::new().write(true).open(&fifo);
+            panic!("the lock sniff must not wedge on a FIFO vlt-lock.json");
+        };
+        assert_eq!(result, None);
+    }
 }
diff --git a/crates/socket-patch-core/src/package_json/update.rs b/crates/socket-patch-core/src/package_json/update.rs
index 140f251c..2c184d04 100644
--- a/crates/socket-patch-core/src/package_json/update.rs
+++ b/crates/socket-patch-core/src/package_json/update.rs
@@ -278,6 +278,22 @@ mod tests {
         assert!(content.contains("pnpm dlx @socketsecurity/socket-patch apply"));
     }
 
+    #[tokio::test]
+    async fn test_update_vlt() {
+        let dir = tempfile::tempdir().unwrap();
+        let pkg = dir.path().join("package.json");
+        fs::write(&pkg, r#"{"name":"x"}"#).await.unwrap();
+        let result = update_package_json(&pkg, false, PackageManager::Vlt).await;
+        assert_eq!(result.status, UpdateStatus::Updated);
+        let npx = "npx @socketsecurity/socket-patch apply --silent --ecosystems npm";
+        assert_eq!(result.new_script, npx);
+        assert_eq!(result.new_dependencies_script, npx);
+        let content: serde_json::Value =
+            serde_json::from_str(&fs::read_to_string(&pkg).await.unwrap()).unwrap();
+        assert_eq!(content["scripts"]["postinstall"], npx);
+        assert_eq!(content["scripts"]["dependencies"], npx);
+    }
+
     #[tokio::test]
     async fn test_update_adds_dependencies_when_postinstall_exists() {
         let dir = tempfile::tempdir().unwrap();
diff --git a/crates/socket-patch-core/src/telemetry.rs b/crates/socket-patch-core/src/telemetry.rs
index f704f2fd..8768c0c5 100644
--- a/crates/socket-patch-core/src/telemetry.rs
+++ b/crates/socket-patch-core/src/telemetry.rs
@@ -663,7 +663,9 @@ pub async fn track_patch_repair_failed(
 }
 
 /// Track a successful `setup`. Reports the detected package manager so
-/// we can tell which install hooks are exercised in the wild.
+/// we can tell which install hooks are exercised in the wild: the
+/// `+`-joined in-scope tags, where the npm-family tag is `npm`, `pnpm` or
+/// `vlt` (e.g. `vlt+pypi`), or `none`.
 pub async fn track_patch_setup(manager: &str, api_token: Option<&str>, org_slug: Option<&str>) {
     fire(
         PatchTelemetryEventType::PatchSetup,
diff --git a/tests/docker/Dockerfile.npm b/tests/docker/Dockerfile.npm
index c65623c0..2eba0343 100644
--- a/tests/docker/Dockerfile.npm
+++ b/tests/docker/Dockerfile.npm
@@ -1,8 +1,9 @@
-# npm ecosystem test image: base + Node.js + npm + bun.
+# npm ecosystem test image: base + Node.js + npm + bun + vlt.
 #
-# Pinned to Node 20 LTS via the NodeSource apt repo. The setup_20.x script
-# installs the latest 20.x at image-build time; for reproducibility CI
-# rebuilds the image whenever this Dockerfile or the base changes.
+# Pinned to Node 22 LTS via the NodeSource apt repo. The setup_22.x script
+# installs the latest 22.x at image-build time (vlt 1.2.0 needs >= 22.22);
+# for reproducibility CI rebuilds the image whenever this Dockerfile or the
+# base changes.
 #
 # bun is installed via the official install script (the Debian apt repo
 # isn't published reliably). The script downloads a self-contained
@@ -10,8 +11,8 @@
 # test scripts can call `bun` without PATH gymnastics.
 FROM socket-patch-test-base:latest
 
-# Install Node.js 20 LTS from NodeSource.
-RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
+# Install Node.js 22 LTS from NodeSource.
+RUN curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
  && apt-get install -y --no-install-recommends nodejs unzip \
  && rm -rf /var/lib/apt/lists/*
 
@@ -29,10 +30,10 @@ RUN for i in 1 2 3; do \
     done \
  && ln -s /root/.bun/bin/bun /usr/local/bin/bun
 
-# Enable pnpm and yarn via corepack (bundled with Node 20). The
-# setup-matrix suite (tests/setup_matrix/) drives all four npm-family
-# package managers — npm, yarn, pnpm, bun — through the `socket-patch
-# setup` install-hook flow. `corepack prepare … --activate` pins and
+# Enable pnpm and yarn via corepack (bundled with Node 22). The
+# setup-matrix suite (tests/setup_matrix/) drives the npm-family
+# package managers — npm, yarn, pnpm, bun and (installed below) vlt —
+# through the `socket-patch setup` install-hook flow. `corepack prepare … --activate` pins and
 # activates a known version so the binaries resolve without a network
 # round-trip at test time. Additive: the existing docker_e2e_npm tests
 # are unaffected.
@@ -43,11 +44,23 @@ RUN corepack enable \
 # Corepack defaults to fetching the LATEST package manager at run time for
 # projects with no `packageManager` field (COREPACK_DEFAULT_TO_LATEST=1),
 # silently overriding the activations above — which is how test runs
-# started downloading pnpm 11.x (requires Node >= 22) onto this Node 20
-# image and crashing with ERR_UNKNOWN_BUILTIN_MODULE(node:sqlite). Pin
-# runtime resolution to the activated versions.
+# started downloading pnpm 11.x onto the (then Node 20) image and crashing
+# with ERR_UNKNOWN_BUILTIN_MODULE(node:sqlite). Pin runtime resolution to
+# the activated versions.
 ENV COREPACK_DEFAULT_TO_LATEST=0
 
+# vlt, for the setup-matrix `pm: vlt` cases (non-gating extras: the
+# gating vlt setup assertions live in the real-vlt capstones). Retried like
+# bun: one registry blip must not fail the image build. Its telemetry is
+# off for every test run.
+RUN for i in 1 2 3; do \
+      npm install -g --no-audit --no-fund vlt@1.2.0 && break; \
+      [ "$i" = 3 ] && exit 1; \
+      echo "vlt install attempt $i failed; retrying in $((i * 10))s"; \
+      sleep $((i * 10)); \
+    done
+ENV VLT_TELEMETRY=0
+
 # Cache yarn berry 4.x in corepack WITHOUT activating it: the global `yarn`
 # stays 1.22.22 (classic), and berry fixtures opt in per-project via
 # package.json `"packageManager": "yarn@4.12.0"`, which the corepack shim
@@ -61,6 +74,8 @@ RUN corepack prepare yarn@4.12.0
 # dispatches yarn 4 there while the global yarn stays classic.
 RUN node --version && npm --version && bun --version \
  && pnpm --version && yarn --version && socket-patch --version \
+ && node -e 'const [a, b] = process.versions.node.split(".").map(Number); process.exit(a > 22 || (a === 22 && b >= 22) ? 0 : 1)' \
+ && test "$(vlt --version)" = "1.2.0" \
  && ( cd /tmp && mkdir berrycheck && cd berrycheck \
       && echo '{"packageManager":"yarn@4.12.0"}' > package.json \
       && test "$(yarn --version)" = "4.12.0" \
diff --git a/tests/docker/README.md b/tests/docker/README.md
index feba2478..dd056df4 100644
--- a/tests/docker/README.md
+++ b/tests/docker/README.md
@@ -179,8 +179,12 @@ reuses these same per-ecosystem images. Where `docker_e2e_*` drives
 setup` and then a *native install* to check whether the configured
 install hook applies the patch on its own — the thing `setup` is meant
 to enable. It also adds the npm-family package managers (pnpm/yarn via
-corepack) and the Python ones (uv/poetry/pdm/hatch), which is why
-`Dockerfile.npm` and `Dockerfile.pypi` install those tools. See
+corepack, and vlt 1.2.0 via `npm install -g`) and the Python ones
+(uv/poetry/pdm/hatch), which is why `Dockerfile.npm` and `Dockerfile.pypi`
+install those tools. `Dockerfile.npm` is on Node 22 (>= 22.22, vlt 1.2.0's
+engine floor) and sets `VLT_TELEMETRY=0`. The vlt cases are non-gating
+extras: the gating vlt `setup` assertions run against real vlt releases in
+`crates/socket-patch-cli/tests/e2e_vlt.rs`. See
 `tests/setup_matrix/README.md` for details and the
 `scripts/setup-matrix.sh` runner. That suite's CI job (`setup-matrix`)
 is **non-blocking** (`continue-on-error: true`) and is expected to fail
diff --git a/tests/setup_matrix/README.md b/tests/setup_matrix/README.md
index 1a66ce05..bd46496f 100644
--- a/tests/setup_matrix/README.md
+++ b/tests/setup_matrix/README.md
@@ -33,7 +33,7 @@ install. No Socket API is contacted.
 source of truth, consumed by both the runner script and the Rust
 wrappers).
 
-- **Package managers:** npm, yarn, pnpm, bun · pip, uv, poetry, pdm,
+- **Package managers:** npm, yarn, pnpm, bun, vlt · pip, uv, poetry, pdm,
   hatch · cargo · bundler · go · mvn · composer · dotnet · deno.
 - **Scenarios (single-project):**
   - `baseline_with_setup` — setup + install ⇒ patch applied *(ideal)*.
@@ -54,14 +54,15 @@ wrappers).
 The driver's `SM_LAYOUT` selects the project shape (each layout has its
 own `*_targets` / `*_scenarios` sections in `matrix.json`):
 
-- **`single`** *(default)* — one project, one dependency. The 16-PM grid above.
+- **`single`** *(default)* — one project, one dependency. The 17-PM grid above.
 - **`workspace`** — a **nested workspace/monorepo**: a root + several
   members (incl. a deeply-nested one and a member that does *not* use the
   patched package). Models real-world monorepo deployments and exercises
   `setup`'s workspace handling — npm/yarn write the hook to **every**
-  member, pnpm only to the **root** — plus the cross-workspace apply on a
-  single root install. Covered PMs: **npm, pnpm, yarn** (apply; the
-  dependency hoists / lands in the pnpm store and is patched once) and
+  member, pnpm and vlt only to the **root** — plus the cross-workspace apply
+  on a single root install. Covered PMs: **npm, pnpm, yarn, vlt** (apply;
+  the dependency hoists / lands in the pnpm or vlt store and is patched
+  once) and
   **pip** (nested `requirements.txt` files) + **uv** (uv workspace, one
   shared `.venv`) as Python gaps. Scenarios: `workspace_with_setup`,
   `workspace_no_setup`, `workspace_patch_missing`.
@@ -82,6 +83,30 @@ own `*_targets` / `*_scenarios` sections in `matrix.json`):
 > mid-install with "no packages found on disk". The driver therefore does
 > **not** pin `SOCKET_CWD`.
 
+## vlt cases
+
+The `pm: vlt` rows (single and workspace) are **non-gating extras**: every
+vlt `setup` assertion that gates a release lives in the real-vlt capstone
+`crates/socket-patch-cli/tests/e2e_vlt.rs` (suite `setup`). They run vlt
+1.2.0 from the npm image (`npm install -g vlt@1.2.0`, Node >= 22.22) and
+follow the npm-family round trip:
+
+- the scaffold declares the dependency up front and writes a `vlt.json`,
+  which is both the marker `setup` detects vlt by and the registry config
+  (`config.registry` + `config.registries.npm`) vlt >= 1.0.0-rc.33 needs to
+  install at all; the workspace scaffold declares its members in vlt.json
+  `workspaces`, the only place vlt reads them;
+- `setup` writes npm's `npx` hook (vlt ships through npm, so `npx` is
+  always there; `vlx` is never used), root package only for a workspace;
+- the native install is `vlt install`, whose root `postinstall` fires on
+  every install that changes the graph (vlt >= 1.0.0-rc.13), with
+  `VLT_TELEMETRY=0`.
+
+A failing hook aborts and rolls back the whole `vlt install`, exactly as it
+fails `npm install`, so `wrong_target_patchset` (a manifest whose only
+patch targets an absent package makes `apply` exit 1) reports a failed
+install for vlt as it does for npm.
+
 ## Result classification
 
 Each case's `actual` is compared against both the aspirational `expect`
diff --git a/tests/setup_matrix/matrix.json b/tests/setup_matrix/matrix.json
index 91fad581..2e19fbdf 100644
--- a/tests/setup_matrix/matrix.json
+++ b/tests/setup_matrix/matrix.json
@@ -115,6 +115,12 @@
       "package": "minimist", "version": "1.2.2", "purl": "pkg:npm/minimist@1.2.2",
       "manifest_key": "package/index.js", "apply_ecosystems": "npm"
     },
+    {
+      "ecosystem": "npm", "pm": "vlt", "image": "npm", "hook_family": "npm",
+      "baseline_supported": true,
+      "package": "minimist", "version": "1.2.2", "purl": "pkg:npm/minimist@1.2.2",
+      "manifest_key": "package/index.js", "apply_ecosystems": "npm"
+    },
 
     {
       "ecosystem": "pypi", "pm": "pip", "image": "pypi", "hook_family": "pth",
@@ -204,8 +210,8 @@
     "several workspace members (incl. a deeply-nested one and a member that",
     "does NOT use the patched package). Models real monorepos and exercises",
     "`setup`'s workspace handling — npm/yarn write the hook to every member,",
-    "pnpm only to the root — plus the cross-workspace apply on the root",
-    "install. npm/yarn/pnpm should apply (baseline_supported true); Python",
+    "pnpm and vlt only to the root — plus the cross-workspace apply on the root",
+    "install. npm/yarn/pnpm/vlt should apply (baseline_supported true); Python",
     "workspaces (uv workspace, pip nested-requirements) are gaps."
   ],
   "workspace_scenarios": [
@@ -250,6 +256,12 @@
       "package": "minimist", "version": "1.2.2", "purl": "pkg:npm/minimist@1.2.2",
       "manifest_key": "package/index.js", "apply_ecosystems": "npm"
     },
+    {
+      "ecosystem": "npm", "pm": "vlt", "image": "npm", "hook_family": "npm",
+      "baseline_supported": true,
+      "package": "minimist", "version": "1.2.2", "purl": "pkg:npm/minimist@1.2.2",
+      "manifest_key": "package/index.js", "apply_ecosystems": "npm"
+    },
     {
       "ecosystem": "pypi", "pm": "pip", "image": "pypi", "hook_family": "none",
       "baseline_supported": false,
diff --git a/tests/setup_matrix/run-case.sh b/tests/setup_matrix/run-case.sh
index aef21433..85c9105c 100755
--- a/tests/setup_matrix/run-case.sh
+++ b/tests/setup_matrix/run-case.sh
@@ -22,7 +22,7 @@
 # Inputs (environment, all SM_*-prefixed):
 #   SM_ID                stable case id (for the JSON result)
 #   SM_ECOSYSTEM         npm|pypi|cargo|gem|golang|maven|composer|nuget|deno
-#   SM_PM                npm|yarn|pnpm|bun|pip|uv|poetry|pdm|hatch|cargo|
+#   SM_PM                npm|yarn|pnpm|bun|vlt|pip|uv|poetry|pdm|hatch|cargo|
 #                        bundler|go|mvn|composer|dotnet|deno
 #   SM_SCENARIO          scenario id (echoed back)
 #   SM_PATCHSET          primary|alt|empty|wrong
@@ -249,6 +249,15 @@ scaffold_project() {
 { "name": "sm-proj", "version": "0.0.0", "private": true, "dependencies": { "$SM_PACKAGE": "$SM_VERSION" } }
 EOF
       printf "lockfileVersion: '9.0'\n" > pnpm-lock.yaml ;;
+    vlt)
+      # vlt runs the root postinstall on every install that changes the
+      # graph (vlt >= 1.0.0-rc.13), so the dependency is declared up front
+      # like pnpm's. vlt.json is the vlt marker `setup` detects, and it
+      # carries the registry config vlt >= 1.0.0-rc.33 needs to install.
+      cat > package.json <<EOF
+{ "name": "sm-proj", "version": "0.0.0", "private": true, "dependencies": { "$SM_PACKAGE": "$SM_VERSION" } }
+EOF
+      vlt_json > vlt.json ;;
     deno)
       cat > package.json <<EOF
 { "name": "sm-proj", "version": "0.0.0", "private": true, "dependencies": { "$SM_PACKAGE": "$SM_VERSION" } }
@@ -389,6 +398,12 @@ pth_trigger() { # $1=venv dir
   PATH="$PWD/$venv/bin:$PATH" "$venv/bin/python" -c "pass" >/dev/null 2>&1 || true
 }
 
+# vlt.json with the public registry configured every way vlt eras read it;
+# $1 = an optional `"workspaces": ...,` member to prepend.
+vlt_json() {
+  printf '{ %s"config": { "registry": "https://registry.npmjs.org/", "registries": { "npm": "https://registry.npmjs.org/" } } }\n' "${1:-}"
+}
+
 # --- per-PM native install (the hook, if configured, fires here) ------
 run_install() {
   case "$SM_PM" in
@@ -396,6 +411,7 @@ run_install() {
     yarn)  yarn add --silent "$SM_PACKAGE@$SM_VERSION" ;;
     pnpm)  pnpm install --no-frozen-lockfile ;;
     bun)   bun add "$SM_PACKAGE@$SM_VERSION" ;;
+    vlt)   vlt install ;;
     deno)  deno install --allow-scripts ;;
     pip)
       python3 -m venv venv
@@ -490,6 +506,15 @@ EOF
       ws_member_js packages/group/nested "@sm/nested"
       mkdir -p packages/util
       printf '{ "name": "@sm/util", "version": "0.0.0", "private": true }\n' > packages/util/package.json ;;
+    vlt)
+      # vlt reads workspaces only from vlt.json; `setup` wires the root alone.
+      printf '{ "name": "sm-root", "version": "0.0.0", "private": true }\n' > package.json
+      vlt_json '"workspaces": ["packages/*", "packages/group/*"], ' > vlt.json
+      ws_member_js packages/app "@sm/app"
+      ws_member_js packages/lib "@sm/lib"
+      ws_member_js packages/group/nested "@sm/nested"
+      mkdir -p packages/util
+      printf '{ "name": "@sm/util", "version": "0.0.0", "private": true }\n' > packages/util/package.json ;;
     uv)
       # uv workspace: virtual root + members; the shared dep is installed
       # into one root .venv by `uv sync`.
@@ -533,6 +558,7 @@ run_install_workspace() {
     npm)  npm install --silent --no-audit --no-fund ;;
     yarn) yarn install --silent ;;
     pnpm) pnpm install --no-frozen-lockfile ;;
+    vlt)  vlt install ;;
     uv)   uv sync ;;
     pip)  python3 -m venv venv && ./venv/bin/pip install --disable-pip-version-check --quiet --no-cache-dir -r requirements.txt ;;
   esac
@@ -668,7 +694,7 @@ verify_applied() {
 # npm-family is the surface `setup` actually configures today — the only place
 # the behavioral check/remove round-trip is expected to do real work.
 is_npm_family() {
-  [[ "$SM_PM" =~ ^(npm|yarn|pnpm|bun)$ ]] || [ "$SM_LAYOUT" = monorepo ]
+  [[ "$SM_PM" =~ ^(npm|yarn|pnpm|bun|vlt)$ ]] || [ "$SM_LAYOUT" = monorepo ]
 }
 
 # ============================ main ====================================
@@ -691,7 +717,7 @@ build_fixture
 # npm-family (incl. deno-via-npm and the monorepo's npm slice) need the
 # runner shim so the hook's `npx`/`pnpm dlx @socketsecurity/socket-patch`
 # resolves to $SP_BIN instead of the npm registry.
-if [[ "$SM_PM" =~ ^(npm|yarn|pnpm|bun|deno)$ ]] || [ "$SM_LAYOUT" = monorepo ]; then
+if [[ "$SM_PM" =~ ^(npm|yarn|pnpm|bun|vlt|deno)$ ]] || [ "$SM_LAYOUT" = monorepo ]; then
   SHIM_DIR="$PROJ/.sp-shims"
   write_shims "$SHIM_DIR"
   export SETUP_MATRIX_SHIM_DIR="$SHIM_DIR"
@@ -704,7 +730,7 @@ fi
 # `--force` flag (unlike its siblings) has no boolish value parser, so
 # SOCKET_FORCE=1 is rejected with "invalid value '1' for '--force'".
 export SOCKET_OFFLINE=true SOCKET_FORCE=true SOCKET_API_TOKEN=fake SOCKET_ORG_SLUG=test-org
-export SOCKET_TELEMETRY_DISABLED=1
+export SOCKET_TELEMETRY_DISABLED=1 VLT_TELEMETRY=0
 # Isolate the pypi `.pth` hook's change-detection stamp per case so runs
 # don't bleed into each other (the stamp lives under XDG_CACHE_HOME).
 export XDG_CACHE_HOME="$WORKDIR/.cache"

From 957fac098e8f9e5e2829e402e44ab3f973c86e62 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 04:39:48 -0400
Subject: [PATCH 22/46] Fix vlt setup review findings

`setup` now also warns `vlt_root_scripts_not_run` as a "may" when the
vlt on PATH is recent but the committed vlt-lock.json is one it would
never write: a lock without lockfileVersion, or a v0 lock beside vlt
1.0.0-rc.15 or later (which refuses v0, so an older vlt elsewhere
installs the project). vlt rc.13 and rc.14 write v0 locks themselves
and stay silent.

`setup --remove` now also clears the hooks that earlier socket-patch
releases wrote into vlt workspace members, so a removal that reports
success no longer leaves member hooks running (and keeping npm counted
as set up for VEX). Excluded and clean members are still left alone.

The static check that the setup matrix routes vlt through the npm
round trip now runs in the default test suite instead of only with the
setup-e2e feature.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   7 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   4 +-
 crates/socket-patch-cli/src/commands/setup.rs | 150 +++++++++++++-----
 .../tests/setup_invariants.rs                 |  81 +++++++++-
 .../tests/setup_matrix_monorepo.rs            |  51 ------
 .../tests/setup_matrix_static.rs              |  91 +++++++++++
 6 files changed, 288 insertions(+), 96 deletions(-)
 create mode 100644 crates/socket-patch-cli/tests/setup_matrix_static.rs

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7b5cea2d..889fdce6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -385,8 +385,11 @@ into the new version's section — see docs/releasing.md.
   `patch_setup` telemetry `manager` report `vlt`. vlt before 1.0.0-rc.13
   never runs a root `postinstall`: `setup` still wires the project and
   warns `vlt_root_scripts_not_run` — definitely when the `vlt` on `PATH`
-  reports such a version, and as a "may" when no usable `vlt` is found and
-  `vlt-lock.json` has `lockfileVersion` 0 or none.
+  reports such a version, and as a "may" when `vlt-lock.json` has
+  `lockfileVersion` 0 or none and no usable `vlt` is found, or the one
+  found would not write that lock (a v0 lock beside vlt 1.0.0-rc.15 or
+  later). `setup --remove` also clears the hooks earlier releases wrote
+  into vlt workspace members.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index c1d27e1c..3258d6c3 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -400,7 +400,7 @@ the model is **not uniform** today:
   vlt.json `workspaces` — a glob, a list, or named groups of either — or vlt <= 0.0.0-12's
   `vlt-workspaces.json`; vlt's declaration wins over the others and vlt never reads package.json
   `workspaces`). One repo-root invocation discovers and configures every member (pnpm and vlt: the
-  root package only — vlt runs the root hook once per install, even one started from a member). *Single level only* — see property
+  root package only — vlt runs the root hook once per install, even one started from a member; `setup --remove` also clears a vlt member that still carries a hook, as releases before vlt workspace support wired every member). *Single level only* — see property
   9's nested-workspace gap.
 - **cwd-only (single project):** gem, pypi, composer. The crawler inspects only the project
   rooted at `--cwd` (pypi looks at `$VIRTUAL_ENV`, `<cwd>/.venv` / `venv`, then a Poetry project's out-of-tree virtualenv(s) under Poetry's `virtualenvs.path`; composer at the vendor tree); it does **not**
@@ -1301,7 +1301,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
 | `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
-| `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Without a usable `vlt` (absent, non-zero exit, timeout) it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none. Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
+| `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Otherwise it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none, a lock the reported `vlt` would not write: always without a usable `vlt` (absent, non-zero exit, timeout); with one at or above 1.0.0-rc.13, for a lock with no `lockfileVersion`, and for a `0` lock when it reports 1.0.0-rc.15 or later (which refuses a v0 lock, so another vlt installs the project). Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
 | `vendor_*` / `pypi_*` / `gemfile_*` / `lock_*` / `locked_version_mismatch` / `user_authored_*` / `native_extensions_unsupported` / `platform_gem_unsupported` | `failed`/`skipped` | vendor: per-ecosystem refusal + drift vocabulary; see the Vendor command contract section. New tags are additive (MINOR). |
diff --git a/crates/socket-patch-cli/src/commands/setup.rs b/crates/socket-patch-cli/src/commands/setup.rs
index e65429e2..9c04c654 100644
--- a/crates/socket-patch-cli/src/commands/setup.rs
+++ b/crates/socket-patch-cli/src/commands/setup.rs
@@ -48,6 +48,9 @@ const VLT_ROOT_SCRIPTS_REMEDY: &str = "vlt before 1.0.0-rc.13 does not run the r
 /// The first vlt release that runs a root `postinstall` without an
 /// `install` script.
 const VLT_ROOT_SCRIPTS_FLOOR: &str = "1.0.0-rc.13";
+/// The first vlt release that writes `lockfileVersion` 1 and refuses a v0
+/// lock.
+const VLT_LOCK_V1_FLOOR: &str = "1.0.0-rc.15";
 const VLT_VERSION_TIMEOUT: Duration = Duration::from_secs(5);
 
 /// What `vlt --version` said, when a `vlt` resolved on PATH and exited 0
@@ -77,39 +80,42 @@ async fn probe_vlt_version(cwd: &Path) -> VltVersionProbe {
 }
 
 /// The `vlt_root_scripts_not_run` detail, if any. A reported version
-/// decides alone (an unparseable one never warns); without one, a lock
-/// only an old vlt writes makes the warning a "may".
+/// below the floor is definite and an unparseable one never warns. Else a
+/// lock only an old vlt writes makes the warning a "may", unless the
+/// reported vlt writes that lock itself (rc.13 and rc.14 write v0).
 fn vlt_root_scripts_advisory(
     probe: &VltVersionProbe,
     lock: Option<LegacyVltLock>,
 ) -> Option<String> {
-    match probe {
-        VltVersionProbe::Reported(raw) => {
-            let floor = semver::Version::parse(VLT_ROOT_SCRIPTS_FLOOR).ok()?;
-            let version = semver::Version::parse(raw).ok()?;
-            (version < floor)
-                .then(|| format!("{VLT_ROOT_SCRIPTS_REMEDY} (`vlt --version` reports {raw})"))
+    if let VltVersionProbe::Reported(raw) = probe {
+        let floor = semver::Version::parse(VLT_ROOT_SCRIPTS_FLOOR).ok()?;
+        let lock_v1_floor = semver::Version::parse(VLT_LOCK_V1_FLOOR).ok()?;
+        let version = semver::Version::parse(raw).ok()?;
+        if version < floor {
+            return Some(format!(
+                "{VLT_ROOT_SCRIPTS_REMEDY} (`vlt --version` reports {raw})"
+            ));
+        }
+        if lock == Some(LegacyVltLock::VersionZero) && version < lock_v1_floor {
+            return None;
         }
-        VltVersionProbe::Unavailable => lock.map(|lock| {
-            let version = match lock {
-                LegacyVltLock::NoVersion => "has no lockfileVersion",
-                LegacyVltLock::VersionZero => "has lockfileVersion 0",
-            };
-            format!(
-                "{VLT_ROOT_SCRIPTS_REMEDY} (vlt-lock.json {version}, so this project may be \
-                 installed by such a vlt)"
-            )
-        }),
     }
+    lock.map(|lock| {
+        let version = match lock {
+            LegacyVltLock::NoVersion => "has no lockfileVersion",
+            LegacyVltLock::VersionZero => "has lockfileVersion 0",
+        };
+        format!(
+            "{VLT_ROOT_SCRIPTS_REMEDY} (vlt-lock.json {version}, so this project may be \
+             installed by such a vlt)"
+        )
+    })
 }
 
 /// The run's `(code, detail)` advisories for a vlt project `setup` wires.
 async fn vlt_setup_advisories(cwd: &Path) -> Vec<(&'static str, String)> {
     let probe = probe_vlt_version(cwd).await;
-    let lock = match probe {
-        VltVersionProbe::Reported(_) => None,
-        VltVersionProbe::Unavailable => legacy_vlt_lock(cwd).await,
-    };
+    let lock = legacy_vlt_lock(cwd).await;
     vlt_root_scripts_advisory(&probe, lock)
         .map(|detail| (VLT_ROOT_SCRIPTS_NOT_RUN, detail))
         .into_iter()
@@ -204,6 +210,21 @@ pub async fn run(args: SetupArgs) -> i32 {
 /// applying the pnpm "root-only" filtering. Returns an empty vec when none are
 /// found (callers also consider Python before reporting `no_files`).
 async fn discover(args: &SetupArgs, excludes: &[String]) -> Vec<PackageJsonLocation> {
+    discover_members(args, excludes, false).await
+}
+
+/// [`discover`] for `--remove`, which also visits the vlt workspace members
+/// that still carry a hook: releases before vlt workspace support wired
+/// every member.
+async fn discover_for_remove(args: &SetupArgs, excludes: &[String]) -> Vec<PackageJsonLocation> {
+    discover_members(args, excludes, true).await
+}
+
+async fn discover_members(
+    args: &SetupArgs,
+    excludes: &[String],
+    keep_hooked_vlt_members: bool,
+) -> Vec<PackageJsonLocation> {
     let Some(found) = find_members(args).await else {
         return Vec::new();
     };
@@ -211,7 +232,29 @@ async fn discover(args: &SetupArgs, excludes: &[String]) -> Vec<PackageJsonLocat
         &args.common,
         &unmatched_excludes(&found, &args.common.cwd, excludes),
     );
-    select_members(found, &args.common.cwd, excludes)
+    let keep = if keep_hooked_vlt_members {
+        hooked_vlt_members(&found).await
+    } else {
+        Vec::new()
+    };
+    select_members(found, &args.common.cwd, excludes, &keep)
+}
+
+/// The vlt workspace members whose package.json carries either hook.
+async fn hooked_vlt_members(found: &PackageJsonFindResult) -> Vec<PathBuf> {
+    if !matches!(found.workspace_type, WorkspaceType::Vlt) {
+        return Vec::new();
+    }
+    let mut hooked = Vec::new();
+    for loc in found.files.iter().filter(|loc| !loc.is_root) {
+        if let Ok(content) = tokio::fs::read_to_string(&loc.path).await {
+            let status = is_setup_configured_str(&content);
+            if status.postinstall_configured || status.dependencies_configured {
+                hooked.push(loc.path.clone());
+            }
+        }
+    }
+    hooked
 }
 
 /// Walk for package.json files; `None` when npm is out of `--ecosystems` scope.
@@ -256,11 +299,13 @@ fn warn_unmatched_excludes(common: &GlobalArgs, unmatched: &[String]) {
     }
 }
 
-/// Apply the pnpm/vlt root-only rule and drop excluded members.
+/// Apply the pnpm/vlt root-only rule (sparing the members in `keep`) and
+/// drop excluded members.
 fn select_members(
     found: PackageJsonFindResult,
     cwd: &Path,
     excludes: &[String],
+    keep: &[PathBuf],
 ) -> Vec<PackageJsonLocation> {
     // For pnpm monorepos, only update root package.json. pnpm runs root
     // postinstall on `pnpm install`, so workspace-level postinstall scripts are
@@ -268,9 +313,11 @@ fn select_members(
     // has one root store and runs the root hook once per install, even one
     // started from a member directory.
     let files: Vec<PackageJsonLocation> = match found.workspace_type {
-        WorkspaceType::Pnpm | WorkspaceType::Vlt => {
-            found.files.into_iter().filter(|loc| loc.is_root).collect()
-        }
+        WorkspaceType::Pnpm | WorkspaceType::Vlt => found
+            .files
+            .into_iter()
+            .filter(|loc| loc.is_root || keep.contains(&loc.path))
+            .collect(),
         _ => found.files,
     };
 
@@ -1498,7 +1545,7 @@ async fn run_remove(args: &SetupArgs) -> i32 {
     // was deliberately excluded from setup. Remove does not change the set.
     let existing = read_setup_manifest(common).await;
     let excludes = effective_excludes(manifest_view(&existing), &args.exclude);
-    let npm_files = discover(args, &excludes).await;
+    let npm_files = discover_for_remove(args, &excludes).await;
     let py_plan = plan_python(common).await;
     // Gem + Composer projects are discovered ONCE; the preview and the real
     // removal below share them.
@@ -2058,7 +2105,7 @@ async fn run_setup(args: &SetupArgs) -> i32 {
         .cloned()
         .collect();
     let npm_files = found
-        .map(|f| select_members(f, &common.cwd, &excludes))
+        .map(|f| select_members(f, &common.cwd, &excludes, &[]))
         .unwrap_or_default();
     let py_plan = plan_python(common).await;
     // Gem + Composer projects are discovered ONCE and bundler probed ONCE:
@@ -2892,13 +2939,44 @@ mod tests {
             );
         }
         for new in ["1.0.0-rc.13", "1.0.0-rc.14", "1.0.0", "1.2.0"] {
-            for lock in [None, Some(LegacyVltLock::VersionZero)] {
-                assert_eq!(
-                    vlt_root_scripts_advisory(&reported(new), lock),
-                    None,
-                    "{new}"
-                );
-            }
+            assert_eq!(
+                vlt_root_scripts_advisory(&reported(new), None),
+                None,
+                "{new}"
+            );
+        }
+    }
+
+    #[test]
+    fn vlt_root_scripts_advisory_is_a_may_for_a_lock_the_reported_vlt_never_writes() {
+        let reported = |v: &str| VltVersionProbe::Reported(v.to_string());
+        let may = |version: &str| {
+            format!(
+                "vlt before 1.0.0-rc.13 does not run the root postinstall hook; upgrade vlt \
+                 or run `socket-patch apply` after `vlt ci` (vlt-lock.json {version}, so this \
+                 project may be installed by such a vlt)"
+            )
+        };
+        for writes_v0 in ["1.0.0-rc.13", "1.0.0-rc.14"] {
+            assert_eq!(
+                vlt_root_scripts_advisory(&reported(writes_v0), Some(LegacyVltLock::VersionZero)),
+                None,
+                "{writes_v0}"
+            );
+        }
+        for refuses_v0 in ["1.0.0-rc.15", "1.0.1", "1.2.0"] {
+            assert_eq!(
+                vlt_root_scripts_advisory(&reported(refuses_v0), Some(LegacyVltLock::VersionZero)),
+                Some(may("has lockfileVersion 0")),
+                "{refuses_v0}"
+            );
+        }
+        for new in ["1.0.0-rc.13", "1.0.0-rc.14", "1.2.0"] {
+            assert_eq!(
+                vlt_root_scripts_advisory(&reported(new), Some(LegacyVltLock::NoVersion)),
+                Some(may("has no lockfileVersion")),
+                "{new}"
+            );
         }
     }
 
diff --git a/crates/socket-patch-cli/tests/setup_invariants.rs b/crates/socket-patch-cli/tests/setup_invariants.rs
index c91b1149..c0a6ba20 100644
--- a/crates/socket-patch-cli/tests/setup_invariants.rs
+++ b/crates/socket-patch-cli/tests/setup_invariants.rs
@@ -1271,13 +1271,32 @@ fn setup_vlt_before_rc13_emits_the_definite_advisory() {
 }
 
 #[test]
-fn setup_vlt_rc13_and_later_emits_no_advisory_even_with_a_v0_lock() {
-    for version in ["1.0.0-rc.13", "1.2.0"] {
-        let tmp = vlt_project(Some(VLT_LOCK_V0));
+fn setup_vlt_rc13_and_later_reads_the_lock_it_would_not_write() {
+    let may_v0 = format!(
+        "{VLT_ADVISORY_PREFIX} (vlt-lock.json has lockfileVersion 0, so this project may be \
+         installed by such a vlt)"
+    );
+    let may_a0 = format!(
+        "{VLT_ADVISORY_PREFIX} (vlt-lock.json has no lockfileVersion, so this project may be \
+         installed by such a vlt)"
+    );
+    let a0 = "{\"nodes\":{},\"edges\":{}}\n";
+    for (version, lock, want) in [
+        ("1.0.0-rc.13", VLT_LOCK_V0, None),
+        ("1.0.0-rc.14", VLT_LOCK_V0, None),
+        ("1.0.0-rc.15", VLT_LOCK_V0, Some(&may_v0)),
+        ("1.2.0", VLT_LOCK_V0, Some(&may_v0)),
+        ("1.0.0-rc.14", a0, Some(&may_a0)),
+        ("1.2.0", a0, Some(&may_a0)),
+        ("1.0.0-rc.13", VLT_LOCK_V1, None),
+        ("1.2.0", VLT_LOCK_V1, None),
+    ] {
+        let tmp = vlt_project(Some(lock));
         let path = vlt_reporting(version);
         let (code, v) = run_setup_with_path(tmp.path(), path.path(), &["--yes"]);
-        assert_eq!(code, 0, "{version}: {v}");
-        assert!(warnings(&v).is_empty(), "{version}: {v}");
+        assert_eq!(code, 0, "{version} {lock}: {v}");
+        let want: Vec<String> = want.into_iter().cloned().collect();
+        assert_eq!(warnings(&v), want, "{version} {lock}: {v}");
     }
 }
 
@@ -1357,3 +1376,55 @@ fn setup_npm_project_never_probes_vlt() {
     assert_eq!(v["packageManager"], "npm", "{v}");
     assert!(warnings(&v).is_empty(), "{v}");
 }
+
+#[test]
+fn setup_remove_clears_hooks_older_releases_wrote_into_vlt_members() {
+    let tmp = tempfile::tempdir().expect("tempdir");
+    let wired = format!(
+        "{{ \"name\": \"m\", \"version\": \"1.0.0\", \"scripts\": {{ \"postinstall\": \
+         \"{NPX_HOOK}\", \"dependencies\": \"{NPX_HOOK}\" }} }}\n"
+    );
+    write(&tmp.path().join("package.json"), &wired);
+    write(
+        &tmp.path().join("vlt.json"),
+        "{ \"workspaces\": \"packages/*\" }\n",
+    );
+    write(&tmp.path().join("packages/a/package.json"), &wired);
+    write(&tmp.path().join("packages/excluded/package.json"), &wired);
+    let clean = "{ \"name\": \"c\", \"version\": \"1.0.0\" }\n";
+    write(&tmp.path().join("packages/clean/package.json"), clean);
+    let path = vlt_path(None);
+
+    let out = setup_command(
+        tmp.path(),
+        &[
+            "setup",
+            "--remove",
+            "--yes",
+            "--json",
+            "--exclude",
+            "packages/excluded",
+        ],
+    )
+    .env("PATH", path.path())
+    .output()
+    .expect("run socket-patch");
+    let v: serde_json::Value = serde_json::from_slice(&out.stdout).expect("remove JSON");
+    assert_eq!(out.status.code(), Some(0), "{v}");
+    assert_eq!(v["status"], "success", "{v}");
+    assert_eq!(v["removed"], 2, "root and the hooked member: {v}");
+    assert_eq!(v["notConfigured"], 0, "a clean member is not visited: {v}");
+    for rel in ["package.json", "packages/a/package.json"] {
+        let content = std::fs::read_to_string(tmp.path().join(rel)).unwrap();
+        assert!(!content.contains("socket-patch"), "{rel}: {content}");
+    }
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("packages/excluded/package.json")).unwrap(),
+        wired,
+        "an excluded member is never touched"
+    );
+    assert_eq!(
+        std::fs::read_to_string(tmp.path().join("packages/clean/package.json")).unwrap(),
+        clean
+    );
+}
diff --git a/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs b/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
index 519b7d2e..e19a8aa6 100644
--- a/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
+++ b/crates/socket-patch-cli/tests/setup_matrix_monorepo.rs
@@ -327,54 +327,3 @@ fn driver_round_trip_still_gated_on_monorepo_layout() {
          the monorepo would skip the check/remove + LEAK assertions:\n{body}"
     );
 }
-
-/// vlt is an npm-family row of the matrix: it runs in the npm image, gets
-/// npm's `npx` hook, takes the round-trip path, and its scaffolds carry the
-/// vlt.json marker (with registry config) that `setup` detects vlt by.
-/// The docker legs soft-skip, so this pins the wiring they would exercise.
-#[test]
-fn vlt_targets_route_through_the_npm_round_trip() {
-    let spec: serde_json::Value =
-        serde_json::from_str(&read("tests/setup_matrix/matrix.json")).expect("parse matrix.json");
-    for section in ["targets", "workspace_targets"] {
-        let vlt: Vec<&serde_json::Value> = spec[section]
-            .as_array()
-            .unwrap_or_else(|| panic!("{section} array"))
-            .iter()
-            .filter(|t| t["pm"] == "vlt")
-            .collect();
-        assert_eq!(vlt.len(), 1, "{section}: one vlt target");
-        let t = vlt[0];
-        assert_eq!(t["ecosystem"], "npm", "{section}");
-        assert_eq!(t["image"], "npm", "{section}");
-        assert_eq!(t["hook_family"], "npm", "{section}: vlt uses the npx hook");
-        assert_eq!(t["baseline_supported"], true, "{section}");
-    }
-
-    let script = read("tests/setup_matrix/run-case.sh");
-    assert!(
-        bash_fn_body(&script, "is_npm_family").contains("vlt"),
-        "vlt must take the check/remove round trip"
-    );
-    for scaffold in ["scaffold_project", "scaffold_workspace"] {
-        let body = bash_fn_body(&script, scaffold);
-        let arm = body
-            .split("\n    vlt)")
-            .nth(1)
-            .unwrap_or_else(|| panic!("{scaffold} has no vlt arm"));
-        let arm = &arm[..arm.find(";;").expect("vlt arm ends")];
-        assert!(
-            arm.contains("vlt_json"),
-            "{scaffold}: vlt.json marker:\n{arm}"
-        );
-    }
-    assert!(
-        bash_fn_body(&script, "scaffold_workspace").contains("\"workspaces\""),
-        "the vlt workspace is declared in vlt.json"
-    );
-    let vlt_json = bash_fn_body(&script, "vlt_json");
-    assert!(
-        vlt_json.contains("\"registries\"") && vlt_json.contains("\"registry\""),
-        "vlt >= 1.0.0-rc.33 installs need a registry config:\n{vlt_json}"
-    );
-}
diff --git a/crates/socket-patch-cli/tests/setup_matrix_static.rs b/crates/socket-patch-cli/tests/setup_matrix_static.rs
new file mode 100644
index 00000000..60c424e8
--- /dev/null
+++ b/crates/socket-patch-cli/tests/setup_matrix_static.rs
@@ -0,0 +1,91 @@
+//! Static setup-matrix wiring guards that need neither docker nor the
+//! `setup-e2e` feature, so the default test run keeps them honest.
+
+use std::path::{Path, PathBuf};
+
+fn workspace_root() -> PathBuf {
+    Path::new(env!("CARGO_MANIFEST_DIR"))
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("workspace root")
+        .to_path_buf()
+}
+
+fn read(rel: &str) -> String {
+    let p = workspace_root().join(rel);
+    std::fs::read_to_string(&p).unwrap_or_else(|e| panic!("read {}: {e}", p.display()))
+}
+
+/// The body of a `name() { ... }` bash function, matched brace for brace.
+fn bash_fn_body<'a>(script: &'a str, name: &str) -> &'a str {
+    let header = format!("{name}() {{");
+    let start = script
+        .find(&header)
+        .unwrap_or_else(|| panic!("run-case.sh: function `{name}` not found"));
+    let rest = &script[start + header.len()..];
+    let mut depth = 1usize;
+    for (i, c) in rest.char_indices() {
+        match c {
+            '{' => depth += 1,
+            '}' => {
+                depth -= 1;
+                if depth == 0 {
+                    return &rest[..i];
+                }
+            }
+            _ => {}
+        }
+    }
+    panic!("run-case.sh: unbalanced braces in `{name}`");
+}
+
+/// vlt is an npm-family row of the matrix: it runs in the npm image, gets
+/// npm's `npx` hook, takes the round-trip path, and its scaffolds carry the
+/// vlt.json marker (with registry config) that `setup` detects vlt by.
+/// The docker legs soft-skip, so this pins the wiring they would exercise.
+#[test]
+fn vlt_targets_route_through_the_npm_round_trip() {
+    let spec: serde_json::Value =
+        serde_json::from_str(&read("tests/setup_matrix/matrix.json")).expect("parse matrix.json");
+    for section in ["targets", "workspace_targets"] {
+        let vlt: Vec<&serde_json::Value> = spec[section]
+            .as_array()
+            .unwrap_or_else(|| panic!("{section} array"))
+            .iter()
+            .filter(|t| t["pm"] == "vlt")
+            .collect();
+        assert_eq!(vlt.len(), 1, "{section}: one vlt target");
+        let t = vlt[0];
+        assert_eq!(t["ecosystem"], "npm", "{section}");
+        assert_eq!(t["image"], "npm", "{section}");
+        assert_eq!(t["hook_family"], "npm", "{section}: vlt uses the npx hook");
+        assert_eq!(t["baseline_supported"], true, "{section}");
+    }
+
+    let script = read("tests/setup_matrix/run-case.sh");
+    assert!(
+        bash_fn_body(&script, "is_npm_family").contains("vlt"),
+        "vlt must take the check/remove round trip"
+    );
+    for scaffold in ["scaffold_project", "scaffold_workspace"] {
+        let body = bash_fn_body(&script, scaffold);
+        let arm = body
+            .split("\n    vlt)")
+            .nth(1)
+            .unwrap_or_else(|| panic!("{scaffold} has no vlt arm"));
+        let arm = &arm[..arm.find(";;").expect("vlt arm ends")];
+        assert!(
+            arm.contains("vlt_json"),
+            "{scaffold}: vlt.json marker:\n{arm}"
+        );
+    }
+    assert!(
+        bash_fn_body(&script, "scaffold_workspace").contains("\"workspaces\""),
+        "the vlt workspace is declared in vlt.json"
+    );
+    let vlt_json = bash_fn_body(&script, "vlt_json");
+    assert!(
+        vlt_json.contains("\"registries\"") && vlt_json.contains("\"registry\""),
+        "vlt >= 1.0.0-rc.33 installs need a registry config:\n{vlt_json}"
+    );
+}

From eae4b36fc51e96699164c3bc3bf88dd2a33b46c2 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 04:58:34 -0400
Subject: [PATCH 23/46] Keep optional vlt copies out of the heal

The hosted warm-tree heal removed stale store entries of optional
dependencies too. vlt does not put a removed optional dependency back
on `vlt install` unless the same install also reinstalls a
non-optional package, so the dependency could silently vanish and its
node_modules link dangle (measured on vlt 0.0.0-32 through 1.2.0).

scan/get, rollback/remove and the vendored takeover now leave every
optional copy (lock flags 1 or 3, or unreadable flags) in place. Such
a copy stays out of the run's in-run VEX, and the
redirect_vlt_reinstall_required advisory tells the user to run
`vlt ci` (or delete node_modules and run `vlt install`), noting that
vlt before 1.0.5 installs no optional dependency from the lock of a
project that declares only optional dependencies.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  10 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   4 +-
 crates/socket-patch-cli/src/args.rs           |   3 +-
 .../src/commands/scan/hosted/vlt.rs           |  66 +++++++++--
 .../tests/in_process_redirect/vlt.rs          | 110 ++++++++++++++++++
 .../tests/in_process_rollback_hosted/vlt.rs   |  88 ++++++++++++++
 .../in_process_vendor_bun_takeover/vlt.rs     |  56 +++++++++
 .../tests/vlt_hosted_common/mod.rs            |  18 +++
 .../src/patch/redirect/vlt_heal.rs            |  94 ++++++++++++++-
 9 files changed, 428 insertions(+), 21 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 889fdce6..b2c73ae8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -303,10 +303,12 @@ into the new version's section — see docs/releasing.md.
   extracts the patched packages; `rollback` and `remove` do the same for
   the registry bytes. New `--no-vlt-install-cleanup` /
   `SOCKET_NO_VLT_INSTALL_CLEANUP` keeps them, and the
-  `redirect_vlt_reinstall_required` advisory says what to run. A same-run
-  `--vex` does not attest a vlt package whose installed copy is stale or
-  unchecked, whose lock a vlt release may ignore, or which also resolves
-  from a non-default registry. vlt ledgers require the socket-patch
+  `redirect_vlt_reinstall_required` advisory says what to run. A stale
+  copy of an optional dependency is never removed, because `vlt install`
+  would not put it back; the advisory says to run `vlt ci` instead. A
+  same-run `--vex` does not attest a vlt package whose installed copy is
+  stale or unchecked, whose lock a vlt release may ignore, or which also
+  resolves from a non-default registry. vlt ledgers require the socket-patch
   release that adds vlt support.
 - **`vendor` wires vlt projects.** A `vlt-lock.json` (lockfileVersion 0
   or 1) routes npm vendoring to the new vlt backend ahead of every other
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 3258d6c3..99e04b3c 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -58,7 +58,7 @@ In v3.0 every subcommand accepts the same set of "global" flags via a single sha
 | `--no-telemetry` | — | `SOCKET_TELEMETRY_DISABLED` | `false` | bool | Disable anonymous usage telemetry |
 | `--no-trust-lockfile-config` | — | `SOCKET_NO_TRUST_LOCKFILE_CONFIG` | `false` | bool | Opt out of hosted mode's automatic `trustLockfile: true` write to `pnpm-workspace.yaml` (see the pnpm trust-config note under the scan arguments) |
 | `--no-npm-allow-remote-config` | — | `SOCKET_NO_NPM_ALLOW_REMOTE_CONFIG` | `false` | bool | Opt out of hosted mode's automatic `allow-remote=all` write to the project `.npmrc` (see the npm allow-remote note under the scan arguments). Read by `scan --mode hosted` and `get --mode hosted`; other subcommands accept it silently |
-| `--no-vlt-install-cleanup` | — | `SOCKET_NO_VLT_INSTALL_CLEANUP` | `false` | bool | Opt out of hosted mode's warm-tree heal for vlt: stale installed copies (`node_modules/.vlt-lock.json` and the stale `node_modules/.vlt/<DepID>` entries) are left in place after `vlt-lock.json` is repointed (`scan`/`get --mode hosted`) or restored (`rollback`/`remove`), and the `redirect_vlt_reinstall_required` advisory tells you to run `vlt ci` instead. Other subcommands accept it silently |
+| `--no-vlt-install-cleanup` | — | `SOCKET_NO_VLT_INSTALL_CLEANUP` | `false` | bool | Opt out of hosted mode's warm-tree heal for vlt: stale installed copies (`node_modules/.vlt-lock.json` and the stale `node_modules/.vlt/<DepID>` entries) are left in place after `vlt-lock.json` is repointed (`scan`/`get --mode hosted`) or restored (`rollback`/`remove`), and the `redirect_vlt_reinstall_required` advisory tells you to run `vlt ci` instead. Stale copies of optional dependencies are always left in place (see `redirect_vlt_reinstall_required`). Other subcommands accept it silently |
 
 The `--offline` semantics unified in v3.0. Previously `apply` enforced strict airgap, `repair` skipped network ops, and `rollback` failed when blobs were missing. All three now mean the same thing: never contact the network, fail loudly when a required local source is missing. On `repair`, `--offline` and `--download-only` are mutually exclusive (exit 2). `scan` and `get` need remote data for their core function (patch discovery / patch fetch), so `--offline` refuses them up front — exit 1 with an error naming the offline gate (JSON: `status: "error"`), before any crawl, client build, or network contact. This covers `scan --vendor` too: offline vendored staging is `vendor --offline`'s job.
 
@@ -1300,7 +1300,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
-| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`; the detail says whether copies were removed, left stale, could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies. The detail says whether copies were removed, left stale (skipped cleanup, or optional), could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
 | `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Otherwise it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none, a lock the reported `vlt` would not write: always without a usable `vlt` (absent, non-zero exit, timeout); with one at or above 1.0.0-rc.13, for a lock with no `lockfileVersion`, and for a `0` lock when it reports 1.0.0-rc.15 or later (which refuses a v0 lock, so another vlt installs the project). Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
diff --git a/crates/socket-patch-cli/src/args.rs b/crates/socket-patch-cli/src/args.rs
index baa46e67..499cf69f 100644
--- a/crates/socket-patch-cli/src/args.rs
+++ b/crates/socket-patch-cli/src/args.rs
@@ -369,7 +369,8 @@ pub struct GlobalArgs {
     /// entries) after `vlt-lock.json` is repointed or restored. vlt never
     /// refreshes an installed copy on its own, so opting out means running
     /// `vlt ci` instead (the run's `redirect_vlt_reinstall_required`
-    /// advisory says so). Other subcommands accept it silently.
+    /// advisory says so). Optional dependencies' copies are never removed.
+    /// Other subcommands accept it silently.
     #[arg(
         help_heading = GLOBAL_OPTIONS,
         long = "no-vlt-install-cleanup",
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index 374f4a28..4adab05b 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -208,14 +208,17 @@ fn cleanup_disabled(common: &crate::args::GlobalArgs) -> bool {
 struct HealTally {
     invalidated: usize,
     stale_left: usize,
+    /// Stale optional copies the heal never removes (see
+    /// [`vlt_heal::reinstalls_after_removal`]).
+    optional_left: usize,
     undeterminable: usize,
     stale_uuids: BTreeSet<String>,
     undeterminable_uuids: BTreeSet<String>,
 }
 
 /// Classify `targets` against `expected` and invalidate the stale ones
-/// unless cleanup is off. `(dep_id, name, lock sha512, record, artifact,
-/// uuid)` per target.
+/// vlt reinstalls, unless cleanup is off; `(target, uuid or purl)` per
+/// target.
 async fn heal_targets(
     common: &crate::args::GlobalArgs,
     targets: &[(Target<'_>, &str)],
@@ -229,6 +232,10 @@ async fn heal_targets(
     let mut stale: Vec<(String, &str)> = Vec::new();
     for (target, uuid) in targets {
         match classify_target(&state, &common.cwd, target, expected).await {
+            TargetState::Stale if !vlt_heal::reinstalls_after_removal(target.flags) => {
+                tally.optional_left += 1;
+                tally.stale_uuids.insert((*uuid).to_string());
+            }
             TargetState::Stale => stale.push((target.dep_id.to_string(), uuid)),
             TargetState::Undeterminable => {
                 tally.undeterminable += 1;
@@ -265,13 +272,25 @@ async fn heal_targets(
     tally
 }
 
+/// Why the heal keeps stale optional copies, and what refreshes them.
+const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does not \
+     reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run `vlt \
+     install`); vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     project that declares only optional dependencies.";
+
 fn reinstall_detail(tally: &HealTally) -> String {
     if tally.stale_left > 0 {
         format!(
             "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
              unpatched copies and `vlt install` will not refresh them; run `vlt ci` (or re-run \
              without --no-vlt-install-cleanup).",
-            tally.stale_left
+            tally.stale_left + tally.optional_left
+        )
+    } else if tally.optional_left > 0 {
+        format!(
+            "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
+             unpatched copies of optional dependencies; {OPTIONAL_KEPT}",
+            tally.optional_left
         )
     } else if tally.undeterminable > 0 {
         undeterminable_detail(tally.undeterminable)
@@ -345,6 +364,7 @@ pub(super) async fn heal_after_rewrite(
                         lock_sha512: i.sha512.as_deref(),
                         record,
                         artifact: inputs.preflight.artifacts.get(&i.url).map(Vec::as_slice),
+                        flags: i.flags,
                     },
                     i.patch_uuid.as_str(),
                 )
@@ -390,17 +410,20 @@ pub(crate) async fn rollback_heal(
     let lock = socket_patch_core::utils::fs::read_regular_to_string(&common.cwd.join(VLT_LOCK))
         .await
         .ok();
-    let shas: Vec<Option<String>> = targets
+    let slots: Vec<(Option<String>, Option<u64>)> = targets
         .iter()
-        .map(|t| {
-            lock.as_deref()
-                .and_then(|l| vlt_heal::lock_sha512(l, &t.dep_id))
+        .map(|t| match lock.as_deref() {
+            Some(l) => (
+                vlt_heal::lock_sha512(l, &t.dep_id),
+                vlt_heal::lock_flags(l, &t.dep_id).or(t.flags),
+            ),
+            None => (None, t.flags),
         })
         .collect();
     let classified: Vec<(Target<'_>, &str)> = targets
         .iter()
-        .zip(&shas)
-        .map(|(t, sha)| {
+        .zip(&slots)
+        .map(|(t, (sha, flags))| {
             (
                 Target {
                     dep_id: &t.dep_id,
@@ -408,6 +431,7 @@ pub(crate) async fn rollback_heal(
                     lock_sha512: sha.as_deref(),
                     record: t.record.as_ref(),
                     artifact: None,
+                    flags: *flags,
                 },
                 t.purl.as_str(),
             )
@@ -421,7 +445,14 @@ pub(crate) async fn rollback_heal(
              copies and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
              --no-vlt-install-cleanup)",
             restored.len(),
-            tally.stale_left
+            tally.stale_left + tally.optional_left
+        )
+    } else if tally.optional_left > 0 {
+        format!(
+            "restored registry pins for {} packages, but node_modules still holds {} patched \
+             copies of optional dependencies; {OPTIONAL_KEPT}",
+            restored.len(),
+            tally.optional_left
         )
     } else if tally.undeterminable > 0 {
         undeterminable_detail(tally.undeterminable)
@@ -458,6 +489,7 @@ pub(crate) async fn takeover_heal(
                     lock_sha512: None,
                     record: t.record.as_ref(),
                     artifact: None,
+                    flags: t.flags,
                 },
                 t.purl.as_str(),
             )
@@ -470,7 +502,14 @@ pub(crate) async fn takeover_heal(
             "vendored {} hosted-pinned packages, but node_modules still holds {} copies of the \
              hosted artifacts; run `vlt install` (or re-run without --no-vlt-install-cleanup)",
             vendored.len(),
-            tally.stale_left
+            tally.stale_left + tally.optional_left
+        )
+    } else if tally.optional_left > 0 {
+        format!(
+            "vendored {} hosted-pinned packages, but node_modules still holds {} copies of the \
+             hosted artifacts of optional dependencies; {OPTIONAL_KEPT}",
+            vendored.len(),
+            tally.optional_left
         )
     } else if tally.undeterminable > 0 {
         undeterminable_detail(tally.undeterminable)
@@ -509,8 +548,11 @@ mod tests {
         assert!(reinstall_detail(&tally).contains("socket-patch removed 2 stale installed copies"));
         tally.undeterminable = 1;
         assert!(reinstall_detail(&tally).contains("could not check 1 installed copies"));
+        tally.optional_left = 2;
+        assert!(reinstall_detail(&tally)
+            .contains("still holds 2 unpatched copies of optional dependencies; socket-patch"));
         tally.stale_left = 3;
-        assert!(reinstall_detail(&tally).contains("still holds 3 unpatched copies"));
+        assert!(reinstall_detail(&tally).contains("still holds 5 unpatched copies and"));
     }
 
     fn left_pad_dep(url: &str) -> DepOverride {
diff --git a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
index 71fa8e0b..997b808b 100644
--- a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
@@ -924,6 +924,85 @@ async fn scan_redirect_vlt_heal_rule_c_no_record_uses_artifact_bytes() {
     );
 }
 
+/// A warm install of `nodes` (each `(DepID, flags)`) holding `index`, with
+/// a hidden lock recording their registry integrity.
+fn write_installed_flagged(root: &Path, nodes: &[(&str, u8)], index: &[u8]) {
+    write_vlt_project(root, Era::V1);
+    let lines: Vec<String> = nodes
+        .iter()
+        .map(|(id, flags)| with_flags(&registry_node(id), *flags))
+        .collect();
+    std::fs::write(root.join("vlt-lock.json"), lock_with(Era::V1, &lines)).unwrap();
+    for (id, _) in nodes {
+        install_store(root, id, index);
+    }
+    write_hidden_lock(root, &lines);
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_keeps_stale_optional_instance() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    for flags in [1, 3] {
+        for extra in [&[][..], &["--no-vlt-install-cleanup"][..]] {
+            let tmp = tempfile::tempdir().unwrap();
+            write_installed_flagged(tmp.path(), &[(TILDE_ID, flags)], PRISTINE);
+
+            let (_, doc) = scan_hosted(tmp.path(), &server, extra, &[]);
+
+            assert_eq!(
+                read(tmp.path(), "vlt-lock.json"),
+                lock_with(
+                    Era::V1,
+                    &[with_flags(&pinned_node(TILDE_ID, &server), flags)]
+                ),
+                "flags={flags} {extra:?}"
+            );
+            assert_eq!(
+                std::fs::read(store_dir(tmp.path(), TILDE_ID).join("index.js")).unwrap(),
+                PRISTINE,
+                "an optional store entry is never removed: flags={flags} {extra:?}"
+            );
+            assert!(tmp.path().join("node_modules/.vlt-lock.json").exists());
+            assert_eq!(
+                warning_detail(&doc, ADVISORY),
+                advisory_optional_kept(1),
+                "flags={flags} {extra:?}"
+            );
+        }
+    }
+}
+
+#[tokio::test]
+async fn scan_redirect_vlt_heal_removes_the_prod_instance_keeps_the_optional_one() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    let optional = "~npm~left-pad@1.3.0~peer.2";
+    write_installed_flagged(tmp.path(), &[(TILDE_ID, 0), (optional, 1)], PRISTINE);
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &[], &[]);
+
+    assert!(!tmp.path().join("node_modules/.vlt").join(TILDE_ID).exists());
+    assert!(!tmp.path().join("node_modules/.vlt-lock.json").exists());
+    assert_eq!(
+        std::fs::read(store_dir(tmp.path(), optional).join("index.js")).unwrap(),
+        PRISTINE
+    );
+    assert_eq!(warning_detail(&doc, ADVISORY), advisory_optional_kept(1));
+
+    let (_, skipped) = {
+        let tmp = tempfile::tempdir().unwrap();
+        write_installed_flagged(tmp.path(), &[(TILDE_ID, 0), (optional, 1)], PRISTINE);
+        scan_hosted(tmp.path(), &server, &["--dry-run"], &[])
+    };
+    assert_eq!(
+        warning_detail(&skipped, ADVISORY),
+        advisory_cleanup_skipped(2),
+        "a skipped cleanup counts every unpatched copy"
+    );
+}
+
 #[cfg(unix)]
 fn link_node_modules_outside(root: &Path, outside: &Path) {
     let real = outside.join("node_modules");
@@ -1226,6 +1305,37 @@ async fn scan_redirect_vlt_no_cleanup_vex_not_attested() {
     );
 }
 
+#[tokio::test]
+async fn scan_redirect_vlt_kept_optional_instance_vex_not_attested() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let stale = tempfile::tempdir().unwrap();
+    write_installed_flagged(stale.path(), &[(TILDE_ID, 1)], PRISTINE);
+    let healthy = tempfile::tempdir().unwrap();
+    write_installed_flagged(healthy.path(), &[(TILDE_ID, 1)], PATCHED);
+    write_hidden_lock(
+        healthy.path(),
+        &[with_flags(&pinned_node(TILDE_ID, &server), 1)],
+    );
+
+    let (_, doc, attested) = scan_with_vex(stale.path(), &server, &[]);
+    let (_, healthy_doc, healthy_attested) = scan_with_vex(healthy.path(), &server, &[]);
+
+    assert_eq!(redirected(&doc), 1);
+    assert!(
+        !attested,
+        "a kept stale optional copy is not attested: {doc:#}"
+    );
+    assert_eq!(
+        warning_detail(&healthy_doc, ADVISORY),
+        ADVISORY_NOTHING_STALE
+    );
+    assert!(
+        healthy_attested,
+        "a patched optional copy attests: {healthy_doc:#}"
+    );
+}
+
 #[tokio::test]
 async fn scan_redirect_vlt_foreign_instance_vex_not_attested() {
     let server = MockServer::start().await;
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
index 7f45302b..f2560f71 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
@@ -190,6 +190,94 @@ async fn vlt_rollback_of_a_pristine_tree_keeps_it() {
     assert!(root.join("node_modules/.vlt-lock.json").exists());
 }
 
+/// A hosted scan of a project whose left-pad node is optional (`flags`),
+/// followed by vlt's warm install of the pin.
+async fn hosted_optional_project(root: &Path, flags: u8) -> MockServer {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    write_vlt_project(root, Era::V1);
+    let registry = with_flags(&registry_node(TILDE_ID), flags);
+    std::fs::write(root.join("vlt-lock.json"), vlt_lock(Era::V1, &[registry])).unwrap();
+    let (_, doc) = scan_hosted(root, &server, &[], &[]);
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    let pinned = with_flags(&pinned_node(TILDE_ID, &server), flags);
+    assert_eq!(
+        read(root, "vlt-lock.json"),
+        vlt_lock(Era::V1, std::slice::from_ref(&pinned))
+    );
+    install_store(root, TILDE_ID, PATCHED);
+    write_hidden_lock(root, &[pinned]);
+    server
+}
+
+fn optional_kept(restored: usize, kept: usize) -> String {
+    format!(
+        "restored registry pins for {restored} packages, but node_modules still holds {kept} \
+         patched copies of optional dependencies; {OPTIONAL_KEPT}"
+    )
+}
+
+#[tokio::test]
+async fn vlt_rollback_keeps_a_patched_optional_copy() {
+    for (verb, flags) in [("rollback", 1), ("rollback", 3), ("remove", 1)] {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let _server = hosted_optional_project(root, flags).await;
+        let targets: &[&str] = if verb == "remove" { &[PURL] } else { &[] };
+
+        let (_, doc) = run_verb(root, verb, targets);
+
+        assert_eq!(
+            read(root, "vlt-lock.json"),
+            vlt_lock(Era::V1, &[with_flags(&registry_node(TILDE_ID), flags)]),
+            "{verb} flags={flags}"
+        );
+        assert_eq!(
+            advisory_details(&doc),
+            [optional_kept(1, 1)],
+            "{verb} flags={flags}: {doc:#}"
+        );
+        assert_eq!(
+            std::fs::read(store_dir(root, TILDE_ID).join("index.js")).unwrap(),
+            PATCHED,
+            "{verb} flags={flags}"
+        );
+        assert!(root.join("node_modules/.vlt-lock.json").exists());
+    }
+}
+
+/// Once vlt re-locked the package, the healed DepID is gone from the lock,
+/// so the heal goes by the flags the ledger recorded for it.
+#[tokio::test]
+async fn vlt_rollback_after_relock_goes_by_the_recorded_flags() {
+    for flags in [0, 1] {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let _server = hosted_optional_project(root, flags).await;
+        let relocked = vlt_lock(
+            Era::V1,
+            &[with_flags(&registry_node(TILDE_ID), flags).replace("1.3.0", "1.3.1")],
+        );
+        std::fs::write(root.join("vlt-lock.json"), &relocked).unwrap();
+        write_hidden_lock(root, &[]);
+
+        let (_, doc) = run_verb(root, "rollback", &[]);
+
+        assert_eq!(read(root, "vlt-lock.json"), relocked);
+        let (advisory, kept) = if flags == 0 {
+            (RESTORED.to_string(), false)
+        } else {
+            (optional_kept(1, 1), true)
+        };
+        assert_eq!(advisory_details(&doc), [advisory], "flags={flags}: {doc:#}");
+        assert_eq!(
+            store_dir(root, TILDE_ID).join("index.js").exists(),
+            kept,
+            "flags={flags}"
+        );
+    }
+}
+
 const OTHER: &str = "right-pad";
 const OTHER_UUID: &str = "cccccccc-cccc-4ccc-8ccc-cccccccccccc";
 
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
index 04eddde0..dd3951c7 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
@@ -510,3 +510,59 @@ async fn vlt_failed_vendor_after_the_takeover_revert_still_heals_the_store() {
     );
     assert!(!root.join("node_modules/.vlt-lock.json").exists());
 }
+
+/// An optional hosted pin taken over by `scan --mode vendored`: the
+/// hosted store copy stays (vlt would not reinstall a removed optional
+/// node), and the advisory says how to refresh it.
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+    let lock = format!(
+        "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{}},\n  \"nodes\": {{\n    {}\n  }},\n  \
+         \"edges\": {{\n    \"file~_d left-pad\": \"optional 1.3.0 {TILDE_ID}\"\n  }}\n}}\n",
+        hosted::with_flags(&hosted::registry_node(TILDE_ID), 1)
+    );
+    std::fs::write(root.join("vlt-lock.json"), &lock).unwrap();
+    std::fs::write(
+        root.join("package.json"),
+        "{\n  \"name\": \"consumer\",\n  \"optionalDependencies\": {\n    \"left-pad\": \
+         \"1.3.0\"\n  }\n}\n",
+    )
+    .unwrap();
+    hosted::install_importer(root, PRISTINE);
+    let (code, env, stderr) = scan(root, &server, "hosted", &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert_eq!(hosted::redirected(&env), 1, "{env:#}");
+    hosted::install_store(root, TILDE_ID, PATCHED);
+    hosted::write_hidden_lock(
+        root,
+        &[hosted::with_flags(
+            &hosted::pinned_node(TILDE_ID, &server),
+            1,
+        )],
+    );
+
+    let (code, env, stderr) = scan(root, &server, "vendored", &[]);
+
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        hosted::read(root, "vlt-lock.json").contains(&rel()),
+        "{env:#}"
+    );
+    assert_eq!(
+        detail_of(&env, "redirect_vlt_reinstall_required"),
+        format!(
+            "vendored 1 hosted-pinned packages, but node_modules still holds 1 copies of the \
+             hosted artifacts of optional dependencies; {}",
+            hosted::OPTIONAL_KEPT
+        )
+    );
+    assert_eq!(
+        std::fs::read(hosted::store_dir(root, TILDE_ID).join("index.js")).unwrap(),
+        PATCHED
+    );
+    assert!(root.join("node_modules/.vlt-lock.json").exists());
+}
diff --git a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
index 2620a041..291c0dd8 100644
--- a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
@@ -66,6 +66,24 @@ pub fn advisory_undeterminable(n: usize) -> String {
     )
 }
 
+/// Why the heal keeps stale optional copies, shared by every heal's detail.
+pub const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does \
+     not reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run \
+     `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of \
+     a project that declares only optional dependencies.";
+
+pub fn advisory_optional_kept(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages, but node_modules still holds {n} unpatched \
+         copies of optional dependencies; {OPTIONAL_KEPT}"
+    )
+}
+
+/// `line` (a [`node`]) with slot [0] set to `flags`.
+pub fn with_flags(line: &str, flags: u8) -> String {
+    line.replacen("[0,", &format!("[{flags},"), 1)
+}
+
 pub fn git_sha256(bytes: &[u8]) -> String {
     let mut hasher = Sha256::new();
     hasher.update(format!("blob {}\0", bytes.len()).as_bytes());
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
index 337227d4..29f88ae5 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
@@ -5,8 +5,9 @@
 //! hidden lock as they are. A store entry whose bytes are not the ones the
 //! lock now pins is invalidated (the entry plus `node_modules/.vlt-lock.json`)
 //! so the next install extracts the pinned artifact. An entry whose state
-//! cannot be determined is never removed, and nothing outside the project
-//! root is ever touched.
+//! cannot be determined is never removed, nor is one vlt would not
+//! reinstall (an optional node), and nothing outside the project root is
+//! ever touched.
 
 use std::collections::{BTreeMap, BTreeSet};
 use std::path::{Path, PathBuf};
@@ -81,6 +82,8 @@ pub struct OwnedInstance {
     pub patch_uuid: String,
     pub url: String,
     pub sha512: Option<String>,
+    /// Slot [0]: 0 prod, 1 optional, 2 dev, 3 dev+optional.
+    pub flags: Option<u64>,
 }
 
 /// A store entry to classify.
@@ -94,6 +97,8 @@ pub struct Target<'a> {
     pub record: Option<&'a PatchRecord>,
     /// The artifact bytes the preflight downloaded.
     pub artifact: Option<&'a [u8]>,
+    /// Slot [0] of the node, see [`reinstalls_after_removal`].
+    pub flags: Option<u64>,
 }
 
 /// A ledger vlt node of one purl, for the rollback heal.
@@ -103,6 +108,8 @@ pub struct LedgerTarget {
     pub dep_id: String,
     pub name: String,
     pub record: Option<PatchRecord>,
+    /// Slot [0] of the recorded pristine entry.
+    pub flags: Option<u64>,
 }
 
 /// What invalidation removed and what it could not.
@@ -156,6 +163,7 @@ pub fn socket_owned_instances(lock_text: &str, origins: &[String]) -> Vec<OwnedI
             patch_uuid,
             url: url.to_string(),
             sha512: tuple.get(2).and_then(Value::as_str).map(str::to_string),
+            flags: tuple.get(0).and_then(Value::as_u64),
         });
     }
     out
@@ -173,6 +181,24 @@ pub fn lock_sha512(lock_text: &str, dep_id: &str) -> Option<String> {
         .map(str::to_string)
 }
 
+/// Slot [0] of `dep_id`'s node in `lock_text`.
+pub fn lock_flags(lock_text: &str, dep_id: &str) -> Option<u64> {
+    let LockSniff::Readable(lock) = sniff_lock(lock_text) else {
+        return None;
+    };
+    lock.nodes()?.get(dep_id)?.get(0)?.as_u64()
+}
+
+/// Whether `vlt install` puts a node's store entry back once the heal has
+/// removed it. Only prod and dev nodes: vlt treats a missing optional node
+/// (flags 1 or 3) as a skipped optional dependency, so every release from
+/// 0.0.0-32 to 1.2.0 leaves it missing (its importer link dangling) unless
+/// the same install also reinstalls a non-optional node; `vlt ci` restores
+/// it. Unknown flags are not guaranteed either.
+pub fn reinstalls_after_removal(flags: Option<u64>) -> bool {
+    matches!(flags, Some(0 | 2))
+}
+
 /// vlt's `isDepID` path-safety rule: the id is used as one path segment.
 pub fn is_safe_dep_id(id: &str) -> bool {
     let bytes = id.as_bytes();
@@ -474,6 +500,7 @@ pub fn ledger_targets(state: &RedirectState, purls: &[String]) -> Vec<LedgerTarg
                 dep_id: entry.key.to_string(),
                 name: name.clone(),
                 record: record.clone(),
+                flags: entry.elems[0].parse().ok(),
             });
         }
     }
@@ -538,6 +565,7 @@ mod tests {
             lock_sha512: Some(LOCK_SHA),
             record,
             artifact,
+            flags: Some(0),
         }
     }
 
@@ -955,5 +983,67 @@ mod tests {
         let ids: Vec<&str> = targets.iter().map(|t| t.dep_id.as_str()).collect();
         assert_eq!(ids, ["~npm~left-pad@1.3.0", "~npm~left-pad@1.3.0~peer.2"]);
         assert!(targets.iter().all(|t| t.record.is_some()));
+        assert!(targets.iter().all(|t| t.flags == Some(0)));
+    }
+
+    #[test]
+    fn ledger_targets_carry_the_recorded_flags() {
+        let mut state = RedirectState::new();
+        state.edits = [
+            (0, "~npm~left-pad@1.3.0"),
+            (3, "~npm~left-pad@1.3.0~peer.1"),
+        ]
+        .into_iter()
+        .map(|(flags, id)| FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: vlt::KIND.into(),
+            action: "rewritten".into(),
+            key: Some(id.trim_start_matches("~npm~").into()),
+            original: Some(Value::String(format!("\"{id}\": [{flags},\"left-pad\"]"))),
+            new: None,
+        })
+        .collect();
+        let flags: Vec<Option<u64>> = ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()])
+            .iter()
+            .map(|t| t.flags)
+            .collect();
+        assert_eq!(flags, [Some(0), Some(3)]);
+    }
+
+    #[test]
+    fn only_prod_and_dev_nodes_are_reinstalled_after_removal() {
+        assert!(reinstalls_after_removal(Some(0)));
+        assert!(reinstalls_after_removal(Some(2)));
+        for flags in [Some(1), Some(3), Some(4), None] {
+            assert!(!reinstalls_after_removal(flags), "{flags:?}");
+        }
+    }
+
+    #[test]
+    fn owned_instances_and_lock_flags_read_slot_zero() {
+        let lock = r#"{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~fsevents@2.3.3": [1,"fsevents","sha512-F","https://patch.socket.dev/patch/npm/t/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/fsevents-2.3.3.tgz",null,null,null,{"os":["darwin"]}],
+    "~npm~ms@2.1.2": [3,"ms","sha512-M","https://patch.socket.dev/patch/npm/t/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/ms-2.1.2.tgz"],
+    "~npm~semver@7.6.0": [2,"semver"]
+  },
+  "edges": {}
+}
+"#;
+        let flags: Vec<(String, Option<u64>)> = socket_owned_instances(lock, &[])
+            .into_iter()
+            .map(|i| (i.dep_id, i.flags))
+            .collect();
+        assert_eq!(
+            flags,
+            [
+                ("~npm~fsevents@2.3.3".to_string(), Some(1)),
+                ("~npm~ms@2.1.2".to_string(), Some(3)),
+            ]
+        );
+        assert_eq!(lock_flags(lock, "~npm~semver@7.6.0"), Some(2));
+        assert_eq!(lock_flags(lock, "~npm~absent@1.0.0"), None);
     }
 }

From 658f0a01aea15c279b6929cbbaaeeb72d30db499 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 05:14:52 -0400
Subject: [PATCH 24/46] Report kept optional vlt copies in every advisory

When a heal both removed stale vlt copies and kept an optional one, the
redirect_vlt_reinstall_required advisory reported only the optional
copy, so it no longer said node_modules was incomplete or that
`vlt update` drops the redirects. With cleanup skipped, it counted the
optional copies among those a re-run would refresh, which it never
does.

Every advisory now reports removed, skipped and unchecked copies as
before and adds how many optional copies were kept and that `vlt ci`
refreshes them. It also warns that on vlt before 1.0.5, in a project
whose dependencies are all optional, `vlt ci` would drop the installed
copy, so users should upgrade vlt first.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   4 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   2 +-
 .../src/commands/scan/hosted/vlt.rs           | 291 +++++++++++++-----
 .../tests/in_process_redirect/vlt.rs          |  11 +-
 .../tests/in_process_rollback_hosted/vlt.rs   |  90 +++++-
 .../tests/vlt_hosted_common/mod.rs            |  11 +-
 6 files changed, 317 insertions(+), 92 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b2c73ae8..459cb38a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -305,7 +305,9 @@ into the new version's section — see docs/releasing.md.
   `SOCKET_NO_VLT_INSTALL_CLEANUP` keeps them, and the
   `redirect_vlt_reinstall_required` advisory says what to run. A stale
   copy of an optional dependency is never removed, because `vlt install`
-  would not put it back; the advisory says to run `vlt ci` instead. A
+  would not put it back; the advisory says to run `vlt ci` instead
+  (after upgrading to vlt 1.0.5 or later when every dependency is
+  optional, since older releases would drop the installed copy). A
   same-run `--vex` does not attest a vlt package whose installed copy is
   stale or unchecked, whose lock a vlt release may ignore, or which also
   resolves from a non-default registry. vlt ledgers require the socket-patch
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 99e04b3c..8a5edb25 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -1300,7 +1300,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
-| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies. The detail says whether copies were removed, left stale (skipped cleanup, or optional), could not be checked, or none were stale. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies, so there both commands remove the installed copy and the detail says to upgrade vlt to 1.0.5 or later first. The detail says whether copies were removed, left stale by a skipped cleanup, could not be checked, or none were stale, and adds how many optional copies were kept whenever there are any. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
 | `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Otherwise it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none, a lock the reported `vlt` would not write: always without a usable `vlt` (absent, non-zero exit, timeout); with one at or above 1.0.0-rc.13, for a lock with no `lockfileVersion`, and for a `0` lock when it reports 1.0.0-rc.15 or later (which refuses a v0 lock, so another vlt installs the project). Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index 4adab05b..b7630d5e 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -275,40 +275,138 @@ async fn heal_targets(
 /// Why the heal keeps stale optional copies, and what refreshes them.
 const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does not \
      reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run `vlt \
-     install`); vlt releases before 1.0.5 install no optional dependency from the lock of a \
-     project that declares only optional dependencies.";
+     install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     project that declares only optional dependencies, so there both commands remove the \
+     installed copy: upgrade vlt to 1.0.5 or later first.";
+
+/// `detail` followed by the optional copies the heal kept (`held` names
+/// them), when there are any besides what `detail` reports.
+fn with_optional_kept(mut detail: String, optional_left: usize, held: &str) -> String {
+    if optional_left > 0 {
+        detail.push_str(if detail.ends_with('.') { " " } else { ". " });
+        detail.push_str(&format!(
+            "node_modules also still holds {optional_left} {held}; {OPTIONAL_KEPT}"
+        ));
+    }
+    detail
+}
+
+const VLT_UPDATE_NOTE: &str =
+    " Note: `vlt update` re-resolves from the registry and drops these redirects.";
 
 fn reinstall_detail(tally: &HealTally) -> String {
+    let held = "unpatched copies of optional dependencies";
     if tally.stale_left > 0 {
-        format!(
-            "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
-             unpatched copies and `vlt install` will not refresh them; run `vlt ci` (or re-run \
-             without --no-vlt-install-cleanup).",
-            tally.stale_left + tally.optional_left
+        with_optional_kept(
+            format!(
+                "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
+                 unpatched copies and `vlt install` will not refresh them; run `vlt ci` (or \
+                 re-run without --no-vlt-install-cleanup).",
+                tally.stale_left
+            ),
+            tally.optional_left,
+            held,
+        )
+    } else if tally.undeterminable > 0 {
+        with_optional_kept(
+            undeterminable_detail(tally.undeterminable),
+            tally.optional_left,
+            held,
         )
+    } else if tally.invalidated > 0 {
+        let mut detail = with_optional_kept(
+            format!(
+                "vlt-lock.json pins Socket-patched packages; socket-patch removed {} stale \
+                 installed copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), \
+                 so node_modules is incomplete until you run `vlt install` (or `vlt ci`), which \
+                 installs the patched packages.",
+                tally.invalidated
+            ),
+            tally.optional_left,
+            held,
+        );
+        detail.push_str(VLT_UPDATE_NOTE);
+        detail
     } else if tally.optional_left > 0 {
         format!(
-            "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} \
-             unpatched copies of optional dependencies; {OPTIONAL_KEPT}",
+            "vlt-lock.json pins Socket-patched packages, but node_modules still holds {} {held}; \
+             {OPTIONAL_KEPT}",
             tally.optional_left
         )
+    } else {
+        format!(
+            "vlt-lock.json pins Socket-patched packages; fresh checkouts install them with `vlt \
+             ci` or `vlt install --frozen-lockfile`.{VLT_UPDATE_NOTE}"
+        )
+    }
+}
+
+fn rollback_detail(tally: &HealTally, restored: usize) -> Option<String> {
+    let held = "patched copies of optional dependencies";
+    let detail = if tally.stale_left > 0 {
+        format!(
+            "restored registry pins for {restored} packages, but node_modules still holds {} \
+             patched copies and `vlt install` will not refresh them; run `vlt ci` (or re-run \
+             without --no-vlt-install-cleanup)",
+            tally.stale_left
+        )
     } else if tally.undeterminable > 0 {
         undeterminable_detail(tally.undeterminable)
+    } else if tally.invalidated > 0 && tally.optional_left > 0 {
+        format!(
+            "restored registry pins for {restored} packages; removed {} patched installed \
+             copies, so node_modules is incomplete until you run `vlt install` (or `vlt ci`)",
+            tally.invalidated
+        )
     } else if tally.invalidated > 0 {
         format!(
-            "vlt-lock.json pins Socket-patched packages; socket-patch removed {} stale installed \
-             copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), so node_modules \
-             is incomplete until you run `vlt install` (or `vlt ci`), which installs the patched \
-             packages. Note: `vlt update` re-resolves from the registry and drops these \
-             redirects.",
+            "restored registry pins for {restored} packages; removed the patched installed \
+             copies, so node_modules is incomplete until you run `vlt install` (or `vlt ci`)"
+        )
+    } else if tally.optional_left > 0 {
+        return Some(format!(
+            "restored registry pins for {restored} packages, but node_modules still holds {} \
+             {held}; {OPTIONAL_KEPT}",
+            tally.optional_left
+        ));
+    } else {
+        return None;
+    };
+    Some(with_optional_kept(detail, tally.optional_left, held))
+}
+
+fn takeover_detail(tally: &HealTally, vendored: usize) -> Option<String> {
+    let held = "copies of the hosted artifacts of optional dependencies";
+    let detail = if tally.stale_left > 0 {
+        format!(
+            "vendored {vendored} hosted-pinned packages, but node_modules still holds {} copies \
+             of the hosted artifacts; run `vlt install` (or re-run without \
+             --no-vlt-install-cleanup)",
+            tally.stale_left
+        )
+    } else if tally.undeterminable > 0 {
+        undeterminable_detail(tally.undeterminable)
+    } else if tally.invalidated > 0 && tally.optional_left > 0 {
+        format!(
+            "vendored {vendored} hosted-pinned packages; removed {} hosted installed copies, so \
+             node_modules is incomplete until you run `vlt install`",
             tally.invalidated
         )
+    } else if tally.invalidated > 0 {
+        format!(
+            "vendored {vendored} hosted-pinned packages; removed their hosted installed copies, \
+             so node_modules is incomplete until you run `vlt install`"
+        )
+    } else if tally.optional_left > 0 {
+        return Some(format!(
+            "vendored {vendored} hosted-pinned packages, but node_modules still holds {} {held}; \
+             {OPTIONAL_KEPT}",
+            tally.optional_left
+        ));
     } else {
-        "vlt-lock.json pins Socket-patched packages; fresh checkouts install them with `vlt ci` \
-         or `vlt install --frozen-lockfile`. Note: `vlt update` re-resolves from the registry \
-         and drops these redirects."
-            .to_string()
-    }
+        return None;
+    };
+    Some(with_optional_kept(detail, tally.optional_left, held))
 }
 
 fn undeterminable_detail(n: usize) -> String {
@@ -439,33 +537,10 @@ pub(crate) async fn rollback_heal(
         .collect();
     let tally = heal_targets(common, &classified, Expected::Pristine).await;
     let restored: BTreeSet<&str> = targets.iter().map(|t| t.purl.as_str()).collect();
-    let detail = if tally.stale_left > 0 {
-        format!(
-            "restored registry pins for {} packages, but node_modules still holds {} patched \
-             copies and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
-             --no-vlt-install-cleanup)",
-            restored.len(),
-            tally.stale_left + tally.optional_left
-        )
-    } else if tally.optional_left > 0 {
-        format!(
-            "restored registry pins for {} packages, but node_modules still holds {} patched \
-             copies of optional dependencies; {OPTIONAL_KEPT}",
-            restored.len(),
-            tally.optional_left
-        )
-    } else if tally.undeterminable > 0 {
-        undeterminable_detail(tally.undeterminable)
-    } else if tally.invalidated > 0 {
-        format!(
-            "restored registry pins for {} packages; removed the patched installed copies, so \
-             node_modules is incomplete until you run `vlt install` (or `vlt ci`)",
-            restored.len()
-        )
-    } else {
-        return Vec::new();
-    };
-    vec![(REINSTALL_REQUIRED.to_string(), detail)]
+    rollback_detail(&tally, restored.len())
+        .map(|detail| (REINSTALL_REQUIRED.to_string(), detail))
+        .into_iter()
+        .collect()
 }
 
 /// The hosted→vendored heal (DESIGN §4.10 step 4): once a purl is
@@ -497,32 +572,7 @@ pub(crate) async fn takeover_heal(
         .collect();
     let tally = heal_targets(common, &classified, Expected::Pristine).await;
     let vendored: BTreeSet<&str> = targets.iter().map(|t| t.purl.as_str()).collect();
-    let detail = if tally.stale_left > 0 {
-        format!(
-            "vendored {} hosted-pinned packages, but node_modules still holds {} copies of the \
-             hosted artifacts; run `vlt install` (or re-run without --no-vlt-install-cleanup)",
-            vendored.len(),
-            tally.stale_left + tally.optional_left
-        )
-    } else if tally.optional_left > 0 {
-        format!(
-            "vendored {} hosted-pinned packages, but node_modules still holds {} copies of the \
-             hosted artifacts of optional dependencies; {OPTIONAL_KEPT}",
-            vendored.len(),
-            tally.optional_left
-        )
-    } else if tally.undeterminable > 0 {
-        undeterminable_detail(tally.undeterminable)
-    } else if tally.invalidated > 0 {
-        format!(
-            "vendored {} hosted-pinned packages; removed their hosted installed copies, so \
-             node_modules is incomplete until you run `vlt install`",
-            vendored.len()
-        )
-    } else {
-        return None;
-    };
-    Some(detail)
+    takeover_detail(&tally, vendored.len())
 }
 
 #[cfg(test)]
@@ -548,11 +598,100 @@ mod tests {
         assert!(reinstall_detail(&tally).contains("socket-patch removed 2 stale installed copies"));
         tally.undeterminable = 1;
         assert!(reinstall_detail(&tally).contains("could not check 1 installed copies"));
-        tally.optional_left = 2;
-        assert!(reinstall_detail(&tally)
-            .contains("still holds 2 unpatched copies of optional dependencies; socket-patch"));
         tally.stale_left = 3;
-        assert!(reinstall_detail(&tally).contains("still holds 5 unpatched copies and"));
+        assert!(reinstall_detail(&tally).contains("still holds 3 unpatched copies and"));
+    }
+
+    #[test]
+    fn kept_optional_copies_are_reported_alongside_every_variant() {
+        let optional = |invalidated, stale_left, undeterminable| HealTally {
+            invalidated,
+            stale_left,
+            optional_left: 2,
+            undeterminable,
+            ..HealTally::default()
+        };
+        let also = |held: &str| format!("node_modules also still holds 2 {held}; {OPTIONAL_KEPT}");
+        let unpatched = also("unpatched copies of optional dependencies");
+        let patched = also("patched copies of optional dependencies");
+        let hosted = also("copies of the hosted artifacts of optional dependencies");
+
+        assert_eq!(
+            reinstall_detail(&optional(0, 0, 0)),
+            format!(
+                "vlt-lock.json pins Socket-patched packages, but node_modules still holds 2 \
+                 unpatched copies of optional dependencies; {OPTIONAL_KEPT}"
+            )
+        );
+        assert_eq!(
+            reinstall_detail(&optional(3, 0, 0)),
+            format!(
+                "vlt-lock.json pins Socket-patched packages; socket-patch removed 3 stale \
+                 installed copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), \
+                 so node_modules is incomplete until you run `vlt install` (or `vlt ci`), which \
+                 installs the patched packages. {unpatched}{VLT_UPDATE_NOTE}"
+            )
+        );
+        assert_eq!(
+            reinstall_detail(&optional(0, 1, 0)),
+            format!(
+                "vlt-lock.json pins Socket-patched packages, but node_modules still holds 1 \
+                 unpatched copies and `vlt install` will not refresh them; run `vlt ci` (or \
+                 re-run without --no-vlt-install-cleanup). {unpatched}"
+            )
+        );
+        assert_eq!(
+            reinstall_detail(&optional(0, 0, 1)),
+            format!("{} {unpatched}", undeterminable_detail(1))
+        );
+
+        assert_eq!(
+            rollback_detail(&optional(0, 0, 0), 1).unwrap(),
+            format!(
+                "restored registry pins for 1 packages, but node_modules still holds 2 patched \
+                 copies of optional dependencies; {OPTIONAL_KEPT}"
+            )
+        );
+        assert_eq!(
+            rollback_detail(&optional(1, 0, 0), 2).unwrap(),
+            format!(
+                "restored registry pins for 2 packages; removed 1 patched installed copies, so \
+                 node_modules is incomplete until you run `vlt install` (or `vlt ci`). {patched}"
+            )
+        );
+        assert_eq!(
+            rollback_detail(&optional(0, 1, 0), 2).unwrap(),
+            format!(
+                "restored registry pins for 2 packages, but node_modules still holds 1 patched \
+                 copies and `vlt install` will not refresh them; run `vlt ci` (or re-run \
+                 without --no-vlt-install-cleanup). {patched}"
+            )
+        );
+        assert_eq!(rollback_detail(&HealTally::default(), 1), None);
+
+        assert_eq!(
+            takeover_detail(&optional(0, 0, 0), 1).unwrap(),
+            format!(
+                "vendored 1 hosted-pinned packages, but node_modules still holds 2 copies of the \
+                 hosted artifacts of optional dependencies; {OPTIONAL_KEPT}"
+            )
+        );
+        assert_eq!(
+            takeover_detail(&optional(1, 0, 0), 2).unwrap(),
+            format!(
+                "vendored 2 hosted-pinned packages; removed 1 hosted installed copies, so \
+                 node_modules is incomplete until you run `vlt install`. {hosted}"
+            )
+        );
+        assert_eq!(
+            takeover_detail(&optional(0, 1, 0), 2).unwrap(),
+            format!(
+                "vendored 2 hosted-pinned packages, but node_modules still holds 1 copies of the \
+                 hosted artifacts; run `vlt install` (or re-run without \
+                 --no-vlt-install-cleanup). {hosted}"
+            )
+        );
+        assert_eq!(takeover_detail(&HealTally::default(), 1), None);
     }
 
     fn left_pad_dep(url: &str) -> DepOverride {
diff --git a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
index 997b808b..23174b1f 100644
--- a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
@@ -989,7 +989,12 @@ async fn scan_redirect_vlt_heal_removes_the_prod_instance_keeps_the_optional_one
         std::fs::read(store_dir(tmp.path(), optional).join("index.js")).unwrap(),
         PRISTINE
     );
-    assert_eq!(warning_detail(&doc, ADVISORY), advisory_optional_kept(1));
+    let also = also_optional_kept(1, "unpatched copies of optional dependencies");
+    assert_eq!(
+        warning_detail(&doc, ADVISORY),
+        advisory_invalidated(1).replace(" Note:", &format!(" {also} Note:")),
+        "the removal and the kept optional copy are both reported"
+    );
 
     let (_, skipped) = {
         let tmp = tempfile::tempdir().unwrap();
@@ -998,8 +1003,8 @@ async fn scan_redirect_vlt_heal_removes_the_prod_instance_keeps_the_optional_one
     };
     assert_eq!(
         warning_detail(&skipped, ADVISORY),
-        advisory_cleanup_skipped(2),
-        "a skipped cleanup counts every unpatched copy"
+        format!("{} {also}", advisory_cleanup_skipped(1)),
+        "a skipped cleanup counts the removable copy and reports the optional one"
     );
 }
 
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
index f2560f71..eef67fa6 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
@@ -193,20 +193,31 @@ async fn vlt_rollback_of_a_pristine_tree_keeps_it() {
 /// A hosted scan of a project whose left-pad node is optional (`flags`),
 /// followed by vlt's warm install of the pin.
 async fn hosted_optional_project(root: &Path, flags: u8) -> MockServer {
+    hosted_flagged_project(root, &[(TILDE_ID, flags)]).await
+}
+
+/// A hosted scan of a project with left-pad instances `nodes` (each
+/// `(DepID, flags)`), followed by vlt's warm install of the pins.
+async fn hosted_flagged_project(root: &Path, nodes: &[(&str, u8)]) -> MockServer {
     let server = MockServer::start().await;
     mock_all(&server).await;
     write_vlt_project(root, Era::V1);
-    let registry = with_flags(&registry_node(TILDE_ID), flags);
-    std::fs::write(root.join("vlt-lock.json"), vlt_lock(Era::V1, &[registry])).unwrap();
+    let registry: Vec<String> = nodes
+        .iter()
+        .map(|(id, flags)| with_flags(&registry_node(id), *flags))
+        .collect();
+    std::fs::write(root.join("vlt-lock.json"), vlt_lock(Era::V1, &registry)).unwrap();
     let (_, doc) = scan_hosted(root, &server, &[], &[]);
     assert_eq!(redirected(&doc), 1, "{doc:#}");
-    let pinned = with_flags(&pinned_node(TILDE_ID, &server), flags);
-    assert_eq!(
-        read(root, "vlt-lock.json"),
-        vlt_lock(Era::V1, std::slice::from_ref(&pinned))
-    );
-    install_store(root, TILDE_ID, PATCHED);
-    write_hidden_lock(root, &[pinned]);
+    let pinned: Vec<String> = nodes
+        .iter()
+        .map(|(id, flags)| with_flags(&pinned_node(id, &server), *flags))
+        .collect();
+    assert_eq!(read(root, "vlt-lock.json"), vlt_lock(Era::V1, &pinned));
+    for (id, _) in nodes {
+        install_store(root, id, PATCHED);
+    }
+    write_hidden_lock(root, &pinned);
     server
 }
 
@@ -246,6 +257,67 @@ async fn vlt_rollback_keeps_a_patched_optional_copy() {
     }
 }
 
+#[tokio::test]
+async fn vlt_rollback_removes_the_prod_copy_keeps_the_optional_one() {
+    let optional = "~npm~left-pad@1.3.0~peer.2";
+    let nodes = [(TILDE_ID, 0), (optional, 1)];
+    let also = also_optional_kept(1, "patched copies of optional dependencies");
+    let removed = format!(
+        "restored registry pins for 1 packages; removed 1 patched installed copies, so \
+         node_modules is incomplete until you run `vlt install` (or `vlt ci`). {also}"
+    );
+    let skipped = format!(
+        "restored registry pins for 1 packages, but node_modules still holds 1 patched copies \
+         and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
+         --no-vlt-install-cleanup). {also}"
+    );
+    for (verb, extra, cleaned) in [
+        ("rollback", &[][..], true),
+        ("rollback", &["--no-vlt-install-cleanup"][..], false),
+        ("remove", &[PURL][..], true),
+        ("remove", &[PURL, "--no-vlt-install-cleanup"][..], false),
+    ] {
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let _server = hosted_flagged_project(root, &nodes).await;
+        let expected = if cleaned { &removed } else { &skipped };
+
+        let (_, doc) = run_verb(root, verb, extra);
+
+        assert_eq!(
+            read(root, "vlt-lock.json"),
+            vlt_lock(
+                Era::V1,
+                &[
+                    registry_node(TILDE_ID),
+                    with_flags(&registry_node(optional), 1)
+                ]
+            ),
+            "{verb} {extra:?}"
+        );
+        assert_eq!(
+            advisory_details(&doc),
+            [expected.clone()],
+            "{verb} {extra:?}: {doc:#}"
+        );
+        assert_eq!(
+            store_dir(root, TILDE_ID).exists(),
+            !cleaned,
+            "{verb} {extra:?}"
+        );
+        assert_eq!(
+            root.join("node_modules/.vlt-lock.json").exists(),
+            !cleaned,
+            "{verb} {extra:?}"
+        );
+        assert_eq!(
+            std::fs::read(store_dir(root, optional).join("index.js")).unwrap(),
+            PATCHED,
+            "the optional copy is kept: {verb} {extra:?}"
+        );
+    }
+}
+
 /// Once vlt re-locked the package, the healed DepID is gone from the lock,
 /// so the heal goes by the flags the ledger recorded for it.
 #[tokio::test]
diff --git a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
index 291c0dd8..a10d08a0 100644
--- a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
@@ -69,8 +69,9 @@ pub fn advisory_undeterminable(n: usize) -> String {
 /// Why the heal keeps stale optional copies, shared by every heal's detail.
 pub const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does \
      not reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run \
-     `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of \
-     a project that declares only optional dependencies.";
+     `vlt install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     project that declares only optional dependencies, so there both commands remove the \
+     installed copy: upgrade vlt to 1.0.5 or later first.";
 
 pub fn advisory_optional_kept(n: usize) -> String {
     format!(
@@ -79,6 +80,12 @@ pub fn advisory_optional_kept(n: usize) -> String {
     )
 }
 
+/// The sentence a heal's detail gains for `n` kept optional copies
+/// (`held` names them).
+pub fn also_optional_kept(n: usize, held: &str) -> String {
+    format!("node_modules also still holds {n} {held}; {OPTIONAL_KEPT}")
+}
+
 /// `line` (a [`node`]) with slot [0] set to `flags`.
 pub fn with_flags(line: &str, flags: u8) -> String {
     line.replacen("[0,", &format!("[{flags},"), 1)

From 85fffcceb8b1540a6610692a1710d1e7a2206bc8 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 07:25:56 -0400
Subject: [PATCH 25/46] Prove vlt support against real vlt releases

vlt users get hosted, vendored and agent-mode patches that are checked
against the real vlt releases they run, not only against hand-written
lockfiles. Five new capstone suites install projects with the vlt under
test and let vlt itself install what socket-patch wrote: fresh-checkout
`vlt ci`, frozen and ordinary installs, tamper and warm-cache cases,
rollback and heal, optional dependencies, registry shapes, takeovers
between modes, the Linux hardlinked global store, the setup hook and
the npm launcher. Two production legs prove the flow against the live
patch service (the hosted one refuses cleanly while the server still
re-encodes artifacts).

Every leg reports whether it ran or why it skipped, and
scripts/check-vlt-legs.py fails a run that skipped something it should
have run, so a CI row can no longer pass without testing anything. The
expected skips come from the release table in
docs/testing/vlt-compatibility.md, which records the vlt behavior
boundaries measured on every supported release.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/Cargo.toml            |    4 +
 .../tests/common/cache_env.rs                 |   83 +
 crates/socket-patch-cli/tests/common/mod.rs   |   23 +
 .../socket-patch-cli/tests/docker_e2e_npm.rs  |   37 +
 .../tests/e2e_hosted_production.rs            |  107 +-
 .../tests/e2e_redirect_vlt_build.rs           | 1505 ++++++++++
 .../socket-patch-cli/tests/e2e_safety_vlt.rs  |  503 ++++
 .../tests/e2e_vendor_vlt_build.rs             | 1020 +++++++
 .../tests/e2e_vendored_production.rs          |   77 +-
 crates/socket-patch-cli/tests/e2e_vlt.rs      |  763 +++++
 .../tests/mode_migration_vlt.rs               |  850 ++++++
 .../tests/vlt-leg-manifest.json               | 1007 +++++++
 .../tests/vlt_e2e_common/fixture.rs           |  515 ++++
 .../tests/vlt_e2e_common/mod.rs               | 2444 +++++++++++++++++
 docs/testing/vlt-compatibility.md             |  145 +
 scripts/check-vlt-legs.py                     |  419 +++
 scripts/tests/test_check_vlt_legs.py          |  240 ++
 17 files changed, 9735 insertions(+), 7 deletions(-)
 create mode 100644 crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
 create mode 100644 crates/socket-patch-cli/tests/e2e_safety_vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
 create mode 100644 crates/socket-patch-cli/tests/e2e_vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/mode_migration_vlt.rs
 create mode 100644 crates/socket-patch-cli/tests/vlt-leg-manifest.json
 create mode 100644 crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
 create mode 100644 crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
 create mode 100644 docs/testing/vlt-compatibility.md
 create mode 100755 scripts/check-vlt-legs.py
 create mode 100644 scripts/tests/test_check_vlt_legs.py

diff --git a/crates/socket-patch-cli/Cargo.toml b/crates/socket-patch-cli/Cargo.toml
index 00046ebe..a24e10f8 100644
--- a/crates/socket-patch-cli/Cargo.toml
+++ b/crates/socket-patch-cli/Cargo.toml
@@ -82,3 +82,7 @@ serial_test = { workspace = true }
 # assert the lock_held exit-code contract. Same crate the binary
 # uses internally (`socket-patch-core::patch::apply_lock`).
 fs2 = { workspace = true }
+
+[target.'cfg(windows)'.dev-dependencies]
+# `e2e_safety_vlt` reads hardlink counts and file indexes.
+windows-sys = { workspace = true, features = ["Win32_Foundation", "Win32_Storage_FileSystem"] }
diff --git a/crates/socket-patch-cli/tests/common/cache_env.rs b/crates/socket-patch-cli/tests/common/cache_env.rs
index 2c0dea12..8ba1f587 100644
--- a/crates/socket-patch-cli/tests/common/cache_env.rs
+++ b/crates/socket-patch-cli/tests/common/cache_env.rs
@@ -292,6 +292,37 @@ pub fn scrub_ambient_bun_env(cmd: &mut Command) {
     }
 }
 
+// ── Ambient-env scrub for the vlt suites ──────────────────────────────
+
+/// True for an ambient variable the real-vlt suites strip from every child
+/// (vlt and the CLI under test) before [`isolate`]:
+///
+/// * every `VLT_*` — vlt reads each config option from `VLT_<OPTION>`
+///   (`VLT_REGISTRY`, `VLT_REGISTRIES`, `VLT_CACHE`, `VLT_STORE_LINKER`);
+///   the harness re-applies its own knobs after the scrub;
+/// * `SOCKET_*` except `SOCKET_NO_CONFIG` and the harness's own
+///   `SOCKET_PATCH_VLT_E2E_*` gate variables;
+/// * `npm_config_*` case-insensitively and `VIRTUAL_ENV`, as for bun.
+pub fn is_ambient_vlt_var(name: &str) -> bool {
+    if name.starts_with("SOCKET_PATCH_VLT_E2E_") {
+        return false;
+    }
+    name.starts_with("VLT_")
+        || (name.starts_with("SOCKET_") && name != "SOCKET_NO_CONFIG")
+        || name.to_ascii_lowercase().starts_with("npm_config_")
+        || name == "VIRTUAL_ENV"
+}
+
+/// Remove every [`is_ambient_vlt_var`] variable of the PARENT environment
+/// from `cmd` (call it before [`isolate`], see the module docs).
+pub fn scrub_ambient_vlt_env(cmd: &mut Command) {
+    for (k, _) in std::env::vars_os() {
+        if is_ambient_vlt_var(&k.to_string_lossy()) {
+            cmd.env_remove(&k);
+        }
+    }
+}
+
 // ── Self-tests ────────────────────────────────────────────────────────
 //
 // Integration-test crates do not get `cfg(test)`, so — exactly as in
@@ -370,6 +401,58 @@ mod cache_env_selftests {
         );
     }
 
+    #[test]
+    fn ambient_vlt_scrub_covers_vlt_config_and_keeps_the_harness_gates() {
+        for name in [
+            "VLT_REGISTRY",
+            "VLT_REGISTRIES",
+            "VLT_CACHE",
+            "VLT_STORE_LINKER",
+            "VLT_TELEMETRY",
+            "npm_config_registry",
+            "NPM_CONFIG_REGISTRY",
+            "SOCKET_API_TOKEN",
+            "SOCKET_NO_VLT_INSTALL_CLEANUP",
+            "SOCKET_PATCH_BUN_E2E_JS",
+            "VIRTUAL_ENV",
+        ] {
+            assert!(is_ambient_vlt_var(name), "{name} must be scrubbed");
+        }
+        for name in [
+            "SOCKET_NO_CONFIG",
+            "SOCKET_PATCH_VLT_E2E_JS",
+            "SOCKET_PATCH_VLT_E2E_VERSION",
+            "SOCKET_PATCH_VLT_E2E_REQUIRED",
+            "SOCKET_PATCH_VLT_E2E_STORE_LINKER",
+            "PATH",
+            "HOME",
+            "XDG_CONFIG_HOME",
+            "NODE_OPTIONS_X",
+        ] {
+            assert!(!is_ambient_vlt_var(name), "{name} must survive the scrub");
+        }
+    }
+
+    #[test]
+    fn ambient_vlt_scrub_removes_only_matching_parent_vars() {
+        let mut cmd = Command::new("true");
+        scrub_ambient_vlt_env(&mut cmd);
+        let removed: Vec<String> = cmd
+            .get_envs()
+            .filter(|(_, value)| value.is_none())
+            .map(|(name, _)| name.to_string_lossy().into_owned())
+            .collect();
+        for name in &removed {
+            assert!(is_ambient_vlt_var(name), "{name} was removed");
+        }
+        for (name, _) in std::env::vars_os() {
+            let name = name.to_string_lossy();
+            if is_ambient_vlt_var(&name) {
+                assert!(removed.iter().any(|r| *r == name), "{name} kept");
+            }
+        }
+    }
+
     /// The variables whose whole point is that they outrank `HOME`. A future
     /// edit that drops one would silently restore the leak this module
     /// exists to close, and nothing else in the suite would notice.
diff --git a/crates/socket-patch-cli/tests/common/mod.rs b/crates/socket-patch-cli/tests/common/mod.rs
index ae032d19..8d0ddc30 100644
--- a/crates/socket-patch-cli/tests/common/mod.rs
+++ b/crates/socket-patch-cli/tests/common/mod.rs
@@ -217,6 +217,29 @@ pub fn cargo_run(cwd: &Path, args: &[&str], extra_env: &[(&str, &str)]) -> Outpu
     cmd.output().expect("failed to run cargo")
 }
 
+/// Run the vlt at `vlt_js` (`node --no-warnings <vlt.js> <args>`) in
+/// `cwd`: ambient vlt/npm/socket config scrubbed, caches sandboxed,
+/// telemetry off and the `C` locale (vlt's edge order follows it), then
+/// `extra_env`. Spawning `node` directly keeps Windows off the `vlt.cmd`
+/// shim `Command::new` cannot see.
+pub fn vlt_run(cwd: &Path, vlt_js: &Path, args: &[&str], extra_env: &[(&str, &str)]) -> Output {
+    let mut cmd = Command::new("node");
+    cmd.arg("--no-warnings")
+        .arg(vlt_js)
+        .args(args)
+        .current_dir(cwd);
+    cache_env::scrub_ambient_vlt_env(&mut cmd);
+    cache_env::isolate(&mut cmd);
+    cmd.env("VLT_TELEMETRY", "0")
+        .env("NO_COLOR", "1")
+        .env("LANG", "C")
+        .env("LC_ALL", "C");
+    for (k, v) in extra_env {
+        cmd.env(k, v);
+    }
+    cmd.output().expect("failed to run node vlt.js")
+}
+
 fn run_toolchain(cwd: &Path, exe: &str, args: &[&str], extra_env: &[(&str, &str)]) {
     let mut cmd = Command::new(exe);
     cmd.args(args).current_dir(cwd);
diff --git a/crates/socket-patch-cli/tests/docker_e2e_npm.rs b/crates/socket-patch-cli/tests/docker_e2e_npm.rs
index 7848d071..d1578d47 100644
--- a/crates/socket-patch-cli/tests/docker_e2e_npm.rs
+++ b/crates/socket-patch-cli/tests/docker_e2e_npm.rs
@@ -1037,6 +1037,43 @@ async fn npm_berry_vendor_frozen_install_chain() {
     assert!(stdout.contains("===E2E PASS==="), "stdout=\n{stdout}");
 }
 
+/// The npm image carries vlt 1.2.0 for the setup-matrix `pm: vlt` cases
+/// (a non-gating extra: the gating vlt assertions are the real-vlt
+/// capstones).
+#[test]
+fn npm_image_vlt_smoke() {
+    let out = if host_mode() {
+        Command::new("vlt").arg("--version").output()
+    } else {
+        if skip_if_no_docker_image() {
+            return;
+        }
+        Command::new("docker")
+            .args([
+                "run",
+                "--rm",
+                "socket-patch-test-npm:latest",
+                "bash",
+                "-c",
+                "VLT_TELEMETRY=0 vlt --version",
+            ])
+            .output()
+    };
+    let Ok(out) = out else {
+        eprintln!("skipping: vlt is not on PATH");
+        return;
+    };
+    assert!(
+        out.status.success(),
+        "vlt --version failed: {}",
+        String::from_utf8_lossy(&out.stderr)
+    );
+    let version = String::from_utf8_lossy(&out.stdout);
+    if !host_mode() {
+        assert_eq!(version.trim(), "1.2.0", "the image pins vlt 1.2.0");
+    }
+}
+
 /// Smoke test: verify the test infrastructure starts up correctly. This
 /// runs even without Docker so the test binary itself compiles + the
 /// wiremock listener path works.
diff --git a/crates/socket-patch-cli/tests/e2e_hosted_production.rs b/crates/socket-patch-cli/tests/e2e_hosted_production.rs
index 29b12b2a..7d55f119 100644
--- a/crates/socket-patch-cli/tests/e2e_hosted_production.rs
+++ b/crates/socket-patch-cli/tests/e2e_hosted_production.rs
@@ -86,8 +86,6 @@ use std::process::{Command, Output};
 
 use socket_patch_cli::args::{GLOBAL_ARG_ENV_VARS, LOCAL_ARG_ENV_VARS};
 
-#[path = "common/cache_env.rs"]
-mod cache_env;
 #[path = "npm_e2e_common/manifestless.rs"]
 mod npm_e2e_common;
 #[path = "vex_e2e_common/mod.rs"]
@@ -100,6 +98,10 @@ mod yarn_classic_vex;
 mod uv_vex;
 #[path = "vex_pipenv_pip_steps/mod.rs"]
 mod vex_pipenv_pip_steps;
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+
+use vlt_e2e_common::cache_env;
 
 // ---------------------------------------------------------------------------
 // Production endpoints + required-patch catalog
@@ -2559,3 +2561,104 @@ async fn canary_unpublished_ecosystems() {
     }
     println!("NOTE canary_unpublished_ecosystems: {msg}");
 }
+
+// ---------------------------------------------------------------------------
+// vlt (suite `production`, DESIGN §8.3)
+// ---------------------------------------------------------------------------
+
+/// `SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED=1`: the serve fix is
+/// deployed, so a content-encoded artifact is a failure, not a pinned
+/// refusal.
+fn vlt_hosted_production_required() -> bool {
+    std::env::var("SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED").is_ok_and(|v| v == "1")
+}
+
+/// The vlt install proof against production. The artifact is fetched the
+/// way vlt fetches it (`fetch_artifact_probe`): while patch.socket.dev
+/// re-encodes it, the scan must refuse cleanly
+/// (`redirect_vlt_artifact_unverifiable`, nothing written); once it serves
+/// identity bytes, the lock pins it and a fresh checkout's `vlt ci`
+/// installs the patched minimist. So the test neither breaks nor goes
+/// vacuous when the serve fix deploys.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "live production API + real npm registry + real vlt. Run with --ignored."]
+async fn vlt_pinned_matrix_production_hosted_install_proof() {
+    use vlt_e2e_common::*;
+    if strict() && std::env::var_os("SOCKET_PATCH_VLT_E2E_JS").is_none() {
+        panic!("STRICT: vlt_pinned_matrix_production_hosted_install_proof needs SOCKET_PATCH_VLT_E2E_JS");
+    }
+    let Some(leg) = Leg::start("production", "hosted_install_proof") else {
+        return;
+    };
+    let npmjs = "https://registry.npmjs.org/";
+    let proj = leg.dir("proj");
+    write(
+        &proj.join("package.json"),
+        package_json("vlt-prod", &[(NPM_NAME, NPM_VERSION)]),
+    );
+    write_vlt_json(&proj, leg.version(), npmjs, &VltJson::default());
+    leg.vlt_ok(&proj, &["install"]);
+    assert_pristine(
+        &minimist_entry(&proj),
+        PATCH_MARKER,
+        "vlt hosted production",
+    );
+    let lock_before = lock_bytes(&proj);
+    std::fs::remove_dir_all(proj.join("node_modules")).unwrap();
+    let cwd = proj.to_str().unwrap().to_string();
+    let out = socket(
+        &proj,
+        &["scan", "--mode", "hosted", "--json", "--yes", "--cwd", &cwd],
+        &[],
+    );
+    let doc = out.json();
+    let lock = read_lock(&proj);
+    let id = node_id(&lock, NPM_NAME, NPM_VERSION);
+    let pinned_url = lock["nodes"][&id][3].as_str().map(str::to_string);
+    let url = match pinned_url.filter(|u| u.contains(PATCH_HOST)) {
+        Some(u) => u,
+        None => {
+            let detail = warning_detail(&doc, "redirect_vlt_artifact_unverifiable");
+            let rest = detail
+                .strip_prefix("vlt would fail to verify ")
+                .unwrap_or_else(|| panic!("{detail}"));
+            rest.split(": ").next().unwrap().to_string()
+        }
+    };
+    assert!(url.contains(NPM_UUID), "{url}");
+    let client = reqwest::Client::builder().build().unwrap();
+    let probe =
+        socket_patch_core::patch::redirect::vlt_preflight::fetch_artifact_probe(&client, &url)
+            .await;
+    let encoded = probe
+        .content_encoding
+        .as_deref()
+        .is_some_and(|e| !e.trim().is_empty() && !e.trim().eq_ignore_ascii_case("identity"));
+    if encoded {
+        assert!(
+            !vlt_hosted_production_required(),
+            "patch.socket.dev still serves {url} content-encoded ({:?}) but \
+             SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED=1",
+            probe.content_encoding
+        );
+        let detail = warning_detail(&doc, "redirect_vlt_artifact_unverifiable");
+        assert!(
+            detail.contains("content-encoding") && detail.contains("nothing was written"),
+            "{detail}"
+        );
+        assert_eq!(lock_bytes(&proj), lock_before, "the refusal writes nothing");
+        assert!(!proj.join(".socket/vendor/redirect-state.json").exists());
+        eprintln!("vlt hosted production: artifact content-encoded; clean refusal pinned");
+    } else {
+        assert_eq!(out.code, 0, "{out}");
+        assert_eq!(
+            lock["nodes"][&id][2].as_str(),
+            probe.sha512.as_deref(),
+            "{lock:#}"
+        );
+        let co = fresh_checkout(&proj, &leg.root.join("fresh"));
+        leg.vlt_ok_with(&co, &leg.locked_install_args(), &VltRun::profile("fresh"));
+        assert_patched(&minimist_entry(&co), PATCH_MARKER, "vlt hosted production");
+    }
+    leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
new file mode 100644
index 00000000..5e1f44d4
--- /dev/null
+++ b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
@@ -0,0 +1,1505 @@
+//! Real-vlt hosted capstone (suite `hosted`, DESIGN §8.3).
+//!
+//! Every leg installs a project with the REAL vlt under test against the
+//! harness's local npm registry, publishes a patch on the mock patch
+//! service (its artifact built from the registry bytes), runs the real
+//! `socket-patch` hosted flow, and then lets vlt itself install from the
+//! rewritten `vlt-lock.json`. Each leg is `vlt_pinned_matrix_hosted_<leg>`
+//! and prints one `VLT-LEG` line (see `vlt_e2e_common`). The legs each era
+//! skips, and why, are the `hosted` rows of `vlt-leg-manifest.json`.
+//!
+//! Run: `SOCKET_PATCH_VLT_E2E_JS=<vlt.js> cargo test -p socket-patch-cli
+//! --test e2e_redirect_vlt_build -- --include-ignored vlt_pinned_matrix`.
+
+use std::path::Path;
+
+use serde_json::{json, Value};
+
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+#[path = "vex_e2e_common/vlt.rs"]
+mod vlt_vex;
+
+use vlt_e2e_common::fixture::*;
+use vlt_e2e_common::*;
+
+const SUITE: &str = "hosted";
+
+fn hosted_leg(name: &'static str) -> Option<Leg> {
+    Leg::start(SUITE, name)
+}
+
+// ── drivers and fresh checkouts ───────────────────────────────────────────
+
+/// `scan --mode hosted --vex`: the lock pins the artifact (one preflight
+/// GET), in-run VEX attests it unless a lock-level warning withholds it,
+/// and a fresh checkout's locked install lands the patched bytes with the
+/// lock byte-stable.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_scan_fresh_ci() {
+    let Some(leg) = hosted_leg("scan_fresh_ci") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let out = fx.scan_vex(&[]);
+    let doc = out.json();
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    fx.assert_lock_warnings(&doc);
+    fx.assert_in_run_vex(&out, fx.t(), fx.in_run_vex_attests());
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    assert_eq!(fx.svc.artifact_hits(fx.t()).await, 1, "one preflight GET");
+    fx.assert_fresh_locked_install("fresh-ci");
+    fx.leg.ran();
+}
+
+/// The fresh checkout's frozen install and `vlt ci` succeed with every
+/// registry route answering 404: the patched bytes come from the hosted
+/// URL alone.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_frozen_dead_registry() {
+    let Some(leg) = hosted_leg("frozen_dead_registry") else {
+        return;
+    };
+    if !leg.at_least(HAS_CI_FROM) {
+        return leg.skip("no-vlt-ci");
+    }
+    if !hermetic_registry(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    fx.reg.kill().await;
+    for (name, args) in [
+        ("frozen", vec!["install", "--frozen-lockfile"]),
+        ("ci", vec!["ci"]),
+    ] {
+        let co = fx.checkout(name);
+        let before = lock_bytes(&co);
+        fx.vlt_ok_profile(&co, &args, name);
+        assert_eq!(state(&co, fx.t()), State::Patched, "{name}");
+        assert_eq!(lock_bytes(&co), before, "{name} keeps the lock");
+    }
+    assert!(
+        fx.reg.requests().await.is_empty(),
+        "the dead registry saw requests: {:?}",
+        fx.reg.requests().await
+    );
+    fx.leg.ran();
+}
+
+/// A plain `vlt install` of the fresh checkout installs the patched bytes
+/// and leaves the rewritten lock byte-identical.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_ordinary_install_stable() {
+    let Some(leg) = hosted_leg("ordinary_install_stable") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    let co = fx.checkout("ordinary");
+    let before = lock_bytes(&co);
+    fx.vlt_ok_profile(&co, &["install"], "ordinary");
+    assert_eq!(state(&co, fx.t()), State::Patched);
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(&co)),
+        String::from_utf8_lossy(&before)
+    );
+    fx.leg.ran();
+}
+
+/// `get <uuid> --mode hosted` lands the same rewrite; no manifest or
+/// blobs are written.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_get_uuid_fresh_ci() {
+    let Some(leg) = hosted_leg("get_uuid_fresh_ci") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let doc = get_hosted(&fx.proj, &fx.svc, UUID, &[]);
+    assert_eq!(doc["redirect"]["mode"], "hosted", "{doc:#}");
+    assert!(warning_detail(&doc, ADVISORY).starts_with("vlt-lock.json pins"));
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    assert!(!fx.proj.join(".socket/manifest.json").exists());
+    assert!(!fx.proj.join(".socket/blobs").exists());
+    fx.assert_fresh_locked_install("fresh-get");
+    fx.leg.ran();
+}
+
+/// The artifact URL serves different (valid) bytes than the pinned
+/// sha512: a cold-cache locked install fails `EINTEGRITY`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_tamper_cold_eintegrity() {
+    let Some(leg) = hosted_leg("tamper_cold_eintegrity") else {
+        return;
+    };
+    if !integrity_enforced(leg.version()) {
+        return leg.skip("integrity-unenforced");
+    }
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    let t = fx.t().clone();
+    let mut files = t.patched_files();
+    files.insert(
+        t.file.clone(),
+        [TAMPER_MARKER, t.before.as_slice()].concat(),
+    );
+    fx.svc.serve_artifact(&t, build_tgz(&files), 1).await;
+    let co = fx.checkout("tampered");
+    let out = fx.vlt_profile(&co, &fx.leg.locked_install_args(), "tampered-cold");
+    assert!(
+        !out.status.success(),
+        "a tampered artifact must fail the install: {}",
+        out_text(&out)
+    );
+    let text = out_text(&out);
+    assert!(
+        text.contains("EINTEGRITY") || text.to_lowercase().contains("integrity"),
+        "{text}"
+    );
+    assert_ne!(state(&co, &t), State::Tampered, "tampered bytes installed");
+    fx.leg.ran();
+}
+
+// ── rollback, rerun, heal ─────────────────────────────────────────────────
+
+/// Rollback restores the lock byte-for-byte, heals the patched store copy
+/// (and nothing else), and the next `vlt install` is pristine.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_rollback_byte_exact() {
+    let Some(leg) = hosted_leg("rollback_byte_exact") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    fx.scan(&[]);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(&fx.proj)),
+        String::from_utf8_lossy(&fx.lock_before),
+        "rollback restores vlt-lock.json byte-for-byte"
+    );
+    assert!(fx.ledger().is_none(), "the ledger is gone");
+    fx.assert_advisory(&doc, &advisory_rolled_back(1));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} healed");
+    }
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the rollback heal");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    fx.leg.ran();
+}
+
+/// A second scan of an already-patched, installed project changes
+/// nothing: the lock and ledger stay byte-identical and nothing is healed.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_rerun_noop() {
+    let Some(leg) = hosted_leg("rerun_noop") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    fx.scan(&[]);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let lock = lock_bytes(&fx.proj);
+    let ledger = fx.ledger();
+    let snap = fx.snapshot(&fx.proj, &[]);
+    let doc = fx.scan(&[]);
+    assert_eq!(lock_bytes(&fx.proj), lock, "rerun keeps the lock");
+    assert_eq!(fx.ledger(), ledger, "rerun keeps the ledger");
+    fx.assert_advisory(&doc, &advisory_nothing_stale());
+    snap.assert_same(&fx.snapshot(&fx.proj, &[]), "a healthy rerun");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// A warm pristine tree: the scan removes the stale store entry and the
+/// hidden lock (nothing else), and a plain `vlt install` is then patched.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_warm_tree_invalidates() {
+    let Some(leg) = hosted_leg("warm_tree_invalidates") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
+    }
+    assert!(!hidden_lock_exists(&fx.proj), "hidden lock removed");
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the heal");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// `--no-vlt-install-cleanup`: the stale copy stays, advisory (iii),
+/// in-run VEX withheld, a plain `vlt install` keeps it stale (vlt trusts
+/// its hidden lock), and `vlt ci` installs the patch.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_no_cleanup_stays_stale() {
+    let Some(leg) = hosted_leg("no_cleanup_stays_stale") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad().warm()).await;
+    let out = fx.scan_vex(&["--no-vlt-install-cleanup"]);
+    let doc = out.json();
+    fx.assert_advisory(&doc, &advisory_cleanup_skipped(1));
+    fx.assert_in_run_vex(&out, fx.t(), false);
+    for id in fx.store_ids(fx.t()) {
+        assert!(store_entry(&fx.proj, &id).exists(), "{id} kept");
+    }
+    fx.vlt_ok(&fx.proj, &["install"]);
+    let want = if plain_install_refreshes_stale(fx.leg.version()) {
+        State::Patched
+    } else {
+        State::Pristine
+    };
+    assert_eq!(
+        state(&fx.proj, fx.t()),
+        want,
+        "vlt install does not refresh a stale installed copy (0.0.0-14 does)"
+    );
+    if fx.leg.at_least(HAS_CI_FROM) {
+        fx.vlt_ok(&fx.proj, &["ci"]);
+        assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    }
+    fx.leg.ran();
+}
+
+/// Heal rule (b): the hidden lock parses but has no node for the target.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_heal_rule_b_hidden_lock_without_node() {
+    let Some(leg) = hosted_leg("heal_rule_b_hidden_lock_without_node") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    if !hidden_lock_exists(&fx.proj) {
+        panic!(
+            "vlt {} wrote no hidden lock; the manifest must skip this leg",
+            fx.leg.tc.raw
+        );
+    }
+    let ids = fx.store_ids(fx.t());
+    let hidden = fx.proj.join(HIDDEN_LOCK);
+    let mut doc: Value = serde_json::from_slice(&std::fs::read(&hidden).unwrap()).unwrap();
+    for id in &ids {
+        doc["nodes"].as_object_mut().unwrap().remove(id);
+    }
+    std::fs::write(&hidden, serde_json::to_vec_pretty(&doc).unwrap()).unwrap();
+    let out = fx.scan(&["--no-vlt-install-cleanup"]);
+    fx.assert_advisory(&out, &advisory_cleanup_skipped(ids.len()));
+    let out = fx.scan(&[]);
+    fx.assert_advisory(&out, &advisory_invalidated(ids.len()));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
+    }
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// Heal rule (c): no hidden lock, the record's afterHash decides.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_heal_rule_c_no_hidden_lock() {
+    let Some(leg) = hosted_leg("heal_rule_c_no_hidden_lock") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let _ = std::fs::remove_file(fx.proj.join(HIDDEN_LOCK));
+    let ids = fx.store_ids(fx.t());
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
+    }
+    assert!(
+        store_entry(&fx.proj, &node_id(&read_lock(&fx.proj), MS.0, MS.1)).exists(),
+        "the bystander is healthy"
+    );
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// Heal rule (c) with no patch record (the view route fails): the
+/// preflight-downloaded artifact bytes decide.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_heal_rule_c_no_record() {
+    let Some(leg) = hosted_leg("heal_rule_c_no_record") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad().warm()).await;
+    let _ = std::fs::remove_file(fx.proj.join(HIDDEN_LOCK));
+    wiremock::Mock::given(wiremock::matchers::method("GET"))
+        .and(wiremock::matchers::path(format!(
+            "/v0/orgs/{ORG}/patches/view/{UUID}"
+        )))
+        .respond_with(wiremock::ResponseTemplate::new(404))
+        .with_priority(1)
+        .mount(&fx.svc.server)
+        .await;
+    let ids = fx.store_ids(fx.t());
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
+    }
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+// ── package shapes ────────────────────────────────────────────────────────
+
+/// A scoped package (`@isaacs/string-locale-compare`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_scoped() {
+    let Some(leg) = hosted_leg("scoped") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![SCOPED],
+        pins: vec![SCOPED],
+        targets: vec![(SCOPED.0, SCOPED.1, UUID_SCOPED, "index.js")],
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-scoped");
+    fx.leg.ran();
+}
+
+/// Two workspaces depend on `use-sync-external-store` beside react 17 and
+/// react 18: every default-registry instance (vlt dedupes them into one
+/// shared peer instance) is pinned, and both
+/// workspaces install the patched bytes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_peer_workspace_instances() {
+    let Some(leg) = hosted_leg("peer_workspace_instances") else {
+        return;
+    };
+    let usx = ("use-sync-external-store", "1.2.0");
+    let shape = Shape {
+        deps: vec![],
+        pins: vec![
+            usx,
+            ("react", "17.0.2"),
+            ("react", "18.2.0"),
+            ("loose-envify", "1.4.0"),
+            ("js-tokens", "4.0.0"),
+            ("object-assign", "4.1.1"),
+        ],
+        targets: vec![(usx.0, usx.1, UUID_USX, "index.js")],
+        vlt_json: VltJson {
+            workspaces: Some(json!("packages/*")),
+            ..VltJson::default()
+        },
+        files: vec![
+            (
+                "packages/a/package.json".into(),
+                package_json("a", &[usx, ("react", "17.0.2")]),
+            ),
+            (
+                "packages/b/package.json".into(),
+                package_json("b", &[usx, ("react", "18.2.0")]),
+            ),
+        ],
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    let ids = fx.store_ids(&t);
+    assert!(
+        !ids.is_empty(),
+        "{}",
+        String::from_utf8_lossy(&fx.lock_before)
+    );
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, &t);
+    let co = fx.checkout("fresh-peers");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-peers");
+    for ws in ["packages/a", "packages/b"] {
+        let dir = importer_dir(&co, ws, &t.name);
+        assert_eq!(state_at(&dir, &t), State::Patched, "{ws}");
+    }
+    fx.leg.ran();
+}
+
+// ── lock re-saves ─────────────────────────────────────────────────────────
+
+/// `vlt install <newdep>` keeps the redirect.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_install_newdep_preserves() {
+    let Some(leg) = hosted_leg("install_newdep_preserves") else {
+        return;
+    };
+    let shape = Shape {
+        pins: vec![LP, MS],
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    fx.scan(&[]);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    fx.vlt_ok(&fx.proj, &["install", "ms@2.1.3"]);
+    assert_eq!(node_ids(&read_lock(&fx.proj), MS.0, MS.1).len(), 1);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    if resave_drops_hosted_url(fx.leg.version()) {
+        assert_url_dropped(&fx);
+        let co = fx.checkout("fresh-dropped");
+        let out = fx.vlt_profile(&co, &fx.leg.locked_install_args(), "fresh-dropped");
+        assert!(
+            !out.status.success() && out_text(&out).to_lowercase().contains("integrity"),
+            "the registry bytes fail the kept patched integrity: {}",
+            out_text(&out)
+        );
+        fx.scan(&[]);
+    }
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-newdep");
+    fx.leg.ran();
+}
+
+/// rc.6 … rc.17 re-save a default-registry node without slot [3]: the
+/// patched integrity stays, the hosted URL is gone.
+fn assert_url_dropped(fx: &Fixture) {
+    let lock = read_lock(&fx.proj);
+    for id in node_ids(&lock, LP.0, LP.1) {
+        let tuple = &lock["nodes"][&id];
+        assert_eq!(tuple[2], fx.t().sri(), "{id}: {lock:#}");
+        assert!(tuple[3].is_null(), "{id} keeps no URL: {lock:#}");
+    }
+}
+
+/// `vlt update` from 1.0.8 re-resolves from the registry and drops the
+/// redirect (the lock is back on the registry integrity, and a standalone
+/// `vex` no longer attests the patch); from 0.0.0-20 (the first `update`)
+/// through 1.0.7 it keeps the pinned lock and the patch stays attested.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_update_drops() {
+    let Some(leg) = hosted_leg("update_drops") else {
+        return;
+    };
+    if !leg.at_least(VLT_UPDATE_FROM) {
+        return leg.skip("no-vlt-update");
+    }
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    fx.vlt_ok(&fx.proj, &["update"]);
+    let drops = fx.leg.at_least(UPDATE_RERESOLVES_FROM);
+    if drops {
+        assert_not_pinned(&fx.proj, fx.t());
+    } else {
+        assert_pinned(&fx.proj, &fx.svc, fx.t());
+    }
+    let out = standalone_vex(&fx);
+    assert_eq!(
+        vex_doc_attests(&fx.proj.join("out.vex.json"), fx.t()),
+        !drops,
+        "{out}"
+    );
+    fx.leg.ran();
+}
+
+/// Re-save after the scan (`vlt install <new>`: commas move, a CRLF lock
+/// comes back LF): rollback restores the registry pin, keeps the new
+/// dependency, and a following `vlt ci` installs the registry bytes.
+async fn resave_install_rollback(name: &'static str, crlf: bool) {
+    let Some(leg) = hosted_leg(name) else {
+        return;
+    };
+    let shape = Shape {
+        pins: vec![LP, MS],
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    if crlf {
+        std::fs::write(fx.proj.join(VLT_LOCK), to_crlf(&fx.lock_before)).unwrap();
+    }
+    fx.scan(&[]);
+    if crlf {
+        assert!(lock_bytes(&fx.proj).windows(2).any(|w| w == b"\r\n"));
+    }
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    fx.vlt_ok(&fx.proj, &["install", "ms@2.1.3"]);
+    if crlf {
+        assert!(
+            !lock_bytes(&fx.proj).windows(2).any(|w| w == b"\r\n"),
+            "vlt re-saves LF"
+        );
+    }
+    if resave_drops_hosted_url(fx.leg.version()) {
+        assert_url_dropped(&fx);
+        let dropped = lock_bytes(&fx.proj);
+        let out = rollback(&fx.proj, &[]);
+        assert_eq!(out.code, 1, "{out}");
+        let failed = out.json()["hosted"]["failed"][0]["error"]
+            .as_str()
+            .unwrap_or_default()
+            .to_string();
+        assert!(
+            failed.contains("drifted from the recorded redirect")
+                && failed.contains("re-run `socket-patch scan --mode hosted` and then roll back"),
+            "{out}"
+        );
+        assert_eq!(lock_bytes(&fx.proj), dropped, "drift: no write");
+        fx.scan(&[]);
+    }
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_not_pinned(&fx.proj, fx.t());
+    let lock = read_lock(&fx.proj);
+    let before: Value = serde_json::from_slice(&fx.lock_before).unwrap();
+    let id = node_id(&lock, LP.0, LP.1);
+    assert_eq!(lock["nodes"][&id][2], before["nodes"][&id][2]);
+    assert_eq!(node_ids(&lock, MS.0, MS.1).len(), 1, "the new dep stays");
+    if fx.leg.at_least(HAS_CI_FROM) {
+        let co = fx.checkout("after-rollback");
+        fx.vlt_ok_profile(&co, &["ci"], "after-rollback");
+        assert_eq!(state(&co, fx.t()), State::Pristine);
+        assert!(installed(&co, MS.0, "index.js").is_some());
+    }
+    fx.leg.ran();
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_resave_install_rollback() {
+    resave_install_rollback("resave_install_rollback", false).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_resave_crlf_rollback() {
+    resave_install_rollback("resave_crlf_rollback", true).await;
+}
+
+/// scan → `vlt update` → rollback: already reverted, and the patched store
+/// copy the update left behind is invalidated (r-vlt L3).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_resave_update_rollback() {
+    let Some(leg) = hosted_leg("resave_update_rollback") else {
+        return;
+    };
+    if !leg.at_least(VLT_UPDATE_FROM) {
+        return leg.skip("no-vlt-update");
+    }
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    fx.scan(&[]);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    fx.vlt_ok(&fx.proj, &["update"]);
+    let drops = fx.leg.at_least(UPDATE_RERESOLVES_FROM);
+    if drops {
+        assert_not_pinned(&fx.proj, fx.t());
+    }
+    assert_eq!(
+        state(&fx.proj, fx.t()),
+        State::Patched,
+        "vlt update leaves the patched store copy"
+    );
+    let lock = lock_bytes(&fx.proj);
+    let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    if drops {
+        assert_eq!(
+            lock_bytes(&fx.proj),
+            lock,
+            "already reverted: no lock write"
+        );
+    } else {
+        assert_not_pinned(&fx.proj, fx.t());
+    }
+    fx.assert_advisory(&out.json(), &advisory_rolled_back(1));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
+    }
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the rollback heal");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    fx.leg.ran();
+}
+
+/// A CRLF lock: the rewritten line keeps its `\r`, and a fresh checkout
+/// installs the patch.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_crlf_lock() {
+    let Some(leg) = hosted_leg("crlf_lock") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let crlf = to_crlf(&fx.lock_before);
+    std::fs::write(fx.proj.join(VLT_LOCK), &crlf).unwrap();
+    fx.scan(&[]);
+    let text = String::from_utf8(lock_bytes(&fx.proj)).unwrap();
+    assert!(
+        !text.replace("\r\n", "").contains('\n'),
+        "every line keeps CRLF"
+    );
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    let co = fx.checkout("fresh-crlf");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-crlf");
+    assert_eq!(state(&co, fx.t()), State::Patched);
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(
+        lock_bytes(&fx.proj),
+        crlf,
+        "rollback restores the CRLF lock"
+    );
+    fx.leg.ran();
+}
+
+// ── registry shapes ───────────────────────────────────────────────────────
+
+/// `registries.npm` pointing at a mirror (≥ rc.33): `~npm~` DepIDs with
+/// the mirror's tarball URLs, rewritten like the default registry.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_mirror_registries_npm() {
+    let Some(leg) = hosted_leg("mirror_registries_npm") else {
+        return;
+    };
+    if !leg.at_least(REGISTRIES_NPM_ROUTES_FROM) {
+        return leg.skip("registries-npm-ignored");
+    }
+    let shape =
+        Shape::left_pad().vlt_json_fn(|_, r| json!({ "config": { "registries": { "npm": r } } }));
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    assert_eq!(
+        lock["options"]["registries"]["npm"],
+        fx.reg.url(),
+        "{lock:#}"
+    );
+    assert_eq!(node_id(&lock, LP.0, LP.1), "~npm~left-pad@1.3.0");
+    fx.scan(&[]);
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-mirror");
+    fx.leg.ran();
+}
+
+/// A scalar `registry` (URL-segment DepIDs; on ≥ rc.33 beside
+/// `registries.npm`): the default-registry predicate pins the URL segment.
+/// rc.7 … rc.29 warn `redirect_vlt_scalar_registry_ignored` and a locked
+/// install silently re-resolves from public npm (pinned: unpatched).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_scalar_registry() {
+    let Some(leg) = hosted_leg("scalar_registry") else {
+        return;
+    };
+    let v = leg.version();
+    let shape = Shape::left_pad().vlt_json_fn(|v, r| {
+        let mut config = json!({ "registry": r });
+        if v >= REGISTRIES_NPM_ROUTES_FROM {
+            config["registries"] = json!({ "npm": "https://registry.npmjs.org/" });
+        }
+        let mut doc = if flat_vlt_json(v) {
+            config
+        } else {
+            json!({ "config": config })
+        };
+        if lock_ignored_without_modifiers(v) {
+            doc["modifiers"] = json!({});
+        }
+        doc
+    });
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    let id = node_id(&lock, LP.0, LP.1);
+    assert_eq!(
+        id.contains("127.0.0.1"),
+        v >= REGISTRY_DEP_IDS_FROM,
+        "a scalar registry writes a URL segment from 0.0.0-14: {id}"
+    );
+    let doc = fx.scan(&[]);
+    fx.assert_lock_warnings(&doc);
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    let co = fx.checkout("fresh-scalar");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-scalar");
+    let want = if scalar_registry_ignored(v) {
+        State::Pristine
+    } else {
+        State::Patched
+    };
+    assert_eq!(state(&co, fx.t()), want, "{id}");
+    fx.leg.ran();
+}
+
+/// A named alias registry (`acme:left-pad@1.3.0`) beside the default one:
+/// only the default instance is pinned, the alias instance is skipped with
+/// `redirect_vlt_custom_registry_skipped`, and in-run VEX is withheld.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_named_alias_untouched() {
+    let Some(leg) = hosted_leg("named_alias_untouched") else {
+        return;
+    };
+    if !leg.at_least(REGISTRY_DEP_IDS_FROM) {
+        return leg.skip("no-named-registry-specs");
+    }
+    let acme = Registry::start(&[LP]).await;
+    let acme_url = acme.url();
+    let mut shape = Shape::left_pad()
+        .vlt_json_fn(move |v, r| with_registries(v, r, json!({ "acme": acme_url }), &[]));
+    shape.deps.push(("lp-acme", "acme:left-pad@1.3.0"));
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    let ids = node_ids(&lock, LP.0, LP.1);
+    assert_eq!(
+        ids.iter().filter(|i| i.contains("acme")).count(),
+        1,
+        "one acme instance: {ids:?}"
+    );
+    let out = fx.scan_vex(&[]);
+    let doc = out.json();
+    assert!(
+        has_warning(&doc, "redirect_vlt_custom_registry_skipped"),
+        "{doc:#}"
+    );
+    let after = read_lock(&fx.proj);
+    for id in &ids {
+        let pinned = after["nodes"][id][2] == fx.t().sri();
+        assert_eq!(pinned, !id.contains("acme"), "{id}: {after:#}");
+    }
+    fx.assert_in_run_vex(&out, fx.t(), false);
+    fx.leg.ran();
+}
+
+/// A scoped registry (`scoped-registries`): the scope's instance is
+/// foreign, skipped with `redirect_vlt_custom_registry_skipped`, never
+/// pinned; the default-registry target beside it is.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_scoped_registry_untouched() {
+    let Some(leg) = hosted_leg("scoped_registry_untouched") else {
+        return;
+    };
+    if !leg.at_least(REGISTRY_DEP_IDS_FROM) {
+        return leg.skip("registry-not-in-dep-id");
+    }
+    let scope_reg = Registry::start(&[SCOPED]).await;
+    let scope_url = scope_reg.url();
+    let shape = Shape {
+        deps: vec![LP, SCOPED],
+        pins: vec![LP],
+        targets: vec![
+            (LP.0, LP.1, UUID, "index.js"),
+            (SCOPED.0, SCOPED.1, UUID_SCOPED, "index.js"),
+        ],
+        ..Shape::left_pad()
+    }
+    .vlt_json_fn(move |v, r| {
+        with_registries(
+            v,
+            r,
+            json!({}),
+            &[(
+                if v >= SCOPED_REGISTRIES_KEY_FROM {
+                    "scoped-registries"
+                } else {
+                    "scope-registries"
+                },
+                json!({ "@isaacs": scope_url }),
+            )],
+        )
+    });
+    let fx = Fixture::build_with(leg, shape, &[&scope_reg]).await;
+    let out = fx.scan_vex(&[]);
+    let doc = out.json();
+    assert!(
+        has_warning(&doc, "redirect_vlt_custom_registry_skipped"),
+        "{doc:#}"
+    );
+    let scoped = fx.svc.target(SCOPED.0).clone();
+    assert_not_pinned(&fx.proj, &scoped);
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_in_run_vex(&out, &scoped, false);
+    fx.leg.ran();
+}
+
+/// A jsr dependency (`jsr:@vlte2e/jpkg@1.0.0`: vlt records the jsr
+/// registry's npm-compat package `@jsr/vlte2e__jpkg` under `~jsr~`) beside
+/// the npm instance of that package: only the npm instance is pinned; the
+/// jsr node is skipped with `redirect_vlt_custom_registry_skipped` and
+/// in-run VEX is withheld.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_jsr_untouched() {
+    let Some(leg) = hosted_leg("jsr_untouched") else {
+        return;
+    };
+    if !leg.at_least(REGISTRY_DEP_IDS_FROM) {
+        return leg.skip("registry-not-in-dep-id");
+    }
+    if !leg.at_least(JSR_REGISTRIES_ROUTE_FROM) {
+        return leg.skip("jsr-registry-not-configurable");
+    }
+    if !hermetic_registry(leg.version()) || npm_alias_to_public_npm(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    let jpkg = || {
+        synthetic_pkg(
+            json!({ "name": "@jsr/vlte2e__jpkg", "version": "1.0.0", "main": "index.js" }),
+            &[("index.js", b"module.exports = 'jpkg';\n")],
+        )
+    };
+    let jsr = Registry::start_with(&[], vec![jpkg()]).await;
+    let jsr_url = jsr.url();
+    let mut shape = Shape {
+        deps: vec![
+            ("@vlte2e/jpkg", "jsr:@vlte2e/jpkg@1.0.0"),
+            ("jpkg-npm", "npm:@jsr/vlte2e__jpkg@1.0.0"),
+        ],
+        pins: vec![],
+        synthetic: vec![jpkg()],
+        targets: vec![("@jsr/vlte2e__jpkg", "1.0.0", UUID_SCOPED, "index.js")],
+        ..Shape::left_pad()
+    };
+    shape = shape.vlt_json_fn(move |v, r| {
+        with_registries(
+            v,
+            r,
+            json!({ "npm": r }),
+            &[("jsr-registries", json!({ "jsr": jsr_url }))],
+        )
+    });
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    let ids = node_ids(&lock, "@jsr/vlte2e__jpkg", "1.0.0");
+    assert!(
+        ids.iter()
+            .any(|i| i.starts_with("~jsr~") || i.starts_with("·jsr·")),
+        "a jsr instance: {lock:#}"
+    );
+    let out = fx.scan_vex(&[]);
+    let doc = out.json();
+    assert!(
+        has_warning(&doc, "redirect_vlt_custom_registry_skipped"),
+        "{doc:#}"
+    );
+    let after = read_lock(&fx.proj);
+    for id in &ids {
+        let pinned = after["nodes"][id][2] == fx.t().sri();
+        let foreign = id.starts_with("~jsr~") || id.starts_with("·jsr·");
+        assert_eq!(pinned, !foreign, "{id}: {after:#}");
+    }
+    fx.assert_in_run_vex(&out, fx.t(), false);
+    fx.leg.ran();
+}
+
+/// `default-registry-alias` naming another alias: its `~<alias>~` DepIDs
+/// are the default registry and are pinned.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_default_registry_alias() {
+    let Some(leg) = hosted_leg("default_registry_alias") else {
+        return;
+    };
+    if !leg.at_least(REGISTRIES_NPM_ROUTES_FROM) {
+        return leg.skip("no-default-registry-alias");
+    }
+    let shape = Shape::left_pad().vlt_json_fn(|_, r| {
+        json!({ "config": {
+            "registries": { "acme": r },
+            "default-registry-alias": "acme"
+        } })
+    });
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    let id = node_id(&lock, LP.0, LP.1);
+    assert!(id.starts_with("~acme~"), "{id}");
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-alias");
+    fx.leg.ran();
+}
+
+/// The registry comes from `VLT_REGISTRIES` / `VLT_REGISTRY` in the
+/// environment instead of vlt.json.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_registry_from_env() {
+    let Some(leg) = hosted_leg("registry_from_env") else {
+        return;
+    };
+    let v = leg.version();
+    let mut shape = Shape::left_pad();
+    shape.vlt_json.no_registry = true;
+    shape.vlt_env = if scalar_registry_ignored(v) {
+        vec![("VLT_REGISTRY".into(), "https://registry.npmjs.org/".into())]
+    } else if v >= REGISTRIES_NPM_ROUTES_FROM {
+        vec![("VLT_REGISTRIES".into(), "npm={R}".into())]
+    } else {
+        vec![("VLT_REGISTRY".into(), "{R}".into())]
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-env");
+    fx.leg.ran();
+}
+
+/// The registry comes from the user config `$XDG_CONFIG_HOME/vlt/vlt.json`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_registry_from_user_config() {
+    let Some(leg) = hosted_leg("registry_from_user_config") else {
+        return;
+    };
+    let mut shape = Shape::left_pad();
+    shape.vlt_json.no_registry = true;
+    shape.user_config = vec!["default", "fresh-user"];
+    let fx = Fixture::build(leg, shape).await;
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    fx.assert_fresh_locked_install("fresh-user");
+    fx.leg.ran();
+}
+
+/// The artifact comes back `Content-Encoding: gzip` (patch.socket.dev
+/// before the `no-transform` fix): refused, nothing written.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_content_encoding_refused() {
+    let Some(leg) = hosted_leg("content_encoding_refused") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.svc.serve_artifact_gzip_encoded(fx.t()).await;
+    let out = socket_api(&fx.proj, &fx.svc, &["scan", "--mode", "hosted"], &[]);
+    let doc = out.json();
+    let detail = warning_detail(&doc, UNVERIFIABLE);
+    assert!(
+        detail.contains("content-encoding gzip") && detail.contains("nothing was written"),
+        "{detail}"
+    );
+    assert_eq!(lock_bytes(&fx.proj), fx.lock_before, "no lock write");
+    assert!(fx.ledger().is_none(), "no ledger");
+    fx.leg.ran();
+}
+
+/// 0.0.0-16 … 24 without `"modifiers": {}` ignore the lock: the warning
+/// fires and the install is silently unpatched (pinned).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_old_lockfile_ignored() {
+    let Some(leg) = hosted_leg("old_lockfile_ignored") else {
+        return;
+    };
+    if !lock_ignored_without_modifiers(leg.version()) {
+        return leg.skip("lock-not-ignored");
+    }
+    let mut shape = Shape::left_pad();
+    shape.vlt_json.no_modifiers = true;
+    let fx = Fixture::build(leg, shape).await;
+    let doc = fx.scan(&[]);
+    assert!(
+        has_warning(&doc, "redirect_vlt_old_lockfile_ignored"),
+        "{doc:#}"
+    );
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    let co = fx.checkout("ignored");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "ignored");
+    assert_eq!(state(&co, fx.t()), State::Pristine, "the lock was ignored");
+    fx.leg.ran();
+}
+
+/// A warm cache keyed by URL serves stale bytes when the same URL starts
+/// serving different ones (the documented hazard; hosted URLs are
+/// immutable per artifact). rc.27 … 1.0.2 re-fetch and fail the integrity
+/// check instead.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_warm_cache_hazard() {
+    let Some(leg) = hosted_leg("warm_cache_hazard") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    let a = fx.checkout("warm-a");
+    fx.vlt_ok_profile(&a, &fx.leg.locked_install_args(), "warm");
+    assert_eq!(state(&a, fx.t()), State::Patched);
+    let t = fx.t().clone();
+    let mut files = t.patched_files();
+    files.insert(
+        t.file.clone(),
+        [TAMPER_MARKER, t.before.as_slice()].concat(),
+    );
+    fx.svc.serve_artifact(&t, build_tgz(&files), 1).await;
+    let hits = fx.svc.artifact_hits(&t).await;
+    let b = fx.checkout("warm-b");
+    if warm_cache_reverifies(fx.leg.version()) {
+        let out = fx.vlt_profile(&b, &["install"], "warm");
+        assert!(
+            !out.status.success() && out_text(&out).to_lowercase().contains("integrity"),
+            "rc.27 … 1.0.2 re-fetch and verify: {}",
+            out_text(&out)
+        );
+        assert!(fx.svc.artifact_hits(&t).await > hits, "a refetch");
+    } else {
+        fx.vlt_ok_profile(&b, &["install"], "warm");
+        assert_eq!(state(&b, &t), State::Patched, "the warm cache wins");
+        assert_eq!(fx.svc.artifact_hits(&t).await, hits, "no refetch");
+    }
+    fx.leg.ran();
+}
+
+/// `get <uuid> --mode hosted` twice and `rollback` twice: zero churn.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_idempotence() {
+    let Some(leg) = hosted_leg("idempotence") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    get_hosted(&fx.proj, &fx.svc, UUID, &[]);
+    let lock = lock_bytes(&fx.proj);
+    let ledger = fx.ledger();
+    get_hosted(&fx.proj, &fx.svc, UUID, &[]);
+    assert_eq!(lock_bytes(&fx.proj), lock);
+    assert_eq!(fx.ledger(), ledger);
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(lock_bytes(&fx.proj), fx.lock_before);
+    assert!(fx.ledger().is_none());
+    let files = package_files(&fx.proj);
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(
+        (out.code, out.json()["error"].as_str()),
+        (1, Some("Manifest not found")),
+        "a second rollback finds no state: {out}"
+    );
+    assert_eq!(package_files(&fx.proj), files, "and writes nothing");
+    fx.leg.ran();
+}
+
+/// The manifest-less VEX tail on the hosted project (`vex_e2e_common/vlt`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_manifestless_vex() {
+    let Some(leg) = hosted_leg("manifestless_vex") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    let t = fx.t().clone();
+    let cve = [t.cve.as_str()];
+    let vulns = vec![(t.ghsa.as_str(), &cve[..])];
+    let case = vlt_vex::VltVexCase {
+        tag: "hosted",
+        mode: vlt_vex::VltMode::Hosted,
+        purl: &t.purl(),
+        uuid: &t.uuid,
+        files: t.vex_files(),
+        vulns: &vulns,
+        registry_lock: fx.lock_before.clone(),
+        registry_manifests: vec![],
+        patch_server_url: Some(fx.svc.uri()),
+    };
+    let leg = &fx.leg;
+    let run = fx.run.clone();
+    vlt_vex::run_vlt_vex_matrix(&fx.proj, &leg.root, &case, |co| {
+        let out = leg.vlt_with(co, &leg.locked_install_args(), &{
+            let mut r = run.clone();
+            r.profile = Some("vex".into());
+            r
+        });
+        assert_ok(&out, "vex checkout locked install");
+        assert_eq!(state(co, &t), State::Patched);
+    });
+    fx.leg.ran();
+}
+
+/// The TS twin's golden output for `basic` (the server's PR-flow lock and
+/// ledger) is reverted by SP `rollback`, and `vlt ci` then installs the
+/// registry bytes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_ts_written_lock() {
+    let Some(leg) = hosted_leg("ts_written_lock") else {
+        return;
+    };
+    if !leg.at_least(REGISTRIES_NPM_REQUIRED_FROM) {
+        return leg.skip("golden-grammar");
+    }
+    let golden = Path::new(env!("CARGO_MANIFEST_DIR"))
+        .join("../socket-patch-core/tests/fixtures/redirect/npm/vlt/basic");
+    let reg = Registry::start(&[LP, MS]).await;
+    let proj = leg.dir("proj");
+    let npm = "https://registry.npmjs.org/";
+    let sub = |s: String| s.replace(npm, &reg.url());
+    let input = sub(std::fs::read_to_string(golden.join("input/vlt-lock.json")).unwrap());
+    let expected = sub(std::fs::read_to_string(golden.join("expected/vlt-lock.json")).unwrap());
+    let edits: Value = serde_json::from_str(&sub(std::fs::read_to_string(
+        golden.join("expected-edits.json"),
+    )
+    .unwrap()))
+    .unwrap();
+    write(
+        &proj.join("package.json"),
+        package_json("vlt-e2e-app", &[LP, MS]),
+    );
+    write_vlt_json(&proj, leg.version(), &reg.url(), &VltJson::default());
+    write(&proj.join(VLT_LOCK), &expected);
+    let ledger = json!({
+        "version": 1,
+        "mode": "hosted",
+        "edits": edits,
+        "records": {
+            "pkg:npm/left-pad@1.3.0": {
+                "uuid": "aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa",
+                "exportedAt": "2026-01-01T00:00:00Z",
+                "files": {},
+                "vulnerabilities": {},
+                "description": "server-written",
+                "license": "MIT",
+                "tier": "free"
+            }
+        }
+    });
+    write(
+        &proj.join(".socket/vendor/redirect-state.json"),
+        serde_json::to_vec_pretty(&ledger).unwrap(),
+    );
+    let out = rollback(&proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(&proj)),
+        input,
+        "SP reverts the TS-written lock to its input"
+    );
+    leg.vlt_ok(&proj, &["ci"]);
+    let lp = reg.pkg(LP.0, LP.1);
+    assert_eq!(
+        installed(&proj, LP.0, "index.js"),
+        tgz_files(&lp.tgz).get("index.js").cloned(),
+        "registry bytes"
+    );
+    assert_eq!(String::from_utf8_lossy(&lock_bytes(&proj)), input);
+    leg.ran();
+}
+
+// ── optional dependencies (SP-4b) ─────────────────────────────────────────
+
+fn optional_shape(optional_only: bool) -> Shape {
+    let darwin = cfg!(target_os = "macos");
+    let mut optional = vec![MS];
+    let mut pins = vec![MS];
+    let mut targets = vec![(MS.0, MS.1, UUID_MS, "index.js")];
+    if darwin && !optional_only {
+        optional.push(FSEVENTS);
+        pins.push(FSEVENTS);
+        targets.push((FSEVENTS.0, FSEVENTS.1, UUID_FSEVENTS, "fsevents.js"));
+    }
+    let mut deps = vec![];
+    if !optional_only {
+        deps.push(LP);
+        pins.push(LP);
+        targets.insert(0, (LP.0, LP.1, UUID, "index.js"));
+    }
+    Shape {
+        deps,
+        optional,
+        pins,
+        targets,
+        ..Shape::left_pad()
+    }
+}
+
+/// The heal never removes a stale optional copy (vlt would not reinstall
+/// it): left-pad's entry and the hidden lock go, ms (and fsevents on
+/// macOS) stay pristine and linked, the advisory says so, and in-run VEX
+/// withholds them. A plain `vlt install` patches left-pad only; `vlt ci`
+/// patches the optional ones with the lock byte-stable. Rollback keeps the
+/// patched optional copies the same way. An optional-only project installs
+/// nothing from the lock before 1.0.5 (pinned vlt limitation).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_optional_dependency_heal() {
+    let Some(leg) = hosted_leg("optional_dependency_heal") else {
+        return;
+    };
+    if !leg.at_least(HAS_CI_FROM) {
+        return leg.skip("no-vlt-ci");
+    }
+    let fx = Fixture::build(leg, optional_shape(false).warm()).await;
+    let n_opt = fx.svc.targets.len() - 1;
+    let lp = fx.svc.target(LP.0).clone();
+    let ms = fx.svc.target(MS.0).clone();
+    let lp_ids = fx.store_ids(&lp);
+    let out = fx.scan_vex(&[]);
+    let doc = out.json();
+    let held = format!(
+        "node_modules also still holds {n_opt} unpatched copies of optional dependencies; \
+         {OPTIONAL_KEPT}"
+    );
+    fx.assert_advisory(
+        &doc,
+        &format!("{} {held}{VLT_UPDATE_NOTE}", invalidated_head(lp_ids.len())),
+    );
+    for id in &lp_ids {
+        assert!(!store_entry(&fx.proj, id).exists());
+    }
+    assert!(!hidden_lock_exists(&fx.proj));
+    for t in fx.svc.targets.iter().filter(|t| t.name != LP.0) {
+        for id in fx.store_ids(t) {
+            assert!(store_entry(&fx.proj, &id).exists(), "{id} kept");
+        }
+        assert_eq!(state(&fx.proj, t), State::Pristine, "{} linked", t.name);
+        assert!(!fx.vex_attested(t), "{} not attested", t.name);
+    }
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, &lp), State::Patched);
+    assert_eq!(
+        state(&fx.proj, &ms),
+        State::Pristine,
+        "vlt install keeps it"
+    );
+    let before_ci = lock_bytes(&fx.proj);
+    fx.vlt_ok(&fx.proj, &["ci"]);
+    for t in &fx.svc.targets {
+        assert_eq!(state(&fx.proj, t), State::Patched, "{} after ci", t.name);
+    }
+    assert_eq!(lock_bytes(&fx.proj), before_ci, "ci keeps the lock");
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let want = format!(
+        "restored registry pins for {} packages; removed {} patched installed copies, so \
+         node_modules is incomplete until you run `vlt install` (or `vlt ci`). node_modules \
+         also still holds {n_opt} patched copies of optional dependencies; {OPTIONAL_KEPT}",
+        fx.svc.targets.len(),
+        lp_ids.len()
+    );
+    fx.assert_advisory(&out.json(), &want);
+    for id in &lp_ids {
+        assert!(!store_entry(&fx.proj, id).exists());
+    }
+    assert_eq!(
+        state(&fx.proj, &ms),
+        State::Patched,
+        "patched optional kept"
+    );
+    fx.vlt_ok(&fx.proj, &["ci"]);
+    for t in &fx.svc.targets {
+        assert_eq!(state(&fx.proj, t), State::Pristine, "{} after ci", t.name);
+    }
+    let Fixture { leg, .. } = fx;
+    optional_only_leg(&leg).await;
+    leg.ran();
+}
+
+async fn optional_only_leg(leg: &Leg) {
+    let reg = Registry::start(&[MS]).await;
+    let proj = leg.dir("optional-only");
+    write(
+        &proj.join("package.json"),
+        package_json_fields("vlt-e2e-opt", &[("optionalDependencies", &[MS])]),
+    );
+    write_vlt_json(&proj, leg.version(), &reg.url(), &VltJson::default());
+    leg.vlt_ok(&proj, &["install"]);
+    let behavior = optional_only(leg.version());
+    let ms = PatchTarget::from_pkg(reg.pkg(MS.0, MS.1), UUID_MS, "index.js");
+    if behavior == OptionalOnly::NoLock {
+        assert!(!proj.join(VLT_LOCK).exists(), "no lock is written");
+        assert_eq!(state(&proj, &ms), State::Absent, "nothing is installed");
+        return;
+    }
+    assert_eq!(state(&proj, &ms), State::Pristine);
+    let svc = PatchService::start(vec![ms.clone()]).await;
+    remove_tree(&proj);
+    scan_hosted(&proj, &svc, &[]);
+    assert_pinned(&proj, &svc, &ms);
+    let run = VltRun::profile("optional-only");
+    leg.vlt_ok_with(&proj, &["ci"], &run);
+    let want = match behavior {
+        OptionalOnly::Installs => State::Patched,
+        _ => State::Absent,
+    };
+    assert_eq!(state(&proj, &ms), want, "optional-only vlt ci");
+}
+
+/// Hosted pin of an optional dependency, warm install, then `scan --mode
+/// vendored` takes over: the hosted store copy and the hidden lock stay,
+/// the takeover advisory names the kept optional copy, a plain `vlt
+/// install` keeps the importer linked to the hosted copy, and `vlt ci`
+/// links the vendored dir (mixed projects on every era; optional-only from
+/// 1.0.5, before which `vlt ci` leaves it absent). 0.0.0-19 … 0.0.0-29
+/// already relink the vendored dir on the plain install.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_then_vendored_optional_takeover() {
+    let Some(leg) = hosted_leg("then_vendored_optional_takeover") else {
+        return;
+    };
+    if !leg.at_least(HAS_CI_FROM) {
+        return leg.skip("no-vlt-ci");
+    }
+    for optional_only in [false, true] {
+        let reg = Registry::start(&[LP, MS]).await;
+        let proj = leg.dir(if optional_only { "optonly" } else { "mixed" });
+        let mut fields: Vec<(&str, &[(&str, &str)])> = vec![("optionalDependencies", &[MS])];
+        if !optional_only {
+            fields.push(("dependencies", &[LP]));
+        }
+        write(
+            &proj.join("package.json"),
+            package_json_fields("vlt-e2e-app", &fields),
+        );
+        write_vlt_json(&proj, leg.version(), &reg.url(), &VltJson::default());
+        leg.vlt_ok(&proj, &["install"]);
+        if optional_only && optional_only_kind(&leg) == OptionalOnly::NoLock {
+            assert!(!proj.join(VLT_LOCK).exists(), "no lock is written");
+            continue;
+        }
+        let ms = PatchTarget::from_pkg(reg.pkg(MS.0, MS.1), UUID_MS, "index.js");
+        let svc = PatchService::start(vec![ms.clone()]).await;
+        scan_hosted(&proj, &svc, &[]);
+        leg.vlt_ok(&proj, &["ci"]);
+        let hosted_id = node_id(&read_lock(&proj), MS.0, MS.1);
+        let hosted_ok = if optional_only && optional_only_kind(&leg) != OptionalOnly::Installs {
+            State::Absent
+        } else {
+            State::Patched
+        };
+        assert_eq!(state(&proj, &ms), hosted_ok, "hosted ci");
+        if hosted_ok == State::Absent {
+            continue;
+        }
+        let out = socket_api(&proj, &svc, &["scan", "--mode", "vendored"], &[]);
+        assert_eq!(out.code, 0, "{out}");
+        let doc = out.json();
+        let detail = event_reason(&doc, ADVISORY);
+        assert!(
+            detail.contains("copies of the hosted artifacts of optional dependencies")
+                && detail.ends_with(OPTIONAL_KEPT),
+            "{detail}"
+        );
+        assert!(store_entry(&proj, &hosted_id).exists(), "hosted copy kept");
+        leg.vlt_ok(&proj, &["install"]);
+        let link = std::fs::read_link(proj.join("node_modules/ms"))
+            .map(|p| p.to_string_lossy().replace('\\', "/"))
+            .unwrap_or_default();
+        if takeover_install_relinks(leg.version()) {
+            assert!(
+                link.contains(".socket/vendor/npm/"),
+                "0.0.0-19 … 0.0.0-29 relink on a plain install: {link}"
+            );
+        } else {
+            assert!(
+                link.contains(".vlt/"),
+                "install keeps the hosted link: {link}"
+            );
+        }
+        leg.vlt_ok(&proj, &["ci"]);
+        let link = std::fs::read_link(proj.join("node_modules/ms"))
+            .map(|p| p.to_string_lossy().replace('\\', "/"))
+            .unwrap_or_default();
+        let want_vendor = !optional_only || optional_only_kind(&leg) == OptionalOnly::Installs;
+        if want_vendor {
+            assert!(
+                link.contains(".socket/vendor/npm/"),
+                "ci links the vendored dir: {link}"
+            );
+            assert_eq!(state(&proj, &ms), State::Patched);
+        } else {
+            assert!(
+                !proj.join("node_modules/ms").exists(),
+                "absent before 1.0.5"
+            );
+        }
+    }
+    leg.ran();
+}
+
+fn optional_only_kind(leg: &Leg) -> OptionalOnly {
+    optional_only(leg.version())
+}
+
+/// A platform-skipped optional dependency (never installed here) and a
+/// lingering `.VLT.DELETE.*` staging dir: the heal and the crawler ignore
+/// both.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_platform_optional_skipped() {
+    let Some(leg) = hosted_leg("platform_optional_skipped") else {
+        return;
+    };
+    if platform_optional_install_bug(leg.version()) {
+        return leg.skip("vlt-platform-optional-bug");
+    }
+    let other = if cfg!(target_os = "macos") {
+        ("@parcel/watcher-linux-x64-glibc", "2.4.1")
+    } else {
+        FSEVENTS
+    };
+    let mut shape = Shape::with_bystander().warm();
+    shape.optional = vec![other];
+    shape.pins.push(other);
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    let other_id = node_id(&lock, other.0, other.1);
+    assert!(
+        !store_entry(&fx.proj, &other_id).exists(),
+        "platform-skipped"
+    );
+    let lp_id = node_id(&lock, LP.0, LP.1);
+    let staging = fx
+        .proj
+        .join("node_modules/.vlt")
+        .join(format!(".VLT.DELETE.1a2b.{lp_id}"));
+    write(
+        &staging.join("node_modules/left-pad/index.js"),
+        &fx.t().before,
+    );
+    write(
+        &staging.join("node_modules/left-pad/package.json"),
+        r#"{"name":"left-pad","version":"1.3.0"}"#,
+    );
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_invalidated(1));
+    assert!(staging.exists(), "the heal never touches staging dirs");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let out = socket_api(&fx.proj, &fx.svc, &["scan"], &[]);
+    let listed = out.json().to_string();
+    assert!(
+        !listed.contains(".VLT.DELETE"),
+        "the crawler never reports staging dirs: {listed}"
+    );
+    fx.leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/e2e_safety_vlt.rs b/crates/socket-patch-cli/tests/e2e_safety_vlt.rs
new file mode 100644
index 00000000..595ce1d0
--- /dev/null
+++ b/crates/socket-patch-cli/tests/e2e_safety_vlt.rs
@@ -0,0 +1,503 @@
+//! Real-vlt copy-on-write safety (suite `safety`, DESIGN §5.4, §8.3).
+//!
+//! vlt 1.2.0 keeps a global content store (`$XDG_CACHE_HOME/vlt/store/v1`)
+//! and, with `store-linker=hardlink` (the Linux `auto` default), hardlinks
+//! every project's package files to it. An in-place write would poison
+//! every project on the machine. Two projects share one XDG cache here;
+//! every socket-patch write path in p1 (agent apply and rollback, the
+//! hosted heal, the vendored local build, `vendor --revert`, `repair`)
+//! must leave p2's bytes and inodes and the store untouched.
+//!
+//! `SOCKET_PATCH_VLT_E2E_STORE_LINKER` ∈ {auto, hardlink, copy, unpack}
+//! selects the linker (unset = auto); `SOCKET_PATCH_VLT_E2E_CACHE_ROOT`
+//! moves the cache to another filesystem (EXDEV → copy). Each leg is
+//! `vlt_pinned_matrix_safety_<leg>` and prints one `VLT-LEG` line.
+
+use std::collections::BTreeMap;
+use std::path::{Path, PathBuf};
+
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+
+use vlt_e2e_common::fixture::*;
+use vlt_e2e_common::*;
+
+const SUITE: &str = "safety";
+
+/// The linker vlt uses: the knob, else `auto` (hardlink on Linux, unpack
+/// elsewhere).
+fn effective_linker() -> String {
+    match store_linker().as_deref() {
+        Some("auto") | None => {
+            if cfg!(target_os = "linux") {
+                "hardlink".into()
+            } else {
+                "unpack".into()
+            }
+        }
+        Some(other) => other.into(),
+    }
+}
+
+fn hardlinks() -> bool {
+    effective_linker() == "hardlink" && cache_root_knob().is_none()
+}
+
+fn safety_leg(name: &'static str) -> Option<Leg> {
+    let leg = Leg::start(SUITE, name)?;
+    if !leg.at_least(STORE_LINKER_FROM) {
+        leg.skip("no-global-store");
+        return None;
+    }
+    Some(leg)
+}
+
+#[cfg(unix)]
+fn nlink(p: &Path) -> u64 {
+    use std::os::unix::fs::MetadataExt as _;
+    std::fs::metadata(p).unwrap().nlink()
+}
+
+#[cfg(windows)]
+fn nlink(p: &Path) -> u64 {
+    use std::os::windows::io::AsRawHandle as _;
+    use windows_sys::Win32::Storage::FileSystem::{
+        GetFileInformationByHandle, BY_HANDLE_FILE_INFORMATION,
+    };
+    let f = std::fs::File::open(p).unwrap();
+    // SAFETY: an all-zero BY_HANDLE_FILE_INFORMATION is a valid value, and
+    // the handle stays open for the call.
+    let mut info: BY_HANDLE_FILE_INFORMATION = unsafe { std::mem::zeroed() };
+    let ok = unsafe { GetFileInformationByHandle(f.as_raw_handle() as _, &mut info) };
+    assert_ne!(ok, 0, "GetFileInformationByHandle({})", p.display());
+    u64::from(info.nNumberOfLinks)
+}
+
+#[cfg(unix)]
+fn ino(p: &Path) -> u64 {
+    use std::os::unix::fs::MetadataExt as _;
+    std::fs::metadata(p).unwrap().ino()
+}
+
+#[cfg(windows)]
+fn ino(p: &Path) -> u64 {
+    use std::os::windows::io::AsRawHandle as _;
+    use windows_sys::Win32::Storage::FileSystem::{
+        GetFileInformationByHandle, BY_HANDLE_FILE_INFORMATION,
+    };
+    let f = std::fs::File::open(p).unwrap();
+    // SAFETY: as in `nlink`.
+    let mut info: BY_HANDLE_FILE_INFORMATION = unsafe { std::mem::zeroed() };
+    let ok = unsafe { GetFileInformationByHandle(f.as_raw_handle() as _, &mut info) };
+    assert_ne!(ok, 0);
+    (u64::from(info.nFileIndexHigh) << 32) | u64::from(info.nFileIndexLow)
+}
+
+/// Two projects on one registry and one XDG cache.
+struct Pair {
+    fx: Fixture,
+    p2: PathBuf,
+}
+
+impl Pair {
+    async fn build(leg: Leg, shape: Shape) -> Pair {
+        let fx = Fixture::build(leg, shape).await;
+        if effective_linker() != "unpack" {
+            wait_for_store(&fx);
+        }
+        remove_tree(&fx.proj);
+        fx.vlt_ok(&fx.proj, &["install"]);
+        let p2 = fx.leg.dir("p2");
+        for f in ["package.json", "vlt.json", VLT_LOCK] {
+            std::fs::copy(fx.proj.join(f), p2.join(f)).unwrap();
+        }
+        fx.vlt_ok(&p2, &["install"]);
+        Pair { fx, p2 }
+    }
+
+    fn target_file(&self, dir: &Path) -> PathBuf {
+        let t = self.fx.t();
+        importer_dir(dir, "", &t.name)
+            .join(&t.file)
+            .canonicalize()
+            .unwrap()
+    }
+
+    /// The linker precondition: shared inodes for hardlink, private ones
+    /// for copy / unpack / a cache on another filesystem.
+    fn assert_precondition(&self) {
+        let a = self.target_file(&self.fx.proj);
+        let b = self.target_file(&self.p2);
+        if hardlinks() {
+            assert!(
+                nlink(&a) >= 2,
+                "hardlinked: nlink {} for {}",
+                nlink(&a),
+                a.display()
+            );
+            assert_eq!(ino(&a), ino(&b), "p1 and p2 share the store inode");
+        } else {
+            assert_eq!(nlink(&a), 1, "{} links a private copy", effective_linker());
+        }
+    }
+
+    /// p2's bytes and inodes plus the store, for [`Pair::assert_untouched`].
+    fn witness(&self) -> (BTreeMap<String, Vec<u8>>, u64, Snapshot) {
+        let b = self.target_file(&self.p2);
+        let store = self.fx.leg.global_store("default");
+        (
+            package_files(
+                &importer_dir(&self.p2, "", &self.fx.t().name)
+                    .canonicalize()
+                    .unwrap(),
+            ),
+            ino(&b),
+            Snapshot::take(&self.p2, &[], Some(&store)),
+        )
+    }
+
+    fn assert_untouched(&self, before: &(BTreeMap<String, Vec<u8>>, u64, Snapshot), what: &str) {
+        let now = self.witness();
+        assert_eq!(now.0, before.0, "{what}: p2's bytes changed");
+        assert_eq!(now.1, before.1, "{what}: p2's inode changed");
+        before.2.assert_existing_unchanged(&now.2, what);
+        assert_eq!(
+            state(&self.p2, self.fx.t()),
+            State::Pristine,
+            "{what}: p2 pristine"
+        );
+    }
+}
+
+fn wait_for_store(fx: &Fixture) {
+    let store = fx.leg.global_store("default");
+    for _ in 0..200 {
+        if std::fs::read_dir(&store)
+            .map(|mut d| d.next().is_some())
+            .unwrap_or(false)
+        {
+            return;
+        }
+        std::thread::sleep(std::time::Duration::from_millis(50));
+    }
+    panic!("vlt wrote no global store under {}", store.display());
+}
+
+fn agent(dir: &Path, cmd: &str, extra: &[&str]) -> SocketOut {
+    let cwd = dir.to_str().unwrap().to_string();
+    let mut args = vec![cmd, "--yes", "--offline", "--cwd", &cwd];
+    args.extend_from_slice(extra);
+    socket(dir, &args, &[])
+}
+
+/// The CoW proof for agent apply: p1's copy is patched through a new
+/// private inode, p2 and the store are untouched.
+fn apply_in_p1(pair: &Pair) {
+    let fx = &pair.fx;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let before = pair.witness();
+    let ino_before = ino(&pair.target_file(&fx.proj));
+    let out = agent(&fx.proj, "apply", &["--json"]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let a = pair.target_file(&fx.proj);
+    assert_eq!(nlink(&a), 1, "the patched file is a private inode");
+    if hardlinks() {
+        assert_ne!(ino(&a), ino_before, "rename-over, never an in-place write");
+    }
+    pair.assert_untouched(&before, "agent apply");
+}
+
+// ── linker legs ───────────────────────────────────────────────────────────
+
+/// Linux `auto` (hardlink): the default-flip canary (nlink ≥ 2 after the
+/// second install), apply CoW, p2 reinstalls pristine, `vlt install <x>`
+/// keeps the patch, and `vlt ci` restores pristine bytes and re-applies
+/// through the setup hook.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_linux_auto() {
+    let Some(leg) = safety_leg("linux_auto") else {
+        return;
+    };
+    if !cfg!(target_os = "linux")
+        || !matches!(store_linker().as_deref(), None | Some("auto"))
+        || cache_root_knob().is_some()
+    {
+        return leg.skip("not-linux-auto");
+    }
+    linker_sequence(leg).await;
+}
+
+/// `store-linker=hardlink` on every OS: the same sequence.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_explicit_hardlink() {
+    let Some(leg) = safety_leg("explicit_hardlink") else {
+        return;
+    };
+    if store_linker().as_deref() != Some("hardlink") || cache_root_knob().is_some() {
+        return leg.skip("store-linker-not-hardlink");
+    }
+    linker_sequence(leg).await;
+}
+
+/// `store-linker=copy` / `unpack`, or the unpack `auto` of macOS and
+/// Windows: private copies (nlink == 1), and apply stays CoW.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_private_copies() {
+    let Some(leg) = safety_leg("private_copies") else {
+        return;
+    };
+    if hardlinks() || cache_root_knob().is_some() {
+        return leg.skip("store-linker-hardlinks");
+    }
+    linker_sequence(leg).await;
+}
+
+/// The cache on another filesystem (`SOCKET_PATCH_VLT_E2E_CACHE_ROOT`,
+/// e.g. `/dev/shm`): the hardlink falls back to a copy (EXDEV), which
+/// `NODE_DEBUG=vlt` logs, and apply stays CoW.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_cross_device_cache() {
+    let Some(leg) = safety_leg("cross_device_cache") else {
+        return;
+    };
+    if cache_root_knob().is_none() {
+        return leg.skip("no-cache-root");
+    }
+    let pair = Pair::build(leg, Shape::with_bystander().warm()).await;
+    let co = pair.fx.checkout("exdev");
+    let out = pair.fx.leg.vlt_with(
+        &co,
+        &["install"],
+        &VltRun::default().with_env("NODE_DEBUG", "vlt"),
+    );
+    assert_ok(&out, "NODE_DEBUG install");
+    assert!(
+        out_text(&out).contains("EXDEV"),
+        "the EXDEV fallback is logged: {}",
+        out_text(&out)
+    );
+    pair.assert_precondition();
+    apply_in_p1(&pair);
+    pair.fx.leg.ran();
+}
+
+async fn linker_sequence(leg: Leg) {
+    let mut shape = Shape::with_bystander().warm();
+    shape.pins.push(SCOPED);
+    let pair = Pair::build(leg, shape).await;
+    let fx = &pair.fx;
+    pair.assert_precondition();
+    apply_in_p1(&pair);
+    remove_tree(&pair.p2);
+    fx.vlt_ok(&pair.p2, &["install"]);
+    assert_eq!(
+        state(&pair.p2, fx.t()),
+        State::Pristine,
+        "p2 reinstalls pristine"
+    );
+    fx.vlt_ok(
+        &fx.proj,
+        &["install", "@isaacs/string-locale-compare@1.1.0"],
+    );
+    assert_eq!(
+        state(&fx.proj, fx.t()),
+        State::Patched,
+        "vlt install <x> keeps it"
+    );
+    let out = agent(&fx.proj, "setup", &["--json"]);
+    assert_eq!(out.code, 0, "{out}");
+    let before = pair.witness();
+    let run = VltRun::default().with_shims();
+    fx.leg.vlt_ok_with(&fx.proj, &["ci"], &run);
+    assert!(
+        !fx.leg.npx_log().is_empty(),
+        "the postinstall hook ran through the npx shim"
+    );
+    assert_eq!(
+        state(&fx.proj, fx.t()),
+        State::Patched,
+        "vlt ci + the hook re-apply"
+    );
+    pair.assert_untouched(&before, "vlt ci + hook");
+    pair.fx.leg.ran();
+}
+
+// ── every write path on the shared store (T16) ────────────────────────────
+
+async fn shared_pair(leg: Leg, shape: Shape) -> Pair {
+    let pair = Pair::build(leg, shape).await;
+    pair.assert_precondition();
+    pair
+}
+
+/// Agent rollback, including onto a hardlinked pristine inode after `vlt
+/// ci`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_agent_rollback() {
+    let Some(leg) = safety_leg("agent_rollback") else {
+        return;
+    };
+    let pair = shared_pair(leg, Shape::with_bystander().warm()).await;
+    let fx = &pair.fx;
+    apply_in_p1(&pair);
+    let before = pair.witness();
+    let out = agent(&fx.proj, "rollback", &["--json"]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    pair.assert_untouched(&before, "agent rollback");
+    stage_manifest(&fx.proj, &[fx.t()]);
+    fx.vlt_ok(&fx.proj, &["ci"]);
+    pair.assert_precondition();
+    let out = agent(&fx.proj, "rollback", &["--json"]);
+    assert!(out.code == 0 || out.code == 1, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    pair.assert_untouched(&before, "rollback onto the hardlinked pristine inode");
+    pair.fx.leg.ran();
+}
+
+/// Agent apply fans out to every store copy of a peer-resolved package.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_peer_fanout() {
+    let Some(leg) = safety_leg("peer_fanout") else {
+        return;
+    };
+    let usx = ("use-sync-external-store", "1.2.0");
+    let shape = Shape {
+        deps: vec![usx, ("react", "18.2.0")],
+        pins: vec![
+            usx,
+            ("react", "18.2.0"),
+            ("loose-envify", "1.4.0"),
+            ("js-tokens", "4.0.0"),
+        ],
+        targets: vec![(usx.0, usx.1, UUID_USX, "index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let pair = shared_pair(leg, shape).await;
+    let fx = &pair.fx;
+    let ids = fx.store_ids(fx.t());
+    assert!(ids.iter().all(|id| id.contains("~peer.")), "{ids:?}");
+    apply_in_p1(&pair);
+    for id in &ids {
+        let dir = store_pkg(&fx.proj, id, &fx.t().name);
+        assert_eq!(state_at(&dir, fx.t()), State::Patched, "{id}");
+    }
+    pair.fx.leg.ran();
+}
+
+/// The hosted heal deletes p1's hardlinked `.vlt/<DepID>`, never the store.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_hosted_heal() {
+    let Some(leg) = safety_leg("hosted_heal") else {
+        return;
+    };
+    let pair = shared_pair(leg, Shape::with_bystander().warm()).await;
+    let fx = &pair.fx;
+    let before = pair.witness();
+    let ids = fx.store_ids(fx.t());
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
+    for id in &ids {
+        assert!(!store_entry(&fx.proj, id).exists());
+    }
+    pair.assert_untouched(&before, "the hosted heal");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    pair.assert_untouched(&before, "the patched reinstall");
+    pair.fx.leg.ran();
+}
+
+/// The vendored local build copies p1's installed (hardlinked) package.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_vendored_build() {
+    let Some(leg) = safety_leg("vendored_build") else {
+        return;
+    };
+    let pair = shared_pair(leg, Shape::with_bystander().warm()).await;
+    let fx = &pair.fx;
+    let before = pair.witness();
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    pair.assert_untouched(&before, "the vendored build");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    pair.assert_untouched(&before, "installing the vendored payload");
+    pair.fx.leg.ran();
+}
+
+/// `vendor --revert` and `repair` on the shared store.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_vendor_revert_and_repair() {
+    let Some(leg) = safety_leg("vendor_revert_and_repair") else {
+        return;
+    };
+    let pair = shared_pair(leg, Shape::with_bystander().warm()).await;
+    let fx = &pair.fx;
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    let before = pair.witness();
+    let out = socket_api(&fx.proj, &fx.svc, &["repair"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    pair.assert_untouched(&before, "repair");
+    let cwd = fx.proj.to_str().unwrap().to_string();
+    let out = socket(
+        &fx.proj,
+        &[
+            "vendor",
+            "--revert",
+            "--json",
+            "--yes",
+            "--offline",
+            "--cwd",
+            &cwd,
+        ],
+        &[],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    pair.assert_untouched(&before, "vendor --revert");
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    pair.assert_untouched(&before, "the registry reinstall");
+    pair.fx.leg.ran();
+}
+
+/// Human `apply` prints the vlt layout note.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_safety_layout_note() {
+    let Some(leg) = safety_leg("layout_note") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = agent(&fx.proj, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let text = format!("{}{}", out.stdout, out.stderr);
+    assert!(
+        text.contains("Note: vlt layout detected. Copy-on-write keeps vlt's shared package store"),
+        "{text}"
+    );
+    fx.leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
new file mode 100644
index 00000000..63234abc
--- /dev/null
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -0,0 +1,1020 @@
+//! Real-vlt vendored capstone (suite `vendored`, DESIGN §8.3).
+//!
+//! Every leg installs a project with the REAL vlt under test, vendors a
+//! patch into the D19 layout (`.socket/vendor/npm/<uuid>/<leaf>/
+//! node_modules/<name>/`) through the real `socket-patch`, and lets vlt
+//! install the committed payload from a fresh checkout. Each leg is
+//! `vlt_pinned_matrix_vendored_<leg>` and prints one `VLT-LEG` line; the
+//! era skips are the `vendored` rows of `vlt-leg-manifest.json`.
+//!
+//! Run: `SOCKET_PATCH_VLT_E2E_JS=<vlt.js> cargo test -p socket-patch-cli
+//! --test e2e_vendor_vlt_build -- --include-ignored vlt_pinned_matrix`.
+
+use std::path::{Path, PathBuf};
+
+use serde_json::{json, Value};
+
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+#[path = "vex_e2e_common/vlt.rs"]
+mod vlt_vex;
+
+use vlt_e2e_common::fixture::*;
+use vlt_e2e_common::*;
+
+const SUITE: &str = "vendored";
+const DEBUG: (&str, &str) = ("debug", "4.3.4");
+const MS2: (&str, &str) = ("ms", "2.1.2");
+const SEMVER: (&str, &str) = ("semver", "7.6.0");
+const UUID_DEBUG: &str = "f6f6f6f6-6666-4666-8666-666666666666";
+const UUID_SEMVER: &str = "a7a7a7a7-7777-4777-8777-777777777777";
+
+/// Start a vendored leg; A0 locks (no `lockfileVersion`) are refused by
+/// vendored mode, so every leg but `absent_version_refused` skips there.
+fn vendored_leg(name: &'static str) -> Option<Leg> {
+    let leg = Leg::start(SUITE, name)?;
+    if leg.era() == VltEra::A0 {
+        leg.skip("a0-vendored-unsupported");
+        return None;
+    }
+    Some(leg)
+}
+
+fn rel(t: &PatchTarget) -> String {
+    let (scope, bare) = match t.name.split_once('/') {
+        Some((scope, bare)) => (format!("{scope}/"), bare),
+        None => (String::new(), t.name.as_str()),
+    };
+    format!(
+        ".socket/vendor/npm/{}/{scope}{bare}-{}/node_modules/{}",
+        t.uuid, t.version, t.name
+    )
+}
+
+fn uuid_dir(proj: &Path, t: &PatchTarget) -> PathBuf {
+    proj.join(format!(".socket/vendor/npm/{}", t.uuid))
+}
+
+/// Every object in `doc` (at any depth) carrying an `errorCode`.
+fn coded(doc: &Value) -> Vec<&Value> {
+    fn walk<'a>(v: &'a Value, out: &mut Vec<&'a Value>) {
+        match v {
+            Value::Object(m) => {
+                if m.contains_key("errorCode") {
+                    out.push(v);
+                }
+                m.values().for_each(|c| walk(c, out));
+            }
+            Value::Array(a) => a.iter().for_each(|c| walk(c, out)),
+            _ => {}
+        }
+    }
+    let mut out = Vec::new();
+    walk(doc, &mut out);
+    out
+}
+
+fn event_codes(doc: &Value) -> Vec<String> {
+    coded(doc)
+        .iter()
+        .filter_map(|e| e["errorCode"].as_str().map(str::to_string))
+        .collect()
+}
+
+fn failed_code(doc: &Value, purl: &str) -> Option<String> {
+    coded(doc)
+        .into_iter()
+        .find(|e| e["purl"] == purl && (e["action"] == "failed" || e.get("error").is_some()))
+        .and_then(|e| e["errorCode"].as_str().map(str::to_string))
+}
+
+/// `scan --mode vendored --vendor-source build` (the local build from the
+/// installed store copy).
+fn vendor_scan(fx: &Fixture) -> Value {
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "scan --mode vendored: {out}");
+    out.json()
+}
+
+fn vendor_revert(proj: &Path) -> SocketOut {
+    let cwd = proj.to_str().unwrap().to_string();
+    socket(
+        proj,
+        &[
+            "vendor",
+            "--revert",
+            "--json",
+            "--yes",
+            "--offline",
+            "--cwd",
+            &cwd,
+        ],
+        &[],
+    )
+}
+
+fn repair(fx: &Fixture) -> SocketOut {
+    socket_api(&fx.proj, &fx.svc, &["repair"], &[])
+}
+
+/// The committed wiring for `t`: the importer spec, the lock's `file` node
+/// and the payload (with `devDependencies` stripped from package.json).
+fn assert_vendored(fx: &Fixture, t: &PatchTarget, importer: &str) {
+    let r = rel(t);
+    let lock = read_lock(&fx.proj);
+    let file_node = lock["nodes"]
+        .as_object()
+        .unwrap()
+        .iter()
+        .find(|(id, _)| id.starts_with("file") && lock["nodes"][*id][3] == r)
+        .map(|(id, _)| id.clone());
+    assert!(file_node.is_some(), "a file node for {r}: {lock:#}");
+    let pkg: Value = serde_json::from_slice(
+        &std::fs::read(fx.proj.join(importer).join("package.json")).unwrap(),
+    )
+    .unwrap();
+    let spec = ["dependencies", "devDependencies", "optionalDependencies"]
+        .iter()
+        .find_map(|f| {
+            pkg[*f].as_object().and_then(|m| {
+                m.values()
+                    .find(|v| v.as_str().is_some_and(|s| s.starts_with("file:")))
+                    .cloned()
+            })
+        })
+        .unwrap_or_else(|| panic!("a file: spec in {importer}/package.json: {pkg:#}"));
+    assert!(spec.as_str().unwrap().ends_with(&r), "{spec}");
+    let payload = package_files(&fx.proj.join(&r));
+    for (file, after) in t.patched_files() {
+        if file == "package.json" {
+            let got: Value = serde_json::from_slice(&payload[&file]).unwrap();
+            assert!(
+                got.get("devDependencies").is_none(),
+                "devDependencies stripped"
+            );
+            continue;
+        }
+        assert_eq!(payload.get(&file), Some(&after), "{r}/{file}");
+    }
+}
+
+/// A fresh checkout's locked install and frozen install land the patched
+/// payload with the lock byte-stable.
+fn assert_fresh_vendored(fx: &Fixture, t: &PatchTarget, name: &str) -> PathBuf {
+    let co = fx.checkout(name);
+    assert_ci_byte_stable(&fx.leg, &co, &VltRun::profile(name), false);
+    assert_eq!(state(&co, t), State::Patched, "{} after ci", t.name);
+    let frozen = fx.leg.frozen_args();
+    std::fs::remove_dir_all(co.join("node_modules")).unwrap();
+    let before = lock_bytes(&co);
+    fx.vlt_ok_profile(&co, &frozen, &format!("{name}-frozen"));
+    assert_eq!(state(&co, t), State::Patched, "{} after {frozen:?}", t.name);
+    assert_eq!(lock_bytes(&co), before, "frozen keeps the lock");
+    co
+}
+
+async fn left_pad_fixture(leg: Leg) -> Fixture {
+    Fixture::build(leg, Shape::with_bystander().warm()).await
+}
+
+fn standalone_vex_outcome(fx: &Fixture, dir: &Path) -> (SocketOut, bool) {
+    let _ = std::fs::remove_file(dir.join("out.vex.json"));
+    let uri = fx.svc.uri();
+    let out = socket_api(
+        dir,
+        &fx.svc,
+        &["vex"],
+        &[
+            "--output",
+            "out.vex.json",
+            "--product",
+            PRODUCT,
+            "--patch-server-url",
+            &uri,
+        ],
+    );
+    let attested = vex_doc_attests(&dir.join("out.vex.json"), fx.t());
+    (out, attested)
+}
+
+// ── drivers ───────────────────────────────────────────────────────────────
+
+/// `scan --mode vendored`: the payload is committed in the D19 layout, the
+/// importer and the lock point at it, and a fresh checkout's `vlt ci` and
+/// frozen install land the patched bytes with the lock byte-stable.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_scan_fresh_ci() {
+    let Some(leg) = vendored_leg("scan_fresh_ci") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    let doc = vendor_scan(&fx);
+    assert!(!event_codes(&doc)
+        .iter()
+        .any(|c| c == "vendor_prebuilt_downloaded"));
+    assert_vendored(&fx, fx.t(), "");
+    assert_eq!(
+        read(&uuid_dir(&fx.proj, fx.t()).join(".gitignore")),
+        "!*\n**/node_modules/*/node_modules/\n**/node_modules/@*/*/node_modules/\n"
+    );
+    assert_eq!(
+        read(&uuid_dir(&fx.proj, fx.t()).join(".gitattributes")),
+        "* -text\n"
+    );
+    assert_fresh_vendored(&fx, fx.t(), "fresh-scan");
+    fx.leg.ran();
+}
+
+fn read(p: &Path) -> String {
+    std::fs::read_to_string(p).unwrap_or_else(|e| panic!("{}: {e}", p.display()))
+}
+
+async fn get_vendored(name: &'static str, source: &str) {
+    let Some(leg) = vendored_leg(name) else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["get", UUID, "--mode", "vendored"],
+        &["--vendor-source", source],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    let served = event_codes(&doc)
+        .iter()
+        .any(|c| c == "vendor_prebuilt_downloaded");
+    assert_eq!(served, source == "service", "{doc:#}");
+    assert_vendored(&fx, fx.t(), "");
+    assert_fresh_vendored(&fx, fx.t(), "fresh-get");
+    fx.leg.ran();
+}
+
+/// `get <uuid> --mode vendored --vendor-source build`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_get_build_fresh_ci() {
+    get_vendored("get_build_fresh_ci", "build").await;
+}
+
+/// `get <uuid> --mode vendored --vendor-source service`: the service's
+/// archive is extracted into the D19 layout.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_get_service_fresh_ci() {
+    get_vendored("get_service_fresh_ci", "service").await;
+}
+
+/// A direct vendored dependency survives a no-op install, an add, an
+/// uninstall and an update (p-vendored §2).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_durability() {
+    let Some(leg) = vendored_leg("durability") else {
+        return;
+    };
+    let mut shape = Shape::with_bystander().warm();
+    shape.pins.push(SCOPED);
+    let fx = Fixture::build(leg, shape).await;
+    vendor_scan(&fx);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let mut steps: Vec<Vec<&str>> = vec![
+        vec!["install"],
+        vec!["install", "@isaacs/string-locale-compare@1.1.0"],
+        vec!["uninstall", "@isaacs/string-locale-compare"],
+    ];
+    if fx.leg.at_least(VLT_UPDATE_FROM) {
+        steps.push(vec!["update"]);
+    }
+    for step in steps {
+        fx.vlt_ok(&fx.proj, &step);
+        assert_eq!(state(&fx.proj, fx.t()), State::Patched, "after {step:?}");
+        assert_vendored(&fx, fx.t(), "");
+    }
+    fx.leg.ran();
+}
+
+// ── self-referencing packages (D19) ───────────────────────────────────────
+
+const SELFREF: (&str, &str) = ("vlt-e2e-selfref", "1.0.0");
+const UUID_SELFREF: &str = "b8b8b8b8-8888-4888-8888-888888888888";
+
+fn selfref_shape(importer_pkg: (&str, String)) -> Shape {
+    Shape {
+        deps: vec![],
+        pins: vec![],
+        synthetic: vec![selfref_pkg()],
+        targets: vec![(SELFREF.0, SELFREF.1, UUID_SELFREF, "lib/impl.js")],
+        files: vec![(importer_pkg.0.to_string(), importer_pkg.1)],
+        warm: true,
+        ..Shape::left_pad()
+    }
+}
+
+/// `require('<module>')` from `dir` (the package requires its own name)
+/// loads the patched `lib/impl.js`.
+fn assert_selfref(dir: &Path, module: &str, t: &PatchTarget) {
+    let script = format!(
+        "require('{module}');\
+         const f=require('fs').readFileSync(require.resolve('{module}/lib/impl'),'utf8');\
+         console.log(f.startsWith('/* SOCKET-PATCHED */')?'PATCHED':'PRISTINE')"
+    );
+    let out = std::process::Command::new("node")
+        .arg("-e")
+        .arg(&script)
+        .current_dir(dir)
+        .output()
+        .unwrap();
+    assert_ok(
+        &out,
+        &format!("self-reference of {} from {}", t.name, dir.display()),
+    );
+    assert_eq!(String::from_utf8_lossy(&out.stdout).trim(), "PATCHED");
+}
+
+/// A workspace member's direct dependency on a package that requires its
+/// own name is vendored (the member gets `file:../../.socket/…`), and the
+/// self-reference resolves after a fresh `vlt ci`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_workspace_member_selfref() {
+    let Some(leg) = vendored_leg("workspace_member_selfref") else {
+        return;
+    };
+    if !hermetic_registry(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    let mut shape = selfref_shape(("packages/a/package.json", package_json("a", &[SELFREF])));
+    shape.vlt_json.workspaces = Some(json!("packages/*"));
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    vendor_scan(&fx);
+    assert_vendored(&fx, &t, "packages/a");
+    let pkg = read(&fx.proj.join("packages/a/package.json"));
+    assert!(pkg.contains(&format!("file:../../{}", rel(&t))), "{pkg}");
+    let co = fx.checkout("fresh-member");
+    assert_ci_byte_stable(&fx.leg, &co, &VltRun::profile("fresh-member"), false);
+    assert_selfref(&co.join("packages/a"), SELFREF.0, &t);
+    fx.leg.ran();
+}
+
+/// An npm-alias importer edge (`sr: npm:vlt-e2e-selfref@1.0.0`):
+/// the package.json key stays the alias and the self-reference resolves
+/// (`npm:` specs follow `registries.npm`, pointed at the harness registry
+/// on every era).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_alias_selfref() {
+    let Some(leg) = vendored_leg("alias_selfref") else {
+        return;
+    };
+    if !hermetic_registry(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    if npm_alias_to_public_npm(leg.version()) {
+        return leg.skip("npm-alias-non-hermetic");
+    }
+    let mut shape = selfref_shape(("README.md", "alias\n".into()))
+        .vlt_json_fn(|v, r| with_registries(v, r, json!({ "npm": r }), &[]));
+    shape.deps = vec![("sr", "npm:vlt-e2e-selfref@1.0.0")];
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    vendor_scan(&fx);
+    let pkg: Value = serde_json::from_str(&read(&fx.proj.join("package.json"))).unwrap();
+    assert!(
+        pkg["dependencies"]["sr"]
+            .as_str()
+            .is_some_and(|s| s.ends_with(&rel(&t))),
+        "{pkg:#}"
+    );
+    let co = fx.checkout("fresh-alias");
+    assert_ci_byte_stable(&fx.leg, &co, &VltRun::profile("fresh-alias"), true);
+    assert_selfref(&co, "sr", &t);
+    fx.leg.ran();
+}
+
+/// A dependency with dependencies: vlt creates the link dir inside the
+/// vendored package (socket-patch never reads or commits it) and `git
+/// status` stays clean.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_dep_with_deps() {
+    let Some(leg) = vendored_leg("dep_with_deps") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![DEBUG],
+        pins: vec![DEBUG, MS2],
+        targets: vec![(DEBUG.0, DEBUG.1, UUID_DEBUG, "src/index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    git_ok(&fx.proj, &["init", "-q"]);
+    write(&fx.proj.join(".gitignore"), "node_modules\n.VLT.DELETE.*\n");
+    vendor_scan(&fx);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(state(&fx.proj, &t), State::Patched);
+    let inner = fx.proj.join(rel(&t)).join("node_modules");
+    assert!(inner.join("ms").exists(), "vlt links ms inside the payload");
+    git_ok(&fx.proj, &["add", "-A"]);
+    git_ok(&fx.proj, &["commit", "-q", "-m", "vendored"]);
+    fx.vlt_ok(&fx.proj, &["install"]);
+    let status = git_ok(&fx.proj, &["status", "--porcelain"]);
+    assert_eq!(status, "", "the link dir stays out of git");
+    let tracked = git_ok(&fx.proj, &["ls-files"]);
+    assert!(
+        !tracked.contains(&format!("{}/node_modules/", rel(&t))),
+        "{tracked}"
+    );
+    let co = fx.leg.root.join("clone");
+    git_ok(
+        &fx.leg.root,
+        &[
+            "clone",
+            "-q",
+            fx.proj.to_str().unwrap(),
+            co.to_str().unwrap(),
+        ],
+    );
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "clone");
+    assert_eq!(state(&co, &t), State::Patched);
+    assert!(installed(&co, "debug", "package.json").is_some());
+    fx.leg.ran();
+}
+
+/// A root `.gitignore` that ignores what packages publish: the payload is
+/// committed anyway (`<uuid>/.gitignore` re-includes it) and a fresh clone
+/// installs the patch.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_hostile_gitignore() {
+    let Some(leg) = vendored_leg("hostile_gitignore") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    git_ok(&fx.proj, &["init", "-q"]);
+    write(
+        &fx.proj.join(".gitignore"),
+        "node_modules\n.VLT.DELETE.*\ndist/\n*.map\n*.js\n",
+    );
+    vendor_scan(&fx);
+    git_ok(&fx.proj, &["add", "-A"]);
+    git_ok(&fx.proj, &["commit", "-q", "-m", "vendored"]);
+    let tracked = git_ok(&fx.proj, &["ls-files"]);
+    assert!(
+        tracked.contains(&format!("{}/index.js", rel(fx.t()))),
+        "{tracked}"
+    );
+    let co = fx.leg.root.join("clone");
+    git_ok(
+        &fx.leg.root,
+        &[
+            "clone",
+            "-q",
+            fx.proj.to_str().unwrap(),
+            co.to_str().unwrap(),
+        ],
+    );
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "clone");
+    assert_eq!(state(&co, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// A `core.autocrlf=true` clone keeps the payload byte-exact
+/// (`<uuid>/.gitattributes` is `* -text`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_autocrlf_checkout() {
+    let Some(leg) = vendored_leg("autocrlf_checkout") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    git_ok(&fx.proj, &["init", "-q"]);
+    write(&fx.proj.join(".gitignore"), "node_modules\n.VLT.DELETE.*\n");
+    vendor_scan(&fx);
+    git_ok(&fx.proj, &["add", "-A"]);
+    git_ok(&fx.proj, &["commit", "-q", "-m", "vendored"]);
+    let co = fx.leg.root.join("crlf");
+    git_ok(
+        &fx.leg.root,
+        &[
+            "-c",
+            "core.autocrlf=true",
+            "clone",
+            "-q",
+            fx.proj.to_str().unwrap(),
+            co.to_str().unwrap(),
+        ],
+    );
+    let payload = package_files(&co.join(rel(fx.t())));
+    assert_eq!(payload.get(&fx.t().file), Some(&fx.t().after), "byte-exact");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "crlf");
+    assert_eq!(state(&co, fx.t()), State::Patched);
+    let (out, attested) = standalone_vex_outcome(&fx, &co);
+    assert!(attested, "the autocrlf checkout verifies: {out}");
+    fx.leg.ran();
+}
+
+/// A bin-bearing package (semver): the bin is linked from the vendored
+/// payload after a fresh `vlt ci`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_bin_bearing() {
+    let Some(leg) = vendored_leg("bin_bearing") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![SEMVER],
+        pins: vec![SEMVER, ("lru-cache", "6.0.0"), ("yallist", "4.0.0")],
+        targets: vec![(SEMVER.0, SEMVER.1, UUID_SEMVER, "index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    vendor_scan(&fx);
+    let co = assert_fresh_vendored(&fx, fx.t(), "fresh-bin");
+    let bin = co.join("node_modules/.bin/semver");
+    assert!(
+        bin.exists() || co.join("node_modules/.bin/semver.cmd").exists(),
+        "the bin is linked"
+    );
+    let out = std::process::Command::new("node")
+        .arg(co.join("node_modules/semver/bin/semver.js"))
+        .arg("1.2.3")
+        .output()
+        .unwrap();
+    assert_ok(&out, "semver bin");
+    fx.leg.ran();
+}
+
+/// A patch that also touches package.json of a package with
+/// devDependencies: vendoring verifies it under the vlt manifest exemption
+/// and VEX attests it.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_package_json_devdeps_patch() {
+    let Some(leg) = vendored_leg("package_json_devdeps_patch") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    let t = fx.t().clone();
+    let pkg = String::from_utf8(t.base["package.json"].clone()).unwrap();
+    let after = pkg
+        .replacen('{', "{\n  \"socketPatched\": true,", 1)
+        .into_bytes();
+    let t2 = t.clone().also_patch("package.json", after);
+    let svc = PatchService::start(vec![t2.clone()]).await;
+    let out = socket_api(
+        &fx.proj,
+        &svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    let payload = package_files(&fx.proj.join(rel(&t2)));
+    let got: Value = serde_json::from_slice(&payload["package.json"]).unwrap();
+    assert_eq!(got["socketPatched"], true);
+    assert!(got.get("devDependencies").is_none());
+    let co = fx.checkout("fresh-pkgjson");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-pkgjson");
+    assert_eq!(state(&co, &t2), State::Patched);
+    let uri = svc.uri();
+    let out = socket_api(
+        &co,
+        &svc,
+        &["vex"],
+        &[
+            "--output",
+            "out.vex.json",
+            "--product",
+            PRODUCT,
+            "--patch-server-url",
+            &uri,
+        ],
+    );
+    assert!(vex_doc_attests(&co.join("out.vex.json"), &t2), "{out}");
+    fx.leg.ran();
+}
+
+// ── repair, idempotency, revert ───────────────────────────────────────────
+
+/// The committed payload deleted outright: `repair` rebuilds it from the
+/// installed copy, and a fresh checkout installs the patch again.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_repair_rebuilds() {
+    let Some(leg) = vendored_leg("repair_rebuilds") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    let lock = lock_bytes(&fx.proj);
+    let committed = package_files(&fx.proj.join(rel(fx.t())));
+    std::fs::remove_dir_all(fx.proj.join(rel(fx.t()))).unwrap();
+    let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
+    let out = repair(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "repair");
+    assert_eq!(package_files(&fx.proj.join(rel(fx.t()))), committed);
+    assert_eq!(lock_bytes(&fx.proj), lock, "repair keeps the lock");
+    assert_fresh_vendored(&fx, fx.t(), "fresh-repair");
+    fx.leg.ran();
+}
+
+/// `vendor --revert` twice and `repair` twice: the reruns change nothing.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_idempotency() {
+    let Some(leg) = vendored_leg("idempotency") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    let out = repair(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    let files = package_files(&fx.proj.join(".socket"));
+    let lock = lock_bytes(&fx.proj);
+    let out = repair(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(
+        package_files(&fx.proj.join(".socket")),
+        files,
+        "repair rerun"
+    );
+    assert_eq!(lock_bytes(&fx.proj), lock);
+    let out = vendor_revert(&fx.proj);
+    assert_eq!(out.code, 0, "{out}");
+    let lock = lock_bytes(&fx.proj);
+    let pkg = std::fs::read(fx.proj.join("package.json")).unwrap();
+    let out = vendor_revert(&fx.proj);
+    assert!(out.code == 0 || out.code == 1, "{out}");
+    assert_eq!(lock_bytes(&fx.proj), lock, "revert rerun");
+    assert_eq!(std::fs::read(fx.proj.join("package.json")).unwrap(), pkg);
+    fx.leg.ran();
+}
+
+/// `vendor --revert` restores the lock and package.json byte-for-byte and
+/// removes the payload; `vlt ci` then installs the registry bytes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_revert_byte_exact() {
+    let Some(leg) = vendored_leg("revert_byte_exact") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    let pkg_before = std::fs::read(fx.proj.join("package.json")).unwrap();
+    vendor_scan(&fx);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    let snap = fx.snapshot(&fx.proj, &[]);
+    let out = vendor_revert(&fx.proj);
+    assert_eq!(out.code, 0, "{out}");
+    snap.assert_same(&fx.snapshot(&fx.proj, &[]), "vendor --revert");
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(&fx.proj)),
+        String::from_utf8_lossy(&fx.lock_before)
+    );
+    assert_eq!(
+        std::fs::read(fx.proj.join("package.json")).unwrap(),
+        pkg_before
+    );
+    assert!(!uuid_dir(&fx.proj, fx.t()).exists(), "payload removed");
+    let co = fx.checkout("after-revert");
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "after-revert");
+    assert_eq!(state(&co, fx.t()), State::Pristine);
+    fx.leg.ran();
+}
+
+/// Re-saves after vendoring (`vlt install <new>`, `vlt uninstall
+/// <other>`, a CRLF lock): `vendor --revert` re-places the registry
+/// entries among vlt's and a following `vlt ci` keeps the lock
+/// byte-identical.
+async fn resave_revert(name: &'static str, step: &'static str, crlf: bool) {
+    let Some(leg) = vendored_leg(name) else {
+        return;
+    };
+    let mut shape = Shape::with_bystander().warm();
+    shape.pins.push(SCOPED);
+    let fx = Fixture::build(leg, shape).await;
+    if crlf {
+        std::fs::write(fx.proj.join(VLT_LOCK), to_crlf(&fx.lock_before)).unwrap();
+    }
+    vendor_scan(&fx);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    match step {
+        "install" => {
+            fx.vlt_ok(
+                &fx.proj,
+                &["install", "@isaacs/string-locale-compare@1.1.0"],
+            );
+        }
+        _ => {
+            fx.vlt_ok(&fx.proj, &["uninstall", MS.0]);
+        }
+    }
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let out = vendor_revert(&fx.proj);
+    assert_eq!(out.code, 0, "{out}");
+    let lock = read_lock(&fx.proj);
+    assert_eq!(
+        node_ids(&lock, LP.0, LP.1).len(),
+        1,
+        "registry node back: {lock:#}"
+    );
+    assert!(
+        !lock.to_string().contains(".socket/vendor"),
+        "no vendored wiring left: {lock:#}"
+    );
+    if fx.leg.at_least(HAS_CI_FROM) {
+        assert_ci_byte_stable(&fx.leg, &fx.proj, &fx.run, false);
+        assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    }
+    fx.leg.ran();
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_resave_install_revert() {
+    resave_revert("resave_install_revert", "install", false).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_resave_uninstall_revert() {
+    resave_revert("resave_uninstall_revert", "uninstall", false).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_resave_crlf_revert() {
+    resave_revert("resave_crlf_revert", "install", true).await;
+}
+
+// ── tamper (T33) ──────────────────────────────────────────────────────────
+
+/// Vendor, install, tamper with the committed state, then: standalone VEX
+/// no longer attests the patch.
+async fn tamper(name: &'static str, how: fn(&Fixture, &Path)) {
+    let Some(leg) = vendored_leg(name) else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    let (out, attested) = standalone_vex_outcome(&fx, &fx.proj);
+    assert!(attested, "attested before the tamper: {out}");
+    let payload = fx.proj.join(rel(fx.t()));
+    how(&fx, &payload);
+    let (out, attested) = standalone_vex_outcome(&fx, &fx.proj);
+    assert!(!attested, "{name}: VEX must not attest: {out}");
+    fx.leg.ran();
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_planted_file() {
+    tamper("tamper_planted_file", |_, p| {
+        write(&p.join("planted.js"), "module.exports = 'planted'\n")
+    })
+    .await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_file_content() {
+    tamper("tamper_file_content", |fx, p| {
+        let mut b = fx.t().after.clone();
+        b.extend_from_slice(b"\n// tampered\n");
+        write(&p.join(&fx.t().file), b)
+    })
+    .await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_payload_package_json() {
+    tamper("tamper_payload_package_json", |fx, p| {
+        write(&p.join("package.json"), &fx.t().base["package.json"])
+    })
+    .await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_symlink_outside() {
+    tamper("tamper_symlink_outside", |fx, p| {
+        let target = fx.proj.join("package.json");
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(&target, p.join("evil.js")).unwrap();
+        #[cfg(windows)]
+        std::os::windows::fs::symlink_file(&target, p.join("evil.js")).unwrap();
+    })
+    .await;
+}
+
+/// A deleted `<uuid>/.gitignore` is repaired, not a mismatch.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_deleted_gitignore() {
+    let Some(leg) = vendored_leg("tamper_deleted_gitignore") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    let gi = uuid_dir(&fx.proj, fx.t()).join(".gitignore");
+    let body = std::fs::read(&gi).unwrap();
+    std::fs::remove_file(&gi).unwrap();
+    let out = repair(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(std::fs::read(&gi).unwrap(), body, "repair restores it");
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    let (out, attested) = standalone_vex_outcome(&fx, &fx.proj);
+    assert!(attested, "{out}");
+    fx.leg.ran();
+}
+
+/// A hand-edited file-node path in the lock: revert reports the drift and
+/// keeps the payload, writing nothing.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_tamper_lock_file_node_path() {
+    let Some(leg) = vendored_leg("tamper_lock_file_node_path") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    let r = rel(fx.t());
+    let text = String::from_utf8(lock_bytes(&fx.proj)).unwrap();
+    let edited = text.replacen(&format!("\"{r}\"]"), &format!("\"{r}/x\"]"), 1);
+    assert_ne!(edited, text, "the file node carries the path");
+    std::fs::write(fx.proj.join(VLT_LOCK), &edited).unwrap();
+    let out = vendor_revert(&fx.proj);
+    let doc = out.json();
+    assert!(
+        event_codes(&doc)
+            .iter()
+            .any(|c| c == "vendor_lock_entry_drifted"),
+        "{out}"
+    );
+    assert_eq!(String::from_utf8(lock_bytes(&fx.proj)).unwrap(), edited);
+    assert!(fx.proj.join(&r).exists(), "the payload is kept");
+    let (out, attested) = standalone_vex_outcome(&fx, &fx.proj);
+    assert!(!attested, "{out}");
+    fx.leg.ran();
+}
+
+// ── refusals and era legs ─────────────────────────────────────────────────
+
+/// A transitive-only target is refused (`vendor_vlt_transitive_unsupported`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_transitive_refused() {
+    let Some(leg) = vendored_leg("transitive_refused") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![DEBUG],
+        pins: vec![DEBUG, MS2],
+        targets: vec![(MS2.0, MS2.1, UUID_MS, "index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    let doc = out.json();
+    assert_eq!(
+        failed_code(&doc, &fx.t().purl()).as_deref(),
+        Some("vendor_vlt_transitive_unsupported"),
+        "{out}"
+    );
+    assert_eq!(lock_bytes(&fx.proj), fx.lock_before, "no write");
+    fx.leg.ran();
+}
+
+/// An era-A lock (0.0.0-19 … rc.8) with `··` ids (the default registry,
+/// public npm) vendors with `vendor_vlt_legacy_lockfile`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
+    let Some(leg) = vendored_leg("legacy_lockfile_warning") else {
+        return;
+    };
+    if leg.era() != VltEra::A {
+        return leg.skip("not-legacy-lockfile");
+    }
+    let mut shape = Shape::with_bystander().warm();
+    shape.vlt_json.no_registry = true;
+    let fx = Fixture::build(leg, shape).await;
+    let lock = read_lock(&fx.proj);
+    assert!(
+        node_id(&lock, LP.0, LP.1).starts_with("··"),
+        "the default registry writes `··` ids: {lock:#}"
+    );
+    let doc = vendor_scan(&fx);
+    assert!(
+        doc.to_string().contains("vendor_vlt_legacy_lockfile"),
+        "{doc:#}"
+    );
+    assert_fresh_vendored(&fx, fx.t(), "fresh-legacy");
+    fx.leg.ran();
+}
+
+/// An A0 lock (no `lockfileVersion`, ≤ 0.0.0-18) is refused
+/// (`vendor_lockfile_version_unsupported`) with no writes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_absent_version_refused() {
+    let Some(leg) = Leg::start(SUITE, "absent_version_refused") else {
+        return;
+    };
+    if leg.era() != VltEra::A0 {
+        return leg.skip("lockfile-version-present");
+    }
+    let fx = left_pad_fixture(leg).await;
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["scan", "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    let doc = out.json();
+    assert_eq!(
+        failed_code(&doc, &fx.t().purl()).as_deref(),
+        Some("vendor_lockfile_version_unsupported"),
+        "{out}"
+    );
+    assert_eq!(lock_bytes(&fx.proj), fx.lock_before, "no write");
+    assert!(!fx.proj.join(".socket/vendor/npm").exists());
+    fx.leg.ran();
+}
+
+/// The lock deleted, then `vlt install`: 0.0.0-31 … rc.5 cannot resolve
+/// a lockless `file:` directory (non-zero exit); every other release
+/// installs the patched payload.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_lockless_reinstall() {
+    let Some(leg) = vendored_leg("lockless_reinstall") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    vendor_scan(&fx);
+    let co = fx.checkout("lockless");
+    std::fs::remove_file(co.join(VLT_LOCK)).unwrap();
+    let out = fx.vlt_profile(&co, &["install"], "lockless");
+    if !lockless_file_dir_broken(fx.leg.version()) {
+        assert_ok(&out, "lockless install");
+        assert_eq!(state(&co, fx.t()), State::Patched);
+    } else {
+        assert!(!out.status.success(), "{}", out_text(&out));
+    }
+    fx.leg.ran();
+}
+
+/// The manifest-less VEX tail on the vendored project.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_manifestless_vex() {
+    let Some(leg) = vendored_leg("manifestless_vex") else {
+        return;
+    };
+    let fx = left_pad_fixture(leg).await;
+    let pkg_before = std::fs::read(fx.proj.join("package.json")).unwrap();
+    vendor_scan(&fx);
+    let t = fx.t().clone();
+    let cve = [t.cve.as_str()];
+    let vulns = vec![(t.ghsa.as_str(), &cve[..])];
+    let case = vlt_vex::VltVexCase {
+        tag: "vendored",
+        mode: vlt_vex::VltMode::Vendored,
+        purl: &t.purl(),
+        uuid: &t.uuid,
+        files: t.vex_files(),
+        vulns: &vulns,
+        registry_lock: fx.lock_before.clone(),
+        registry_manifests: vec![("package.json".into(), pkg_before)],
+        patch_server_url: Some(fx.svc.uri()),
+    };
+    let leg = &fx.leg;
+    vlt_vex::run_vlt_vex_matrix(&fx.proj, &leg.root, &case, |co| {
+        let out = leg.vlt_with(co, &leg.locked_install_args(), &VltRun::profile("vex"));
+        assert_ok(&out, "vex checkout locked install");
+        assert_eq!(state(co, &t), State::Patched);
+    });
+    fx.leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vendored_production.rs b/crates/socket-patch-cli/tests/e2e_vendored_production.rs
index 021cfa89..4a9bf1c0 100644
--- a/crates/socket-patch-cli/tests/e2e_vendored_production.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendored_production.rs
@@ -110,8 +110,6 @@
 use std::path::{Path, PathBuf};
 use std::process::{Command, Output};
 
-#[path = "common/cache_env.rs"]
-mod cache_env;
 #[path = "npm_e2e_common/manifestless.rs"]
 mod npm_e2e_common;
 #[path = "vex_e2e_common/mod.rs"]
@@ -124,6 +122,10 @@ mod yarn_classic_vex;
 mod uv_vex;
 #[path = "vex_pipenv_pip_steps/mod.rs"]
 mod vex_pipenv_pip_steps;
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+
+use vlt_e2e_common::cache_env;
 
 // ---------------------------------------------------------------------------
 // Production endpoints + required-patch catalog
@@ -2285,9 +2287,7 @@ fn gem_bundler_vendored_install_proof() {
     // The committable artifact + the mandatory pair edit.
     let copy_rel = format!(".socket/vendor/gem/{wired_uuid}/{GEM_NAME}-{GEM_VERSION}");
     assert_patched(
-        &proj
-            .join(&copy_rel)
-            .join(patched_file_rel),
+        &proj.join(&copy_rel).join(patched_file_rel),
         PATCH_MARKER,
         LEG,
     );
@@ -2671,3 +2671,70 @@ async fn canary_unpublished_vendored_ecosystems() {
     }
     println!("NOTE canary_unpublished_vendored_ecosystems: {msg}");
 }
+
+// ---------------------------------------------------------------------------
+// vlt (suite `production`, DESIGN §8.3)
+// ---------------------------------------------------------------------------
+
+/// The vlt vendored install proof against production: the service's
+/// artifact is extracted into the D19 layout
+/// (`.socket/vendor/npm/<uuid>/minimist-1.2.2/node_modules/minimist`), and a
+/// fresh checkout's `vlt ci` installs the patched minimist with the lock
+/// byte-stable.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "live production API + real npm registry + real vlt. Run with --ignored."]
+async fn vlt_pinned_matrix_production_vendored_install_proof() {
+    use vlt_e2e_common::*;
+    if strict() && std::env::var_os("SOCKET_PATCH_VLT_E2E_JS").is_none() {
+        panic!("STRICT: vlt_pinned_matrix_production_vendored_install_proof needs SOCKET_PATCH_VLT_E2E_JS");
+    }
+    let Some(leg) = Leg::start("production", "vendored_install_proof") else {
+        return;
+    };
+    if leg.era() == VltEra::A0 {
+        return leg.skip("a0-vendored-unsupported");
+    }
+    let npmjs = "https://registry.npmjs.org/";
+    let proj = leg.dir("proj");
+    write(
+        &proj.join("package.json"),
+        package_json("vlt-prod", &[(NPM_NAME, NPM_VERSION)]),
+    );
+    write_vlt_json(&proj, leg.version(), npmjs, &VltJson::default());
+    leg.vlt_ok(&proj, &["install"]);
+    assert_pristine(
+        &minimist_entry(&proj),
+        PATCH_MARKER,
+        "vlt vendored production",
+    );
+    let cwd = proj.to_str().unwrap().to_string();
+    let out = socket(
+        &proj,
+        &[
+            "scan", "--mode", "vendored", "--json", "--yes", "--cwd", &cwd,
+        ],
+        &[],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    assert_vendor_applied(&doc, NPM_PURL, "vlt vendored production");
+    let rel =
+        format!(".socket/vendor/npm/{NPM_UUID}/{NPM_NAME}-{NPM_VERSION}/node_modules/{NPM_NAME}");
+    assert!(
+        proj.join(&rel).join("index.js").is_file(),
+        "the D19 payload at {rel}"
+    );
+    let lock = String::from_utf8(lock_bytes(&proj)).unwrap();
+    assert!(
+        lock.contains(&rel),
+        "vlt-lock.json is wired to the payload:\n{lock}"
+    );
+    let co = fresh_checkout(&proj, &leg.root.join("fresh"));
+    assert_ci_byte_stable(&leg, &co, &VltRun::profile("fresh"), false);
+    assert_patched(
+        &minimist_entry(&co),
+        PATCH_MARKER,
+        "vlt vendored production",
+    );
+    leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/e2e_vlt.rs b/crates/socket-patch-cli/tests/e2e_vlt.rs
new file mode 100644
index 00000000..a399991e
--- /dev/null
+++ b/crates/socket-patch-cli/tests/e2e_vlt.rs
@@ -0,0 +1,763 @@
+//! Real-vlt agent mode and setup (suites `agent` and `setup`, DESIGN §5,
+//! §8.3).
+//!
+//! Agent legs patch a REAL vlt tree in place (importer links, the `.vlt`
+//! store, transitive, scoped, alias and peer copies) and pin how long the
+//! patch persists across vlt commands (T23). Setup legs wire the root
+//! `postinstall` hook and run vlt with a leg-private `npx` shim that execs
+//! the socket-patch under test, counting hook invocations (T17/T18/T22).
+//! Each leg is `vlt_pinned_matrix_<suite>_<leg>` and prints one `VLT-LEG`
+//! line.
+
+use std::path::Path;
+
+use serde_json::{json, Value};
+
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+
+use vlt_e2e_common::fixture::*;
+use vlt_e2e_common::*;
+
+const DEBUG: (&str, &str) = ("debug", "4.3.4");
+const MS2: (&str, &str) = ("ms", "2.1.2");
+const USX: (&str, &str) = ("use-sync-external-store", "1.2.0");
+const UUID_MS2: &str = "c9c9c9c9-9999-4999-8999-999999999999";
+const HOOK: &str = "npx @socketsecurity/socket-patch apply --silent --ecosystems npm";
+
+fn agent_leg(name: &'static str) -> Option<Leg> {
+    Leg::start("agent", name)
+}
+
+fn setup_leg(name: &'static str) -> Option<Leg> {
+    Leg::start("setup", name)
+}
+
+fn cwd(dir: &Path) -> String {
+    dir.to_str().unwrap().to_string()
+}
+
+/// `<cmd> --json --yes --offline --cwd <dir>` plus `extra`.
+fn offline(dir: &Path, cmd: &[&str], extra: &[&str]) -> SocketOut {
+    let c = cwd(dir);
+    let mut args: Vec<&str> = cmd.to_vec();
+    args.extend(["--json", "--yes", "--offline", "--cwd", &c]);
+    args.extend_from_slice(extra);
+    socket(dir, &args, &[])
+}
+
+/// A tree with every copy shape: left-pad (direct), ms@2.1.2 (only
+/// transitive, via debug), a scoped package, an `npm:` alias (`mm` →
+/// ms@2.1.3) and a peer-resolved package.
+fn zoo_shape() -> Shape {
+    let pins = vec![
+        LP,
+        DEBUG,
+        MS2,
+        MS,
+        SCOPED,
+        USX,
+        ("react", "18.2.0"),
+        ("loose-envify", "1.4.0"),
+        ("js-tokens", "4.0.0"),
+    ];
+    Shape {
+        deps: vec![
+            LP,
+            DEBUG,
+            SCOPED,
+            ("mm", "npm:ms@2.1.3"),
+            USX,
+            ("react", "18.2.0"),
+        ],
+        pins,
+        targets: vec![
+            (LP.0, LP.1, UUID, "index.js"),
+            (MS2.0, MS2.1, UUID_MS2, "index.js"),
+            (MS.0, MS.1, UUID_MS, "index.js"),
+            (SCOPED.0, SCOPED.1, UUID_SCOPED, "index.js"),
+            (USX.0, USX.1, UUID_USX, "index.js"),
+        ],
+        warm: true,
+        ..Shape::left_pad()
+    }
+    .vlt_json_fn(|v, r| with_registries(v, r, json!({ "npm": r }), &[]))
+}
+
+/// Every installed copy of `t` (every store entry of `name@version`, and
+/// the importer link when it resolves there) is in `want`.
+fn assert_every_copy(proj: &Path, t: &PatchTarget, want: State) {
+    let lock = read_lock(proj);
+    let ids = node_ids(&lock, &t.name, &t.version);
+    assert!(!ids.is_empty(), "{} in the lock", t.name);
+    for id in ids {
+        let dir = store_pkg(proj, &id, &t.name);
+        if dir.exists() {
+            assert_eq!(state_at(&dir, t), want, "{id}");
+        }
+    }
+}
+
+fn agent_scan(fx: &Fixture) -> SocketOut {
+    socket_api(&fx.proj, &fx.svc, &["scan", "--mode", "agent"], &[])
+}
+
+// ── agent commands ────────────────────────────────────────────────────────
+
+/// `scan --mode agent` patches every copy: the direct importer, the
+/// transitive-only store copy, the scoped package, the alias and the peer
+/// instance; `list` shows them; `rollback` restores every copy.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_scan_apply_rollback_list() {
+    let Some(leg) = agent_leg("scan_apply_rollback_list") else {
+        return;
+    };
+    if !hermetic_registry(leg.version()) || npm_alias_to_public_npm(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    let fx = Fixture::build(leg, zoo_shape()).await;
+    let out = agent_scan(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    for t in &fx.svc.targets {
+        assert_every_copy(&fx.proj, t, State::Patched);
+    }
+    assert_eq!(state(&fx.proj, fx.svc.target(LP.0)), State::Patched);
+    let mm = importer_dir(&fx.proj, "", "mm");
+    assert_eq!(
+        state_at(&mm, &fx.svc.targets[2]),
+        State::Patched,
+        "the alias"
+    );
+    let out = offline(&fx.proj, &["list"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    for t in &fx.svc.targets {
+        assert!(out.stdout.contains(&t.uuid), "list shows {}: {out}", t.name);
+    }
+    let out = socket_api(&fx.proj, &fx.svc, &["rollback"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    for t in &fx.svc.targets {
+        assert_every_copy(&fx.proj, t, State::Pristine);
+    }
+    fx.leg.ran();
+}
+
+/// `get <uuid>` (agent) patches the installed copy; `remove <purl>` rolls
+/// it back and drops it from the manifest.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_get_and_remove() {
+    let Some(leg) = agent_leg("get_and_remove") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = socket_api(&fx.proj, &fx.svc, &["get", UUID], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let purl = fx.t().purl();
+    let out = socket_api(&fx.proj, &fx.svc, &["remove", &purl], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    let manifest = std::fs::read_to_string(fx.proj.join(".socket/manifest.json")).unwrap();
+    assert!(!manifest.contains(UUID), "{manifest}");
+    fx.leg.ran();
+}
+
+/// `vlt install`, then `apply` from a staged manifest patches the file.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_install_then_apply_patches_file() {
+    let Some(leg) = agent_leg("install_then_apply_patches_file") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad().warm()).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = offline(&fx.proj, &["apply"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    assert_every_copy(&fx.proj, fx.t(), State::Patched);
+    fx.leg.ran();
+}
+
+/// A transitive-only dependency (ms via debug, no importer link) is
+/// patched in the `.vlt` store.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_transitive_only_dep_apply_patches_store() {
+    let Some(leg) = agent_leg("transitive_only_dep_apply_patches_store") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![DEBUG],
+        pins: vec![DEBUG, MS2],
+        targets: vec![(MS2.0, MS2.1, UUID_MS2, "index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    assert!(
+        !fx.proj.join("node_modules/ms").exists(),
+        "no importer link"
+    );
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = offline(&fx.proj, &["apply"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_every_copy(&fx.proj, fx.t(), State::Patched);
+    let out = std::process::Command::new("node")
+        .arg("-e")
+        .arg("const f=require('fs').readFileSync(require.resolve('ms',{paths:[require.resolve('debug')]}),'utf8');console.log(f.startsWith('/* SOCKET-PATCHED */'))")
+        .current_dir(&fx.proj)
+        .output()
+        .unwrap();
+    assert_eq!(
+        String::from_utf8_lossy(&out.stdout).trim(),
+        "true",
+        "debug loads the patch"
+    );
+    fx.leg.ran();
+}
+
+/// The agent `scan` lockfile supplement: a package in `vlt-lock.json` but
+/// not installed is still reported (`lockfileOnlyPackages`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_lockfile_supplement() {
+    let Some(leg) = agent_leg("lockfile_supplement") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    let out = socket_api(&fx.proj, &fx.svc, &["scan"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    assert!(
+        doc["lockfileOnlyPackages"].as_u64().unwrap_or(0) >= 1,
+        "{doc:#}"
+    );
+    assert!(
+        out.stdout.contains(&fx.t().uuid),
+        "the lock-only package has its patch: {doc:#}"
+    );
+    fx.leg.ran();
+}
+
+/// `vlt install @socketsecurity/socket-patch` (the npm launcher and its
+/// os/cpu/libc-filtered platform packages, built from this repo's `npm/`
+/// with the binary under test): the linked bin runs the binary.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_launcher() {
+    let Some(leg) = agent_leg("launcher") else {
+        return;
+    };
+    if !hermetic_registry(leg.version()) {
+        return leg.skip("non-hermetic-registry");
+    }
+    let (pkgs, host) = launcher_packages();
+    let reg = Registry::start_with(&[], pkgs).await;
+    let proj = leg.dir("launcher");
+    let launcher = launcher_version();
+    write(
+        &proj.join("package.json"),
+        package_json(
+            "vlt-e2e-launcher",
+            &[("@socketsecurity/socket-patch", &launcher)],
+        ),
+    );
+    write_vlt_json(&proj, leg.version(), &reg.url(), &VltJson::default());
+    leg.vlt_ok(&proj, &["install"]);
+    let platform_dir = proj.join("node_modules/.vlt");
+    let installed: Vec<String> = std::fs::read_dir(&platform_dir)
+        .unwrap()
+        .map(|e| e.unwrap().file_name().to_string_lossy().into_owned())
+        .filter(|n| n.contains("socket-patch-"))
+        .collect();
+    assert!(
+        installed.iter().any(|n| n.contains(&host)),
+        "the host platform package is installed: {installed:?}"
+    );
+    let bin = proj.join("node_modules/@socketsecurity/socket-patch/bin/socket-patch");
+    let out = std::process::Command::new("node")
+        .arg(&bin)
+        .arg("--version")
+        .output()
+        .unwrap();
+    assert_ok(&out, "the launcher");
+    assert!(
+        String::from_utf8_lossy(&out.stdout).contains(env!("CARGO_PKG_VERSION")),
+        "{}",
+        out_text(&out)
+    );
+    leg.ran();
+}
+
+fn launcher_version() -> String {
+    let pkg: Value = serde_json::from_slice(
+        &std::fs::read(
+            Path::new(env!("CARGO_MANIFEST_DIR")).join("../../npm/socket-patch/package.json"),
+        )
+        .unwrap(),
+    )
+    .unwrap();
+    pkg["version"].as_str().unwrap().to_string()
+}
+
+/// The launcher and every platform package (the host's carries the
+/// binary under test); returns the host package's suffix.
+fn launcher_packages() -> (Vec<CachedPkg>, String) {
+    let npm = Path::new(env!("CARGO_MANIFEST_DIR")).join("../../npm");
+    let read = |p: &Path| -> Value { serde_json::from_slice(&std::fs::read(p).unwrap()).unwrap() };
+    let mut launcher = read(&npm.join("socket-patch/package.json"));
+    for k in ["scripts", "dependencies", "exports", "devDependencies"] {
+        launcher.as_object_mut().unwrap().remove(k);
+    }
+    let bin = std::fs::read(npm.join("socket-patch/bin/socket-patch")).unwrap();
+    let mut pkgs = vec![synthetic_pkg_exec(
+        launcher.clone(),
+        &[("bin/socket-patch", &bin)],
+        &["bin/socket-patch"],
+    )];
+    let host = host_platform();
+    let exe = if cfg!(windows) {
+        "socket-patch.exe"
+    } else {
+        "socket-patch"
+    };
+    let binary = std::fs::read(socket_bin()).unwrap();
+    for name in launcher["optionalDependencies"].as_object().unwrap().keys() {
+        let dir = npm.join(name.trim_start_matches("@socketsecurity/"));
+        let manifest = read(&dir.join("package.json"));
+        let files: Vec<(&str, &[u8])> = if name.ends_with(&host) {
+            vec![(exe, &binary)]
+        } else {
+            vec![]
+        };
+        pkgs.push(synthetic_pkg_exec(manifest, &files, &[exe]));
+    }
+    (pkgs, host)
+}
+
+fn host_platform() -> String {
+    let os = match std::env::consts::OS {
+        "macos" => "darwin",
+        "windows" => "win32",
+        o => o,
+    };
+    let arch = match std::env::consts::ARCH {
+        "x86_64" => "x64",
+        "aarch64" => "arm64",
+        "x86" => "ia32",
+        a => a,
+    };
+    let libc = if cfg!(target_os = "linux") {
+        if cfg!(target_env = "musl") {
+            "-musl"
+        } else {
+            "-gnu"
+        }
+    } else {
+        ""
+    };
+    format!("socket-patch-{os}-{arch}{libc}")
+}
+
+// ── persistence (T23) ─────────────────────────────────────────────────────
+
+async fn applied(leg: Leg) -> Fixture {
+    let mut shape = Shape::with_bystander().warm();
+    shape.pins.push(SCOPED);
+    let fx = Fixture::build(leg, shape).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = offline(&fx.proj, &["apply"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx
+}
+
+/// After agent apply the patch survives a no-op install, `install <new>`,
+/// `uninstall`, a frozen install with node_modules present, `vlt update`,
+/// `install --force` (from rc.28) and a deleted hidden lock. 0.0.0-14
+/// re-extracts the installed copy on every install instead (pinned).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_persistence_survives() {
+    let Some(leg) = agent_leg("persistence_survives") else {
+        return;
+    };
+    let fx = applied(leg).await;
+    let mut steps: Vec<Vec<&str>> = vec![
+        vec!["install"],
+        vec!["install", "@isaacs/string-locale-compare@1.1.0"],
+        vec!["uninstall", "@isaacs/string-locale-compare"],
+    ];
+    if fx.leg.at_least(HAS_CI_FROM) {
+        steps.push(vec!["install", "--frozen-lockfile"]);
+    }
+    if fx.leg.at_least(VLT_UPDATE_FROM) {
+        steps.push(vec!["update"]);
+    }
+    if fx.leg.at_least(INSTALL_FORCE_FROM) {
+        steps.push(vec!["install", "--force"]);
+    }
+    let reextracts = plain_install_refreshes_stale(fx.leg.version());
+    let want = if reextracts {
+        State::Pristine
+    } else {
+        State::Patched
+    };
+    let reapply = |fx: &Fixture| {
+        if reextracts {
+            let out = offline(&fx.proj, &["apply"], &[]);
+            assert_eq!(out.code, 0, "{out}");
+        }
+    };
+    for step in steps {
+        fx.vlt_ok(&fx.proj, &step);
+        assert_eq!(state(&fx.proj, fx.t()), want, "after {step:?}");
+        reapply(&fx);
+    }
+    let _ = std::fs::remove_file(fx.proj.join(HIDDEN_LOCK));
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, fx.t()), want, "after a deleted hidden lock");
+    fx.leg.ran();
+}
+
+/// `vlt ci` (or `rm -rf node_modules` + install) restores pristine bytes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_persistence_reverted_by_reinstall() {
+    let Some(leg) = agent_leg("persistence_reverted_by_reinstall") else {
+        return;
+    };
+    let fx = applied(leg).await;
+    if fx.leg.at_least(HAS_CI_FROM) {
+        fx.vlt_ok(&fx.proj, &["ci"]);
+        assert_eq!(state(&fx.proj, fx.t()), State::Pristine, "vlt ci");
+        let out = offline(&fx.proj, &["apply"], &[]);
+        assert_eq!(out.code, 0, "{out}");
+        assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    }
+    remove_tree(&fx.proj);
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(
+        state(&fx.proj, fx.t()),
+        State::Pristine,
+        "rm -rf node_modules"
+    );
+    fx.leg.ran();
+}
+
+/// `apply` rerun is idempotent, `rollback` rerun is a no-op, and `vex`
+/// (the setup hook wired) attests the agent-patched store copy but not
+/// after a `vlt ci` that ran without the hook.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_agent_reruns_and_vex() {
+    let Some(leg) = agent_leg("reruns_and_vex") else {
+        return;
+    };
+    let fx = applied(leg).await;
+    let files = package_files(&fx.proj.join(".socket"));
+    let out = offline(&fx.proj, &["apply"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(
+        package_files(&fx.proj.join(".socket")),
+        files,
+        "apply rerun"
+    );
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let vex = |fx: &Fixture| {
+        let _ = std::fs::remove_file(fx.proj.join("out.vex.json"));
+        let out = offline(
+            &fx.proj,
+            &["vex"],
+            &["--output", "out.vex.json", "--product", PRODUCT],
+        );
+        (vex_doc_attests(&fx.proj.join("out.vex.json"), fx.t()), out)
+    };
+    let (attested, out) = vex(&fx);
+    assert!(attested, "{out}");
+    if fx.leg.at_least(HAS_CI_FROM) {
+        let out = setup(&fx.proj, &fx, &["--remove"]);
+        assert_eq!(out.code, 0, "{out}");
+        fx.vlt_ok(&fx.proj, &["ci"]);
+        let out = setup(&fx.proj, &fx, &[]);
+        assert_eq!(out.code, 0, "{out}");
+        let (attested, out) = vex(&fx);
+        assert!(!attested, "pristine after vlt ci without the hook: {out}");
+        let out = offline(&fx.proj, &["apply"], &[]);
+        assert_eq!(out.code, 0, "{out}");
+    }
+    let out = offline(&fx.proj, &["rollback"], &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let snapshot = package_files(&importer_dir(&fx.proj, "", LP.0).canonicalize().unwrap());
+    let out = offline(&fx.proj, &["rollback"], &[]);
+    assert!(out.code == 0 || out.code == 1, "{out}");
+    assert_eq!(
+        package_files(&importer_dir(&fx.proj, "", LP.0).canonicalize().unwrap()),
+        snapshot,
+        "rollback rerun"
+    );
+    assert_eq!(state(&fx.proj, fx.t()), State::Pristine);
+    fx.leg.ran();
+}
+
+// ── setup ─────────────────────────────────────────────────────────────────
+
+fn setup(dir: &Path, fx: &Fixture, extra: &[&str]) -> SocketOut {
+    let bin = fx.leg.shim_dir();
+    let path = std::env::var_os("PATH").unwrap_or_default();
+    let mut parts = vec![bin];
+    parts.extend(std::env::split_paths(&path));
+    let joined = std::env::join_paths(parts).unwrap();
+    let c = cwd(dir);
+    let mut args = vec!["setup", "--json", "--yes", "--cwd", &c];
+    args.extend_from_slice(extra);
+    socket(dir, &args, &[("PATH", joined.to_str().unwrap())])
+}
+
+fn with_hook_env(fx: &Fixture) -> VltRun {
+    let mut run = fx.run.clone().with_shims();
+    run.env.push(("SOCKET_NO_CONFIG".into(), "1".into()));
+    run.env.push(("SOCKET_NO_UPDATE_CHECK".into(), "1".into()));
+    run.env
+        .push(("SOCKET_TELEMETRY_DISABLED".into(), "1".into()));
+    run.env.push(("SOCKET_OFFLINE".into(), "1".into()));
+    run
+}
+
+fn hook_count(fx: &Fixture) -> usize {
+    fx.leg
+        .npx_log()
+        .iter()
+        .filter(|l| l.contains("apply"))
+        .count()
+}
+
+/// With the hook wired: every diff-bearing reify (fresh install, `install
+/// <x>`, `ci`) runs it exactly once from rc.13, and the patched bytes land
+/// in `.vlt/<DepID>/node_modules/<name>`; a no-op install runs nothing.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_hook_fires_per_reify() {
+    let Some(leg) = setup_leg("hook_fires_per_reify") else {
+        return;
+    };
+    if !leg.at_least(ROOT_POSTINSTALL_FROM) {
+        return leg.skip("root-postinstall-not-run");
+    }
+    let mut shape = Shape::with_bystander();
+    shape.pins.push(SCOPED);
+    let fx = Fixture::build(leg, shape).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let pkg = std::fs::read_to_string(fx.proj.join("package.json")).unwrap();
+    assert!(pkg.contains(HOOK), "{pkg}");
+    let run = with_hook_env(&fx);
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &run);
+    assert_eq!(hook_count(&fx), 1, "fresh install: {:?}", fx.leg.npx_log());
+    assert_every_copy(&fx.proj, fx.t(), State::Patched);
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &run);
+    assert_eq!(hook_count(&fx), 1, "a no-op install runs no hook");
+    fx.leg.vlt_ok_with(
+        &fx.proj,
+        &["install", "@isaacs/string-locale-compare@1.1.0"],
+        &run,
+    );
+    assert_eq!(hook_count(&fx), 2, "install <x>");
+    fx.leg.vlt_ok_with(&fx.proj, &["ci"], &run);
+    assert_eq!(hook_count(&fx), 3, "ci");
+    assert_every_copy(&fx.proj, fx.t(), State::Patched);
+    fx.leg.ran();
+}
+
+/// `vlt_root_scripts_not_run`: definite through the `vlt` shim before
+/// rc.13, absent from rc.13.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_root_scripts_advisory() {
+    let Some(leg) = setup_leg("root_scripts_advisory") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let warned = out.stdout.contains("vlt_root_scripts_not_run");
+    if fx.leg.at_least(ROOT_POSTINSTALL_FROM) {
+        assert!(!warned, "{out}");
+    } else {
+        assert!(warned, "{out}");
+        assert!(
+            out.stdout
+                .contains(&format!("(`vlt --version` reports {})", fx.leg.tc.raw)),
+            "the definite wording: {out}"
+        );
+    }
+    fx.leg.ran();
+}
+
+/// A workspace gets the hook at the root only, and a member-dir `vlt ci`
+/// runs the root hook once.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_workspace_root_only() {
+    let Some(leg) = setup_leg("workspace_root_only") else {
+        return;
+    };
+    if !leg.at_least(ROOT_POSTINSTALL_FROM) {
+        return leg.skip("root-postinstall-not-run");
+    }
+    let mut shape = Shape::left_pad();
+    shape.deps = vec![];
+    shape.vlt_json.workspaces = Some(json!("packages/*"));
+    shape.files = vec![("packages/a/package.json".into(), package_json("a", &[LP]))];
+    let fx = Fixture::build(leg, shape).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let member = std::fs::read_to_string(fx.proj.join("packages/a/package.json")).unwrap();
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(std::fs::read_to_string(fx.proj.join("package.json"))
+        .unwrap()
+        .contains(HOOK));
+    assert_eq!(
+        std::fs::read_to_string(fx.proj.join("packages/a/package.json")).unwrap(),
+        member,
+        "the member is untouched"
+    );
+    let run = with_hook_env(&fx);
+    fx.leg
+        .vlt_ok_with(&fx.proj.join("packages/a"), &["ci"], &run);
+    assert_eq!(hook_count(&fx), 1, "{:?}", fx.leg.npx_log());
+    assert_eq!(
+        state_at(&importer_dir(&fx.proj, "packages/a", LP.0), fx.t()),
+        State::Patched
+    );
+    fx.leg.ran();
+}
+
+/// `setup` twice adds no duplicate hook.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_twice_no_duplicate() {
+    let Some(leg) = setup_leg("twice_no_duplicate") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let once = std::fs::read(fx.proj.join("package.json")).unwrap();
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(std::fs::read(fx.proj.join("package.json")).unwrap(), once);
+    let pkg: Value = serde_json::from_slice(&once).unwrap();
+    assert_eq!(pkg["scripts"]["postinstall"], HOOK, "{pkg:#}");
+    fx.leg.ran();
+}
+
+/// With the hook present: a project with no patches installs cleanly;
+/// with the patch API unreachable and the blobs not local, the hook's
+/// `apply --silent` exits with the contract's `sources_download_failed`
+/// code and vlt rolls the install back (a non-zero root script aborts it).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_hook_failure() {
+    let Some(leg) = setup_leg("hook_failure") else {
+        return;
+    };
+    if !leg.at_least(ROOT_POSTINSTALL_FROM) {
+        return leg.skip("root-postinstall-not-run");
+    }
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let run = with_hook_env(&fx);
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &run);
+    assert_eq!(hook_count(&fx), 1, "the empty hook ran");
+    stage_manifest(&fx.proj, &[fx.t()]);
+    std::fs::remove_dir_all(fx.proj.join(".socket/blobs")).unwrap();
+    let dead = "http://127.0.0.1:9";
+    let mut cmd = socket_cmd();
+    let c = cwd(&fx.proj);
+    cmd.args([
+        "apply",
+        "--silent",
+        "--json",
+        "--ecosystems",
+        "npm",
+        "--cwd",
+        &c,
+    ])
+    .env("SOCKET_PROXY_URL", dead)
+    .env("SOCKET_API_URL", dead);
+    let direct = cmd.output().unwrap();
+    let code = direct.status.code();
+    let text = String::from_utf8_lossy(&direct.stdout).into_owned();
+    assert!(
+        text.contains("sources_download_failed") && text.contains("partialFailure"),
+        "the contract's warning: {text}"
+    );
+    remove_tree(&fx.proj);
+    let mut run = with_hook_env(&fx);
+    run.env.retain(|(k, _)| k != "SOCKET_OFFLINE");
+    run.env.push(("SOCKET_PROXY_URL".into(), dead.into()));
+    run.env.push(("SOCKET_API_URL".into(), dead.into()));
+    let out = fx.leg.vlt_with(&fx.proj, &["install"], &run);
+    assert_eq!(hook_count(&fx), 2, "the failing hook ran");
+    if code == Some(0) {
+        assert_ok(&out, "vlt keeps the install when the hook exits 0");
+    } else {
+        assert!(
+            !out.status.success(),
+            "a failing hook ({code:?}) aborts the install: {}",
+            out_text(&out)
+        );
+    }
+    fx.leg.ran();
+}
+
+/// Windows from 1.0.5 (the rollback EBUSY fix): a failing hook's abort
+/// leaves no `.VLT.DELETE.*` staging dir the next crawl could misread.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_setup_hook_abort_leaves_no_staging() {
+    let Some(leg) = setup_leg("hook_abort_leaves_no_staging") else {
+        return;
+    };
+    if !cfg!(windows) {
+        return leg.skip("windows-only");
+    }
+    if !leg.at_least(REGISTRIES_NPM_REQUIRED_FROM) {
+        return leg.skip("pre-ebusy-fix");
+    }
+    let fx = Fixture::build(leg, Shape::with_bystander()).await;
+    let out = setup(&fx.proj, &fx, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    stage_manifest(&fx.proj, &[fx.t()]);
+    std::fs::remove_dir_all(fx.proj.join(".socket/blobs")).unwrap();
+    let dead = "http://127.0.0.1:9";
+    let mut run = with_hook_env(&fx);
+    run.env.retain(|(k, _)| k != "SOCKET_OFFLINE");
+    run.env.push(("SOCKET_PROXY_URL".into(), dead.into()));
+    run.env.push(("SOCKET_API_URL".into(), dead.into()));
+    let out = fx.leg.vlt_with(&fx.proj, &["install"], &run);
+    assert!(
+        !out.status.success(),
+        "the failing hook aborts: {}",
+        out_text(&out)
+    );
+    let store = fx.proj.join("node_modules/.vlt");
+    let staging: Vec<String> = std::fs::read_dir(&store)
+        .map(|rd| {
+            rd.flatten()
+                .map(|e| e.file_name().to_string_lossy().into_owned())
+                .filter(|n| n.starts_with(".VLT.DELETE"))
+                .collect()
+        })
+        .unwrap_or_default();
+    assert!(staging.is_empty(), "{staging:?}");
+    let out = socket_api(&fx.proj, &fx.svc, &["scan"], &[]);
+    assert!(!out.stdout.contains(".VLT.DELETE"), "{out}");
+    fx.leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/mode_migration_vlt.rs b/crates/socket-patch-cli/tests/mode_migration_vlt.rs
new file mode 100644
index 00000000..ab1f773e
--- /dev/null
+++ b/crates/socket-patch-cli/tests/mode_migration_vlt.rs
@@ -0,0 +1,850 @@
+//! Real-vlt mode migrations (suite `migration`, DESIGN §8.3, §4.10).
+//!
+//! Hosted ⇄ vendored takeovers (both drivers), dry-run parity, scoped and
+//! unscoped unwinds, agent-mode interplay (r-tests T21), package-manager
+//! switches (T37) and the vlt upgrade (T19, `SOCKET_PATCH_VLT_E2E_UPGRADE_JS`)
+//! against the REAL vlt under test, every terminal state proven by a fresh
+//! checkout's locked install. Each leg is `vlt_pinned_matrix_migration_<leg>`
+//! and prints one `VLT-LEG` line.
+
+use std::collections::BTreeMap;
+use std::path::Path;
+
+use serde_json::Value;
+
+#[path = "vlt_e2e_common/mod.rs"]
+mod vlt_e2e_common;
+
+use vlt_e2e_common::fixture::*;
+use vlt_e2e_common::*;
+
+const SUITE: &str = "migration";
+
+fn migration_leg(name: &'static str) -> Option<Leg> {
+    let leg = Leg::start(SUITE, name)?;
+    if leg.era() == VltEra::A0 {
+        leg.skip("a0-vendored-unsupported");
+        return None;
+    }
+    Some(leg)
+}
+
+/// Every object in `doc` carrying an `errorCode`, at any depth.
+fn codes(doc: &Value) -> Vec<String> {
+    fn walk(v: &Value, out: &mut Vec<String>) {
+        match v {
+            Value::Object(m) => {
+                if let Some(c) = m.get("errorCode").and_then(Value::as_str) {
+                    out.push(c.to_string());
+                }
+                if let Some(c) = m.get("code").and_then(Value::as_str) {
+                    out.push(c.to_string());
+                }
+                m.values().for_each(|c| walk(c, out));
+            }
+            Value::Array(a) => a.iter().for_each(|c| walk(c, out)),
+            _ => {}
+        }
+    }
+    let mut out = Vec::new();
+    walk(doc, &mut out);
+    out
+}
+
+fn has_code(doc: &Value, code: &str) -> bool {
+    codes(doc).iter().any(|c| c == code)
+}
+
+/// Every committable byte of `proj` (no installed trees).
+fn project_bytes(proj: &Path) -> BTreeMap<String, Vec<u8>> {
+    let co = proj.with_extension("snapshot");
+    fresh_checkout(proj, &co);
+    let files = vlt_vex_free_walk(&co);
+    std::fs::remove_dir_all(&co).unwrap();
+    files
+}
+
+fn vlt_vex_free_walk(dir: &Path) -> BTreeMap<String, Vec<u8>> {
+    fn walk(base: &Path, dir: &Path, out: &mut BTreeMap<String, Vec<u8>>) {
+        for e in std::fs::read_dir(dir).unwrap() {
+            let e = e.unwrap();
+            let p = e.path();
+            if e.file_type().unwrap().is_dir() {
+                walk(base, &p, out);
+            } else {
+                let rel = p
+                    .strip_prefix(base)
+                    .unwrap()
+                    .to_string_lossy()
+                    .replace('\\', "/");
+                out.insert(rel, std::fs::read(&p).unwrap());
+            }
+        }
+    }
+    let mut out = BTreeMap::new();
+    walk(dir, dir, &mut out);
+    out
+}
+
+fn cwd_args(proj: &Path) -> String {
+    proj.to_str().unwrap().to_string()
+}
+
+fn vendor_cmd(proj: &Path, extra: &[&str]) -> SocketOut {
+    let cwd = cwd_args(proj);
+    let mut args = vec!["vendor", "--json", "--yes", "--offline", "--cwd", &cwd];
+    args.extend_from_slice(extra);
+    socket(proj, &args, &[])
+}
+
+fn vendored_scan(fx: &Fixture, dir: &Path, extra: &[&str]) -> SocketOut {
+    let mut args = vec!["--vendor-source", "build"];
+    args.extend_from_slice(extra);
+    socket_api(dir, &fx.svc, &["scan", "--mode", "vendored"], &args)
+}
+
+fn hosted_scan(fx: &Fixture, dir: &Path, extra: &[&str]) -> SocketOut {
+    socket_api(dir, &fx.svc, &["scan", "--mode", "hosted"], extra)
+}
+
+fn agent(dir: &Path, cmd: &str, extra: &[&str]) -> SocketOut {
+    let cwd = cwd_args(dir);
+    let mut args = vec![cmd, "--json", "--yes", "--offline", "--cwd", &cwd];
+    args.extend_from_slice(extra);
+    socket(dir, &args, &[])
+}
+
+fn copy_project(fx: &Fixture, from: &Path, name: &str) -> std::path::PathBuf {
+    let to = fx.leg.dir(name);
+    std::fs::remove_dir_all(&to).unwrap();
+    fresh_checkout(from, &to);
+    fx.vlt_ok_profile(&to, &fx.leg.locked_install_args(), name);
+    to
+}
+
+fn assert_pure_hosted(fx: &Fixture, dir: &Path, t: &PatchTarget) {
+    assert_pinned(dir, &fx.svc, t);
+    assert!(
+        !String::from_utf8(lock_bytes(dir))
+            .unwrap()
+            .contains(".socket/vendor"),
+        "no vendored wiring left"
+    );
+    assert!(
+        !dir.join(format!(".socket/vendor/npm/{}", t.uuid)).exists(),
+        "no vendored artifact left"
+    );
+    let ledger: Value = serde_json::from_slice(
+        &std::fs::read(dir.join(".socket/vendor/redirect-state.json")).unwrap(),
+    )
+    .unwrap();
+    let before: Value = serde_json::from_slice(&fx.lock_before).unwrap();
+    let id = node_id(&before, &t.name, &t.version);
+    let original = ledger["edits"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .find(|e| {
+            e["kind"] == "redirect_vlt_lock_node"
+                && e["original"]
+                    .as_str()
+                    .is_some_and(|o| o.starts_with(&format!("\"{id}\"")))
+        })
+        .and_then(|e| e["original"].as_str())
+        .unwrap_or_else(|| panic!("a ledger edit for {id}: {ledger:#}"))
+        .to_string();
+    let pristine = node_line(&String::from_utf8_lossy(&fx.lock_before), &id)
+        .unwrap()
+        .trim()
+        .trim_end_matches(',')
+        .to_string();
+    assert_eq!(
+        original, pristine,
+        "the ledger original is the pristine registry line"
+    );
+}
+
+fn assert_pure_vendored(dir: &Path, t: &PatchTarget) {
+    let text = String::from_utf8(lock_bytes(dir)).unwrap();
+    assert!(
+        text.contains(&format!(".socket/vendor/npm/{}/", t.uuid)),
+        "the lock is vendored: {text}"
+    );
+    let lock = read_lock(dir);
+    assert!(
+        node_ids(&lock, &t.name, &t.version).is_empty(),
+        "no registry node left for {}: {lock:#}",
+        t.name
+    );
+    assert!(
+        !text.contains(&t.artifact_path()),
+        "no hosted URL left: {text}"
+    );
+    assert!(
+        !dir.join(".socket/vendor/redirect-state.json").exists()
+            || !std::fs::read_to_string(dir.join(".socket/vendor/redirect-state.json"))
+                .unwrap()
+                .contains(&t.purl()),
+        "the redirect record is gone"
+    );
+}
+
+/// A fresh checkout's locked install lands `want` for `t`.
+fn assert_fresh(fx: &Fixture, dir: &Path, t: &PatchTarget, want: State, name: &str) {
+    let co = fx.leg.root.join(format!("fresh-{name}"));
+    fresh_checkout(dir, &co);
+    fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), name);
+    assert_eq!(state(&co, t), want, "{name}: {}", t.name);
+}
+
+fn assert_unscoped_rollback_pristine(fx: &Fixture, dir: &Path, name: &str) {
+    let out = rollback(dir, &[]);
+    assert_eq!(out.code, 0, "{name}: {out}");
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(dir)),
+        String::from_utf8_lossy(&fx.lock_before),
+        "{name}: the pristine lock"
+    );
+    assert!(
+        !dir.join(".socket/vendor/npm").exists(),
+        "{name}: no artifacts"
+    );
+    assert!(
+        !dir.join(".socket/vendor/state.json").exists(),
+        "{name}: no vendor ledger"
+    );
+    assert!(
+        !dir.join(".socket/vendor/redirect-state.json").exists(),
+        "{name}: no redirect ledger"
+    );
+    for t in &fx.svc.targets {
+        assert_fresh(fx, dir, t, State::Pristine, &format!("{name}-{}", t.bare()));
+    }
+}
+
+async fn two_target_fixture(leg: Leg) -> Fixture {
+    let shape = Shape {
+        deps: vec![LP, MS],
+        pins: vec![LP, MS],
+        targets: vec![
+            (LP.0, LP.1, UUID, "index.js"),
+            (MS.0, MS.1, UUID_MS, "index.js"),
+        ],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    Fixture::build(leg, shape).await
+}
+
+// ── 1–2. takeovers ────────────────────────────────────────────────────────
+
+/// Vendored → hosted: the vendored entry, artifact and wiring go, the
+/// ledger original is the pristine registry line, a fresh checkout is
+/// patched; the unscoped rollback restores the pristine lock.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_vendored_then_hosted() {
+    let Some(leg) = migration_leg("vendored_then_hosted") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = vendored_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(
+        has_code(&out.json(), "redirect_takeover_reverted_vendored"),
+        "{out}"
+    );
+    assert_pure_hosted(&fx, &fx.proj, fx.t());
+    assert!(!fx.proj.join(".socket/vendor/state.json").exists());
+    assert_fresh(&fx, &fx.proj, fx.t(), State::Patched, "hosted");
+    assert_unscoped_rollback_pristine(&fx, &fx.proj, "rollback");
+    fx.leg.ran();
+}
+
+/// Hosted → vendored through `scan --mode vendored` and through `vendor`
+/// (a staged manifest): the redirect record goes, the lock is vendored,
+/// fresh checkouts are patched, and `vendor --revert` restores the
+/// pristine lock.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_hosted_then_vendored() {
+    let Some(leg) = migration_leg("hosted_then_vendored") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    for driver in ["scan", "vendor"] {
+        let dir = copy_project(&fx, &fx.proj, &format!("drv-{driver}"));
+        let out = if driver == "scan" {
+            vendored_scan(&fx, &dir, &[])
+        } else {
+            stage_manifest(&dir, &[fx.t()]);
+            vendor_cmd(&dir, &[])
+        };
+        assert_eq!(out.code, 0, "{driver}: {out}");
+        assert!(
+            has_code(&out.json(), "vendor_takeover_reverted_redirect"),
+            "{driver}: {out}"
+        );
+        assert_pure_vendored(&dir, fx.t());
+        assert_fresh(
+            &fx,
+            &dir,
+            fx.t(),
+            State::Patched,
+            &format!("{driver}-vendored"),
+        );
+        let out = vendor_revert_all(&dir);
+        assert_eq!(out.code, 0, "{driver}: {out}");
+        assert_eq!(
+            String::from_utf8_lossy(&lock_bytes(&dir)),
+            String::from_utf8_lossy(&fx.lock_before),
+            "{driver}: revert restores the pristine lock"
+        );
+    }
+    fx.leg.ran();
+}
+
+fn vendor_revert_all(dir: &Path) -> SocketOut {
+    vendor_cmd(dir, &["--revert"])
+}
+
+// ── 3. dry-run parity ─────────────────────────────────────────────────────
+
+/// Over a live hosted redirect `vendor --dry-run` previews the takeover
+/// and `scan --mode vendored --dry-run` says `would_vendor`; over a live
+/// vendored state `scan --mode hosted --dry-run` previews
+/// `redirect_would_revert_vendored`. No preview writes a byte, and the wet
+/// runs then do what was previewed.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_dry_run_parity() {
+    let Some(leg) = migration_leg("dry_run_parity") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let before = project_bytes(&fx.proj);
+    let out = vendor_cmd(&fx.proj, &["--dry-run"]);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(
+        has_code(&out.json(), "vendor_would_revert_redirect"),
+        "{out}"
+    );
+    assert!(!out.stdout.contains("vendor_lock_entry_not_found"), "{out}");
+    let out = vendored_scan(&fx, &fx.proj, &["--dry-run"]);
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    let preview = doc["vendor"]["patches"]
+        .as_array()
+        .and_then(|p| p.iter().find(|p| p["purl"] == fx.t().purl()))
+        .cloned()
+        .unwrap_or_else(|| panic!("a preview for {}: {doc:#}", fx.t().purl()));
+    assert_eq!(preview["action"], "would_vendor", "{doc:#}");
+    assert!(!out.stdout.contains("would_refuse"), "{out}");
+    assert_eq!(
+        project_bytes(&fx.proj),
+        before,
+        "the previews write nothing"
+    );
+    let out = vendor_cmd(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(
+        has_code(&out.json(), "vendor_takeover_reverted_redirect"),
+        "{out}"
+    );
+    assert_pure_vendored(&fx.proj, fx.t());
+    let before = project_bytes(&fx.proj);
+    let out = hosted_scan(&fx, &fx.proj, &["--dry-run"]);
+    assert_eq!(out.code, 0, "{out}");
+    let doc = out.json();
+    assert!(has_code(&doc, "redirect_would_revert_vendored"), "{doc:#}");
+    assert!(
+        !has_code(&doc, "redirect_vendored_revert_failed"),
+        "{doc:#}"
+    );
+    assert_eq!(
+        project_bytes(&fx.proj),
+        before,
+        "the hosted preview writes nothing"
+    );
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_pure_hosted(&fx, &fx.proj, fx.t());
+    fx.leg.ran();
+}
+
+// ── 4–5. scoped and unscoped unwinds ──────────────────────────────────────
+
+/// Two hosted records; `rollback <purl-a>` and, on a copy, `remove
+/// <purl-a>` unwind only a; a fresh checkout lands a's registry bytes and
+/// b's patch; the unscoped rollback then restores the pristine lock.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_scoped_unwind_one_of_two() {
+    let Some(leg) = migration_leg("scoped_unwind_one_of_two") else {
+        return;
+    };
+    let fx = two_target_fixture(leg).await;
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let a = fx.svc.target(LP.0).clone();
+    let b = fx.svc.target(MS.0).clone();
+    assert_pinned(&fx.proj, &fx.svc, &a);
+    assert_pinned(&fx.proj, &fx.svc, &b);
+    let copy = copy_project(&fx, &fx.proj, "remove-copy");
+    let out = rollback(&fx.proj, &[&a.purl()]);
+    assert_eq!(out.code, 0, "{out}");
+    let cwd = cwd_args(&copy);
+    let purl = a.purl();
+    let out = socket(
+        &copy,
+        &[
+            "remove",
+            &purl,
+            "--json",
+            "--yes",
+            "--offline",
+            "--cwd",
+            &cwd,
+        ],
+        &[],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    for dir in [&fx.proj, &copy] {
+        assert_not_pinned(dir, &a);
+        assert_pinned(dir, &fx.svc, &b);
+        let ledger =
+            std::fs::read_to_string(dir.join(".socket/vendor/redirect-state.json")).unwrap();
+        assert!(
+            !ledger.contains(&a.purl()) && ledger.contains(&b.purl()),
+            "{ledger}"
+        );
+        assert_fresh(&fx, dir, &a, State::Pristine, "a-unwound");
+        assert_fresh(&fx, dir, &b, State::Patched, "b-kept");
+    }
+    assert_unscoped_rollback_pristine(&fx, &fx.proj, "after-scoped");
+    fx.leg.ran();
+}
+
+/// A mixed state (left-pad vendored, ms hosted): the unscoped rollback
+/// restores the pristine lock and leaves no artifacts or ledgers.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_rollback_from_mixed() {
+    let Some(leg) = migration_leg("rollback_from_mixed") else {
+        return;
+    };
+    let fx = two_target_fixture(leg).await;
+    let a = fx.svc.target(LP.0).clone();
+    let b = fx.svc.target(MS.0).clone();
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let out = socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["get", &a.uuid, "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    assert_pure_vendored(&fx.proj, &a);
+    assert_pinned(&fx.proj, &fx.svc, &b);
+    assert_fresh(&fx, &fx.proj, &a, State::Patched, "mixed-a");
+    assert_fresh(&fx, &fx.proj, &b, State::Patched, "mixed-b");
+    assert_unscoped_rollback_pristine(&fx, &fx.proj, "mixed");
+    fx.leg.ran();
+}
+
+// ── 6–9. agent interplay (T21) ────────────────────────────────────────────
+
+/// 6: agent `apply` over a vendored package yields: the committed payload
+/// and the installed copy are left alone.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_agent_apply_yields_to_vendored() {
+    let Some(leg) = migration_leg("agent_apply_yields_to_vendored") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = vendored_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let before = project_bytes(&fx.proj);
+    let out = agent(&fx.proj, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let after = project_bytes(&fx.proj);
+    for (k, v) in &before {
+        if k.starts_with(".socket/vendor/npm/") {
+            assert_eq!(after.get(k), Some(v), "{k} untouched");
+        }
+    }
+    fx.leg.ran();
+}
+
+/// 7: agent `apply` after a hosted install finds the store copy already
+/// patched.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_agent_apply_after_hosted() {
+    let Some(leg) = migration_leg("agent_apply_after_hosted") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    let out = hosted_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = agent(&fx.proj, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let text = out.stdout.to_lowercase();
+    assert!(text.contains("already"), "already patched: {out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// 8: a hosted scan over an agent-patched warm tree keeps the tree (heal
+/// rule (c) sees the afterHash pass): nothing is invalidated.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_hosted_scan_keeps_agent_patched_tree() {
+    let Some(leg) = migration_leg("hosted_scan_keeps_agent_patched_tree") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
+    stage_manifest(&fx.proj, &[fx.t()]);
+    let out = agent(&fx.proj, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    let _ = std::fs::remove_file(fx.proj.join(HIDDEN_LOCK));
+    let ids = fx.store_ids(fx.t());
+    let doc = fx.scan(&[]);
+    fx.assert_advisory(&doc, &advisory_nothing_stale());
+    for id in &ids {
+        assert!(store_entry(&fx.proj, id).exists(), "{id} kept");
+    }
+    assert_eq!(state(&fx.proj, fx.t()), State::Patched);
+    fx.leg.ran();
+}
+
+/// 9: agent rollback after a hosted and after a vendored takeover of an
+/// agent-patched tree, and `remove` across agent + hosted + vendored
+/// state: the pristine lock comes back and no state is left. After the
+/// vendored takeover the rollback reports `reinstall_required`: a plain
+/// `vlt install` keeps the agent-patched store copy (vlt trusts its hidden
+/// lock) and the locked install restores the registry bytes.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_agent_rollback_after_takeovers() {
+    let Some(leg) = migration_leg("agent_rollback_after_takeovers") else {
+        return;
+    };
+    let fx = two_target_fixture(leg).await;
+    let a = fx.svc.target(LP.0).clone();
+    let b = fx.svc.target(MS.0).clone();
+    stage_manifest(&fx.proj, &[&a, &b]);
+    let out = agent(&fx.proj, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(state(&fx.proj, &a), State::Patched);
+    for mode in ["hosted", "vendored"] {
+        let dir = fx.leg.dir(&format!("agent-{mode}"));
+        std::fs::remove_dir_all(&dir).unwrap();
+        fresh_checkout(&fx.proj, &dir);
+        fx.vlt_ok_profile(&dir, &fx.leg.locked_install_args(), mode);
+        let out = agent(&dir, "apply", &[]);
+        assert_eq!(out.code, 0, "{out}");
+        let out = if mode == "hosted" {
+            hosted_scan(&fx, &dir, &[])
+        } else {
+            vendored_scan(&fx, &dir, &[])
+        };
+        assert_eq!(out.code, 0, "{mode}: {out}");
+        let out = rollback(&dir, &[]);
+        assert_eq!(out.code, 0, "{mode} rollback: {out}");
+        assert_eq!(
+            String::from_utf8_lossy(&lock_bytes(&dir)),
+            String::from_utf8_lossy(&fx.lock_before),
+            "{mode}: the pristine lock"
+        );
+        if mode == "vendored" {
+            assert!(has_code(&out.json(), "reinstall_required"), "{out}");
+            fx.vlt_ok_profile(&dir, &["install"], mode);
+            assert_eq!(
+                state(&dir, &a),
+                State::Patched,
+                "vlt install keeps the agent-patched store copy the takeover left"
+            );
+        }
+        fx.vlt_ok_profile(&dir, &fx.leg.locked_install_args(), mode);
+        for t in [&a, &b] {
+            assert_eq!(state(&dir, t), State::Pristine, "{mode}: {}", t.name);
+        }
+    }
+    let dir = fx.leg.dir("remove-all");
+    std::fs::remove_dir_all(&dir).unwrap();
+    fresh_checkout(&fx.proj, &dir);
+    fx.vlt_ok_profile(&dir, &fx.leg.locked_install_args(), "remove-all");
+    let out = agent(&dir, "apply", &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let out = hosted_scan(&fx, &dir, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let out = socket_api(
+        &dir,
+        &fx.svc,
+        &["get", &b.uuid, "--mode", "vendored"],
+        &["--vendor-source", "build"],
+    );
+    assert_eq!(out.code, 0, "{out}");
+    for t in [&a, &b] {
+        let cwd = cwd_args(&dir);
+        let purl = t.purl();
+        let out = socket(
+            &dir,
+            &[
+                "remove",
+                &purl,
+                "--json",
+                "--yes",
+                "--offline",
+                "--cwd",
+                &cwd,
+            ],
+            &[],
+        );
+        assert_eq!(out.code, 0, "remove {}: {out}", t.name);
+    }
+    assert_eq!(
+        String::from_utf8_lossy(&lock_bytes(&dir)),
+        String::from_utf8_lossy(&fx.lock_before)
+    );
+    assert!(!dir.join(".socket/vendor/npm").exists());
+    fx.leg.ran();
+}
+
+// ── PM switches (T37) ─────────────────────────────────────────────────────
+
+/// npm hosted, then vlt joins (`vlt install` writes vlt-lock.json): the
+/// rescan rewrites both locks, and vlt confirms only once vlt install
+/// state exists (`vlt_drives`).
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_pm_switch_npm_to_vlt() {
+    let Some(leg) = migration_leg("pm_switch_npm_to_vlt") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let dir = fx.leg.dir("npm");
+    write(
+        &dir.join("package.json"),
+        package_json("vlt-e2e-app", &[LP]),
+    );
+    write(&dir.join(".npmrc"), format!("registry={}\n", fx.reg.url()));
+    write_vlt_json(&dir, fx.leg.version(), &fx.reg.url(), &VltJson::default());
+    let npm = npm_run(
+        &dir,
+        &["install", "--ignore-scripts", "--no-audit", "--no-fund"],
+    );
+    assert_ok(&npm, "npm install");
+    let out = hosted_scan(&fx, &dir, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let plock = std::fs::read_to_string(dir.join("package-lock.json")).unwrap();
+    assert!(plock.contains("/patch/npm/"), "{plock}");
+    std::fs::remove_dir_all(dir.join("node_modules")).unwrap();
+    fx.vlt_ok(&dir, &["install"]);
+    assert!(dir.join(VLT_LOCK).exists());
+    let out = hosted_scan(&fx, &dir, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_pinned(&dir, &fx.svc, fx.t());
+    assert!(std::fs::read_to_string(dir.join("package-lock.json"))
+        .unwrap()
+        .contains("/patch/npm/"));
+    assert!(
+        !has_code(&out.json(), "redirect_vlt_sibling_lockfiles"),
+        "vlt drives: {out}"
+    );
+    fx.leg.ran();
+}
+
+fn npm_run(dir: &Path, args: &[&str]) -> std::process::Output {
+    let npm = if cfg!(windows) { "npm.cmd" } else { "npm" };
+    let mut cmd = std::process::Command::new(npm);
+    cmd.args(args).current_dir(dir);
+    cache_env::scrub_ambient_vlt_env(&mut cmd);
+    cache_env::isolate(&mut cmd);
+    cmd.output().expect("spawn npm")
+}
+
+/// vlt → npm (`vlt-lock.json` deleted): the rollback refuses the vlt edits
+/// ("vlt-lock.json no longer exists") and keeps the ledger, writing no
+/// lock.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_pm_switch_vlt_to_npm() {
+    let Some(leg) = migration_leg("pm_switch_vlt_to_npm") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    std::fs::remove_file(fx.proj.join(VLT_LOCK)).unwrap();
+    let ledger = std::fs::read(fx.proj.join(".socket/vendor/redirect-state.json")).unwrap();
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 1, "{out}");
+    assert!(
+        out.stdout.contains("vlt-lock.json no longer exists"),
+        "{out}"
+    );
+    assert!(!fx.proj.join(VLT_LOCK).exists(), "nothing recreated");
+    assert_eq!(
+        std::fs::read(fx.proj.join(".socket/vendor/redirect-state.json")).unwrap(),
+        ledger,
+        "the ledger is kept"
+    );
+    fx.leg.ran();
+}
+
+/// A `flavor:"npm"` vendored entry, then a `vlt-lock.json` appears: the
+/// re-vendor refuses with `vendor_flavor_changed`.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_flavor_changed() {
+    let Some(leg) = migration_leg("flavor_changed") else {
+        return;
+    };
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    let dir = fx.leg.dir("npm-vendored");
+    write(
+        &dir.join("package.json"),
+        package_json("vlt-e2e-app", &[LP]),
+    );
+    write(&dir.join(".npmrc"), format!("registry={}\n", fx.reg.url()));
+    let npm = npm_run(
+        &dir,
+        &["install", "--ignore-scripts", "--no-audit", "--no-fund"],
+    );
+    assert_ok(&npm, "npm install");
+    stage_manifest(&dir, &[fx.t()]);
+    let out = vendor_cmd(&dir, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let ledger = std::fs::read_to_string(dir.join(".socket/vendor/state.json")).unwrap();
+    assert!(ledger.contains("\"npm\""), "{ledger}");
+    write_vlt_json(&dir, fx.leg.version(), &fx.reg.url(), &VltJson::default());
+    std::fs::remove_dir_all(dir.join("node_modules")).unwrap();
+    fx.vlt_ok(&dir, &["install"]);
+    let out = vendor_cmd(&dir, &["--force"]);
+    assert!(has_code(&out.json(), "vendor_flavor_changed"), "{out}");
+    fx.leg.ran();
+}
+
+// ── vlt upgrade (T19) ─────────────────────────────────────────────────────
+
+fn upgrade() -> Option<Toolchain> {
+    match upgrade_toolchain() {
+        Ok(Some(tc)) => Some(tc),
+        Ok(None) => None,
+        Err(e) => panic!("{e}"),
+    }
+}
+
+/// rc.14 hosted, then the upgraded vlt refuses the v0 lock; the lock is
+/// re-created, the rescan re-pins under the tilde DepID (superseding the
+/// recorded legacy edit), rollback is clean and VEX attests after the
+/// rescan.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_upgrade_hosted() {
+    let Some(leg) = migration_leg("upgrade_hosted") else {
+        return;
+    };
+    let Some(up) = upgrade() else {
+        return leg.skip("no-upgrade-vlt");
+    };
+    if leg.era().lockfile_version() != Some(0) || up.version < LOCKFILE_VERSION_CHECKED_FROM {
+        return leg.skip("no-grammar-upgrade");
+    }
+    let fx = Fixture::build(leg, Shape::left_pad()).await;
+    fx.scan(&[]);
+    let upr = VltRun::profile("up").with_tc(&up);
+    write_vlt_json(&fx.proj, up.version, &fx.reg.url(), &VltJson::default());
+    let out = fx.leg.vlt_with(&fx.proj, &["ci"], &upr);
+    assert!(
+        !out.status.success(),
+        "the upgraded vlt refuses v0: {}",
+        out_text(&out)
+    );
+    std::fs::remove_file(fx.proj.join(VLT_LOCK)).unwrap();
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &upr);
+    let lock = read_lock(&fx.proj);
+    assert_eq!(lock["lockfileVersion"], 1, "{lock:#}");
+    let relocked = lock_bytes(&fx.proj);
+    remove_tree(&fx.proj);
+    let doc = fx.scan(&["--vex", "out.vex.json", "--vex-product", PRODUCT]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    assert_pinned(&fx.proj, &fx.svc, fx.t());
+    assert!(
+        fx.vex_attested(fx.t()),
+        "attested after the rescan: {doc:#}"
+    );
+    let ledger =
+        std::fs::read_to_string(fx.proj.join(".socket/vendor/redirect-state.json")).unwrap();
+    assert!(
+        !ledger.contains('·'),
+        "the legacy edit is superseded: {ledger}"
+    );
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_eq!(
+        lock_bytes(&fx.proj),
+        relocked,
+        "rollback to the re-created lock"
+    );
+    fx.leg.ran();
+}
+
+/// rc.14 vendored, the same upgrade: `vendor --revert` reports the
+/// cross-grammar drift and writes nothing; following the remedy, the next
+/// revert is identity-already-reverted and removes the artifact.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_migration_upgrade_vendored() {
+    let Some(leg) = migration_leg("upgrade_vendored") else {
+        return;
+    };
+    let Some(up) = upgrade() else {
+        return leg.skip("no-upgrade-vlt");
+    };
+    if leg.era().lockfile_version() != Some(0) || up.version < LOCKFILE_VERSION_CHECKED_FROM {
+        return leg.skip("no-grammar-upgrade");
+    }
+    let fx = Fixture::build(leg, Shape::left_pad().warm()).await;
+    let pkg_before = std::fs::read_to_string(fx.proj.join("package.json")).unwrap();
+    let out = vendored_scan(&fx, &fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    let upr = VltRun::profile("up").with_tc(&up);
+    write_vlt_json(&fx.proj, up.version, &fx.reg.url(), &VltJson::default());
+    std::fs::remove_file(fx.proj.join(VLT_LOCK)).unwrap();
+    remove_tree(&fx.proj);
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &upr);
+    let before = project_bytes(&fx.proj);
+    let out = vendor_revert_all(&fx.proj);
+    assert!(
+        out.stdout
+            .contains("re-created by a different vlt lockfile grammar"),
+        "{out}"
+    );
+    assert_eq!(project_bytes(&fx.proj), before, "no writes");
+    write(&fx.proj.join("package.json"), &pkg_before);
+    fx.leg.vlt_ok_with(&fx.proj, &["install"], &upr);
+    let out = vendor_revert_all(&fx.proj);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(!fx.proj.join(".socket/vendor/npm").exists(), "{out}");
+    fx.leg.ran();
+}
diff --git a/crates/socket-patch-cli/tests/vlt-leg-manifest.json b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
new file mode 100644
index 00000000..ca67d923
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
@@ -0,0 +1,1007 @@
+{
+  "comment": "Generated from docs/testing/vlt-compatibility.md by `scripts/check-vlt-legs.py --derive`; never edit by hand.",
+  "binaries": {
+    "e2e_redirect_vlt_build": {
+      "hosted": [
+        "scan_fresh_ci",
+        "frozen_dead_registry",
+        "ordinary_install_stable",
+        "get_uuid_fresh_ci",
+        "tamper_cold_eintegrity",
+        "rollback_byte_exact",
+        "rerun_noop",
+        "warm_tree_invalidates",
+        "no_cleanup_stays_stale",
+        "heal_rule_b_hidden_lock_without_node",
+        "heal_rule_c_no_hidden_lock",
+        "heal_rule_c_no_record",
+        "scoped",
+        "peer_workspace_instances",
+        "install_newdep_preserves",
+        "update_drops",
+        "resave_install_rollback",
+        "resave_crlf_rollback",
+        "resave_update_rollback",
+        "crlf_lock",
+        "mirror_registries_npm",
+        "scalar_registry",
+        "named_alias_untouched",
+        "scoped_registry_untouched",
+        "jsr_untouched",
+        "default_registry_alias",
+        "registry_from_env",
+        "registry_from_user_config",
+        "content_encoding_refused",
+        "old_lockfile_ignored",
+        "warm_cache_hazard",
+        "idempotence",
+        "manifestless_vex",
+        "ts_written_lock",
+        "optional_dependency_heal",
+        "then_vendored_optional_takeover",
+        "platform_optional_skipped"
+      ]
+    },
+    "e2e_vendor_vlt_build": {
+      "vendored": [
+        "scan_fresh_ci",
+        "get_build_fresh_ci",
+        "get_service_fresh_ci",
+        "durability",
+        "workspace_member_selfref",
+        "alias_selfref",
+        "dep_with_deps",
+        "hostile_gitignore",
+        "autocrlf_checkout",
+        "bin_bearing",
+        "package_json_devdeps_patch",
+        "repair_rebuilds",
+        "idempotency",
+        "revert_byte_exact",
+        "resave_install_revert",
+        "resave_uninstall_revert",
+        "resave_crlf_revert",
+        "tamper_planted_file",
+        "tamper_file_content",
+        "tamper_payload_package_json",
+        "tamper_symlink_outside",
+        "tamper_deleted_gitignore",
+        "tamper_lock_file_node_path",
+        "transitive_refused",
+        "legacy_lockfile_warning",
+        "absent_version_refused",
+        "lockless_reinstall",
+        "manifestless_vex"
+      ]
+    },
+    "mode_migration_vlt": {
+      "migration": [
+        "vendored_then_hosted",
+        "hosted_then_vendored",
+        "dry_run_parity",
+        "scoped_unwind_one_of_two",
+        "rollback_from_mixed",
+        "agent_apply_yields_to_vendored",
+        "agent_apply_after_hosted",
+        "hosted_scan_keeps_agent_patched_tree",
+        "agent_rollback_after_takeovers",
+        "pm_switch_npm_to_vlt",
+        "pm_switch_vlt_to_npm",
+        "flavor_changed",
+        "upgrade_hosted",
+        "upgrade_vendored"
+      ]
+    },
+    "e2e_safety_vlt": {
+      "safety": [
+        "linux_auto",
+        "explicit_hardlink",
+        "private_copies",
+        "cross_device_cache",
+        "agent_rollback",
+        "peer_fanout",
+        "hosted_heal",
+        "vendored_build",
+        "vendor_revert_and_repair",
+        "layout_note"
+      ]
+    },
+    "e2e_vlt": {
+      "agent": [
+        "scan_apply_rollback_list",
+        "get_and_remove",
+        "install_then_apply_patches_file",
+        "transitive_only_dep_apply_patches_store",
+        "lockfile_supplement",
+        "launcher",
+        "persistence_survives",
+        "persistence_reverted_by_reinstall",
+        "reruns_and_vex"
+      ],
+      "setup": [
+        "hook_fires_per_reify",
+        "root_scripts_advisory",
+        "workspace_root_only",
+        "twice_no_duplicate",
+        "hook_failure",
+        "hook_abort_leaves_no_staging"
+      ]
+    },
+    "e2e_hosted_production": {
+      "production": [
+        "hosted_install_proof"
+      ]
+    },
+    "e2e_vendored_production": {
+      "production": [
+        "vendored_install_proof"
+      ]
+    }
+  },
+  "legs": {
+    "hosted": [
+      "scan_fresh_ci",
+      "frozen_dead_registry",
+      "ordinary_install_stable",
+      "get_uuid_fresh_ci",
+      "tamper_cold_eintegrity",
+      "rollback_byte_exact",
+      "rerun_noop",
+      "warm_tree_invalidates",
+      "no_cleanup_stays_stale",
+      "heal_rule_b_hidden_lock_without_node",
+      "heal_rule_c_no_hidden_lock",
+      "heal_rule_c_no_record",
+      "scoped",
+      "peer_workspace_instances",
+      "install_newdep_preserves",
+      "update_drops",
+      "resave_install_rollback",
+      "resave_crlf_rollback",
+      "resave_update_rollback",
+      "crlf_lock",
+      "mirror_registries_npm",
+      "scalar_registry",
+      "named_alias_untouched",
+      "scoped_registry_untouched",
+      "jsr_untouched",
+      "default_registry_alias",
+      "registry_from_env",
+      "registry_from_user_config",
+      "content_encoding_refused",
+      "old_lockfile_ignored",
+      "warm_cache_hazard",
+      "idempotence",
+      "manifestless_vex",
+      "ts_written_lock",
+      "optional_dependency_heal",
+      "then_vendored_optional_takeover",
+      "platform_optional_skipped"
+    ],
+    "vendored": [
+      "scan_fresh_ci",
+      "get_build_fresh_ci",
+      "get_service_fresh_ci",
+      "durability",
+      "workspace_member_selfref",
+      "alias_selfref",
+      "dep_with_deps",
+      "hostile_gitignore",
+      "autocrlf_checkout",
+      "bin_bearing",
+      "package_json_devdeps_patch",
+      "repair_rebuilds",
+      "idempotency",
+      "revert_byte_exact",
+      "resave_install_revert",
+      "resave_uninstall_revert",
+      "resave_crlf_revert",
+      "tamper_planted_file",
+      "tamper_file_content",
+      "tamper_payload_package_json",
+      "tamper_symlink_outside",
+      "tamper_deleted_gitignore",
+      "tamper_lock_file_node_path",
+      "transitive_refused",
+      "legacy_lockfile_warning",
+      "absent_version_refused",
+      "lockless_reinstall",
+      "manifestless_vex"
+    ],
+    "migration": [
+      "vendored_then_hosted",
+      "hosted_then_vendored",
+      "dry_run_parity",
+      "scoped_unwind_one_of_two",
+      "rollback_from_mixed",
+      "agent_apply_yields_to_vendored",
+      "agent_apply_after_hosted",
+      "hosted_scan_keeps_agent_patched_tree",
+      "agent_rollback_after_takeovers",
+      "pm_switch_npm_to_vlt",
+      "pm_switch_vlt_to_npm",
+      "flavor_changed",
+      "upgrade_hosted",
+      "upgrade_vendored"
+    ],
+    "safety": [
+      "linux_auto",
+      "explicit_hardlink",
+      "private_copies",
+      "cross_device_cache",
+      "agent_rollback",
+      "peer_fanout",
+      "hosted_heal",
+      "vendored_build",
+      "vendor_revert_and_repair",
+      "layout_note"
+    ],
+    "agent": [
+      "scan_apply_rollback_list",
+      "get_and_remove",
+      "install_then_apply_patches_file",
+      "transitive_only_dep_apply_patches_store",
+      "lockfile_supplement",
+      "launcher",
+      "persistence_survives",
+      "persistence_reverted_by_reinstall",
+      "reruns_and_vex"
+    ],
+    "setup": [
+      "hook_fires_per_reify",
+      "root_scripts_advisory",
+      "workspace_root_only",
+      "twice_no_duplicate",
+      "hook_failure",
+      "hook_abort_leaves_no_staging"
+    ],
+    "production": [
+      "hosted_install_proof",
+      "vendored_install_proof"
+    ]
+  },
+  "rules": [
+    {
+      "boundary": "A0 locks (no `lockfileVersion`) are refused by vendored mode",
+      "suite": "vendored",
+      "legs": "*",
+      "except": [
+        "absent_version_refused"
+      ],
+      "versions": {
+        "op": "<=",
+        "a": "0.0.0-18"
+      },
+      "conditions": [],
+      "reason": "a0-vendored-unsupported"
+    },
+    {
+      "boundary": "A0 locks are refused by vendored mode",
+      "suite": "migration",
+      "legs": "*",
+      "except": [],
+      "versions": {
+        "op": "<=",
+        "a": "0.0.0-18"
+      },
+      "conditions": [],
+      "reason": "a0-vendored-unsupported"
+    },
+    {
+      "boundary": "A0 locks are refused by vendored mode",
+      "suite": "production",
+      "legs": [
+        "vendored_install_proof"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<=",
+        "a": "0.0.0-18"
+      },
+      "conditions": [],
+      "reason": "a0-vendored-unsupported"
+    },
+    {
+      "boundary": "the global store and `store-linker`",
+      "suite": "safety",
+      "legs": "*",
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.2.0"
+      },
+      "conditions": [],
+      "reason": "no-global-store"
+    },
+    {
+      "boundary": "`vlt ci`, `--frozen-lockfile`, `--expect-lockfile` exist",
+      "suite": "hosted",
+      "legs": [
+        "frozen_dead_registry",
+        "optional_dependency_heal",
+        "then_vendored_optional_takeover"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "0.0.0-19"
+      },
+      "conditions": [],
+      "reason": "no-vlt-ci"
+    },
+    {
+      "boundary": "a scalar `registry` makes lock-driven installs re-resolve from public npm",
+      "suite": "hosted",
+      "legs": [
+        "frozen_dead_registry"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.7",
+        "b": "1.0.0-rc.29"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "registry tarball integrity is not enforced on a cold fetch",
+      "suite": "hosted",
+      "legs": [
+        "tamper_cold_eintegrity"
+      ],
+      "except": [],
+      "versions": {
+        "op": "==",
+        "a": "0.0.0-1"
+      },
+      "conditions": [],
+      "reason": "integrity-unenforced"
+    },
+    {
+      "boundary": "bare specs honor `registries.npm`",
+      "suite": "hosted",
+      "legs": [
+        "mirror_registries_npm"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.0-rc.33"
+      },
+      "conditions": [],
+      "reason": "registries-npm-ignored"
+    },
+    {
+      "boundary": "named registry specs (`acme:x@1`), scoped registries and URL-segment DepIDs exist (flat-config releases record every registry node under the default segment)",
+      "suite": "hosted",
+      "legs": [
+        "named_alias_untouched"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "0.0.0-14"
+      },
+      "conditions": [],
+      "reason": "no-named-registry-specs"
+    },
+    {
+      "boundary": "as above",
+      "suite": "hosted",
+      "legs": [
+        "scoped_registry_untouched",
+        "jsr_untouched"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "0.0.0-14"
+      },
+      "conditions": [],
+      "reason": "registry-not-in-dep-id"
+    },
+    {
+      "boundary": "`jsr:` specs resolve through `jsr-registries` (0.0.0-14 \u2026 rc.6 send the `@jsr` scope to npm.jsr.io; rc.7 \u2026 rc.32 cannot run the leg hermetically, below)",
+      "suite": "hosted",
+      "legs": [
+        "jsr_untouched"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.0-rc.7"
+      },
+      "conditions": [],
+      "reason": "jsr-registry-not-configurable"
+    },
+    {
+      "boundary": "a scalar `registry` makes lock-driven installs re-resolve from public npm",
+      "suite": "hosted",
+      "legs": [
+        "jsr_untouched"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.7",
+        "b": "1.0.0-rc.29"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "`npm:` alias specs resolve against public npm even with `registries.npm`",
+      "suite": "hosted",
+      "legs": [
+        "jsr_untouched"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.30",
+        "b": "1.0.0-rc.32"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "`default-registry-alias` exists",
+      "suite": "hosted",
+      "legs": [
+        "default_registry_alias"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.0-rc.33"
+      },
+      "conditions": [],
+      "reason": "no-default-registry-alias"
+    },
+    {
+      "boundary": "the lock is ignored unless vlt.json declares `\"modifiers\": {}`",
+      "suite": "hosted",
+      "legs": [
+        "old_lockfile_ignored"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "0.0.0-16"
+      },
+      "conditions": [],
+      "reason": "lock-not-ignored"
+    },
+    {
+      "boundary": "as above",
+      "suite": "hosted",
+      "legs": [
+        "old_lockfile_ignored"
+      ],
+      "except": [],
+      "versions": {
+        "op": ">",
+        "a": "0.0.0-24"
+      },
+      "conditions": [],
+      "reason": "lock-not-ignored"
+    },
+    {
+      "boundary": "`vlt update` exists",
+      "suite": "hosted",
+      "legs": [
+        "update_drops",
+        "resave_update_rollback"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "0.0.0-20"
+      },
+      "conditions": [],
+      "reason": "no-vlt-update"
+    },
+    {
+      "boundary": "the golden `basic` lock (`registries.npm`, no scalar `registry`) is what the release writes",
+      "suite": "hosted",
+      "legs": [
+        "ts_written_lock"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.5"
+      },
+      "conditions": [],
+      "reason": "golden-grammar"
+    },
+    {
+      "boundary": "a platform-skipped optional dependency makes the install fail (`Dependency node could not be found`)",
+      "suite": "hosted",
+      "legs": [
+        "platform_optional_skipped"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "0.0.0-31",
+        "b": "1.0.0-rc.1"
+      },
+      "conditions": [],
+      "reason": "vlt-platform-optional-bug"
+    },
+    {
+      "boundary": "a scalar `registry` makes lock-driven installs re-resolve from public npm",
+      "suite": "vendored",
+      "legs": [
+        "workspace_member_selfref",
+        "alias_selfref"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.7",
+        "b": "1.0.0-rc.29"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "`npm:` alias specs resolve against public npm even with `registries.npm`",
+      "suite": "vendored",
+      "legs": [
+        "alias_selfref"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.30",
+        "b": "1.0.0-rc.32"
+      },
+      "conditions": [],
+      "reason": "npm-alias-non-hermetic"
+    },
+    {
+      "boundary": "era A (`\u00b7\u00b7` ids): `vendor_vlt_legacy_lockfile`",
+      "suite": "vendored",
+      "legs": [
+        "legacy_lockfile_warning"
+      ],
+      "except": [],
+      "versions": {
+        "op": ">",
+        "a": "1.0.0-rc.8"
+      },
+      "conditions": [],
+      "reason": "not-legacy-lockfile"
+    },
+    {
+      "boundary": "`lockfileVersion` is written",
+      "suite": "vendored",
+      "legs": [
+        "absent_version_refused"
+      ],
+      "except": [],
+      "versions": {
+        "op": ">=",
+        "a": "0.0.0-19"
+      },
+      "conditions": [],
+      "reason": "lockfile-version-present"
+    },
+    {
+      "boundary": "the upgrade legs need a second vlt",
+      "suite": "migration",
+      "legs": [
+        "upgrade_hosted",
+        "upgrade_vendored"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "upgrade",
+          "op": "=",
+          "value": "unset"
+        }
+      ],
+      "reason": "no-upgrade-vlt"
+    },
+    {
+      "boundary": "only a v0 lock (0.0.0-19 \u2026 rc.14) meets a grammar change",
+      "suite": "migration",
+      "legs": [
+        "upgrade_hosted",
+        "upgrade_vendored"
+      ],
+      "except": [],
+      "versions": {
+        "op": ">",
+        "a": "1.0.0-rc.14"
+      },
+      "conditions": [],
+      "reason": "no-grammar-upgrade"
+    },
+    {
+      "boundary": "the upgrade vlt must check `lockfileVersion`",
+      "suite": "migration",
+      "legs": [
+        "upgrade_hosted",
+        "upgrade_vendored"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "upgrade",
+          "op": "<",
+          "value": "1.0.0-rc.15"
+        }
+      ],
+      "reason": "no-grammar-upgrade"
+    },
+    {
+      "boundary": "`store-linker=auto` hardlinks on Linux only",
+      "suite": "safety",
+      "legs": [
+        "linux_auto"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "os",
+          "op": "!=",
+          "value": "linux"
+        }
+      ],
+      "reason": "not-linux-auto"
+    },
+    {
+      "boundary": "as above",
+      "suite": "safety",
+      "legs": [
+        "linux_auto"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "linker",
+          "op": "notin",
+          "value": [
+            "unset",
+            "auto"
+          ]
+        }
+      ],
+      "reason": "not-linux-auto"
+    },
+    {
+      "boundary": "as above",
+      "suite": "safety",
+      "legs": [
+        "linux_auto"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "set"
+        }
+      ],
+      "reason": "not-linux-auto"
+    },
+    {
+      "boundary": "the explicit hardlink leg",
+      "suite": "safety",
+      "legs": [
+        "explicit_hardlink"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "linker",
+          "op": "!=",
+          "value": "hardlink"
+        }
+      ],
+      "reason": "store-linker-not-hardlink"
+    },
+    {
+      "boundary": "as above",
+      "suite": "safety",
+      "legs": [
+        "explicit_hardlink"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "set"
+        }
+      ],
+      "reason": "store-linker-not-hardlink"
+    },
+    {
+      "boundary": "the store is hardlinked",
+      "suite": "safety",
+      "legs": [
+        "private_copies"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "linker",
+          "op": "=",
+          "value": "hardlink"
+        },
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "unset"
+        }
+      ],
+      "reason": "store-linker-hardlinks"
+    },
+    {
+      "boundary": "as above",
+      "suite": "safety",
+      "legs": [
+        "private_copies"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "linker",
+          "op": "in",
+          "value": [
+            "unset",
+            "auto"
+          ]
+        },
+        {
+          "key": "os",
+          "op": "=",
+          "value": "linux"
+        },
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "unset"
+        }
+      ],
+      "reason": "store-linker-hardlinks"
+    },
+    {
+      "boundary": "a cache on another filesystem falls back to copies",
+      "suite": "safety",
+      "legs": [
+        "private_copies"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "set"
+        }
+      ],
+      "reason": "store-linker-hardlinks"
+    },
+    {
+      "boundary": "as above",
+      "suite": "safety",
+      "legs": [
+        "cross_device_cache"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "cache_root",
+          "op": "=",
+          "value": "unset"
+        }
+      ],
+      "reason": "no-cache-root"
+    },
+    {
+      "boundary": "a scalar `registry` makes lock-driven installs re-resolve from public npm",
+      "suite": "agent",
+      "legs": [
+        "scan_apply_rollback_list",
+        "launcher"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.7",
+        "b": "1.0.0-rc.29"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "`npm:` alias specs resolve against public npm even with `registries.npm`",
+      "suite": "agent",
+      "legs": [
+        "scan_apply_rollback_list"
+      ],
+      "except": [],
+      "versions": {
+        "op": "range",
+        "a": "1.0.0-rc.30",
+        "b": "1.0.0-rc.32"
+      },
+      "conditions": [],
+      "reason": "non-hermetic-registry"
+    },
+    {
+      "boundary": "root `pre*`/`post*` scripts run without an `install` script",
+      "suite": "setup",
+      "legs": [
+        "hook_fires_per_reify",
+        "workspace_root_only",
+        "hook_failure"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.0-rc.13"
+      },
+      "conditions": [],
+      "reason": "root-postinstall-not-run"
+    },
+    {
+      "boundary": "a failing hook's abort on Windows (rollback EBUSY fix from 1.0.5)",
+      "suite": "setup",
+      "legs": [
+        "hook_abort_leaves_no_staging"
+      ],
+      "except": [],
+      "versions": {
+        "op": "all"
+      },
+      "conditions": [
+        {
+          "key": "os",
+          "op": "!=",
+          "value": "windows"
+        }
+      ],
+      "reason": "windows-only"
+    },
+    {
+      "boundary": "as above",
+      "suite": "setup",
+      "legs": [
+        "hook_abort_leaves_no_staging"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.5"
+      },
+      "conditions": [],
+      "reason": "pre-ebusy-fix"
+    }
+  ],
+  "supported": [
+    "0.0.0-1",
+    "0.0.0-11",
+    "0.0.0-12",
+    "0.0.0-13",
+    "0.0.0-14",
+    "0.0.0-15",
+    "0.0.0-16",
+    "0.0.0-17",
+    "0.0.0-18",
+    "0.0.0-19",
+    "0.0.0-20",
+    "0.0.0-21",
+    "0.0.0-23",
+    "0.0.0-24",
+    "0.0.0-25",
+    "0.0.0-26",
+    "0.0.0-27",
+    "0.0.0-28",
+    "0.0.0-29",
+    "0.0.0-30",
+    "0.0.0-31",
+    "0.0.0-32",
+    "1.0.0-rc.1",
+    "1.0.0-rc.2",
+    "1.0.0-rc.3",
+    "1.0.0-rc.4",
+    "1.0.0-rc.5",
+    "1.0.0-rc.6",
+    "1.0.0-rc.7",
+    "1.0.0-rc.8",
+    "1.0.0-rc.9",
+    "1.0.0-rc.10",
+    "1.0.0-rc.11",
+    "1.0.0-rc.12",
+    "1.0.0-rc.13",
+    "1.0.0-rc.14",
+    "1.0.0-rc.15",
+    "1.0.0-rc.16",
+    "1.0.0-rc.17",
+    "1.0.0-rc.18",
+    "1.0.0-rc.22",
+    "1.0.0-rc.23",
+    "1.0.0-rc.24",
+    "1.0.0-rc.25",
+    "1.0.0-rc.26",
+    "1.0.0-rc.27",
+    "1.0.0-rc.28",
+    "1.0.0-rc.29",
+    "1.0.0-rc.30",
+    "1.0.0-rc.31",
+    "1.0.0-rc.32",
+    "1.0.0-rc.33",
+    "1.0.0-rc.34",
+    "1.0.1",
+    "1.0.2",
+    "1.0.3",
+    "1.0.4",
+    "1.0.5",
+    "1.0.6",
+    "1.0.7",
+    "1.0.8",
+    "1.0.9",
+    "1.0.10",
+    "1.1.0",
+    "1.1.1",
+    "1.2.0"
+  ],
+  "excluded": [
+    "0.0.0-0",
+    "0.0.0-2",
+    "0.0.0-3",
+    "0.0.0-4",
+    "0.0.0-5",
+    "0.0.0-6",
+    "0.0.0-7",
+    "0.0.0-8",
+    "0.0.0-9",
+    "0.0.0-10",
+    "0.0.0-22",
+    "1.0.0-rc.19",
+    "1.0.0-rc.20",
+    "1.0.0-rc.21",
+    "0.0.1",
+    "1.0.0"
+  ]
+}
diff --git a/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs b/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
new file mode 100644
index 00000000..89b4b12f
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
@@ -0,0 +1,515 @@
+//! The project fixture every real-vlt capstone builds on: a project
+//! installed by the vlt under test against the harness registry, the mock
+//! patch service publishing patches built from the registry bytes, and the
+//! assertions the suites share.
+
+#![allow(dead_code)]
+
+use std::path::{Path, PathBuf};
+
+use serde_json::{json, Value};
+
+use super::*;
+
+pub const LP: (&str, &str) = ("left-pad", "1.3.0");
+pub const MS: (&str, &str) = ("ms", "2.1.3");
+pub const SCOPED: (&str, &str) = ("@isaacs/string-locale-compare", "1.1.0");
+pub const FSEVENTS: (&str, &str) = ("fsevents", "2.3.3");
+pub const UUID: &str = "a1a1a1a1-1111-4111-8111-111111111111";
+pub const UUID_MS: &str = "b2b2b2b2-2222-4222-8222-222222222222";
+pub const UUID_SCOPED: &str = "c3c3c3c3-3333-4333-8333-333333333333";
+pub const UUID_USX: &str = "d4d4d4d4-4444-4444-8444-444444444444";
+pub const UUID_FSEVENTS: &str = "e5e5e5e5-5555-4555-8555-555555555555";
+
+pub const ADVISORY: &str = "redirect_vlt_reinstall_required";
+pub const UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
+pub const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does not \
+     reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run `vlt \
+     install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     project that declares only optional dependencies, so there both commands remove the \
+     installed copy: upgrade vlt to 1.0.5 or later first.";
+pub const VLT_UPDATE_NOTE: &str =
+    " Note: `vlt update` re-resolves from the registry and drops these redirects.";
+
+pub fn invalidated_head(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages; socket-patch removed {n} stale installed \
+         copies (node_modules/.vlt-lock.json and node_modules/.vlt entries), so node_modules is \
+         incomplete until you run `vlt install` (or `vlt ci`), which installs the patched \
+         packages."
+    )
+}
+
+pub fn advisory_invalidated(n: usize) -> String {
+    format!("{}{VLT_UPDATE_NOTE}", invalidated_head(n))
+}
+
+pub fn advisory_cleanup_skipped(n: usize) -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages, but node_modules still holds {n} unpatched \
+         copies and `vlt install` will not refresh them; run `vlt ci` (or re-run without \
+         --no-vlt-install-cleanup)."
+    )
+}
+
+pub fn advisory_nothing_stale() -> String {
+    format!(
+        "vlt-lock.json pins Socket-patched packages; fresh checkouts install them with `vlt ci` \
+         or `vlt install --frozen-lockfile`.{VLT_UPDATE_NOTE}"
+    )
+}
+
+pub fn advisory_rolled_back(n: usize) -> String {
+    format!(
+        "restored registry pins for {n} packages; removed the patched installed copies, so \
+         node_modules is incomplete until you run `vlt install` (or `vlt ci`)"
+    )
+}
+
+// ── fixtures ──────────────────────────────────────────────────────────────
+
+/// A leg's own vlt.json for (vlt version, default registry URL).
+pub type VltJsonFn = std::sync::Arc<dyn Fn(VltVersion, &str) -> Value + Send + Sync>;
+
+/// A project shape for [`Fixture::build`].
+#[derive(Clone)]
+pub struct Shape {
+    pub deps: Vec<(&'static str, &'static str)>,
+    pub dev: Vec<(&'static str, &'static str)>,
+    pub optional: Vec<(&'static str, &'static str)>,
+    /// Every registry pin (targets and transitive dependencies).
+    pub pins: Vec<(&'static str, &'static str)>,
+    /// `(name, version, uuid, patched file)`.
+    pub targets: Vec<(&'static str, &'static str, &'static str, &'static str)>,
+    pub vlt_json: VltJson,
+    /// Keep the fixture install's tree (a warm project).
+    pub warm: bool,
+    /// Extra files written before the fixture install.
+    pub files: Vec<(String, String)>,
+    /// Extra env for every vlt run of the fixture (registry from env).
+    pub vlt_env: Vec<(String, String)>,
+    /// A vlt.json of the leg's own for (version, default registry URL).
+    pub custom_vlt_json: Option<VltJsonFn>,
+    /// Profiles whose user config (`$XDG_CONFIG_HOME/vlt/vlt.json`) holds
+    /// the era's registry configuration.
+    pub user_config: Vec<&'static str>,
+    /// Harness-built packages the registry serves beside the npmjs pins.
+    pub synthetic: Vec<CachedPkg>,
+}
+
+impl Shape {
+    pub fn left_pad() -> Shape {
+        Shape {
+            deps: vec![LP],
+            dev: vec![],
+            optional: vec![],
+            pins: vec![LP],
+            targets: vec![(LP.0, LP.1, UUID, "index.js")],
+            vlt_json: VltJson::default(),
+            warm: false,
+            files: vec![],
+            vlt_env: vec![],
+            custom_vlt_json: None,
+            user_config: vec![],
+            synthetic: vec![],
+        }
+    }
+
+    pub fn vlt_json_fn(
+        mut self,
+        f: impl Fn(VltVersion, &str) -> Value + Send + Sync + 'static,
+    ) -> Shape {
+        self.custom_vlt_json = Some(std::sync::Arc::new(f));
+        self
+    }
+
+    /// left-pad (patched) beside ms (not patched): the heal and rollback
+    /// legs prove ms's store entry is never touched.
+    pub fn with_bystander() -> Shape {
+        let mut s = Shape::left_pad();
+        s.deps.push(MS);
+        s.pins.push(MS);
+        s
+    }
+
+    pub fn warm(mut self) -> Shape {
+        self.warm = true;
+        self
+    }
+}
+
+/// An installed project, its registry and the patch service.
+pub struct Fixture {
+    pub leg: Leg,
+    pub reg: Registry,
+    pub svc: PatchService,
+    pub proj: PathBuf,
+    /// vlt-lock.json as vlt wrote it (the rollback target).
+    pub lock_before: Vec<u8>,
+    pub run: VltRun,
+}
+
+impl Fixture {
+    pub async fn build(leg: Leg, shape: Shape) -> Fixture {
+        Fixture::build_with(leg, shape, &[]).await
+    }
+
+    /// [`Fixture::build`]; patch targets may come from `extra` registries.
+    pub async fn build_with(leg: Leg, shape: Shape, extra: &[&Registry]) -> Fixture {
+        let reg = Registry::start_with(&shape.pins, shape.synthetic.clone()).await;
+        let proj = leg.dir("proj");
+        let mut fields: Vec<(&str, &[(&str, &str)])> = Vec::new();
+        if !shape.deps.is_empty() {
+            fields.push(("dependencies", &shape.deps));
+        }
+        if !shape.dev.is_empty() {
+            fields.push(("devDependencies", &shape.dev));
+        }
+        if !shape.optional.is_empty() {
+            fields.push(("optionalDependencies", &shape.optional));
+        }
+        write(
+            &proj.join("package.json"),
+            package_json_fields("vlt-e2e-app", &fields),
+        );
+        match &shape.custom_vlt_json {
+            Some(f) => write(
+                &proj.join("vlt.json"),
+                serde_json::to_string_pretty(&f(leg.version(), &reg.url())).unwrap() + "\n",
+            ),
+            None => write_vlt_json(&proj, leg.version(), &reg.url(), &shape.vlt_json),
+        }
+        for (rel, body) in &shape.files {
+            write(&proj.join(rel), body.replace("{R}", &reg.url()));
+        }
+        for profile in &shape.user_config {
+            let user = vlt_json(leg.version(), &reg.url(), &VltJson::default());
+            write(
+                &leg.xdg(profile).config.join("vlt/vlt.json"),
+                serde_json::to_string_pretty(&user).unwrap(),
+            );
+        }
+        let mut run = VltRun::default();
+        for (k, v) in &shape.vlt_env {
+            run = run.with_env(k, &v.replace("{R}", &reg.url()));
+        }
+        leg.vlt_ok_with(&proj, &["install"], &run);
+        assert_lock_era(&leg, &proj);
+        let lock_before = lock_bytes(&proj);
+        let mut targets = Vec::new();
+        for (name, version, uuid, file) in &shape.targets {
+            let pkg = reg
+                .pkgs
+                .iter()
+                .chain(extra.iter().flat_map(|r| r.pkgs.iter()))
+                .find(|p| p.name == *name && p.version == *version)
+                .unwrap_or_else(|| panic!("{name}@{version} is pinned nowhere"));
+            targets.push(PatchTarget::from_pkg(pkg, uuid, file));
+        }
+        for t in &targets {
+            if let Some(bytes) = installed(&proj, &t.name, &t.file) {
+                assert_eq!(bytes, t.before, "{} installs pristine", t.name);
+            }
+        }
+        let svc = PatchService::start(targets).await;
+        if !shape.warm {
+            remove_tree(&proj);
+        }
+        Fixture {
+            leg,
+            reg,
+            svc,
+            proj,
+            lock_before,
+            run,
+        }
+    }
+
+    pub fn t(&self) -> &PatchTarget {
+        &self.svc.targets[0]
+    }
+
+    pub fn scan(&self, extra: &[&str]) -> Value {
+        scan_hosted(&self.proj, &self.svc, extra)
+    }
+
+    /// `scan --mode hosted --vex out.vex.json`; exit 1 is the omission
+    /// exit (asserted by [`Fixture::assert_in_run_vex`]).
+    pub fn scan_vex(&self, extra: &[&str]) -> SocketOut {
+        let mut args = vec!["--vex", "out.vex.json", "--vex-product", PRODUCT];
+        args.extend_from_slice(extra);
+        socket_api(&self.proj, &self.svc, &["scan", "--mode", "hosted"], &args)
+    }
+
+    pub fn checkout(&self, name: &str) -> PathBuf {
+        fresh_checkout(&self.proj, &self.leg.root.join(name))
+    }
+
+    pub fn vlt_ok(&self, cwd: &Path, args: &[&str]) -> std::process::Output {
+        self.leg.vlt_ok_with(cwd, args, &self.run)
+    }
+
+    pub fn vlt_ok_profile(&self, cwd: &Path, args: &[&str], profile: &str) -> std::process::Output {
+        let mut run = self.run.clone();
+        run.profile = Some(profile.to_string());
+        self.leg.vlt_ok_with(cwd, args, &run)
+    }
+
+    pub fn vlt_profile(&self, cwd: &Path, args: &[&str], profile: &str) -> std::process::Output {
+        let mut run = self.run.clone();
+        run.profile = Some(profile.to_string());
+        self.leg.vlt_with(cwd, args, &run)
+    }
+
+    /// A fresh checkout's locked install (`vlt ci`) into the cold profile
+    /// `name`: every target patched, the lock byte-stable.
+    pub fn assert_fresh_locked_install(&self, name: &str) -> PathBuf {
+        let co = self.checkout(name);
+        let before = lock_bytes(&co);
+        self.vlt_ok_profile(&co, &self.leg.locked_install_args(), name);
+        for t in &self.svc.targets {
+            assert_eq!(state(&co, t), State::Patched, "{} in {name}", t.name);
+        }
+        assert_eq!(
+            String::from_utf8_lossy(&lock_bytes(&co)),
+            String::from_utf8_lossy(&before),
+            "the locked install must keep vlt-lock.json byte-stable"
+        );
+        co
+    }
+
+    /// The lock-level warnings DESIGN §3.8 predicts for the lock vlt wrote.
+    pub fn lock_warnings(&self) -> Vec<&'static str> {
+        expected_lock_warnings(&self.lock_before, &self.proj)
+    }
+
+    /// Whether an in-run `--vex` may attest (no lock-level warning).
+    pub fn in_run_vex_attests(&self) -> bool {
+        self.lock_warnings().is_empty()
+    }
+
+    pub fn assert_lock_warnings(&self, doc: &Value) {
+        for code in self.lock_warnings() {
+            assert!(has_warning(doc, code), "expected {code}: {doc:#}");
+        }
+    }
+
+    /// The in-run VEX outcome for `t`: attested (exit 0) unless a
+    /// lock-level warning or `stale` withholds it (exit 1, `vex_omitted`).
+    pub fn assert_in_run_vex(&self, out: &SocketOut, t: &PatchTarget, attest: bool) {
+        let doc = out.json();
+        if attest {
+            assert_eq!(out.code, 0, "{out}");
+            assert!(
+                self.vex_attested(t),
+                "in-run VEX must attest {}: {out}",
+                t.name
+            );
+        } else {
+            assert!(
+                !self.vex_attested(t),
+                "in-run VEX must not attest {}: {out}",
+                t.name
+            );
+            assert!(
+                doc.to_string().contains("vex_omitted") || out.code == 0,
+                "the omission is reported: {out}"
+            );
+        }
+    }
+
+    pub fn assert_advisory(&self, doc: &Value, want: &str) {
+        assert_eq!(warning_detail(doc, ADVISORY), want, "{doc:#}");
+    }
+
+    pub fn vex_attested(&self, t: &PatchTarget) -> bool {
+        vex_doc_attests(&self.proj.join("out.vex.json"), t)
+    }
+
+    pub fn ledger(&self) -> Option<Vec<u8>> {
+        std::fs::read(self.proj.join(".socket/vendor/redirect-state.json")).ok()
+    }
+
+    pub fn store_ids(&self, t: &PatchTarget) -> Vec<String> {
+        node_ids(&read_lock(&self.proj), &t.name, &t.version)
+    }
+
+    /// The other `.vlt` entries and (1.2.0) the global store.
+    pub fn snapshot(&self, dir: &Path, exclude: &[String]) -> Snapshot {
+        let store = self.leg.global_store("default");
+        let store = if self.leg.at_least(STORE_LINKER_FROM) && store.exists() {
+            Some(store)
+        } else {
+            None
+        };
+        Snapshot::take(dir, exclude, store.as_deref())
+    }
+}
+
+pub fn vex_doc_attests(path: &Path, t: &PatchTarget) -> bool {
+    let Ok(text) = std::fs::read_to_string(path) else {
+        return false;
+    };
+    let doc: Value = serde_json::from_str(&text).unwrap();
+    let canonical = t.purl().replace("%40", "@");
+    doc["statements"].as_array().into_iter().flatten().any(|s| {
+        s["products"]
+            .as_array()
+            .into_iter()
+            .flatten()
+            .flat_map(|p| p["subcomponents"].as_array().into_iter().flatten())
+            .any(|c| c["@id"] == t.purl() || c["@id"] == canonical)
+    })
+}
+
+/// The `reason` of the envelope event carrying `code`.
+pub fn event_reason(doc: &Value, code: &str) -> String {
+    [&doc["events"], &doc["vendor"]["events"]]
+        .into_iter()
+        .filter_map(|e| e.as_array())
+        .flatten()
+        .find(|e| e["errorCode"] == code)
+        .and_then(|e| e["reason"].as_str())
+        .unwrap_or_else(|| panic!("expected a `{code}` event: {doc:#}"))
+        .to_string()
+}
+
+pub fn remove_tree(proj: &Path) {
+    let nm = proj.join("node_modules");
+    if nm.exists() {
+        std::fs::remove_dir_all(&nm).unwrap();
+    }
+}
+
+pub fn slash(u: &str) -> String {
+    if u.ends_with('/') {
+        u.to_string()
+    } else {
+        format!("{u}/")
+    }
+}
+
+/// DESIGN §3.8 over the lock vlt wrote and the project's vlt.json.
+pub fn expected_lock_warnings(lock_bytes: &[u8], proj: &Path) -> Vec<&'static str> {
+    let lock: Value = serde_json::from_slice(lock_bytes).unwrap();
+    let mut out = Vec::new();
+    let absent = lock.get("lockfileVersion").is_none();
+    let legacy = absent || lock["lockfileVersion"] == 0;
+    if absent {
+        out.push("redirect_vlt_lockfile_version_missing");
+    }
+    let registry = lock["options"]["registry"].as_str();
+    if legacy {
+        let default_non_npm = lock["nodes"]
+            .as_object()
+            .into_iter()
+            .flatten()
+            .any(|(id, _)| {
+                let Some(rest) = id.strip_prefix('·') else {
+                    return false;
+                };
+                let seg = rest.split('·').next().unwrap_or_default();
+                if seg.is_empty() {
+                    return true;
+                }
+                match (legacy_decode(seg), registry) {
+                    (Some(url), Some(r)) => {
+                        (url.starts_with("http://") || url.starts_with("https://"))
+                            && slash(&url) == slash(r)
+                    }
+                    _ => false,
+                }
+            });
+        let modifiers = std::fs::read(proj.join("vlt.json"))
+            .ok()
+            .and_then(|b| serde_json::from_slice::<Value>(&b).ok())
+            .is_some_and(|v| v.get("modifiers").is_some());
+        if default_non_npm && !modifiers {
+            out.push("redirect_vlt_old_lockfile_ignored");
+        }
+    }
+    if registry.is_some() && (legacy || !lock["options"]["registries"]["npm"].is_string()) {
+        out.push("redirect_vlt_scalar_registry_ignored");
+    }
+    out
+}
+
+/// The vlt.json for `registries` (an alias map) on top of the era's
+/// default-registry keys.
+pub fn with_registries(v: VltVersion, r: &str, aliases: Value, extra: &[(&str, Value)]) -> Value {
+    let mut doc = vlt_json(v, r, &VltJson::default());
+    let config = if flat_vlt_json(v) {
+        &mut doc
+    } else {
+        doc.as_object_mut()
+            .unwrap()
+            .entry("config")
+            .or_insert_with(|| json!({}))
+    };
+    let regs = config
+        .as_object_mut()
+        .unwrap()
+        .entry("registries")
+        .or_insert_with(|| json!({}));
+    for (k, val) in aliases.as_object().unwrap() {
+        regs[k] = val.clone();
+    }
+    for (k, val) in extra {
+        config[*k] = val.clone();
+    }
+    doc
+}
+
+pub fn standalone_vex(fx: &Fixture) -> SocketOut {
+    let _ = std::fs::remove_file(fx.proj.join("out.vex.json"));
+    let uri = fx.svc.uri();
+    socket_api(
+        &fx.proj,
+        &fx.svc,
+        &["vex"],
+        &[
+            "--output",
+            "out.vex.json",
+            "--product",
+            PRODUCT,
+            "--patch-server-url",
+            &uri,
+        ],
+    )
+}
+
+/// `.socket/manifest.json` + after blobs for `targets` (agent mode and
+/// the `vendor` driver read them).
+pub fn stage_manifest(proj: &Path, targets: &[&PatchTarget]) {
+    let socket = proj.join(".socket");
+    std::fs::create_dir_all(socket.join("blobs")).unwrap();
+    let mut patches = serde_json::Map::new();
+    for t in targets {
+        let mut files = serde_json::Map::new();
+        for (rel, before, after) in t.all_files() {
+            files.insert(
+                format!("package/{rel}"),
+                json!({ "beforeHash": git_sha256(&before), "afterHash": git_sha256(&after) }),
+            );
+            std::fs::write(socket.join("blobs").join(git_sha256(&after)), &after).unwrap();
+            std::fs::write(socket.join("blobs").join(git_sha256(&before)), &before).unwrap();
+        }
+        patches.insert(
+            t.purl(),
+            json!({
+                "uuid": t.uuid,
+                "exportedAt": "2026-01-01T00:00:00Z",
+                "files": files,
+                "vulnerabilities": { t.ghsa.clone(): {
+                    "cves": [t.cve], "summary": "s", "severity": "high", "description": "d"
+                }},
+                "description": "migration", "license": "MIT", "tier": "free"
+            }),
+        );
+    }
+    std::fs::write(
+        socket.join("manifest.json"),
+        serde_json::to_vec_pretty(&json!({ "patches": patches })).unwrap(),
+    )
+    .unwrap();
+}
diff --git a/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
new file mode 100644
index 00000000..bc1df1c8
--- /dev/null
+++ b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
@@ -0,0 +1,2444 @@
+//! The real-vlt capstone harness (DESIGN §8.3), shared by
+//! `e2e_redirect_vlt_build`, `e2e_vendor_vlt_build`, `mode_migration_vlt`,
+//! `e2e_safety_vlt`, `e2e_vlt` and the production suites.
+//!
+//! Include with `#[path = "vlt_e2e_common/mod.rs"] mod vlt_e2e_common;`.
+//!
+//! # Gate environment
+//!
+//! * `SOCKET_PATCH_VLT_E2E_JS`: absolute path to `vlt.js`, run as
+//!   `node --no-warnings <js> …`.
+//! * `SOCKET_PATCH_VLT_E2E_VERSION`: must equal `--version` exactly.
+//! * `SOCKET_PATCH_VLT_E2E_REQUIRED`: non-empty turns a toolchain skip into
+//!   a failure. A set `_JS` implies it, and with `CI=true` a leg fails when
+//!   `_JS` is unset.
+//! * `SOCKET_PATCH_VLT_E2E_SOCKET_BIN`: the socket-patch binary to drive
+//!   (for prebuilt test executables whose `CARGO_BIN_EXE_*` path moved).
+//! * `SOCKET_PATCH_VLT_E2E_UPGRADE_JS` / `_UPGRADE_VERSION`: a second vlt
+//!   for the upgrade legs.
+//! * `SOCKET_PATCH_VLT_E2E_STORE_LINKER` ∈ {auto, hardlink, copy, unpack}
+//!   and `SOCKET_PATCH_VLT_E2E_CACHE_ROOT`: applied after the ambient
+//!   scrub (which drops `VLT_STORE_LINKER` / `VLT_CACHE`).
+//!
+//! # Counting
+//!
+//! Every leg prints exactly one `VLT-LEG <version> <os> <suite> <leg>
+//! ran|skip:<reason>` line to stderr ([`Leg::ran`] / [`Leg::skip`]); a leg
+//! that panics prints none, which `scripts/check-vlt-legs.py` reports as a
+//! missing `ran`.
+
+#![allow(dead_code)]
+
+use std::collections::BTreeMap;
+use std::io::Write as _;
+use std::path::{Path, PathBuf};
+use std::process::{Command, Output};
+use std::sync::OnceLock;
+
+use base64::Engine as _;
+use serde_json::{json, Value};
+use sha2::{Digest, Sha256, Sha512};
+use wiremock::matchers::{method, path, path_regex};
+use wiremock::{Mock, MockServer, ResponseTemplate};
+
+#[path = "../common/mod.rs"]
+pub mod common;
+pub mod fixture;
+
+pub use common::cache_env;
+
+// ── versions and eras ─────────────────────────────────────────────────────
+
+/// A vlt release: `0.0.0-N`, `1.0.0-rc.N` or a plain release.
+#[derive(Clone, Copy, Debug, PartialEq, Eq, Hash)]
+pub struct VltVersion {
+    pub major: u64,
+    pub minor: u64,
+    pub patch: u64,
+    pub pre: Option<u64>,
+}
+
+impl VltVersion {
+    pub const fn release(major: u64, minor: u64, patch: u64) -> Self {
+        Self {
+            major,
+            minor,
+            patch,
+            pre: None,
+        }
+    }
+
+    pub const fn zero(n: u64) -> Self {
+        Self {
+            major: 0,
+            minor: 0,
+            patch: 0,
+            pre: Some(n),
+        }
+    }
+
+    pub const fn rc(n: u64) -> Self {
+        Self {
+            major: 1,
+            minor: 0,
+            patch: 0,
+            pre: Some(n),
+        }
+    }
+
+    pub fn parse(raw: &str) -> Option<Self> {
+        let raw = raw.trim();
+        let (core, pre) = match raw.split_once('-') {
+            Some((core, pre)) => (core, Some(pre)),
+            None => (raw, None),
+        };
+        let mut parts = core.split('.').map(|p| p.parse::<u64>().ok());
+        let major = parts.next()??;
+        let minor = parts.next()??;
+        let patch = parts.next()??;
+        if parts.next().is_some() {
+            return None;
+        }
+        let pre = match pre {
+            None => None,
+            Some(p) => Some(p.strip_prefix("rc.").unwrap_or(p).parse::<u64>().ok()?),
+        };
+        Some(Self {
+            major,
+            minor,
+            patch,
+            pre,
+        })
+    }
+
+    fn key(self) -> (u64, u64, u64, bool, u64) {
+        (
+            self.major,
+            self.minor,
+            self.patch,
+            self.pre.is_none(),
+            self.pre.unwrap_or(0),
+        )
+    }
+}
+
+impl PartialOrd for VltVersion {
+    fn partial_cmp(&self, other: &Self) -> Option<std::cmp::Ordering> {
+        Some(self.cmp(other))
+    }
+}
+
+impl Ord for VltVersion {
+    fn cmp(&self, other: &Self) -> std::cmp::Ordering {
+        self.key().cmp(&other.key())
+    }
+}
+
+impl std::fmt::Display for VltVersion {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match (self.major, self.pre) {
+            (0, Some(n)) => write!(f, "0.0.0-{n}"),
+            (_, Some(n)) => write!(f, "{}.{}.{}-rc.{n}", self.major, self.minor, self.patch),
+            (_, None) => write!(f, "{}.{}.{}", self.major, self.minor, self.patch),
+        }
+    }
+}
+
+/// `vlt ci`, `--frozen-lockfile` and `--expect-lockfile` exist.
+pub const HAS_CI_FROM: VltVersion = VltVersion::zero(19);
+/// A root `postinstall` runs without an `install` script.
+pub const ROOT_POSTINSTALL_FROM: VltVersion = VltVersion::rc(13);
+/// Install commands need a registry configuration.
+pub const NEEDS_REGISTRY_CONFIG_FROM: VltVersion = VltVersion::rc(33);
+/// Bare specs honor `registries.npm`.
+pub const REGISTRIES_NPM_ROUTES_FROM: VltVersion = VltVersion::rc(33);
+/// Releases that skip registry tarball integrity on a cold fetch.
+pub const INTEGRITY_UNENFORCED: &[VltVersion] = &[VltVersion::zero(1)];
+/// Peer extras are 16-hex hashes.
+pub const PEER_HASH_FROM: VltVersion = VltVersion::release(1, 0, 8);
+/// The global store and `store-linker`.
+pub const STORE_LINKER_FROM: VltVersion = VltVersion::release(1, 2, 0);
+/// Windows edges become junctions.
+pub const JUNCTIONS_FROM: VltVersion = VltVersion::rc(22);
+/// Lockless `file:` directory dependencies resolve again (broken from
+/// 0.0.0-31).
+pub const LOCKLESS_FILE_DIR_FROM: VltVersion = VltVersion::rc(6);
+
+/// `npm:` alias specs resolve against public npm even with `registries.npm`
+/// configured.
+pub fn npm_alias_to_public_npm(v: VltVersion) -> bool {
+    (VltVersion::rc(30)..=VltVersion::rc(32)).contains(&v)
+}
+
+/// A lockless install cannot resolve a `file:` directory dependency.
+pub fn lockless_file_dir_broken(v: VltVersion) -> bool {
+    (VltVersion::zero(31)..LOCKLESS_FILE_DIR_FROM).contains(&v)
+}
+/// `lockfileVersion` is checked (`ELOCKFILEVERSION`).
+pub const LOCKFILE_VERSION_CHECKED_FROM: VltVersion = VltVersion::rc(15);
+/// `vlt ci` installs optional dependencies from the lock of an
+/// optional-only project.
+pub const OPTIONAL_ONLY_CI_FROM: VltVersion = VltVersion::release(1, 0, 5);
+/// `vlt install --force` exists.
+pub const INSTALL_FORCE_FROM: VltVersion = VltVersion::rc(28);
+/// `registries.npm` is required by install commands.
+pub const REGISTRIES_NPM_REQUIRED_FROM: VltVersion = VltVersion::release(1, 0, 5);
+/// vlt.json spells the scope map `scoped-registries` (`scope-registries`
+/// before).
+pub const SCOPED_REGISTRIES_KEY_FROM: VltVersion = VltVersion::rc(28);
+/// `vlt update` exists.
+pub const VLT_UPDATE_FROM: VltVersion = VltVersion::zero(20);
+/// `vlt update` re-resolves an unchanged exact spec from the registry
+/// (dropping a hosted pin); earlier releases keep the locked node.
+pub const UPDATE_RERESOLVES_FROM: VltVersion = VltVersion::release(1, 0, 8);
+/// Peer extras (`ṗ:N` / `peer.N`) exist.
+pub const PEER_EXTRA_FROM: VltVersion = VltVersion::rc(6);
+
+/// Named registry specs (`acme:x@1`), scoped registries and URL-segment
+/// DepIDs exist (flat-config releases record every registry node under
+/// the default segment).
+pub const REGISTRY_DEP_IDS_FROM: VltVersion = VltVersion::zero(14);
+
+/// `jsr:` specs follow `jsr-registries` (0.0.0-14 … rc.6 send the `@jsr`
+/// scope to npm.jsr.io whatever is configured).
+pub const JSR_REGISTRIES_ROUTE_FROM: VltVersion = VltVersion::rc(7);
+
+/// Re-saves (`vlt install <new>`) drop slot [3] of default-registry nodes,
+/// keeping slot [2].
+pub fn resave_drops_hosted_url(v: VltVersion) -> bool {
+    (VltVersion::rc(6)..=VltVersion::rc(17)).contains(&v)
+}
+
+/// A platform-skipped optional dependency makes the install fail
+/// (`Dependency node could not be found`).
+pub fn platform_optional_install_bug(v: VltVersion) -> bool {
+    (VltVersion::zero(31)..=VltVersion::rc(1)).contains(&v)
+}
+
+/// A warm cache re-fetches a tarball whose URL it holds and fails its
+/// integrity when the bytes changed (no stale-bytes hazard).
+pub fn warm_cache_reverifies(v: VltVersion) -> bool {
+    (VltVersion::rc(27)..=VltVersion::release(1, 0, 2)).contains(&v)
+}
+
+/// After a hosted→vendored takeover that kept the hosted store copy, a
+/// plain `vlt install` already links the vendored dir.
+pub fn takeover_install_relinks(v: VltVersion) -> bool {
+    v <= VltVersion::zero(29)
+}
+
+/// A plain `vlt install` re-extracts a stale installed copy.
+pub fn plain_install_refreshes_stale(v: VltVersion) -> bool {
+    v == VltVersion::zero(14)
+}
+
+/// What a lock-driven install does for a project whose dependencies are
+/// all optional.
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+pub enum OptionalOnly {
+    /// Installs them from the lock.
+    Installs,
+    /// The first install writes no `vlt-lock.json` at all.
+    NoLock,
+    /// Installs nothing from the lock.
+    InstallsNothing,
+}
+
+pub fn optional_only(v: VltVersion) -> OptionalOnly {
+    if v >= OPTIONAL_ONLY_CI_FROM || v <= VltVersion::zero(23) {
+        OptionalOnly::Installs
+    } else if v <= VltVersion::zero(29) {
+        OptionalOnly::NoLock
+    } else {
+        OptionalOnly::InstallsNothing
+    }
+}
+
+/// The lock is ignored unless vlt.json declares `"modifiers": {}`.
+pub fn lock_ignored_without_modifiers(v: VltVersion) -> bool {
+    (VltVersion::zero(16)..=VltVersion::zero(24)).contains(&v)
+}
+
+/// A scalar `registry` makes lock-driven installs re-resolve from npm.
+pub fn scalar_registry_ignored(v: VltVersion) -> bool {
+    (VltVersion::rc(7)..=VltVersion::rc(29)).contains(&v)
+}
+
+/// The harness can run every install against its own registry.
+pub fn hermetic_registry(v: VltVersion) -> bool {
+    !scalar_registry_ignored(v)
+}
+
+pub fn integrity_enforced(v: VltVersion) -> bool {
+    !INTEGRITY_UNENFORCED.contains(&v)
+}
+
+/// vlt.json is flat (no `config` key).
+pub fn flat_vlt_json(v: VltVersion) -> bool {
+    v <= VltVersion::zero(13)
+}
+
+/// Workspaces live in `vlt-workspaces.json`.
+pub fn legacy_workspaces_file(v: VltVersion) -> bool {
+    v <= VltVersion::zero(12)
+}
+
+/// The lockfile grammar a release writes (DESIGN §1.1).
+#[derive(Clone, Copy, Debug, PartialEq, Eq, PartialOrd, Ord)]
+pub enum VltEra {
+    A0,
+    A,
+    B,
+    C,
+    D,
+    E,
+    F,
+}
+
+impl VltEra {
+    pub fn from_version(v: VltVersion) -> Self {
+        if v <= VltVersion::zero(18) {
+            VltEra::A0
+        } else if v <= VltVersion::rc(8) {
+            VltEra::A
+        } else if v <= VltVersion::rc(14) {
+            VltEra::B
+        } else if v <= VltVersion::rc(32) {
+            VltEra::C
+        } else if v < PEER_HASH_FROM {
+            VltEra::D
+        } else if v < STORE_LINKER_FROM {
+            VltEra::E
+        } else {
+            VltEra::F
+        }
+    }
+
+    /// The `lockfileVersion` this era writes.
+    pub fn lockfile_version(self) -> Option<u64> {
+        match self {
+            VltEra::A0 => None,
+            VltEra::A | VltEra::B => Some(0),
+            _ => Some(1),
+        }
+    }
+
+    /// Tilde (`~`) DepIDs rather than legacy (`·`) ones.
+    pub fn tilde(self) -> bool {
+        self >= VltEra::C
+    }
+}
+
+pub fn os_name() -> &'static str {
+    std::env::consts::OS
+}
+
+// ── the toolchain gate ────────────────────────────────────────────────────
+
+/// The vlt under test.
+#[derive(Clone, Debug)]
+pub struct Toolchain {
+    pub js: PathBuf,
+    pub version: VltVersion,
+    pub raw: String,
+}
+
+impl Toolchain {
+    pub fn era(&self) -> VltEra {
+        VltEra::from_version(self.version)
+    }
+}
+
+fn env_nonempty(name: &str) -> Option<String> {
+    std::env::var(name).ok().filter(|v| !v.is_empty())
+}
+
+fn ci_is_true() -> bool {
+    std::env::var("CI").is_ok_and(|v| v.eq_ignore_ascii_case("true"))
+}
+
+fn required() -> bool {
+    env_nonempty("SOCKET_PATCH_VLT_E2E_REQUIRED").is_some()
+        || env_nonempty("SOCKET_PATCH_VLT_E2E_JS").is_some()
+        || ci_is_true()
+}
+
+/// `node --no-warnings <js> --version`.
+pub fn probe_version(js: &Path) -> Result<String, String> {
+    let mut cmd = Command::new("node");
+    cmd.arg("--no-warnings").arg(js).arg("--version");
+    scrub_for_vlt(&mut cmd);
+    cmd.env("VLT_TELEMETRY", "0");
+    let out = cmd
+        .output()
+        .map_err(|e| format!("cannot spawn node: {e}"))?;
+    if !out.status.success() {
+        return Err(format!(
+            "`vlt --version` exited {:?}: {}",
+            out.status.code(),
+            String::from_utf8_lossy(&out.stderr)
+        ));
+    }
+    Ok(String::from_utf8_lossy(&out.stdout)
+        .lines()
+        .map(str::trim)
+        .find(|l| !l.is_empty())
+        .unwrap_or_default()
+        .to_string())
+}
+
+fn resolve(js_var: &str, version_var: &str) -> Result<Option<Toolchain>, String> {
+    let Some(js) = env_nonempty(js_var) else {
+        return Ok(None);
+    };
+    let js = PathBuf::from(js);
+    if !js.is_file() {
+        return Err(format!("{js_var}={} is not a file", js.display()));
+    }
+    let raw = probe_version(&js)?;
+    if let Some(want) = env_nonempty(version_var) {
+        if want != raw {
+            return Err(format!(
+                "{version_var}={want} but `vlt --version` says {raw}"
+            ));
+        }
+    }
+    let version =
+        VltVersion::parse(&raw).ok_or_else(|| format!("unparseable vlt version {raw}"))?;
+    Ok(Some(Toolchain { js, version, raw }))
+}
+
+/// The vlt under test, resolved once per process.
+pub fn toolchain() -> Result<Option<Toolchain>, String> {
+    static CELL: OnceLock<Result<Option<Toolchain>, String>> = OnceLock::new();
+    CELL.get_or_init(|| resolve("SOCKET_PATCH_VLT_E2E_JS", "SOCKET_PATCH_VLT_E2E_VERSION"))
+        .clone()
+}
+
+/// The upgrade vlt (`_UPGRADE_JS`), if configured.
+pub fn upgrade_toolchain() -> Result<Option<Toolchain>, String> {
+    static CELL: OnceLock<Result<Option<Toolchain>, String>> = OnceLock::new();
+    CELL.get_or_init(|| {
+        resolve(
+            "SOCKET_PATCH_VLT_E2E_UPGRADE_JS",
+            "SOCKET_PATCH_VLT_E2E_UPGRADE_VERSION",
+        )
+    })
+    .clone()
+}
+
+/// The configured `store-linker` knob.
+pub fn store_linker() -> Option<String> {
+    env_nonempty("SOCKET_PATCH_VLT_E2E_STORE_LINKER")
+}
+
+pub fn cache_root_knob() -> Option<PathBuf> {
+    env_nonempty("SOCKET_PATCH_VLT_E2E_CACHE_ROOT").map(PathBuf::from)
+}
+
+/// The socket-patch binary under test.
+pub fn socket_bin() -> PathBuf {
+    env_nonempty("SOCKET_PATCH_VLT_E2E_SOCKET_BIN")
+        .map(PathBuf::from)
+        .unwrap_or_else(|| PathBuf::from(env!("CARGO_BIN_EXE_socket-patch")))
+}
+
+// ── legs ──────────────────────────────────────────────────────────────────
+
+/// The parent of every leg tempdir. vlt ≥ 1.2.0 writes cache entries from a
+/// detached process after the command exits, which can recreate a deleted
+/// leg's XDG cache path; the first leg of a run sweeps leftovers older than
+/// an hour.
+fn legs_root() -> PathBuf {
+    static ROOT: OnceLock<PathBuf> = OnceLock::new();
+    ROOT.get_or_init(|| {
+        let root = std::env::temp_dir().join("vlt-e2e-legs");
+        std::fs::create_dir_all(&root).expect("vlt-e2e-legs");
+        let hour = std::time::Duration::from_secs(3600);
+        for e in std::fs::read_dir(&root).into_iter().flatten().flatten() {
+            let old = e
+                .metadata()
+                .and_then(|m| m.modified())
+                .ok()
+                .and_then(|t| t.elapsed().ok())
+                .is_some_and(|age| age > hour);
+            if old {
+                let _ = std::fs::remove_dir_all(e.path());
+            }
+        }
+        root
+    })
+    .clone()
+}
+
+pub fn leg_line(version: &str, suite: &str, leg: &str, status: &str) -> String {
+    format!("VLT-LEG {version} {} {suite} {leg} {status}", os_name())
+}
+
+/// One `write` of the whole line, so libtest's own output never splits it.
+fn print_leg(version: &str, suite: &str, leg: &str, status: &str) {
+    let line = format!("\n{}\n", leg_line(version, suite, leg, status));
+    let stderr = std::io::stderr();
+    let mut lock = stderr.lock();
+    let _ = lock.write_all(line.as_bytes());
+    let _ = lock.flush();
+}
+
+/// One running leg: the toolchain, a canonical private tempdir with its own
+/// XDG tree, and the `VLT-LEG` line it owes.
+pub struct Leg {
+    pub suite: &'static str,
+    pub name: &'static str,
+    pub tc: Toolchain,
+    tmp: tempfile::TempDir,
+    pub root: PathBuf,
+    cache_tmp: Option<tempfile::TempDir>,
+    reported: bool,
+}
+
+impl Leg {
+    /// Start `vlt_pinned_matrix_<suite>_<name>`. `None` when the toolchain
+    /// is absent and not required (the skip line is already printed).
+    pub fn start(suite: &'static str, name: &'static str) -> Option<Leg> {
+        let tc = match toolchain() {
+            Ok(Some(tc)) => tc,
+            Ok(None) => {
+                assert!(
+                    !required(),
+                    "vlt_pinned_matrix_{suite}_{name}: SOCKET_PATCH_VLT_E2E_JS is unset but \
+                     a vlt toolchain is required (CI=true or SOCKET_PATCH_VLT_E2E_REQUIRED)"
+                );
+                print_leg("none", suite, name, "skip:no-vlt-toolchain");
+                return None;
+            }
+            Err(e) => panic!("vlt_pinned_matrix_{suite}_{name}: {e}"),
+        };
+        let tmp = tempfile::Builder::new()
+            .prefix("vlt-e2e-")
+            .tempdir_in(legs_root())
+            .expect("leg tempdir");
+        let root = tmp.path().canonicalize().expect("canonical leg tempdir");
+        let cache_tmp = cache_root_knob().map(|base| {
+            std::fs::create_dir_all(&base).unwrap();
+            tempfile::Builder::new()
+                .prefix("vlt-e2e-cache-")
+                .tempdir_in(base)
+                .expect("cache-root tempdir")
+        });
+        Some(Leg {
+            suite,
+            name,
+            tc,
+            tmp,
+            root,
+            cache_tmp,
+            reported: false,
+        })
+    }
+
+    pub fn version(&self) -> VltVersion {
+        self.tc.version
+    }
+
+    pub fn era(&self) -> VltEra {
+        self.tc.era()
+    }
+
+    pub fn at_least(&self, v: VltVersion) -> bool {
+        self.tc.version >= v
+    }
+
+    pub fn ran(mut self) {
+        self.reported = true;
+        print_leg(&self.tc.raw, self.suite, self.name, "ran");
+    }
+
+    pub fn skip(mut self, reason: &str) {
+        self.reported = true;
+        print_leg(
+            &self.tc.raw,
+            self.suite,
+            self.name,
+            &format!("skip:{reason}"),
+        );
+    }
+
+    /// A fresh directory `<root>/<name>`.
+    pub fn dir(&self, name: &str) -> PathBuf {
+        let d = self.root.join(name);
+        if d.exists() {
+            std::fs::remove_dir_all(&d).unwrap();
+        }
+        std::fs::create_dir_all(&d).unwrap();
+        d
+    }
+
+    /// The XDG tree vlt uses for `profile` (legs that need separate caches
+    /// use separate profiles).
+    pub fn xdg(&self, profile: &str) -> Xdg {
+        let base = self.root.join("xdg").join(profile);
+        let cache = match &self.cache_tmp {
+            Some(t) => t.path().join(profile),
+            None => base.join("cache"),
+        };
+        let x = Xdg {
+            cache,
+            config: base.join("config"),
+            data: base.join("data"),
+            state: base.join("state"),
+            runtime: base.join("run"),
+        };
+        for d in [&x.cache, &x.config, &x.data, &x.state, &x.runtime] {
+            std::fs::create_dir_all(d).unwrap();
+        }
+        x
+    }
+
+    /// The directory holding the `npx` / `vlt` shims (created on first use).
+    pub fn shim_dir(&self) -> PathBuf {
+        let bin = self.root.join("bin");
+        if !bin.join("npx").exists() {
+            write_shims(&bin, &self.tc.js, &self.root.join("npx.log"));
+        }
+        bin
+    }
+
+    /// Lines the `npx` shim logged, one per hook invocation.
+    pub fn npx_log(&self) -> Vec<String> {
+        std::fs::read_to_string(self.root.join("npx.log"))
+            .unwrap_or_default()
+            .lines()
+            .map(str::to_string)
+            .collect()
+    }
+
+    /// Run vlt in `cwd` with the `default` profile.
+    pub fn vlt(&self, cwd: &Path, args: &[&str]) -> Output {
+        self.vlt_with(cwd, args, &VltRun::default())
+    }
+
+    pub fn vlt_with(&self, cwd: &Path, args: &[&str], run: &VltRun) -> Output {
+        let tc = run.tc.as_ref().unwrap_or(&self.tc);
+        let xdg = self.xdg(run.profile.as_deref().unwrap_or("default"));
+        let mut env: Vec<(String, String)> = xdg.vars();
+        env.push(("DO_NOT_TRACK".into(), "1".into()));
+        env.push(("CI".into(), "1".into()));
+        if let Some(linker) = store_linker() {
+            env.push(("VLT_STORE_LINKER".into(), linker));
+        }
+        if run.shims {
+            let bin = self.shim_dir();
+            let path = std::env::var_os("PATH").unwrap_or_default();
+            let mut parts = vec![bin];
+            parts.extend(std::env::split_paths(&path));
+            let joined = std::env::join_paths(parts).unwrap();
+            env.push(("PATH".into(), joined.to_string_lossy().into_owned()));
+        }
+        env.extend(run.env.iter().cloned());
+        let pairs: Vec<(&str, &str)> = env.iter().map(|(k, v)| (k.as_str(), v.as_str())).collect();
+        common::vlt_run(cwd, &tc.js, args, &pairs)
+    }
+
+    /// [`Leg::vlt`], asserting success.
+    pub fn vlt_ok(&self, cwd: &Path, args: &[&str]) -> Output {
+        let out = self.vlt(cwd, args);
+        assert_ok(&out, &format!("{} vlt {}", self.tc.raw, args.join(" ")));
+        out
+    }
+
+    pub fn vlt_ok_with(&self, cwd: &Path, args: &[&str], run: &VltRun) -> Output {
+        let out = self.vlt_with(cwd, args, run);
+        assert_ok(&out, &format!("{} vlt {}", self.tc.raw, args.join(" ")));
+        out
+    }
+
+    /// The command that installs exactly the lock: `vlt ci` from 0.0.0-19,
+    /// else a plain `vlt install`.
+    pub fn locked_install_args(&self) -> Vec<&'static str> {
+        if self.at_least(HAS_CI_FROM) {
+            vec!["ci"]
+        } else {
+            vec!["install"]
+        }
+    }
+
+    pub fn frozen_args(&self) -> Vec<&'static str> {
+        if self.at_least(HAS_CI_FROM) {
+            vec!["install", "--frozen-lockfile"]
+        } else {
+            vec!["install"]
+        }
+    }
+
+    /// The global store vlt 1.2.0 keeps under the default profile's cache.
+    pub fn global_store(&self, profile: &str) -> PathBuf {
+        self.xdg(profile).cache.join("vlt").join("store").join("v1")
+    }
+}
+
+impl Drop for Leg {
+    fn drop(&mut self) {
+        if !self.reported && !std::thread::panicking() {
+            eprintln!(
+                "vlt_pinned_matrix_{}_{}: finished without a VLT-LEG line",
+                self.suite, self.name
+            );
+        }
+    }
+}
+
+/// Per-invocation options for [`Leg::vlt_with`].
+#[derive(Default, Clone)]
+pub struct VltRun {
+    pub profile: Option<String>,
+    pub tc: Option<Toolchain>,
+    pub shims: bool,
+    pub env: Vec<(String, String)>,
+}
+
+impl VltRun {
+    pub fn profile(p: &str) -> Self {
+        Self {
+            profile: Some(p.to_string()),
+            ..Self::default()
+        }
+    }
+
+    pub fn with_env(mut self, k: &str, v: &str) -> Self {
+        self.env.push((k.to_string(), v.to_string()));
+        self
+    }
+
+    pub fn with_tc(mut self, tc: &Toolchain) -> Self {
+        self.tc = Some(tc.clone());
+        self
+    }
+
+    pub fn with_shims(mut self) -> Self {
+        self.shims = true;
+        self
+    }
+}
+
+pub struct Xdg {
+    pub cache: PathBuf,
+    pub config: PathBuf,
+    pub data: PathBuf,
+    pub state: PathBuf,
+    pub runtime: PathBuf,
+}
+
+impl Xdg {
+    fn vars(&self) -> Vec<(String, String)> {
+        let s = |p: &Path| p.to_string_lossy().into_owned();
+        vec![
+            ("XDG_CACHE_HOME".into(), s(&self.cache)),
+            ("XDG_CONFIG_HOME".into(), s(&self.config)),
+            ("XDG_DATA_HOME".into(), s(&self.data)),
+            ("XDG_STATE_HOME".into(), s(&self.state)),
+            ("XDG_RUNTIME_DIR".into(), s(&self.runtime)),
+            ("VLT_CACHE".into(), s(&self.cache.join("vlt"))),
+        ]
+    }
+}
+
+/// Remove the ambient vlt/npm/socket configuration from `cmd`.
+pub fn scrub_for_vlt(cmd: &mut Command) {
+    cache_env::scrub_ambient_vlt_env(cmd);
+}
+
+pub fn out_text(out: &Output) -> String {
+    format!(
+        "exit {:?}\nstdout:\n{}\nstderr:\n{}",
+        out.status.code(),
+        String::from_utf8_lossy(&out.stdout),
+        String::from_utf8_lossy(&out.stderr)
+    )
+}
+
+pub fn assert_ok(out: &Output, what: &str) {
+    assert!(out.status.success(), "{what} failed: {}", out_text(out));
+}
+
+// ── shims ─────────────────────────────────────────────────────────────────
+
+/// `npx` and `vlt` shims (sh and `.cmd`) in `bin`: `npx
+/// @socketsecurity/socket-patch <args>` runs the socket-patch binary under
+/// test and logs one line per invocation to `log`; `vlt` runs `js`.
+pub fn write_shims(bin: &Path, js: &Path, log: &Path) {
+    std::fs::create_dir_all(bin).unwrap();
+    let socket = socket_bin();
+    let sh_npx = format!(
+        "#!/bin/sh\nwhile [ \"$#\" -gt 0 ]; do\n  case \"$1\" in\n    @socketsecurity/socket-patch|@socketsecurity/socket-patch@*) shift; break;;\n    *) shift;;\n  esac\ndone\nprintf '%s\\n' \"npx $*\" >> '{log}'\nexec '{socket}' \"$@\"\n",
+        log = log.display(),
+        socket = socket.display()
+    );
+    let sh_vlt = format!(
+        "#!/bin/sh\nexec node --no-warnings '{}' \"$@\"\n",
+        js.display()
+    );
+    let cmd_npx = format!(
+        "@echo off\r\n:loop\r\nif \"%~1\"==\"\" goto run\r\nset a=%~1\r\nshift\r\nif \"%a:~0,28%\"==\"@socketsecurity/socket-patch\" goto run\r\ngoto loop\r\n:run\r\necho npx %*>> \"{log}\"\r\n\"{socket}\" %*\r\n",
+        log = log.display(),
+        socket = socket.display()
+    );
+    let cmd_vlt = format!(
+        "@echo off\r\nnode --no-warnings \"{}\" %*\r\n",
+        js.display()
+    );
+    for (name, body) in [("npx", sh_npx), ("vlt", sh_vlt)] {
+        let p = bin.join(name);
+        std::fs::write(&p, body).unwrap();
+        #[cfg(unix)]
+        {
+            use std::os::unix::fs::PermissionsExt as _;
+            std::fs::set_permissions(&p, std::fs::Permissions::from_mode(0o755)).unwrap();
+        }
+    }
+    std::fs::write(bin.join("npx.cmd"), cmd_npx).unwrap();
+    std::fs::write(bin.join("vlt.cmd"), cmd_vlt).unwrap();
+}
+
+// ── vlt.json ──────────────────────────────────────────────────────────────
+
+/// How a project reaches its registry.
+#[derive(Clone, Debug, Default)]
+pub struct VltJson {
+    /// Extra members of `config` (after the registry keys).
+    pub config: Vec<(String, Value)>,
+    /// Workspace globs, if any.
+    pub workspaces: Option<Value>,
+    /// Suppress the `"modifiers": {}` the 0.0.0-16 … 24 window needs.
+    pub no_modifiers: bool,
+    /// Leave every registry key out (registry configured elsewhere).
+    pub no_registry: bool,
+}
+
+/// The vlt.json the §8.3 era table prescribes for registry `r`
+/// (`http://127.0.0.1:<port>/`).
+pub fn vlt_json(v: VltVersion, r: &str, opts: &VltJson) -> Value {
+    let mut config = serde_json::Map::new();
+    if !opts.no_registry {
+        if scalar_registry_ignored(v) {
+            config.insert("registry".into(), json!("https://registry.npmjs.org/"));
+        } else if v >= REGISTRIES_NPM_ROUTES_FROM {
+            config.insert("registries".into(), json!({ "npm": r }));
+            if v < REGISTRIES_NPM_REQUIRED_FROM {
+                config.insert("registry".into(), json!(r));
+            }
+        } else {
+            config.insert("registry".into(), json!(r));
+        }
+    }
+    for (k, val) in &opts.config {
+        config.insert(k.clone(), val.clone());
+    }
+    let mut doc = serde_json::Map::new();
+    if flat_vlt_json(v) {
+        doc = config;
+    } else if !config.is_empty() {
+        doc.insert("config".into(), Value::Object(config));
+    }
+    if lock_ignored_without_modifiers(v) && !opts.no_modifiers {
+        doc.insert("modifiers".into(), json!({}));
+    }
+    if let Some(ws) = &opts.workspaces {
+        if !legacy_workspaces_file(v) {
+            doc.insert("workspaces".into(), ws.clone());
+        }
+    }
+    Value::Object(doc)
+}
+
+/// Write `vlt.json` (and, ≤ 0.0.0-12, `vlt-workspaces.json`) into `proj`.
+pub fn write_vlt_json(proj: &Path, v: VltVersion, r: &str, opts: &VltJson) {
+    let doc = vlt_json(v, r, opts);
+    std::fs::write(
+        proj.join("vlt.json"),
+        serde_json::to_string_pretty(&doc).unwrap() + "\n",
+    )
+    .unwrap();
+    write_vlt_workspaces(proj, v, opts);
+}
+
+pub fn write_vlt_workspaces(proj: &Path, v: VltVersion, opts: &VltJson) {
+    if let (true, Some(ws)) = (legacy_workspaces_file(v), &opts.workspaces) {
+        std::fs::write(
+            proj.join("vlt-workspaces.json"),
+            serde_json::to_string_pretty(&json!({ "packages": ws })).unwrap() + "\n",
+        )
+        .unwrap();
+    }
+}
+
+// ── the local npm registry ────────────────────────────────────────────────
+
+/// `name@version` bytes fetched once from npmjs into the shared test cache.
+#[derive(Clone)]
+pub struct CachedPkg {
+    pub name: String,
+    pub version: String,
+    pub manifest: Value,
+    pub tgz: Vec<u8>,
+}
+
+impl CachedPkg {
+    pub fn bare(&self) -> &str {
+        self.name.rsplit('/').next().unwrap()
+    }
+
+    pub fn integrity(&self) -> String {
+        sha512_sri(&self.tgz)
+    }
+}
+
+fn registry_cache_dir() -> PathBuf {
+    cache_env::cache_root().join("vlt-e2e-registry").join("v1")
+}
+
+fn cache_key(name: &str, version: &str) -> String {
+    format!("{}@{version}", name.replace('/', "+"))
+}
+
+fn write_atomic(path: &Path, bytes: &[u8]) {
+    let dir = path.parent().unwrap();
+    std::fs::create_dir_all(dir).unwrap();
+    let mut tmp = tempfile::NamedTempFile::new_in(dir).unwrap();
+    tmp.write_all(bytes).unwrap();
+    tmp.persist(path).ok();
+}
+
+/// `name@version` from the shared cache, fetching it from npmjs (and
+/// checking its integrity) the first time.
+pub async fn fetch_pkg(name: &str, version: &str) -> CachedPkg {
+    let dir = registry_cache_dir();
+    let key = cache_key(name, version);
+    let json_path = dir.join(format!("{key}.json"));
+    let tgz_path = dir.join(format!("{key}.tgz"));
+    if let (Ok(m), Ok(t)) = (std::fs::read(&json_path), std::fs::read(&tgz_path)) {
+        if let Ok(manifest) = serde_json::from_slice::<Value>(&m) {
+            if manifest["dist"]["integrity"].as_str() == Some(sha512_sri(&t).as_str()) {
+                return CachedPkg {
+                    name: name.into(),
+                    version: version.into(),
+                    manifest,
+                    tgz: t,
+                };
+            }
+        }
+    }
+    let client = reqwest::Client::new();
+    let url = format!(
+        "https://registry.npmjs.org/{}",
+        name.replacen('/', "%2f", 1)
+    );
+    let mut last = String::new();
+    for attempt in 0..5 {
+        if attempt > 0 {
+            tokio::time::sleep(std::time::Duration::from_secs(2 * attempt)).await;
+        }
+        let packument: Value = match client
+            .get(&url)
+            .header("accept", "application/json")
+            .send()
+            .await
+        {
+            Ok(r) if r.status().is_success() => match r.json().await {
+                Ok(v) => v,
+                Err(e) => {
+                    last = e.to_string();
+                    continue;
+                }
+            },
+            Ok(r) => {
+                last = format!("http {}", r.status());
+                continue;
+            }
+            Err(e) => {
+                last = e.to_string();
+                continue;
+            }
+        };
+        let manifest = packument["versions"][version].clone();
+        assert!(
+            manifest.is_object(),
+            "npmjs has no {name}@{version} (needed by the vlt e2e registry)"
+        );
+        let tarball = manifest["dist"]["tarball"].as_str().unwrap().to_string();
+        let tgz = match client.get(&tarball).send().await {
+            Ok(r) if r.status().is_success() => match r.bytes().await {
+                Ok(b) => b.to_vec(),
+                Err(e) => {
+                    last = e.to_string();
+                    continue;
+                }
+            },
+            Ok(r) => {
+                last = format!("http {}", r.status());
+                continue;
+            }
+            Err(e) => {
+                last = e.to_string();
+                continue;
+            }
+        };
+        let want = manifest["dist"]["integrity"].as_str().unwrap_or_default();
+        assert_eq!(
+            sha512_sri(&tgz),
+            want,
+            "npmjs served {name}@{version} bytes that fail its own integrity"
+        );
+        write_atomic(&json_path, &serde_json::to_vec(&manifest).unwrap());
+        write_atomic(&tgz_path, &tgz);
+        return CachedPkg {
+            name: name.into(),
+            version: version.into(),
+            manifest,
+            tgz,
+        };
+    }
+    panic!("could not fetch {name}@{version} from npmjs for the vlt e2e registry: {last}");
+}
+
+/// A harness-built package (`files` are package-relative; package.json is
+/// generated from `manifest`).
+pub fn synthetic_pkg(manifest: Value, files: &[(&str, &[u8])]) -> CachedPkg {
+    let mut tree = BTreeMap::new();
+    tree.insert(
+        "package.json".to_string(),
+        (serde_json::to_string_pretty(&manifest).unwrap() + "\n").into_bytes(),
+    );
+    for (rel, bytes) in files {
+        tree.insert((*rel).to_string(), bytes.to_vec());
+    }
+    let tgz = build_tgz(&tree);
+    let mut manifest = manifest;
+    manifest["dist"] = json!({ "integrity": sha512_sri(&tgz), "tarball": "" });
+    CachedPkg {
+        name: manifest["name"].as_str().unwrap().to_string(),
+        version: manifest["version"].as_str().unwrap().to_string(),
+        manifest,
+        tgz,
+    }
+}
+
+/// [`synthetic_pkg`] with `exec` entries marked executable.
+pub fn synthetic_pkg_exec(manifest: Value, files: &[(&str, &[u8])], exec: &[&str]) -> CachedPkg {
+    let mut tree = BTreeMap::new();
+    tree.insert(
+        "package.json".to_string(),
+        (serde_json::to_string_pretty(&manifest).unwrap() + "\n").into_bytes(),
+    );
+    for (rel, bytes) in files {
+        tree.insert((*rel).to_string(), bytes.to_vec());
+    }
+    let tgz = build_tgz_with(&tree, exec);
+    let mut manifest = manifest;
+    manifest["dist"] = json!({ "integrity": sha512_sri(&tgz), "tarball": "" });
+    CachedPkg {
+        name: manifest["name"].as_str().unwrap().to_string(),
+        version: manifest["version"].as_str().unwrap().to_string(),
+        manifest,
+        tgz,
+    }
+}
+
+/// A peer-free package that `require()`s its own name
+/// (`vlt-e2e-selfref/lib/impl`), the D19 self-reference probe.
+pub fn selfref_pkg() -> CachedPkg {
+    synthetic_pkg(
+        json!({ "name": "vlt-e2e-selfref", "version": "1.0.0", "main": "index.js" }),
+        &[
+            (
+                "index.js",
+                b"module.exports = require('vlt-e2e-selfref/lib/impl');\n",
+            ),
+            ("lib/impl.js", b"module.exports = 'impl';\n"),
+        ],
+    )
+}
+
+/// A wiremock npm registry serving exactly the pinned `name@version` set,
+/// from bytes fetched once from npmjs.
+pub struct Registry {
+    pub server: MockServer,
+    pub pkgs: Vec<CachedPkg>,
+}
+
+fn escape_name_regex(name: &str) -> String {
+    match name.split_once('/') {
+        Some((scope, bare)) => {
+            format!("^/{}(%2[fF]|/){}$", regex_escape(scope), regex_escape(bare))
+        }
+        None => format!("^/{}$", regex_escape(name)),
+    }
+}
+
+fn regex_escape(s: &str) -> String {
+    let mut out = String::new();
+    for c in s.chars() {
+        if "\\.+*?()|[]{}^$#&-~".contains(c) {
+            out.push('\\');
+        }
+        out.push(c);
+    }
+    out
+}
+
+impl Registry {
+    pub async fn start(pins: &[(&str, &str)]) -> Registry {
+        Registry::start_with(pins, Vec::new()).await
+    }
+
+    /// [`Registry::start`] plus harness-built `synthetic` packages.
+    pub async fn start_with(pins: &[(&str, &str)], synthetic: Vec<CachedPkg>) -> Registry {
+        let mut pkgs = Vec::new();
+        for (name, version) in pins {
+            pkgs.push(fetch_pkg(name, version).await);
+        }
+        pkgs.extend(synthetic);
+        let server = MockServer::start().await;
+        let reg = Registry { server, pkgs };
+        reg.mount().await;
+        reg
+    }
+
+    /// `http://127.0.0.1:<port>/`.
+    pub fn url(&self) -> String {
+        format!("{}/", self.server.uri())
+    }
+
+    pub fn tarball_path(name: &str, bare: &str, version: &str) -> String {
+        format!("/{name}/-/{bare}-{version}.tgz")
+    }
+
+    pub fn pkg(&self, name: &str, version: &str) -> &CachedPkg {
+        self.pkgs
+            .iter()
+            .find(|p| p.name == name && p.version == version)
+            .unwrap_or_else(|| panic!("{name}@{version} is not pinned in the registry"))
+    }
+
+    pub fn packument(&self, name: &str) -> Value {
+        let mut versions = serde_json::Map::new();
+        let mut latest: Option<String> = None;
+        for p in self.pkgs.iter().filter(|p| p.name == name) {
+            let mut m = p.manifest.clone();
+            m["dist"]["tarball"] = json!(format!(
+                "{}{}",
+                self.server.uri(),
+                Self::tarball_path(&p.name, p.bare(), &p.version)
+            ));
+            versions.insert(p.version.clone(), m);
+            latest = Some(p.version.clone());
+        }
+        let mut times = serde_json::Map::new();
+        for v in versions.keys() {
+            times.insert(v.clone(), json!("2020-01-01T00:00:00.000Z"));
+        }
+        json!({
+            "name": name,
+            "dist-tags": { "latest": latest },
+            "versions": versions,
+            "time": times,
+        })
+    }
+
+    pub async fn mount(&self) {
+        let mut names: Vec<&str> = self.pkgs.iter().map(|p| p.name.as_str()).collect();
+        names.sort();
+        names.dedup();
+        for name in names {
+            Mock::given(method("GET"))
+                .and(path_regex(escape_name_regex(name)))
+                .respond_with(
+                    ResponseTemplate::new(200)
+                        .insert_header("content-type", "application/json")
+                        .set_body_json(self.packument(name)),
+                )
+                .mount(&self.server)
+                .await;
+        }
+        for p in &self.pkgs {
+            let mut m = p.manifest.clone();
+            m["dist"]["tarball"] = json!(format!(
+                "{}{}",
+                self.server.uri(),
+                Self::tarball_path(&p.name, p.bare(), &p.version)
+            ));
+            let doc_path = format!(
+                "{}/{}$",
+                escape_name_regex(&p.name).trim_end_matches('$'),
+                regex_escape(&p.version)
+            );
+            Mock::given(method("GET"))
+                .and(path_regex(doc_path))
+                .respond_with(
+                    ResponseTemplate::new(200)
+                        .insert_header("content-type", "application/json")
+                        .set_body_json(m),
+                )
+                .mount(&self.server)
+                .await;
+            Mock::given(method("GET"))
+                .and(path(Self::tarball_path(&p.name, p.bare(), &p.version)))
+                .respond_with(
+                    ResponseTemplate::new(200)
+                        .insert_header("content-type", "application/octet-stream")
+                        .set_body_bytes(p.tgz.clone()),
+                )
+                .mount(&self.server)
+                .await;
+        }
+    }
+
+    /// Every route answers 404 from now on (the URL stays the same, so
+    /// the lock's `options` do not change).
+    pub async fn kill(&self) {
+        self.server.reset().await;
+    }
+
+    pub async fn revive(&self) {
+        self.server.reset().await;
+        self.mount().await;
+    }
+
+    pub async fn requests(&self) -> Vec<String> {
+        self.server
+            .received_requests()
+            .await
+            .unwrap_or_default()
+            .iter()
+            .map(|r| r.url.path().to_string())
+            .collect()
+    }
+}
+
+// ── hashing and tarballs ──────────────────────────────────────────────────
+
+pub fn sha512_sri(bytes: &[u8]) -> String {
+    format!(
+        "sha512-{}",
+        base64::engine::general_purpose::STANDARD.encode(Sha512::digest(bytes))
+    )
+}
+
+pub fn sha256_hex(bytes: &[u8]) -> String {
+    hex::encode(Sha256::digest(bytes))
+}
+
+pub fn git_sha256(bytes: &[u8]) -> String {
+    let mut h = Sha256::new();
+    h.update(format!("blob {}\0", bytes.len()).as_bytes());
+    h.update(bytes);
+    hex::encode(h.finalize())
+}
+
+/// Every regular file under `dir` (relative, forward-slashed), skipping
+/// `node_modules` and following no links.
+pub fn package_files(dir: &Path) -> BTreeMap<String, Vec<u8>> {
+    fn walk(base: &Path, dir: &Path, out: &mut BTreeMap<String, Vec<u8>>) {
+        let mut entries: Vec<_> = std::fs::read_dir(dir)
+            .unwrap()
+            .map(|e| e.unwrap())
+            .collect();
+        entries.sort_by_key(|e| e.file_name());
+        for e in entries {
+            let ty = e.file_type().unwrap();
+            let p = e.path();
+            if ty.is_dir() {
+                if e.file_name() == "node_modules" {
+                    continue;
+                }
+                walk(base, &p, out);
+            } else if ty.is_file() {
+                let rel = p
+                    .strip_prefix(base)
+                    .unwrap()
+                    .to_string_lossy()
+                    .replace('\\', "/");
+                out.insert(rel, std::fs::read(&p).unwrap());
+            }
+        }
+    }
+    let mut out = BTreeMap::new();
+    walk(dir, dir, &mut out);
+    out
+}
+
+/// A deterministic npm tarball (`package/` prefix, zero mtimes, sorted
+/// entries, a fixed gzip header).
+pub fn build_tgz(files: &BTreeMap<String, Vec<u8>>) -> Vec<u8> {
+    build_tgz_with(files, &[])
+}
+
+/// [`build_tgz`] with `exec` entries (and `bin/*`) at mode 0755.
+pub fn build_tgz_with(files: &BTreeMap<String, Vec<u8>>, exec: &[&str]) -> Vec<u8> {
+    let gz = flate2::GzBuilder::new()
+        .mtime(0)
+        .write(Vec::new(), flate2::Compression::new(6));
+    let mut builder = tar::Builder::new(gz);
+    builder.mode(tar::HeaderMode::Deterministic);
+    for (rel, data) in files {
+        let mut header = tar::Header::new_gnu();
+        header.set_size(data.len() as u64);
+        let executable = rel.starts_with("bin/") || exec.contains(&rel.as_str());
+        header.set_mode(if executable { 0o755 } else { 0o644 });
+        header.set_mtime(0);
+        header.set_uid(0);
+        header.set_gid(0);
+        header.set_cksum();
+        builder
+            .append_data(&mut header, format!("package/{rel}"), data.as_slice())
+            .unwrap();
+    }
+    builder.into_inner().unwrap().finish().unwrap()
+}
+
+/// The files of a registry tarball, `package/` (or whatever the first
+/// component is) stripped.
+pub fn tgz_files(tgz: &[u8]) -> BTreeMap<String, Vec<u8>> {
+    let mut out = BTreeMap::new();
+    let mut ar = tar::Archive::new(flate2::read::GzDecoder::new(tgz));
+    for entry in ar.entries().unwrap() {
+        let mut entry = entry.unwrap();
+        if !entry.header().entry_type().is_file() {
+            continue;
+        }
+        let p = entry.path().unwrap().to_string_lossy().replace('\\', "/");
+        let rel = match p.split_once('/') {
+            Some((_, rest)) => rest.to_string(),
+            None => continue,
+        };
+        let mut buf = Vec::new();
+        std::io::Read::read_to_end(&mut entry, &mut buf).unwrap();
+        out.insert(rel, buf);
+    }
+    out
+}
+
+// ── patch targets and the patch service ───────────────────────────────────
+
+pub const ORG: &str = "test-org";
+pub const TOKEN: &str = "44444444-4444-4444-8444-444444444444";
+pub const MARKER: &[u8] = b"/* SOCKET-PATCHED */\n";
+pub const TAMPER_MARKER: &[u8] = b"/* SOCKET-TAMPERED */\n";
+pub const PRODUCT: &str = "pkg:npm/vlt-e2e-app@1.0.0";
+
+/// One Socket patch the mock service publishes.
+#[derive(Clone)]
+pub struct PatchTarget {
+    pub name: String,
+    pub version: String,
+    pub uuid: String,
+    pub ghsa: String,
+    pub cve: String,
+    /// Package-relative path of the patched file.
+    pub file: String,
+    pub before: Vec<u8>,
+    pub after: Vec<u8>,
+    /// Extra patched files `(rel, before, after)`.
+    pub extra: Vec<(String, Vec<u8>, Vec<u8>)>,
+    /// The hosted artifact (identity-encoded, deterministic).
+    pub tgz: Vec<u8>,
+    /// The pristine package files.
+    pub base: BTreeMap<String, Vec<u8>>,
+}
+
+impl PatchTarget {
+    /// Patch `file` of the pristine `pkg` by prepending [`MARKER`].
+    pub fn from_pkg(pkg: &CachedPkg, uuid: &str, file: &str) -> Self {
+        let files = tgz_files(&pkg.tgz);
+        Self::from_files(&pkg.name, &pkg.version, uuid, file, files)
+    }
+
+    /// Patch `file` of the package whose installed files are `files`.
+    pub fn from_files(
+        name: &str,
+        version: &str,
+        uuid: &str,
+        file: &str,
+        mut files: BTreeMap<String, Vec<u8>>,
+    ) -> Self {
+        let before = files
+            .get(file)
+            .unwrap_or_else(|| panic!("{name}@{version} has no {file}"))
+            .clone();
+        let after = [MARKER, before.as_slice()].concat();
+        let base = files.clone();
+        files.insert(file.to_string(), after.clone());
+        let tgz = build_tgz(&files);
+        let n = uuid.as_bytes()[0];
+        Self {
+            name: name.into(),
+            version: version.into(),
+            uuid: uuid.into(),
+            ghsa: format!(
+                "GHSA-vlte-{}{}{}{}-2e2e",
+                n as char, n as char, n as char, n as char
+            ),
+            cve: format!("CVE-2026-{}", 4000 + u32::from(n)),
+            file: file.into(),
+            before,
+            after,
+            extra: Vec::new(),
+            tgz,
+            base,
+        }
+    }
+
+    /// Also patch `rel` to `after` (the artifact is rebuilt).
+    pub fn also_patch(mut self, rel: &str, after: Vec<u8>) -> Self {
+        let before = self
+            .base
+            .get(rel)
+            .unwrap_or_else(|| panic!("{} has no {rel}", self.name))
+            .clone();
+        self.extra.push((rel.to_string(), before, after));
+        let mut files = self.base.clone();
+        for (rel, _, after) in self.all_files() {
+            files.insert(rel, after);
+        }
+        self.tgz = build_tgz(&files);
+        self
+    }
+
+    /// Patch a file from the installed copy at `dir` (canonicalized
+    /// through the importer link).
+    pub fn from_installed(name: &str, version: &str, uuid: &str, file: &str, dir: &Path) -> Self {
+        let real = dir.canonicalize().expect("installed package dir");
+        Self::from_files(name, version, uuid, file, package_files(&real))
+    }
+
+    pub fn purl(&self) -> String {
+        format!(
+            "pkg:npm/{}@{}",
+            self.name.replacen('@', "%40", 1),
+            self.version
+        )
+    }
+
+    pub fn bare(&self) -> &str {
+        self.name.rsplit('/').next().unwrap()
+    }
+
+    pub fn sri(&self) -> String {
+        sha512_sri(&self.tgz)
+    }
+
+    pub fn artifact_path(&self) -> String {
+        format!(
+            "/patch/npm/{}/{}/{TOKEN}/{}/{}-{}.tgz",
+            self.name,
+            self.version,
+            self.uuid,
+            self.bare(),
+            self.version
+        )
+    }
+
+    /// The vendored service's prebuilt archive route.
+    pub fn prebuilt_path(&self) -> String {
+        format!("/serve/{}/{}-{}.tgz", self.uuid, self.bare(), self.version)
+    }
+
+    pub fn all_files(&self) -> Vec<(String, Vec<u8>, Vec<u8>)> {
+        let mut v = vec![(self.file.clone(), self.before.clone(), self.after.clone())];
+        v.extend(self.extra.iter().cloned());
+        v
+    }
+
+    pub fn view(&self) -> Value {
+        let mut files = serde_json::Map::new();
+        for (rel, before, after) in self.all_files() {
+            files.insert(
+                format!("package/{rel}"),
+                json!({
+                    "beforeHash": git_sha256(&before),
+                    "afterHash": git_sha256(&after),
+                    "blobContent": base64::engine::general_purpose::STANDARD.encode(&after),
+                }),
+            );
+        }
+        json!({
+            "uuid": self.uuid,
+            "purl": self.purl(),
+            "publishedAt": "2026-01-01T00:00:00Z",
+            "files": files,
+            "vulnerabilities": {
+                self.ghsa.clone(): {
+                    "cves": [self.cve],
+                    "summary": "vlt e2e fixture",
+                    "severity": "high",
+                    "description": "d"
+                }
+            },
+            "description": "vlt e2e fixture",
+            "license": "MIT",
+            "tier": "free"
+        })
+    }
+
+    /// The patched package files (the artifact's content).
+    pub fn patched_files(&self) -> BTreeMap<String, Vec<u8>> {
+        tgz_files(&self.tgz)
+    }
+
+    /// `(package/<file>, afterHash)` for the VEX matrix.
+    pub fn vex_files(&self) -> Vec<(String, String)> {
+        self.all_files()
+            .into_iter()
+            .map(|(rel, _, after)| (format!("package/{rel}"), git_sha256(&after)))
+            .collect()
+    }
+}
+
+/// The mock Socket API plus the hosted artifact and prebuilt routes.
+pub struct PatchService {
+    pub server: MockServer,
+    pub targets: Vec<PatchTarget>,
+}
+
+impl PatchService {
+    pub async fn start(targets: Vec<PatchTarget>) -> PatchService {
+        let server = MockServer::start().await;
+        let svc = PatchService { server, targets };
+        svc.mount_api().await;
+        for t in &svc.targets {
+            svc.serve_artifact(t, t.tgz.clone(), 5).await;
+        }
+        svc
+    }
+
+    pub fn uri(&self) -> String {
+        self.server.uri()
+    }
+
+    pub fn target(&self, name: &str) -> &PatchTarget {
+        self.targets
+            .iter()
+            .find(|t| t.name == name)
+            .unwrap_or_else(|| panic!("no patch target {name}"))
+    }
+
+    pub fn artifact_url(&self, t: &PatchTarget) -> String {
+        format!("{}{}", self.server.uri(), t.artifact_path())
+    }
+
+    async fn mount_api(&self) {
+        let packages: Vec<Value> = self
+            .targets
+            .iter()
+            .map(|t| {
+                json!({
+                    "purl": t.purl(),
+                    "patches": [{
+                        "uuid": t.uuid, "purl": t.purl(), "tier": "free",
+                        "cveIds": [t.cve], "ghsaIds": [t.ghsa], "severity": "high",
+                        "title": "vlt e2e fixture"
+                    }]
+                })
+            })
+            .collect();
+        Mock::given(method("POST"))
+            .and(path(format!("/v0/orgs/{ORG}/patches/batch")))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                "packages": packages,
+                "canAccessPaidPatches": false,
+            })))
+            .mount(&self.server)
+            .await;
+        for t in &self.targets {
+            let encoded = urlencode(&t.purl());
+            let alt = urlencode(&t.purl().replace("%40", "@"));
+            for p in [encoded, alt] {
+                Mock::given(method("GET"))
+                    .and(path(format!("/v0/orgs/{ORG}/patches/by-package/{p}")))
+                    .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                        "patches": [{
+                            "uuid": t.uuid, "purl": t.purl(),
+                            "publishedAt": "2026-01-01T00:00:00Z",
+                            "description": "x", "license": "MIT", "tier": "free",
+                            "vulnerabilities": {}
+                        }],
+                        "canAccessPaidPatches": false,
+                    })))
+                    .mount(&self.server)
+                    .await;
+            }
+            Mock::given(method("GET"))
+                .and(path(format!("/v0/orgs/{ORG}/patches/view/{}", t.uuid)))
+                .respond_with(ResponseTemplate::new(200).set_body_json(t.view()))
+                .mount(&self.server)
+                .await;
+        }
+        for t in &self.targets {
+            for (_, before, after) in t.all_files() {
+                for bytes in [before, after] {
+                    Mock::given(method("GET"))
+                        .and(path(format!(
+                            "/v0/orgs/{ORG}/patches/blob/{}",
+                            git_sha256(&bytes)
+                        )))
+                        .respond_with(ResponseTemplate::new(200).set_body_bytes(bytes))
+                        .mount(&self.server)
+                        .await;
+                }
+            }
+        }
+        let mut results = serde_json::Map::new();
+        for t in &self.targets {
+            let url = self.artifact_url(t);
+            results.insert(
+                t.uuid.clone(),
+                json!({
+                    "status": "granted",
+                    "url": url,
+                    "purl": t.purl(),
+                    "artifacts": [{
+                        "kind": "tarball",
+                        "url": url,
+                        "integrity": { "sha512": t.sri() }
+                    }],
+                    "registryOverride": null
+                }),
+            );
+        }
+        Mock::given(method("POST"))
+            .and(path(format!("/v0/orgs/{ORG}/patches/package")))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({ "results": results })))
+            .mount(&self.server)
+            .await;
+        Mock::given(method("GET"))
+            .and(path_regex(format!(
+                "^/v0/orgs/{ORG}/patches/by-package/.+$"
+            )))
+            .respond_with(ResponseTemplate::new(200).set_body_json(json!({
+                "patches": [],
+                "canAccessPaidPatches": false,
+            })))
+            .with_priority(9)
+            .mount(&self.server)
+            .await;
+    }
+
+    /// Serve `bytes` on `t`'s artifact route (identity-encoded) at
+    /// wiremock `priority` (1 wins over the default 5).
+    pub async fn serve_artifact(&self, t: &PatchTarget, bytes: Vec<u8>, priority: u8) {
+        Mock::given(method("GET"))
+            .and(path(t.artifact_path()))
+            .respond_with(
+                ResponseTemplate::new(200)
+                    .insert_header("content-type", "application/octet-stream")
+                    .set_body_bytes(bytes),
+            )
+            .with_priority(priority)
+            .mount(&self.server)
+            .await;
+    }
+
+    /// Serve `t`'s artifact gzip-encoded, as patch.socket.dev did before
+    /// the `no-transform` fix.
+    pub async fn serve_artifact_gzip_encoded(&self, t: &PatchTarget) {
+        let mut enc = flate2::write::GzEncoder::new(Vec::new(), flate2::Compression::default());
+        enc.write_all(&t.tgz).unwrap();
+        Mock::given(method("GET"))
+            .and(path(t.artifact_path()))
+            .respond_with(
+                ResponseTemplate::new(200)
+                    .insert_header("content-type", "application/octet-stream")
+                    .insert_header("content-encoding", "gzip")
+                    .set_body_bytes(enc.finish().unwrap()),
+            )
+            .with_priority(1)
+            .mount(&self.server)
+            .await;
+    }
+
+    pub async fn artifact_hits(&self, t: &PatchTarget) -> usize {
+        self.server
+            .received_requests()
+            .await
+            .unwrap_or_default()
+            .iter()
+            .filter(|r| r.url.path() == t.artifact_path())
+            .count()
+    }
+
+    pub async fn request_paths(&self) -> Vec<String> {
+        self.server
+            .received_requests()
+            .await
+            .unwrap_or_default()
+            .iter()
+            .map(|r| format!("{} {}", r.method, r.url.path()))
+            .collect()
+    }
+}
+
+pub fn urlencode(s: &str) -> String {
+    let mut out = String::new();
+    for b in s.bytes() {
+        if b.is_ascii_alphanumeric() || b"-_.~".contains(&b) {
+            out.push(b as char);
+        } else {
+            out.push_str(&format!("%{b:02X}"));
+        }
+    }
+    out
+}
+
+// ── socket-patch ──────────────────────────────────────────────────────────
+
+/// The socket-patch binary with the ambient `SOCKET_*`, `VLT_*`, npm and
+/// proxy environment scrubbed.
+pub fn socket_cmd() -> Command {
+    let mut cmd = Command::new(socket_bin());
+    cache_env::scrub_ambient_vlt_env(&mut cmd);
+    for (key, _) in std::env::vars_os() {
+        let name = key.to_string_lossy();
+        if ["http_proxy", "https_proxy", "all_proxy", "no_proxy"]
+            .iter()
+            .any(|p| name.eq_ignore_ascii_case(p))
+            || name.starts_with("SOCKET_PATCH_VLT_E2E_")
+        {
+            cmd.env_remove(&key);
+        }
+    }
+    cmd.env("SOCKET_NO_CONFIG", "1")
+        .env("SOCKET_NO_UPDATE_CHECK", "1")
+        .env("SOCKET_TELEMETRY_DISABLED", "1")
+        .env("VLT_TELEMETRY", "0")
+        .env("LANG", "C")
+        .env("LC_ALL", "C");
+    cmd
+}
+
+pub struct SocketOut {
+    pub code: i32,
+    pub stdout: String,
+    pub stderr: String,
+}
+
+impl SocketOut {
+    pub fn json(&self) -> Value {
+        serde_json::from_str(&self.stdout).unwrap_or_else(|e| {
+            panic!(
+                "socket-patch stdout is not JSON ({e}):\nstdout:\n{}\nstderr:\n{}",
+                self.stdout, self.stderr
+            )
+        })
+    }
+}
+
+impl std::fmt::Display for SocketOut {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        write!(
+            f,
+            "exit {}\nstdout:\n{}\nstderr:\n{}",
+            self.code, self.stdout, self.stderr
+        )
+    }
+}
+
+/// `socket-patch <args>` in `cwd` with `env`.
+pub fn socket(cwd: &Path, args: &[&str], env: &[(&str, &str)]) -> SocketOut {
+    let mut cmd = socket_cmd();
+    cmd.args(args).current_dir(cwd);
+    for (k, v) in env {
+        cmd.env(k, v);
+    }
+    let out = cmd.output().expect("spawn socket-patch");
+    SocketOut {
+        code: out.status.code().unwrap_or(-1),
+        stdout: String::from_utf8_lossy(&out.stdout).into_owned(),
+        stderr: String::from_utf8_lossy(&out.stderr).into_owned(),
+    }
+}
+
+/// `<cmd> … --json --yes --cwd <proj> --api-url <svc> --org --api-token`.
+pub fn socket_api(proj: &Path, svc: &PatchService, head: &[&str], extra: &[&str]) -> SocketOut {
+    let cwd = proj.to_str().unwrap().to_string();
+    let uri = svc.uri();
+    let mut args: Vec<&str> = head.to_vec();
+    args.extend([
+        "--json",
+        "--yes",
+        "--cwd",
+        &cwd,
+        "--api-url",
+        &uri,
+        "--org",
+        ORG,
+        "--api-token",
+        "sktsec_placeholder_value_for_tests_api",
+    ]);
+    args.extend_from_slice(extra);
+    socket(proj, &args, &[])
+}
+
+/// `scan --mode hosted` with `extra`, asserting exit 0.
+pub fn scan_hosted(proj: &Path, svc: &PatchService, extra: &[&str]) -> Value {
+    let out = socket_api(proj, svc, &["scan", "--mode", "hosted"], extra);
+    assert_eq!(out.code, 0, "scan --mode hosted: {out}");
+    out.json()
+}
+
+/// `get <uuid> --mode hosted`, asserting exit 0.
+pub fn get_hosted(proj: &Path, svc: &PatchService, uuid: &str, extra: &[&str]) -> Value {
+    let out = socket_api(proj, svc, &["get", uuid, "--mode", "hosted"], extra);
+    assert_eq!(out.code, 0, "get --mode hosted: {out}");
+    out.json()
+}
+
+/// `rollback --yes --json` (whole ledger) in `proj`.
+pub fn rollback(proj: &Path, extra: &[&str]) -> SocketOut {
+    let cwd = proj.to_str().unwrap().to_string();
+    let mut args = vec!["rollback", "--json", "--yes", "--cwd", &cwd];
+    args.extend_from_slice(extra);
+    socket(proj, &args, &[])
+}
+
+pub fn redirect_warnings(doc: &Value) -> Vec<(String, String)> {
+    let mut out = Vec::new();
+    for w in [&doc["redirect"]["warnings"], &doc["warnings"]] {
+        for w in w.as_array().into_iter().flatten() {
+            if let Some(code) = w["code"].as_str() {
+                out.push((
+                    code.to_string(),
+                    w["detail"].as_str().unwrap_or_default().to_string(),
+                ));
+            }
+        }
+    }
+    out
+}
+
+pub fn warning_detail(doc: &Value, code: &str) -> String {
+    redirect_warnings(doc)
+        .into_iter()
+        .find(|(c, _)| c == code)
+        .map(|(_, d)| d)
+        .unwrap_or_else(|| panic!("expected a `{code}` warning: {doc:#}"))
+}
+
+pub fn has_warning(doc: &Value, code: &str) -> bool {
+    redirect_warnings(doc).iter().any(|(c, _)| c == code)
+        || doc.to_string().contains(&format!("\"{code}\""))
+}
+
+// ── the lock ──────────────────────────────────────────────────────────────
+
+pub const VLT_LOCK: &str = "vlt-lock.json";
+pub const HIDDEN_LOCK: &str = "node_modules/.vlt-lock.json";
+
+pub fn read_lock(proj: &Path) -> Value {
+    serde_json::from_slice(&std::fs::read(proj.join(VLT_LOCK)).expect("vlt-lock.json"))
+        .expect("vlt-lock.json parses")
+}
+
+pub fn lock_bytes(proj: &Path) -> Vec<u8> {
+    std::fs::read(proj.join(VLT_LOCK)).expect("vlt-lock.json")
+}
+
+/// vlt's tilde segment decode (DESIGN §1.6).
+pub fn tilde_decode(seg: &str) -> String {
+    let chars: Vec<char> = seg.chars().collect();
+    let mut out = String::new();
+    let mut i = 0;
+    while i < chars.len() {
+        let c = chars[i];
+        if c == '+' {
+            out.push('/');
+            i += 1;
+            continue;
+        }
+        if c == '_' && i + 1 < chars.len() {
+            let n = chars[i + 1];
+            let mapped = match n {
+                '_' => Some('_'),
+                'p' => Some('+'),
+                'b' => Some('\\'),
+                'c' => Some(':'),
+                't' => Some('~'),
+                'l' => Some('<'),
+                'g' => Some('>'),
+                'q' => Some('"'),
+                'i' => Some('|'),
+                'm' => Some('?'),
+                'a' => Some('*'),
+                'd' => Some('.'),
+                's' => Some(' '),
+                _ => None,
+            };
+            if let Some(m) = mapped {
+                out.push(m);
+                i += 2;
+                continue;
+            }
+            if (n == '0' || n == '1') && i + 2 < chars.len() && chars[i + 2].is_ascii_hexdigit() {
+                let v = u32::from_str_radix(&format!("{n}{}", chars[i + 2]), 16).unwrap();
+                out.push(char::from_u32(v).unwrap());
+                i += 3;
+                continue;
+            }
+        }
+        out.push(c);
+        i += 1;
+    }
+    out
+}
+
+/// `decodeURIComponent` of a legacy segment (`§` = `/`); `None` when
+/// malformed.
+pub fn legacy_decode(seg: &str) -> Option<String> {
+    let s = seg.replace('§', "%2F");
+    let bytes = s.as_bytes();
+    let mut out = Vec::new();
+    let mut i = 0;
+    while i < bytes.len() {
+        if bytes[i] == b'%' {
+            let hex = std::str::from_utf8(bytes.get(i + 1..i + 3)?).ok()?;
+            out.push(u8::from_str_radix(hex, 16).ok()?);
+            i += 3;
+        } else {
+            out.push(bytes[i]);
+            i += 1;
+        }
+    }
+    String::from_utf8(out).ok()
+}
+
+/// `(registry segment, name, version)` of a registry-type DepID.
+pub fn decode_registry_id(id: &str) -> Option<(String, String, String)> {
+    let (delim, tilde) = if id.starts_with('~') {
+        ('~', true)
+    } else if id.starts_with('·') {
+        ('·', false)
+    } else {
+        return None;
+    };
+    let mut fields = id.splitn(4, delim);
+    fields.next()?;
+    let seg = fields.next()?;
+    let second = fields.next()?;
+    let decode = |s: &str| {
+        if tilde {
+            Some(tilde_decode(s))
+        } else {
+            legacy_decode(s)
+        }
+    };
+    let seg = decode(seg)?;
+    let nv = decode(second)?;
+    let at = nv.rfind('@').filter(|i| *i > 0)?;
+    Some((seg, nv[..at].to_string(), nv[at + 1..].to_string()))
+}
+
+/// The registry-type DepIDs whose tuple names `name` at `version`.
+pub fn node_ids(lock: &Value, name: &str, version: &str) -> Vec<String> {
+    lock["nodes"]
+        .as_object()
+        .map(|nodes| {
+            nodes
+                .iter()
+                .filter(|(id, t)| {
+                    t[1] == name
+                        && decode_registry_id(id).is_some_and(|(_, n, v)| n == name && v == version)
+                })
+                .map(|(id, _)| id.clone())
+                .collect()
+        })
+        .unwrap_or_default()
+}
+
+pub fn node_id(lock: &Value, name: &str, version: &str) -> String {
+    let ids = node_ids(lock, name, version);
+    assert_eq!(ids.len(), 1, "one node for {name}@{version}: {lock:#}");
+    ids[0].clone()
+}
+
+/// The raw line of node `id` in the lock text.
+pub fn node_line(text: &str, id: &str) -> Option<String> {
+    let key = format!("\"{id}\": [");
+    text.lines()
+        .find(|l| l.trim_start().starts_with(&key))
+        .map(str::to_string)
+}
+
+/// The era assertion: the lock the toolchain wrote has the expected
+/// `lockfileVersion` and DepID family.
+pub fn assert_lock_era(leg: &Leg, proj: &Path) {
+    let lock = read_lock(proj);
+    let era = leg.era();
+    assert_eq!(
+        lock["lockfileVersion"].as_u64(),
+        era.lockfile_version(),
+        "vlt {} wrote an unexpected lockfileVersion (era {era:?}): {lock:#}",
+        leg.tc.raw
+    );
+    if let Some(nodes) = lock["nodes"].as_object() {
+        for id in nodes.keys() {
+            let tilde = id.starts_with('~') || id.contains('~') && !id.contains('·');
+            if era.tilde() {
+                assert!(tilde || !id.contains('·'), "era {era:?} DepID {id}");
+            } else {
+                assert!(id.contains('·'), "era {era:?} DepID {id}");
+            }
+        }
+    }
+}
+
+/// Assert slot [2]/[3] of every `name@version` node pin the hosted artifact.
+pub fn assert_pinned(proj: &Path, svc: &PatchService, t: &PatchTarget) {
+    let lock = read_lock(proj);
+    let ids = node_ids(&lock, &t.name, &t.version);
+    assert!(!ids.is_empty(), "no node for {}: {lock:#}", t.name);
+    for id in ids {
+        let tuple = &lock["nodes"][&id];
+        assert_eq!(tuple[2], t.sri(), "{id} slot [2]: {lock:#}");
+        assert_eq!(tuple[3], svc.artifact_url(t), "{id} slot [3]: {lock:#}");
+    }
+}
+
+pub fn assert_not_pinned(proj: &Path, t: &PatchTarget) {
+    let lock = read_lock(proj);
+    for id in node_ids(&lock, &t.name, &t.version) {
+        assert_ne!(
+            lock["nodes"][&id][2],
+            t.sri(),
+            "{id} must not be pinned: {lock:#}"
+        );
+    }
+}
+
+// ── the installed tree ────────────────────────────────────────────────────
+
+/// `node_modules/<name>` of `importer` (relative to `proj`).
+pub fn importer_dir(proj: &Path, importer: &str, name: &str) -> PathBuf {
+    let base = if importer.is_empty() {
+        proj.to_path_buf()
+    } else {
+        proj.join(importer)
+    };
+    base.join("node_modules").join(name)
+}
+
+/// The bytes of `rel` in `name` as the root importer sees it (through the
+/// link), `None` when absent.
+pub fn installed(proj: &Path, name: &str, rel: &str) -> Option<Vec<u8>> {
+    std::fs::read(importer_dir(proj, "", name).join(rel)).ok()
+}
+
+/// Installed state of a patch target at the root importer.
+#[derive(Debug, PartialEq, Eq, Clone, Copy)]
+pub enum State {
+    Patched,
+    Pristine,
+    Tampered,
+    Other,
+    Absent,
+}
+
+pub fn state_at(dir: &Path, t: &PatchTarget) -> State {
+    match std::fs::read(dir.join(&t.file)) {
+        Err(_) => State::Absent,
+        Ok(b) if b == t.after => State::Patched,
+        Ok(b) if b == t.before => State::Pristine,
+        Ok(b) if b.starts_with(TAMPER_MARKER) => State::Tampered,
+        Ok(_) => State::Other,
+    }
+}
+
+pub fn state(proj: &Path, t: &PatchTarget) -> State {
+    state_at(&importer_dir(proj, "", &t.name), t)
+}
+
+pub fn store_entry(proj: &Path, id: &str) -> PathBuf {
+    proj.join("node_modules/.vlt").join(id)
+}
+
+/// `node_modules/.vlt/<id>/node_modules/<name>`.
+pub fn store_pkg(proj: &Path, id: &str, name: &str) -> PathBuf {
+    store_entry(proj, id).join("node_modules").join(name)
+}
+
+pub fn hidden_lock_exists(proj: &Path) -> bool {
+    proj.join(HIDDEN_LOCK).exists()
+}
+
+/// Copy what a git checkout of `proj` would hold into `dest`: every file
+/// but installed `node_modules` trees (a vendored payload's
+/// `.socket/vendor/…/<leaf>/node_modules/<name>` travels; vlt's link dir
+/// inside it does not) and links.
+pub fn fresh_checkout(proj: &Path, dest: &Path) -> PathBuf {
+    fn walk(src: &Path, dst: &Path, rel: &Path) {
+        std::fs::create_dir_all(dst).unwrap();
+        let Ok(rd) = std::fs::read_dir(src) else {
+            return;
+        };
+        for e in rd.flatten() {
+            let name = e.file_name();
+            if name.to_string_lossy().starts_with(".VLT.DELETE") {
+                continue;
+            }
+            let Ok(ty) = e.file_type() else {
+                continue;
+            };
+            let child = rel.join(&name);
+            if ty.is_symlink() {
+                continue;
+            }
+            if ty.is_dir() {
+                if name == "node_modules" && !travels(&child) {
+                    continue;
+                }
+                walk(&e.path(), &dst.join(&name), &child);
+            } else if ty.is_file() {
+                match std::fs::copy(e.path(), dst.join(&name)) {
+                    Ok(_) => {}
+                    Err(err) if err.kind() == std::io::ErrorKind::NotFound => {}
+                    Err(err) => panic!("copy {}: {err}", e.path().display()),
+                }
+            }
+        }
+    }
+    fn travels(rel: &Path) -> bool {
+        let parts: Vec<String> = rel
+            .components()
+            .map(|c| c.as_os_str().to_string_lossy().into_owned())
+            .collect();
+        parts.first().map(String::as_str) == Some(".socket")
+            && parts.iter().filter(|p| *p == "node_modules").count() == 1
+    }
+    if dest.exists() {
+        std::fs::remove_dir_all(dest).unwrap();
+    }
+    walk(proj, dest, Path::new(""));
+    dest.to_path_buf()
+}
+
+pub fn write(path: &Path, body: impl AsRef<[u8]>) {
+    if let Some(p) = path.parent() {
+        std::fs::create_dir_all(p).unwrap();
+    }
+    std::fs::write(path, body).unwrap();
+}
+
+pub fn package_json(name: &str, deps: &[(&str, &str)]) -> String {
+    package_json_fields(name, &[("dependencies", deps)])
+}
+
+pub fn package_json_fields(name: &str, fields: &[(&str, &[(&str, &str)])]) -> String {
+    let mut doc = serde_json::Map::new();
+    doc.insert("name".into(), json!(name));
+    doc.insert("version".into(), json!("1.0.0"));
+    for (field, deps) in fields {
+        let mut m = serde_json::Map::new();
+        for (k, v) in *deps {
+            m.insert((*k).to_string(), json!(v));
+        }
+        doc.insert((*field).to_string(), Value::Object(m));
+    }
+    serde_json::to_string_pretty(&Value::Object(doc)).unwrap() + "\n"
+}
+
+pub fn to_crlf(text: &[u8]) -> Vec<u8> {
+    let s = String::from_utf8(text.to_vec()).unwrap();
+    s.replace("\r\n", "\n").replace('\n', "\r\n").into_bytes()
+}
+
+// ── the link-target snapshot (r-tests T15) ────────────────────────────────
+
+/// Every `node_modules/.vlt/*` entry except `exclude`, plus (vlt ≥ 1.2.0)
+/// the whole global store: file hashes, link targets and (Unix) inodes.
+#[derive(Debug, PartialEq, Eq)]
+pub struct Snapshot(BTreeMap<String, String>);
+
+fn snap_walk(label: &str, base: &Path, dir: &Path, out: &mut BTreeMap<String, String>) {
+    let Ok(rd) = std::fs::read_dir(dir) else {
+        return;
+    };
+    let mut entries: Vec<_> = rd.map(|e| e.unwrap()).collect();
+    entries.sort_by_key(|e| e.file_name());
+    for e in entries {
+        let p = e.path();
+        let rel = format!(
+            "{label}/{}",
+            p.strip_prefix(base)
+                .unwrap()
+                .to_string_lossy()
+                .replace('\\', "/")
+        );
+        let meta = std::fs::symlink_metadata(&p).unwrap();
+        if meta.file_type().is_symlink() {
+            let target = std::fs::read_link(&p)
+                .map(|t| t.to_string_lossy().into_owned())
+                .unwrap_or_default();
+            out.insert(rel, format!("link {target}"));
+        } else if meta.is_dir() {
+            out.insert(rel.clone(), "dir".into());
+            snap_walk(label, base, &p, out);
+        } else {
+            let bytes = std::fs::read(&p).unwrap_or_default();
+            out.insert(rel, format!("file {} {}", sha256_hex(&bytes), inode(&meta)));
+        }
+    }
+}
+
+#[cfg(unix)]
+fn inode(meta: &std::fs::Metadata) -> String {
+    use std::os::unix::fs::MetadataExt as _;
+    format!("ino={}", meta.ino())
+}
+
+#[cfg(not(unix))]
+fn inode(_meta: &std::fs::Metadata) -> String {
+    String::new()
+}
+
+impl Snapshot {
+    pub fn take(proj: &Path, exclude: &[String], store: Option<&Path>) -> Snapshot {
+        let mut out = BTreeMap::new();
+        let vlt = proj.join("node_modules/.vlt");
+        if let Ok(rd) = std::fs::read_dir(&vlt) {
+            for e in rd {
+                let e = e.unwrap();
+                let name = e.file_name().to_string_lossy().into_owned();
+                if exclude.contains(&name) || name.starts_with(".VLT.DELETE") {
+                    continue;
+                }
+                let mut one = BTreeMap::new();
+                let p = e.path();
+                let meta = std::fs::symlink_metadata(&p).unwrap();
+                if meta.is_dir() && !meta.file_type().is_symlink() {
+                    snap_walk(&format!(".vlt/{name}"), &p, &p, &mut one);
+                    one.insert(format!(".vlt/{name}"), "dir".into());
+                } else {
+                    one.insert(format!(".vlt/{name}"), "entry".into());
+                }
+                out.extend(one);
+            }
+        }
+        if let Some(store) = store {
+            snap_walk("store", store, store, &mut out);
+        }
+        Snapshot(out)
+    }
+
+    pub fn assert_same(&self, other: &Snapshot, what: &str) {
+        self.compare(other, what, false);
+    }
+
+    /// [`Snapshot::assert_same`], except that vlt may add global-store
+    /// entries of its own (it writes them lazily): only existing entries
+    /// must be unchanged.
+    pub fn assert_existing_unchanged(&self, other: &Snapshot, what: &str) {
+        self.compare(other, what, true);
+    }
+
+    fn compare(&self, other: &Snapshot, what: &str, store_additions: bool) {
+        if self == other {
+            return;
+        }
+        let mut diff = Vec::new();
+        for (k, v) in &self.0 {
+            match other.0.get(k) {
+                Some(w) if w == v => {}
+                Some(w) => diff.push(format!("changed {k}: {v} -> {w}")),
+                None => diff.push(format!("removed {k}")),
+            }
+        }
+        for k in other.0.keys() {
+            if !(self.0.contains_key(k) || store_additions && k.starts_with("store/")) {
+                diff.push(format!("added {k}"));
+            }
+        }
+        if diff.is_empty() {
+            return;
+        }
+        panic!(
+            "{what} touched entries it does not own:\n{}",
+            diff.join("\n")
+        );
+    }
+}
+
+// ── the byte-stability oracle ─────────────────────────────────────────────
+
+/// `vlt ci` (or the pre-0.0.0-19 locked install) leaves `vlt-lock.json`
+/// byte-identical. `churn_shape` marks the one measured exception (rc.14
+/// rewrites an alias-named `file:` dependency's outgoing peer-edge spec on
+/// its first `ci`): there stability is asserted from the second run on.
+pub fn assert_ci_byte_stable(leg: &Leg, proj: &Path, run: &VltRun, churn_shape: bool) {
+    let before = lock_bytes(proj);
+    let args = leg.locked_install_args();
+    leg.vlt_ok_with(proj, &args, run);
+    let after = lock_bytes(proj);
+    if churn_shape && leg.version() == VltVersion::rc(14) && before != after {
+        leg.vlt_ok_with(proj, &args, run);
+        assert_eq!(
+            lock_bytes(proj),
+            after,
+            "vlt {} churned vlt-lock.json on the second {args:?} too",
+            leg.tc.raw
+        );
+        return;
+    }
+    assert_eq!(
+        String::from_utf8_lossy(&after),
+        String::from_utf8_lossy(&before),
+        "vlt {} {args:?} changed vlt-lock.json",
+        leg.tc.raw
+    );
+}
+
+// ── git ───────────────────────────────────────────────────────────────────
+
+pub fn git(cwd: &Path, args: &[&str]) -> Output {
+    Command::new("git")
+        .args([
+            "-c",
+            "user.email=e2e@example.invalid",
+            "-c",
+            "user.name=e2e",
+            "-c",
+            "commit.gpgsign=false",
+            "-c",
+            "init.defaultBranch=main",
+        ])
+        .args(args)
+        .current_dir(cwd)
+        .env("GIT_CONFIG_NOSYSTEM", "1")
+        .env(
+            "GIT_CONFIG_GLOBAL",
+            if cfg!(windows) { "NUL" } else { "/dev/null" },
+        )
+        .output()
+        .expect("spawn git")
+}
+
+pub fn git_ok(cwd: &Path, args: &[&str]) -> String {
+    let out = git(cwd, args);
+    assert_ok(&out, &format!("git {}", args.join(" ")));
+    String::from_utf8_lossy(&out.stdout).into_owned()
+}
+
+pub fn has_git() -> bool {
+    Command::new("git")
+        .arg("--version")
+        .output()
+        .is_ok_and(|o| o.status.success())
+}
+
+// ── harness self-tests ────────────────────────────────────────────────────
+
+#[test]
+fn vlt_e2e_harness_orders_versions_and_eras() {
+    let v = |s: &str| VltVersion::parse(s).unwrap();
+    assert!(v("0.0.0-1") < v("0.0.0-11"));
+    assert!(v("0.0.0-32") < v("1.0.0-rc.1"));
+    assert!(v("1.0.0-rc.34") < v("1.0.1"));
+    assert!(v("1.0.10") > v("1.0.8"));
+    assert_eq!(v("1.0.0-rc.14").to_string(), "1.0.0-rc.14");
+    assert_eq!(v("0.0.0-16").to_string(), "0.0.0-16");
+    assert_eq!(v("1.2.0").to_string(), "1.2.0");
+    for (raw, era) in [
+        ("0.0.0-1", VltEra::A0),
+        ("0.0.0-18", VltEra::A0),
+        ("0.0.0-19", VltEra::A),
+        ("1.0.0-rc.8", VltEra::A),
+        ("1.0.0-rc.9", VltEra::B),
+        ("1.0.0-rc.14", VltEra::B),
+        ("1.0.0-rc.15", VltEra::C),
+        ("1.0.0-rc.32", VltEra::C),
+        ("1.0.0-rc.33", VltEra::D),
+        ("1.0.7", VltEra::D),
+        ("1.0.8", VltEra::E),
+        ("1.1.1", VltEra::E),
+        ("1.2.0", VltEra::F),
+    ] {
+        assert_eq!(VltEra::from_version(v(raw)), era, "{raw}");
+    }
+}
+
+#[test]
+fn vlt_e2e_harness_vlt_json_follows_the_era_table() {
+    let r = "http://127.0.0.1:4873/";
+    let v = |s: &str| VltVersion::parse(s).unwrap();
+    let d = VltJson::default();
+    assert_eq!(vlt_json(v("0.0.0-11"), r, &d), json!({ "registry": r }));
+    assert_eq!(
+        vlt_json(v("0.0.0-16"), r, &d),
+        json!({ "config": { "registry": r }, "modifiers": {} })
+    );
+    assert_eq!(
+        vlt_json(v("0.0.0-25"), r, &d),
+        json!({ "config": { "registry": r } })
+    );
+    assert_eq!(
+        vlt_json(v("1.0.0-rc.14"), r, &d),
+        json!({ "config": { "registry": "https://registry.npmjs.org/" } })
+    );
+    assert_eq!(
+        vlt_json(v("1.0.0-rc.30"), r, &d),
+        json!({ "config": { "registry": r } })
+    );
+    assert_eq!(
+        vlt_json(v("1.0.4"), r, &d),
+        json!({ "config": { "registries": { "npm": r }, "registry": r } })
+    );
+    assert_eq!(
+        vlt_json(v("1.2.0"), r, &d),
+        json!({ "config": { "registries": { "npm": r } } })
+    );
+}
+
+#[test]
+fn vlt_e2e_harness_leg_lines_have_the_counted_shape() {
+    let line = leg_line("1.2.0", "hosted", "fresh_ci", "ran");
+    let parts: Vec<&str> = line.split(' ').collect();
+    assert_eq!(parts.len(), 6, "{line}");
+    assert_eq!(parts[0], "VLT-LEG");
+    assert_eq!(parts[2], os_name());
+    assert_eq!(parts[5], "ran");
+}
+
+#[test]
+fn vlt_e2e_harness_decodes_dep_ids() {
+    let d = |s: &str| decode_registry_id(s).map(|(r, n, v)| format!("{r}|{n}|{v}"));
+    assert_eq!(
+        d("~npm~left-pad@1.3.0").as_deref(),
+        Some("npm|left-pad|1.3.0")
+    );
+    assert_eq!(
+        d("~npm~@a+b@1.0.0~peer.2").as_deref(),
+        Some("npm|@a/b|1.0.0")
+    );
+    assert_eq!(d("~npm~a__b@1.0.0").as_deref(), Some("npm|a_b|1.0.0"));
+    assert_eq!(d("··ms@2.1.3").as_deref(), Some("|ms|2.1.3"));
+    assert_eq!(
+        d("·npm·@isaacs§string-locale-compare@1.1.0").as_deref(),
+        Some("npm|@isaacs/string-locale-compare|1.1.0")
+    );
+    assert_eq!(
+        d("~http_c++127.0.0.1_c4873+~x@1.0.0").as_deref(),
+        Some("http://127.0.0.1:4873/|x|1.0.0")
+    );
+    assert_eq!(
+        d("·http%3A§§127.0.0.1%3A4873§·x@1.0.0").as_deref(),
+        Some("http://127.0.0.1:4873/|x|1.0.0")
+    );
+    assert_eq!(d("file~_d"), None);
+    assert_eq!(d("··x@1%ZZ"), None);
+}
+
+#[test]
+fn vlt_e2e_harness_tarballs_are_deterministic() {
+    let mut files = BTreeMap::new();
+    files.insert("index.js".to_string(), b"x".to_vec());
+    files.insert("package.json".to_string(), b"{}".to_vec());
+    let a = build_tgz(&files);
+    assert_eq!(a, build_tgz(&files));
+    assert_eq!(tgz_files(&a), files);
+}
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
new file mode 100644
index 00000000..977db078
--- /dev/null
+++ b/docs/testing/vlt-compatibility.md
@@ -0,0 +1,145 @@
+# vlt patch compatibility
+
+`socket-patch` supports hosted, vendored and agent-mode npm patches in
+[vlt](https://www.vlt.sh) projects (`vlt-lock.json`, the `node_modules/.vlt`
+store and, from vlt 1.2.0, the global content store). This page records the
+real-vlt evidence: which releases are supported, which capstone legs run on
+which release, and the vlt behaviors the legs pin.
+
+## Real-vlt capstones
+
+Five `#[ignore]`-gated test binaries drive the REAL vlt under test
+(`SOCKET_PATCH_VLT_E2E_JS=<path to vlt.js>`, `SOCKET_PATCH_VLT_E2E_VERSION`
+for an exact `--version` match) against a local npm registry (bytes fetched
+once from npmjs, or built by the harness for the synthetic packages) and a
+mock patch service, plus one leg in each production suite:
+
+```sh
+cargo test -p socket-patch-cli --test e2e_redirect_vlt_build -- --include-ignored vlt_pinned_matrix 2>&1 \
+  | tee vlt-leg.log
+python3 scripts/check-vlt-legs.py --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json vlt-leg.log
+```
+
+Every leg is a test named `vlt_pinned_matrix_<suite>_<leg>` that prints one
+`VLT-LEG <vlt-version> <os> <suite> <leg> ran|skip:<reason>` line.
+`scripts/check-vlt-legs.py` fails a run on `0 passed`, on a missing `ran`, on
+a skip the manifest does not predict, and on an unknown leg. The manifest
+`crates/socket-patch-cli/tests/vlt-leg-manifest.json` is generated from the
+three tables below (`python3 scripts/check-vlt-legs.py --derive
+docs/testing/vlt-compatibility.md`), never written by hand;
+`scripts/tests/test_check_vlt_legs.py` re-derives it and diffs.
+
+Knobs (applied after the harness scrubs the ambient `VLT_*` environment):
+`SOCKET_PATCH_VLT_E2E_STORE_LINKER` ∈ {auto, hardlink, copy, unpack},
+`SOCKET_PATCH_VLT_E2E_CACHE_ROOT` (a cache on another filesystem),
+`SOCKET_PATCH_VLT_E2E_UPGRADE_JS` / `_UPGRADE_VERSION` (the second vlt of the
+upgrade legs) and `SOCKET_PATCH_VLT_E2E_SOCKET_BIN`. A set `_JS` makes every
+toolchain problem a failure, and so does `CI=true` with `_JS` unset.
+
+## Releases
+
+| Status | Versions |
+|---|---|
+| supported | `0.0.0-1`, `0.0.0-11`, `0.0.0-12`, `0.0.0-13`, `0.0.0-14`, `0.0.0-15`, `0.0.0-16`, `0.0.0-17`, `0.0.0-18`, `0.0.0-19`, `0.0.0-20`, `0.0.0-21`, `0.0.0-23`, `0.0.0-24`, `0.0.0-25`, `0.0.0-26`, `0.0.0-27`, `0.0.0-28`, `0.0.0-29`, `0.0.0-30`, `0.0.0-31`, `0.0.0-32` |
+| supported | `1.0.0-rc.1`, `1.0.0-rc.2`, `1.0.0-rc.3`, `1.0.0-rc.4`, `1.0.0-rc.5`, `1.0.0-rc.6`, `1.0.0-rc.7`, `1.0.0-rc.8`, `1.0.0-rc.9`, `1.0.0-rc.10`, `1.0.0-rc.11`, `1.0.0-rc.12`, `1.0.0-rc.13`, `1.0.0-rc.14`, `1.0.0-rc.15`, `1.0.0-rc.16`, `1.0.0-rc.17`, `1.0.0-rc.18` |
+| supported | `1.0.0-rc.22`, `1.0.0-rc.23`, `1.0.0-rc.24`, `1.0.0-rc.25`, `1.0.0-rc.26`, `1.0.0-rc.27`, `1.0.0-rc.28`, `1.0.0-rc.29`, `1.0.0-rc.30`, `1.0.0-rc.31`, `1.0.0-rc.32`, `1.0.0-rc.33`, `1.0.0-rc.34` |
+| supported | `1.0.1`, `1.0.2`, `1.0.3`, `1.0.4`, `1.0.5`, `1.0.6`, `1.0.7`, `1.0.8`, `1.0.9`, `1.0.10`, `1.1.0`, `1.1.1`, `1.2.0` |
+| excluded (broken install) | `0.0.0-0` |
+| excluded (Deno-compiled wrappers) | `0.0.0-2`, `0.0.0-3`, `0.0.0-4`, `0.0.0-5`, `0.0.0-6`, `0.0.0-7`, `0.0.0-8`, `0.0.0-9`, `0.0.0-10` |
+| excluded (`vlt install` exits 13 on Node 24 after "Done") | `0.0.0-22` |
+| excluded (never published) | `1.0.0-rc.19`, `1.0.0-rc.20`, `1.0.0-rc.21` |
+| excluded (unrelated 2017 publishes) | `0.0.1`, `1.0.0` |
+
+`0.0.0-0.<timestamp>` builds are excluded too. Every supported release was
+run through all five capstones on macOS during SP-9 (the CI matrix samples
+them per OS).
+
+## Leg inventory
+
+| Binary | Suite | Legs |
+|---|---|---|
+| `e2e_redirect_vlt_build` | `hosted` | `scan_fresh_ci`, `frozen_dead_registry`, `ordinary_install_stable`, `get_uuid_fresh_ci`, `tamper_cold_eintegrity`, `rollback_byte_exact`, `rerun_noop`, `warm_tree_invalidates`, `no_cleanup_stays_stale`, `heal_rule_b_hidden_lock_without_node`, `heal_rule_c_no_hidden_lock`, `heal_rule_c_no_record`, `scoped`, `peer_workspace_instances`, `install_newdep_preserves`, `update_drops`, `resave_install_rollback`, `resave_crlf_rollback`, `resave_update_rollback`, `crlf_lock`, `mirror_registries_npm`, `scalar_registry`, `named_alias_untouched`, `scoped_registry_untouched`, `jsr_untouched`, `default_registry_alias`, `registry_from_env`, `registry_from_user_config`, `content_encoding_refused`, `old_lockfile_ignored`, `warm_cache_hazard`, `idempotence`, `manifestless_vex`, `ts_written_lock`, `optional_dependency_heal`, `then_vendored_optional_takeover`, `platform_optional_skipped` |
+| `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
+| `mode_migration_vlt` | `migration` | `vendored_then_hosted`, `hosted_then_vendored`, `dry_run_parity`, `scoped_unwind_one_of_two`, `rollback_from_mixed`, `agent_apply_yields_to_vendored`, `agent_apply_after_hosted`, `hosted_scan_keeps_agent_patched_tree`, `agent_rollback_after_takeovers`, `pm_switch_npm_to_vlt`, `pm_switch_vlt_to_npm`, `flavor_changed`, `upgrade_hosted`, `upgrade_vendored` |
+| `e2e_safety_vlt` | `safety` | `linux_auto`, `explicit_hardlink`, `private_copies`, `cross_device_cache`, `agent_rollback`, `peer_fanout`, `hosted_heal`, `vendored_build`, `vendor_revert_and_repair`, `layout_note` |
+| `e2e_vlt` | `agent` | `scan_apply_rollback_list`, `get_and_remove`, `install_then_apply_patches_file`, `transitive_only_dep_apply_patches_store`, `lockfile_supplement`, `launcher`, `persistence_survives`, `persistence_reverted_by_reinstall`, `reruns_and_vex` |
+| `e2e_vlt` | `setup` | `hook_fires_per_reify`, `root_scripts_advisory`, `workspace_root_only`, `twice_no_duplicate`, `hook_failure`, `hook_abort_leaves_no_staging` |
+| `e2e_hosted_production` | `production` | `hosted_install_proof` |
+| `e2e_vendored_production` | `production` | `vendored_install_proof` |
+
+## Boundary table
+
+The DESIGN §1.1 boundaries, extended with what SP-9 measured on every
+supported release. A row with a skip reason is a manifest rule: the first
+row matching a leg, the vlt version, the OS and the knobs decides that leg's
+`skip:<reason>` (rows are ordered the way the legs test them); every other
+leg must print `ran`. Rows without a skip reason are behaviors the legs
+assert in place.
+
+Versions: `< V`, `<= V`, `> V`, `>= V`, `== V`, `A … B` (inclusive) or
+`all`. Conditions: `os` (`linux`, `macos`, `windows`), `linker` (the
+store-linker knob, `unset` when not given), `cache_root` and `upgrade`
+(`set`/`unset`), and `upgrade<V` (the upgrade vlt's version); `in` / `notin` take `+`-separated values and `,` joins conditions.
+
+| Boundary | Versions | Condition | Suite | Legs | Skip reason |
+|---|---|---|---|---|---|
+| A0 locks (no `lockfileVersion`) are refused by vendored mode | `<= 0.0.0-18` | — | vendored | `*` except `absent_version_refused` | `a0-vendored-unsupported` |
+| A0 locks are refused by vendored mode | `<= 0.0.0-18` | — | migration | `*` | `a0-vendored-unsupported` |
+| A0 locks are refused by vendored mode | `<= 0.0.0-18` | — | production | `vendored_install_proof` | `a0-vendored-unsupported` |
+| the global store and `store-linker` | `< 1.2.0` | — | safety | `*` | `no-global-store` |
+| `vlt ci`, `--frozen-lockfile`, `--expect-lockfile` exist | `< 0.0.0-19` | — | hosted | `frozen_dead_registry`, `optional_dependency_heal`, `then_vendored_optional_takeover` | `no-vlt-ci` |
+| a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | hosted | `frozen_dead_registry` | `non-hermetic-registry` |
+| registry tarball integrity is not enforced on a cold fetch | `== 0.0.0-1` | — | hosted | `tamper_cold_eintegrity` | `integrity-unenforced` |
+| bare specs honor `registries.npm` | `< 1.0.0-rc.33` | — | hosted | `mirror_registries_npm` | `registries-npm-ignored` |
+| named registry specs (`acme:x@1`), scoped registries and URL-segment DepIDs exist (flat-config releases record every registry node under the default segment) | `< 0.0.0-14` | — | hosted | `named_alias_untouched` | `no-named-registry-specs` |
+| as above | `< 0.0.0-14` | — | hosted | `scoped_registry_untouched`, `jsr_untouched` | `registry-not-in-dep-id` |
+| `jsr:` specs resolve through `jsr-registries` (0.0.0-14 … rc.6 send the `@jsr` scope to npm.jsr.io; rc.7 … rc.32 cannot run the leg hermetically, below) | `< 1.0.0-rc.7` | — | hosted | `jsr_untouched` | `jsr-registry-not-configurable` |
+| a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | hosted | `jsr_untouched` | `non-hermetic-registry` |
+| `npm:` alias specs resolve against public npm even with `registries.npm` | `1.0.0-rc.30 … 1.0.0-rc.32` | — | hosted | `jsr_untouched` | `non-hermetic-registry` |
+| `default-registry-alias` exists | `< 1.0.0-rc.33` | — | hosted | `default_registry_alias` | `no-default-registry-alias` |
+| the lock is ignored unless vlt.json declares `"modifiers": {}` | `< 0.0.0-16` | — | hosted | `old_lockfile_ignored` | `lock-not-ignored` |
+| as above | `> 0.0.0-24` | — | hosted | `old_lockfile_ignored` | `lock-not-ignored` |
+| `vlt update` exists | `< 0.0.0-20` | — | hosted | `update_drops`, `resave_update_rollback` | `no-vlt-update` |
+| the golden `basic` lock (`registries.npm`, no scalar `registry`) is what the release writes | `< 1.0.5` | — | hosted | `ts_written_lock` | `golden-grammar` |
+| a platform-skipped optional dependency makes the install fail (`Dependency node could not be found`) | `0.0.0-31 … 1.0.0-rc.1` | — | hosted | `platform_optional_skipped` | `vlt-platform-optional-bug` |
+| a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | vendored | `workspace_member_selfref`, `alias_selfref` | `non-hermetic-registry` |
+| `npm:` alias specs resolve against public npm even with `registries.npm` | `1.0.0-rc.30 … 1.0.0-rc.32` | — | vendored | `alias_selfref` | `npm-alias-non-hermetic` |
+| era A (`··` ids): `vendor_vlt_legacy_lockfile` | `> 1.0.0-rc.8` | — | vendored | `legacy_lockfile_warning` | `not-legacy-lockfile` |
+| `lockfileVersion` is written | `>= 0.0.0-19` | — | vendored | `absent_version_refused` | `lockfile-version-present` |
+| the upgrade legs need a second vlt | `all` | `upgrade=unset` | migration | `upgrade_hosted`, `upgrade_vendored` | `no-upgrade-vlt` |
+| only a v0 lock (0.0.0-19 … rc.14) meets a grammar change | `> 1.0.0-rc.14` | — | migration | `upgrade_hosted`, `upgrade_vendored` | `no-grammar-upgrade` |
+| the upgrade vlt must check `lockfileVersion` | `all` | `upgrade<1.0.0-rc.15` | migration | `upgrade_hosted`, `upgrade_vendored` | `no-grammar-upgrade` |
+| `store-linker=auto` hardlinks on Linux only | `all` | `os!=linux` | safety | `linux_auto` | `not-linux-auto` |
+| as above | `all` | `linker notin unset+auto` | safety | `linux_auto` | `not-linux-auto` |
+| as above | `all` | `cache_root=set` | safety | `linux_auto` | `not-linux-auto` |
+| the explicit hardlink leg | `all` | `linker!=hardlink` | safety | `explicit_hardlink` | `store-linker-not-hardlink` |
+| as above | `all` | `cache_root=set` | safety | `explicit_hardlink` | `store-linker-not-hardlink` |
+| the store is hardlinked | `all` | `linker=hardlink, cache_root=unset` | safety | `private_copies` | `store-linker-hardlinks` |
+| as above | `all` | `linker in unset+auto, os=linux, cache_root=unset` | safety | `private_copies` | `store-linker-hardlinks` |
+| a cache on another filesystem falls back to copies | `all` | `cache_root=set` | safety | `private_copies` | `store-linker-hardlinks` |
+| as above | `all` | `cache_root=unset` | safety | `cross_device_cache` | `no-cache-root` |
+| a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | agent | `scan_apply_rollback_list`, `launcher` | `non-hermetic-registry` |
+| `npm:` alias specs resolve against public npm even with `registries.npm` | `1.0.0-rc.30 … 1.0.0-rc.32` | — | agent | `scan_apply_rollback_list` | `non-hermetic-registry` |
+| root `pre*`/`post*` scripts run without an `install` script | `< 1.0.0-rc.13` | — | setup | `hook_fires_per_reify`, `workspace_root_only`, `hook_failure` | `root-postinstall-not-run` |
+| a failing hook's abort on Windows (rollback EBUSY fix from 1.0.5) | `all` | `os!=windows` | setup | `hook_abort_leaves_no_staging` | `windows-only` |
+| as above | `< 1.0.5` | — | setup | `hook_abort_leaves_no_staging` | `pre-ebusy-fix` |
+| `lockfileVersion` 0 with legacy (`·`/`§`) DepIDs | `0.0.0-19 … 1.0.0-rc.14` | — | — | — | — |
+| `lockfileVersion` 1, tilde DepIDs | `>= 1.0.0-rc.15` | — | — | — | — |
+| a plain `vlt install` re-extracts a stale installed copy (`no_cleanup_stays_stale` expects the patch there) | `== 0.0.0-14` | — | — | — | — |
+| an optional-only project: installs from the lock | `<= 0.0.0-23` | — | — | — | — |
+| an optional-only project: the first install writes no `vlt-lock.json` | `0.0.0-24 … 0.0.0-29` | — | — | — | — |
+| an optional-only project: lock-driven installs install nothing | `0.0.0-30 … 1.0.4` | — | — | — | — |
+| an optional-only project installs from the lock again | `>= 1.0.5` | — | — | — | — |
+| after a hosted→vendored takeover a plain `vlt install` already links the vendored dir | `<= 0.0.0-29` | — | — | — | — |
+| lockless `file:` directory dependencies fail to resolve | `0.0.0-31 … 1.0.0-rc.5` | — | — | — | — |
+| a re-save (`vlt install <new>`) drops slot [3] of default-registry nodes (the hosted URL; the patched integrity stays, so `vlt ci` fails `EINTEGRITY` until a rescan re-pins, and rollback reports drift) | `1.0.0-rc.6 … 1.0.0-rc.17` | — | — | — | — |
+| a warm cache re-fetches a changed tarball and fails its integrity (no stale-bytes hazard) | `1.0.0-rc.27 … 1.0.2` | — | — | — | — |
+| `vlt update` re-resolves an unchanged exact spec (dropping a hosted pin); earlier releases keep the locked node | `>= 1.0.8` | — | — | — | — |
+| vlt.json spells the scope map `scoped-registries` (`scope-registries` before) | `>= 1.0.0-rc.28` | — | — | — | — |
+
+## OS coverage
+
+The legs run on Linux, macOS and Windows. The Linux-default `auto` store
+linker (hardlinks, `safety/linux_auto`) cannot run on macOS or Windows; it is
+covered on Linux by the CI `e2e` row `e2e_safety_vlt` on ubuntu with vlt
+1.2.0, and SP-9 ran it in `node:24-slim` under Docker (see the SP-9 report).
diff --git a/scripts/check-vlt-legs.py b/scripts/check-vlt-legs.py
new file mode 100755
index 00000000..b28a22a4
--- /dev/null
+++ b/scripts/check-vlt-legs.py
@@ -0,0 +1,419 @@
+#!/usr/bin/env python3
+"""Check a real-vlt capstone run against the committed leg manifest.
+
+Every real-vlt leg prints one line
+``VLT-LEG <vlt-version> <os> <suite> <leg> ran|skip:<reason>`` (DESIGN §8).
+This script reads the libtest output of one or more capstone binaries and
+fails when:
+
+* a binary reports ``0 passed`` (a filter that matched nothing), or any
+  binary failed;
+* a leg the manifest expects is missing, ran where it must skip, skipped
+  where it must run, skipped for another reason, or printed twice;
+* a leg is unknown to the manifest, or the run mixed vlt versions or OSes.
+
+The expected status of each leg is computed from the manifest's rules for
+the vlt version and OS the lines name and the run's knobs
+(``SOCKET_PATCH_VLT_E2E_STORE_LINKER``, ``_CACHE_ROOT`` and
+``_UPGRADE_JS``/``_UPGRADE_VERSION``, or the matching flags).
+
+``--derive DOC`` prints the manifest generated from the leg inventory and
+boundary tables of ``docs/testing/vlt-compatibility.md``; the manifest is
+never written by hand.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import os
+import re
+import sys
+from functools import total_ordering
+from pathlib import Path
+
+LEG_RE = re.compile(
+    r"VLT-LEG (?P<version>\S+) (?P<os>\S+) (?P<suite>[a-z]+) (?P<leg>[a-z0-9_]+) "
+    r"(?P<status>ran|skip:[a-z0-9-]+)"
+)
+RUNNING_RE = re.compile(r"^\s*Running (?:tests/)?(?P<name>[A-Za-z0-9_]+)(?:\.rs)?\b")
+RESULT_RE = re.compile(r"test result: (?P<outcome>\w+)\. (?P<passed>\d+) passed; (?P<failed>\d+) failed")
+
+
+# ── versions ─────────────────────────────────────────────────────────────
+
+
+@total_ordering
+class Version:
+    def __init__(self, key: tuple):
+        self.key = key
+
+    def __eq__(self, other) -> bool:
+        return isinstance(other, Version) and self.key == other.key
+
+    def __lt__(self, other: "Version") -> bool:
+        return self.key < other.key
+
+    def __hash__(self) -> int:
+        return hash(self.key)
+
+    def __repr__(self) -> str:
+        return f"Version({self.key})"
+
+    @staticmethod
+    def parse(raw: str) -> "Version":
+        raw = raw.strip()
+        if raw.startswith("rc."):
+            raw = "1.0.0-" + raw
+        core, _, pre = raw.partition("-")
+        parts = core.split(".")
+        if len(parts) != 3 or not all(p.isdigit() for p in parts):
+            raise ValueError(f"not a vlt version: {raw!r}")
+        major, minor, patch = (int(p) for p in parts)
+        if pre:
+            num = pre[3:] if pre.startswith("rc.") else pre
+            if not num.isdigit():
+                raise ValueError(f"not a vlt version: {raw!r}")
+            return Version((major, minor, patch, 0, int(num)))
+        return Version((major, minor, patch, 1, 0))
+
+
+def version_matches(spec: dict, v: Version) -> bool:
+    op = spec["op"]
+    if op == "all":
+        return True
+    a = Version.parse(spec["a"])
+    if op == "<":
+        return v < a
+    if op == "<=":
+        return v <= a
+    if op == ">":
+        return v > a
+    if op == ">=":
+        return v >= a
+    if op == "==":
+        return v == a
+    if op == "range":
+        return a <= v <= Version.parse(spec["b"])
+    raise ValueError(f"unknown version op {op!r}")
+
+
+def parse_versions(text: str) -> dict:
+    text = text.strip().strip("`").strip()
+    if text in ("all", "every release"):
+        return {"op": "all"}
+    for sep in ("…", "..."):
+        if sep in text:
+            a, b = (t.strip().strip("`") for t in text.split(sep, 1))
+            Version.parse(a)
+            Version.parse(b)
+            return {"op": "range", "a": a, "b": b}
+    m = re.fullmatch(r"(<=|>=|==|<|>)\s*`?([^`\s]+)`?", text)
+    if not m:
+        raise ValueError(f"unparseable versions cell {text!r}")
+    Version.parse(m.group(2))
+    return {"op": m.group(1), "a": m.group(2)}
+
+
+# ── conditions ───────────────────────────────────────────────────────────
+
+COND_RE = re.compile(
+    r"(?P<key>os|linker|cache_root|upgrade)\s*(?P<op>!=|=|<|>=| in | notin )\s*(?P<val>\S+)"
+)
+
+
+def parse_conditions(text: str) -> list:
+    text = text.strip().strip("`")
+    if text in ("", "—", "-"):
+        return []
+    out = []
+    for term in text.split(","):
+        term = term.strip().strip("`")
+        m = COND_RE.fullmatch(term)
+        if not m:
+            raise ValueError(f"unparseable condition {term!r}")
+        cond = {"key": m.group("key"), "op": m.group("op").strip(), "value": m.group("val")}
+        if cond["op"] in ("in", "notin"):
+            cond["value"] = cond["value"].split("+")
+        if cond["key"] == "upgrade" and cond["op"] in ("<", ">="):
+            Version.parse(cond["value"])
+        out.append(cond)
+    return out
+
+
+class Knobs:
+    def __init__(self, os: str, linker: str, cache_root: bool, upgrade):
+        self.os = os
+        self.linker = linker
+        self.cache_root = cache_root
+        self.upgrade = upgrade
+
+    def value(self, key: str):
+        return {
+            "os": self.os,
+            "linker": self.linker,
+            "cache_root": "set" if self.cache_root else "unset",
+            "upgrade": "set" if self.upgrade else "unset",
+        }[key]
+
+
+def condition_holds(cond: dict, knobs: Knobs) -> bool:
+    key, op, value = cond["key"], cond["op"], cond["value"]
+    if key == "upgrade" and op in ("<", ">="):
+        if not knobs.upgrade:
+            return False
+        up = Version.parse(knobs.upgrade)
+        return up < Version.parse(value) if op == "<" else up >= Version.parse(value)
+    actual = knobs.value(key)
+    if op == "=":
+        return actual == value
+    if op == "!=":
+        return actual != value
+    if op == "in":
+        return actual in value
+    if op == "notin":
+        return actual not in value
+    raise ValueError(f"unknown condition op {op!r}")
+
+
+# ── the manifest ─────────────────────────────────────────────────────────
+
+
+def expected_status(manifest: dict, suite: str, leg: str, v: Version, knobs: Knobs) -> str:
+    for rule in manifest["rules"]:
+        if rule["suite"] != suite:
+            continue
+        legs = rule["legs"]
+        if legs != "*" and leg not in legs:
+            continue
+        if leg in rule.get("except", []):
+            continue
+        if not version_matches(rule["versions"], v):
+            continue
+        if all(condition_holds(c, knobs) for c in rule["conditions"]):
+            return f"skip:{rule['reason']}"
+    return "ran"
+
+
+def _cells(line: str) -> list:
+    return [c.strip() for c in line.strip().strip("|").split("|")]
+
+
+def _table(doc: str, heading: str) -> list:
+    lines = doc.splitlines()
+    try:
+        start = next(i for i, l in enumerate(lines) if l.strip() == heading)
+    except StopIteration:
+        raise ValueError(f"{heading!r} not found")
+    rows = []
+    i = start + 1
+    while i < len(lines) and not lines[i].lstrip().startswith("|"):
+        i += 1
+    header = _cells(lines[i])
+    i += 2
+    while i < len(lines) and lines[i].lstrip().startswith("|"):
+        cells = _cells(lines[i])
+        if len(cells) != len(header):
+            raise ValueError(f"row with {len(cells)} cells under {heading}: {lines[i]!r}")
+        rows.append(dict(zip(header, cells)))
+        i += 1
+    return rows
+
+
+def _names(cell: str) -> list:
+    return [n.strip().strip("`") for n in cell.split(",") if n.strip().strip("`")]
+
+
+def _version_list(cell: str) -> list:
+    out = []
+    for name in _names(cell):
+        Version.parse(name)
+        out.append(name)
+    return out
+
+
+def derive(doc: str) -> dict:
+    """The manifest the tables of ``docs/testing/vlt-compatibility.md`` define."""
+    binaries: dict = {}
+    legs: dict = {}
+    for row in _table(doc, "## Leg inventory"):
+        binary = row["Binary"].strip("`")
+        suite = row["Suite"].strip("`")
+        names = _names(row["Legs"])
+        legs.setdefault(suite, [])
+        for n in names:
+            if n in legs[suite]:
+                raise ValueError(f"leg {suite}/{n} listed twice")
+            legs[suite].append(n)
+        binaries.setdefault(binary, {})[suite] = names
+    rules = []
+    for row in _table(doc, "## Boundary table"):
+        reason = row["Skip reason"].strip("`")
+        if reason in ("—", "-", ""):
+            continue
+        suite = row["Suite"].strip("`")
+        if suite not in legs:
+            raise ValueError(f"boundary row names unknown suite {suite!r}")
+        cell = row["Legs"].replace("`", "").strip()
+        except_: list = []
+        if cell.startswith("*"):
+            leg_set: object = "*"
+            rest = cell[1:].strip()
+            if rest.startswith("except"):
+                except_ = _names(rest[len("except"):])
+        else:
+            leg_set = _names(cell)
+        for n in (leg_set if leg_set != "*" else []) + except_:
+            if n not in legs[suite]:
+                raise ValueError(f"boundary row names unknown leg {suite}/{n}")
+        rules.append(
+            {
+                "boundary": row["Boundary"],
+                "suite": suite,
+                "legs": leg_set,
+                "except": except_,
+                "versions": parse_versions(row["Versions"]),
+                "conditions": parse_conditions(row["Condition"]),
+                "reason": reason,
+            }
+        )
+    releases = _table(doc, "## Releases")
+    supported = [n for r in releases if r["Status"] == "supported" for n in _version_list(r["Versions"])]
+    excluded = [n for r in releases if r["Status"] != "supported" for n in _names(r["Versions"])]
+    return {
+        "comment": "Generated from docs/testing/vlt-compatibility.md by "
+        "`scripts/check-vlt-legs.py --derive`; never edit by hand.",
+        "binaries": binaries,
+        "legs": legs,
+        "rules": rules,
+        "supported": supported,
+        "excluded": excluded,
+    }
+
+
+# ── checking a log ───────────────────────────────────────────────────────
+
+
+def parse_log(text: str):
+    running = []
+    results = []
+    lines = []
+    for raw in text.splitlines():
+        m = RUNNING_RE.match(raw)
+        if m:
+            running.append(m.group("name"))
+        m = RESULT_RE.search(raw)
+        if m:
+            results.append(
+                (m.group("outcome"), int(m.group("passed")), int(m.group("failed")))
+            )
+        for m in LEG_RE.finditer(raw):
+            lines.append(m.groupdict())
+    return running, results, lines
+
+
+def check(manifest: dict, text: str, knobs_env: dict, binaries: list) -> list:
+    errors = []
+    running, results, lines = parse_log(text)
+    for outcome, passed, failed in results:
+        if passed == 0:
+            errors.append("a test binary reported `0 passed` (vacuous run)")
+        if failed or outcome != "ok":
+            errors.append(f"a test binary failed ({passed} passed, {failed} failed)")
+    if not results:
+        errors.append("no libtest `test result:` line in the log")
+    if not lines:
+        errors.append("no VLT-LEG line in the log")
+        return errors
+    versions = {l["version"] for l in lines}
+    oses = {l["os"] for l in lines}
+    if len(versions) != 1 or len(oses) != 1:
+        errors.append(f"one run must use one vlt and one OS; saw {sorted(versions)} on {sorted(oses)}")
+        return errors
+    raw_version = versions.pop()
+    if raw_version in manifest["excluded"]:
+        errors.append(f"vlt {raw_version} is excluded from support")
+    try:
+        v = Version.parse(raw_version)
+    except ValueError as e:
+        errors.append(str(e))
+        return errors
+    knobs = Knobs(
+        os=oses.pop(),
+        linker=knobs_env.get("linker") or "unset",
+        cache_root=bool(knobs_env.get("cache_root")),
+        upgrade=knobs_env.get("upgrade") or None,
+    )
+    ran_binaries = [b for b in running + binaries if b in manifest["binaries"]]
+    if not ran_binaries:
+        suites = {l["suite"] for l in lines}
+        ran_binaries = [
+            b for b, s in manifest["binaries"].items() if set(s) & suites and all(
+                x in suites for x in s
+            )
+        ]
+    expected = {}
+    for b in dict.fromkeys(ran_binaries):
+        for suite, legs in manifest["binaries"][b].items():
+            for leg in legs:
+                expected[(suite, leg)] = expected_status(manifest, suite, leg, v, knobs)
+    seen: dict = {}
+    for l in lines:
+        key = (l["suite"], l["leg"])
+        if key in seen:
+            errors.append(f"{key[0]}/{key[1]} printed more than one VLT-LEG line")
+        seen[key] = l["status"]
+    for key, want in sorted(expected.items()):
+        got = seen.get(key)
+        if got is None:
+            errors.append(f"{key[0]}/{key[1]}: no VLT-LEG line (expected {want})")
+        elif got != want:
+            errors.append(f"{key[0]}/{key[1]}: {got}, expected {want}")
+    for key in sorted(seen):
+        if key not in expected:
+            errors.append(f"{key[0]}/{key[1]}: not a leg the manifest expects from this run")
+    return errors
+
+
+def main(argv=None) -> int:
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--manifest", help="crates/socket-patch-cli/tests/vlt-leg-manifest.json")
+    ap.add_argument("--derive", metavar="DOC", help="print the manifest DOC defines")
+    ap.add_argument("--binary", action="append", default=[], help="a capstone the log ran")
+    ap.add_argument("--store-linker", default=os.environ.get("SOCKET_PATCH_VLT_E2E_STORE_LINKER", ""))
+    ap.add_argument("--cache-root", default=os.environ.get("SOCKET_PATCH_VLT_E2E_CACHE_ROOT", ""))
+    ap.add_argument(
+        "--upgrade-version",
+        default=os.environ.get("SOCKET_PATCH_VLT_E2E_UPGRADE_VERSION", "")
+        if os.environ.get("SOCKET_PATCH_VLT_E2E_UPGRADE_JS")
+        else "",
+    )
+    ap.add_argument("logs", nargs="*")
+    args = ap.parse_args(argv)
+    if args.derive:
+        print(json.dumps(derive(Path(args.derive).read_text(encoding="utf-8")), indent=2))
+        return 0
+    if not args.manifest or not args.logs:
+        ap.error("--manifest and at least one log are required")
+    manifest = json.loads(Path(args.manifest).read_text(encoding="utf-8"))
+    text = "\n".join(Path(p).read_text(encoding="utf-8", errors="replace") for p in args.logs)
+    knobs = {
+        "linker": args.store_linker,
+        "cache_root": args.cache_root,
+        "upgrade": args.upgrade_version,
+    }
+    errors = check(manifest, text, knobs, args.binary)
+    _, _, lines = parse_log(text)
+    ran = sum(1 for l in lines if l["status"] == "ran")
+    skipped = len(lines) - ran
+    if errors:
+        for e in errors:
+            print(f"check-vlt-legs: {e}", file=sys.stderr)
+        print(f"check-vlt-legs: FAILED ({ran} ran, {skipped} skipped)", file=sys.stderr)
+        return 1
+    print(f"check-vlt-legs: ok ({ran} ran, {skipped} skipped, manifest diff clean)")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/scripts/tests/test_check_vlt_legs.py b/scripts/tests/test_check_vlt_legs.py
new file mode 100644
index 00000000..33a273f6
--- /dev/null
+++ b/scripts/tests/test_check_vlt_legs.py
@@ -0,0 +1,240 @@
+"""Tests for scripts/check-vlt-legs.py and the vlt leg manifest it checks."""
+
+import importlib.util
+import json
+import re
+import unittest
+from pathlib import Path
+
+ROOT = Path(__file__).parents[2]
+DOC = ROOT / "docs" / "testing" / "vlt-compatibility.md"
+MANIFEST = ROOT / "crates" / "socket-patch-cli" / "tests" / "vlt-leg-manifest.json"
+TESTS = ROOT / "crates" / "socket-patch-cli" / "tests"
+
+
+def load_script(name):
+    spec = importlib.util.spec_from_file_location(name, Path(__file__).parents[1] / f"{name}.py")
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+legs = load_script("check-vlt-legs")
+
+
+def log(version, os_name, lines, binaries=("e2e_redirect_vlt_build",), passed=None):
+    out = []
+    for b in binaries:
+        out.append(f"     Running tests/{b}.rs (target/debug/deps/{b}-0123)")
+    for suite, leg, status in lines:
+        out.append(f"VLT-LEG {version} {os_name} {suite} {leg} {status}")
+    n = len(lines) if passed is None else passed
+    out.append(f"test result: ok. {n} passed; 0 failed; 0 ignored; 0 measured; 3 filtered out")
+    return "\n".join(out)
+
+
+def full_run(manifest, binary, version, os_name, knobs, mutate=None):
+    v = legs.Version.parse(version)
+    k = legs.Knobs(
+        os=os_name,
+        linker=knobs.get("linker") or "unset",
+        cache_root=bool(knobs.get("cache_root")),
+        upgrade=knobs.get("upgrade") or None,
+    )
+    lines = []
+    for suite, names in manifest["binaries"][binary].items():
+        for leg in names:
+            lines.append((suite, leg, legs.expected_status(manifest, suite, leg, v, k)))
+    if mutate:
+        lines = mutate(lines)
+    return log(version, os_name, lines, binaries=(binary,))
+
+
+class ManifestIsDerivedFromTheDoc(unittest.TestCase):
+    def test_the_committed_manifest_is_the_doc_derivation(self):
+        derived = legs.derive(DOC.read_text(encoding="utf-8"))
+        committed = json.loads(MANIFEST.read_text(encoding="utf-8"))
+        self.assertEqual(
+            committed,
+            derived,
+            "vlt-leg-manifest.json is stale: regenerate it with "
+            "`python3 scripts/check-vlt-legs.py --derive docs/testing/vlt-compatibility.md`",
+        )
+
+    def test_every_manifest_leg_is_a_test_and_every_test_is_listed(self):
+        manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+        declared = set()
+        for binary, suites in manifest["binaries"].items():
+            source = (TESTS / f"{binary}.rs").read_text(encoding="utf-8")
+            found = set(re.findall(r"fn vlt_pinned_matrix_([a-z]+)_([a-z0-9_]+)\(", source))
+            wanted = set()
+            for suite, names in suites.items():
+                for name in names:
+                    wanted.add((suite, name))
+            if binary.endswith("_production"):
+                found = {(s, n) for s, n in found if s == "production"}
+            self.assertEqual(found, wanted, f"{binary}: test fns vs manifest")
+            declared |= wanted
+        for suite, names in manifest["legs"].items():
+            for name in names:
+                self.assertIn((suite, name), declared)
+
+    def test_every_leg_is_ignored_and_prints_through_the_leg_guard(self):
+        for binary in ["e2e_redirect_vlt_build", "e2e_vendor_vlt_build", "mode_migration_vlt",
+                       "e2e_safety_vlt", "e2e_vlt", "e2e_hosted_production",
+                       "e2e_vendored_production"]:
+            source = (TESTS / f"{binary}.rs").read_text(encoding="utf-8")
+            fns = re.findall(r"((?:#\[[^\n]*\]\n)*)async fn (vlt_pinned_matrix_\w+)\(", source)
+            self.assertTrue(fns, binary)
+            for attrs, name in fns:
+                self.assertIn("#[ignore", attrs, f"{binary}::{name} must be #[ignore]-gated")
+            if not binary.endswith("_production"):
+                self.assertNotIn('println!("SKIP', source, f"{binary}: skips must be VLT-LEG lines")
+
+    def test_the_supported_releases_are_ordered_and_distinct(self):
+        manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+        versions = [legs.Version.parse(v) for v in manifest["supported"]]
+        self.assertEqual(versions, sorted(versions))
+        self.assertEqual(len(versions), len(set(versions)))
+        for gate in ["0.0.0-16", "0.0.0-32", "1.0.0-rc.12", "1.0.0-rc.14", "1.0.0-rc.32",
+                     "1.0.4", "1.0.7", "1.1.1", "1.2.0"]:
+            self.assertIn(gate, manifest["supported"])
+        for gone in ["0.0.0-0", "0.0.0-5", "1.0.0-rc.20", "0.0.1", "0.0.0-22"]:
+            self.assertIn(gone, manifest["excluded"])
+
+    def test_every_rule_can_fire_on_some_supported_release(self):
+        manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+        versions = [legs.Version.parse(v) for v in manifest["supported"]]
+        for rule in manifest["rules"]:
+            self.assertTrue(
+                any(legs.version_matches(rule["versions"], v) for v in versions),
+                f"rule never fires: {rule['boundary']}",
+            )
+
+
+class Versions(unittest.TestCase):
+    def test_order(self):
+        v = legs.Version.parse
+        self.assertLess(v("0.0.0-1"), v("0.0.0-11"))
+        self.assertLess(v("0.0.0-32"), v("1.0.0-rc.1"))
+        self.assertLess(v("1.0.0-rc.34"), v("1.0.1"))
+        self.assertLess(v("1.0.8"), v("1.0.10"))
+        self.assertEqual(v("rc.14"), v("1.0.0-rc.14"))
+
+    def test_version_cells(self):
+        self.assertEqual(legs.parse_versions("`< 0.0.0-19`"), {"op": "<", "a": "0.0.0-19"})
+        self.assertEqual(
+            legs.parse_versions("`1.0.0-rc.7 … 1.0.0-rc.29`"),
+            {"op": "range", "a": "1.0.0-rc.7", "b": "1.0.0-rc.29"},
+        )
+        self.assertEqual(legs.parse_versions("`all`"), {"op": "all"})
+        with self.assertRaises(ValueError):
+            legs.parse_versions("`sometimes`")
+
+    def test_conditions(self):
+        c = legs.parse_conditions("`linker in unset+auto, os=linux`")
+        self.assertEqual(c[0], {"key": "linker", "op": "in", "value": ["unset", "auto"]})
+        self.assertEqual(c[1], {"key": "os", "op": "=", "value": "linux"})
+        with self.assertRaises(ValueError):
+            legs.parse_conditions("`phase=moon`")
+
+
+class Checking(unittest.TestCase):
+    manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+
+    def run_check(self, text, knobs=None, binaries=()):
+        return legs.check(self.manifest, text, knobs or {}, list(binaries))
+
+    def test_a_complete_run_passes_on_every_supported_release(self):
+        for binary in self.manifest["binaries"]:
+            for version in self.manifest["supported"]:
+                for os_name in ["linux", "macos", "windows"]:
+                    text = full_run(self.manifest, binary, version, os_name, {})
+                    self.assertEqual(self.run_check(text), [], f"{binary} {version} {os_name}")
+
+    def test_era_skips_follow_the_boundaries(self):
+        m = self.manifest
+        k = legs.Knobs(os="macos", linker="unset", cache_root=False, upgrade=None)
+        es = lambda s, l, v: legs.expected_status(m, s, l, legs.Version.parse(v), k)
+        self.assertEqual(es("hosted", "frozen_dead_registry", "0.0.0-16"), "skip:no-vlt-ci")
+        self.assertEqual(es("hosted", "frozen_dead_registry", "1.0.0-rc.14"), "skip:non-hermetic-registry")
+        self.assertEqual(es("hosted", "frozen_dead_registry", "1.2.0"), "ran")
+        self.assertEqual(es("hosted", "tamper_cold_eintegrity", "0.0.0-1"), "skip:integrity-unenforced")
+        self.assertEqual(es("hosted", "tamper_cold_eintegrity", "0.0.0-11"), "ran")
+        self.assertEqual(es("vendored", "scan_fresh_ci", "0.0.0-18"), "skip:a0-vendored-unsupported")
+        self.assertEqual(es("vendored", "absent_version_refused", "0.0.0-16"), "ran")
+        self.assertEqual(es("vendored", "absent_version_refused", "1.2.0"), "skip:lockfile-version-present")
+        self.assertEqual(es("safety", "agent_rollback", "1.1.1"), "skip:no-global-store")
+        self.assertEqual(es("setup", "hook_fires_per_reify", "1.0.0-rc.12"), "skip:root-postinstall-not-run")
+        self.assertEqual(es("setup", "hook_fires_per_reify", "1.0.0-rc.13"), "ran")
+
+    def test_knobs_select_the_safety_legs(self):
+        m = self.manifest
+        v = legs.Version.parse("1.2.0")
+        es = lambda leg, **kw: legs.expected_status(
+            m, "safety", leg, v,
+            legs.Knobs(os=kw.get("os", "linux"), linker=kw.get("linker", "unset"),
+                       cache_root=kw.get("cache_root", False), upgrade=None),
+        )
+        self.assertEqual(es("linux_auto"), "ran")
+        self.assertEqual(es("linux_auto", os="macos"), "skip:not-linux-auto")
+        self.assertEqual(es("linux_auto", linker="hardlink"), "skip:not-linux-auto")
+        self.assertEqual(es("explicit_hardlink", os="macos", linker="hardlink"), "ran")
+        self.assertEqual(es("private_copies", os="macos"), "ran")
+        self.assertEqual(es("private_copies"), "skip:store-linker-hardlinks")
+        self.assertEqual(es("private_copies", linker="copy"), "ran")
+        self.assertEqual(es("cross_device_cache"), "skip:no-cache-root")
+        self.assertEqual(es("cross_device_cache", linker="hardlink", cache_root=True), "ran")
+
+    def test_the_upgrade_knob_selects_the_upgrade_legs(self):
+        m = self.manifest
+        es = lambda v, up: legs.expected_status(
+            m, "migration", "upgrade_hosted", legs.Version.parse(v),
+            legs.Knobs(os="linux", linker="unset", cache_root=False, upgrade=up),
+        )
+        self.assertEqual(es("1.0.0-rc.14", None), "skip:no-upgrade-vlt")
+        self.assertEqual(es("1.0.0-rc.14", "1.2.0"), "ran")
+        self.assertEqual(es("1.2.0", "1.2.0"), "skip:no-grammar-upgrade")
+        self.assertEqual(es("1.0.0-rc.14", "1.0.0-rc.14"), "skip:no-grammar-upgrade")
+
+    def test_failures_are_reported(self):
+        good = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {})
+        self.assertEqual(self.run_check(good), [])
+        missing = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {},
+                           mutate=lambda ls: ls[1:])
+        self.assertTrue(any("no VLT-LEG line" in e for e in self.run_check(missing)))
+        wrong = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {},
+                         mutate=lambda ls: [(s, l, "skip:whatever") if i == 0 else (s, l, st)
+                                            for i, (s, l, st) in enumerate(ls)])
+        self.assertTrue(any("expected ran" in e for e in self.run_check(wrong)))
+        twice = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {},
+                         mutate=lambda ls: ls + ls[:1])
+        self.assertTrue(any("more than one" in e for e in self.run_check(twice)))
+        unknown = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {},
+                           mutate=lambda ls: ls + [("hosted", "not_a_leg", "ran")])
+        self.assertTrue(any("not a leg" in e for e in self.run_check(unknown)))
+
+    def test_vacuous_and_failed_runs_fail(self):
+        zero = log("1.2.0", "macos", [("hosted", "scan_fresh_ci", "ran")], passed=0)
+        self.assertTrue(any("0 passed" in e for e in self.run_check(zero)))
+        failed = log("1.2.0", "macos", []).replace("0 failed", "2 failed").replace("ok.", "FAILED.")
+        self.assertTrue(any("failed" in e for e in self.run_check(failed)))
+        self.assertTrue(any("no VLT-LEG" in e for e in self.run_check(log("1.2.0", "macos", []))))
+
+    def test_mixed_versions_fail(self):
+        text = log("1.2.0", "macos", [("hosted", "scan_fresh_ci", "ran")]) + "\n" + log(
+            "1.1.1", "macos", [("hosted", "scoped", "ran")])
+        self.assertTrue(any("one vlt" in e for e in self.run_check(text)))
+
+    def test_leg_lines_are_found_behind_libtest_progress_dots(self):
+        text = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {})
+        dotted = "\n".join("." + l if l.startswith("VLT-LEG") else l for l in text.splitlines())
+        self.assertEqual(self.run_check(dotted), [])
+
+    def test_excluded_releases_are_rejected(self):
+        text = log("0.0.0-22", "macos", [("hosted", "scan_fresh_ci", "ran")])
+        self.assertTrue(any("excluded" in e for e in self.run_check(text)))
+
+
+if __name__ == "__main__":
+    unittest.main()

From ea2c0632159c89380453477dbbf3832d401917f3 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 07:57:56 -0400
Subject: [PATCH 26/46] Fix vlt capstone review findings

The Windows npx shim passed the package name through to socket-patch,
so every setup-hook leg on Windows would have aborted vlt's install.
It now forwards only the arguments after the package, and a harness
self-test runs the shim.

The capstones now also prove what they claimed but skipped: the
optional-only hosted to vendored takeover runs on every vlt release
that writes a lock, the vendored VEX of a package.json patch without
the vendor ledger fails closed without the patched blob and attests
with it, vendored to hosted takes over through both scan and get, the
heal and rollback legs check that no other store entry changed, and
the hook-failure leg pins exit 1. Two new vendored legs use the real
peer-bearing use-sync-external-store and record where vendored mode
still refuses it, so fixing that refusal flips a visible expectation.

check-vlt-legs.py reads Windows cargo output and fails a run whose
test binary crashed before printing its result line.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../tests/e2e_redirect_vlt_build.rs           | 141 +++++++++-----
 .../tests/e2e_vendor_vlt_build.rs             | 176 ++++++++++++++++--
 crates/socket-patch-cli/tests/e2e_vlt.rs      |  21 ++-
 .../tests/mode_migration_vlt.rs               |  43 +++--
 .../tests/vlt-leg-manifest.json               |   4 +
 .../tests/vlt_e2e_common/mod.rs               |  73 +++++++-
 docs/testing/vlt-compatibility.md             |  10 +-
 scripts/check-vlt-legs.py                     |  30 ++-
 scripts/tests/test_check_vlt_legs.py          |  30 +++
 9 files changed, 442 insertions(+), 86 deletions(-)

diff --git a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
index 5e1f44d4..6fce372e 100644
--- a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
@@ -303,13 +303,16 @@ async fn vlt_pinned_matrix_hosted_heal_rule_b_hidden_lock_without_node() {
         doc["nodes"].as_object_mut().unwrap().remove(id);
     }
     std::fs::write(&hidden, serde_json::to_vec_pretty(&doc).unwrap()).unwrap();
+    let snap = fx.snapshot(&fx.proj, &ids);
     let out = fx.scan(&["--no-vlt-install-cleanup"]);
     fx.assert_advisory(&out, &advisory_cleanup_skipped(ids.len()));
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the skipped cleanup");
     let out = fx.scan(&[]);
     fx.assert_advisory(&out, &advisory_invalidated(ids.len()));
     for id in &ids {
         assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
     }
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the rule (b) heal");
     fx.vlt_ok(&fx.proj, &["install"]);
     assert_eq!(state(&fx.proj, fx.t()), State::Patched);
     fx.leg.ran();
@@ -325,11 +328,13 @@ async fn vlt_pinned_matrix_hosted_heal_rule_c_no_hidden_lock() {
     let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
     let _ = std::fs::remove_file(fx.proj.join(HIDDEN_LOCK));
     let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
     let doc = fx.scan(&[]);
     fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
     for id in &ids {
         assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
     }
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the rule (c) heal");
     assert!(
         store_entry(&fx.proj, &node_id(&read_lock(&fx.proj), MS.0, MS.1)).exists(),
         "the bystander is healthy"
@@ -358,11 +363,13 @@ async fn vlt_pinned_matrix_hosted_heal_rule_c_no_record() {
         .mount(&fx.svc.server)
         .await;
     let ids = fx.store_ids(fx.t());
+    let snap = fx.snapshot(&fx.proj, &ids);
     let doc = fx.scan(&[]);
     fx.assert_advisory(&doc, &advisory_invalidated(ids.len()));
     for id in &ids {
         assert!(!store_entry(&fx.proj, id).exists(), "{id} invalidated");
     }
+    snap.assert_same(&fx.snapshot(&fx.proj, &ids), "the artifact-bytes heal");
     fx.vlt_ok(&fx.proj, &["install"]);
     assert_eq!(state(&fx.proj, fx.t()), State::Patched);
     fx.leg.ran();
@@ -392,9 +399,10 @@ async fn vlt_pinned_matrix_hosted_scoped() {
 }
 
 /// Two workspaces depend on `use-sync-external-store` beside react 17 and
-/// react 18: every default-registry instance (vlt dedupes them into one
-/// shared peer instance) is pinned, and both
-/// workspaces install the patched bytes.
+/// react 18: vlt dedupes them into exactly one shared peer instance on
+/// every measured release (no real-vlt shape yields several instances of
+/// one name@version), it is pinned, and both workspaces install the
+/// patched bytes.
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_hosted_peer_workspace_instances() {
@@ -432,9 +440,10 @@ async fn vlt_pinned_matrix_hosted_peer_workspace_instances() {
     let fx = Fixture::build(leg, shape).await;
     let t = fx.t().clone();
     let ids = fx.store_ids(&t);
-    assert!(
-        !ids.is_empty(),
-        "{}",
+    assert_eq!(
+        ids.len(),
+        1,
+        "one shared instance: {}",
         String::from_utf8_lossy(&fx.lock_before)
     );
     let doc = fx.scan(&[]);
@@ -1262,8 +1271,13 @@ async fn vlt_pinned_matrix_hosted_optional_dependency_heal() {
     let lp = fx.svc.target(LP.0).clone();
     let ms = fx.svc.target(MS.0).clone();
     let lp_ids = fx.store_ids(&lp);
+    let snap = fx.snapshot(&fx.proj, &lp_ids);
     let out = fx.scan_vex(&[]);
     let doc = out.json();
+    snap.assert_same(
+        &fx.snapshot(&fx.proj, &lp_ids),
+        "the heal keeps the optional copies",
+    );
     let held = format!(
         "node_modules also still holds {n_opt} unpatched copies of optional dependencies; \
          {OPTIONAL_KEPT}"
@@ -1296,8 +1310,13 @@ async fn vlt_pinned_matrix_hosted_optional_dependency_heal() {
         assert_eq!(state(&fx.proj, t), State::Patched, "{} after ci", t.name);
     }
     assert_eq!(lock_bytes(&fx.proj), before_ci, "ci keeps the lock");
+    let snap = fx.snapshot(&fx.proj, &lp_ids);
     let out = rollback(&fx.proj, &[]);
     assert_eq!(out.code, 0, "{out}");
+    snap.assert_same(
+        &fx.snapshot(&fx.proj, &lp_ids),
+        "the rollback heal keeps the patched optional copies",
+    );
     let want = format!(
         "restored registry pins for {} packages; removed {} patched installed copies, so \
          node_modules is incomplete until you run `vlt install` (or `vlt ci`). node_modules \
@@ -1344,13 +1363,30 @@ async fn optional_only_leg(leg: &Leg) {
     remove_tree(&proj);
     scan_hosted(&proj, &svc, &[]);
     assert_pinned(&proj, &svc, &ms);
-    let run = VltRun::profile("optional-only");
-    leg.vlt_ok_with(&proj, &["ci"], &run);
     let want = match behavior {
         OptionalOnly::Installs => State::Patched,
         _ => State::Absent,
     };
+    let lock = lock_bytes(&proj);
+    leg.vlt_ok_with(&proj, &["ci"], &VltRun::profile("optional-only"));
     assert_eq!(state(&proj, &ms), want, "optional-only vlt ci");
+    assert_eq!(
+        lock_bytes(&proj),
+        lock,
+        "optional-only vlt ci keeps the lock"
+    );
+    remove_tree(&proj);
+    leg.vlt_ok_with(
+        &proj,
+        &["install"],
+        &VltRun::profile("optional-only-install"),
+    );
+    assert_eq!(state(&proj, &ms), want, "optional-only locked vlt install");
+    assert_eq!(
+        lock_bytes(&proj),
+        lock,
+        "optional-only locked vlt install keeps the lock"
+    );
 }
 
 /// Hosted pin of an optional dependency, warm install, then `scan --mode
@@ -1358,8 +1394,11 @@ async fn optional_only_leg(leg: &Leg) {
 /// the takeover advisory names the kept optional copy, a plain `vlt
 /// install` keeps the importer linked to the hosted copy, and `vlt ci`
 /// links the vendored dir (mixed projects on every era; optional-only from
-/// 1.0.5, before which `vlt ci` leaves it absent). 0.0.0-19 … 0.0.0-29
-/// already relink the vendored dir on the plain install.
+/// 1.0.5, before which `vlt ci` leaves it absent). The mixed project's
+/// warm tree is the hosted `vlt ci`; the optional-only one's is the
+/// registry install whose optional copy the hosted heal kept (`vlt ci`
+/// would install nothing there before 1.0.5). 0.0.0-19 … 0.0.0-29 already
+/// relink the vendored dir on the plain install.
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_hosted_then_vendored_optional_takeover() {
@@ -1370,8 +1409,9 @@ async fn vlt_pinned_matrix_hosted_then_vendored_optional_takeover() {
         return leg.skip("no-vlt-ci");
     }
     for optional_only in [false, true] {
+        let kind = if optional_only { "optonly" } else { "mixed" };
         let reg = Registry::start(&[LP, MS]).await;
-        let proj = leg.dir(if optional_only { "optonly" } else { "mixed" });
+        let proj = leg.dir(kind);
         let mut fields: Vec<(&str, &[(&str, &str)])> = vec![("optionalDependencies", &[MS])];
         if !optional_only {
             fields.push(("dependencies", &[LP]));
@@ -1389,57 +1429,71 @@ async fn vlt_pinned_matrix_hosted_then_vendored_optional_takeover() {
         let ms = PatchTarget::from_pkg(reg.pkg(MS.0, MS.1), UUID_MS, "index.js");
         let svc = PatchService::start(vec![ms.clone()]).await;
         scan_hosted(&proj, &svc, &[]);
-        leg.vlt_ok(&proj, &["ci"]);
+        assert_pinned(&proj, &svc, &ms);
         let hosted_id = node_id(&read_lock(&proj), MS.0, MS.1);
-        let hosted_ok = if optional_only && optional_only_kind(&leg) != OptionalOnly::Installs {
-            State::Absent
+        if optional_only {
+            assert_eq!(
+                state(&proj, &ms),
+                State::Pristine,
+                "{kind}: the heal keeps the optional copy"
+            );
         } else {
-            State::Patched
-        };
-        assert_eq!(state(&proj, &ms), hosted_ok, "hosted ci");
-        if hosted_ok == State::Absent {
-            continue;
+            leg.vlt_ok(&proj, &["ci"]);
+            assert_eq!(state(&proj, &ms), State::Patched, "{kind}: hosted ci");
         }
+        assert!(
+            hidden_lock_exists(&proj),
+            "{kind}: the warm tree has a hidden lock"
+        );
         let out = socket_api(&proj, &svc, &["scan", "--mode", "vendored"], &[]);
-        assert_eq!(out.code, 0, "{out}");
+        assert_eq!(out.code, 0, "{kind}: {out}");
         let doc = out.json();
         let detail = event_reason(&doc, ADVISORY);
+        assert_eq!(
+            detail,
+            format!(
+                "vendored 1 hosted-pinned packages, but node_modules still holds 1 copies of \
+                 the hosted artifacts of optional dependencies; {OPTIONAL_KEPT}"
+            ),
+            "{kind}"
+        );
         assert!(
-            detail.contains("copies of the hosted artifacts of optional dependencies")
-                && detail.ends_with(OPTIONAL_KEPT),
-            "{detail}"
+            store_entry(&proj, &hosted_id).exists(),
+            "{kind}: hosted copy kept"
         );
-        assert!(store_entry(&proj, &hosted_id).exists(), "hosted copy kept");
+        assert!(hidden_lock_exists(&proj), "{kind}: hidden lock kept");
+        let link = |proj: &Path| {
+            std::fs::read_link(proj.join("node_modules/ms"))
+                .map(|p| p.to_string_lossy().replace('\\', "/"))
+                .unwrap_or_default()
+        };
         leg.vlt_ok(&proj, &["install"]);
-        let link = std::fs::read_link(proj.join("node_modules/ms"))
-            .map(|p| p.to_string_lossy().replace('\\', "/"))
-            .unwrap_or_default();
+        let installed_link = link(&proj);
         if takeover_install_relinks(leg.version()) {
             assert!(
-                link.contains(".socket/vendor/npm/"),
-                "0.0.0-19 … 0.0.0-29 relink on a plain install: {link}"
+                installed_link.contains(".socket/vendor/npm/"),
+                "{kind}: 0.0.0-19 … 0.0.0-29 relink on a plain install: {installed_link}"
             );
         } else {
             assert!(
-                link.contains(".vlt/"),
-                "install keeps the hosted link: {link}"
+                installed_link.contains(&format!(".vlt/{hosted_id}/")),
+                "{kind}: install keeps the hosted link: {installed_link}"
             );
         }
         leg.vlt_ok(&proj, &["ci"]);
-        let link = std::fs::read_link(proj.join("node_modules/ms"))
-            .map(|p| p.to_string_lossy().replace('\\', "/"))
-            .unwrap_or_default();
-        let want_vendor = !optional_only || optional_only_kind(&leg) == OptionalOnly::Installs;
-        if want_vendor {
+        if !optional_only || optional_only_kind(&leg) == OptionalOnly::Installs {
+            let ci_link = link(&proj);
             assert!(
-                link.contains(".socket/vendor/npm/"),
-                "ci links the vendored dir: {link}"
+                ci_link.contains(".socket/vendor/npm/"),
+                "{kind}: ci links the vendored dir: {ci_link}"
             );
-            assert_eq!(state(&proj, &ms), State::Patched);
+            assert_eq!(state(&proj, &ms), State::Patched, "{kind}");
         } else {
-            assert!(
-                !proj.join("node_modules/ms").exists(),
-                "absent before 1.0.5"
+            assert_eq!(
+                state(&proj, &ms),
+                State::Absent,
+                "{kind}: vlt ci installs no optional dependency of an optional-only project \
+                 before 1.0.5"
             );
         }
     }
@@ -1490,9 +1544,12 @@ async fn vlt_pinned_matrix_hosted_platform_optional_skipped() {
         &staging.join("node_modules/left-pad/package.json"),
         r#"{"name":"left-pad","version":"1.3.0"}"#,
     );
+    let healed = vec![lp_id.clone()];
+    let snap = fx.snapshot(&fx.proj, &healed);
     let doc = fx.scan(&[]);
     fx.assert_advisory(&doc, &advisory_invalidated(1));
     assert!(staging.exists(), "the heal never touches staging dirs");
+    snap.assert_same(&fx.snapshot(&fx.proj, &healed), "the heal");
     fx.vlt_ok(&fx.proj, &["install"]);
     assert_eq!(state(&fx.proj, fx.t()), State::Patched);
     let out = socket_api(&fx.proj, &fx.svc, &["scan"], &[]);
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index 63234abc..e890b265 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -401,6 +401,122 @@ async fn vlt_pinned_matrix_vendored_alias_selfref() {
     fx.leg.ran();
 }
 
+// ── peer-bearing self-references (DESIGN §8.3) ───────────────────────────
+
+const USX: (&str, &str) = ("use-sync-external-store", "1.2.0");
+const REACT: (&str, &str) = ("react", "18.2.0");
+
+/// `use-sync-external-store` beside react 18, a direct dependency of the
+/// root or of workspace member `packages/a`. Where vlt gives the node a
+/// peer extra (members from rc.15, the root from 1.0.8) vendored mode
+/// refuses it today (`vendor_lock_entry_unsupported`, nothing written);
+/// elsewhere it is vendored and `with-selector`'s self-reference
+/// (`require('use-sync-external-store/shim')`) loads the patched copy after
+/// a fresh `vlt ci`.
+async fn peer_selfref(name: &'static str, member: bool) {
+    let Some(leg) = vendored_leg(name) else {
+        return;
+    };
+    let importer = if member { "packages/a" } else { "" };
+    let mut shape = Shape {
+        deps: vec![USX, REACT],
+        pins: vec![
+            USX,
+            REACT,
+            ("loose-envify", "1.4.0"),
+            ("js-tokens", "4.0.0"),
+        ],
+        targets: vec![(USX.0, USX.1, UUID_USX, "shim/index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    if member {
+        shape.deps = vec![];
+        shape.vlt_json.workspaces = Some(json!("packages/*"));
+        shape.files = vec![(
+            "packages/a/package.json".into(),
+            package_json("a", &[USX, REACT]),
+        )];
+    }
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    let ids = fx.store_ids(&t);
+    assert_eq!(ids.len(), 1, "{ids:?}");
+    let id = &ids[0];
+    let sep = if fx.leg.era().tilde() { '~' } else { '·' };
+    let extra = id.split(sep).count() > 3;
+    assert_eq!(
+        extra,
+        direct_peer_extra(fx.leg.version(), member),
+        "the measured peer-extra boundary: {id}"
+    );
+    if extra {
+        let manifest = fx.proj.join(importer).join("package.json");
+        let pkg = std::fs::read(&manifest).unwrap();
+        let lock = lock_bytes(&fx.proj);
+        let out = socket_api(
+            &fx.proj,
+            &fx.svc,
+            &["scan", "--mode", "vendored"],
+            &["--vendor-source", "build"],
+        );
+        assert_eq!(out.code, 1, "{out}");
+        let refusal = coded(&out.json())
+            .into_iter()
+            .find(|e| e["errorCode"] == "vendor_lock_entry_unsupported")
+            .map(Value::to_string)
+            .unwrap_or_else(|| panic!("a vendor_lock_entry_unsupported refusal: {out}"));
+        assert!(
+            refusal.contains(&format!("a variant instance ({id})")),
+            "{refusal}"
+        );
+        assert_eq!(lock_bytes(&fx.proj), lock, "the lock is untouched");
+        assert_eq!(
+            std::fs::read(&manifest).unwrap(),
+            pkg,
+            "{importer}/package.json"
+        );
+        assert!(!fx.proj.join(".socket/vendor/npm").exists(), "no artifact");
+        return fx.leg.ran();
+    }
+    vendor_scan(&fx);
+    assert_vendored(&fx, &t, importer);
+    let co = fx.checkout(&format!("fresh-{name}"));
+    assert_ci_byte_stable(&fx.leg, &co, &VltRun::profile(name), false);
+    let script = "const path=require('path'),fs=require('fs');\
+         const ws=require.resolve('use-sync-external-store/shim/with-selector');\
+         require(ws);\
+         const inner=require.resolve('use-sync-external-store/shim',{paths:[path.dirname(ws)]});\
+         const patched=fs.readFileSync(inner,'utf8').startsWith('/* SOCKET-PATCHED */');\
+         console.log((patched?'PATCHED ':'PRISTINE ')+fs.realpathSync(inner).split(path.sep).join('/'))";
+    let out = std::process::Command::new("node")
+        .arg("-e")
+        .arg(script)
+        .current_dir(co.join(importer))
+        .output()
+        .unwrap();
+    assert_ok(&out, &format!("with-selector from {importer:?}"));
+    let got = String::from_utf8_lossy(&out.stdout).trim().to_string();
+    assert!(got.starts_with("PATCHED "), "{got}");
+    assert!(
+        got.contains(&format!(".socket/vendor/npm/{}/", t.uuid)),
+        "{got}"
+    );
+    fx.leg.ran();
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_peer_root_selfref() {
+    peer_selfref("peer_root_selfref", false).await;
+}
+
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_peer_member_selfref() {
+    peer_selfref("peer_member_selfref", true).await;
+}
+
 /// A dependency with dependencies: vlt creates the link dir inside the
 /// vendored package (socket-patch never reads or commits it) and `git
 /// status` stays clean.
@@ -559,7 +675,9 @@ async fn vlt_pinned_matrix_vendored_bin_bearing() {
 
 /// A patch that also touches package.json of a package with
 /// devDependencies: vendoring verifies it under the vlt manifest exemption
-/// and VEX attests it.
+/// and VEX attests it. Without the vendor ledger (no inventory pin) VEX
+/// judges the stripped package.json by the afterHash blob alone: absent,
+/// it fails closed (`vendor_manifest_unverifiable`); present, it attests.
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_vendored_package_json_devdeps_patch() {
@@ -589,20 +707,50 @@ async fn vlt_pinned_matrix_vendored_package_json_devdeps_patch() {
     fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-pkgjson");
     assert_eq!(state(&co, &t2), State::Patched);
     let uri = svc.uri();
-    let out = socket_api(
-        &co,
-        &svc,
-        &["vex"],
-        &[
-            "--output",
-            "out.vex.json",
-            "--product",
-            PRODUCT,
-            "--patch-server-url",
-            &uri,
-        ],
+    let vex = |dir: &Path| {
+        let _ = std::fs::remove_file(dir.join("out.vex.json"));
+        let out = socket_api(
+            dir,
+            &svc,
+            &["vex"],
+            &[
+                "--output",
+                "out.vex.json",
+                "--product",
+                PRODUCT,
+                "--patch-server-url",
+                &uri,
+            ],
+        );
+        let attested = vex_doc_attests(&dir.join("out.vex.json"), &t2);
+        (out, attested)
+    };
+    let (out, attested) = vex(&co);
+    assert!(attested, "{out}");
+    let bare = fx.checkout("ledgerless-pkgjson");
+    fx.vlt_ok_profile(&bare, &fx.leg.locked_install_args(), "ledgerless-pkgjson");
+    std::fs::remove_file(bare.join(".socket/vendor/state.json")).unwrap();
+    let after = t2
+        .all_files()
+        .into_iter()
+        .find(|(rel, _, _)| rel == "package.json")
+        .map(|(_, _, after)| after)
+        .unwrap();
+    let blob = bare.join(".socket/blobs").join(git_sha256(&after));
+    assert!(!blob.exists(), "no afterHash blob in the checkout");
+    let (out, attested) = vex(&bare);
+    assert!(!attested, "no ledger and no blob: {out}");
+    assert_eq!(out.code, 1, "the omission exit: {out}");
+    assert!(
+        event_codes(&out.json())
+            .iter()
+            .any(|c| c == "vendor_manifest_unverifiable"),
+        "{out}"
     );
-    assert!(vex_doc_attests(&co.join("out.vex.json"), &t2), "{out}");
+    write(&blob, &after);
+    let (out, attested) = vex(&bare);
+    assert!(attested, "the afterHash blob verifies it: {out}");
+    assert_eq!(out.code, 0, "{out}");
     fx.leg.ran();
 }
 
diff --git a/crates/socket-patch-cli/tests/e2e_vlt.rs b/crates/socket-patch-cli/tests/e2e_vlt.rs
index a399991e..ee25d471 100644
--- a/crates/socket-patch-cli/tests/e2e_vlt.rs
+++ b/crates/socket-patch-cli/tests/e2e_vlt.rs
@@ -692,12 +692,17 @@ async fn vlt_pinned_matrix_setup_hook_failure() {
     .env("SOCKET_PROXY_URL", dead)
     .env("SOCKET_API_URL", dead);
     let direct = cmd.output().unwrap();
-    let code = direct.status.code();
     let text = String::from_utf8_lossy(&direct.stdout).into_owned();
     assert!(
         text.contains("sources_download_failed") && text.contains("partialFailure"),
         "the contract's warning: {text}"
     );
+    assert_eq!(
+        direct.status.code(),
+        Some(1),
+        "partialFailure exits 1: {}",
+        out_text(&direct)
+    );
     remove_tree(&fx.proj);
     let mut run = with_hook_env(&fx);
     run.env.retain(|(k, _)| k != "SOCKET_OFFLINE");
@@ -705,15 +710,11 @@ async fn vlt_pinned_matrix_setup_hook_failure() {
     run.env.push(("SOCKET_API_URL".into(), dead.into()));
     let out = fx.leg.vlt_with(&fx.proj, &["install"], &run);
     assert_eq!(hook_count(&fx), 2, "the failing hook ran");
-    if code == Some(0) {
-        assert_ok(&out, "vlt keeps the install when the hook exits 0");
-    } else {
-        assert!(
-            !out.status.success(),
-            "a failing hook ({code:?}) aborts the install: {}",
-            out_text(&out)
-        );
-    }
+    assert!(
+        !out.status.success(),
+        "the failing hook aborts the install: {}",
+        out_text(&out)
+    );
     fx.leg.ran();
 }
 
diff --git a/crates/socket-patch-cli/tests/mode_migration_vlt.rs b/crates/socket-patch-cli/tests/mode_migration_vlt.rs
index ab1f773e..8fd1ea9d 100644
--- a/crates/socket-patch-cli/tests/mode_migration_vlt.rs
+++ b/crates/socket-patch-cli/tests/mode_migration_vlt.rs
@@ -238,9 +238,10 @@ async fn two_target_fixture(leg: Leg) -> Fixture {
 
 // ── 1–2. takeovers ────────────────────────────────────────────────────────
 
-/// Vendored → hosted: the vendored entry, artifact and wiring go, the
-/// ledger original is the pristine registry line, a fresh checkout is
-/// patched; the unscoped rollback restores the pristine lock.
+/// Vendored → hosted through `scan --mode hosted` and through `get <uuid>
+/// --mode hosted`: the vendored entry, artifact and wiring go, the ledger
+/// original is the pristine registry line, a fresh checkout is patched;
+/// the unscoped rollback restores the pristine lock.
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_migration_vendored_then_hosted() {
@@ -250,16 +251,32 @@ async fn vlt_pinned_matrix_migration_vendored_then_hosted() {
     let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
     let out = vendored_scan(&fx, &fx.proj, &[]);
     assert_eq!(out.code, 0, "{out}");
-    let out = hosted_scan(&fx, &fx.proj, &[]);
-    assert_eq!(out.code, 0, "{out}");
-    assert!(
-        has_code(&out.json(), "redirect_takeover_reverted_vendored"),
-        "{out}"
-    );
-    assert_pure_hosted(&fx, &fx.proj, fx.t());
-    assert!(!fx.proj.join(".socket/vendor/state.json").exists());
-    assert_fresh(&fx, &fx.proj, fx.t(), State::Patched, "hosted");
-    assert_unscoped_rollback_pristine(&fx, &fx.proj, "rollback");
+    for driver in ["scan", "get"] {
+        let dir = copy_project(&fx, &fx.proj, &format!("drv-{driver}"));
+        let out = if driver == "scan" {
+            hosted_scan(&fx, &dir, &[])
+        } else {
+            socket_api(&dir, &fx.svc, &["get", UUID, "--mode", "hosted"], &[])
+        };
+        assert_eq!(out.code, 0, "{driver}: {out}");
+        assert!(
+            has_code(&out.json(), "redirect_takeover_reverted_vendored"),
+            "{driver}: {out}"
+        );
+        assert_pure_hosted(&fx, &dir, fx.t());
+        assert!(
+            !dir.join(".socket/vendor/state.json").exists(),
+            "{driver}: no vendor ledger"
+        );
+        assert_fresh(
+            &fx,
+            &dir,
+            fx.t(),
+            State::Patched,
+            &format!("{driver}-hosted"),
+        );
+        assert_unscoped_rollback_pristine(&fx, &dir, &format!("{driver}-rollback"));
+    }
     fx.leg.ran();
 }
 
diff --git a/crates/socket-patch-cli/tests/vlt-leg-manifest.json b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
index ca67d923..d4753023 100644
--- a/crates/socket-patch-cli/tests/vlt-leg-manifest.json
+++ b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
@@ -50,6 +50,8 @@
         "durability",
         "workspace_member_selfref",
         "alias_selfref",
+        "peer_root_selfref",
+        "peer_member_selfref",
         "dep_with_deps",
         "hostile_gitignore",
         "autocrlf_checkout",
@@ -185,6 +187,8 @@
       "durability",
       "workspace_member_selfref",
       "alias_selfref",
+      "peer_root_selfref",
+      "peer_member_selfref",
       "dep_with_deps",
       "hostile_gitignore",
       "autocrlf_checkout",
diff --git a/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
index bc1df1c8..c1ca9b0d 100644
--- a/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
@@ -193,6 +193,19 @@ pub const VLT_UPDATE_FROM: VltVersion = VltVersion::zero(20);
 pub const UPDATE_RERESOLVES_FROM: VltVersion = VltVersion::release(1, 0, 8);
 /// Peer extras (`ṗ:N` / `peer.N`) exist.
 pub const PEER_EXTRA_FROM: VltVersion = VltVersion::rc(6);
+/// A workspace member's direct dependency whose peers resolve gets a peer
+/// extra (`~peer.1`); the root importer's gets one from [`PEER_HASH_FROM`].
+pub const MEMBER_PEER_EXTRA_FROM: VltVersion = VltVersion::rc(15);
+
+/// Whether vlt writes a peer extra on a direct dependency with resolved
+/// peers, for a workspace-member (`member`) or the root importer.
+pub fn direct_peer_extra(v: VltVersion, member: bool) -> bool {
+    if member {
+        v >= MEMBER_PEER_EXTRA_FROM
+    } else {
+        v >= PEER_HASH_FROM
+    }
+}
 
 /// Named registry specs (`acme:x@1`), scoped registries and URL-segment
 /// DepIDs exist (flat-config releases record every registry node under
@@ -766,8 +779,14 @@ pub fn assert_ok(out: &Output, what: &str) {
 /// @socketsecurity/socket-patch <args>` runs the socket-patch binary under
 /// test and logs one line per invocation to `log`; `vlt` runs `js`.
 pub fn write_shims(bin: &Path, js: &Path, log: &Path) {
+    write_shims_for(bin, js, log, &socket_bin());
+}
+
+/// [`write_shims`] with the `npx` shim running `socket`. cmd.exe's `%*`
+/// ignores `shift`, so the `.cmd` shim rebuilds the argument list after
+/// the package token itself.
+pub fn write_shims_for(bin: &Path, js: &Path, log: &Path, socket: &Path) {
     std::fs::create_dir_all(bin).unwrap();
-    let socket = socket_bin();
     let sh_npx = format!(
         "#!/bin/sh\nwhile [ \"$#\" -gt 0 ]; do\n  case \"$1\" in\n    @socketsecurity/socket-patch|@socketsecurity/socket-patch@*) shift; break;;\n    *) shift;;\n  esac\ndone\nprintf '%s\\n' \"npx $*\" >> '{log}'\nexec '{socket}' \"$@\"\n",
         log = log.display(),
@@ -778,7 +797,7 @@ pub fn write_shims(bin: &Path, js: &Path, log: &Path) {
         js.display()
     );
     let cmd_npx = format!(
-        "@echo off\r\n:loop\r\nif \"%~1\"==\"\" goto run\r\nset a=%~1\r\nshift\r\nif \"%a:~0,28%\"==\"@socketsecurity/socket-patch\" goto run\r\ngoto loop\r\n:run\r\necho npx %*>> \"{log}\"\r\n\"{socket}\" %*\r\n",
+        "@echo off\r\nsetlocal\r\nset SP_ARGS=\r\n:loop\r\nif \"%~1\"==\"\" goto run\r\nset SP_PKG=%~1\r\nshift\r\nif \"%SP_PKG:~0,28%\"==\"@socketsecurity/socket-patch\" goto collect\r\ngoto loop\r\n:collect\r\nif \"%~1\"==\"\" goto run\r\nset SP_ARGS=%SP_ARGS% %1\r\nshift\r\ngoto collect\r\n:run\r\n>>\"{log}\" echo npx%SP_ARGS%\r\n\"{socket}\"%SP_ARGS%\r\n",
         log = log.display(),
         socket = socket.display()
     );
@@ -2442,3 +2461,53 @@ fn vlt_e2e_harness_tarballs_are_deterministic() {
     assert_eq!(a, build_tgz(&files));
     assert_eq!(tgz_files(&a), files);
 }
+
+#[test]
+fn vlt_e2e_harness_npx_shim_forwards_the_args_after_the_package() {
+    let dir = std::env::temp_dir().join(format!("vlt-e2e-shim-{}", std::process::id()));
+    let _ = std::fs::remove_dir_all(&dir);
+    let argv = dir.join("argv.txt");
+    let log = dir.join("npx.log");
+    let fake = if cfg!(windows) {
+        let fake = dir.join("socket.cmd");
+        write(
+            &fake,
+            format!("@echo off\r\n>\"{}\" echo %*\r\n", argv.display()),
+        );
+        fake
+    } else {
+        let fake = dir.join("socket");
+        write(
+            &fake,
+            format!("#!/bin/sh\nprintf '%s\\n' \"$*\" > '{}'\n", argv.display()),
+        );
+        #[cfg(unix)]
+        {
+            use std::os::unix::fs::PermissionsExt as _;
+            std::fs::set_permissions(&fake, std::fs::Permissions::from_mode(0o755)).unwrap();
+        }
+        fake
+    };
+    let bin = dir.join("bin");
+    write_shims_for(&bin, Path::new("vlt.js"), &log, &fake);
+    let npx = bin.join(if cfg!(windows) { "npx.cmd" } else { "npx" });
+    let out = Command::new(npx)
+        .args([
+            "-y",
+            "@socketsecurity/socket-patch",
+            "apply",
+            "--silent",
+            "--ecosystems",
+            "npm",
+        ])
+        .output()
+        .unwrap();
+    assert_ok(&out, "the npx shim");
+    let args = "apply --silent --ecosystems npm";
+    assert_eq!(std::fs::read_to_string(&argv).unwrap().trim(), args);
+    assert_eq!(
+        std::fs::read_to_string(&log).unwrap().trim(),
+        format!("npx {args}")
+    );
+    std::fs::remove_dir_all(&dir).unwrap();
+}
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 977db078..01fb0a36 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -22,8 +22,9 @@ python3 scripts/check-vlt-legs.py --manifest crates/socket-patch-cli/tests/vlt-l
 
 Every leg is a test named `vlt_pinned_matrix_<suite>_<leg>` that prints one
 `VLT-LEG <vlt-version> <os> <suite> <leg> ran|skip:<reason>` line.
-`scripts/check-vlt-legs.py` fails a run on `0 passed`, on a missing `ran`, on
-a skip the manifest does not predict, and on an unknown leg. The manifest
+`scripts/check-vlt-legs.py` fails a run on `0 passed`, on a binary that
+prints no `test result:` line (a crash), on a missing `ran`, on a skip the
+manifest does not predict, and on an unknown leg. The manifest
 `crates/socket-patch-cli/tests/vlt-leg-manifest.json` is generated from the
 three tables below (`python3 scripts/check-vlt-legs.py --derive
 docs/testing/vlt-compatibility.md`), never written by hand;
@@ -59,7 +60,7 @@ them per OS).
 | Binary | Suite | Legs |
 |---|---|---|
 | `e2e_redirect_vlt_build` | `hosted` | `scan_fresh_ci`, `frozen_dead_registry`, `ordinary_install_stable`, `get_uuid_fresh_ci`, `tamper_cold_eintegrity`, `rollback_byte_exact`, `rerun_noop`, `warm_tree_invalidates`, `no_cleanup_stays_stale`, `heal_rule_b_hidden_lock_without_node`, `heal_rule_c_no_hidden_lock`, `heal_rule_c_no_record`, `scoped`, `peer_workspace_instances`, `install_newdep_preserves`, `update_drops`, `resave_install_rollback`, `resave_crlf_rollback`, `resave_update_rollback`, `crlf_lock`, `mirror_registries_npm`, `scalar_registry`, `named_alias_untouched`, `scoped_registry_untouched`, `jsr_untouched`, `default_registry_alias`, `registry_from_env`, `registry_from_user_config`, `content_encoding_refused`, `old_lockfile_ignored`, `warm_cache_hazard`, `idempotence`, `manifestless_vex`, `ts_written_lock`, `optional_dependency_heal`, `then_vendored_optional_takeover`, `platform_optional_skipped` |
-| `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
+| `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `peer_root_selfref`, `peer_member_selfref`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
 | `mode_migration_vlt` | `migration` | `vendored_then_hosted`, `hosted_then_vendored`, `dry_run_parity`, `scoped_unwind_one_of_two`, `rollback_from_mixed`, `agent_apply_yields_to_vendored`, `agent_apply_after_hosted`, `hosted_scan_keeps_agent_patched_tree`, `agent_rollback_after_takeovers`, `pm_switch_npm_to_vlt`, `pm_switch_vlt_to_npm`, `flavor_changed`, `upgrade_hosted`, `upgrade_vendored` |
 | `e2e_safety_vlt` | `safety` | `linux_auto`, `explicit_hardlink`, `private_copies`, `cross_device_cache`, `agent_rollback`, `peer_fanout`, `hosted_heal`, `vendored_build`, `vendor_revert_and_repair`, `layout_note` |
 | `e2e_vlt` | `agent` | `scan_apply_rollback_list`, `get_and_remove`, `install_then_apply_patches_file`, `transitive_only_dep_apply_patches_store`, `lockfile_supplement`, `launcher`, `persistence_survives`, `persistence_reverted_by_reinstall`, `reruns_and_vex` |
@@ -136,6 +137,9 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | a warm cache re-fetches a changed tarball and fails its integrity (no stale-bytes hazard) | `1.0.0-rc.27 … 1.0.2` | — | — | — | — |
 | `vlt update` re-resolves an unchanged exact spec (dropping a hosted pin); earlier releases keep the locked node | `>= 1.0.8` | — | — | — | — |
 | vlt.json spells the scope map `scoped-registries` (`scope-registries` before) | `>= 1.0.0-rc.28` | — | — | — | — |
+| a workspace member's direct dependency with resolved peers (use-sync-external-store beside react) gets a peer extra (`~peer.1`); vendored mode refuses such a variant instance (`vendor_lock_entry_unsupported`, nothing written), which `peer_member_selfref` pins until vendored mode accepts a single peer context | `>= 1.0.0-rc.15` | — | — | — | — |
+| the root importer's direct dependency with resolved peers gets a peer extra (`~peer.<16 hex>`); `peer_root_selfref` pins the same refusal | `>= 1.0.8` | — | — | — | — |
+| two workspaces with use-sync-external-store beside react 17 and react 18 share ONE peer instance (`peer_workspace_instances` pins the count); no real-vlt shape was found that writes several instances of one name@version, so multi-instance pinning is covered by the in-process goldens only | `all` | — | — | — | — |
 
 ## OS coverage
 
diff --git a/scripts/check-vlt-legs.py b/scripts/check-vlt-legs.py
index b28a22a4..17db17fd 100755
--- a/scripts/check-vlt-legs.py
+++ b/scripts/check-vlt-legs.py
@@ -7,7 +7,7 @@
 fails when:
 
 * a binary reports ``0 passed`` (a filter that matched nothing), or any
-  binary failed;
+  binary failed, crashed or printed no ``test result:`` line;
 * a leg the manifest expects is missing, ran where it must skip, skipped
   where it must run, skipped for another reason, or printed twice;
 * a leg is unknown to the manifest, or the run mixed vlt versions or OSes.
@@ -36,7 +36,11 @@
     r"VLT-LEG (?P<version>\S+) (?P<os>\S+) (?P<suite>[a-z]+) (?P<leg>[a-z0-9_]+) "
     r"(?P<status>ran|skip:[a-z0-9-]+)"
 )
-RUNNING_RE = re.compile(r"^\s*Running (?:tests/)?(?P<name>[A-Za-z0-9_]+)(?:\.rs)?\b")
+RUNNING_RE = re.compile(
+    r"^\s*Running (?:tests[/\\])?(?P<name>[A-Za-z0-9_]+)(?:\.rs)?\b.* \(.*\)\s*$"
+)
+DOCTESTS_RE = re.compile(r"^\s*Doc-tests (?P<name>[A-Za-z0-9_]+)\s*$")
+CRASH_RE = re.compile(r"process didn't exit successfully|^error: test failed")
 RESULT_RE = re.compile(r"test result: (?P<outcome>\w+)\. (?P<passed>\d+) passed; (?P<failed>\d+) failed")
 
 
@@ -312,9 +316,31 @@ def parse_log(text: str):
     return running, results, lines
 
 
+def unfinished_binaries(text: str) -> list:
+    """Binaries whose ``Running`` line no ``test result:`` line follows."""
+    unfinished = []
+    pending = None
+    for raw in text.splitlines():
+        m = RUNNING_RE.match(raw) or DOCTESTS_RE.match(raw)
+        if m:
+            if pending is not None:
+                unfinished.append(pending)
+            pending = m.group("name")
+        elif RESULT_RE.search(raw):
+            pending = None
+    if pending is not None:
+        unfinished.append(pending)
+    return unfinished
+
+
 def check(manifest: dict, text: str, knobs_env: dict, binaries: list) -> list:
     errors = []
     running, results, lines = parse_log(text)
+    for name in unfinished_binaries(text):
+        errors.append(f"test binary {name} printed no `test result:` line (it crashed or was killed)")
+    for raw in text.splitlines():
+        if CRASH_RE.search(raw):
+            errors.append(f"cargo reported a failed test binary: {raw.strip()}")
     for outcome, passed, failed in results:
         if passed == 0:
             errors.append("a test binary reported `0 passed` (vacuous run)")
diff --git a/scripts/tests/test_check_vlt_legs.py b/scripts/tests/test_check_vlt_legs.py
index 33a273f6..4d40783a 100644
--- a/scripts/tests/test_check_vlt_legs.py
+++ b/scripts/tests/test_check_vlt_legs.py
@@ -231,6 +231,36 @@ def test_leg_lines_are_found_behind_libtest_progress_dots(self):
         dotted = "\n".join("." + l if l.startswith("VLT-LEG") else l for l in text.splitlines())
         self.assertEqual(self.run_check(dotted), [])
 
+    def test_windows_running_lines_name_the_binary(self):
+        for binary in ["e2e_hosted_production", "e2e_vendored_production", "e2e_vlt"]:
+            text = full_run(self.manifest, binary, "1.2.0", "windows", {})
+            windows = text.replace("Running tests/", "Running tests\\").replace(
+                "target/debug/deps/", "target\\debug\\deps\\")
+            self.assertIn("Running tests\\", windows)
+            running, _, _ = legs.parse_log(windows)
+            self.assertEqual(running, [binary])
+            self.assertEqual(self.run_check(windows), [], binary)
+
+    def test_a_binary_that_crashes_before_its_result_line_fails(self):
+        first = full_run(self.manifest, "e2e_redirect_vlt_build", "1.2.0", "macos", {})
+        second = full_run(self.manifest, "e2e_vlt", "1.2.0", "macos", {})
+        self.assertEqual(self.run_check(first + "\n" + second), [])
+        crashed = "\n".join(l for l in second.splitlines() if not l.startswith("test result:"))
+        crashed += ("\nerror: test failed, to rerun pass `-p socket-patch-cli --test e2e_vlt`\n"
+                    "Caused by:\n  process didn't exit successfully: `e2e_vlt-0123` "
+                    "(signal: 11, SIGSEGV: invalid memory reference)")
+        errors = self.run_check(first + "\n" + crashed)
+        self.assertTrue(any("e2e_vlt printed no `test result:`" in e for e in errors), errors)
+        self.assertTrue(any("didn't exit successfully" in e for e in errors), errors)
+        silent = "\n".join(l for l in second.splitlines() if not l.startswith("test result:"))
+        errors = self.run_check(silent + "\n" + first)
+        self.assertTrue(any("e2e_vlt printed no `test result:`" in e for e in errors), errors)
+
+    def test_program_output_that_says_running_is_not_a_binary(self):
+        text = full_run(self.manifest, "e2e_vlt", "1.2.0", "macos", {})
+        noisy = text.replace("VLT-LEG", "Running postinstall\nVLT-LEG", 1)
+        self.assertEqual(self.run_check(noisy), [])
+
     def test_excluded_releases_are_rejected(self):
         text = log("0.0.0-22", "macos", [("hosted", "scan_fresh_ci", "ran")])
         self.assertTrue(any("excluded" in e for e in self.run_check(text)))

From bace935e2382db4febc423b2abe21bccd6274118 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 08:56:19 -0400
Subject: [PATCH 27/46] Run vlt suites in CI and backtest production

Pull requests now run the real-vlt capstones on 35 release and OS
cells, each checked against the leg manifest, and the required
hosted-e2e job proves vlt hosted and vendored installs against
production. A new advisory workflow runs every capstone on every vlt
era of Linux, macOS and Windows, backtests the production service
per release, mode and project shape, compares the locks each OS
writes, and nightly tries vlt@latest, watches for new vlt releases
and checks that the published socket-patch never half-reverts a vlt
ledger. A watchdog probes the public patch artifact every six hours
the way vlt fetches it, so re-encoded artifacts are caught early.

vlt releases are installed from a sha512-checked npm pack, and the
docs now cover vlt in every mode: eras, the hosted heal, vendored
package directories, setup and the known vlt limitations. Every vlt
error code is documented in the CLI contract and mapped to the tests
that assert it.

Assisted-by: Claude Code:claude-opus-5-5
---
 .github/workflows/ci.yml                      |  156 +-
 .github/workflows/vlt-compatibility.yml       |  581 ++++++
 .github/workflows/vlt-serve-watchdog.yml      |   44 +
 CHANGELOG.md                                  |   17 +
 README.md                                     |   23 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   25 +-
 .../tests/e2e_vex_lockfile/vlt.rs             |    3 +-
 .../tests/in_process_rollback_hosted/vlt.rs   |    2 +-
 .../tests/vex_e2e_common/vlt.rs               |    3 +
 docs/ecosystems.md                            |  131 +-
 docs/testing/hosted-production-e2e.md         |   37 +-
 docs/testing/vendored-production-e2e.md       |   14 +-
 docs/testing/vlt-compatibility.md             |  137 +-
 docs/testing/vlt-coverage.json                |  426 ++++
 scripts/backtest-vlt.py                       | 1738 +++++++++++++++++
 scripts/install-vlt.sh                        |   91 +
 scripts/tests/test_backtest_harnesses.py      |  343 ++++
 scripts/tests/test_ci_vlt_rows.py             |  332 ++++
 scripts/tests/test_vlt_coverage.py            |  195 ++
 scripts/vlt-historical-integrity.json         |   68 +
 20 files changed, 4343 insertions(+), 23 deletions(-)
 create mode 100644 .github/workflows/vlt-compatibility.yml
 create mode 100644 .github/workflows/vlt-serve-watchdog.yml
 create mode 100644 docs/testing/vlt-coverage.json
 create mode 100644 scripts/backtest-vlt.py
 create mode 100755 scripts/install-vlt.sh
 create mode 100644 scripts/tests/test_ci_vlt_rows.py
 create mode 100644 scripts/tests/test_vlt_coverage.py
 create mode 100644 scripts/vlt-historical-integrity.json

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fea73c77..b1936cf4 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -548,6 +548,7 @@ jobs:
             nuget)    EXTRA="--test docker_e2e_vendor_nuget" ;;
             pypi)     EXTRA="--test docker_e2e_vendor_pypi_pm" ;;
           esac
+          # shellcheck disable=SC2086 # EXTRA is intentionally word-split
           cargo llvm-cov \
             --features docker-e2e \
             --no-report \
@@ -890,6 +891,55 @@ jobs:
           - {os: ubuntu-latest, suite: mode_migration_bun, bun: '1.2.23', test_filter: --include-ignored}
           - {os: ubuntu-latest, suite: e2e_bun_lockb, bun: '1.0.36', test_filter: --include-ignored}
           - {os: ubuntu-latest, suite: e2e_bun_lockb, bun: '1.1.45', test_filter: --include-ignored}
+          # Real-vlt capstones (DESIGN §8.4): wiremock patch service and a local
+          # npm registry fed from npmjs, driven by the pinned vlt release
+          # (`node vlt.js`, installed below from a sha512-checked `npm pack`).
+          # Every test is `#[ignore]`d and named `vlt_pinned_matrix_*`, so the
+          # filter must be `--include-ignored vlt_pinned_matrix` (the job
+          # default `--ignored` selects nothing). The run pipes through
+          # scripts/check-vlt-legs.py, which fails on `0 passed` or any leg
+          # line the manifest does not predict. The eras: A0 0.0.0-16, A
+          # 0.0.0-32, B rc.12/rc.14 (rc.14 legs reach public npm), C rc.32,
+          # D 1.0.4/1.0.7, E 1.1.1, F 1.2.0.
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: macos-latest, suite: e2e_redirect_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: e2e_redirect_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '0.0.0-16', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '0.0.0-32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '1.0.0-rc.32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '1.0.4', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_redirect_vlt_build, vlt: '1.1.1', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vendor_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: macos-latest, suite: e2e_vendor_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: e2e_vendor_vlt_build, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vendor_vlt_build, vlt: '0.0.0-32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vendor_vlt_build, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vendor_vlt_build, vlt: '1.0.0-rc.32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vendor_vlt_build, vlt: '1.0.4', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: e2e_vendor_vlt_build, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: mode_migration_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: macos-latest, suite: mode_migration_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: mode_migration_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: mode_migration_vlt, vlt: '0.0.0-32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: mode_migration_vlt, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix, vlt_upgrade: '1.2.0'}
+          - {os: windows-latest, suite: mode_migration_vlt, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix}
+          # Linux `auto` hardlinks from the global store; every OS gets the
+          # explicit hardlink linker.
+          - {os: ubuntu-latest, suite: e2e_safety_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_safety_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix, vlt_store_linker: 'hardlink'}
+          - {os: macos-latest, suite: e2e_safety_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix, vlt_store_linker: 'hardlink'}
+          - {os: windows-latest, suite: e2e_safety_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix, vlt_store_linker: 'hardlink'}
+          # rc.12 gets the definite no-hook advisory; windows rc.14 runs the
+          # legacy DepIDs on NTFS with pre-junction symlinks.
+          - {os: ubuntu-latest, suite: e2e_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: macos-latest, suite: e2e_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: e2e_vlt, vlt: '1.2.0', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vlt, vlt: '0.0.0-32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vlt, vlt: '1.0.0-rc.12', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vlt, vlt: '1.0.0-rc.32', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: ubuntu-latest, suite: e2e_vlt, vlt: '1.0.7', test_filter: --include-ignored vlt_pinned_matrix}
+          - {os: windows-latest, suite: e2e_vlt, vlt: '1.0.0-rc.14', test_filter: --include-ignored vlt_pinned_matrix}
           # The named corepack pnpm hosted legs (pnpm 7-11, get-uuid,
           # zero-touch, --trust-lockfile). `#[ignore]`d and previously run in
           # no job; the pinned matrix inside the same suite runs in
@@ -1035,8 +1085,9 @@ jobs:
           # same-OS legs wins the cache reserve and the rest fail to save.
           # Several suites run one leg per pinned toolchain release (bun, uv,
           # poetry, pdm, hatch, pipenv, pip, bundler, composer, maven, dotnet,
-          # deno), so the release is part of the key too.
-          key: ${{ matrix.suite }}-${{ matrix.bun || matrix.uv || matrix.poetry || matrix.pdm || matrix.hatch || matrix.pipenv || matrix.pip || matrix.bundler || matrix.composer || matrix.maven || matrix.dotnet || matrix.deno || 'default' }}
+          # deno, vlt), so the release is part of the key too, plus the vlt
+          # store linker of the two ubuntu e2e_safety_vlt legs.
+          key: ${{ matrix.suite }}-${{ matrix.vlt || matrix.bun || matrix.uv || matrix.poetry || matrix.pdm || matrix.hatch || matrix.pipenv || matrix.pip || matrix.bundler || matrix.composer || matrix.maven || matrix.dotnet || matrix.deno || 'default' }}${{ matrix.vlt_store_linker && format('-{0}', matrix.vlt_store_linker) || '' }}
           save-if: ${{ github.ref == 'refs/heads/main' }}
 
       - name: Setup Node.js
@@ -1210,7 +1261,45 @@ jobs:
         with:
           bun-version: ${{ matrix.bun }}
 
+      - name: Setup Node.js 24 (vlt legs)
+        if: matrix.vlt != ''
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '24.21.0'
+
+      - name: Setup vlt
+        if: matrix.vlt != ''
+        # The pinned release (and, for the upgrade legs, the second vlt):
+        # `npm pack`, sha512 against the registry and the committed pin, then
+        # a prefix install run as `node vlt.js`. The store-linker knob is a
+        # harness variable because the harness scrubs ambient VLT_*.
+        shell: bash
+        env:
+          VLT_TEST_VERSION: ${{ matrix.vlt }}
+          VLT_TEST_UPGRADE: ${{ matrix.vlt_upgrade }}
+          VLT_TEST_STORE_LINKER: ${{ matrix.vlt_store_linker }}
+        run: |
+          set -euo pipefail
+          js=$(scripts/install-vlt.sh "$VLT_TEST_VERSION" "$RUNNER_TEMP/vlt-tool")
+          {
+            echo "SOCKET_PATCH_VLT_E2E_JS=$js"
+            echo "SOCKET_PATCH_VLT_E2E_VERSION=$VLT_TEST_VERSION"
+            echo "SOCKET_PATCH_VLT_E2E_REQUIRED=1"
+            echo "LANG=C"
+            echo "LC_ALL=C"
+          } >> "$GITHUB_ENV"
+          if [ -n "$VLT_TEST_STORE_LINKER" ]; then
+            echo "SOCKET_PATCH_VLT_E2E_STORE_LINKER=$VLT_TEST_STORE_LINKER" >> "$GITHUB_ENV"
+          fi
+          if [ -n "$VLT_TEST_UPGRADE" ]; then
+            up=$(scripts/install-vlt.sh "$VLT_TEST_UPGRADE" "$RUNNER_TEMP/vlt-upgrade")
+            echo "SOCKET_PATCH_VLT_E2E_UPGRADE_JS=$up" >> "$GITHUB_ENV"
+            echo "SOCKET_PATCH_VLT_E2E_UPGRADE_VERSION=$VLT_TEST_UPGRADE" >> "$GITHUB_ENV"
+          fi
+          node --version
+
       - name: Run e2e tests
+        if: matrix.vlt == ''
         # Suites are `#[ignore]`-gated out of the unpinned `test` job by
         # default, hence `--ignored`; an entry that sets `test_filter`
         # overrides the selector for itself only.
@@ -1257,6 +1346,25 @@ jobs:
           SOCKET_PATCH_DENO_E2E_VERSION: ${{ matrix.deno }}
         run: cargo test -p socket-patch-cli --all-features --test ${{ matrix.suite }} -- ${{ matrix.test_filter || '--ignored' }}
 
+      - name: Run vlt e2e tests
+        if: matrix.vlt != ''
+        # One capstone binary per row, through the leg checker: it fails on
+        # `0 passed`, a crashed binary, a missing `ran`, an unexpected skip or
+        # an unknown leg (crates/socket-patch-cli/tests/vlt-leg-manifest.json).
+        shell: bash
+        env:
+          SOCKET_PATCH_VLT_E2E_REQUIRED: ${{ matrix.vlt != '' && '1' || '' }}
+          VLT_SUITE: ${{ matrix.suite }}
+          VLT_TEST_FILTER: ${{ matrix.test_filter }}
+        run: |
+          set -uo pipefail
+          status=0
+          # shellcheck disable=SC2086 # the filter is several libtest arguments
+          cargo test -p socket-patch-cli --all-features --test "$VLT_SUITE" -- $VLT_TEST_FILTER 2>&1 | tee vlt-leg.log || status=1
+          py=$(command -v python3 || command -v python)
+          "$py" scripts/check-vlt-legs.py --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json vlt-leg.log || status=1
+          exit "$status"
+
   # ----------------------------------------------------------------------
   # Docker-driven real-package e2e suite.
   #
@@ -1694,10 +1802,19 @@ jobs:
           corepack prepare yarn@1.22.22 --activate
           corepack prepare yarn@4.6.0 --activate
           npm install -g bun@1
+          # vlt: the same sha512-checked pack-and-install as the e2e rows.
+          js=$(scripts/install-vlt.sh 1.2.0 "$RUNNER_TEMP/vlt-tool")
+          {
+            echo "SOCKET_PATCH_VLT_E2E_JS=$js"
+            echo "SOCKET_PATCH_VLT_E2E_VERSION=1.2.0"
+            echo "SOCKET_PATCH_VLT_E2E_REQUIRED=1"
+            echo "SOCKET_PATCH_HOSTED_E2E_STRICT=1"
+          } >> "$GITHUB_ENV"
           node --version
           npm --version
           pnpm --version
           bun --version
+          node --no-warnings "$js" --version
 
       - name: Setup Python + uv
         if: steps.gate.outputs.run == 'true'
@@ -1741,18 +1858,47 @@ jobs:
           # suites were pulled from the PR matrix (see the `e2e` job). Retry the
           # whole suite a couple of times before calling it a real failure, so a
           # transient 503 does not block merges through a required check.
+          set -o pipefail
           for attempt in 1 2 3; do
             echo "::group::hosted-e2e attempt $attempt"
             cargo test -p socket-patch-cli --test e2e_hosted_production -- \
-              --ignored --nocapture --test-threads=4
+              --ignored --nocapture --test-threads=4 2>&1 | tee hosted-e2e.log
             status=$?
             echo "::endgroup::"
             if [ "$status" -eq 0 ]; then
-              exit 0
+              # The vlt leg (probe-driven: the clean refusal while the artifact
+              # is content-encoded, the full install proof once it is not).
+              python3 scripts/check-vlt-legs.py \
+                --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json hosted-e2e.log
+              exit $?
             fi
             echo "::warning title=hosted-e2e attempt $attempt failed::retrying"
             sleep $((attempt * 20))
           done
           echo "::error title=hosted-e2e::suite failed on all 3 attempts"
           exit 1
-          if-no-files-found: warn
+
+      - name: Run vendored-mode production e2e (vlt)
+        if: steps.gate.outputs.run == 'true'
+        # The vendored vlt install proof against production: the service's
+        # directory artifact in the D19 layout, then a fresh `vlt ci`.
+        env:
+          SOCKET_PATCH_VENDORED_E2E_STRICT: '1'
+        run: |
+          set -uo pipefail
+          for attempt in 1 2 3; do
+            echo "::group::vendored vlt production attempt $attempt"
+            cargo test -p socket-patch-cli --test e2e_vendored_production -- \
+              --include-ignored vlt_pinned_matrix --nocapture 2>&1 | tee vlt-vendored-production.log
+            status=$?
+            echo "::endgroup::"
+            if [ "$status" -eq 0 ]; then
+              python3 scripts/check-vlt-legs.py \
+                --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json vlt-vendored-production.log
+              exit $?
+            fi
+            echo "::warning title=vendored vlt production attempt $attempt failed::retrying"
+            sleep $((attempt * 20))
+          done
+          echo "::error title=hosted-e2e::the vendored vlt production proof failed on all 3 attempts"
+          exit 1
diff --git a/.github/workflows/vlt-compatibility.yml b/.github/workflows/vlt-compatibility.yml
new file mode 100644
index 00000000..e539a485
--- /dev/null
+++ b/.github/workflows/vlt-compatibility.yml
@@ -0,0 +1,581 @@
+name: vlt patch compatibility
+
+# Real vlt releases on Linux, macOS and Windows (DESIGN §8.4). ADVISORY: a
+# path-filtered workflow cannot be a required check (a skipped run reads as
+# pending), so the required gate is ci.yml's `e2e` vlt rows. This workflow
+# widens them:
+#   build          the five real-vlt capstones and the CLI, once per OS
+#   install-proof  every capstone on every era of every OS, the Node engine
+#                  floors (plus the collation golden) and the store linkers,
+#                  each run through scripts/check-vlt-legs.py
+#   native         scripts/backtest-vlt.py against the production service
+#   lock-diff      the same cell's vlt-lock.json must be byte-identical on
+#                  Linux, macOS and Windows (these rows also feed depscan)
+#   canary         nightly: vlt@latest through every capstone, plus the
+#                  release and lockfileVersion watchdogs
+#   downgrade      nightly: the latest published socket-patch meets vlt
+#                  ledgers written by this build
+# See docs/testing/vlt-compatibility.md.
+
+on:
+  pull_request:
+    paths:
+      - '.github/actions/upload-artifact/**'
+      - '.github/workflows/vlt-compatibility.yml'
+      - 'Cargo.lock'
+      - 'rust-toolchain.toml'
+      - 'crates/socket-patch-core/src/vendor/**'
+      - 'crates/socket-patch-core/src/patch/**'
+      - 'crates/socket-patch-core/src/crawlers/**'
+      - 'crates/socket-patch-core/src/vex/**'
+      - 'crates/socket-patch-core/src/package_json/**'
+      - 'crates/socket-patch-core/src/utils/fs.rs'
+      - 'crates/socket-patch-core/src/constants.rs'
+      - 'crates/socket-patch-core/tests/**'
+      - 'crates/socket-patch-cli/src/commands/apply.rs'
+      - 'crates/socket-patch-cli/src/commands/rollback.rs'
+      - 'crates/socket-patch-cli/src/commands/remove.rs'
+      - 'crates/socket-patch-cli/src/commands/setup.rs'
+      - 'crates/socket-patch-cli/src/commands/vendor.rs'
+      - 'crates/socket-patch-cli/src/commands/repair_vendor.rs'
+      - 'crates/socket-patch-cli/src/commands/get.rs'
+      - 'crates/socket-patch-cli/src/commands/vlt_preflight.rs'
+      - 'crates/socket-patch-cli/src/commands/scan/**'
+      - 'crates/socket-patch-cli/src/commands/vex*'
+      - 'crates/socket-patch-cli/tests/common/**'
+      - 'crates/socket-patch-cli/tests/vlt_e2e_common/**'
+      - 'crates/socket-patch-cli/tests/vex_e2e_common/**'
+      - 'crates/socket-patch-cli/tests/*vlt*'
+      - 'crates/socket-patch-cli/tests/*vlt*/**'
+      - 'crates/socket-patch-cli/tests/vlt-leg-manifest.json'
+      - 'docs/testing/vlt-compatibility.md'
+      - 'scripts/backtest-vlt.py'
+      - 'scripts/check-vlt-legs.py'
+      - 'scripts/install-vlt.sh'
+      - 'scripts/vlt-historical-integrity.json'
+      - 'scripts/gen-vlt-collation-golden.mjs'
+  push:
+    branches: [main]
+    paths:
+      - '.github/actions/upload-artifact/**'
+      - '.github/workflows/vlt-compatibility.yml'
+      - 'Cargo.lock'
+      - 'rust-toolchain.toml'
+      - 'crates/socket-patch-core/src/vendor/**'
+      - 'crates/socket-patch-core/src/patch/**'
+      - 'crates/socket-patch-core/src/crawlers/**'
+      - 'crates/socket-patch-core/src/vex/**'
+      - 'crates/socket-patch-core/src/package_json/**'
+      - 'crates/socket-patch-core/src/utils/fs.rs'
+      - 'crates/socket-patch-core/src/constants.rs'
+      - 'crates/socket-patch-core/tests/**'
+      - 'crates/socket-patch-cli/src/commands/apply.rs'
+      - 'crates/socket-patch-cli/src/commands/rollback.rs'
+      - 'crates/socket-patch-cli/src/commands/remove.rs'
+      - 'crates/socket-patch-cli/src/commands/setup.rs'
+      - 'crates/socket-patch-cli/src/commands/vendor.rs'
+      - 'crates/socket-patch-cli/src/commands/repair_vendor.rs'
+      - 'crates/socket-patch-cli/src/commands/get.rs'
+      - 'crates/socket-patch-cli/src/commands/vlt_preflight.rs'
+      - 'crates/socket-patch-cli/src/commands/scan/**'
+      - 'crates/socket-patch-cli/src/commands/vex*'
+      - 'crates/socket-patch-cli/tests/common/**'
+      - 'crates/socket-patch-cli/tests/vlt_e2e_common/**'
+      - 'crates/socket-patch-cli/tests/vex_e2e_common/**'
+      - 'crates/socket-patch-cli/tests/*vlt*'
+      - 'crates/socket-patch-cli/tests/*vlt*/**'
+      - 'crates/socket-patch-cli/tests/vlt-leg-manifest.json'
+      - 'docs/testing/vlt-compatibility.md'
+      - 'scripts/backtest-vlt.py'
+      - 'scripts/check-vlt-legs.py'
+      - 'scripts/install-vlt.sh'
+      - 'scripts/vlt-historical-integrity.json'
+      - 'scripts/gen-vlt-collation-golden.mjs'
+  schedule:
+    # Nightly: vlt releases and the production service drift with no PR open.
+    - cron: '17 4 * * *'
+  workflow_dispatch:
+    inputs:
+      versions:
+        description: 'Space-separated vlt versions for the native backtest (empty = the per-OS defaults)'
+        required: false
+        default: ''
+      shapes:
+        description: 'Space-separated backtest shapes (empty = every shape)'
+        required: false
+        default: ''
+      modes:
+        description: 'Space-separated modes from hosted / vendored / agent (empty = all three)'
+        required: false
+        default: ''
+      nightly:
+        description: 'Also run the nightly canary and downgrade jobs'
+        type: boolean
+        required: false
+        default: false
+
+permissions:
+  contents: read
+
+# Supersede stale PR runs; main runs are the only rust-cache writers, so they
+# are never cancelled mid-save.
+concurrency:
+  group: vlt-compat-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
+
+env:
+  CARGO_PROFILE_DEV_DEBUG: '0'
+  CARGO_INCREMENTAL: '0'
+  LANG: C
+  LC_ALL: C
+
+jobs:
+  matrix-coverage:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Every era, suite and OS is covered
+        run: python3 -B -m unittest scripts/tests/test_ci_vlt_rows.py -v
+
+  build:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 40
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - name: Cache cargo
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        with:
+          key: vlt-e2e
+          save-if: ${{ github.ref == 'refs/heads/main' }}
+      - name: Compile the CLI and the vlt capstones once
+        shell: bash
+        run: |
+          set -euo pipefail
+          cargo build --locked -p socket-patch-cli
+          cargo test --locked -p socket-patch-cli --test e2e_redirect_vlt_build --test e2e_vendor_vlt_build \
+            --test mode_migration_vlt --test e2e_safety_vlt --test e2e_vlt --no-run --message-format=json > target-build.json
+          python3 - <<'PY'
+          import json, pathlib, shutil, sys
+          exe = '.exe' if sys.platform == 'win32' else ''
+          dest = pathlib.Path('target/vlt-e2e')
+          dest.mkdir(parents=True, exist_ok=True)
+          shutil.copy2(f'target/debug/socket-patch{exe}', dest / f'socket-patch{exe}')
+          suites = {'e2e_redirect_vlt_build', 'e2e_vendor_vlt_build', 'mode_migration_vlt', 'e2e_safety_vlt',
+                    'e2e_vlt'}
+          for line in pathlib.Path('target-build.json').read_text().splitlines():
+              item = json.loads(line)
+              name = item.get('target', {}).get('name')
+              if name in suites and item.get('executable') and item.get('profile', {}).get('test'):
+                  shutil.copy2(item['executable'], dest / f'{name}{exe}')
+          missing = [s for s in suites if not (dest / f'{s}{exe}').is_file()]
+          assert not missing, missing
+          PY
+      - uses: ./.github/actions/upload-artifact
+        with:
+          name: vlt-e2e-${{ matrix.os }}
+          path: target/vlt-e2e/
+          if-no-files-found: error
+          retention-days: 7
+
+  install-proof:
+    needs: build
+    strategy:
+      fail-fast: false
+      max-parallel: 8
+      matrix:
+        include:
+          # Every supported era on every OS (macos adds 0.0.0-16 for A0).
+          - {os: ubuntu-latest, vlt: '0.0.0-1'}
+          - {os: ubuntu-latest, vlt: '0.0.0-11'}
+          - {os: ubuntu-latest, vlt: '0.0.0-16'}
+          - {os: ubuntu-latest, vlt: '0.0.0-18'}
+          - {os: ubuntu-latest, vlt: '0.0.0-19'}
+          - {os: ubuntu-latest, vlt: '0.0.0-24'}
+          - {os: ubuntu-latest, vlt: '0.0.0-25'}
+          - {os: ubuntu-latest, vlt: '0.0.0-30'}
+          - {os: ubuntu-latest, vlt: '0.0.0-32'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.1'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.5'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.6'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.8'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.9'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.12'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.13'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.14'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.15'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.18'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.22'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.29'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.30'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.32'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.33'}
+          - {os: ubuntu-latest, vlt: '1.0.4'}
+          - {os: ubuntu-latest, vlt: '1.0.5'}
+          - {os: ubuntu-latest, vlt: '1.0.7'}
+          - {os: ubuntu-latest, vlt: '1.0.8'}
+          - {os: ubuntu-latest, vlt: '1.0.10'}
+          - {os: ubuntu-latest, vlt: '1.1.1'}
+          - {os: ubuntu-latest, vlt: '1.2.0'}
+          - {os: macos-latest, vlt: '0.0.0-16'}
+          - {os: macos-latest, vlt: '0.0.0-30'}
+          - {os: macos-latest, vlt: '1.0.0-rc.8'}
+          - {os: macos-latest, vlt: '1.0.0-rc.13'}
+          - {os: macos-latest, vlt: '1.0.0-rc.14'}
+          - {os: macos-latest, vlt: '1.0.0-rc.15'}
+          - {os: macos-latest, vlt: '1.0.0-rc.22'}
+          - {os: macos-latest, vlt: '1.0.0-rc.33'}
+          - {os: macos-latest, vlt: '1.0.8'}
+          - {os: macos-latest, vlt: '1.1.1'}
+          - {os: macos-latest, vlt: '1.2.0'}
+          - {os: windows-latest, vlt: '0.0.0-11'}
+          - {os: windows-latest, vlt: '0.0.0-19'}
+          - {os: windows-latest, vlt: '0.0.0-30'}
+          - {os: windows-latest, vlt: '1.0.0-rc.9'}
+          - {os: windows-latest, vlt: '1.0.0-rc.13'}
+          - {os: windows-latest, vlt: '1.0.0-rc.14'}
+          - {os: windows-latest, vlt: '1.0.0-rc.15'}
+          - {os: windows-latest, vlt: '1.0.0-rc.18'}
+          - {os: windows-latest, vlt: '1.0.0-rc.22'}
+          - {os: windows-latest, vlt: '1.0.0-rc.33'}
+          - {os: windows-latest, vlt: '1.0.5'}
+          - {os: windows-latest, vlt: '1.0.8'}
+          - {os: windows-latest, vlt: '1.0.10'}
+          - {os: windows-latest, vlt: '1.1.1'}
+          - {os: windows-latest, vlt: '1.2.0'}
+          # Node engine floors (DESIGN §1.1), with the collation golden (ICU drift).
+          - {os: ubuntu-latest, vlt: '1.2.0', node: '22.22.0'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.18', node: '22.9.0'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.9', node: '22.0.0'}
+          # Store linkers of the global store (1.2.0), safety suite only.
+          - {os: ubuntu-latest, vlt: '1.2.0', linker: auto, suites: e2e_safety_vlt}
+          - {os: ubuntu-latest, vlt: '1.2.0', linker: hardlink, suites: e2e_safety_vlt}
+          - {os: ubuntu-latest, vlt: '1.2.0', linker: copy, suites: e2e_safety_vlt}
+          - {os: ubuntu-latest, vlt: '1.2.0', linker: unpack, suites: e2e_safety_vlt}
+          - {os: macos-latest, vlt: '1.2.0', linker: auto, suites: e2e_safety_vlt}
+          - {os: macos-latest, vlt: '1.2.0', linker: hardlink, suites: e2e_safety_vlt}
+          - {os: windows-latest, vlt: '1.2.0', linker: auto, suites: e2e_safety_vlt}
+          - {os: windows-latest, vlt: '1.2.0', linker: hardlink, suites: e2e_safety_vlt}
+          - {os: ubuntu-latest, vlt: '1.2.0', linker: hardlink, cache_root: /dev/shm/vlt-e2e-cache, suites: e2e_safety_vlt}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
+    steps:
+      # The capstones resolve fixtures through the build job's checkout path,
+      # which is the same on every runner of one OS.
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: vlt-e2e-${{ matrix.os }}*
+          merge-multiple: true
+          path: target/vlt-e2e
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: ${{ matrix.node || '24.21.0' }}
+      - name: Install vlt ${{ matrix.vlt }}
+        shell: bash
+        env:
+          VLT_TEST_VERSION: ${{ matrix.vlt }}
+        run: |
+          set -euo pipefail
+          js=$(scripts/install-vlt.sh "$VLT_TEST_VERSION" "$RUNNER_TEMP/vlt-tool")
+          echo "SOCKET_PATCH_VLT_E2E_JS=$js" >> "$GITHUB_ENV"
+          # A lockfileVersion-0 writer (0.0.0-19 … rc.14) also gets the
+          # upgrade legs, against 1.2.0.
+          if VLT_TEST_VERSION=$VLT_TEST_VERSION node -e '
+            const m = /^0\.0\.0-(\d+)$|^1\.0\.0-rc\.(\d+)$/.exec(process.env.VLT_TEST_VERSION);
+            process.exit(m && (m[1] ? Number(m[1]) >= 19 : Number(m[2]) <= 14) ? 0 : 1);'; then
+            up=$(scripts/install-vlt.sh 1.2.0 "$RUNNER_TEMP/vlt-upgrade")
+            echo "SOCKET_PATCH_VLT_E2E_UPGRADE_JS=$up" >> "$GITHUB_ENV"
+            echo "SOCKET_PATCH_VLT_E2E_UPGRADE_VERSION=1.2.0" >> "$GITHUB_ENV"
+          fi
+      - name: Collation golden under this Node
+        if: matrix.node != ''
+        run: node scripts/gen-vlt-collation-golden.mjs | diff - crates/socket-patch-core/tests/fixtures/vlt/collation-golden.json
+      - name: Every capstone, through the leg checker
+        shell: bash
+        env:
+          SOCKET_PATCH_VLT_E2E_VERSION: ${{ matrix.vlt }}
+          SOCKET_PATCH_VLT_E2E_REQUIRED: '1'
+          SOCKET_PATCH_VLT_E2E_STORE_LINKER: ${{ matrix.linker }}
+          SOCKET_PATCH_VLT_E2E_CACHE_ROOT: ${{ matrix.cache_root }}
+          VLT_SUITES: ${{ matrix.suites || 'e2e_redirect_vlt_build e2e_vendor_vlt_build mode_migration_vlt e2e_safety_vlt e2e_vlt' }}
+        run: |
+          set -uo pipefail
+          exe=''
+          if [ "$RUNNER_OS" = Windows ]; then exe=.exe; fi
+          chmod +x target/vlt-e2e/* || true
+          mkdir -p target/debug logs
+          cp "target/vlt-e2e/socket-patch$exe" "target/debug/socket-patch$exe"
+          export SOCKET_PATCH_VLT_E2E_SOCKET_BIN="$PWD/target/vlt-e2e/socket-patch$exe"
+          if [ -z "$SOCKET_PATCH_VLT_E2E_STORE_LINKER" ]; then unset SOCKET_PATCH_VLT_E2E_STORE_LINKER; fi
+          if [ -z "$SOCKET_PATCH_VLT_E2E_CACHE_ROOT" ]; then
+            unset SOCKET_PATCH_VLT_E2E_CACHE_ROOT
+          else
+            mkdir -p "$SOCKET_PATCH_VLT_E2E_CACHE_ROOT"
+          fi
+          py=$(command -v python3 || command -v python)
+          status=0
+          for suite in $VLT_SUITES; do
+            echo "::group::$suite"
+            "target/vlt-e2e/$suite$exe" vlt_pinned_matrix --ignored 2>&1 | tee "logs/$suite.log" || status=1
+            "$py" scripts/check-vlt-legs.py --binary "$suite" \
+              --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json "logs/$suite.log" || status=1
+            echo "::endgroup::"
+          done
+          exit "$status"
+      - uses: ./.github/actions/upload-artifact
+        if: always()
+        with:
+          name: vlt-proof-${{ matrix.os }}-${{ matrix.vlt }}-${{ matrix.node || 'node24' }}-${{ matrix.linker || 'default' }}${{ matrix.cache_root && '-cache-root' || '' }}
+          path: logs/
+          retention-days: 14
+
+  plan:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    outputs:
+      native: ${{ steps.plan.outputs.native }}
+    steps:
+      - id: plan
+        env:
+          VERSIONS_OVERRIDE: ${{ github.event.inputs.versions }}
+        run: |
+          python3 - <<'PY' >> "$GITHUB_OUTPUT"
+          import json, os
+          defaults = {
+              'ubuntu-latest': ['0.0.0-16', '0.0.0-32', '1.0.0-rc.14', '1.0.0-rc.32', '1.0.4', '1.0.10', '1.2.0'],
+              'macos-latest': ['1.0.0-rc.14', '1.2.0'],
+              'windows-latest': ['1.0.0-rc.14', '1.2.0'],
+          }
+          override = os.environ.get('VERSIONS_OVERRIDE', '').split()
+          rows = [{'os': o, 'vlt': v} for o, vs in defaults.items() for v in (override or vs)]
+          print('native=' + json.dumps({'include': rows}))
+          PY
+
+  native:
+    needs: [build, plan]
+    strategy:
+      fail-fast: false
+      # Each job runs its cells against the public patch service.
+      max-parallel: 6
+      matrix: ${{ fromJSON(needs.plan.outputs.native) }}
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: vlt-e2e-${{ matrix.os }}*
+          merge-multiple: true
+          path: native-cli
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '24.21.0'
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: '3.12'
+      - name: Backtest against production
+        # Every hosted cell probes the artifact first; it records
+        # blocked-by-server-encoding only when that probe saw a non-identity
+        # Content-Encoding and the CLI refused cleanly. Any other failure is an
+        # error.
+        shell: bash
+        env:
+          VLT_TEST_VERSION: ${{ matrix.vlt }}
+          CLI_REVISION: ${{ github.event.pull_request.head.sha || github.sha }}
+          CLI_BUILD_SHA: ${{ github.sha }}
+          SHAPES_OVERRIDE: ${{ github.event.inputs.shapes }}
+          MODES_OVERRIDE: ${{ github.event.inputs.modes }}
+        run: |
+          set -uo pipefail
+          chmod +x native-cli/* || true
+          cli=native-cli/socket-patch
+          if [ "$RUNNER_OS" = Windows ]; then cli=native-cli/socket-patch.exe; fi
+          modes=(hosted vendored agent)
+          if [ -n "$MODES_OVERRIDE" ]; then read -r -a modes <<<"$MODES_OVERRIDE"; fi
+          shapes=()
+          if [ -n "$SHAPES_OVERRIDE" ]; then read -r -a shapes <<<"$SHAPES_OVERRIDE"; shapes=(--shapes "${shapes[@]}"); fi
+          # `${a[@]+…}`: macOS bash 3.2 treats an empty array as unset under -u.
+          python3 scripts/backtest-vlt.py --cli "$cli" --versions "$VLT_TEST_VERSION" \
+            --modes "${modes[@]}" ${shapes[@]+"${shapes[@]}"} --jobs 3 \
+            --tools "$RUNNER_TEMP/vlt-tools" --out native-vlt
+      - uses: ./.github/actions/upload-artifact
+        if: always()
+        with:
+          name: vlt-results-${{ matrix.os }}-${{ matrix.vlt }}
+          include-hidden-files: true
+          path: |
+            native-vlt/summary.json
+            native-vlt/summary.md
+            native-vlt/captures/**/result.json
+            native-vlt/captures/**/cli-output.json
+            native-vlt/captures/**/before-cli-output.json
+            native-vlt/captures/**/tree/**
+            native-vlt/captures/**/logs/**
+          retention-days: 14
+
+  lock-diff:
+    needs: native
+    if: ${{ !cancelled() }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: vlt-results-*
+          path: results
+      - name: Windows and macOS locks equal Linux
+        env:
+          VERSIONS_OVERRIDE: ${{ github.event.inputs.versions }}
+        run: |
+          required=()
+          if [ -z "$VERSIONS_OVERRIDE" ]; then
+            for v in 1.2.0 1.0.0-rc.14; do
+              for m in hosted vendored agent; do required+=("$v:$m:direct"); done
+            done
+          fi
+          python3 scripts/backtest-vlt.py --diff-locks results --out lock-diff \
+            ${required[@]:+--require-cross-os "${required[@]}"}
+      - uses: ./.github/actions/upload-artifact
+        if: always()
+        with:
+          name: vlt-lock-diff
+          path: lock-diff/
+          retention-days: 14
+
+  canary:
+    needs: build
+    if: github.event_name == 'schedule' || github.event.inputs.nightly == 'true'
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: vlt-e2e-${{ matrix.os }}*
+          merge-multiple: true
+          path: target/vlt-e2e
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '24.21.0'
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: '3.12'
+      - name: vlt@latest through every capstone
+        # Only the exact-version pin is relaxed: the capstones still assert
+        # `--version` against the release this step resolved.
+        shell: bash
+        run: |
+          set -uo pipefail
+          exe=''
+          if [ "$RUNNER_OS" = Windows ]; then exe=.exe; fi
+          chmod +x target/vlt-e2e/* || true
+          mkdir -p target/debug logs
+          cp "target/vlt-e2e/socket-patch$exe" "target/debug/socket-patch$exe"
+          js=$(scripts/install-vlt.sh latest "$RUNNER_TEMP/vlt-tool") || exit 1
+          version=$(node --no-warnings "$js" --version)
+          echo "VLT_LATEST=$version" >> "$GITHUB_ENV"
+          export SOCKET_PATCH_VLT_E2E_JS="$js" SOCKET_PATCH_VLT_E2E_VERSION="$version"
+          export SOCKET_PATCH_VLT_E2E_REQUIRED=1
+          export SOCKET_PATCH_VLT_E2E_SOCKET_BIN="$PWD/target/vlt-e2e/socket-patch$exe"
+          py=$(command -v python3 || command -v python)
+          status=0
+          for suite in e2e_redirect_vlt_build e2e_vendor_vlt_build mode_migration_vlt e2e_safety_vlt e2e_vlt; do
+            echo "::group::$suite"
+            "target/vlt-e2e/$suite$exe" vlt_pinned_matrix --ignored 2>&1 | tee "logs/$suite.log" || status=1
+            "$py" scripts/check-vlt-legs.py --binary "$suite" \
+              --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json "logs/$suite.log" || status=1
+            echo "::endgroup::"
+          done
+          exit "$status"
+      - name: Release and lockfileVersion watchdogs
+        # Fails when npm lists a vlt release that is neither supported nor
+        # excluded in docs/testing/vlt-compatibility.md, and, once a release
+        # writes a lockfileVersion other than 0 or 1, unless hosted mode
+        # refuses that lock (redirect_vlt_lock_unsupported).
+        if: always() && runner.os == 'Linux'
+        run: |
+          chmod +x target/vlt-e2e/* || true
+          python3 scripts/backtest-vlt.py --cli target/vlt-e2e/socket-patch --canary-checks --allow-unlisted \
+            --versions "$VLT_LATEST" --tools "$RUNNER_TEMP/vlt-tools" --out canary
+      - uses: ./.github/actions/upload-artifact
+        if: always()
+        with:
+          name: vlt-canary-${{ matrix.os }}
+          path: |
+            logs/
+            canary/canary/report.json
+          retention-days: 14
+
+  downgrade:
+    needs: build
+    if: github.event_name == 'schedule' || github.event.inputs.nightly == 'true'
+    # Advisory until the socket-patch release that adds vlt support (with the
+    # forward-compatible ledger handling) is the latest published one.
+    continue-on-error: true
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        with:
+          pattern: vlt-e2e-ubuntu-latest*
+          merge-multiple: true
+          path: target/vlt-e2e
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '24.21.0'
+      - name: The published release meets vlt ledgers
+        run: |
+          set -uo pipefail
+          chmod +x target/vlt-e2e/*
+          npm install --prefix "$RUNNER_TEMP/published" --no-audit --no-fund @socketsecurity/socket-patch@latest
+          published="$RUNNER_TEMP/published/node_modules/.bin/socket-patch"
+          "$published" --version
+          status=0
+          python3 scripts/backtest-vlt.py --cli target/vlt-e2e/socket-patch --downgrade-cli "$published" \
+            --versions 1.2.0 --tools "$RUNNER_TEMP/vlt-tools" --out downgrade || status=$?
+          {
+            cat <<'MD'
+          ## vlt downgrade
+
+          The latest published socket-patch ran `rollback` on a hosted vlt ledger and
+          `vendor --revert` on a `flavor: "vlt"` entry written by this build. Each must
+          leave the project untouched (fail closed) or fully reverted, never half-reverted.
+          This job is advisory until the release that adds vlt support is published.
+
+          ```json
+          MD
+            cat downgrade/downgrade/summary.json 2>/dev/null || echo '[]'
+            echo '```'
+          } >> "$GITHUB_STEP_SUMMARY"
+          exit "$status"
+      - uses: ./.github/actions/upload-artifact
+        if: always()
+        with:
+          name: vlt-downgrade
+          path: downgrade/downgrade/
+          retention-days: 14
diff --git a/.github/workflows/vlt-serve-watchdog.yml b/.github/workflows/vlt-serve-watchdog.yml
new file mode 100644
index 00000000..28f4af5c
--- /dev/null
+++ b/.github/workflows/vlt-serve-watchdog.yml
@@ -0,0 +1,44 @@
+name: vlt serve watchdog
+
+# vlt hashes the wire body of a registry tarball and asks for
+# `accept-encoding: gzip;q=1.0, identity;q=0.5`, so a patch artifact that
+# patch.socket.dev (or its CDN) serves content-encoded fails `EINTEGRITY` on
+# every vlt release, and hosted mode refuses to pin it
+# (`redirect_vlt_artifact_unverifiable`). This job fetches the public free
+# minimist artifact exactly that way and fails when the response is
+# content-encoded or its sha512 differs from the API's integrity, which pages
+# through the repository's workflow-failure notification.
+#
+# Like installer-drift.yml it checks a deployed service, not the diff. It is
+# `continue-on-error` until the serve fix (`Cache-Control: no-transform`) is
+# verified in production; removing that line arms it (DESIGN §8.4, the depscan
+# rollout's last step).
+on:
+  schedule:
+    - cron: '23 */6 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  probe:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    continue-on-error: true
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Fetch the minimist artifact the way vlt does
+        run: python3 scripts/backtest-vlt.py --serve-probe --out serve-probe
+
+      - name: Upload the probe
+        if: always()
+        uses: ./.github/actions/upload-artifact
+        with:
+          name: vlt-serve-probe
+          path: serve-probe/serve-probe.json
+          retention-days: 14
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 459cb38a..b850dc3f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -394,6 +394,23 @@ into the new version's section — see docs/releasing.md.
   found would not write that lock (a v0 lock beside vlt 1.0.0-rc.15 or
   later). `setup --remove` also clears the hooks earlier releases wrote
   into vlt workspace members.
+- **vlt support is proven against real vlt releases.** Every supported vlt
+  release (0.0.0-1 … 1.2.0, see `docs/testing/vlt-compatibility.md` for the
+  excluded ones) ran the five real-vlt capstones locally; CI now runs 35 of
+  those cells on every pull request (ci.yml's `e2e` vlt rows, each checked
+  by `scripts/check-vlt-legs.py` against the leg manifest), the vlt legs of
+  the required `hosted-e2e` production job (hosted and vendored), and the
+  advisory `vlt-compatibility.yml`: every capstone on every era of Linux,
+  macOS and Windows, the Node engine floors, the store linkers,
+  `scripts/backtest-vlt.py` against the production service, a cross-OS
+  `vlt-lock.json` comparison, and nightly `vlt@latest`, release-watchdog and
+  downgrade jobs. `vlt-serve-watchdog.yml` probes the public patch artifact
+  every 6 hours the way vlt fetches it. vlt releases are installed from a
+  sha512-checked `npm pack` (`scripts/install-vlt.sh`, pins in
+  `scripts/vlt-historical-integrity.json`). Hosted vlt projects stay
+  refused (`redirect_vlt_artifact_unverifiable`) until patch.socket.dev
+  stops re-encoding artifacts; vendored and agent mode work against
+  production today.
 - **`redirect_yarn_berry_mixed_line_endings` and
   `vendor_yarn_berry_mixed_line_endings`.** A `yarn.lock` (or, vendored, a
   root `package.json`) that mixes CRLF and LF line endings — or holds a bare
diff --git a/README.md b/README.md
index 21e18aa8..379cb56f 100644
--- a/README.md
+++ b/README.md
@@ -288,6 +288,21 @@ rewrite them, and does not convert them to text. If both filenames exist,
 `bun.lock` takes precedence. See [Bun compatibility](docs/testing/bun-compatibility.md)
 for the tested versions, workspace behavior, and installer integrity limits.
 
+### vlt compatibility
+
+[vlt](https://www.vlt.sh) projects (`vlt-lock.json`) work in every mode, on every vlt
+release from 0.0.0-1 to 1.2.0 (both DepID grammars and every `lockfileVersion`).
+Agent mode patches each copy in `node_modules/.vlt` without writing through vlt 1.2's
+shared store. Hosted mode repoints the patched nodes' integrity and URL, first checks
+that each artifact is served the way vlt can verify, and removes stale installed copies
+so the next `vlt install` fetches the patched packages. Vendored mode commits a patched
+package directory for each direct dependency of the root or a workspace member
+(transitive dependencies need hosted mode). vlt is detected ahead of every other
+npm-family package manager. vlt ledgers require the socket-patch release that adds vlt support.
+See [vlt notes](docs/ecosystems.md#npm-vlt-notes) for the caveats (`vlt update`, optional
+dependencies, registry configuration) and [vlt compatibility](docs/testing/vlt-compatibility.md)
+for the tested releases.
+
 ### Pipenv compatibility
 
 Hosted mode rewrites every `Pipfile.lock` category that pins the patched
@@ -786,9 +801,12 @@ result.
 
 What gets wired, per ecosystem:
 
-- **npm / yarn / pnpm / bun** — writes `postinstall` and `dependencies` scripts into
+- **npm / yarn / pnpm / bun / vlt** — writes `postinstall` and `dependencies` scripts into
   `package.json` so any install — including `npm install <pkg>` — re-applies patches
-  (pnpm: root package only).
+  (pnpm and vlt: root package only). vlt uses the same `npx` hook, runs it on every
+  install that changes the tree (never on a no-op install), and aborts the install when
+  it fails; vlt before 1.0.0-rc.13 never runs a root `postinstall`, which `setup` warns
+  about (`vlt_root_scripts_not_run`).
 - **Python (pip / uv / poetry / pdm / hatch)** — Python has no universal post-install
   hook, so `setup` instead adds a **`socket-patch[hook]`** dependency to your manifest
   (`pyproject.toml` / `requirements.txt`; for classic Poetry, the equivalent
@@ -1246,6 +1264,7 @@ Behavior worth knowing:
 | pnpm | `pnpm-lock.yaml` (all generations), `shrinkwrap.yaml` (pnpm 1/2), Rush locks | Aliased / nested `resolution` shapes are diagnosed, not attested; `overrides` alone prove nothing |
 | yarn | `yarn.lock` (classic + berry) | Berry vendored entries also need the root `package.json` `resolutions` mapping; member locks are not read |
 | bun | `bun.lock`, else `bun.lockb` | A hosted entry that Bun < 1.3.10 re-saved without its sha512 attests only after install |
+| vlt | `vlt-lock.json` (`lockfileVersion` absent, 0 or 1) | A BOM-prefixed or other-version lock wires nothing; a same-version instance on another registry keeps a hosted pin from attesting before install; a vendored directory whose `package.json` patch lost its devDependencies needs the patched blob in `.socket/blobs` without the vendor ledger |
 | cargo | `Cargo.lock`, `Cargo.toml`, `.cargo/config[.toml]` | Root manifest + project config only (no `$CARGO_HOME` / parent configs); vendored `[patch.crates-io]` entries are read from `Cargo.toml` first (v5), the project config for pre-v5 projects, and must agree with the detached lock entry's tagged version `<version>+socket.<uuid>` (a tag for another uuid — in the lock or in the copy's own `Cargo.toml` — is dead wiring; an untagged detached entry counts only beside an untagged, pre-tag copy); a manifest entry cargo ignores (a same-key project-config item, or a URL-spelled crates.io `[patch]` table) is not attested; a lockless hosted pin needs the redirect ledger's record |
 | golang | `go.mod`, `go.work`, `go.sum`, `go.work.sum` | A replace that `require` no longer selects is inert; `vendor/modules.txt` is not read |
 | pypi | `uv.lock`, `*.py.lock`, `pylock*.toml`, `poetry.lock`, `pdm.lock`, `Pipfile.lock`, `requirements.txt` (+ `-r` includes), `pyproject.toml` / `hatch.toml` | A `uv.lock` beside a `pyproject.toml` must agree with its `[tool.uv.sources]`; PDM 3.1 / 4.0–4.2 locks are refused; a Pipenv project needs `--product` (or a git remote) |
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 8a5edb25..57f91aaf 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -100,7 +100,9 @@ For a **9.0 root lock**, the CLI ensures `pnpm-workspace.yaml` carries `trustLoc
 
 `redirect_pnpm_no_lockfile` names pnpm when installer markers exist without a lock; `redirect_pnpm_entry_vendored` identifies a vendored entry instead of reporting it missing. Supported `shrinkwrap.yaml` files are writable lockfiles, not read-only markers.
 
-**Takeover reconciliation (npm family, bun included)**: vendoring over a hosted-redirected purl (`vendor`, `scan --mode vendored`, `get --mode vendored`) first REVERTS that purl's hosted lockfile edits to their pre-redirect registry values through the per-purl redirect revert, drops the purl's record + package edits from `redirect-state.json`, and then vendors — so the vendor ledger records the PRISTINE registry fragment as its wiring `original` and `vendor --revert` lands back on registry state, never on an expiring hosted URL. The run that takes over records a `vendor_takeover_reverted_redirect` advisory event (`skipped` action beside the purl's genuine outcome; the human path prints `Warning (vendor_takeover_reverted_redirect): …`). `--dry-run` PROBES the same revert against an in-memory ledger clone instead of promising it: a clean probe reports `vendor_would_revert_redirect`, and a drifted lock or an undecidable ledger edit surfaces in the preview with the wet run's `redirect_revert_failed` code and detail (for bun, whose hosted rewrite replaces the entry's `name@version` spec, the preview first runs the Bun vendored preflight described below and then stops at the advisory instead of reading the still-hosted lock — a lock the vendored backend would refuse is previewed as the wet run's `failed <code>`, never as `vendor_would_revert_redirect`). A purl whose hosted edits cannot be cleanly reverted fails `redirect_revert_failed` (exit 1 / `partial_failure`, nothing vendored for it, the hosted wiring left in place, the remedy in the detail). **bun** participates like every other npm-family flavor: binary `redirect_bun_lockb_package` snapshots are claimed by their recorded package identity and restore individual binary resolutions; its text `redirect_bun_lock_package` edits are claimed by the recorded line's spec — the registry spec `<name>@<version>`, or a hosted URL whose tarball leaf is `<name>-<version>.tgz` — so a sibling version's or an aliased sibling's edit is neither claimed nor a refusal, and only an edit that mentions the package without being a bun packages-entry line refuses (remedy: an unscoped `socket-patch rollback`, whose whole-ledger replay unwinds bun.lock hosted edits; never hand-edit the ledger). The same claim rule serves scoped `rollback <purl>` / `remove <purl>` of one of several hosted bun records (see "Hosted unwind coverage"). Hosted → vendored and vendored → hosted (`redirect_takeover_reverted_vendored` in `redirect.warnings[]`) both work in place on bun locks the target mode accepts. **Bun vendored preflight before the takeover**: `vendor` — like `scan` / `get --mode vendored`, whose pre-download preflight runs earlier — checks `bun.lock` / `bun.lockb` with the shared Bun vendored preflight BEFORE the per-purl hosted revert, so a hosted-redirected purl on a lock the vendored backend refuses (a pre-version-2 `workspace:` lock → `vendor_bun_workspace_unsupported`; a malformed or unsupported binary lock → `vendor_bun_lockb_invalid`; an unsupported text-lock version → its code) is reported `failed <code>` with the hosted wiring, the redirect ledger and active Bun lock byte-untouched (exit 1 / `partial_failure`): the package stays hosted-patched instead of being un-hosted and then refused. `vendor --dry-run` previews that same `failed` code (exit-code parity with the wet run, nothing written) instead of promising `vendor_would_revert_redirect`. Pinned by `tests/in_process_vendor_bun_takeover.rs` and, against real Bun, `tests/mode_migration_bun.rs`. **golang** takes over the same way: the per-purl revert drops the module's hosted `replace`, removes the socket module's go.sum lines, puts the pruned upstream go.sum lines back in go's sort order, and drops the ledger record, so the vendored `replace` is recorded over pristine go.mod/go.sum (a go.mod whose replace for the module is no longer the recorded one refuses `redirect_revert_failed`). The separate run-level `vendor_supersedes_redirect` warning covers the reconcile-only case — a live lock that already proves vendored won over a stale hosted ledger record (the vendor wiring then holds the hosted-spliced fragment as `original`) — and fires exactly once, on the run that drops the stale records. Which way the live lock points is decided by the same lockfile discovery and ledger-liveness rules `vex` gates attestations on (see "Manifest-less VEX (lockfile discovery)"), for this warning, its `redirect_supersedes_vendored` twin and `hosted_wiring_retained` alike.
+**vlt hosted-mode contract**: `scan` / `get --mode hosted` rewrite, in `vlt-lock.json`, every default-registry node of a granted `name@version` (the `''` / `npm` segment or a URL segment equal to the lock's scalar `registry`, both DepID grammars, every peer and modifier variant): slot [2] becomes the granted sha512 and slot [3] the hosted URL (appended to a 3-tuple); the DepID, flags and trailing slots, the line ending and every other byte stay. One `redirect_vlt_lock_node` ledger edit per changed node records the entry text (`"<DepID>": <tuple>`, no indent, comma or `\r`). `options` is never edited and `vlt.json` is only read. A lock with another `lockfileVersion` (decided on the raw JSON token), a BOM, a non-object body or a `nodes` section outside vlt's one-node-per-line layout refuses the whole lock (`redirect_vlt_lock_unsupported`). **Confirmation**: vlt drives when its install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is present or no other npm-family lock is; then only `vlt-lock.json` confirms a uuid, and a dep the vlt rewrite refuses is refused for every lock. Otherwise every lock is rewritten, `redirect_vlt_sibling_lockfiles` warns, and the other locks' rules confirm. **Artifact preflight**: before any takeover or write (dry runs included), each granted artifact with a default-registry instance is fetched once as vlt fetches it and must verify, else the dep is withheld (`redirect_vlt_artifact_unverifiable`, see the tag table). **Heal**: stale installed copies of Socket-owned nodes are removed so the next `vlt install` extracts the patched bytes, and `rollback` / `remove` do the same for the registry bytes (`--no-vlt-install-cleanup` keeps them; optional dependencies' copies are always kept); `redirect_vlt_reinstall_required` says what happened and what to run. The same-run `--vex` never attests a vlt package whose installed copy is stale or unchecked, whose lock a vlt release may ignore (`redirect_vlt_lockfile_version_missing`, `redirect_vlt_old_lockfile_ignored`, `redirect_vlt_scalar_registry_ignored`), or which also resolves from a non-default registry (`redirect_vlt_custom_registry_skipped`). `vlt.json` or vlt install state without `vlt-lock.json` warns `redirect_vlt_no_lockfile` instead of `redirect_npm_no_lockfile`. vlt ledgers require the socket-patch release that adds vlt support. Tested releases: `docs/testing/vlt-compatibility.md`.
+
+**Takeover reconciliation (npm family, bun and vlt included)**: vendoring over a hosted-redirected purl (`vendor`, `scan --mode vendored`, `get --mode vendored`) first REVERTS that purl's hosted lockfile edits to their pre-redirect registry values through the per-purl redirect revert, drops the purl's record + package edits from `redirect-state.json`, and then vendors — so the vendor ledger records the PRISTINE registry fragment as its wiring `original` and `vendor --revert` lands back on registry state, never on an expiring hosted URL. The run that takes over records a `vendor_takeover_reverted_redirect` advisory event (`skipped` action beside the purl's genuine outcome; the human path prints `Warning (vendor_takeover_reverted_redirect): …`). `--dry-run` PROBES the same revert against an in-memory ledger clone instead of promising it: a clean probe reports `vendor_would_revert_redirect`, and a drifted lock or an undecidable ledger edit surfaces in the preview with the wet run's `redirect_revert_failed` code and detail (for bun, whose hosted rewrite replaces the entry's `name@version` spec, the preview first runs the Bun vendored preflight described below and then stops at the advisory instead of reading the still-hosted lock — a lock the vendored backend would refuse is previewed as the wet run's `failed <code>`, never as `vendor_would_revert_redirect`). A purl whose hosted edits cannot be cleanly reverted fails `redirect_revert_failed` (exit 1 / `partial_failure`, nothing vendored for it, the hosted wiring left in place, the remedy in the detail). **bun** participates like every other npm-family flavor: binary `redirect_bun_lockb_package` snapshots are claimed by their recorded package identity and restore individual binary resolutions; its text `redirect_bun_lock_package` edits are claimed by the recorded line's spec — the registry spec `<name>@<version>`, or a hosted URL whose tarball leaf is `<name>-<version>.tgz` — so a sibling version's or an aliased sibling's edit is neither claimed nor a refusal, and only an edit that mentions the package without being a bun packages-entry line refuses (remedy: an unscoped `socket-patch rollback`, whose whole-ledger replay unwinds bun.lock hosted edits; never hand-edit the ledger). The same claim rule serves scoped `rollback <purl>` / `remove <purl>` of one of several hosted bun records (see "Hosted unwind coverage"). Hosted → vendored and vendored → hosted (`redirect_takeover_reverted_vendored` in `redirect.warnings[]`) both work in place on bun locks the target mode accepts. **Bun vendored preflight before the takeover**: `vendor` — like `scan` / `get --mode vendored`, whose pre-download preflight runs earlier — checks `bun.lock` / `bun.lockb` with the shared Bun vendored preflight BEFORE the per-purl hosted revert, so a hosted-redirected purl on a lock the vendored backend refuses (a pre-version-2 `workspace:` lock → `vendor_bun_workspace_unsupported`; a malformed or unsupported binary lock → `vendor_bun_lockb_invalid`; an unsupported text-lock version → its code) is reported `failed <code>` with the hosted wiring, the redirect ledger and active Bun lock byte-untouched (exit 1 / `partial_failure`): the package stays hosted-patched instead of being un-hosted and then refused. `vendor --dry-run` previews that same `failed` code (exit-code parity with the wet run, nothing written) instead of promising `vendor_would_revert_redirect`. Pinned by `tests/in_process_vendor_bun_takeover.rs` and, against real Bun, `tests/mode_migration_bun.rs`. **golang** takes over the same way: the per-purl revert drops the module's hosted `replace`, removes the socket module's go.sum lines, puts the pruned upstream go.sum lines back in go's sort order, and drops the ledger record, so the vendored `replace` is recorded over pristine go.mod/go.sum (a go.mod whose replace for the module is no longer the recorded one refuses `redirect_revert_failed`). The separate run-level `vendor_supersedes_redirect` warning covers the reconcile-only case — a live lock that already proves vendored won over a stale hosted ledger record (the vendor wiring then holds the hosted-spliced fragment as `original`) — and fires exactly once, on the run that drops the stale records. Which way the live lock points is decided by the same lockfile discovery and ledger-liveness rules `vex` gates attestations on (see "Manifest-less VEX (lockfile discovery)"), for this warning, its `redirect_supersedes_vendored` twin and `hosted_wiring_retained` alike.
 
 `scan --apply` opts JSON callers into the full discover → select → apply pipeline. Without it, `scan --json` stays read-only (discovery + the `updates` array + the `redirectState` state block below). No effect outside `--json` mode. The non-JSON path prompts the user interactively in a TTY; when stdin is NOT a TTY (CI, a pipe), `--yes` is absent, and no intent flag (`--mode`, `--apply`, `--sync`, `--vendor`, `--redirect`, `--prune`) is given, a human-mode `scan` is **report-only** (v5.0): it prints the discovery report and the existing "To apply a single patch, run: …" hint, downloads nothing, writes nothing (no `.socket/`), and exits 0. Any intent flag, `--yes`, or a TTY keeps the previous behavior (prompt in a TTY, auto-proceed otherwise). Only `scan` gained this pre-check — `rollback`/`remove`/`get`'s non-TTY auto-accept is unchanged.
 
@@ -112,9 +114,9 @@ For a **9.0 root lock**, the CLI ensures `pnpm-workspace.yaml` carries `trustLoc
 
 `scan` queries the patch API in `--batch-size` chunks. Authenticated runs POST `/v0/orgs/{slug}/patches/batch`; token-less runs POST `{proxy}/patch/batch` on the public proxy and degrade to per-package `GET /patch/by-package/:purl` requests in two cases: the deployed proxy predates the batch endpoint (legacy proxies answer the POST with their `400 "Unsupported endpoint"` catch-all), or the all-or-nothing batch validation rejects the chunk (e.g. a crawled PURL type the server doesn't recognize, such as `pkg:jsr/…` — the per-package path tolerates those individually, preserving the pre-batch scan semantics). Rate limits and over-capacity 503s surface instead of silently degrading.
 
-**Lockfile supplement (v3.4)**: `scan` discovery is no longer limited to installed trees. The project's lockfiles (`package-lock.json`/`npm-shrinkwrap.json`, `pnpm-lock.yaml` v9, `yarn.lock` classic + berry, `bun.lock`, `Cargo.lock`, `go.sum`, `composer.lock`, `Gemfile.lock`, `uv.lock`/`poetry.lock`/pinned `requirements.txt`) are inventoried and dependencies with NO installed copy join discovery — counts, the API lookup, the table (flagged ` [NOT INSTALLED]`, plus a stderr note), and the prune "scanned" set (a wiped node_modules no longer prunes lockfile-listed entries). JSON gains a top-level `lockfileOnlyPackages` count and an additive `notInstalled: true` on matching `packages[]` entries. `--apply` partitions lockfile-only patches out BEFORE download (calm `skipped`/`package_not_installed` records — never an error exit, never a manifest write); `--vendor` passes them through to the vendor engine's auto-fetch. Vendored-ledger entries likewise stay discoverable on a fresh clone (the committed artifact is the dependency). Global scans (`--global`) get no supplement. **Rush monorepos** (no root lockfile, `rush.json` present): the npm-lock inventory falls back to the Rush source-of-truth locks — `common/config/rush/pnpm-lock.yaml` plus every `common/config/subspaces/*/pnpm-lock.yaml` (`read_dir`-sorted, repo-relative paths preserved) — so a Rush repo's dependencies still join discovery. **Plug'n'Play layouts are an explicit refusal, not an empty inventory**: a `.pnp.*` loader means the npm packages are structurally unreachable in EVERY mode (under yarn PnP the installed-tree crawl is empty too — no `node_modules/`), so `scan` surfaces an additive top-level `warnings[]` array (`{code, detail}` objects, omitted when empty) carrying `yarn_pnp_unsupported` (same code as apply's refusal; remedy `yarn patch <pkg>`) or `pnpm_pnp_unsupported` (pnpm's `node-linker=pnp` twin; pnpm remedies), plus a stderr `Warning (<code>): …` line on the human path. Exit code and `status` are deliberately unchanged (exit 0 / `success` — the same posture as hosted refusals, which exit 0 with `redirected: 0`); the warning is the machine-readable signal that nothing was checked. Pinned by `tests/e2e_safety_yarn_pnp.rs`.
+**Lockfile supplement (v3.4)**: `scan` discovery is no longer limited to installed trees. The project's lockfiles (`package-lock.json`/`npm-shrinkwrap.json`, `pnpm-lock.yaml` v9, `yarn.lock` classic + berry, `bun.lock`, `vlt-lock.json` (registry nodes, Socket-hosted pins included; vendored `file` nodes are left to the vendor ledger), `Cargo.lock`, `go.sum`, `composer.lock`, `Gemfile.lock`, `uv.lock`/`poetry.lock`/pinned `requirements.txt`) are inventoried and dependencies with NO installed copy join discovery — counts, the API lookup, the table (flagged ` [NOT INSTALLED]`, plus a stderr note), and the prune "scanned" set (a wiped node_modules no longer prunes lockfile-listed entries). JSON gains a top-level `lockfileOnlyPackages` count and an additive `notInstalled: true` on matching `packages[]` entries. `--apply` partitions lockfile-only patches out BEFORE download (calm `skipped`/`package_not_installed` records — never an error exit, never a manifest write); `--vendor` passes them through to the vendor engine's auto-fetch. Vendored-ledger entries likewise stay discoverable on a fresh clone (the committed artifact is the dependency). Global scans (`--global`) get no supplement. **Rush monorepos** (no root lockfile, `rush.json` present): the npm-lock inventory falls back to the Rush source-of-truth locks — `common/config/rush/pnpm-lock.yaml` plus every `common/config/subspaces/*/pnpm-lock.yaml` (`read_dir`-sorted, repo-relative paths preserved) — so a Rush repo's dependencies still join discovery. **Plug'n'Play layouts are an explicit refusal, not an empty inventory**: a `.pnp.*` loader means the npm packages are structurally unreachable in EVERY mode (under yarn PnP the installed-tree crawl is empty too — no `node_modules/`), so `scan` surfaces an additive top-level `warnings[]` array (`{code, detail}` objects, omitted when empty) carrying `yarn_pnp_unsupported` (same code as apply's refusal; remedy `yarn patch <pkg>`) or `pnpm_pnp_unsupported` (pnpm's `node-linker=pnp` twin; pnpm remedies), plus a stderr `Warning (<code>): …` line on the human path. Exit code and `status` are deliberately unchanged (exit 0 / `success` — the same posture as hosted refusals, which exit 0 with `redirected: 0`); the warning is the machine-readable signal that nothing was checked. Pinned by `tests/e2e_safety_yarn_pnp.rs`.
 
-**Vendor auto-fetch (v3.4)**: `vendor`/`scan --vendor` no longer fail on lockfile-resolved packages with no installed copy. Already-vendored purls stage from their committed artifact (sha256-verified against the vendor ledger; offline-safe) when the ledger entry is at the manifest record's patch uuid; a superseding uuid fetches the pristine package instead, since the older artifact holds the older patch's bytes. Otherwise the pristine artifact is fetched per the lockfile resolution and verified against the lock's recorded integrity FAIL-CLOSED before any write: npm SRI (or yarn classic's sha1 fragment), yarn berry's cache-zip checksum (rebuilt from the fetched tarball; cacheKey 10c0 only), Cargo.lock sha256 over the .crate, go.sum `h1:` dirhash over the module zip, composer `dist.shasum` (sha1), Gemfile.lock `CHECKSUMS` sha256, uv.lock wheel sha256 (pure `py3-none-any` wheels only). Entries the lock cannot verify are NEVER fetched (`vendor_fetch_unverifiable` warning + the calm `package_not_installed` skip). Registry bases honor `SOCKET_NPM_REGISTRY`, `SOCKET_CRATES_REGISTRY`, `SOCKET_GOPROXY` (else `GOPROXY`, `GONOPROXY` and `GOPRIVATE` the way go reads them — see the env table); npm/yarn/composer/gem/uv lock-recorded URLs are used verbatim. `--offline` refuses the fetch with the calm skip (the detail names the lockfile resolution). The fetch stages into a private tempdir — the project tree is never touched.
+**Vendor auto-fetch (v3.4)**: `vendor`/`scan --vendor` no longer fail on lockfile-resolved packages with no installed copy. Already-vendored purls stage from their committed artifact (sha256-verified against the vendor ledger — a vlt directory artifact against its file inventory, which leaves out the links vlt creates inside it; offline-safe) when the ledger entry is at the manifest record's patch uuid; a superseding uuid fetches the pristine package instead, since the older artifact holds the older patch's bytes. Otherwise the pristine artifact is fetched per the lockfile resolution and verified against the lock's recorded integrity FAIL-CLOSED before any write: npm SRI (or yarn classic's sha1 fragment; for vlt the registry node's slot [2]), yarn berry's cache-zip checksum (rebuilt from the fetched tarball; cacheKey 10c0 only), Cargo.lock sha256 over the .crate, go.sum `h1:` dirhash over the module zip, composer `dist.shasum` (sha1), Gemfile.lock `CHECKSUMS` sha256, uv.lock wheel sha256 (pure `py3-none-any` wheels only). Entries the lock cannot verify are NEVER fetched (`vendor_fetch_unverifiable` warning + the calm `package_not_installed` skip). Registry bases honor `SOCKET_NPM_REGISTRY`, `SOCKET_CRATES_REGISTRY`, `SOCKET_GOPROXY` (else `GOPROXY`, `GONOPROXY` and `GOPRIVATE` the way go reads them — see the env table); npm/yarn/composer/gem/uv lock-recorded URLs are used verbatim. `--offline` refuses the fetch with the calm skip (the detail names the lockfile resolution). The fetch stages into a private tempdir — the project tree is never touched.
 
 `scan --sync` is sugar for `--apply --prune` — the canonical single-flag bot invocation. `scan --json --sync --yes` discovers, applies, and reconciles state in one pass.
 
@@ -126,7 +128,7 @@ For a **9.0 root lock**, the CLI ensures `pnpm-workspace.yaml` carries `trustLoc
 
 `scan --mode hosted` (== `--redirect`) swaps the in-place apply for the registry-redirect pipeline: discover → resolve hosted-patch references (grant token + integrity + per-dep registry override) → rewrite ONLY the patched dependencies' lockfile / registry-config entries to point at the hosted packages. A dep counts as **redirected** only when its hosted-artifact URL (or per-dep registry index URL) actually landed in a project file — a granted reference whose rewriter found nothing to edit is neither recorded nor attested. Cargo and golang are confirmed only by their rewriter's own report (`confirmed_cargo_uuids` / `confirmed_golang_uuids`): a golang dep counts only when its go.mod `replace M V => patch.socket.dev/gopatch/<uuid> <sver>` and both go.sum lines are in place, never because the patch-server origin or leftover go.sum lines appear somewhere. A golang module that go.mod does not require and go.sum does not list at the patched version is outside the build graph and is refused with `redirect_golang_not_in_module_graph` (nothing written). Only the exact module `patch.socket.dev/gopatch/<canonical uuid>` is socket-owned; any other module path is refused with `redirect_golang_untrusted_module_path`. A vendored golang module is taken over like cargo and the npm family: its vendor wiring, committed copy and ledger entry are reverted first (`redirect_takeover_reverted_vendored`). Re-runs over already-rewritten output record zero new edits. **Lock (v5.0)**: the hosted engine acquires `<.socket>/apply.lock` around its first wet write (the takeover pre-reverts) — not on `--dry-run`, and not when the run would write nothing (zero redirects, all skipped) — so previews and no-op runs never create `.socket/` (and never quarantine: a `--dry-run` or a zero-grant wet run that finds a malformed `redirect-state.json` reports it as the hard error it is — exit 1, the repair-or-move-aside remedy — but moves nothing; only a run holding the lock moves it aside to `redirect-state.json.corrupt`); contention is `lock_held` and a lock-file I/O fault (a read-only project root, a file squatting on `.socket/`) is `lock_io` — both exit 1, refused BEFORE the redirect ledger is read or written, and rendered like every other lock holder: human `Error (<code>): <message>` on stderr (+ the `--lock-timeout` hint for a live holder); JSON keeps the hosted shape — top-level `status: "error"`, `errorCode: "lock_held" | "lock_io"`, a string `error`, and `redirect: {mode: "hosted"}` retained (NOT the vendored `error: {code, message}` object). **Takeover symlink pre-check (v5.0)**: a vendored→hosted takeover whose recorded wiring file is a symlink is refused up front with `redirect_symlinked_file_unsupported` — wet and `--dry-run` alike, before any revert — so "nothing was written" holds. **Human mode (v5.0)**: `scan --mode hosted` prints the results table and update detection like the other modes and confirms once — `Redirect N packages to the hosted patch server?` (singular for one), default yes, skipped by `--yes`/`--json`, on `--dry-run` (the engine honors the preview itself; nothing mutates), and when the detail fetch leaves nothing to redirect (that run enters the engine as a no-op — `Redirected 0 packages; rewrote 0 files.`, no lock, no `.socket/` — without prompting); without `--yes` on a non-TTY stdin the shared prompt prints `Non-interactive mode detected, proceeding automatically.` to stderr (unless `--silent`) and proceeds — before rewriting anything (parity with the agent/vendored arms and with `get --mode hosted`). The detail fetch prints the same progress counter and per-package `Warning: could not fetch details for …` lines as the agent arm. An EMPTY hosted discovery prints `No patches available for installed packages.` and exits 0 without entering the engine (previously `Redirected 0 packages; rewrote 0 files.`); a discovery whose every offer is paid-tier for an org without paid access prints the table's paid nudge, then `No downloadable patches (paid subscription required).`, and exits 0 without entering the engine (parity with the agent/vendored arms). A malformed redirect ledger on a human hosted run that returns before the engine (empty discovery, nothing downloadable, a detail-fetch failure, a declined confirm) is surfaced there as the read-only `Warning: the redirect ledger … is malformed …` advisory (muted by `--silent`), never moved; the `--json` arm always enters the engine and hard-errors instead. JSON output gains a `redirect` sub-object: `{ mode: "hosted", redirected, rewrittenFiles, skipped, warnings, dryRun }` (`mode` is additive so consumers can dispatch without inferring it). Rewriter warnings carry stable `redirect_*` codes (e.g. `redirect_npm_no_lockfile`, `redirect_gradle_manual_snippet`, `redirect_golang_unsupported`); new codes are additive (MINOR). v5.0 additive codes: `redirect_composer_no_lockfile` / `redirect_gem_no_gemfile` (composer / gem: neither manifest nor lock present — once per run, after the intake gates), `redirect_maven_no_pom` (no `pom.xml` and no Gradle build), `redirect_nuget_lock_unparseable` (a present-but-corrupt `packages.lock.json` — warned once, nothing mutated; an absent lock still proceeds), `redirect_cargo_lock_pkg_ambiguous` (several same-name+version `[[package]]` blocks and none carries the index `source` — transactional skip). Also v5.0: a registry override of the wrong kind (or none at all) warns the arm's missing-override code for nuget/gem/golang where it used to skip silently, and the ledger's `redirect_nuget_source` edit records `action: "added"` when `nuget.config` was authored from scratch (`rewritten` otherwise). Refusals stay fail-closed with a diagnosis that names the actual cause: a yarn-berry lock entry resolving through a non-`npm:` protocol keeps `redirect_yarn_berry_unsupported_protocol` with the entry's ACTUAL protocol in the detail — except socket-patch's OWN vendored wiring (a `file:` range into `.socket/vendor/`), which gets the distinct `redirect_yarn_berry_vendored_entry` code whose detail names the retirement path (`remove <purl>` per package, or `vendor --revert` which unwinds every vendored package, then re-run `scan --mode hosted`). Both leave the entry byte-identical; neither changes exit code or status. **yarn berry line endings (v5.0)**: yarn writes a NEW `yarn.lock` with the OS line ending (`os.EOL` — CRLF on Windows) and keeps an existing lock's majority ending on every later write, and a `core.autocrlf` checkout turns an LF lock CRLF on any OS — so a uniformly CRLF lock is rewritten in its own ending: every untouched byte (a leading BOM included) round-trips, and the `redirect_yarn_berry_entry` ledger edits record the lock's ON-DISK (CRLF) fragments, which the reverts match byte-exactly. A lock that MIXES CRLF and LF (or holds a bare CR) has no single ending to keep — yarn's own `--immutable` check rejects it too (YN0028) — so it is refused untouched with `redirect_yarn_berry_mixed_line_endings` (the detail names `yarn install`, which normalizes it). This replaces v4's `redirect_yarn_berry_crlf_unsupported`, which refused every CRLF lock and is no longer emitted. A vendored→hosted takeover runs these berry gates (mixed line endings, unsupported `cacheKey`, a non-zero `.yarnrc.yml` `compressionLevel`) BEFORE reverting a vendored berry purl — wet and `--dry-run` alike — so a refused purl keeps its vendored wiring, ledger entry and artifact byte-identical and is skipped with the gate's code (never announced as `redirect_takeover_reverted_vendored` and then left unpatched in both modes).
 
-The rewriter reads a fixed set of candidate files from the project root: the npm-family locks (`package-lock.json`, `npm-shrinkwrap.json`, `pnpm-lock.yaml`, `shrinkwrap.yaml`, `yarn.lock`, plus `.yarnrc.yml` for the berry cache-config gate and `bun.lock` / `bun.lockb`), `requirements.txt` / `uv.lock` / `Pipfile.lock` (pipfile-spec 6; see the Pipenv section below) / `poetry.lock` (every Poetry lock generation from 1.0 on — the 0.12 `[metadata.hashes]` layout is refused because that installer ignores URL sources; a Poetry < 1.4 writer additionally gets `redirect_poetry_stale_install_risk`, see `docs/testing/poetry-compatibility.md`) / `pdm.lock` (PDM lock formats `2` and `4.3`–`4.5.1`; the identity-losing `3.1` / `4.0`–`4.2` formats and unknown future formats are refused with `redirect_pdm_refused`, and a lock-format-`2` writer additionally gets `redirect_pdm_legacy_sync_required`, see `docs/testing/pdm-compatibility.md`; when `uv.lock` or `poetry.lock` sits beside it they drive and `pdm.lock` is left alone), `Cargo.toml` / `Cargo.lock` / `.cargo/config.toml` (plus the legacy extensionless `.cargo/config` — cargo reads that spelling in preference when both exist, so the managed `[registries.…]` block is written into whichever one is present; **cargo also reads every workspace-member manifest** — the `[workspace] members` globs minus `exclude` — and every in-root path-dependency manifest, recursively, reached without crossing a symbolic link and never under `.socket/`, and pins the crate in each one that declares it, so those `<dir>/Cargo.toml` files can appear in `rewrittenFiles`. A crate is redirected only when every declaration pins and every other `Cargo.lock` package depending on it is a planned member: one a registry or git crate — or a path package outside the root or behind a link — also depends on is refused `redirect_cargo_transitive_dependents` (a pin reaches only the declarations it sits on), a crate no manifest declares keeps `redirect_cargo_toml_dep_not_found` with a transitive-only detail naming `--mode vendored`, a crate every declaration of which requires another version (no requirement accepts the patched version) is refused `redirect_cargo_toml_dep_unrewritable`, and so is a requirement that also matches another locked version of the crate — each a transactional skip, never recorded or attested. With NO `Cargo.lock` there is no resolved graph to ask, so the dependents question is answered from the manifests instead: a crate declared beside any other dependency — anything but a path dependency on a manifest this run also pins, or a `workspace = true` inheritor of a table it scans — or beside a workspace member this run did not read (a `members` glob, or a member outside the project or behind a symbolic link, which member discovery drops) is refused `redirect_cargo_lockless_dependents`, whose detail names the remedies (commit a lockfile, or `--mode vendored`); a project whose only dependency is the patched crate has nothing that could pull it in and still redirects. All-CRLF manifests, locks and configs are rewritten with CRLF kept (mixed endings keep refusing where the grammar does not match), and `remove` / rollback match the recorded fragments across a later CRLF↔LF checkout conversion), `composer.lock`, `nuget.config` / `packages.lock.json`, `Gemfile` / `Gemfile.lock`, `pom.xml` (+ `.mvn/maven.config` / `.mvn/checksums/checksums.sha256` for maven Trusted Checksums merge, and the Gradle build scripts read only to trigger the manual-snippet warning). **npm-family flavor coverage**: package-lock / npm-shrinkwrap, pnpm (root OR any nested `*/pnpm-lock.yaml`), yarn classic, **yarn berry** (`yarn.lock` entry only — `resolution: ::__archiveUrl=` + `yarnBerry10c0` checksum; cacheKey `10c0` and `.yarnrc.yml compressionLevel 0` gated by `redirect_yarn_berry_cache_unsupported`), and **bun** (text `bun.lock` lockfileVersion 0, 1 or 2 — 0 is the `--save-text-lockfile` opt-in lock of Bun 1.1.39–1.1.45, 1 the 1.2–1.3 default, 2 the 1.4+ default; all three emit one `packages` grammar, so the registry 4-tuple → URL 3-tuple rewrite is version-independent and the lock's own version line is kept. Any other or missing version, or a `packages` section outside bun's single-line grammar, is refused `redirect_bun_lock_unsupported` — the detail is the shared version gate's text (a newer version: update socket-patch, re-locking would reproduce it; no integer: re-lock with Bun ≥ 1.2), identical to the vendored refusal. A version-0 lock holding `workspace:` packages is refused `redirect_bun_workspace_unsupported` (its 2-tuple workspace grammar cannot keep the hosted tuple through a frozen install); the remedy is to delete `bun.lock` and re-run `bun install` with Bun ≥ 1.2, which writes lockfileVersion 1 (accepted). A plain in-place `bun install` bumps the version only when a workspace depends on another workspace (e.g. root → member — the shape the matrix measured); otherwise Bun 1.2.0 keeps version 0 and Bun 1.2.23+ fail to resolve, so the in-place bump is not the documented remedy. Bun lock version, grammar and workspace compatibility are checked before a vendored takeover, including during dry-run: these refusals preserve the existing lock, artifact and vendor ledger. Version-1 and version-2 workspace locks are rewritten, nested versions included. A granted dep with no rewritable entry warns `redirect_bun_entry_not_found`, a grant without a sha512 `redirect_bun_missing_sha512`; a CRLF lock keeps `\r\n` on the rewritten line, and a hosted URL left by an earlier grant of the same `name@version` is re-pinned in place. **Digest-less re-saves (Bun 1.1.39–1.3.9)**: every text-lock Bun below 1.3.10 re-saves a URL tuple WITHOUT its `sha512` whenever the lock is re-saved for another reason (`bun add`, `bun install` after a package.json or workspace change), leaving the 2-tuple `["name@<url>", {meta}]` — the spec Bun installs from is intact. The CLI treats that spelling as its own wiring: a repeat hosted run counts the dep as redirected (no `redirect_bun_entry_not_found`) and HEALS the line back to the 3-tuple with the current `sha512`, recording the heal as a further `redirect_bun_lock_package` edit whose `original` is the 2-tuple (a stale URL is re-pinned from either spelling); `rollback`, scoped `rollback <purl>` / `remove <purl>` and the vendored takeover accept the digest-less spelling of a recorded `new` line (same key, spec and meta, only the trailing `"sha512-…"` missing) and restore the recorded original over it, so the chain always unwinds to the pristine registry line. Anything else — another uuid/token, another version, a re-laid meta object — is still drift. **Native `bun.lockb`**: when no text `bun.lock` exists, binary format versions 1, 2 and 3 are read and rewritten directly. Socket Patch does not invoke Bun or convert the project to a text lockfile. Exact matching package records are rewritten to hosted tarballs with the granted integrity, preserving dependency resolution IDs, workspace/dependency topology and unrelated package metadata; binary pointers and the package metadata hash are updated. Per-package `redirect_bun_lockb_package` snapshots support scoped rollback, repeat runs, superseding grants and hosted ↔ vendored takeover. A regular binary lock is discoverable even with no Bun runtime or `node_modules`; a dry run previews the same binary edits without writing them. A malformed, unreadable, unsupported or unverified binary structure is `redirect_bun_lockb_invalid` (exit 0, `redirected: 0`), and it refuses the npm rewrite before any takeover or sibling npm-family lock mutation. A symlinked binary write target is `redirect_symlinked_file_unsupported` (exit 1, including dry-run). `bun.lock` wins when both spellings exist. Binary-only projects do not receive `redirect_npm_no_lockfile`. Measured boundaries and the real-Bun matrix: `docs/testing/bun-compatibility.md`). **Rush monorepos**: when `rush.json` is present the rewriter also reads `common/config/rush/pnpm-lock.yaml` and each `common/config/subspaces/<name>/pnpm-lock.yaml` (sorted for determinism) under their repo-relative keys and repoints them in place; editing them emits `redirect_rush_repo_state_stale` when `common/config/rush/repo-state.json` exists (the `pnpmShrinkwrapHash` desync is refreshed by `rush update`, which the redirect survives). **maven** is fail-closed via version suffixing: a `mavenSuffixedVersion` + `mavenPomSha256` override pins the Socket-only `<version>-socket.<hex8>` by rewriting the literal `<version>` (`redirect_maven_dep_version`) or adding a `<dependencyManagement>` entry (`redirect_maven_dep_management_added`), plus optional Trusted Checksums (`redirect_maven_trusted_checksums`, conflicts as `redirect_maven_trusted_checksums_conflict`); a `${property}` version is refused (`redirect_maven_dep_unpinned`), a non-matching literal skipped (`redirect_maven_dep_version_mismatch`), and an override without a suffixed version falls back to same-GAV repository injection (`redirect_maven_same_gav_fallback`, NOT fail-closed).
+The rewriter reads a fixed set of candidate files from the project root: the npm-family locks (`package-lock.json`, `npm-shrinkwrap.json`, `pnpm-lock.yaml`, `shrinkwrap.yaml`, `yarn.lock`, plus `.yarnrc.yml` for the berry cache-config gate, `bun.lock` / `bun.lockb`, and `vlt-lock.json` with `vlt.json` and `node_modules/.vlt-lock.json` read only), `requirements.txt` / `uv.lock` / `Pipfile.lock` (pipfile-spec 6; see the Pipenv section below) / `poetry.lock` (every Poetry lock generation from 1.0 on — the 0.12 `[metadata.hashes]` layout is refused because that installer ignores URL sources; a Poetry < 1.4 writer additionally gets `redirect_poetry_stale_install_risk`, see `docs/testing/poetry-compatibility.md`) / `pdm.lock` (PDM lock formats `2` and `4.3`–`4.5.1`; the identity-losing `3.1` / `4.0`–`4.2` formats and unknown future formats are refused with `redirect_pdm_refused`, and a lock-format-`2` writer additionally gets `redirect_pdm_legacy_sync_required`, see `docs/testing/pdm-compatibility.md`; when `uv.lock` or `poetry.lock` sits beside it they drive and `pdm.lock` is left alone), `Cargo.toml` / `Cargo.lock` / `.cargo/config.toml` (plus the legacy extensionless `.cargo/config` — cargo reads that spelling in preference when both exist, so the managed `[registries.…]` block is written into whichever one is present; **cargo also reads every workspace-member manifest** — the `[workspace] members` globs minus `exclude` — and every in-root path-dependency manifest, recursively, reached without crossing a symbolic link and never under `.socket/`, and pins the crate in each one that declares it, so those `<dir>/Cargo.toml` files can appear in `rewrittenFiles`. A crate is redirected only when every declaration pins and every other `Cargo.lock` package depending on it is a planned member: one a registry or git crate — or a path package outside the root or behind a link — also depends on is refused `redirect_cargo_transitive_dependents` (a pin reaches only the declarations it sits on), a crate no manifest declares keeps `redirect_cargo_toml_dep_not_found` with a transitive-only detail naming `--mode vendored`, a crate every declaration of which requires another version (no requirement accepts the patched version) is refused `redirect_cargo_toml_dep_unrewritable`, and so is a requirement that also matches another locked version of the crate — each a transactional skip, never recorded or attested. With NO `Cargo.lock` there is no resolved graph to ask, so the dependents question is answered from the manifests instead: a crate declared beside any other dependency — anything but a path dependency on a manifest this run also pins, or a `workspace = true` inheritor of a table it scans — or beside a workspace member this run did not read (a `members` glob, or a member outside the project or behind a symbolic link, which member discovery drops) is refused `redirect_cargo_lockless_dependents`, whose detail names the remedies (commit a lockfile, or `--mode vendored`); a project whose only dependency is the patched crate has nothing that could pull it in and still redirects. All-CRLF manifests, locks and configs are rewritten with CRLF kept (mixed endings keep refusing where the grammar does not match), and `remove` / rollback match the recorded fragments across a later CRLF↔LF checkout conversion), `composer.lock`, `nuget.config` / `packages.lock.json`, `Gemfile` / `Gemfile.lock`, `pom.xml` (+ `.mvn/maven.config` / `.mvn/checksums/checksums.sha256` for maven Trusted Checksums merge, and the Gradle build scripts read only to trigger the manual-snippet warning). **npm-family flavor coverage**: package-lock / npm-shrinkwrap, pnpm (root OR any nested `*/pnpm-lock.yaml`), yarn classic, **yarn berry** (`yarn.lock` entry only — `resolution: ::__archiveUrl=` + `yarnBerry10c0` checksum; cacheKey `10c0` and `.yarnrc.yml compressionLevel 0` gated by `redirect_yarn_berry_cache_unsupported`), and **bun** (text `bun.lock` lockfileVersion 0, 1 or 2 — 0 is the `--save-text-lockfile` opt-in lock of Bun 1.1.39–1.1.45, 1 the 1.2–1.3 default, 2 the 1.4+ default; all three emit one `packages` grammar, so the registry 4-tuple → URL 3-tuple rewrite is version-independent and the lock's own version line is kept. Any other or missing version, or a `packages` section outside bun's single-line grammar, is refused `redirect_bun_lock_unsupported` — the detail is the shared version gate's text (a newer version: update socket-patch, re-locking would reproduce it; no integer: re-lock with Bun ≥ 1.2), identical to the vendored refusal. A version-0 lock holding `workspace:` packages is refused `redirect_bun_workspace_unsupported` (its 2-tuple workspace grammar cannot keep the hosted tuple through a frozen install); the remedy is to delete `bun.lock` and re-run `bun install` with Bun ≥ 1.2, which writes lockfileVersion 1 (accepted). A plain in-place `bun install` bumps the version only when a workspace depends on another workspace (e.g. root → member — the shape the matrix measured); otherwise Bun 1.2.0 keeps version 0 and Bun 1.2.23+ fail to resolve, so the in-place bump is not the documented remedy. Bun lock version, grammar and workspace compatibility are checked before a vendored takeover, including during dry-run: these refusals preserve the existing lock, artifact and vendor ledger. Version-1 and version-2 workspace locks are rewritten, nested versions included. A granted dep with no rewritable entry warns `redirect_bun_entry_not_found`, a grant without a sha512 `redirect_bun_missing_sha512`; a CRLF lock keeps `\r\n` on the rewritten line, and a hosted URL left by an earlier grant of the same `name@version` is re-pinned in place. **Digest-less re-saves (Bun 1.1.39–1.3.9)**: every text-lock Bun below 1.3.10 re-saves a URL tuple WITHOUT its `sha512` whenever the lock is re-saved for another reason (`bun add`, `bun install` after a package.json or workspace change), leaving the 2-tuple `["name@<url>", {meta}]` — the spec Bun installs from is intact. The CLI treats that spelling as its own wiring: a repeat hosted run counts the dep as redirected (no `redirect_bun_entry_not_found`) and HEALS the line back to the 3-tuple with the current `sha512`, recording the heal as a further `redirect_bun_lock_package` edit whose `original` is the 2-tuple (a stale URL is re-pinned from either spelling); `rollback`, scoped `rollback <purl>` / `remove <purl>` and the vendored takeover accept the digest-less spelling of a recorded `new` line (same key, spec and meta, only the trailing `"sha512-…"` missing) and restore the recorded original over it, so the chain always unwinds to the pristine registry line. Anything else — another uuid/token, another version, a re-laid meta object — is still drift. **Native `bun.lockb`**: when no text `bun.lock` exists, binary format versions 1, 2 and 3 are read and rewritten directly. Socket Patch does not invoke Bun or convert the project to a text lockfile. Exact matching package records are rewritten to hosted tarballs with the granted integrity, preserving dependency resolution IDs, workspace/dependency topology and unrelated package metadata; binary pointers and the package metadata hash are updated. Per-package `redirect_bun_lockb_package` snapshots support scoped rollback, repeat runs, superseding grants and hosted ↔ vendored takeover. A regular binary lock is discoverable even with no Bun runtime or `node_modules`; a dry run previews the same binary edits without writing them. A malformed, unreadable, unsupported or unverified binary structure is `redirect_bun_lockb_invalid` (exit 0, `redirected: 0`), and it refuses the npm rewrite before any takeover or sibling npm-family lock mutation. A symlinked binary write target is `redirect_symlinked_file_unsupported` (exit 1, including dry-run). `bun.lock` wins when both spellings exist. Binary-only projects do not receive `redirect_npm_no_lockfile`. Measured boundaries and the real-Bun matrix: `docs/testing/bun-compatibility.md`), and **vlt** (`vlt-lock.json` without `lockfileVersion`, `0` or `1`; see the vlt hosted-mode contract below). **Rush monorepos**: when `rush.json` is present the rewriter also reads `common/config/rush/pnpm-lock.yaml` and each `common/config/subspaces/<name>/pnpm-lock.yaml` (sorted for determinism) under their repo-relative keys and repoints them in place; editing them emits `redirect_rush_repo_state_stale` when `common/config/rush/repo-state.json` exists (the `pnpmShrinkwrapHash` desync is refreshed by `rush update`, which the redirect survives). **maven** is fail-closed via version suffixing: a `mavenSuffixedVersion` + `mavenPomSha256` override pins the Socket-only `<version>-socket.<hex8>` by rewriting the literal `<version>` (`redirect_maven_dep_version`) or adding a `<dependencyManagement>` entry (`redirect_maven_dep_management_added`), plus optional Trusted Checksums (`redirect_maven_trusted_checksums`, conflicts as `redirect_maven_trusted_checksums_conflict`); a `${property}` version is refused (`redirect_maven_dep_unpinned`), a non-matching literal skipped (`redirect_maven_dep_version_mismatch`), and an override without a suffixed version falls back to same-GAV repository injection (`redirect_maven_same_gav_fallback`, NOT fail-closed).
 
 **Gem stale-install guard (additive warning — the canonical narrative; other mentions point here)**: the gem hosted rewrite is pure Gemfile/lock text, so a gem ALREADY materialized under the project's bundle paths keeps its upstream bytes — the next `bundle install` prints `Using <gem>` and never refetches, on **every** bundler major (live-verified 2026-08-19 on 1.17.3 / 2.7.2 / 4.0.18: bundler 4's CHECKSUMS verify at download time only, and nothing is downloaded; `bundle install --force`/`--redownload` re-install from the stale cached `.gem` instead of re-fetching — bundler 1 silently, bundler 4 with an exit-37 checksum refusal that still leaves the upstream bytes installed; the **verified** remedy is removing the installed dir + cache `.gem` + `specifications` entry, then `bundle install`). After the rewrite, a hosted run therefore probes the installed-gem discovery paths (the same ruby-crawler discovery `apply` uses, honoring `--global`/`--global-prefix` like scan's own discovery) for each confirmed gem redirect and judges the materialization against the patch record's `afterHash` file map. Judgment rules: records are found **by uuid** — this run's fetched records first, then the redirect ledger's persisted ones, so a transiently failed `/patches/view` fetch cannot retire the warning (it re-fires on every re-scan until the stale materialization is gone); a materialization with every file at `afterHash` is already patched and never warns (an agent→hosted migration stays quiet by construction), and when several confirmed variant purls resolve to one installed dir, ANY of them judging it patched keeps it quiet; staleness needs **positive evidence** — at least one record file whose bytes were actually read and hash to neither state's expectation — so missing or unreadable files never produce a warning. Warnings emit `redirect_gem_stale_install` (JSON `redirect.warnings[]` + a code-tagged stderr line) in three flavors: a PROJECT-LOCAL dir gets the verified delete-list remedy (installed dir, cache `.gem`, `specifications` entry — plus the project's committed `vendor/cache/<leaf>.gem` when present and not proven to be the patched artifact, since bundler installs from `vendor/cache` in preference to fetching); a SHARED gem-env home gets a caveat that the home is shared machine-wide and prefers migrating the project to a local bundle path over deleting shared files; and a committed `vendor/cache` archive whose sha256 differs from the patched artifact's warns standalone even with no installed dir at all (a fresh checkout with a committed stale cache re-materializes the upstream bytes forever). A stale-flagged purl is additionally **excluded from the same run's `--vex` `assume_applied` set** — the envelope must never attest a CVE its own warning says is live; the purl falls back to normal installed-tree verification (a patched install still attests, a stale one is omitted). The probe is read-only (nothing is deleted) and skipped on `--dry-run` — deliberately explicit, since nothing was rewritten but the ledger fallback could otherwise judge an already-redirected project. Exit code and `status` are unchanged (warning-only, the hosted-refusal posture); a same-run `--vex` may still fail on "nothing to attest" per the embedded-VEX contract.
 
@@ -686,10 +688,10 @@ references from the lockfiles this way — see "Manifest-less VEX (lockfile disc
 
 ### Per-ecosystem wiring matrix
 
-The npm ecosystem has **five lockfile flavors** — all sharing one vendored
-tarball at `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>.tgz`; a
-content-sniffing probe (`npm_flavor`) picks the flavor and the ledger records
-it so `--revert` routes back. The pypi ecosystem similarly routes by lockfile
+The npm ecosystem has **seven lockfile flavors** — all but vlt sharing one vendored
+tarball at `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>.tgz` (vlt gets a
+patched package directory); a content-sniffing probe (`npm_flavor`, `vlt-lock.json`
+first) picks the flavor and the ledger records it so `--revert` routes back. The pypi ecosystem similarly routes by lockfile
 to **six flavors**.
 
 | eco / flavor | vendored artifact | committed wiring | consumption proof |
@@ -701,6 +703,7 @@ to **six flavors**.
 | npm / pnpm LEGACY (lockfileVersion 5.4 = pnpm 7, 6.0 = pnpm 8; flavor `pnpm-legacy`) | (same tarball) | root `package.json` `pnpm.overrides` **+** legacy lock surgery (overrides / root dep + specifiers / packages rekey to a bare `file:` key with recomputed integrity / in-package dep refs). **No `pnpm-workspace.yaml` is written** (pnpm ≤ 8 reads overrides only from package.json). The lock's SPECIFIER is machine-ABSOLUTE — pnpm ≤ 8 absolutizes `file:` overrides itself — surfaced as `vendor_pnpm_legacy_absolute_specifier`. Legacy WORKSPACE locks (`importers:`) refused | same-path `pnpm install --frozen-lockfile --offline`, cold store (byte-stable on pnpm 7.33.5 / 8.15.9). A checkout at a DIFFERENT path fails the frozen check (path-bound specifier) and must run `pnpm install --offline --no-frozen-lockfile` once (the flag matters on CI, where pnpm defaults frozen on), which installs the vendored tarball and re-resolves only the specifier line |
 | npm / bun (`bun.lock`, lockfileVersion 0, 1 or 2 — `vendor_lockfile_version_unsupported` otherwise) | (same tarball) | `bun.lock` only: the packages entry's registry 4-tuple → local 3-tuple with recomputed `sha512`; the entry's `{deps}` meta, the lock's version line and its line endings are preserved. A lock holding `workspace:` packages is refused `vendor_bun_workspace_unsupported` unless lockfileVersion is 2 — Bun 1.2–1.3 resolve a workspace member's local-tarball path relative to the MEMBER (ENOENT on our root-relative path), 1.4 relative to the lockfile, and a committed version-2 lock is the only proof every consumer runs Bun ≥ 1.4 (a deliberate over-approximation: a package declared only by the workspace root would install on version 1 too). The gate fires only on a run that would WRITE a new local tuple, so in-sync re-runs, `already_vendored` skips and `repair` rebuilds on such a lock pass. The detail names the version and the remedy: delete `bun.lock` and re-lock with Bun ≥ 1.4 (an in-place `bun install` keeps the existing lockfileVersion), or `--mode hosted`. Native binary support is described in the next row. `scan`/`get --mode vendored` apply all four refusals BEFORE downloading (see the `get --mode vendored` bullet). Bun 1.1.39–1.3.9 re-save the local tuple WITHOUT its `sha512` on any later lock re-save (`bun add`, `bun install` after a manifest change); the digest-less 2-tuple is recognised as the same wiring — an in-sync re-run stays `already_vendored` and re-pins the digest on disk (no new wiring record) when the committed artifact still holds the bytes the lock was written from — otherwise, as for any stale tuple of ours, the line is re-pinned and the fresh entry carries the new fingerprint — `repair` rebuilds through it, and `vendor --revert` / `rollback` restore the registry line over it (a 2-tuple at ANOTHER uuid is still `vendor_lock_entry_drifted`) | `bun install --frozen-lockfile`, cold cache (the local tarball's sha512 is enforced by Bun ≥ 1.3.10; 1.1.39–1.3.9 install it unverified — the committed artifact is the protection there) |
 | npm / bun binary (`bun.lockb`, native binary format 1, 2 or 3) | (same tarball) | Rewrite matching binary package resolutions and integrity in place; preserve topology and unrelated metadata, update binary offsets and the package metadata hash. Text `bun.lock` takes precedence. `bun_lockb_package` wiring snapshots recover pristine registry metadata for repair and support per-package revert and hosted ↔ vendored migration. Binary discovery and rewrites require no installed Bun runtime. Malformed or unsupported content refuses `vendor_bun_lockb_invalid` before download or takeover. | Frozen installs with the original compatible Bun reader; see `docs/testing/bun-compatibility.md` for the release matrix and historical runtime integrity limits. |
+| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), peer or modifier variant instances (a node with any extra: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's), importer `peer` edges, foreign registries, a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical (checked on 1.2.0, 1.0.10 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
 | cargo | crate dir `<name>-<version>/` (no `.cargo-checksum.json`) | (v5.0) `[patch.crates-io]` path entry in the **workspace-root `Cargo.toml`** (the manifest beside the `Cargo.lock` it detaches — never `.cargo/config*`) **+** Cargo.lock surgery (the `[[package]]` entry's `source`/`checksum` removed and its `version` set to the copy's TAGGED version `<version>+socket.<uuid>` — `<core>+<meta>.socket.<uuid>` when the version already has build metadata — with every lock reference that spells the old version rewritten, formats v1–v4; the copy's own `Cargo.toml` version carries the same tag, so the patched crate sees it in `CARGO_PKG_VERSION`; revert restores the lock byte for byte). Key: always the Socket-owned `<name>-socket-<first 8 hex of the uuid>` with `package = "<name>"` (the full uuid hex when that key is taken), never the bare crate name — cargo lets a config-file `[patch]` item (project, ancestor directory or `$CARGO_HOME`) replace the manifest item with the same key whatever its version, so keys any of those configs use are avoided and a re-run moves an entry off a now-shadowed key; two versions of one crate are wired side by side. Pre-v5 wiring in `.cargo/config.toml` / `.cargo/config` is moved into `Cargo.toml` by a re-run (`vendor`, `scan`/`get --mode vendored`) or `repair` (`cargo_wiring_migrated` note; the ledger's `cargo_patch_entry` record then names `Cargo.toml`); a detached lock entry left unwired by the pre-v5 multi-version overwrite is re-wired the same way (`cargo_wiring_restored`); every revert removes both spellings | `cargo build --locked --offline` on a fresh checkout — single-version manifest `[patch]` also builds with no network on cargo older than 1.56 (the old config-file wiring's floor); two vendored versions of ONE crate need `--offline` on cargo 1.56 and a populated registry index (or network access) on older cargo such as 1.41, which loads the index to tell them apart. Note: path deps build **without** `--cap-lints allow` |
 | golang | module dir `<module>@<version>/` | `go.mod` `replace <module> <ver> => ./.socket/vendor/golang/<uuid>/<module>@<ver>` | `go build` with `GOPROXY=off` + empty `GOMODCACHE` (directory replaces bypass go.sum entirely; survives `go mod tidy`) |
 | composer | package dir `<vendor>/<name>@<version>/` | `composer.lock` only: entry's `dist` → `{type: "path", url, reference: null}`, `source` removed, `transport-options: {symlink: false}` added. `content-hash` unaffected; `composer.json` untouched | `composer install` (from the lock alone, real copy not symlink, works under `--network none`). `composer update <pkg>` reverts it |
@@ -738,6 +741,7 @@ worse, lets a warm cache silently serve unpatched bytes):
 | npm / yarn berry | `checksum: 10c0/<sha512>` (over berry's cache zip) | recomputed by rebuilding berry's deterministic cache-zip from the tarball and hashing it (byte-identical to yarn's own); refused if the lock's `cacheKey`/`compressionLevel` would change the zip |
 | npm / pnpm | `packages[].resolution.integrity` (sha512) | recomputed from the tarball; the versioned `pnpm.overrides` selector pins exactly the patched version |
 | npm / bun | the packages-entry trailing `sha512-…` | recomputed from the tarball; tamper fails the frozen install on Bun ≥ 1.3.10 (URL/local tarball tuples are verified from 1.3.10, registry 4-tuples from 1.2.0 — so on 1.1.39–1.3.9 a hosted or vendored rewrite removes digest enforcement for the patched package; see `docs/testing/bun-compatibility.md`) |
+| npm / vlt | node slot [2] (sha512), slot [3] (resolved) | a `file` node carries none: the committed directory is the artifact, verified against the ledger's file inventory (`vendor_inventory_mismatch` on a planted, removed or changed file); integrity-less by vlt's design, like every `file:` directory dependency |
 | gem | `CHECKSUMS` section (bundler ≥ 2.6 opt-in) | the vendored gem's entry rewritten to bundler's own path-gem form (bare `name (ver)`, sha256 token stripped) so re-locks stay byte-stable; original line in the ledger |
 | pypi / uv | `wheels[].hash`, `sdist.hash`, requires-dist specifiers | single `{filename, hash: sha256-of-our-wheel}`; sdist dropped; dropped specifiers ledgered for revert |
 | pypi / poetry | `files = [{file, hash}]` (2.x) / `[metadata.files]` entry (1.0/1.1) / `[metadata.hashes]` entry (0.12) | replaced with a single `{file, hash: sha256-of-our-wheel}` (or the bare hash for 0.12) in the generation's own table (Poetry ≥ 1.4 verifies the artifact against one listed hash; older writers are flagged `pypi_poetry_integrity_unverified`; stale registry hashes removed) |
@@ -1262,6 +1266,11 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_fetched_missing` | `skipped` (warning) | vendor: the package was not installed; its pristine artifact was fetched per the lockfile resolution (or staged from the committed vendor artifact), integrity-verified, and vendored — the project tree was not touched. For `poetry.lock` (which records hashes but no URLs) the pure-Python wheel's sha256 selects the file through PyPI's JSON API (`SOCKET_PYPI_JSON_API` overrides the endpoint); Poetry 0.12's bare `[metadata.hashes]` names no wheel, so those locks still need an installed copy (`vendor_fetch_unverifiable`). |
 | `vendor_fetch_failed` | `failed` | vendor: the lockfile-resolved fetch was attempted and failed (HTTP error, size cap, integrity mismatch, or a PRESENT-but-corrupt committed artifact — pointed at `socket-patch repair`). A MISSING committed artifact no longer lands here: it falls through to the ledger-recovered registry fetch. Suppresses the duplicate `package_not_installed` skip. |
 | `vendor_fetch_unverifiable` | `skipped` (warning) | vendor: the lockfile records no usable integrity for the missing package; nothing was fetched (fail-closed) and the `package_not_installed` skip follows. |
+| `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
+| `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
+| `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (`··` default-registry ids, vlt 0.0.0-19 … 1.0.0-rc.8): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
+| `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
+| `vendor_artifact_gitignored` | `failed` | vendor (vlt): inside a git work tree, `git check-ignore --no-index` reports the new artifact's uuid directory as ignored by a rule its own `.gitignore` cannot override (such as a root `.socket/` rule; the detail names the rule). Remedy: drop that rule for `.socket/vendor/`. Refused before any write. |
 | `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
 | `vendor_artifact_missing` | `skipped` (warning) / `failed` | vendor: the committed artifact is gone — the registry resolution is recovered from the ledger and the artifact rebuilt (warning); repair `--offline` with no local source surfaces it as the per-entry failure instead. |
 | `vendor_artifact_corrupt` | `failed` | repair `--offline`: the committed artifact fails verification (member afterHashes or the ledger's whole-file sha256) and no local source can rebuild it. Online repairs rebuild instead. |
diff --git a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
index 6c3f2769..2af7d2c7 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
@@ -39,7 +39,8 @@
 //!   - a tampered committed member is omitted (`vendor_hash_mismatch`);
 //!   - the wiring reverted with the ledger and artifact left behind is
 //!     `vendor_unwired`, also under `--no-verify`;
-//!   and the shared matrix runs over a vendored checkout.
+//!
+//!   The shared matrix also runs over a vendored checkout.
 
 use std::path::{Path, PathBuf};
 
diff --git a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
index eef67fa6..08231166 100644
--- a/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_rollback_hosted/vlt.rs
@@ -297,7 +297,7 @@ async fn vlt_rollback_removes_the_prod_copy_keeps_the_optional_one() {
         );
         assert_eq!(
             advisory_details(&doc),
-            [expected.clone()],
+            std::slice::from_ref(expected),
             "{verb} {extra:?}: {doc:#}"
         );
         assert_eq!(
diff --git a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
index 5a771c10..02a378f0 100644
--- a/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
+++ b/crates/socket-patch-cli/tests/vex_e2e_common/vlt.rs
@@ -42,6 +42,9 @@
 
 use std::path::{Component, Path, PathBuf};
 
+// `e2e_vex_lockfile` also loads `mod.rs` at its root; this copy keeps the
+// standalone capstones self-contained.
+#[allow(clippy::duplicate_mod)]
 #[path = "mod.rs"]
 mod common;
 pub use common::*;
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index 4038cf42..77fd139f 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -14,7 +14,7 @@ The backticked slug in each row is the value `-e`/`--ecosystems` accepts (e.g.
 
 | Ecosystem | agent (`--mode agent`) | vendored (`--mode vendored`) | hosted (`--mode hosted`) |
 |-----------|------------------------|------------------------------|--------------------------|
-| npm (`npm`) — pnpm / yarn / berry / bun | ✅ any install layout; `setup` postinstall hook | ✅ six lockfile flavors: package-lock, yarn classic, yarn berry (node-modules linker; PnP refused), pnpm v9, pnpm legacy v5.4/v6.0 (`pnpm 7/8` — frozen installs are path-bound because those majors absolutize `file:` override specifiers; moved checkouts run one `pnpm install --offline --no-frozen-lockfile`, surfaced as `vendor_pnpm_legacy_absolute_specifier`), bun text `bun.lock` lockfileVersion 0/1/2 and native binary `bun.lockb` revisions 1/2/3 (binary locks stay binary; text workspace vendoring requires lockfileVersion 2 — see [Bun compatibility](testing/bun-compatibility.md)). Rush monorepos refused (`vendor_rush_unsupported`) — see [Rush notes](#npm-rush-monorepos) | ✅ package-lock / npm-shrinkwrap, pnpm-lock.yaml and legacy shrinkwrap.yaml (pnpm majors 1–12; block and flow resolutions), yarn classic, yarn berry, bun — pnpm, berry, and bun carry constraints, see [npm hosted-mode notes](#npm-hosted-mode-notes) |
+| npm (`npm`) — pnpm / yarn / berry / bun / vlt | ✅ any install layout, vlt's `node_modules/.vlt` store included (every store copy, copy-on-write); `setup` postinstall hook | ✅ seven lockfile flavors: package-lock, yarn classic, yarn berry (node-modules linker; PnP refused), pnpm v9, pnpm legacy v5.4/v6.0 (`pnpm 7/8` — frozen installs are path-bound because those majors absolutize `file:` override specifiers; moved checkouts run one `pnpm install --offline --no-frozen-lockfile`, surfaced as `vendor_pnpm_legacy_absolute_specifier`), bun text `bun.lock` lockfileVersion 0/1/2 and native binary `bun.lockb` revisions 1/2/3 (binary locks stay binary; text workspace vendoring requires lockfileVersion 2 — see [Bun compatibility](testing/bun-compatibility.md)), vlt `vlt-lock.json` lockfileVersion 0/1 (patched package directories for direct dependencies of the root or a workspace member; transitive targets refused — see [vlt notes](#npm-vlt-notes)). Rush monorepos refused (`vendor_rush_unsupported`) — see [Rush notes](#npm-rush-monorepos) | ✅ package-lock / npm-shrinkwrap, pnpm-lock.yaml and legacy shrinkwrap.yaml (pnpm majors 1–12; block and flow resolutions), yarn classic, yarn berry, bun, vlt (`vlt-lock.json` without `lockfileVersion`, 0 or 1) — pnpm, berry, bun and vlt carry constraints, see [npm hosted-mode notes](#npm-hosted-mode-notes) and [vlt notes](#npm-vlt-notes) |
 | PyPI (`pypi`) — uv / poetry / pdm / pipenv / pip | ✅ `.pth` startup hook via `setup` | ✅ uv project/script locks, PEP 751 `pylock.toml` / `pylock.<name>.toml`, poetry, pdm, pipenv (Pipenv 2018 or later — every `Pipfile.lock` category is rewired, lock-only checkouts included; Pipenv 2023+ does not hash-check local wheels — `vendor_integrity_unverified`; a venv still holding the upstream release is reported as `pypi_pipenv_stale_install`; see [Pipenv compatibility](testing/pipenv-compatibility.md)), and requirements.txt. Native uv vendoring requires uv ≥ 0.2.35 (the `[[package]]` lock grammar); hosted mode covers native `uv.lock` from uv 0.1.45 (the first release whose `uv lock` writes one) and requirements from uv 0.0.5; see [uv compatibility](testing/uv-compatibility.md). | ✅ requirements.txt including hash continuations, uv project/script locks, and PEP 751 locks. Version/source ambiguity is refused; see [uv compatibility](testing/uv-compatibility.md). Poetry 1.x and 2.x locks are supported; Poetry 0.x ignores URL sources and is refused. See [Poetry compatibility](testing/poetry-compatibility.md). Pipenv `Pipfile.lock` (pipfile-spec 6 — Pipenv 7 and later; `path` references for 7–11, `file` from 2018; lock-only checkouts and Pipenv's out-of-tree venv are discovered; a warm venv that Pipenv will not reinstall over warns `redirect_pypi_stale_install`; see [Pipenv compatibility](testing/pipenv-compatibility.md)). `pdm.lock` is supported for the lock formats PDM 0.12–1.4 and 2.8.1+ write (`lock_version` 2 / 4.3–4.5.1); the identity-losing 3.1 / 4.0–4.2 formats (PDM 1.8–2.7) are refused. PDM 2.8.0 writes an indistinguishable `4.3` lock but shares that identity-loss bug, so a rewritten 2.8.0 lock crashes `pdm sync` — upgrade to ≥ 2.8.1. See [PDM compatibility](testing/pdm-compatibility.md). |
 | Cargo (`cargo`) | ✅ in-place + `.cargo-checksum.json` rewrite (shared registry-cache caveat — see [Cargo: shared registry cache](#cargo-shared-registry-cache)) | ✅ `[patch.crates-io]` path entry in the root `Cargo.toml` (v5; per-version Socket keys; pre-v5 `.cargo/config*` wiring migrates on re-run) | ✅ per-patch sparse registry (`[registries.socket-patch-<uuid>]` + Cargo.lock source/checksum); direct dependencies only — a crate another dependency also pulls in is refused, use `--mode vendored`; with no `Cargo.lock` the graph is unknown, so only a project whose sole dependency is the patched crate is redirected |
 | RubyGems (`gem`) | ✅ Bundler plugin via `setup` — needs bundler ≥ 2.2 (1.x cannot load `plugin ... path:` directives; `setup` refuses below the floor and `setup --check` red-flags a wired 1.x project) | ✅ Gemfile + Gemfile.lock path pair (`Gemfile` spelling only — a `gems.rb` project cannot vendor yet) | ✅ per-dep `source` block — edits `gems.rb` + `gems.locked` when present (bundler prefers them over `Gemfile`; spellings that diverge beyond Socket's own edits fail closed with `redirect_gem_gemfile_spellings_diverge`); the `CHECKSUMS` pin needs bundler ≥ 2.6 (older locks get a `redirect_gem_no_checksums_section` warning); a stale pre-redirect materialization that `bundle install` would reuse instead of refetching is flagged `redirect_gem_stale_install` with a prescriptive remedy (see CLI_CONTRACT.md's "Gem stale-install guard") |
@@ -115,6 +115,9 @@ The backticked slug in each row is the value `-e`/`--ecosystems` accepts (e.g.
   tuples from 1.2.0), so on 1.1.39–1.3.9 a hosted or vendored rewrite removes digest
   enforcement for the patched package. Every boundary here is measured against real
   Bun releases — see [Bun compatibility](testing/bun-compatibility.md).
+- **vlt** — `vlt-lock.json` default-registry nodes of the patched `name@version` keep
+  their DepID and get the patched sha512 in slot [2] and the hosted URL in slot [3]; see
+  [vlt notes](#npm-vlt-notes).
 
 ## npm: Rush monorepos
 
@@ -135,6 +138,132 @@ Editing a Rush lock outside `rush update` desyncs the `pnpmShrinkwrapHash` in
 warning flags this; the redirect survives the refresh — pnpm keeps locked resolutions for
 unchanged specifiers).
 
+## npm: vlt notes
+
+[vlt](https://www.vlt.sh) is supported in agent, vendored and hosted mode on every
+release from 0.0.0-1 to 1.2.0, excluding the broken and never-published releases listed
+in [vlt compatibility](testing/vlt-compatibility.md#releases). vlt's lock is
+`vlt-lock.json`; its installed tree is `node_modules/.vlt/<DepID>/node_modules/<name>`
+plus the hidden lock `node_modules/.vlt-lock.json`, which vlt trusts as the installed
+graph. From 1.2.0 vlt also keeps a machine-wide content store (`store-linker`, hardlinked
+on Linux by default).
+
+**Eras.** The lock format and the DepID grammar changed several times, and every mode
+reads all of them:
+
+| Era | Releases | `lockfileVersion` | DepIDs |
+|---|---|---|---|
+| A0 | 0.0.0-1, 0.0.0-11 … 0.0.0-18 | absent | legacy `·`/`§` (`··name@ver`) |
+| A | 0.0.0-19 … 1.0.0-rc.8 | `0` | legacy, default registry `''` |
+| B | 1.0.0-rc.9 … rc.14 | `0` | legacy, default registry `npm` |
+| C | rc.15 … rc.32 | `1` | tilde (`~npm~name@ver`), 3-tuples |
+| D | rc.33 … 1.0.7 | `1` | tilde, the registry URL in slot [3] |
+| E | 1.0.8 … 1.1.1 | `1` | tilde, hashed peer extras (`~peer.<hex>`) |
+| F | 1.2.0 | `1` | as E, plus the global store |
+
+A lock socket-patch cannot read exactly as vlt does (a UTF-8 BOM, another
+`lockfileVersion`, a `nodes` section outside vlt's one-node-per-line layout) is refused:
+`redirect_vlt_lock_unsupported` (hosted) or `vendor_lockfile_version_unsupported`
+(vendored). Agent mode never needs the lock.
+
+**Hosted: the slot rewrite.** Only nodes on vlt's default registry (the `''` / `npm`
+segment, or a URL segment equal to the lock's scalar `registry`) are redirected, every
+peer and modifier variant of the `name@version` included. Instances under a named alias,
+a scoped registry or jsr stay untouched (`redirect_vlt_custom_registry_skipped`) and keep
+the run's `--vex` from attesting the package. `options` is never edited: vlt fails `vlt
+ci` on any change there. Before anything is written, each artifact is fetched the way
+vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, raw body hashed); vlt
+fails `EINTEGRITY` on a content-encoded response, so such a dependency is withheld
+(`redirect_vlt_artifact_unverifiable`) instead of pinning a lock `vlt ci` cannot install.
+
+**Hosted: which lock confirms.** vlt drives a project when its install state
+(`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is present or no other npm-family
+lock is. Then only `vlt-lock.json` can confirm a redirect, and a dependency vlt refuses is
+refused for every lock. With a sibling `package-lock.json` (or another npm-family lock)
+and no vlt install state, both are rewritten and `redirect_vlt_sibling_lockfiles` asks you
+to delete the lock your installs do not use.
+
+**Hosted: reinstall and heal.** vlt never re-extracts an installed package when only its
+lock integrity or URL changes, so after a rewrite the installed tree is stale. `scan` and
+`get --mode hosted` remove `node_modules/.vlt-lock.json` and each stale
+`node_modules/.vlt/<DepID>` of a Socket-owned node, so the next `vlt install` extracts the
+patched packages; `rollback` and `remove` do the same for the registry bytes. Nothing
+outside the project, no link target and no copy socket-patch cannot judge is ever
+removed. A stale copy of an optional dependency is kept, because `vlt install` does not
+put back a removed optional dependency; the advisory says to run `vlt ci` instead, and to
+upgrade to vlt 1.0.5 first when every dependency is optional (earlier releases install no
+optional dependency from the lock of such a project). `--no-vlt-install-cleanup` (or
+`SOCKET_NO_VLT_INSTALL_CLEANUP`) keeps the tree. `redirect_vlt_reinstall_required` says
+what happened and what to run; a stale or unchecked copy is never attested by the run's
+`--vex`.
+
+**Hosted: vlt behaviors to know.**
+- The pin survives `vlt ci`, frozen installs and `vlt install <new>`, except that
+  1.0.0-rc.6 … rc.17 drop slot [3] of every default-registry node on a re-save and keep
+  the patched integrity: the next `vlt ci` then fails `EINTEGRITY` (loudly, never
+  silently unpatched) until `scan --mode hosted` re-pins, and `rollback` reports drift
+  with that remedy.
+- `vlt update` re-resolves an unchanged exact spec from 1.0.8 on, dropping the redirect
+  (and the run's VEX then no longer attests it); 0.0.0-20 … 1.0.7 keep the locked node.
+- vlt enforces tarball integrity only on a cold fetch (every release except 0.0.0-1): a
+  warm cache keyed by URL serves stale bytes even when the integrity differs. Hosted
+  artifact URLs are immutable per artifact for that reason.
+- 0.0.0-16 … 0.0.0-24 ignore `vlt-lock.json` unless `vlt.json` declares `"modifiers": {}`
+  (`redirect_vlt_old_lockfile_ignored`), rc.7 … rc.29 re-resolve from public npm when a
+  scalar `registry` is configured (`redirect_vlt_scalar_registry_ignored`), and a lock
+  with no `lockfileVersion` is silently re-resolved by vlt ≥ rc.15
+  (`redirect_vlt_lockfile_version_missing`). Each keeps the run's VEX from attesting.
+- **Documented gap:** a `lockfileVersion` 1 lock that sets both `registry` and
+  `registries.npm` may come from rc.15 … rc.29 (which ignore the lock) or from ≥ rc.30
+  (which do not); the lock cannot tell them apart, and 1.x users commonly set both, so
+  no warning fires for it.
+- From rc.33 every install, `vlt ci` included, needs registry config (`vlt.json`
+  `config.registries.npm` / `config.registry`, `VLT_REGISTRY`, or `vlt setup`), and from
+  1.0.5 `registries.npm` specifically. socket-patch never writes `vlt.json`.
+
+**Vendored: directory artifacts (the D19 layout).** A direct dependency of the root or of
+a workspace member is vendored as a patched package directory,
+`.socket/vendor/npm/<uuid>/<name>-<version>/node_modules/<name>/`, never a tarball: vlt
+links a `file:` directory in place, and the extra `node_modules/<name>` level lets a
+package that `require()`s its own name resolve itself. The payload's `devDependencies`
+are dropped from its `package.json` (vlt would otherwise try to install them). The uuid
+directory carries a `.gitignore` that re-includes the payload (`!*`) against the project's
+own ignores (`node_modules`, `dist/`, `*.map`, …) while ignoring the links vlt creates
+inside it, and a `.gitattributes` that turns EOL conversion off so an `autocrlf` checkout
+stays byte-exact. The lock's node becomes a `file` node, the importer edges and the
+importers' `package.json` specs move to the `file:` path, and every moved entry is placed
+where vlt's own serializer puts it, so `vlt ci` keeps the lock byte-identical. Transitive
+targets are refused (`vendor_vlt_transitive_unsupported`: vlt silently reverts
+transitive lock surgery), as are peer or modifier variants, importer peer edges, foreign
+registries and a dependency declared in several fields (`vendor_lock_entry_unsupported`);
+use hosted mode for those. From vlt 1.0.8 a root dependency with resolved peers carries a
+`~peer.<hex>` extra even with one peer context (a workspace member's from rc.15), and
+vendored mode refuses such a variant instance today. Before rc.6 vlt cannot reinstall a
+vendored `file:` dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A
+locks), and A0 locks are refused.
+
+**Agent mode.** `apply` and `rollback` patch every store copy of a `name@version`
+(legacy and tilde DepIDs, peer and modifier variants, transitive-only packages) and
+replace each file instead of writing through it, so vlt 1.2's shared store (hardlinked on
+Linux) and every other project linked to it keep their bytes. A patch survives `vlt
+install`, `install <new>`, `uninstall` and frozen installs; `vlt ci` and deleting
+`node_modules` restore the upstream bytes, which is what the setup hook is for.
+
+**Setup.** vlt gets npm's `npx @socketsecurity/socket-patch apply --silent --ecosystems
+npm` postinstall hook, wired at the workspace root only (vlt runs the root hook once per
+install that changes the graph, never on a no-op install). vlt before 1.0.0-rc.13 never
+runs a root `postinstall` without an `install` script: `setup` still wires it and warns
+`vlt_root_scripts_not_run`. A failing hook aborts and rolls back the whole `vlt install`.
+
+**Locale.** vlt sorts its lock with the process locale for one key, so byte-stability is
+claimed only for `en`-equivalent locales (`LANG` unset, `C`, `POSIX` or `en_US`); every vlt
+test job sets `LANG=C` and `LC_ALL=C`. Vendored ownership and revert match by entry text,
+so they do not depend on the order.
+
+**Compatibility of ledgers.** vlt ledgers (`redirect_vlt_lock_node` hosted edits and
+`flavor: "vlt"` vendored entries) require the socket-patch release that adds vlt support:
+an older release does not understand them.
+
 ## Maven & NuGet caveats
 
 Honest limits of the Maven and NuGet flows — documented behavior, not bugs:
diff --git a/docs/testing/hosted-production-e2e.md b/docs/testing/hosted-production-e2e.md
index 10b8a6f6..7a43b921 100644
--- a/docs/testing/hosted-production-e2e.md
+++ b/docs/testing/hosted-production-e2e.md
@@ -70,7 +70,7 @@ failure instead of N confusing ones that look like CLI regressions.
 
 | Ecosystem | Hosted mode | Free patches in production | Suite coverage |
 |-----------|-------------|----------------------------|----------------|
-| npm | ✅ | ✅ many | ✅ npm, npm-shrinkwrap, pnpm, yarn classic, yarn berry, bun |
+| npm | ✅ | ✅ many | ✅ npm, npm-shrinkwrap, pnpm, yarn classic, yarn berry, bun; vlt probe-driven (see [vlt](#vlt-the-serve-encoding-gate)) |
 | PyPI | ✅ (requirements.txt, uv.lock, Pipfile.lock) | ✅ many | ✅ requirements.txt, uv.lock, Pipfile.lock |
 | RubyGems | ✅ | ✅ (this suite pins one purl/UUID: `activestorage@6.0.3`; the 2026-08-18 republish covers more versions) | ✅ full bundler install proof |
 | Cargo | ✅ | ❌ **none** (tier emptied 2026-08-28) | canary only |
@@ -121,6 +121,28 @@ Two supported hosted shapes are deliberately **not** covered here:
   The berry leg here pins `nodeLinker: node-modules`, matching the documented
   support boundary.
 
+## vlt: the serve-encoding gate
+
+`vlt_pinned_matrix_production_hosted_install_proof` pins the public minimist
+patch in a vlt 1.2.0 project (`vlt.json` with `registries.npm`). vlt hashes the
+wire body of a tarball and sends `accept-encoding: gzip;q=1.0, identity;q=0.5`,
+so it fails `EINTEGRITY` whenever patch.socket.dev (or its CDN) serves the
+artifact content-encoded. The leg therefore probes the artifact the way vlt
+does (the core `fetch_artifact_probe`) and branches on what it sees:
+
+| Probe | Asserted |
+|---|---|
+| `Content-Encoding` other than identity | the clean refusal: `redirect_vlt_artifact_unverifiable` naming the encoding, `vlt-lock.json` byte-identical, no redirect ledger. With `SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED=1` the encoded response is itself a failure. |
+| identity | the full proof: slot [2] is the served sha512, and a fresh checkout's `vlt ci` installs the patched minimist |
+
+So the leg neither breaks nor goes vacuous when the serve fix
+(`Cache-Control: no-transform`) deploys. As of 2026-09-26 production still
+re-gzips the artifact and the leg runs the refusal branch. Under
+`SOCKET_PATCH_HOSTED_E2E_STRICT=1` a missing `SOCKET_PATCH_VLT_E2E_JS` fails
+instead of skipping, and CI runs the leg's output through
+`scripts/check-vlt-legs.py`. `.github/workflows/vlt-serve-watchdog.yml` probes
+the same artifact every 6 hours; see [vlt compatibility](vlt-compatibility.md).
+
 ## Known issues this suite surfaced
 
 All were found by running against real production; none is a test bug.
@@ -205,10 +227,12 @@ runs only where it is explicitly asked for.
 |----------|--------|
 | `SOCKET_PATCH_HOSTED_E2E_STRICT=1` | Turn every "toolchain missing" soft-skip into a hard failure. **CI sets this** — a required check must never report green on an unexercised leg. |
 | `SOCKET_PATCH_HOSTED_E2E_CANARY_STRICT=1` | Fail when cargo/maven/nuget/composer gain their first free published patch. |
+| `SOCKET_PATCH_VLT_E2E_JS` / `SOCKET_PATCH_VLT_E2E_VERSION` | The vlt release the vlt leg runs (`node <vlt.js>`, exact `--version`); CI installs 1.2.0 with `scripts/install-vlt.sh`. |
+| `SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED=1` | Fail the vlt leg while the artifact is served content-encoded. Unset until the serve fix is verified in production. |
 
 ### Toolchains
 
-`npm`, `corepack` (pnpm + yarn classic + yarn berry), `bun`, `uv`,
+`npm`, `corepack` (pnpm + yarn classic + yarn berry), `bun`, `vlt` (Node ≥ 22.22), `uv`,
 `ruby` + `bundle` (**≥ 2.6** — `bundle lock --add-checksums` emits the CHECKSUMS
 section the gem rewrite pins into), `go`.
 
@@ -239,6 +263,15 @@ rewrites, the 1.3.10 digest boundary — lives in `ci.yml`'s hermetic
 `e2e_redirect_bun_build` legs and in `bun-compatibility.yml`; see
 [Bun compatibility](bun-compatibility.md).
 
+The job also installs vlt 1.2.0 (`scripts/install-vlt.sh`: `npm pack`, the
+tarball's sha512 checked against the registry and
+`scripts/vlt-historical-integrity.json`), exports `SOCKET_PATCH_VLT_E2E_JS`,
+`_VERSION` and `_REQUIRED=1`, checks the passing attempt's vlt leg with
+`scripts/check-vlt-legs.py`, and then runs the vendored vlt proof
+(`e2e_vendored_production -- --include-ignored vlt_pinned_matrix`) with the
+same retries. Release-era coverage lives in `ci.yml`'s `e2e` vlt rows and in
+`vlt-compatibility.yml`; see [vlt compatibility](vlt-compatibility.md).
+
 ### Escape hatch — production is down and this is blocking merges
 
 Set a repository variable (Settings → Secrets and variables → Actions →
diff --git a/docs/testing/vendored-production-e2e.md b/docs/testing/vendored-production-e2e.md
index 3c97c99c..8ec8191b 100644
--- a/docs/testing/vendored-production-e2e.md
+++ b/docs/testing/vendored-production-e2e.md
@@ -64,6 +64,7 @@ hosted suite).
 | yarn classic | minimist@1.2.2 | `yarn install --frozen-lockfile --offline` | ✅ full |
 | yarn berry (node-modules) | minimist@1.2.2 | `yarn install --immutable --check-cache` | ✅ full |
 | bun (text lockfile) | minimist@1.2.2 | `bun install --frozen-lockfile` | ✅ full |
+| vlt 1.2.0 (`vlt-lock.json`) | minimist@1.2.2 | fresh checkout, `vlt ci` (lock byte-stable) | ✅ full (`vlt_pinned_matrix_production_vendored_install_proof`) |
 | pip (requirements.txt) | urllib3@1.26.18 | `pip install --no-index -r requirements.txt` | ✅ full |
 | uv (uv.lock) | urllib3@1.26.18 | `uv sync --frozen --offline` | ✅ full |
 | bundler | activestorage@6.0.3 | frozen `bundle install`, fresh empty `BUNDLE_PATH` | ✅ full |
@@ -174,11 +175,22 @@ OSes, 1.1.45 and 1.2.23 on Linux) plus the production native matrix in
 `bun-compatibility.yml` (16 releases × 3 OS in hosted and vendored mode —
 vendored is manifest-free) — see [Bun compatibility](bun-compatibility.md).
 
+The vlt leg vendors the service's directory artifact into the D19 layout
+(`.socket/vendor/npm/<uuid>/minimist-1.2.2/node_modules/minimist`) and proves
+it with a fresh `vlt ci`. The CLI's own download decodes the transfer, so the
+serve-encoding gate that blocks hosted vlt (see the
+[hosted doc](hosted-production-e2e.md#vlt-the-serve-encoding-gate)) does not
+apply. CI runs it in the `hosted-e2e` job
+(`--test e2e_vendored_production -- --include-ignored vlt_pinned_matrix`,
+through `scripts/check-vlt-legs.py`); the per-release evidence is in
+[vlt compatibility](vlt-compatibility.md).
+
 ### Environment knobs
 
 | Variable | Effect |
 |----------|--------|
 | `SOCKET_PATCH_VENDORED_E2E_STRICT=1` | Turn every "toolchain missing" soft-skip into a hard failure. |
+| `SOCKET_PATCH_VLT_E2E_JS` / `SOCKET_PATCH_VLT_E2E_VERSION` | The vlt release the vlt leg runs (`node <vlt.js>`, exact `--version`). |
 | `SOCKET_PATCH_VENDORED_E2E_CANARY_STRICT=1` | Fail when cargo/maven/nuget/composer gain their first free published patch. |
 
 The suite forces `SOCKET_NO_CONFIG=true` and scrubs every ambient `SOCKET_*`
@@ -188,7 +200,7 @@ token is used.
 
 ### Toolchains
 
-`npm`, `pnpm`, `corepack` (yarn classic + berry), `bun`, `uv`, `python3` (pip),
+`npm`, `pnpm`, `corepack` (yarn classic + berry), `bun`, `vlt` (Node ≥ 22.22), `uv`, `python3` (pip),
 `ruby` + `bundle`, `go`.
 
 ### Network egress
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 01fb0a36..5e93a14e 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -4,7 +4,137 @@
 [vlt](https://www.vlt.sh) projects (`vlt-lock.json`, the `node_modules/.vlt`
 store and, from vlt 1.2.0, the global content store). This page records the
 real-vlt evidence: which releases are supported, which capstone legs run on
-which release, and the vlt behaviors the legs pin.
+which release, and the vlt behaviors the legs pin. What each mode does with a
+vlt project, and the caveats users meet, are in
+[vlt notes](../ecosystems.md#npm-vlt-notes).
+
+## Formats
+
+| Era | Releases | `lockfileVersion` | DepID grammar | Default-registry node slot [3] |
+|---|---|---|---|---|
+| A0 | 0.0.0-1, 0.0.0-11 … 0.0.0-18 | absent | `·` / `§` + `encodeURIComponent` (`··name@ver`) | absent |
+| A | 0.0.0-19 … 1.0.0-rc.8 | `0` | as A0; `ṗ:N` peer extras from rc.6 | absent (3-tuples) |
+| B | 1.0.0-rc.9 … 1.0.0-rc.14 | `0` | as A, default segment `npm` (`·npm·name@ver`) | absent |
+| C | 1.0.0-rc.15 … 1.0.0-rc.32 | `1` | `~` / `+` + `_x` escapes (`~npm~name@ver`), `peer.N` | absent |
+| D | 1.0.0-rc.33 … 1.0.7 | `1` | as C | the registry URL |
+| E | 1.0.8 … 1.1.1 | `1` | as C, `peer.<16 hex>` | the registry URL |
+| F | 1.2.0 | `1` | as E; the global store (`store-linker`) | the registry URL |
+
+Hosted mode writes the patched sha512 into slot [2] and the hosted URL into
+slot [3] of every default-registry node (appending slot [3] to a 3-tuple);
+vendored mode turns the node into a `file` node for the D19 directory
+`.socket/vendor/npm/<uuid>/<name>-<version>/node_modules/<name>`. vlt reads
+CRLF locks and writes LF; a BOM-prefixed lock is unreadable by vlt and by
+socket-patch alike.
+
+## What is verified where
+
+| Layer | Where | What it proves |
+|---|---|---|
+| Unit and golden | `socket-patch-core` lib tests; `tests/redirect_golden.rs` (`npm/vlt/*`, shared with depscan's TS rewriter), `tests/redirect_golden_reverse_replay.rs`, `tests/vlt_locks.rs` (captured locks of every era) | DepID codec, collation (`tests/fixtures/vlt/collation-golden.json`), the node-line grammar, the hosted slot rewrite and its slot revert, vendored lock surgery and its inverse, lock inventory, VEX discovery |
+| Hermetic suites | `in_process_redirect`, `in_process_vendor`, `in_process_rollback_hosted`, `in_process_vendor_bun_takeover`, `repair_vendor_flavors_e2e`, `e2e_vex_lockfile`, `setup_invariants`, … (the 3-OS `test` job) | every code of the vlt support, the artifact preflight against a wiremock server, the heal, takeovers, repair, the CLI surface |
+| Real-vlt capstones | the five binaries below plus the vlt legs of `e2e_hosted_production` / `e2e_vendored_production` | real installs: `vlt ci` and frozen installs of patched locks, byte-stable locks, integrity enforcement, the heal on a warm tree, re-saves, upgrades, the hardlinked global store, the setup hook |
+| Native backtest | `scripts/backtest-vlt.py` | the production service end to end, per release, mode and project shape, against an oracle of the documented boundaries |
+
+`docs/testing/vlt-coverage.json` maps every vlt code and advisory variant,
+every mode × command cell and every era × OS cell to the tests or CI rows that
+assert it; `scripts/tests/test_vlt_coverage.py` checks that each code is
+asserted and each named test or row exists.
+
+## CI wiring
+
+- **Required:** ci.yml's `e2e` job has 35 vlt rows (`vlt:` pins the release,
+  `vlt_store_linker:` / `vlt_upgrade:` the knobs; `test_filter:
+  --include-ignored vlt_pinned_matrix`). "Setup vlt" packs the release,
+  checks its sha512 against the registry and `scripts/vlt-historical-integrity.json`
+  (`scripts/install-vlt.sh`), installs it under a prefix and exports
+  `SOCKET_PATCH_VLT_E2E_JS` / `_VERSION` / `_REQUIRED=1` with `LANG=C`. Every
+  row's output goes through `scripts/check-vlt-legs.py`.
+  `scripts/tests/test_ci_vlt_rows.py` (run by `lint-ecosystems`) pins the rows.
+- **Required:** `hosted-e2e` installs vlt 1.2.0 the same way, runs
+  `vlt_pinned_matrix_production_hosted_install_proof` inside the production
+  suite (probe-driven: the clean refusal while patch.socket.dev re-encodes the
+  artifact, the full install proof once it does not) and
+  `vlt_pinned_matrix_production_vendored_install_proof`, both through the leg
+  checker. `SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED` stays unset until the
+  serve fix is verified.
+- **Advisory:** `.github/workflows/vlt-compatibility.yml` (path-filtered pull
+  requests and pushes to main, nightly, and `workflow_dispatch` with
+  `versions` / `shapes` / `modes`). A path-filtered workflow cannot be a
+  required check. Jobs: `build` (the capstones and the CLI, once per OS);
+  `install-proof` (every capstone on 31 Linux, 11 macOS and 15 Windows
+  releases, the Node engine floors 22.22.0 / 22.9.0 / 22.0.0 with the collation
+  golden, and the store linkers auto / hardlink / copy / unpack / a `/dev/shm`
+  cache root); `native` (the backtest against production, artifacts
+  `vlt-results-<os>-<vlt>` in depscan's capture `result.json` shape);
+  `lock-diff` (the same cell's `vlt-lock.json` must be byte-identical on Linux,
+  macOS and Windows); `matrix-coverage` (every era × suite × OS).
+- **Nightly:** `canary` runs every capstone on `vlt@latest` on 3 OS (only the
+  exact-version pin is relaxed), fails when npm lists a vlt release that the
+  Releases table below neither supports nor excludes, and, once a release
+  writes a `lockfileVersion` other than 0 or 1, requires hosted mode to refuse
+  it (`redirect_vlt_lock_unsupported`). `downgrade` (advisory) has the latest
+  published socket-patch run `rollback` and `vendor --revert` on vlt ledgers
+  written by the build: each must leave the project untouched or fully
+  reverted, never half-reverted.
+- **Watchdog:** `.github/workflows/vlt-serve-watchdog.yml` probes the public
+  minimist artifact every 6 hours as vlt fetches it and fails on a
+  content-encoded response or a sha512 other than the API's. It is
+  `continue-on-error` until the serve fix is verified in production.
+
+## Running locally
+
+```sh
+export SOCKET_PATCH_VLT_E2E_JS=$(scripts/install-vlt.sh 1.2.0 /tmp/vlt-1.2.0)
+export SOCKET_PATCH_VLT_E2E_VERSION=1.2.0 SOCKET_PATCH_VLT_E2E_REQUIRED=1 LANG=C LC_ALL=C
+for s in e2e_redirect_vlt_build e2e_vendor_vlt_build mode_migration_vlt e2e_safety_vlt e2e_vlt; do
+  cargo test -p socket-patch-cli --test $s -- --include-ignored vlt_pinned_matrix 2>&1 | tee vlt-leg.log
+  python3 scripts/check-vlt-legs.py --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json vlt-leg.log
+done
+
+# The production backtest (no Socket API token needed):
+python3 scripts/backtest-vlt.py --cli target/debug/socket-patch \
+  --versions 1.2.0 1.0.0-rc.14 --modes hosted vendored agent --jobs 2 --out /tmp/vlt-bt
+```
+
+The backtest writes `captures/<vlt>-<mode>-<shape>/{result.json,cli-output.json,tree/,logs/}`
+and `summary.{json,md}`, and exits non-zero when any cell's verdict differs
+from the oracle. While patch.socket.dev re-encodes the artifact, hosted cells
+record `blocked-by-server-encoding`, and only when the cell's own probe saw a
+non-identity `Content-Encoding` and the CLI refused cleanly;
+`--identity-mirror` previews the hosted proof through a loopback mirror that
+fetches the artifact un-encoded (never an import source). `--serve-probe` is
+the watchdog's probe, `--canary-checks` the canary's watchdogs, and
+`--downgrade-cli <published socket-patch>` the downgrade scenario.
+
+## The capstone registry harness
+
+The capstones serve npmjs bytes from a local wiremock registry `R` and write
+`vlt.json` per era, because before rc.33 bare specs ignore `registries.npm`:
+
+| Era window | vlt.json | Hermetic | Notes |
+|---|---|---|---|
+| ≤ 0.0.0-13 | flat `{"registry": R}` | yes | `vlt-workspaces.json` for workspaces ≤ 0.0.0-12 |
+| 0.0.0-14 … rc.6 | `{"config":{"registry": R}}` (+ `"modifiers":{}` for 0.0.0-16 … 24, except the ignored-lock leg) | yes | URL-segment DepIDs carry R's port |
+| rc.7 … rc.29 | `{"config":{"registry": "https://registry.npmjs.org/"}}` | no: lock-driven installs reach public npm | the dead-registry assertions log `skip:non-hermetic-registry`; the patch service stays local |
+| rc.30 … rc.32 | `{"config":{"registry": R}}` | yes | URL-segment DepIDs |
+| ≥ rc.33 | `{"config":{"registries":{"npm": R}}}` (+ `config.registry = R` for rc.33 … 1.0.4) | yes | |
+
+`scripts/backtest-vlt.py`'s `write_vlt_json` follows the same table against
+public npm (a `registry` equal to vlt's npmjs default is left out: vlt strips
+it from the lock anyway).
+
+## depscan parity
+
+depscan's TypeScript rewriter (`registry-rewrite/vlt.ts`) and its SBOM
+recognition implement the same spec.
+`crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/*` is the single source of truth: depscan runs every case through its golden
+test from the `submodules/socket-patch` pin, with **no** `TS_LAGGING` or
+`TS_WARNING_DRIFT` entry for vlt, and `redirect_golden_reverse_replay.rs`
+proves that socket-patch rolls back what either implementation wrote. The
+`vlt-results-*` artifacts and the cross-OS locks are imported into depscan's
+fixtures (`audit-captures.py`, `generate-fixtures.py --captures`) once the serve
+fix is live.
 
 ## Real-vlt capstones
 
@@ -146,4 +276,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 The legs run on Linux, macOS and Windows. The Linux-default `auto` store
 linker (hardlinks, `safety/linux_auto`) cannot run on macOS or Windows; it is
 covered on Linux by the CI `e2e` row `e2e_safety_vlt` on ubuntu with vlt
-1.2.0, and SP-9 ran it in `node:24-slim` under Docker (see the SP-9 report).
+1.2.0 and by `vlt-compatibility.yml`'s store-linker rows, and was also run
+locally in `node:24-slim` under Docker. Windows-only legs
+(`setup/hook_abort_leaves_no_staging`, the junction and dir-symlink store
+cases) run on the Windows rows.
diff --git a/docs/testing/vlt-coverage.json b/docs/testing/vlt-coverage.json
new file mode 100644
index 00000000..02684d0b
--- /dev/null
+++ b/docs/testing/vlt-coverage.json
@@ -0,0 +1,426 @@
+{
+  "comment": "The vlt coverage map (DESIGN §8.4): every §2.3 code and advisory detail variant, every mode × command cell and every era × OS cell, mapped to the tests (fn names; `golden:<dir>` for a redirect golden case under crates/socket-patch-core/tests/fixtures/redirect/) or CI rows (`ci:<suite>:<os>:<vlt>` in ci.yml's e2e job, `compat:<os>:<vlt>` in vlt-compatibility.yml's install-proof job) that assert them. scripts/tests/test_vlt_coverage.py checks every name.",
+  "codes": {
+    "redirect_vlt_lock_unsupported": [
+      "scan_redirect_refuses_vlt_lock_v2",
+      "vlt_takeover_refusal_before_revert",
+      "golden:npm/vlt/lock-version-unsupported",
+      "golden:npm/vlt/bom-refusal",
+      "golden:npm/vlt/non-canonical-layout-refusal"
+    ],
+    "redirect_vlt_missing_sha512": [
+      "missing_sha512_and_empty_sha512_refuse",
+      "golden:npm/vlt/missing-sha512"
+    ],
+    "redirect_vlt_entry_not_found": [
+      "scan_redirect_vlt_drives_entry_not_found_sibling_rewrite_does_not_confirm"
+    ],
+    "redirect_vlt_entry_vendored": [
+      "vlt_dry_run_over_vendored_project_previews_the_wet_takeover"
+    ],
+    "redirect_vlt_unsupported_lock_key": [
+      "an_unsupported_instance_refuses_every_instance_of_the_dep_only",
+      "residual_gate_refuses_when_the_parsed_node_is_not_the_spliced_line",
+      "scan_redirect_vlt_sibling_package_lock_vlt_installed_does_not_confirm_refused",
+      "vlt_decides_before_binary_bun_and_a_refused_uuid_is_never_confirmed"
+    ],
+    "redirect_vlt_custom_registry_skipped": [
+      "scan_redirect_vlt_foreign_instance_vex_not_attested",
+      "vlt_pinned_matrix_hosted_named_alias_untouched",
+      "vlt_pinned_matrix_hosted_scoped_registry_untouched",
+      "vlt_pinned_matrix_hosted_jsr_untouched",
+      "golden:npm/vlt/custom-registry-skipped"
+    ],
+    "redirect_vlt_old_lockfile_ignored": [
+      "scan_redirect_rewrites_vlt_lock_a0",
+      "scan_redirect_vlt_old_lockfile_vex_not_attested",
+      "old_lockfile_ignored_counts_only_empty_and_registry_url_segments",
+      "vlt_pinned_matrix_hosted_old_lockfile_ignored"
+    ],
+    "redirect_vlt_scalar_registry_ignored": [
+      "vlt_pinned_matrix_hosted_mirror_registries_npm",
+      "golden:npm/vlt/scalar-registry-warning",
+      "golden:npm/vlt/scalar-registry-v0-with-registries-npm"
+    ],
+    "redirect_vlt_lockfile_version_missing": [
+      "scan_redirect_rewrites_vlt_lock_a0",
+      "scan_redirect_vlt_a0_vex_not_attested",
+      "golden:npm/vlt/lock-absent-version-warning"
+    ],
+    "redirect_vlt_sibling_lockfiles": [
+      "scan_redirect_vlt_sibling_package_lock_ambiguous",
+      "a_bun_lockb_on_disk_is_a_sibling_outside_files",
+      "vlt_pinned_matrix_migration_pm_switch_npm_to_vlt"
+    ],
+    "redirect_vlt_no_lockfile": [
+      "golden:npm/vlt/no-lockfile-vlt-json",
+      "golden:npm/vlt/hidden-lock-sentinel",
+      "golden:npm/vlt/hidden-lock-sentinel-only"
+    ],
+    "redirect_vlt_artifact_unverifiable": [
+      "scan_redirect_vlt_artifact_content_encoding_refused",
+      "scan_redirect_vlt_artifact_sha512_mismatch",
+      "scan_redirect_vlt_artifact_http_404",
+      "scan_redirect_vlt_artifact_http_500",
+      "scan_redirect_vlt_artifact_fetch_error",
+      "scan_redirect_vlt_artifact_already_pinned_failure_left_pinned",
+      "every_failure_reason",
+      "vlt_pinned_matrix_hosted_content_encoding_refused",
+      "vlt_pinned_matrix_production_hosted_install_proof"
+    ],
+    "redirect_vlt_reinstall_required": [
+      "scan_redirect_vlt_heal_advisory_texts_exact",
+      "vlt_hosted_remove_restores_and_emits_the_advisory",
+      "vlt_hosted_rollback_dry_run_keeps_the_store_and_wet_human_run_heals",
+      "vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy"
+    ],
+    "vendor_vlt_transitive_unsupported": [
+      "vendor_vlt_refuses_transitive",
+      "target_analysis_refusals",
+      "every_lock_decidable_refusal_is_reported_per_npm_purl",
+      "vlt_pinned_matrix_vendored_transitive_refused"
+    ],
+    "vendor_vlt_lock_out_of_sync": [
+      "vendor_vlt_out_of_sync",
+      "every_lock_decidable_refusal_is_reported_per_npm_purl",
+      "get_vendored_vlt_refusal_visible_under_silent"
+    ],
+    "vendor_vlt_legacy_lockfile": [
+      "vendor_vlt_legacy_lockfile_warning",
+      "the_legacy_era_warns_and_wires_with_its_own_grammar",
+      "vlt_pinned_matrix_vendored_legacy_lockfile_warning"
+    ],
+    "vendor_flavor_changed": [
+      "vendor_vlt_refuses_flavor_changed",
+      "flavor_change_to_or_from_vlt_refuses_before_any_write",
+      "the_ledger_decides_before_the_lock",
+      "vlt_pinned_matrix_migration_flavor_changed"
+    ],
+    "vendor_artifact_gitignored": [
+      "vendor_vlt_refuses_gitignored_payload",
+      "a_gitignored_payload_refuses_and_unwinds",
+      "a_root_socket_ignore_refuses_before_any_write"
+    ],
+    "vlt_root_scripts_not_run": [
+      "setup_vlt_before_rc13_emits_the_definite_advisory",
+      "setup_vlt_without_a_usable_vlt_reads_the_lock",
+      "setup_vlt_advisory_prints_on_stderr_in_human_mode",
+      "vlt_pinned_matrix_setup_root_scripts_advisory"
+    ]
+  },
+  "advisoryVariants": {
+    "redirect_vlt_reinstall_required: stale copies removed": [
+      "scan_redirect_vlt_heal_advisory_texts_exact",
+      "scan_redirect_vlt_warm_tree_invalidates_stale_store",
+      "vlt_pinned_matrix_hosted_warm_tree_invalidates"
+    ],
+    "redirect_vlt_reinstall_required: cleanup skipped (--no-vlt-install-cleanup, SOCKET_NO_VLT_INSTALL_CLEANUP)": [
+      "scan_redirect_vlt_no_install_cleanup_flag_keeps_tree",
+      "scan_redirect_vlt_env_socket_no_vlt_install_cleanup",
+      "vlt_pinned_matrix_hosted_no_cleanup_stays_stale"
+    ],
+    "redirect_vlt_reinstall_required: dry run, nothing removed": [
+      "scan_redirect_vlt_heal_dry_run_deletes_nothing_emits_iii"
+    ],
+    "redirect_vlt_reinstall_required: copies could not be checked": [
+      "scan_redirect_vlt_heal_undeterminable_node_modules_symlink_not_deleted",
+      "scan_redirect_vlt_undeterminable_vex_not_attested"
+    ],
+    "redirect_vlt_reinstall_required: none stale": [
+      "scan_redirect_vlt_rerun_does_not_invalidate_healthy_tree"
+    ],
+    "redirect_vlt_reinstall_required: optional copies kept": [
+      "scan_redirect_vlt_heal_keeps_stale_optional_instance",
+      "scan_redirect_vlt_heal_removes_the_prod_instance_keeps_the_optional_one",
+      "vlt_pinned_matrix_hosted_optional_dependency_heal"
+    ],
+    "redirect_vlt_reinstall_required: rollback / remove (patched copies removed or kept)": [
+      "vlt_hosted_round_trip",
+      "vlt_rollback_keeps_a_patched_optional_copy",
+      "vlt_rollback_removes_the_prod_copy_keeps_the_optional_one",
+      "vlt_hosted_remove_restores_and_emits_the_advisory"
+    ],
+    "redirect_vlt_reinstall_required: hosted to vendored takeover": [
+      "vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy",
+      "vlt_failed_vendor_after_the_takeover_revert_still_heals_the_store",
+      "vlt_pinned_matrix_hosted_then_vendored_optional_takeover"
+    ],
+    "redirect_vlt_artifact_unverifiable: content-encoding": [
+      "scan_redirect_vlt_artifact_content_encoding_refused"
+    ],
+    "redirect_vlt_artifact_unverifiable: sha512 mismatch": [
+      "scan_redirect_vlt_artifact_sha512_mismatch"
+    ],
+    "redirect_vlt_artifact_unverifiable: http status": [
+      "scan_redirect_vlt_artifact_http_404",
+      "scan_redirect_vlt_artifact_http_500"
+    ],
+    "redirect_vlt_artifact_unverifiable: fetch error": [
+      "scan_redirect_vlt_artifact_fetch_error",
+      "scan_redirect_vlt_artifact_redirect_chain_11_fails"
+    ],
+    "redirect_vlt_artifact_unverifiable: offline": [
+      "every_failure_reason"
+    ],
+    "redirect_vlt_artifact_unverifiable: left pinned by an earlier run": [
+      "scan_redirect_vlt_artifact_already_pinned_failure_left_pinned"
+    ],
+    "vlt_root_scripts_not_run: definite (vlt --version below rc.13)": [
+      "setup_vlt_before_rc13_emits_the_definite_advisory",
+      "vlt_pinned_matrix_setup_root_scripts_advisory"
+    ],
+    "vlt_root_scripts_not_run: may (lock sniff)": [
+      "setup_vlt_without_a_usable_vlt_reads_the_lock",
+      "setup_vlt_rc13_and_later_reads_the_lock_it_would_not_write",
+      "setup_vlt_version_probe_times_out_to_the_lock_sniff"
+    ],
+    "vlt_root_scripts_not_run: none (unparseable --version)": [
+      "setup_vlt_unparseable_version_emits_no_advisory"
+    ]
+  },
+  "modeCommand": {
+    "hosted/scan": [
+      "scan_redirect_rewrites_vlt_lock_v1",
+      "scan_redirect_rewrites_vlt_lock_v0",
+      "vlt_pinned_matrix_hosted_scan_fresh_ci"
+    ],
+    "hosted/get": [
+      "scan_redirect_vlt_artifact_get_uuid_driver",
+      "vlt_pinned_matrix_hosted_get_uuid_fresh_ci"
+    ],
+    "hosted/rollback": [
+      "vlt_hosted_round_trip",
+      "vlt_rollback_after_comma_move",
+      "vlt_rollback_after_e0_flag_change",
+      "vlt_pinned_matrix_hosted_rollback_byte_exact"
+    ],
+    "hosted/remove": [
+      "vlt_hosted_remove_restores_and_emits_the_advisory"
+    ],
+    "hosted/vex": [
+      "hosted_every_vlt_era_manifestless_evidence_cells",
+      "vlt_pinned_matrix_hosted_manifestless_vex"
+    ],
+    "hosted/takeover (vendored to hosted)": [
+      "vlt_vendored_then_scan_hosted_takeover_round_trips_to_registry",
+      "vlt_vendored_then_get_hosted_takeover_round_trips_to_registry",
+      "vlt_pinned_matrix_migration_vendored_then_hosted"
+    ],
+    "vendored/vendor": [
+      "vendor_vlt_direct_v1",
+      "vendor_vlt_direct_v0",
+      "vendor_vlt_workspace_member",
+      "vendor_vlt_alias_edge"
+    ],
+    "vendored/scan": [
+      "vlt_pinned_matrix_vendored_scan_fresh_ci"
+    ],
+    "vendored/get": [
+      "get_uuid_vendored_vlt_vendors_refuses_and_agent_bypasses",
+      "vlt_pinned_matrix_vendored_get_build_fresh_ci",
+      "vlt_pinned_matrix_vendored_get_service_fresh_ci"
+    ],
+    "vendored/revert": [
+      "vendor_vlt_revert_byte_exact",
+      "vendor_vlt_revert_identity_already_reverted",
+      "vendor_vlt_revert_cross_grammar_drift_detail",
+      "vlt_pinned_matrix_vendored_revert_byte_exact"
+    ],
+    "vendored/repair": [
+      "vlt_repair_rebuilds_a_deleted_dir",
+      "vlt_repair_reconstructs_the_ledger_from_the_lock",
+      "vlt_pinned_matrix_vendored_repair_rebuilds"
+    ],
+    "vendored/remove": [
+      "remove_reverts_a_vlt_vendored_entry"
+    ],
+    "vendored/list": [
+      "list_json_labels_a_vlt_vendored_entry"
+    ],
+    "vendored/vex": [
+      "vendored_every_vlt_era_manifestless_evidence_cells",
+      "vlt_pinned_matrix_vendored_manifestless_vex"
+    ],
+    "vendored/takeover (hosted to vendored)": [
+      "vlt_hosted_then_scan_vendored_takeover_round_trips_to_registry",
+      "vlt_vendored_preflight_refuses_before_the_hosted_revert",
+      "vlt_pinned_matrix_migration_hosted_then_vendored"
+    ],
+    "vendored/scan --prune": [
+      "scan_prune_keeps_a_wired_vlt_uuid_and_sweeps_an_unwired_one"
+    ],
+    "agent/scan": [
+      "vlt_pinned_matrix_agent_scan_apply_rollback_list",
+      "vlt_pinned_matrix_agent_lockfile_supplement"
+    ],
+    "agent/get": [
+      "vlt_pinned_matrix_agent_get_and_remove"
+    ],
+    "agent/apply": [
+      "apply_and_rollback_reach_every_vlt_variant_copy",
+      "vlt_layout_prints_informational_note_in_human_mode",
+      "vlt_pinned_matrix_agent_install_then_apply_patches_file"
+    ],
+    "agent/rollback": [
+      "apply_and_rollback_reach_every_vlt_variant_copy",
+      "vlt_pinned_matrix_safety_agent_rollback"
+    ],
+    "agent/remove": [
+      "vlt_pinned_matrix_agent_get_and_remove"
+    ],
+    "agent/list": [
+      "vlt_pinned_matrix_agent_scan_apply_rollback_list"
+    ],
+    "agent/vex": [
+      "vlt_pinned_matrix_agent_reruns_and_vex"
+    ],
+    "agent/crawl": [
+      "find_by_purls_resolves_vlt_store_transitives",
+      "crawl_all_inventories_vlt_store_exactly_once",
+      "test_decode_vlt_dep_id_table"
+    ],
+    "setup": [
+      "setup_detects_vlt_from_lockfile",
+      "setup_detects_vlt_from_vlt_json",
+      "setup_vlt_workspace_only_updates_root",
+      "vlt_pinned_matrix_setup_hook_fires_per_reify",
+      "vlt_pinned_matrix_setup_hook_failure"
+    ]
+  },
+  "eraOs": {
+    "A0/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:0.0.0-16",
+      "compat:ubuntu-latest:0.0.0-1",
+      "compat:ubuntu-latest:0.0.0-11",
+      "compat:ubuntu-latest:0.0.0-16",
+      "compat:ubuntu-latest:0.0.0-18"
+    ],
+    "A0/macos": [
+      "compat:macos-latest:0.0.0-16"
+    ],
+    "A0/windows": [
+      "compat:windows-latest:0.0.0-11"
+    ],
+    "A/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:0.0.0-32",
+      "ci:e2e_vendor_vlt_build:ubuntu-latest:0.0.0-32",
+      "ci:mode_migration_vlt:ubuntu-latest:0.0.0-32",
+      "ci:e2e_vlt:ubuntu-latest:0.0.0-32",
+      "compat:ubuntu-latest:0.0.0-19",
+      "compat:ubuntu-latest:0.0.0-24",
+      "compat:ubuntu-latest:0.0.0-25",
+      "compat:ubuntu-latest:0.0.0-30",
+      "compat:ubuntu-latest:0.0.0-32",
+      "compat:ubuntu-latest:1.0.0-rc.1",
+      "compat:ubuntu-latest:1.0.0-rc.5",
+      "compat:ubuntu-latest:1.0.0-rc.6",
+      "compat:ubuntu-latest:1.0.0-rc.8"
+    ],
+    "A/macos": [
+      "compat:macos-latest:0.0.0-30",
+      "compat:macos-latest:1.0.0-rc.8"
+    ],
+    "A/windows": [
+      "compat:windows-latest:0.0.0-19",
+      "compat:windows-latest:0.0.0-30"
+    ],
+    "B/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:1.0.0-rc.14",
+      "ci:e2e_vendor_vlt_build:ubuntu-latest:1.0.0-rc.14",
+      "ci:mode_migration_vlt:ubuntu-latest:1.0.0-rc.14",
+      "ci:e2e_vlt:ubuntu-latest:1.0.0-rc.12",
+      "compat:ubuntu-latest:1.0.0-rc.9",
+      "compat:ubuntu-latest:1.0.0-rc.12",
+      "compat:ubuntu-latest:1.0.0-rc.13",
+      "compat:ubuntu-latest:1.0.0-rc.14"
+    ],
+    "B/macos": [
+      "compat:macos-latest:1.0.0-rc.13",
+      "compat:macos-latest:1.0.0-rc.14"
+    ],
+    "B/windows": [
+      "ci:e2e_vendor_vlt_build:windows-latest:1.0.0-rc.14",
+      "ci:mode_migration_vlt:windows-latest:1.0.0-rc.14",
+      "ci:e2e_vlt:windows-latest:1.0.0-rc.14",
+      "compat:windows-latest:1.0.0-rc.9",
+      "compat:windows-latest:1.0.0-rc.13",
+      "compat:windows-latest:1.0.0-rc.14"
+    ],
+    "C/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:1.0.0-rc.32",
+      "ci:e2e_vendor_vlt_build:ubuntu-latest:1.0.0-rc.32",
+      "ci:e2e_vlt:ubuntu-latest:1.0.0-rc.32",
+      "compat:ubuntu-latest:1.0.0-rc.15",
+      "compat:ubuntu-latest:1.0.0-rc.18",
+      "compat:ubuntu-latest:1.0.0-rc.22",
+      "compat:ubuntu-latest:1.0.0-rc.29",
+      "compat:ubuntu-latest:1.0.0-rc.30",
+      "compat:ubuntu-latest:1.0.0-rc.32"
+    ],
+    "C/macos": [
+      "compat:macos-latest:1.0.0-rc.15",
+      "compat:macos-latest:1.0.0-rc.22"
+    ],
+    "C/windows": [
+      "compat:windows-latest:1.0.0-rc.15",
+      "compat:windows-latest:1.0.0-rc.18",
+      "compat:windows-latest:1.0.0-rc.22"
+    ],
+    "D/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:1.0.4",
+      "ci:e2e_vendor_vlt_build:ubuntu-latest:1.0.4",
+      "ci:e2e_vlt:ubuntu-latest:1.0.7",
+      "compat:ubuntu-latest:1.0.0-rc.33",
+      "compat:ubuntu-latest:1.0.4",
+      "compat:ubuntu-latest:1.0.5",
+      "compat:ubuntu-latest:1.0.7"
+    ],
+    "D/macos": [
+      "compat:macos-latest:1.0.0-rc.33"
+    ],
+    "D/windows": [
+      "compat:windows-latest:1.0.0-rc.33",
+      "compat:windows-latest:1.0.5"
+    ],
+    "E/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:1.1.1",
+      "compat:ubuntu-latest:1.0.8",
+      "compat:ubuntu-latest:1.0.10",
+      "compat:ubuntu-latest:1.1.1"
+    ],
+    "E/macos": [
+      "compat:macos-latest:1.0.8",
+      "compat:macos-latest:1.1.1"
+    ],
+    "E/windows": [
+      "compat:windows-latest:1.0.8",
+      "compat:windows-latest:1.0.10",
+      "compat:windows-latest:1.1.1"
+    ],
+    "F/linux": [
+      "ci:e2e_redirect_vlt_build:ubuntu-latest:1.2.0",
+      "ci:e2e_vendor_vlt_build:ubuntu-latest:1.2.0",
+      "ci:mode_migration_vlt:ubuntu-latest:1.2.0",
+      "ci:e2e_safety_vlt:ubuntu-latest:1.2.0",
+      "ci:e2e_safety_vlt:ubuntu-latest:1.2.0",
+      "ci:e2e_vlt:ubuntu-latest:1.2.0",
+      "compat:ubuntu-latest:1.2.0"
+    ],
+    "F/macos": [
+      "ci:e2e_redirect_vlt_build:macos-latest:1.2.0",
+      "ci:e2e_vendor_vlt_build:macos-latest:1.2.0",
+      "ci:mode_migration_vlt:macos-latest:1.2.0",
+      "ci:e2e_safety_vlt:macos-latest:1.2.0",
+      "ci:e2e_vlt:macos-latest:1.2.0",
+      "compat:macos-latest:1.2.0"
+    ],
+    "F/windows": [
+      "ci:e2e_redirect_vlt_build:windows-latest:1.2.0",
+      "ci:e2e_vendor_vlt_build:windows-latest:1.2.0",
+      "ci:mode_migration_vlt:windows-latest:1.2.0",
+      "ci:e2e_safety_vlt:windows-latest:1.2.0",
+      "ci:e2e_vlt:windows-latest:1.2.0",
+      "compat:windows-latest:1.2.0"
+    ]
+  }
+}
diff --git a/scripts/backtest-vlt.py b/scripts/backtest-vlt.py
new file mode 100644
index 00000000..72f20773
--- /dev/null
+++ b/scripts/backtest-vlt.py
@@ -0,0 +1,1738 @@
+#!/usr/bin/env python3
+"""Native vlt / public Socket patch compatibility, with no service doubles.
+
+Every (vlt release, mode, project shape) cell builds an isolated project with
+a REAL vlt release (`npm pack`, sha512 checked against the registry, run as
+`node vlt.js`), runs the socket-patch CLI against the public free
+minimist@1.2.2 patch on the production service, and proves the result with
+the same vlt. The verdict is checked against `expected_verdict`, an oracle of
+the DOCUMENTED boundaries (docs/testing/vlt-compatibility.md, DESIGN §2.1),
+never the CLI's own codes, so a CLI regression that refuses a supported cell
+(or patches a refused one) fails the cell.
+
+Modes: hosted (`scan|get --mode hosted`), vendored (`--mode vendored`) and
+agent (`--mode agent`).
+
+Checks (hosted): serveEncodingIdentity (the cell's own curl probe of the
+artifact, fetched the way vlt fetches it), cliSuccess, publishedPatch,
+referenceWritten, lockFormatPreserved, othersUntouched, freshCi /
+freshOrdinary (cold caches: patched bytes, lock byte-stable), tamperedDigest
+(a wrong slot [2] fails a cold `vlt ci`), vexManifestless, repeatStableLock,
+warmOrdinary / warmCi (the project's own tree after the heal),
+rollbackByteIdentical and rollbackOriginalBytes.
+Checks (vendored): cliSuccess, publishedPatch, referenceWritten,
+lockFormatPreserved, freshCi, freshOrdinary, vexManifestless,
+repeatStableLock, repair (a deleted payload is rebuilt and installs patched),
+rollbackByteIdentical (`vendor --revert`) and rollbackOriginalBytes.
+Checks (agent): cliSuccess, manifestWritten, lockUnchanged, patchedBytes,
+survivesNoopInstall, repeatStableLock, rollbackByteIdentical and
+rollbackOriginalBytes.
+
+Hosted cells whose expected verdict is `patched` first probe the artifact
+(`accept-encoding: gzip;q=1.0, identity;q=0.5`, no decoding). While the
+service re-encodes it, vlt would fail `EINTEGRITY`, so the only correct CLI
+outcome is the clean refusal (`redirect_vlt_artifact_unverifiable`, nothing
+written): the cell records `blocked-by-server-encoding`. That verdict is
+never recorded without the probe seeing a non-identity `Content-Encoding`;
+any other hosted failure is an error.
+
+Rows are written in the shape of depscan's capture-vlt.py `result.json`
+(`os, vlt, mode, shape, verdict, codes, manifestSha256, patches` plus the
+`tree/` of SBOM inputs), so `audit-captures.py` and `generate-fixtures.py
+--captures` read them directly.
+
+`--identity-mirror` serves the production API and artifacts through a
+loopback mirror that fetches the artifact with `accept-encoding: identity`
+(the state the serve fix produces). Its rows name the mirror and pin
+loopback URLs: a local preview of the hosted proof, never an import source.
+`--downgrade-cli <published socket-patch>` runs the downgrade scenario
+instead of the matrix: vlt ledgers written by `--cli` must be either left
+untouched or fully reverted by the published release, never half-reverted.
+`--canary-checks` runs the nightly canary's watchdogs: every published vlt
+release is listed as supported or excluded, and a lock with a
+`lockfileVersion` other than 0 or 1 is refused (`redirect_vlt_lock_unsupported`).
+`--diff-locks DIR...` compares the `vlt-lock.json` of the same cell across
+operating systems in downloaded result rows (they must be byte-identical).
+`--serve-probe` is the serve watchdog: it fetches the public minimist
+artifact the way vlt does and fails unless it is identity-encoded with the
+API's sha512.
+"""
+
+import argparse
+import base64
+import concurrent.futures
+from datetime import datetime, timezone
+import gzip
+import hashlib
+import http.server
+import json
+import os
+from pathlib import Path
+import platform
+import re
+import shutil
+import subprocess
+import sys
+import threading
+import time
+import urllib.error
+import urllib.request
+
+ROOT = Path(__file__).resolve().parents[1]
+LEG_MANIFEST = ROOT / 'crates' / 'socket-patch-cli' / 'tests' / 'vlt-leg-manifest.json'
+HISTORICAL_INTEGRITY = Path(__file__).with_name('vlt-historical-integrity.json')
+
+VERSIONS = ['0.0.0-16', '0.0.0-32', '1.0.0-rc.14', '1.0.0-rc.32', '1.0.4', '1.0.10', '1.2.0']
+MODES = ['hosted', 'vendored', 'agent']
+PURL = 'pkg:npm/minimist@1.2.2'
+UUID = '80630680-4da6-45f9-bba8-b888e0ffd58c'
+NAME = 'minimist'
+VERSION = '1.2.2'
+TARGET = f'{NAME}@{VERSION}'
+API_URL = 'https://patches-api.socket.dev'
+PATCH_HOST = 'https://patch.socket.dev'
+NPM_REGISTRY = 'https://registry.npmjs.org/'
+# An alias whose URL is not the default registry (vlt treats an alias whose
+# URL equals the lock's scalar `registry` as the default one).
+ACME_REGISTRY = 'https://registry.yarnpkg.com/'
+VLT_ACCEPT_ENCODING = 'gzip;q=1.0, identity;q=0.5'
+BLOCKED = 'blocked-by-server-encoding'
+VERDICTS = ['patched', 'safe-refusal', 'unsafe', 'error', 'unsupported', BLOCKED]
+COMMAND_TIMEOUT = 600
+VEX_PRODUCT = 'pkg:npm/vlt-patch-backtest@1.0.0'
+OPTIONAL_HELD = 'unpatched copies of optional dependencies'
+OPTIONAL_ONLY_LOCK = ('installs no optional dependency from the lock of a project that declares '
+                      'only optional dependencies')
+
+
+# ---------------------------------------------------------------------------
+# Releases.
+
+def version_key(version):
+    """Semver precedence of a vlt release (`0.0.0-16`, `1.0.0-rc.14`, `1.2.0`)."""
+    match = re.fullmatch(r'(\d+)\.(\d+)\.(\d+)(?:-(rc\.)?(\d+))?', version)
+    if not match:
+        raise ValueError(f'not a vlt release version: {version!r}')
+    core = tuple(int(match.group(i)) for i in (1, 2, 3))
+    if match.group(5) is None:
+        return core + (1, 0)
+    return core + (0, int(match.group(5)))
+
+
+def at_least(version, floor):
+    return version_key(version) >= version_key(floor)
+
+
+def between(version, low, high):
+    return version_key(low) <= version_key(version) <= version_key(high)
+
+
+def era_of(version):
+    """DESIGN §1.1 era of the release that wrote the lock."""
+    for floor, era in (('1.2.0', 'F'), ('1.0.8', 'E'), ('1.0.0-rc.33', 'D'),
+                       ('1.0.0-rc.15', 'C'), ('1.0.0-rc.9', 'B'), ('0.0.0-19', 'A')):
+        if at_least(version, floor):
+            return era
+    return 'A0'
+
+
+def lockfile_version(era):
+    return None if era == 'A0' else 0 if era in ('A', 'B') else 1
+
+
+def release_lists(manifest_path=LEG_MANIFEST):
+    """(supported, excluded) releases of the leg manifest, which is derived
+    from the Releases table of docs/testing/vlt-compatibility.md."""
+    data = json.loads(Path(manifest_path).read_text(encoding='utf-8'))
+    return list(data['supported']), list(data['excluded'])
+
+
+def release_status(version, supported, excluded):
+    """'supported', 'excluded' or 'unlisted' (DESIGN §1.1 exclusion list:
+    the named releases plus every `0.0.0-0.<timestamp>` build)."""
+    if version in excluded or re.fullmatch(r'0\.0\.0-0\.\d+', version):
+        return 'excluded'
+    return 'supported' if version in supported else 'unlisted'
+
+
+def unlisted_releases(published, supported, excluded):
+    """Published releases the matrix does not know: the canary watchdog."""
+    return [v for v in published if release_status(v, supported, excluded) == 'unlisted']
+
+
+# ---------------------------------------------------------------------------
+# Shapes (a subset of depscan's capture-vlt.py SHAPES, with the same names and
+# the same oracle; the production patch is minimist@1.2.2 only, so shapes that
+# need a scoped, transitive-only or peer-bearing patch are left to the
+# hermetic suites and the local capture).
+
+def manifest(name='vlt-patch-backtest', **sections):
+    data = dict(name=name, version='1.0.0', private=True)
+    for key in ('dependencies', 'devDependencies', 'optionalDependencies'):
+        if sections.get(key):
+            data[key] = sections[key]
+    return json.dumps(data, indent=2) + '\n'
+
+
+def shape(files, runtime, modes=MODES, members=(), **extra):
+    """`files` maps a project path to package.json text; `runtime` lists the
+    (importer dir, dependency name) pairs whose installed copy must hold the
+    patched bytes."""
+    return dict(files=files, runtime=list(runtime), modes=list(modes), members=list(members),
+                **extra)
+
+
+SHAPES = {
+    'direct': shape({'package.json': manifest(dependencies={NAME: VERSION})}, [('.', NAME)]),
+    'dev': shape({'package.json': manifest(devDependencies={NAME: VERSION})}, [('.', NAME)]),
+    'optional': shape({'package.json': manifest(optionalDependencies={NAME: VERSION})},
+                      [('.', NAME)], optional=True, optional_only=True),
+    'optional-mixed': shape({'package.json': manifest(dependencies={'left-pad': '1.3.0'},
+                                                      optionalDependencies={NAME: VERSION})},
+                            [('.', NAME)], optional=True),
+    'alias': shape({'package.json': manifest(dependencies={'mm': f'npm:{TARGET}'})},
+                   [('.', 'mm')], no_bare_ids=True),
+    'two-versions': shape({'package.json': manifest(
+        dependencies={NAME: VERSION, 'other': 'npm:minimist@1.2.8'})}, [('.', NAME)]),
+    'workspace': shape({'package.json': manifest(dependencies={NAME: VERSION}),
+                        'packages/a/package.json': manifest('a', dependencies={NAME: VERSION})},
+                       [('.', NAME), ('packages/a', NAME)], members=['packages/a']),
+    'workspace-member-vendored': shape(
+        {'package.json': manifest(),
+         'packages/a/package.json': manifest('a', dependencies={NAME: VERSION})},
+        [('packages/a', NAME)], modes=['vendored'], members=['packages/a']),
+    'crlf-lock': shape({'package.json': manifest(dependencies={NAME: VERSION})}, [('.', NAME)],
+                       crlf_lock=True),
+    'custom-registry': shape({'package.json': manifest(dependencies={NAME: f'acme:{TARGET}'})},
+                             [('.', NAME)], registries={'acme': ACME_REGISTRY},
+                             no_bare_ids=True, from_version='0.0.0-14'),
+    'lockfile-only': shape({'package.json': manifest(dependencies={NAME: VERSION})},
+                           [('.', NAME)], lockfile_only=True),
+    'hosted-then-vendored': shape({'package.json': manifest(dependencies={NAME: VERSION})},
+                                  [('.', NAME)], modes=['vendored'], before='hosted',
+                                  from_version='0.0.0-19'),
+    'vendored-then-hosted': shape({'package.json': manifest(dependencies={NAME: VERSION})},
+                                  [('.', NAME)], modes=['hosted'], before='vendored',
+                                  from_version='0.0.0-19'),
+    'get-uuid': shape({'package.json': manifest(dependencies={NAME: VERSION})}, [('.', NAME)],
+                      driver='get'),
+}
+
+
+# ---------------------------------------------------------------------------
+# The oracle: the documented boundaries only, never the CLI's codes.
+
+def applicable(version, mode, shape_name):
+    spec = SHAPES[shape_name]
+    if mode not in spec['modes']:
+        return False
+    if spec.get('optional_only') and between(version, '0.0.0-24', '0.0.0-29'):
+        return False  # these releases write no vlt-lock.json for an optional-only project
+    return 'from_version' not in spec or at_least(version, spec['from_version'])
+
+
+def expected_verdict(version, mode, shape_name):
+    """The verdict DESIGN §2.1 promises, or None when the cell is not part of
+    the matrix."""
+    if not applicable(version, mode, shape_name):
+        return None
+    spec = SHAPES[shape_name]
+    if mode == 'agent':
+        # Agent mode patches installed files: the scan lists a lockfile-only
+        # package and skips it.
+        return 'safe-refusal' if spec.get('lockfile_only') else 'patched'
+    if shape_name == 'custom-registry':
+        return 'safe-refusal'
+    if mode == 'vendored' and era_of(version) == 'A0':
+        return 'safe-refusal'
+    return 'patched'
+
+
+def lock_era(version, shape_name):
+    """The era the CLI sniffs from the lock: an era-A lock whose only
+    registry ids are `npm:` aliases or a named registry has no `··` id, which
+    is what tells A from B."""
+    era = era_of(version)
+    return 'B' if era == 'A' and SHAPES[shape_name].get('no_bare_ids') else era
+
+
+def hosted_lock_warnings(version, shape_name):
+    """The lock-level warnings DESIGN §3.8 derives from the lock and vlt.json
+    the cell writes (a default-valued `registry` never reaches the lock)."""
+    spec = SHAPES[shape_name]
+    era = era_of(version)
+    text = write_vlt_json(version, spec)
+    data = json.loads(text) if text else {}
+    settings = data.get('config', data)
+    registry = settings.get('registry')
+    scalar = isinstance(registry, str) and registry != NPM_REGISTRY
+    npm = isinstance((settings.get('registries') or {}).get('npm'), str)
+    v0 = lockfile_version(era) in (None, 0)
+    legacy_ids = era in ('A0', 'A') and (scalar or not spec.get('no_bare_ids'))
+    codes = []
+    if era == 'A0':
+        codes.append('redirect_vlt_lockfile_version_missing')
+    if v0 and legacy_ids and 'modifiers' not in data:
+        codes.append('redirect_vlt_old_lockfile_ignored')
+    if scalar and (v0 or not npm):
+        codes.append('redirect_vlt_scalar_registry_ignored')
+    return codes
+
+
+def expected_codes(version, mode, shape_name):
+    """Codes DESIGN §2.1/§2.3 require for the cell."""
+    if not applicable(version, mode, shape_name):
+        return []
+    era = lock_era(version, shape_name)
+    codes = []
+    if mode == 'agent':
+        if SHAPES[shape_name].get('lockfile_only'):
+            codes.append('package_not_installed')
+    elif mode == 'hosted':
+        codes += hosted_lock_warnings(version, shape_name)
+        if shape_name == 'custom-registry':
+            codes.append('redirect_vlt_custom_registry_skipped')
+    elif era == 'A0':
+        codes.append('vendor_lockfile_version_unsupported')
+    elif shape_name == 'custom-registry':
+        codes.append('vendor_lock_entry_unsupported')
+    elif era == 'A':
+        codes.append('vendor_vlt_legacy_lockfile')
+    return codes
+
+
+def known_vlt_limitation(version, mode, shape_name):
+    """The measured vlt limitation that may leave a must-patch cell
+    unproven (docs/testing/vlt-compatibility.md boundary table), or None."""
+    if mode in ('hosted', 'vendored') and SHAPES[shape_name].get('optional_only') and \
+            at_least(version, '0.0.0-30') and not at_least(version, '1.0.5'):
+        return OPTIONAL_ONLY_LOCK
+    return None
+
+
+def churn_exempt(version, mode, shape_name):
+    """rc.14 rewrites an alias-named `file:` dependency's peer-edge bareSpec on
+    its first `ci` (DESIGN §8.3 byte-stability oracle)."""
+    return era_of(version) == 'B' and mode == 'vendored' and shape_name in ('alias',
+                                                                            'two-versions')
+
+
+def cells(versions, modes, shapes):
+    return [(v, m, s) for v in versions for m in modes for s in shapes
+            if expected_verdict(v, m, s) is not None]
+
+
+def observed_verdict(row):
+    if row.get('error'):
+        return 'error' if row.get('supported', True) else 'unsupported'
+    if row.get('blocked'):
+        return BLOCKED
+    if row.get('safeRefusal'):
+        return 'safe-refusal'
+    if row.get('passed'):
+        return 'patched'
+    if row.get('vltLimitations') and not row.get('failingChecks'):
+        return 'unsupported'
+    return 'unsafe'
+
+
+def matches_expectation(row):
+    """Observed == expected. Two allowances: a must-patch hosted cell whose
+    probe saw a content-encoded artifact and whose CLI refused cleanly
+    (BLOCKED), and a must-patch cell whose only unproven checks are the
+    documented vlt limitation (`expectedLimitation`)."""
+    if not set(row.get('expectedCodes', [])) <= set(row.get('codes', [])):
+        return False
+    verdict, expected = row.get('verdict'), row.get('expectedVerdict')
+    if verdict == expected:
+        return True
+    if verdict == BLOCKED:
+        return expected == 'patched' and bool(row.get('blockedByProbe'))
+    return (expected == 'patched' and verdict == 'unsupported'
+            and bool(row.get('expectedLimitation')) and bool(row.get('vltLimitations'))
+            and not row.get('failingChecks') and not row.get('error'))
+
+
+# ---------------------------------------------------------------------------
+# vlt configuration per era (DESIGN §8.3 registry table).
+
+def write_vlt_json(version, spec=None, registry=NPM_REGISTRY):
+    """vlt.json text for the release, or None when none is needed.
+
+    ≤ 0.0.0-13 flat keys; 0.0.0-14 … rc.6 `config.registry`; rc.7 … rc.29 the
+    public registry (lock-driven installs re-resolve from it anyway);
+    rc.30 … rc.32 `config.registry`; ≥ rc.33 `config.registries.npm` (plus
+    `config.registry` through 1.0.4). vlt strips a `registry` equal to its
+    built-in npmjs default from the lock, so that value is only written where
+    the release requires registry config (≥ rc.33)."""
+    spec = spec or {}
+    config = {}
+    registries = dict(spec.get('registries') or {})
+    if at_least(version, '1.0.0-rc.33'):
+        registries.setdefault('npm', registry)
+        if not at_least(version, '1.0.5'):
+            config['registry'] = registry
+    elif registry != NPM_REGISTRY:
+        hermetic = not between(version, '1.0.0-rc.7', '1.0.0-rc.29')
+        config['registry'] = registry if hermetic else NPM_REGISTRY
+    if registries:
+        config['registries'] = registries
+    flat = not at_least(version, '0.0.0-14')
+    data = dict(config) if flat else ({'config': config} if config else {})
+    if spec.get('members') and at_least(version, '0.0.0-13'):
+        data['workspaces'] = 'packages/*'
+    if between(version, '0.0.0-16', '0.0.0-24'):
+        data['modifiers'] = {}
+    return json.dumps(data) + '\n' if data else None
+
+
+def project_files(version, spec, registry=NPM_REGISTRY):
+    files = dict(spec['files'])
+    text = write_vlt_json(version, spec, registry)
+    if text is not None:
+        files['vlt.json'] = text
+    if spec.get('members') and not at_least(version, '0.0.0-13'):
+        files['vlt-workspaces.json'] = json.dumps({'packages': 'packages/*'}) + '\n'
+    return files
+
+
+# ---------------------------------------------------------------------------
+# Processes, hashes and files.
+
+def sha256(data):
+    return hashlib.sha256(data).hexdigest()
+
+
+def git_hash(data):
+    return hashlib.sha256(f'blob {len(data)}\0'.encode() + data).hexdigest()
+
+
+def sri_sha512(data):
+    return 'sha512-' + base64.b64encode(hashlib.sha512(data).digest()).decode()
+
+
+def tail(text, limit=4000):
+    return text if len(text) <= limit else text[-limit:]
+
+
+def save(path, value):
+    path.parent.mkdir(parents=True, exist_ok=True)
+    path.write_text(json.dumps(value, indent=2, sort_keys=True) + '\n', encoding='utf-8')
+
+
+def run(command, cwd, env, log, check=False, timeout=COMMAND_TIMEOUT):
+    started = time.time()
+    try:
+        proc = subprocess.run([str(c) for c in command], cwd=cwd, env=env, capture_output=True,
+                              timeout=timeout)
+        code = proc.returncode
+        out = proc.stdout.decode(errors='replace')
+        err = proc.stderr.decode(errors='replace')
+    except subprocess.TimeoutExpired as error:
+        code = -9
+        out = (error.stdout or b'').decode(errors='replace')
+        err = f'timed out after {timeout}s'
+    log.parent.mkdir(parents=True, exist_ok=True)
+    with log.open('a', encoding='utf-8') as handle:
+        handle.write(f'$ (cd {cwd} && {" ".join(map(str, command))})  '
+                     f'# exit {code} in {time.time() - started:.1f}s\n')
+        for text in (out, err):
+            handle.write(tail(text, 20000) + ('\n' if text and not text.endswith('\n') else ''))
+    if check and code != 0:
+        raise RuntimeError(f'{Path(str(command[0])).name} {" ".join(map(str, command[1:4]))} '
+                           f'exited {code}: {tail(err or out, 2000)}')
+    return code, out, err
+
+
+def line_endings(data):
+    crlf = data.count(b'\r\n')
+    lf = data.count(b'\n') - crlf
+    return 'crlf' if crlf and not lf else 'lf' if lf and not crlf else 'mixed' if crlf else 'none'
+
+
+def to_crlf(data):
+    return data.replace(b'\r\n', b'\n').replace(b'\n', b'\r\n')
+
+
+def skipped_dir(parts):
+    """node_modules is never committed, except the vendored payload's own
+    `<leaf>/node_modules/<name>` dir under .socket/vendor/."""
+    if 'node_modules' not in parts:
+        return False
+    if parts[:2] != ('.socket', 'vendor'):
+        return True
+    # vlt links a vendored dir's own dependencies inside it.
+    first = parts.index('node_modules')
+    return 'node_modules' in parts[first + 1:]
+
+
+# The CLI's run lock, never committed.
+UNCOMMITTED = {'.socket/apply.lock'}
+
+
+def is_link(path):
+    """A symlink, or a Windows junction (which `is_symlink` does not report)."""
+    return os.path.islink(path) or bool(getattr(os.path, 'isjunction', lambda _: False)(path))
+
+
+def walk(project):
+    """Every regular file under `project` outside the skipped node_modules
+    trees, never descending into a link or junction."""
+    for top, dirs, names in os.walk(project):
+        base = Path(top)
+        rel_top = base.relative_to(project).parts
+        dirs[:] = sorted(d for d in dirs if not is_link(base / d)
+                         and not skipped_dir(rel_top + (d,)))
+        for name in sorted(names):
+            path = base / name
+            if not is_link(path) and path.is_file():
+                yield path, Path(*rel_top, name)
+
+
+def snapshot(project):
+    """The committable files: what a fresh checkout would hold."""
+    files = {}
+    for path, rel in walk(project):
+        if rel.as_posix() not in UNCOMMITTED:
+            files[rel.as_posix()] = path.read_bytes()
+    return dict(sorted(files.items()))
+
+
+def captured(name):
+    """The SBOM inputs depscan's fixtures import (DESIGN §7.3 tree list)."""
+    parts = name.split('/')
+    leaf = parts[-1]
+    if leaf in ('package.json', 'vlt-lock.json', 'vlt.json', 'vlt-workspaces.json'):
+        return True
+    if leaf == 'npm-shrinkwrap.json' and parts[:2] == ['.socket', 'vendor']:
+        return True
+    return name in ('.socket/manifest.json', '.socket/vendor/state.json',
+                    '.socket/vendor/redirect-state.json')
+
+
+def capture_tree(project, tree):
+    """Copy the SBOM inputs into `tree`; return their sha256 by path."""
+    if tree.exists():
+        shutil.rmtree(tree)
+    digests = {}
+    for name, data in snapshot(project).items():
+        if not captured(name):
+            continue
+        destination = tree / name
+        destination.parent.mkdir(parents=True, exist_ok=True)
+        destination.write_bytes(data)
+        digests[name] = sha256(data)
+    return digests
+
+
+def write_checkout(files, destination):
+    if destination.exists():
+        shutil.rmtree(destination)
+    for name, data in files.items():
+        path = destination / name
+        path.parent.mkdir(parents=True, exist_ok=True)
+        path.write_bytes(data)
+    destination.mkdir(parents=True, exist_ok=True)
+    return destination
+
+
+def remove_node_modules(project):
+    """Delete every installed tree (the root's and each workspace member's),
+    never a vendored payload's own `node_modules/<name>` directory."""
+    for top, dirs, _ in os.walk(project):
+        base = Path(top)
+        rel_top = base.relative_to(project).parts
+        if rel_top[:2] == ('.socket', 'vendor'):
+            dirs[:] = []
+            continue
+        for d in list(dirs):
+            path = base / d
+            if d == 'node_modules':
+                dirs.remove(d)
+                if is_link(path):
+                    os.unlink(path) if os.path.islink(path) else os.rmdir(path)
+                else:
+                    shutil.rmtree(path, ignore_errors=True)
+            elif is_link(path):
+                dirs.remove(d)
+
+
+# ---------------------------------------------------------------------------
+# vlt-lock.json.
+
+def split_dep_id(dep_id):
+    """(registry segment, name, version, extra) of a registry DepID, or None.
+    Both grammars: `~<reg>~<name>@<ver>[~<extra>]` and the legacy
+    `·<reg>·<name>@<ver>[·<extra>]` (unscoped names only need no decoding;
+    scoped ones use `+` / `§` for `/`)."""
+    if not dep_id or dep_id[0] not in '~·':
+        return None
+    delim = dep_id[0]
+    parts = dep_id[1:].split(delim)
+    if len(parts) < 2:
+        return None
+    registry, spec = parts[0], parts[1]
+    extra = delim.join(parts[2:]) or None
+    spec = spec.replace('§' if delim == '·' else '+', '/')
+    at = spec.rfind('@')
+    if at <= 0:
+        return None
+    return registry, spec[:at], spec[at + 1:], extra
+
+
+def target_instances(lock_text, any_registry=False):
+    """DepIDs of minimist@1.2.2's registry nodes (default registry only
+    unless `any_registry`)."""
+    lock = json.loads(lock_text)
+    found = []
+    for dep_id in lock.get('nodes') or {}:
+        identity = split_dep_id(dep_id)
+        if not identity or identity[1:3] != (NAME, VERSION):
+            continue
+        if any_registry or identity[0] in ('', 'npm'):
+            found.append(dep_id)
+    return found
+
+
+def tamper_lock(lock_bytes, dep_ids):
+    """The lock with a wrong slot [2] on every `dep_ids` node line."""
+    wrong = sri_sha512(b'tampered by backtest-vlt.py')
+    out = []
+    for line in lock_bytes.split(b'\n'):
+        text = line.decode('utf-8')
+        for dep_id in dep_ids:
+            if text.lstrip().startswith(json.dumps(dep_id, ensure_ascii=False) + ':'):
+                text = re.sub(r'"sha512-[A-Za-z0-9+/=]+"', json.dumps(wrong), text, count=1)
+        out.append(text.encode('utf-8'))
+    return b'\n'.join(out)
+
+
+# ---------------------------------------------------------------------------
+# The production service.
+
+def api_post(api_url, path, body, timeout=60):
+    request = urllib.request.Request(
+        api_url.rstrip('/') + path, data=json.dumps(body).encode(), method='POST',
+        headers={'content-type': 'application/json', 'accept': 'application/json',
+                 'user-agent': 'socket-patch-backtest-vlt'})
+    with urllib.request.urlopen(request, timeout=timeout) as response:
+        return json.loads(response.read())
+
+
+def api_get(api_url, path, timeout=60):
+    request = urllib.request.Request(api_url.rstrip('/') + path, headers={
+        'accept': 'application/json', 'user-agent': 'socket-patch-backtest-vlt'})
+    with urllib.request.urlopen(request, timeout=timeout) as response:
+        return json.loads(response.read())
+
+
+def with_retries(fn, attempts=5):
+    for attempt in range(1, attempts + 1):
+        try:
+            return fn()
+        except (urllib.error.URLError, TimeoutError, ConnectionError, json.JSONDecodeError) as error:
+            final = isinstance(error, urllib.error.HTTPError) and error.code < 500 \
+                and error.code != 429
+            if final or attempt == attempts:
+                raise
+            time.sleep(5 * attempt)
+
+
+def fetch_grant(api_url=API_URL):
+    """The public tarball artifact of the patch: (url, sha512)."""
+    data = with_retries(lambda: api_post(api_url, '/patch/package',
+                                         {'uuids': [UUID], 'freeOnly': True}))
+    return select_tarball(data)
+
+
+def select_tarball(data):
+    result = (data.get('results') or {}).get(UUID) or {}
+    if result.get('status') not in ('granted', 'reused'):
+        raise RuntimeError(f'patch {UUID} is not granted: {result.get("status")!r}')
+    for artifact in result.get('artifacts') or []:
+        if artifact.get('kind') == 'tarball':
+            sha512 = (artifact.get('integrity') or {}).get('sha512')
+            if not sha512:
+                raise RuntimeError('the tarball artifact has no sha512 integrity')
+            return artifact.get('url') or result.get('url'), sha512
+    raise RuntimeError('no tarball artifact in the grant')
+
+
+def fetch_record(api_url=API_URL):
+    return with_retries(lambda: api_get(api_url, f'/patch/view/{UUID}'))
+
+
+def parse_header_blocks(text):
+    """The last response's headers of a `curl -D` dump (redirects add blocks)."""
+    blocks = [b for b in re.split(r'\r?\n\r?\n', text) if b.strip()]
+    if not blocks:
+        return None, {}
+    lines = blocks[-1].splitlines()
+    match = re.match(r'HTTP/\S+\s+(\d+)', lines[0]) if lines else None
+    headers = {}
+    for line in lines[1:]:
+        key, _, value = line.partition(':')
+        headers[key.strip().lower()] = value.strip()
+    return (int(match.group(1)) if match else None), headers
+
+
+def encoding_is_identity(value):
+    return value is None or value.strip() == '' or value.strip().lower() == 'identity'
+
+
+def probe_artifact(url, expected_sha512, workdir):
+    """Fetch the artifact the way vlt does (DESIGN §1.9): its accept-encoding,
+    no Authorization, up to 10 redirects, no decoding; hash the wire body."""
+    workdir.mkdir(parents=True, exist_ok=True)
+    headers_file, body_file = workdir / 'probe-headers.txt', workdir / 'probe-body.bin'
+    code, _, err = run(['curl', '-sS', '-L', '--max-redirs', '10', '--max-time', '60',
+                        '-D', headers_file, '-o', body_file,
+                        '-H', f'accept-encoding: {VLT_ACCEPT_ENCODING}', url],
+                       workdir, None, workdir / 'probe.log')
+    status, headers = parse_header_blocks(
+        headers_file.read_text(errors='replace') if headers_file.is_file() else '')
+    body = body_file.read_bytes() if body_file.is_file() else b''
+    body_file.unlink(missing_ok=True)
+    encoding = headers.get('content-encoding')
+    sha512 = sri_sha512(body) if body else None
+    return dict(url=url, curlExit=code, curlError=tail(err, 500) if code else None, status=status,
+                contentEncoding=encoding, cacheControl=headers.get('cache-control'),
+                sha512=sha512, expectedSha512=expected_sha512,
+                identity=code == 0 and status == 200 and encoding_is_identity(encoding),
+                verifies=code == 0 and status == 200 and encoding_is_identity(encoding)
+                and sha512 == expected_sha512)
+
+
+class IdentityMirror:
+    """A loopback view of production after the serve fix: API responses are
+    forwarded with the patch host rewritten to the mirror, and artifacts are
+    fetched with `accept-encoding: identity`, so they arrive un-encoded."""
+
+    def __init__(self, api_url=API_URL, patch_host=PATCH_HOST):
+        mirror = self
+
+        class Handler(http.server.BaseHTTPRequestHandler):
+            def forward(self, method):
+                length = int(self.headers.get('content-length') or 0)
+                data = self.rfile.read(length) if length else None
+                parts = self.path.split('?')[0].strip('/').split('/')
+                artifact = len(parts) >= 5 and parts[0] == 'patch'
+                base = patch_host if artifact else api_url
+                headers = {'user-agent': 'socket-patch-backtest-vlt-mirror',
+                           'accept-encoding': 'identity'}
+                for key in ('content-type', 'accept'):
+                    if self.headers.get(key):
+                        headers[key] = self.headers[key]
+                request = urllib.request.Request(base + self.path, data=data, method=method,
+                                                 headers=headers)
+                try:
+                    with urllib.request.urlopen(request, timeout=120) as response:
+                        body, status = response.read(), response.status
+                        kind = response.headers.get('content-type', '')
+                        encoding = response.headers.get('content-encoding')
+                except urllib.error.HTTPError as error:
+                    body, status = error.read(), error.code
+                    kind = error.headers.get('content-type', '')
+                    encoding = error.headers.get('content-encoding')
+                if not encoding_is_identity(encoding):
+                    body = gzip.decompress(body)
+                if not artifact:
+                    body = body.replace(patch_host.encode(), mirror.url.encode())
+                self.send_response(status)
+                self.send_header('content-type', kind or 'application/octet-stream')
+                self.send_header('content-length', str(len(body)))
+                self.end_headers()
+                self.wfile.write(body)
+
+            def do_GET(self):
+                self.forward('GET')
+
+            def do_POST(self):
+                self.forward('POST')
+
+            def log_message(self, *_):
+                pass
+
+        self.server = http.server.ThreadingHTTPServer(('127.0.0.1', 0), Handler)
+        self.url = f'http://127.0.0.1:{self.server.server_address[1]}'
+        self.thread = threading.Thread(target=self.server.serve_forever, daemon=True)
+
+    def __enter__(self):
+        self.thread.start()
+        return self
+
+    def __exit__(self, *_):
+        self.server.shutdown()
+        self.server.server_close()
+
+
+# ---------------------------------------------------------------------------
+# vlt releases.
+
+def npm_command():
+    return shutil.which('npm') or shutil.which('npm.cmd') or 'npm'
+
+
+def pinned_integrity(version):
+    if not HISTORICAL_INTEGRITY.is_file():
+        return None
+    return json.loads(HISTORICAL_INTEGRITY.read_text(encoding='utf-8')).get(version)
+
+
+def install_tool(root, version, log=None):
+    """`<root>/<version>/node_modules/vlt/vlt.js`: `npm pack` (retried), the
+    tarball's sha512 checked against the registry's `dist.integrity` and the
+    committed pin (fail closed), then a prefix install without scripts. An
+    existing install is reused after its `--version` check."""
+    directory = root / version
+    js = directory / 'node_modules' / 'vlt' / 'vlt.js'
+    log = log or root / f'install-{version}.log'
+    if not js.is_file():
+        directory.mkdir(parents=True, exist_ok=True)
+        env = dict(os.environ)
+        npm = npm_command()
+        tarball = None
+        for attempt in range(1, 6):
+            code, out, err = run([npm, 'pack', f'vlt@{version}', '--pack-destination', directory,
+                                  '--silent'], directory, env, log)
+            names = [n.strip() for n in out.splitlines() if n.strip().endswith('.tgz')]
+            if code == 0 and names:
+                tarball = directory / names[-1]
+                break
+            if attempt == 5:
+                raise RuntimeError(f'npm pack vlt@{version} failed: {tail(err or out, 1000)}')
+            time.sleep(5 * attempt)
+        _, out, _ = run([npm, 'view', f'vlt@{version}', 'dist.integrity'], directory, env, log,
+                        check=True)
+        expected = out.strip()
+        actual = sri_sha512(tarball.read_bytes())
+        pinned = pinned_integrity(version)
+        if actual != expected or (pinned is not None and pinned != expected):
+            raise RuntimeError(f'vlt@{version} tarball {actual} != registry {expected}'
+                               + (f' / pinned {pinned}' if pinned else ''))
+        run([npm, 'install', '--prefix', directory, '--no-audit', '--no-fund', '--ignore-scripts',
+             '--no-package-lock', tarball], directory, env, log, check=True)
+        tarball.unlink(missing_ok=True)
+    _, out, _ = run(['node', '--no-warnings', js, '--version'], directory, dict(os.environ), log,
+                    check=True)
+    if out.strip() != version:
+        raise RuntimeError(f'expected vlt {version} at {js}, got {out.strip()!r}')
+    return js
+
+
+class Vlt:
+    """One vlt release, run as `node --no-warnings vlt.js` with private state."""
+
+    def __init__(self, js, version):
+        self.js = Path(js)
+        self.version = version
+        self.sha256 = sha256(self.js.read_bytes())
+
+    def env(self, home):
+        env = {k: v for k, v in os.environ.items()
+               if not k.upper().startswith(('VLT_', 'NPM_CONFIG_', 'XDG_', 'SOCKET_'))}
+        for key, sub in (('XDG_CACHE_HOME', 'cache'), ('XDG_CONFIG_HOME', 'config'),
+                         ('XDG_DATA_HOME', 'data'), ('XDG_STATE_HOME', 'state'),
+                         ('XDG_RUNTIME_DIR', 'runtime')):
+            (home / sub).mkdir(parents=True, exist_ok=True)
+            env[key] = str(home / sub)
+        env.update(HOME=str(home), USERPROFILE=str(home), VLT_CACHE=str(home / 'cache' / 'vlt'),
+                   VLT_TELEMETRY='0', CI='1', NO_COLOR='1', LANG='C', LC_ALL='C')
+        return env
+
+    def run(self, args, cwd, home, log):
+        return run(['node', '--no-warnings', self.js, *args], cwd, self.env(home), log)
+
+    def locked_install(self):
+        return ['ci'] if at_least(self.version, '0.0.0-19') else ['install']
+
+    def reinstall(self, project, home, log):
+        """Replace node_modules from the lock: `vlt ci`, or before it exists,
+        delete node_modules and `vlt install`."""
+        if not at_least(self.version, '0.0.0-19'):
+            remove_node_modules(project)
+        return self.run(self.locked_install(), project, home, log)
+
+
+# ---------------------------------------------------------------------------
+# CLI envelopes.
+
+def parse_envelope(output):
+    start = output.find('{')
+    if start < 0:
+        return None
+    try:
+        return json.loads(output[start:])
+    except json.JSONDecodeError:
+        return None
+
+
+def envelope_codes(value):
+    """Every `code` / `errorCode` / skipped `reason` code anywhere in it."""
+    codes = []
+    if isinstance(value, dict):
+        for key, item in value.items():
+            if key in ('code', 'errorCode') and isinstance(item, str):
+                codes.append(item)
+            elif key == 'reason' and isinstance(item, str) and re.fullmatch(r'[a-z0-9_]+', item):
+                codes.append(item)
+            else:
+                codes.extend(envelope_codes(item))
+    elif isinstance(value, list):
+        for item in value:
+            codes.extend(envelope_codes(item))
+    return codes
+
+
+def envelope_details(value, code):
+    found = []
+    if isinstance(value, dict):
+        if code in (value.get('code'), value.get('errorCode')) and isinstance(
+                value.get('detail'), str):
+            found.append(value['detail'])
+        for item in value.values():
+            found.extend(envelope_details(item, code))
+    elif isinstance(value, list):
+        for item in value:
+            found.extend(envelope_details(item, code))
+    return found
+
+
+def vex_statements(doc, purl):
+    def about(statement):
+        return any(str(sub.get('@id', '')).split('?')[0] == purl
+                   for product in statement.get('products', [])
+                   for sub in product.get('subcomponents', []))
+    return [st for st in (doc or {}).get('statements', []) if about(st)]
+
+
+def vex_attested(doc, purl, uuid, marker, vulns):
+    """`doc` attests `purl` for exactly the ids of `vulns` ({id: [cves]}),
+    each not_affected, with every alias and the `Patched via Socket patch
+    <uuid> (<marker>)` impact part."""
+    statements = vex_statements(doc, purl)
+    if not vulns or sorted(st['vulnerability']['name'] for st in statements) != sorted(vulns):
+        return False
+    part = f'Patched via Socket patch {uuid} ({marker})'
+    for st in statements:
+        aliases = set(st['vulnerability'].get('aliases', []))
+        if (st.get('status') != 'not_affected'
+                or not set(vulns[st['vulnerability']['name']]) <= aliases
+                or part not in str(st.get('impact_statement', '')).split('; ')):
+            return False
+    return True
+
+
+def record_vulns(record):
+    return {vid: list(v.get('cves', [])) for vid, v in (record.get('vulnerabilities') or {}).items()}
+
+
+def cli_env(extra=None):
+    env = {k: v for k, v in os.environ.items()
+           if not k.upper().startswith(('SOCKET_', 'VLT_', 'NPM_CONFIG_'))}
+    env.update(SOCKET_NO_CONFIG='1', SOCKET_NO_UPDATE_CHECK='1', NO_COLOR='1', LANG='C',
+               LC_ALL='C')
+    env.update(extra or {})
+    return env
+
+
+# ---------------------------------------------------------------------------
+# One cell.
+
+class Cell:
+    def __init__(self, ctx, version, mode, shape_name):
+        self.ctx = ctx
+        self.version = version
+        self.mode = mode
+        self.shape_name = shape_name
+        self.spec = SHAPES[shape_name]
+        self.name = f'{version}-{mode}-{shape_name}'
+        self.case = ctx['out'] / 'captures' / self.name
+        self.log = self.case / 'logs' / 'commands.log'
+        self.project = self.case / 'project'
+        self.record = ctx['record']
+        self.envelopes = []
+
+    # CLI -------------------------------------------------------------------
+    def cli(self, args, cwd=None):
+        command = [self.ctx['cli'], *args, '--json', '--no-telemetry']
+        if self.ctx.get('patch_server_url'):
+            command += ['--patch-server-url', self.ctx['patch_server_url']]
+        return run(command, cwd or self.project, self.ctx['cli_env'], self.log)
+
+    def patch_run(self, mode, cwd=None):
+        cwd = cwd or self.project
+        verb = ['get', UUID] if self.spec.get('driver') == 'get' else ['scan']
+        code, out, err = self.cli([*verb, '--mode', mode, '--yes', '--cwd', cwd], cwd)
+        return code, parse_envelope(out), err
+
+    def revert(self):
+        if self.mode == 'hosted':
+            return self.cli(['rollback', '--yes', '--cwd', self.project])
+        if self.mode == 'vendored':
+            return self.cli(['vendor', '--revert', '--yes', '--cwd', self.project])
+        return self.cli(['rollback', '--yes', '--cwd', self.project])
+
+    # vlt -------------------------------------------------------------------
+    def home(self, label):
+        return self.case / 'homes' / label
+
+    def prepare(self, vlt):
+        self.project.mkdir(parents=True)
+        for rel, text in project_files(self.version, self.spec).items():
+            path = self.project / rel
+            path.parent.mkdir(parents=True, exist_ok=True)
+            path.write_text(text, encoding='utf-8')
+        lock = self.project / 'vlt-lock.json'
+        previous = None
+        for _ in range(3):
+            code, out, err = vlt.run(['install'], self.project, self.home('install'), self.log)
+            if code != 0:
+                raise RuntimeError(f'vlt install exited {code}: {tail(err or out, 1500)}')
+            if not lock.is_file():
+                raise RuntimeError('vlt install wrote no vlt-lock.json')
+            if lock.read_bytes() == previous:
+                break
+            previous = lock.read_bytes()
+        else:
+            raise RuntimeError('vlt-lock.json did not settle after three installs')
+        if self.spec.get('crlf_lock'):
+            lock.write_bytes(to_crlf(lock.read_bytes()))
+        if self.spec.get('lockfile_only'):
+            remove_node_modules(self.project)
+
+    # bytes -------------------------------------------------------------------
+    def copies(self, root, lock_text):
+        """Every installed copy of minimist@1.2.2 the cell must judge: each
+        importer's link and, outside vendored mode, every store copy."""
+        paths = [root / importer / 'node_modules' / dep for importer, dep in self.spec['runtime']]
+        if self.mode != 'vendored':
+            paths += [root / 'node_modules' / '.vlt' / dep_id / 'node_modules' / NAME
+                      for dep_id in target_instances(lock_text, any_registry=self.mode == 'agent')]
+        return paths
+
+    def holds(self, root, lock_text, side):
+        """(every copy holds the record's `side` bytes, digests by copy)."""
+        details = {}
+        ok = True
+        for copy_dir in self.copies(root, lock_text):
+            for key, hashes in self.record['files'].items():
+                path = copy_dir / key.split('/', 1)[1]
+                digest = git_hash(path.read_bytes()) if path.is_file() else None
+                details[str(path.relative_to(root))] = digest
+                ok = ok and digest == hashes.get(f'{side}Hash')
+        return ok and bool(details), details
+
+    def fresh(self, vlt, label, files, command=None):
+        checkout = write_checkout(files, self.case / label)
+        code, out, err = vlt.run(command or vlt.locked_install(), checkout, self.home(label),
+                                 self.log)
+        return checkout, code, err or out
+
+    def lock_stable(self, row, expected, observed, label):
+        if observed == expected:
+            return True
+        if self.spec.get('crlf_lock') and observed == expected.replace(b'\r\n', b'\n'):
+            # vlt re-saves a CRLF lock as LF on its own.
+            row.setdefault('lockNormalizedByVlt', []).append(label)
+            return True
+        return False
+
+    def limitation(self, row, checks, names):
+        text = known_vlt_limitation(self.version, self.mode, self.shape_name)
+        if not text:
+            return
+        failed = [n for n in names if checks.get(n) is False]
+        if failed:
+            for name in failed:
+                checks[name] = None
+            reason = f'vlt {self.version} {text}'
+            limitations = row.setdefault('vltLimitations', [])
+            if reason not in limitations:
+                limitations.append(reason)
+
+    # the cell ----------------------------------------------------------------
+    def run_cell(self):
+        expected = expected_verdict(self.version, self.mode, self.shape_name)
+        row = dict(cell=self.name, vlt=self.version, era=era_of(self.version), mode=self.mode,
+                   shape=self.shape_name, os=self.ctx['os'], arch=platform.machine(),
+                   passed=False, expectedVerdict=expected,
+                   expectedCodes=expected_codes(self.version, self.mode, self.shape_name),
+                   expectedLimitation=known_vlt_limitation(self.version, self.mode,
+                                                           self.shape_name),
+                   patches=[dict(self.ctx['patch'])], **self.ctx['provenance'])
+        row['supported'] = expected != 'unsupported'
+        checks = row['checks'] = {}
+        started = time.time()
+        if self.case.exists():
+            shutil.rmtree(self.case)
+        self.case.mkdir(parents=True)
+        try:
+            vlt = Vlt(self.ctx['tools'][self.version], self.version)
+            row['vltSha256'] = vlt.sha256
+            self.prepare(vlt)
+            lock_path = self.project / 'vlt-lock.json'
+            before_lock = lock_path.read_bytes()
+            row['lockfileVersion'] = json.loads(before_lock).get('lockfileVersion')
+            row['lineEndings'] = line_endings(before_lock)
+            if not self.spec.get('lockfile_only'):
+                ok, row['baseline'] = self.holds(self.project, before_lock.decode(), 'before')
+                checks['installedBefore'] = ok
+                if not ok:
+                    raise RuntimeError(f'installed bytes are not the upstream bytes: '
+                                       f'{row["baseline"]}')
+            pristine = self.pristine = snapshot(self.project)
+            probing = 'hosted' in (self.mode, self.spec.get('before'))
+            if probing:
+                row['serveProbe'] = probe = probe_artifact(self.ctx['artifact_url'],
+                                                           self.ctx['artifact_sha512'],
+                                                           self.case / 'probe')
+                checks['serveEncodingIdentity'] = probe['verifies']
+            if self.spec.get('before'):
+                code, envelope, _ = self.patch_run(self.spec['before'])
+                row['beforeExitCode'] = code
+                save(self.case / 'before-cli-output.json', envelope)
+                if code != 0 or snapshot(self.project) == pristine:
+                    if self.blocked_refusal(row, [envelope], pristine):
+                        return self.finish(row, checks, started)
+                    raise RuntimeError(f'the first {self.spec["before"]} run patched nothing '
+                                       f'(exit {code})')
+            original = snapshot(self.project)
+            row['originalSha256'] = {n: sha256(b) for n, b in original.items()}
+
+            code, envelope, err = self.patch_run(self.mode)
+            self.envelopes = [envelope]
+            save(self.case / 'cli-output.json', envelope)
+            row['exitCode'] = code
+            row['cliStderrTail'] = tail(err, 3000)
+            row['codes'] = sorted(set(envelope_codes(envelope)))
+            after = snapshot(self.project)
+            row['changedFiles'] = sorted(n for n in set(original) | set(after)
+                                         if original.get(n) != after.get(n))
+            row['manifestSha256'] = capture_tree(self.project, self.case / 'tree')
+            if self.mode == 'hosted' and self.blocked_refusal(row, [envelope], original):
+                return self.finish(row, checks, started)
+            if probing and 'serveEncodingIdentity' in checks and not checks[
+                    'serveEncodingIdentity'] and expected == 'patched':
+                # The probe says vlt cannot verify the artifact, yet this was
+                # no clean refusal: whatever the CLI wrote is unsafe.
+                checks['cleanRefusalWhileEncoded'] = False
+            if not checks.get('serveEncodingIdentity', True) and expected != 'patched':
+                checks.pop('serveEncodingIdentity')
+            status_ok = isinstance(envelope, dict) and envelope.get('status') in ('success', 'ok')
+            checks['cliSuccess'] = code == 0 and status_ok
+            getattr(self, f'check_{self.mode}')(row, checks, before_lock, vlt, original)
+            row['passed'] = (not row.get('safeRefusal') and bool(checks)
+                             and all(v is True for v in checks.values()))
+        except Exception as error:  # noqa: BLE001 — the row must explain the failure
+            row['error'] = tail(f'{type(error).__name__}: {error}', 4000)
+        return self.finish(row, checks, started)
+
+    def blocked_refusal(self, row, envelopes, reference):
+        """A clean refusal of a must-patch hosted run while the cell's own
+        probe saw a content-encoded artifact."""
+        probe = row.get('serveProbe') or {}
+        encoded = probe.get('status') == 200 and not encoding_is_identity(
+            probe.get('contentEncoding'))
+        if not encoded or row['expectedVerdict'] != 'patched':
+            return False
+        details = [d for e in envelopes
+                   for d in envelope_details(e, 'redirect_vlt_artifact_unverifiable')]
+        row['codes'] = sorted(set(row.get('codes', [])) | {
+            c for e in envelopes for c in envelope_codes(e)})
+        clean = (snapshot(self.project) == reference
+                 and any('content-encoding' in d and 'nothing was written' in d
+                         for d in details))
+        row['blockedDetails'] = details
+        if clean:
+            row['blocked'] = True
+            row['blockedByProbe'] = probe.get('contentEncoding')
+            row.pop('manifestSha256', None)
+            row['manifestSha256'] = capture_tree(self.project, self.case / 'tree')
+            row['checks'].pop('serveEncodingIdentity', None)
+        return clean
+
+    def finish(self, row, checks, started):
+        row['failingChecks'] = [k for k, v in checks.items() if v is False]
+        row['notEvaluated'] = [k for k, v in checks.items() if v is None]
+        row.setdefault('codes', [])
+        row.setdefault('manifestSha256', {})
+        row['verdict'] = observed_verdict(row)
+        row['matchesExpectation'] = matches_expectation(row)
+        row['seconds'] = round(time.time() - started, 1)
+        if not self.ctx.get('keep_projects'):
+            for sub in list(self.case.iterdir()):
+                if sub.is_dir() and sub.name not in ('tree', 'logs', 'probe'):
+                    shutil.rmtree(sub, ignore_errors=True)
+        save(self.case / 'result.json', row)
+        mark = 'OK ' if row['matchesExpectation'] else 'BAD'
+        print(f"{mark} {self.name}: {row['verdict']} (expected {row['expectedVerdict']}) "
+              f"failing={row['failingChecks']} {row.get('error', '')[:300]}", flush=True)
+        return row
+
+    def unchanged(self, row):
+        return not row['changedFiles']
+
+    def installs(self, row, checks, vlt, lock_after, text):
+        """Cold fresh checkouts: the locked install and an ordinary one."""
+        files = snapshot(self.project)
+        for label, command in (('freshCi', None), ('freshOrdinary', ['install'])):
+            checkout, code, err = self.fresh(vlt, label, files, command)
+            row[label + 'Exit'] = code
+            if code:
+                row[label + 'Tail'] = tail(err, 1500)
+            stable = self.lock_stable(row, lock_after, (checkout / 'vlt-lock.json').read_bytes(),
+                                      label)
+            if not stable and churn_exempt(self.version, self.mode, self.shape_name):
+                first = (checkout / 'vlt-lock.json').read_bytes()
+                again, _, _ = vlt.run(vlt.locked_install(), checkout, self.home(label), self.log)
+                stable = again == 0 and (checkout / 'vlt-lock.json').read_bytes() == first
+                row.setdefault('churn', []).append(f'{label}: skip:vlt-own-churn')
+            patched, row[label + 'Files'] = self.holds(checkout, text, 'after')
+            checks[label] = code == 0 and stable and patched
+            shutil.rmtree(checkout, ignore_errors=True)
+        self.limitation(row, checks, ['freshCi', 'freshOrdinary'])
+
+    def vex(self, row, checks, vlt, marker, record):
+        """Manifest-less VEX on a fresh checkout: `.socket/manifest.json`
+        dropped, a locked install, then standalone `vex`."""
+        files = {n: b for n, b in snapshot(self.project).items() if n != '.socket/manifest.json'}
+        checkout, code, _ = self.fresh(vlt, 'vex-checkout', files)
+        out = checkout / 'out.vex.json'
+        vex_code, output, _ = self.cli(['vex', '--output', out, '--product', VEX_PRODUCT,
+                                        '--cwd', checkout], checkout)
+        doc = json.loads(out.read_text(encoding='utf-8')) if out.is_file() else None
+        attested = vex_attested(doc, PURL, UUID, marker, record_vulns(record))
+        row['vex'] = dict(installExit=code, exit=vex_code, attested=attested,
+                          codes=sorted(set(envelope_codes(parse_envelope(output)))))
+        checks['vexManifestless'] = code == 0 and vex_code == 0 and attested
+        shutil.rmtree(checkout, ignore_errors=True)
+        self.limitation(row, checks, ['vexManifestless'])
+
+    def repeat(self, row, checks, lock_after):
+        code, envelope, _ = self.patch_run(self.mode)
+        row['repeatExitCode'] = code
+        row['repeatCodes'] = sorted(set(envelope_codes(envelope)))
+        checks['repeatStableLock'] = code == 0 and (
+            self.project / 'vlt-lock.json').read_bytes() == lock_after
+
+    def rolled_back(self, row, checks, vlt, original, text):
+        """The mode's revert restores the files the first socket-patch run
+        found (a takeover already reverted the earlier mode, so a conversion
+        shape goes back to the pristine project), and a fresh checkout of the
+        reverted project installs the upstream bytes."""
+        expected = dict(self.pristine if self.spec.get('before') else original)
+        lock = (self.project / 'vlt-lock.json').read_bytes()
+        if self.spec.get('crlf_lock') and line_endings(lock) == 'lf':
+            # vlt re-saved the CRLF lock as LF during the warm installs; the
+            # slot revert keeps vlt's own layout.
+            expected['vlt-lock.json'] = expected['vlt-lock.json'].replace(b'\r\n', b'\n')
+            row.setdefault('lockNormalizedByVlt', []).append('beforeRollback')
+        code, out, _ = self.revert()
+        row['rollbackExitCode'] = code
+        row['rollbackCodes'] = sorted(set(envelope_codes(parse_envelope(out))))
+        now = snapshot(self.project)
+        stray = sorted(set(now) - set(expected))
+        row['rollbackStray'] = stray
+        checks['rollbackByteIdentical'] = code == 0 and all(
+            now.get(n) == b for n, b in expected.items()) and not stray
+        checkout, install_code, _ = self.fresh(vlt, 'rollback-checkout', now)
+        pristine, row['rollbackFiles'] = self.holds(checkout, text, 'before')
+        checks['rollbackOriginalBytes'] = install_code == 0 and pristine
+        shutil.rmtree(checkout, ignore_errors=True)
+        self.limitation(row, checks, ['rollbackOriginalBytes'])
+
+    def ledger_record(self):
+        if self.mode == 'hosted':
+            path = self.project / '.socket/vendor/redirect-state.json'
+            key = 'records'
+        else:
+            path = self.project / '.socket/vendor/state.json'
+            key = 'entries'
+        if not path.is_file():
+            return None
+        state = json.loads(path.read_text(encoding='utf-8'))
+        item = (state.get(key) or {}).get(PURL)
+        if item is None:
+            return None
+        return item if self.mode == 'hosted' else item.get('record')
+
+    def check_hosted(self, row, checks, before_lock, vlt, original):
+        if self.unchanged(row):
+            row['safeRefusal'] = True
+            checks.pop('cliSuccess', None)
+            return
+        lock_after = (self.project / 'vlt-lock.json').read_bytes()
+        text = lock_after.decode()
+        record = self.ledger_record()
+        checks['publishedPatch'] = bool(record) and record.get('uuid') == UUID
+        nodes = json.loads(text)['nodes']
+        instances = target_instances(text)
+        row['lockEntries'] = {d: nodes[d] for d in instances}
+        checks['referenceWritten'] = bool(instances) and all(
+            nodes[d][2] == self.ctx['artifact_sha512'] and len(nodes[d]) > 3
+            and nodes[d][3] == self.ctx['artifact_url'] for d in instances)
+        before, after = json.loads(before_lock), json.loads(lock_after)
+        checks['lockFormatPreserved'] = (before.get('lockfileVersion') == after.get(
+            'lockfileVersion') and line_endings(before_lock) == line_endings(lock_after))
+        checks['othersUntouched'] = (
+            before.get('options') == after.get('options')
+            and before.get('edges') == after.get('edges')
+            and {k: v for k, v in before['nodes'].items() if k not in instances}
+            == {k: v for k, v in after['nodes'].items() if k not in instances})
+        self.installs(row, checks, vlt, lock_after, text)
+        tampered = tamper_lock(lock_after, instances)
+        files = dict(snapshot(self.project), **{'vlt-lock.json': tampered})
+        checkout, code, err = self.fresh(vlt, 'tamper', files)
+        row['tamperTail'] = tail(err, 1500)
+        installed = any(p.is_dir() for p in self.copies(checkout, text))
+        checks['tamperedDigest'] = tampered != lock_after and (
+            (code != 0 and 'integrity' in err.lower())
+            or (self.spec.get('optional') and code == 0 and not installed))
+        shutil.rmtree(checkout, ignore_errors=True)
+        self.limitation(row, checks, ['tamperedDigest'])
+        self.vex(row, checks, vlt, 'redirected', record or self.record)
+        self.repeat(row, checks, lock_after)
+        # The warm tree the heal left behind.
+        if self.spec.get('optional'):
+            kept, row['keptOptional'] = self.holds(self.project, text, 'before')
+            details = [d for e in self.envelopes
+                       for d in envelope_details(e, 'redirect_vlt_reinstall_required')]
+            checks['optionalCopyKept'] = kept and any(OPTIONAL_HELD in d for d in details)
+            code, _, _ = vlt.run(['install'], self.project, self.home('install'), self.log)
+            _, row['warmOrdinaryFiles'] = self.holds(self.project, text, 'before')
+        else:
+            code, _, _ = vlt.run(['install'], self.project, self.home('install'), self.log)
+            patched, row['warmOrdinaryFiles'] = self.holds(self.project, text, 'after')
+            checks['warmOrdinary'] = code == 0 and patched
+        code, _, _ = vlt.reinstall(self.project, self.home('install'), self.log)
+        patched, row['warmCiFiles'] = self.holds(self.project, text, 'after')
+        checks['warmCi'] = code == 0 and patched
+        self.limitation(row, checks, ['warmOrdinary', 'warmCi'])
+        self.rolled_back(row, checks, vlt, original, text)
+
+    def check_vendored(self, row, checks, before_lock, vlt, original):
+        if self.unchanged(row):
+            row['safeRefusal'] = True
+            checks.pop('cliSuccess', None)
+            return
+        lock_after = (self.project / 'vlt-lock.json').read_bytes()
+        text = lock_after.decode()
+        record = self.ledger_record()
+        checks['publishedPatch'] = bool(record) and record.get('uuid') == UUID
+        payload = f'.socket/vendor/npm/{UUID}/{NAME}-{VERSION}/node_modules/{NAME}'
+        nodes = json.loads(text)['nodes']
+        file_nodes = [d for d, t in nodes.items()
+                      if d.startswith('file') and len(t) > 3 and t[3] == payload]
+        manifest_path = self.project / payload / 'package.json'
+        payload_ok = manifest_path.is_file() and json.loads(
+            manifest_path.read_text(encoding='utf-8')).get('version') == VERSION
+        specs = []
+        for importer, dep in self.spec['runtime']:
+            data = json.loads((self.project / importer / 'package.json').read_text(
+                encoding='utf-8'))
+            for section in ('dependencies', 'devDependencies', 'optionalDependencies'):
+                value = (data.get(section) or {}).get(dep)
+                if isinstance(value, str) and value.startswith('file:') and UUID in value:
+                    specs.append(value)
+        row['lockEntries'] = dict(fileNodes=file_nodes, payload=payload_ok, specs=specs)
+        checks['referenceWritten'] = bool(file_nodes) and payload_ok and len(specs) == len(
+            self.spec['runtime'])
+        before, after = json.loads(before_lock), json.loads(lock_after)
+        checks['lockFormatPreserved'] = (before.get('lockfileVersion') == after.get(
+            'lockfileVersion') and line_endings(before_lock) == line_endings(lock_after))
+        self.installs(row, checks, vlt, lock_after, text)
+        self.vex(row, checks, vlt, 'vendored', record or self.record)
+        self.repeat(row, checks, lock_after)
+        payload_dir = self.project / payload
+        shutil.rmtree(payload_dir)
+        code, out, _ = self.cli(['repair', '--yes', '--cwd', self.project])
+        repaired = parse_envelope(out) or {}
+        row['repairExitCode'] = code
+        rebuilt = payload_dir.is_dir() and any(
+            e.get('action') == 'rebuilt' and str(e.get('purl', '')).split('?')[0] == PURL
+            for e in repaired.get('events', []))
+        checkout, install_code, _ = self.fresh(vlt, 'repair-checkout', snapshot(self.project))
+        patched, row['repairFiles'] = self.holds(checkout, text, 'after')
+        checks['repair'] = code == 0 and rebuilt and install_code == 0 and patched and (
+            self.project / 'vlt-lock.json').read_bytes() == lock_after
+        shutil.rmtree(checkout, ignore_errors=True)
+        self.limitation(row, checks, ['repair'])
+        self.rolled_back(row, checks, vlt, original, text)
+
+    def check_agent(self, row, checks, before_lock, vlt, original):
+        lock_after = (self.project / 'vlt-lock.json').read_bytes()
+        text = lock_after.decode()
+        patched, row['installed'] = self.holds(self.project, text, 'after')
+        if self.unchanged(row) and not patched:
+            row['safeRefusal'] = True
+            checks.pop('cliSuccess', None)
+            return
+        path = self.project / '.socket' / 'manifest.json'
+        recorded = json.loads(path.read_text(encoding='utf-8')).get('patches', {}) \
+            if path.is_file() else {}
+        checks['manifestWritten'] = (recorded.get(PURL) or {}).get('uuid') == UUID
+        checks['lockUnchanged'] = lock_after == before_lock
+        checks['patchedBytes'] = patched
+        code, _, _ = vlt.run(['install'], self.project, self.home('install'), self.log)
+        still, row['afterNoopInstall'] = self.holds(self.project, text, 'after')
+        rewritten = (self.project / 'vlt-lock.json').read_bytes()
+        checks['survivesNoopInstall'] = code == 0 and still
+        if rewritten != lock_after and self.spec.get('crlf_lock') and \
+                rewritten == lock_after.replace(b'\r\n', b'\n'):
+            row.setdefault('lockNormalizedByVlt', []).append('noopInstall')
+            original = dict(original, **{'vlt-lock.json': rewritten})
+            lock_after = rewritten
+        self.repeat(row, checks, lock_after)
+        code, out, _ = self.revert()
+        row['rollbackExitCode'] = code
+        now = {n: b for n, b in snapshot(self.project).items() if not n.startswith('.socket/')}
+        expected = {n: b for n, b in original.items() if not n.startswith('.socket/')}
+        checks['rollbackByteIdentical'] = code == 0 and now == expected
+        pristine, row['afterRollback'] = self.holds(self.project, text, 'before')
+        checks['rollbackOriginalBytes'] = pristine
+
+
+def transient(row):
+    """A failure the service's transport caused (a request error, or a probe
+    that got no 2xx/4xx answer), never a functional one."""
+    if row.get('matchesExpectation'):
+        return False
+    probe = row.get('serveProbe') or {}
+    if probe and (probe.get('curlExit') or (probe.get('status') or 0) >= 500
+                  or probe.get('status') is None):
+        return True
+    return 'error sending request for url (' in json.dumps(row)
+
+
+def run_with_retries(cell_factory, job, attempts=3):
+    """Re-run a cell from a clean tree while it fails for transport reasons;
+    earlier attempts are listed on the row."""
+    history = []
+    for attempt in range(1, attempts + 1):
+        cell = cell_factory(*job)
+        row = cell.run_cell()
+        if not transient(row) or attempt == attempts:
+            if history:
+                row['transportRetries'] = history
+                save(cell.case / 'result.json', row)
+            return row
+        history.append(dict(attempt=attempt, error=row.get('error'),
+                            failingChecks=row.get('failingChecks')))
+        print(f'{row["cell"]}: transport failure; retrying ({attempt}/{attempts})', flush=True)
+        time.sleep(10 * attempt)
+
+
+# ---------------------------------------------------------------------------
+# The downgrade scenario (DESIGN §2.4 / §8.4 `downgrade`).
+
+def downgrade(args, ctx, vlt):
+    """vlt ledgers written by this build, then the published release's
+    `rollback` and `vendor --revert`: each must leave the project untouched
+    (fail closed) or fully reverted, never half-reverted (a dropped record
+    beside a still-redirected lock, a reverted lock with the payload left)."""
+    out = ctx['out'] / 'downgrade'
+    if out.exists():
+        shutil.rmtree(out)
+    out.mkdir(parents=True)
+    log = out / 'commands.log'
+    published = str(Path(args.downgrade_cli).resolve())
+    code, version_out, _ = run([published, '--version'], out, ctx['cli_env'], log)
+    rows = []
+    for mode in ('hosted', 'vendored'):
+        row = dict(scenario='downgrade', mode=mode, vlt=vlt.version, os=ctx['os'],
+                   publishedCli=version_out.strip(), **ctx['provenance'])
+        project = out / mode / 'project'
+        project.mkdir(parents=True)
+        spec = SHAPES['direct']
+        for rel, text in project_files(vlt.version, spec).items():
+            (project / rel).write_text(text, encoding='utf-8')
+        try:
+            vlt.run(['install'], project, out / mode / 'home', log)
+            pristine = snapshot(project)
+            env, extra = ctx['cli_env'], []
+            mirror = None
+            if mode == 'hosted' and not probe_artifact(
+                    ctx['artifact_url'], ctx['artifact_sha512'], out / 'probe')['verifies']:
+                # The live artifact is content-encoded, so this build refuses to
+                # write a hosted vlt ledger; write it through the identity mirror.
+                mirror = IdentityMirror().__enter__()
+                env = dict(env, SOCKET_PROXY_URL=mirror.url)
+                extra = ['--patch-server-url', mirror.url]
+                row['identityMirror'] = True
+            try:
+                code, output, _ = run([ctx['cli'], 'scan', '--mode', mode, '--json', '--yes',
+                                       '--no-telemetry', *extra, '--cwd', project],
+                                      project, env, log)
+            finally:
+                if mirror:
+                    mirror.__exit__()
+            written = snapshot(project)
+            ledger = '.socket/vendor/redirect-state.json' if mode == 'hosted' \
+                else '.socket/vendor/state.json'
+            state = json.loads(written.get(ledger, b'{}'))
+            kinds = [e.get('kind') for e in state.get('edits', [])] if mode == 'hosted' else [
+                e.get('flavor') for e in (state.get('entries') or {}).values()]
+            row['ledgerKinds'] = kinds
+            if code != 0 or ('redirect_vlt_lock_node' if mode == 'hosted' else 'vlt') not in kinds:
+                raise RuntimeError(f'this build wrote no vlt {mode} ledger (exit {code}): '
+                                   f'{tail(output, 1500)}')
+            command = ['rollback'] if mode == 'hosted' else ['vendor', '--revert']
+            code, output, _ = run([published, *command, '--json', '--yes', '--no-telemetry',
+                                   '--cwd', project], project, ctx['cli_env'], log)
+            row['publishedExitCode'] = code
+            row['publishedCodes'] = sorted(set(envelope_codes(parse_envelope(output))))
+            now = snapshot(project)
+            untouched = now == written
+            reverted = {n: b for n, b in now.items() if not n.startswith('.socket/')} == {
+                n: b for n, b in pristine.items() if not n.startswith('.socket/')} and not any(
+                n.startswith('.socket/vendor/') for n in now)
+            row['untouched'] = untouched
+            row['fullyReverted'] = reverted
+            row['changedFiles'] = sorted(n for n in set(now) | set(written)
+                                         if now.get(n) != written.get(n))
+            row['passed'] = untouched or reverted
+        except Exception as error:  # noqa: BLE001 — the row must explain the failure
+            row['error'] = tail(f'{type(error).__name__}: {error}', 3000)
+            row['passed'] = False
+        rows.append(row)
+        print(f"downgrade {mode}: {'OK' if row['passed'] else 'BAD'} "
+              f"untouched={row.get('untouched')} reverted={row.get('fullyReverted')} "
+              f"{row.get('error', '')[:300]}", flush=True)
+    save(out / 'summary.json', rows)
+    return 0 if all(r['passed'] for r in rows) else 1
+
+
+# ---------------------------------------------------------------------------
+# The canary watchdogs and the cross-OS lock comparison.
+
+def published_versions():
+    return json.loads(subprocess.run([npm_command(), 'view', 'vlt', 'versions', '--json'],
+                                     capture_output=True, check=True).stdout)
+
+
+def canary_checks(ctx, versions):
+    """The release watchdog and the unsupported-lockfileVersion refusal."""
+    out = ctx['out'] / 'canary'
+    out.mkdir(parents=True, exist_ok=True)
+    supported, excluded = release_lists()
+    report = dict(unlisted=unlisted_releases(published_versions(), supported, excluded),
+                  locks=[])
+    ok = not report['unlisted']
+    for version in versions:
+        vlt = Vlt(ctx['tools'][version], version)
+        project = out / version / 'project'
+        if project.exists():
+            shutil.rmtree(project)
+        project.mkdir(parents=True)
+        for rel, text in project_files(version, SHAPES['direct']).items():
+            (project / rel).write_text(text, encoding='utf-8')
+        log = out / version / 'commands.log'
+        vlt.run(['install'], project, out / version / 'home', log)
+        lock = project / 'vlt-lock.json'
+        entry = dict(vlt=version, lockfileVersion=None, refused=None)
+        if lock.is_file():
+            entry['lockfileVersion'] = json.loads(lock.read_bytes()).get('lockfileVersion')
+        if entry['lockfileVersion'] not in (None, 0, 1):
+            before = snapshot(project)
+            code, output, _ = run([ctx['cli'], 'scan', '--mode', 'hosted', '--dry-run', '--json',
+                                   '--no-telemetry', '--cwd', project], project, ctx['cli_env'],
+                                  log)
+            codes = envelope_codes(parse_envelope(output))
+            entry['refused'] = ('redirect_vlt_lock_unsupported' in codes
+                                and snapshot(project) == before)
+            ok = ok and entry['refused']
+        report['locks'].append(entry)
+    save(out / 'report.json', report)
+    for version in report['unlisted']:
+        print(f'::error::vlt {version} is published but neither supported nor excluded in '
+              f'docs/testing/vlt-compatibility.md (Releases)', flush=True)
+    for entry in report['locks']:
+        print(f"vlt {entry['vlt']}: lockfileVersion {entry['lockfileVersion']!r}"
+              + ('' if entry['refused'] is None else f", refused={entry['refused']}"), flush=True)
+    return 0 if ok else 1
+
+
+def serve_probe(out):
+    """The artifact vlt would fetch: 200, no content encoding (or identity)
+    and the API's sha512 over the wire bytes."""
+    url, expected = fetch_grant()
+    probe = probe_artifact(url, expected, out)
+    save(out / 'serve-probe.json', probe)
+    print(json.dumps(probe, indent=2, sort_keys=True), flush=True)
+    if probe['verifies']:
+        return 0
+    if not probe['identity']:
+        print(f"::error::{url} is served with content-encoding {probe['contentEncoding']!r} "
+              f"(HTTP {probe['status']}); vlt fails EINTEGRITY on it", flush=True)
+    else:
+        print(f"::error::{url} sha512 {probe['sha512']} != API {expected}", flush=True)
+    return 1
+
+
+def compare_locks(rows):
+    """{(vlt, mode, shape): {os: vlt-lock.json sha256}} for every cell seen
+    on more than one OS, and the groups whose locks differ."""
+    groups = {}
+    for row in rows:
+        lock = (row.get('manifestSha256') or {}).get('vlt-lock.json')
+        if lock and row.get('os'):
+            groups.setdefault((row['vlt'], row['mode'], row['shape']), {})[row['os']] = lock
+    shared = {k: v for k, v in groups.items() if len(v) > 1}
+    differing = sorted(k for k, v in shared.items() if len(set(v.values())) > 1)
+    return shared, differing
+
+
+def diff_locks(dirs, out, required):
+    rows = []
+    for directory in dirs:
+        for result in sorted(Path(directory).rglob('result.json')):
+            row = json.loads(result.read_text(encoding='utf-8'))
+            tree_lock = result.parent / 'tree' / 'vlt-lock.json'
+            if 'manifestSha256' in row and tree_lock.is_file() and sha256(
+                    tree_lock.read_bytes()) != row['manifestSha256'].get('vlt-lock.json'):
+                raise SystemExit(f'{result.parent}: tree/vlt-lock.json differs from its row')
+            rows.append(row)
+    shared, differing = compare_locks(rows)
+    missing = []
+    for key in required:
+        oses = shared.get(key, {})
+        if set(oses) != {'linux', 'darwin', 'windows'}:
+            missing.append(f'{" ".join(key)}: locks from {sorted(oses) or "no OS"}')
+    report = dict(groups={' '.join(k): v for k, v in sorted(shared.items())},
+                  differing=[' '.join(k) for k in differing], missing=missing)
+    save(out / 'lock-diff.json', report)
+    for key in differing:
+        print(f'::error::vlt-lock.json differs across OS for {" ".join(key)}: {shared[key]}')
+    for line in missing:
+        print(f'::error::no cross-OS lock set for {line}')
+    print(f'{len(shared)} cells compared across OS; {len(differing)} differ', flush=True)
+    return 1 if differing or missing else 0
+
+
+# ---------------------------------------------------------------------------
+
+def summarize(out, rows):
+    save(out / 'summary.json', rows)
+    marks = {'patched': 'P', 'safe-refusal': 'R', 'unsafe': 'U', 'error': 'E',
+             'unsupported': 'N', BLOCKED: 'B'}
+    lines = ['| cell | verdict | expected | failing | codes |', '|---|---|---|---|---|']
+    for row in sorted(rows, key=lambda r: r.get('cell', '')):
+        flag = '' if row.get('matchesExpectation') else ' ?'
+        lines.append(f"| {row.get('cell')} | {marks.get(row.get('verdict'), '?')}{flag} | "
+                     f"{marks.get(row.get('expectedVerdict'), '?')} | "
+                     f"{', '.join(row.get('failingChecks', []))} | "
+                     f"{', '.join(row.get('codes', []))} |")
+    bad = [r.get('cell') for r in rows if not r.get('matchesExpectation')]
+    lines += ['', f'{len(rows)} cells; {len(bad)} not as expected'
+              + (': ' + ', '.join(bad) if bad else '')]
+    (out / 'summary.md').write_text('\n'.join(lines) + '\n', encoding='utf-8')
+    return bad
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description=__doc__,
+                                     formatter_class=argparse.RawDescriptionHelpFormatter)
+    parser.add_argument('--cli', type=Path, help='the socket-patch binary')
+    parser.add_argument('--cli-revision', default=os.environ.get('CLI_REVISION') or None)
+    parser.add_argument('--cli-build-sha', default=os.environ.get('CLI_BUILD_SHA') or None)
+    parser.add_argument('--out', '--output', dest='out', type=Path, required=True)
+    parser.add_argument('--serve-probe', action='store_true',
+                        help='probe the public artifact as vlt fetches it (the serve watchdog)')
+    parser.add_argument('--canary-checks', action='store_true',
+                        help='run the release watchdog and the unsupported-lock refusal')
+    parser.add_argument('--diff-locks', nargs='+', type=Path, metavar='DIR',
+                        help='compare vlt-lock.json across OS in downloaded result rows')
+    parser.add_argument('--require-cross-os', nargs='+', default=[], metavar='VLT:MODE:SHAPE',
+                        help='cells --diff-locks must see on linux, darwin and windows')
+    parser.add_argument('--tools', type=Path,
+                        help='vlt install root (<root>/<version>/node_modules/vlt/vlt.js)')
+    parser.add_argument('--versions', nargs='+', default=VERSIONS)
+    parser.add_argument('--shapes', nargs='+', default=list(SHAPES), choices=list(SHAPES))
+    parser.add_argument('--modes', nargs='+', default=MODES, choices=MODES)
+    parser.add_argument('--jobs', type=int, default=2)
+    parser.add_argument('--allow-unlisted', action='store_true',
+                        help='accept a release the Releases table does not list (the canary)')
+    parser.add_argument('--identity-mirror', action='store_true',
+                        help='serve production through a loopback mirror with identity-encoded '
+                             'artifacts (a local preview of the serve fix; never imported)')
+    parser.add_argument('--downgrade-cli', type=Path,
+                        help='run the downgrade scenario against this published socket-patch')
+    parser.add_argument('--keep-projects', action='store_true')
+    args = parser.parse_args(argv)
+    if args.diff_locks:
+        args.out.mkdir(parents=True, exist_ok=True)
+        return diff_locks(args.diff_locks, args.out.resolve(),
+                          [tuple(r.split(':', 2)) for r in args.require_cross_os])
+    if args.serve_probe:
+        return serve_probe(args.out.resolve())
+    if args.cli is None:
+        parser.error('--cli is required')
+    supported, excluded = release_lists()
+    for version in args.versions:
+        status = release_status(version, supported, excluded)
+        if status == 'excluded' or (status == 'unlisted' and not args.allow_unlisted):
+            parser.error(f'vlt {version} is {status} (docs/testing/vlt-compatibility.md Releases)')
+    out = args.out.resolve()
+    out.mkdir(parents=True, exist_ok=True)
+    cli = out / ('socket-patch.exe' if platform.system() == 'Windows' else 'socket-patch')
+    shutil.copy2(args.cli.resolve(), cli)
+    tool_root = (args.tools or out / 'tools').resolve()
+    provenance = dict(capturedAt=datetime.now(timezone.utc).isoformat(),
+                      platform=platform.platform(), cliRevision=args.cli_revision,
+                      cliBuildSha=args.cli_build_sha, cliSha256=sha256(cli.read_bytes()),
+                      harness='socket-patch scripts/backtest-vlt.py')
+    os_name = platform.system().lower()
+    try:
+        tools = {v: install_tool(tool_root, v, out / 'logs' / f'install-{v}.log')
+                 for v in args.versions}
+    except Exception as error:  # noqa: BLE001 — the artifact must explain the run
+        save(out / 'summary.json', [dict(vlt=v, os=os_name, passed=False, verdict='error',
+                                         matchesExpectation=False,
+                                         error=f'vlt install failed: {error}', **provenance)
+                                    for v in args.versions])
+        print(f'vlt install failed: {error}', flush=True)
+        return 1
+    mirror = IdentityMirror().__enter__() if args.identity_mirror else None
+    try:
+        api = mirror.url if mirror else API_URL
+        env = {'SOCKET_PROXY_URL': mirror.url} if mirror else {}
+        artifact_url, artifact_sha512 = fetch_grant(api)
+        record = fetch_record(api)
+        ctx = dict(out=out, cli=cli, cli_env=cli_env(env), os=os_name, tools=tools,
+                   provenance=dict(provenance, identityMirror=bool(mirror)),
+                   keep_projects=args.keep_projects, artifact_url=artifact_url,
+                   artifact_sha512=artifact_sha512, record=record,
+                   patch_server_url=mirror.url if mirror else None,
+                   patch=dict(name=NAME, version=VERSION, uuid=UUID, purl=PURL,
+                              integrity=artifact_sha512, url=artifact_url,
+                              files=record.get('files')))
+        if args.downgrade_cli:
+            return downgrade(args, ctx, Vlt(tools[args.versions[0]], args.versions[0]))
+        if args.canary_checks:
+            return canary_checks(ctx, args.versions)
+        matrix = cells(args.versions, args.modes, args.shapes)
+        if not matrix:
+            reason = (f'no cell applies: versions={" ".join(args.versions)} '
+                      f'modes={" ".join(args.modes)} shapes={" ".join(args.shapes)}')
+            save(out / 'summary.json', [dict(noCells=True, passed=False, error=reason,
+                                             **provenance)])
+            print(f'::notice::{reason}', flush=True)
+            return 0
+        with concurrent.futures.ThreadPoolExecutor(max_workers=args.jobs) as pool:
+            rows = list(pool.map(
+                lambda c: run_with_retries(lambda *job: Cell(ctx, *job), c), matrix))
+    finally:
+        if mirror:
+            mirror.__exit__()
+    bad = summarize(out, rows)
+    for version in args.versions:
+        mine = [r for r in rows if r['vlt'] == version]
+        print(f'vlt {version}: {sum(bool(r.get("matchesExpectation")) for r in mine)}/{len(mine)} '
+              f'as expected, {sum(r.get("verdict") == BLOCKED for r in mine)} {BLOCKED}',
+              flush=True)
+    return 1 if bad else 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/install-vlt.sh b/scripts/install-vlt.sh
new file mode 100755
index 00000000..41579d32
--- /dev/null
+++ b/scripts/install-vlt.sh
@@ -0,0 +1,91 @@
+#!/usr/bin/env bash
+# Install one vlt release for the real-vlt suites and print its vlt.js path.
+#
+#   scripts/install-vlt.sh <version|latest> <prefix>
+#
+# `npm pack` (5 attempts), then the tarball's sha512 must equal the registry's
+# `dist.integrity` and, when scripts/vlt-historical-integrity.json lists the
+# release, that committed pin too (fail closed). The tarball is installed
+# with `npm install --prefix <prefix> --ignore-scripts`, and `node vlt.js
+# --version` must print the release. Finally the running Node must meet the
+# release's engine floor (DESIGN §1.1): >=22 through 1.0.0-rc.9, >=22.9.0 for
+# rc.10 … rc.18, >=22.22.0 from rc.22.
+set -euo pipefail
+
+if [ "$#" -ne 2 ]; then
+  echo "usage: $0 <version|latest> <prefix>" >&2
+  exit 2
+fi
+requested=$1
+prefix=$2
+here=$(cd "$(dirname "$0")" && pwd)
+
+version=$requested
+if [ "$requested" = latest ]; then
+  version=$(npm view vlt@latest version)
+fi
+mkdir -p "$prefix"
+tarball=""
+for attempt in 1 2 3 4 5; do
+  if name=$(npm pack "vlt@$version" --pack-destination "$prefix" --silent); then
+    tarball="$prefix/$(printf '%s\n' "$name" | tail -n 1)"
+    break
+  fi
+  if [ "$attempt" = 5 ]; then
+    echo "npm pack vlt@$version failed on all 5 attempts" >&2
+    exit 1
+  fi
+  sleep $((attempt * 5))
+done
+
+expected=$(npm view "vlt@$version" dist.integrity)
+# shellcheck disable=SC2016 # JavaScript, not shell
+VLT_TARBALL=$tarball VLT_EXPECTED=$expected VLT_VERSION=$version \
+  VLT_PINS="$here/vlt-historical-integrity.json" node -e '
+const fs = require("fs");
+const crypto = require("crypto");
+const actual = "sha512-" + crypto.createHash("sha512")
+  .update(fs.readFileSync(process.env.VLT_TARBALL)).digest("base64");
+const expected = process.env.VLT_EXPECTED;
+let pinned;
+try {
+  pinned = JSON.parse(fs.readFileSync(process.env.VLT_PINS, "utf8"))[process.env.VLT_VERSION];
+} catch (e) {
+  pinned = undefined;
+}
+if (actual !== expected || (pinned !== undefined && pinned !== expected)) {
+  console.error(`vlt@${process.env.VLT_VERSION}: tarball ${actual}, registry ${expected}` +
+    (pinned === undefined ? "" : `, pinned ${pinned}`));
+  process.exit(1);
+}
+'
+
+npm install --prefix "$prefix" --no-audit --no-fund --ignore-scripts --no-package-lock "$tarball" >&2
+rm -f "$tarball"
+js="$prefix/node_modules/vlt/vlt.js"
+actual=$(node --no-warnings "$js" --version)
+if [ "$actual" != "$version" ]; then
+  echo "expected vlt $version at $js, got $actual" >&2
+  exit 1
+fi
+
+# shellcheck disable=SC2016 # JavaScript, not shell
+VLT_VERSION=$version node -e '
+const v = process.env.VLT_VERSION;
+const m = /^(\d+)\.(\d+)\.(\d+)(?:-(rc\.)?(\d+))?$/.exec(v);
+if (!m) { console.error(`not a vlt release: ${v}`); process.exit(1); }
+const rc = m[4] ? Number(m[5]) : null;
+let floor = "22.22.0";
+if (m[1] === "0" || (rc !== null && rc <= 9)) floor = "22.0.0";
+else if (rc !== null && rc <= 18) floor = "22.9.0";
+const have = process.versions.node.split(".").map(Number);
+const need = floor.split(".").map(Number);
+for (let i = 0; i < 3; i++) {
+  if (have[i] > need[i]) break;
+  if (have[i] < need[i]) {
+    console.error(`vlt ${v} needs Node >= ${floor}; running ${process.versions.node}`);
+    process.exit(1);
+  }
+}
+'
+printf '%s\n' "$js"
diff --git a/scripts/tests/test_backtest_harnesses.py b/scripts/tests/test_backtest_harnesses.py
index f4fc7719..b2cdb129 100644
--- a/scripts/tests/test_backtest_harnesses.py
+++ b/scripts/tests/test_backtest_harnesses.py
@@ -2,6 +2,7 @@
 
 import concurrent.futures
 import importlib.util
+import json
 import os
 from pathlib import Path
 import subprocess
@@ -22,6 +23,7 @@ def load_script(name):
 pipenv = load_script("backtest-pipenv")
 pdm = load_script("backtest-pdm")
 bun = load_script("backtest-bun")
+vlt = load_script("backtest-vlt")
 
 
 class BunTransportRetryTests(unittest.TestCase):
@@ -264,5 +266,346 @@ def test_other_platforms_do_not_preload_linux_library(self):
                     self.assertNotIn("LD_PRELOAD", pdm.base_env())
 
 
+class VltOracleTests(unittest.TestCase):
+    """The oracle is the documented boundaries, never the CLI's codes."""
+
+    def test_every_mode_must_patch_the_plain_shapes_on_every_era(self):
+        for version in vlt.VERSIONS:
+            for mode in vlt.MODES:
+                with self.subTest(version=version, mode=mode):
+                    want = 'safe-refusal' if mode == 'vendored' and vlt.era_of(version) == 'A0' \
+                        else 'patched'
+                    self.assertEqual(vlt.expected_verdict(version, mode, 'direct'), want)
+
+    def test_refusals_follow_the_support_matrix(self):
+        self.assertEqual(vlt.expected_verdict('1.2.0', 'hosted', 'custom-registry'), 'safe-refusal')
+        self.assertEqual(vlt.expected_verdict('1.2.0', 'vendored', 'custom-registry'),
+                         'safe-refusal')
+        self.assertEqual(vlt.expected_verdict('1.2.0', 'agent', 'custom-registry'), 'patched')
+        self.assertEqual(vlt.expected_verdict('1.2.0', 'agent', 'lockfile-only'), 'safe-refusal')
+        self.assertEqual(vlt.expected_verdict('1.2.0', 'hosted', 'lockfile-only'), 'patched')
+        self.assertEqual(vlt.expected_verdict('0.0.0-16', 'vendored', 'direct'), 'safe-refusal')
+
+    def test_cells_a_shape_cannot_express_are_not_in_the_matrix(self):
+        self.assertIsNone(vlt.expected_verdict('1.2.0', 'hosted', 'workspace-member-vendored'))
+        self.assertIsNone(vlt.expected_verdict('1.2.0', 'hosted', 'hosted-then-vendored'))
+        self.assertIsNone(vlt.expected_verdict('1.2.0', 'vendored', 'vendored-then-hosted'))
+        self.assertIsNone(vlt.expected_verdict('0.0.0-16', 'vendored', 'hosted-then-vendored'))
+        self.assertIsNone(vlt.expected_verdict('0.0.0-12', 'hosted', 'custom-registry'))
+        for version in ('0.0.0-24', '0.0.0-29'):
+            self.assertIsNone(vlt.expected_verdict(version, 'hosted', 'optional'),
+                              'these releases write no lock for an optional-only project')
+        self.assertEqual(vlt.expected_verdict('0.0.0-30', 'hosted', 'optional'), 'patched')
+
+    def test_expected_codes_come_from_the_lock_the_cell_writes(self):
+        self.assertEqual(vlt.expected_codes('0.0.0-16', 'hosted', 'direct'),
+                         ['redirect_vlt_lockfile_version_missing'])
+        self.assertEqual(vlt.expected_codes('0.0.0-32', 'hosted', 'direct'),
+                         ['redirect_vlt_old_lockfile_ignored'])
+        self.assertEqual(vlt.expected_codes('0.0.0-20', 'hosted', 'direct'), [],
+                         'vlt.json declares "modifiers" on 0.0.0-16 … 0.0.0-24')
+        self.assertEqual(vlt.expected_codes('0.0.0-32', 'hosted', 'alias'), [],
+                         'an alias-only era-A lock has no `··` id')
+        self.assertEqual(vlt.expected_codes('1.2.0', 'hosted', 'custom-registry'),
+                         ['redirect_vlt_custom_registry_skipped'])
+        self.assertEqual(vlt.expected_codes('0.0.0-16', 'vendored', 'direct'),
+                         ['vendor_lockfile_version_unsupported'])
+        self.assertEqual(vlt.expected_codes('0.0.0-32', 'vendored', 'direct'),
+                         ['vendor_vlt_legacy_lockfile'])
+        self.assertEqual(vlt.expected_codes('0.0.0-32', 'vendored', 'alias'), [])
+        self.assertEqual(vlt.expected_codes('1.2.0', 'vendored', 'custom-registry'),
+                         ['vendor_lock_entry_unsupported'])
+        self.assertEqual(vlt.expected_codes('1.2.0', 'agent', 'lockfile-only'),
+                         ['package_not_installed'])
+        self.assertEqual(vlt.expected_codes('1.0.0-rc.14', 'hosted', 'direct'), [])
+
+    def test_the_optional_only_limitation_is_bounded(self):
+        for version, limited in (('0.0.0-23', False), ('0.0.0-30', True), ('1.0.0-rc.14', True),
+                                 ('1.0.4', True), ('1.0.5', False), ('1.2.0', False)):
+            with self.subTest(version=version):
+                self.assertEqual(bool(vlt.known_vlt_limitation(version, 'hosted', 'optional')),
+                                 limited)
+        self.assertIsNone(vlt.known_vlt_limitation('1.0.4', 'hosted', 'optional-mixed'))
+        self.assertIsNone(vlt.known_vlt_limitation('1.0.4', 'agent', 'optional'))
+
+    def row(self, **fields):
+        base = dict(expectedVerdict='patched', expectedCodes=[], codes=[], verdict='patched')
+        base.update(fields)
+        return base
+
+    def test_matches_expectation(self):
+        self.assertTrue(vlt.matches_expectation(self.row()))
+        self.assertFalse(vlt.matches_expectation(self.row(verdict='safe-refusal')),
+                         'a spurious refusal of a must-patch cell fails')
+        self.assertFalse(vlt.matches_expectation(self.row(expectedCodes=['x'])),
+                         'a missing documented code fails')
+        self.assertTrue(vlt.matches_expectation(self.row(verdict=vlt.BLOCKED,
+                                                         blockedByProbe='gzip')))
+        self.assertFalse(vlt.matches_expectation(self.row(verdict=vlt.BLOCKED)),
+                         'blocked needs the probe to have seen a content-encoding')
+        self.assertFalse(vlt.matches_expectation(self.row(
+            verdict=vlt.BLOCKED, blockedByProbe='gzip', expectedVerdict='safe-refusal')))
+        limited = self.row(verdict='unsupported', vltLimitations=['x'], expectedLimitation='x')
+        self.assertTrue(vlt.matches_expectation(limited))
+        self.assertFalse(vlt.matches_expectation(dict(limited, expectedLimitation=None)),
+                         'only a documented limitation may leave a cell unproven')
+        self.assertFalse(vlt.matches_expectation(dict(limited, failingChecks=['freshCi'])))
+
+    def test_observed_verdict(self):
+        self.assertEqual(vlt.observed_verdict({'error': 'x'}), 'error')
+        self.assertEqual(vlt.observed_verdict({'blocked': True}), vlt.BLOCKED)
+        self.assertEqual(vlt.observed_verdict({'safeRefusal': True}), 'safe-refusal')
+        self.assertEqual(vlt.observed_verdict({'passed': True}), 'patched')
+        self.assertEqual(vlt.observed_verdict({'vltLimitations': ['x']}), 'unsupported')
+        self.assertEqual(vlt.observed_verdict({'failingChecks': ['freshCi']}), 'unsafe')
+
+    def test_shapes_are_depscan_capture_shapes(self):
+        # The depscan audit (capture-vlt.py SHAPES) reads these rows by shape name.
+        capture_names = {'direct', 'dev', 'optional', 'optional-mixed', 'alias', 'scoped',
+                         'transitive', 'two-versions', 'workspace', 'workspace-member-vendored',
+                         'self-referencing-member-vendored', 'peer-variants', 'crlf-lock',
+                         'custom-registry', 'mirror', 'scalar-registry', 'lockfile-only',
+                         'hosted-then-vendored', 'vendored-then-hosted', 'get-uuid'}
+        self.assertLessEqual(set(vlt.SHAPES), capture_names)
+
+
+class VltConfigTests(unittest.TestCase):
+    """write_vlt_json follows the DESIGN §8.3 per-era registry table."""
+
+    def config(self, version, registry=vlt.NPM_REGISTRY, **spec):
+        text = vlt.write_vlt_json(version, spec, registry)
+        return None if text is None else json.loads(text)
+
+    def test_public_registry(self):
+        self.assertEqual(self.config('1.2.0'),
+                         {'config': {'registries': {'npm': vlt.NPM_REGISTRY}}})
+        self.assertEqual(self.config('1.0.4'), {'config': {
+            'registry': vlt.NPM_REGISTRY, 'registries': {'npm': vlt.NPM_REGISTRY}}})
+        self.assertEqual(self.config('1.0.0-rc.33'), {'config': {
+            'registry': vlt.NPM_REGISTRY, 'registries': {'npm': vlt.NPM_REGISTRY}}})
+        self.assertIsNone(self.config('1.0.0-rc.32'),
+                          'vlt strips a registry equal to its npmjs default')
+        self.assertIsNone(self.config('1.0.0-rc.14'))
+        self.assertEqual(self.config('0.0.0-20'), {'modifiers': {}})
+        self.assertIsNone(self.config('0.0.0-25'))
+        self.assertIsNone(self.config('0.0.0-1'))
+
+    def test_mirror_registry_per_era(self):
+        r = 'http://127.0.0.1:4873/'
+        self.assertEqual(self.config('0.0.0-13', r), {'registry': r}, 'flat keys ≤ 0.0.0-13')
+        self.assertEqual(self.config('0.0.0-14', r), {'config': {'registry': r}})
+        self.assertEqual(self.config('0.0.0-16', r),
+                         {'config': {'registry': r}, 'modifiers': {}})
+        self.assertEqual(self.config('1.0.0-rc.6', r), {'config': {'registry': r}})
+        for version in ('1.0.0-rc.7', '1.0.0-rc.14', '1.0.0-rc.29'):
+            self.assertEqual(self.config(version, r), {'config': {'registry': vlt.NPM_REGISTRY}},
+                             'rc.7 … rc.29 are not hermetic')
+        self.assertEqual(self.config('1.0.0-rc.30', r), {'config': {'registry': r}})
+        self.assertEqual(self.config('1.0.0-rc.33', r),
+                         {'config': {'registry': r, 'registries': {'npm': r}}})
+        self.assertEqual(self.config('1.0.5', r), {'config': {'registries': {'npm': r}}})
+
+    def test_workspaces_and_named_registries(self):
+        self.assertEqual(self.config('1.2.0', members=['packages/a'])['workspaces'], 'packages/*')
+        self.assertEqual(self.config('0.0.0-13', members=['packages/a']),
+                         {'workspaces': 'packages/*'})
+        files = vlt.project_files('0.0.0-12', vlt.SHAPES['workspace'])
+        self.assertEqual(json.loads(files['vlt-workspaces.json']), {'packages': 'packages/*'})
+        self.assertNotIn('vlt.json', files)
+        custom = self.config('1.2.0', registries={'acme': vlt.ACME_REGISTRY})
+        self.assertEqual(custom['config']['registries'],
+                         {'acme': vlt.ACME_REGISTRY, 'npm': vlt.NPM_REGISTRY})
+
+
+class VltReleaseTests(unittest.TestCase):
+    supported, excluded = vlt.release_lists()
+
+    def test_exclusions(self):
+        for version in ('0.0.0-0', '0.0.0-2', '0.0.0-10', '0.0.0-22', '1.0.0-rc.19',
+                        '1.0.0-rc.21', '0.0.1', '1.0.0', '0.0.0-0.1733957343934'):
+            with self.subTest(version=version):
+                self.assertEqual(vlt.release_status(version, self.supported, self.excluded),
+                                 'excluded')
+        for version in vlt.VERSIONS:
+            self.assertEqual(vlt.release_status(version, self.supported, self.excluded),
+                             'supported')
+        self.assertEqual(vlt.release_status('1.3.0', self.supported, self.excluded), 'unlisted')
+        self.assertEqual(vlt.unlisted_releases(['1.2.0', '0.0.0-22', '1.3.0', '0.0.0-0.17'],
+                                               self.supported, self.excluded), ['1.3.0'])
+
+    def test_main_refuses_an_excluded_release(self):
+        with self.assertRaises(SystemExit), patch('sys.stderr'):
+            vlt.main(['--cli', 'x', '--out', 'y', '--versions', '0.0.0-22'])
+        with self.assertRaises(SystemExit), patch('sys.stderr'):
+            vlt.main(['--cli', 'x', '--out', 'y', '--versions', '9.9.9'])
+
+    def test_versions_order_and_eras(self):
+        ordered = sorted(['1.2.0', '1.0.0-rc.14', '0.0.0-32', '1.0.10', '1.0.0-rc.9', '1.0.4'],
+                         key=vlt.version_key)
+        self.assertEqual(ordered, ['0.0.0-32', '1.0.0-rc.9', '1.0.0-rc.14', '1.0.4', '1.0.10',
+                                   '1.2.0'])
+        eras = {v: vlt.era_of(v) for v in ('0.0.0-18', '0.0.0-19', '1.0.0-rc.8', '1.0.0-rc.9',
+                                           '1.0.0-rc.14', '1.0.0-rc.15', '1.0.0-rc.32',
+                                           '1.0.0-rc.33', '1.0.7', '1.0.8', '1.1.1', '1.2.0')}
+        self.assertEqual(list(eras.values()),
+                         ['A0', 'A', 'A', 'B', 'B', 'C', 'C', 'D', 'D', 'E', 'E', 'F'])
+
+    def test_pinned_integrity_covers_every_supported_release(self):
+        pinned = json.loads(vlt.HISTORICAL_INTEGRITY.read_text())
+        self.assertEqual(sorted(pinned, key=vlt.version_key),
+                         sorted(self.supported, key=vlt.version_key))
+        self.assertTrue(all(v.startswith('sha512-') for v in pinned.values()))
+        self.assertEqual(pinned['1.2.0'], 'sha512-t7ONkM8YgRlY0g+6l+OU4oS2WS/dp7DK/vmFwNqxA0D+'
+                         'ehPWprNOTTH3uUYURAnCg5lr9vzJSmX9nNCcG5xGXA==')
+
+
+class VltLockHelperTests(unittest.TestCase):
+    LOCK = ('{\n  "lockfileVersion": 1,\n  "options": {},\n  "nodes": {\n'
+            '    "~npm~minimist@1.2.2": [0,"minimist","sha512-AAAA==","https://r/m.tgz"],\n'
+            '    "~npm~minimist@1.2.2~peer.1": [0,"minimist","sha512-AAAA=="],\n'
+            '    "~acme~minimist@1.2.2": [0,"minimist","sha512-BBBB=="],\n'
+            '    "~npm~minimist@1.2.8": [0,"minimist","sha512-CCCC=="],\n'
+            '    "·npm·minimist@1.2.2": [0,"minimist","sha512-DDDD=="],\n'
+            '    "··minimist@1.2.2": [0,"minimist","sha512-EEEE=="],\n'
+            '    "file~.socket+vendor": [0,"minimist",null,".socket/vendor"]\n'
+            '  },\n  "edges": {}\n}\n')
+
+    def test_split_dep_id_both_grammars(self):
+        self.assertEqual(vlt.split_dep_id('~npm~minimist@1.2.2'), ('npm', 'minimist', '1.2.2', None))
+        self.assertEqual(vlt.split_dep_id('~~minimist@1.2.2~peer.1'),
+                         ('', 'minimist', '1.2.2', 'peer.1'))
+        self.assertEqual(vlt.split_dep_id('··minimist@1.2.2'), ('', 'minimist', '1.2.2', None))
+        self.assertEqual(vlt.split_dep_id('~npm~@s+p@1.0.0'), ('npm', '@s/p', '1.0.0', None))
+        self.assertEqual(vlt.split_dep_id('·npm·@s§p@1.0.0'), ('npm', '@s/p', '1.0.0', None))
+        self.assertIsNone(vlt.split_dep_id('file~_d'))
+        self.assertIsNone(vlt.split_dep_id('file·.'))
+
+    def test_target_instances_are_default_registry_nodes(self):
+        self.assertEqual(vlt.target_instances(self.LOCK), [
+            '~npm~minimist@1.2.2', '~npm~minimist@1.2.2~peer.1', '·npm·minimist@1.2.2',
+            '··minimist@1.2.2'])
+        self.assertIn('~acme~minimist@1.2.2', vlt.target_instances(self.LOCK, any_registry=True))
+
+    def test_tamper_lock_rewrites_only_the_named_lines(self):
+        crlf = self.LOCK.replace('\n', '\r\n').encode()
+        out = vlt.tamper_lock(crlf, ['~npm~minimist@1.2.2', '·npm·minimist@1.2.2'])
+        wrong = vlt.sri_sha512(b'tampered by backtest-vlt.py')
+        lines = out.decode().split('\r\n')
+        self.assertIn(f'"~npm~minimist@1.2.2": [0,"minimist","{wrong}","https://r/m.tgz"],',
+                      lines[4])
+        self.assertIn(wrong, lines[8])
+        self.assertEqual([l for i, l in enumerate(lines) if i not in (4, 8)],
+                         [l for i, l in enumerate(crlf.decode().split('\r\n')) if i not in (4, 8)])
+
+    def test_snapshot_keeps_the_vendored_payload_and_drops_node_modules(self):
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp)
+            payload = f'.socket/vendor/npm/{vlt.UUID}/minimist-1.2.2/node_modules/minimist'
+            for rel in ['package.json', 'vlt-lock.json', 'vlt.json', 'node_modules/.vlt-lock.json',
+                        'packages/a/node_modules/minimist/index.js', 'packages/a/package.json',
+                        f'{payload}/package.json', f'{payload}/index.js',
+                        f'{payload}/node_modules/dep/index.js', '.socket/vendor/state.json',
+                        f'.socket/vendor/npm/{vlt.UUID}/.gitignore']:
+                (root / rel).parent.mkdir(parents=True, exist_ok=True)
+                (root / rel).write_text(rel)
+            files = vlt.snapshot(root)
+            self.assertEqual(sorted(files), sorted([
+                'package.json', 'vlt-lock.json', 'vlt.json', 'packages/a/package.json',
+                f'{payload}/package.json', f'{payload}/index.js', '.socket/vendor/state.json',
+                f'.socket/vendor/npm/{vlt.UUID}/.gitignore']))
+            digests = vlt.capture_tree(root, root / 'tree-out')
+            self.assertEqual(sorted(digests), sorted([
+                'package.json', 'vlt-lock.json', 'vlt.json', 'packages/a/package.json',
+                f'{payload}/package.json', '.socket/vendor/state.json']))
+
+    def test_remove_node_modules_keeps_the_vendored_payload(self):
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp)
+            payload = f'.socket/vendor/npm/{vlt.UUID}/minimist-1.2.2/node_modules/minimist'
+            for rel in ['node_modules/.vlt/x/index.js', 'packages/a/node_modules/m/index.js',
+                        f'{payload}/index.js', 'package.json']:
+                (root / rel).parent.mkdir(parents=True, exist_ok=True)
+                (root / rel).write_text(rel)
+            vlt.remove_node_modules(root)
+            left = sorted(p.relative_to(root).as_posix() for p in root.rglob('*') if p.is_file())
+            self.assertEqual(left, [f'{payload}/index.js', 'package.json'])
+
+    @unittest.skipIf(os.name == 'nt', 'symlinks need privileges on Windows')
+    def test_snapshot_never_follows_a_link(self):
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp) / 'p'
+            outside = Path(temp) / 'outside'
+            outside.mkdir()
+            (outside / 'secret.json').write_text('{}')
+            root.mkdir()
+            (root / 'package.json').write_text('{}')
+            (root / 'linked').symlink_to(outside, target_is_directory=True)
+            self.assertEqual(list(vlt.snapshot(root)), ['package.json'])
+
+
+class VltRetryTests(unittest.TestCase):
+    def test_only_transport_failures_retry(self):
+        self.assertFalse(vlt.transient({'matchesExpectation': True, 'serveProbe': {'curlExit': 7}}))
+        self.assertTrue(vlt.transient({'serveProbe': {'curlExit': 7}}))
+        self.assertTrue(vlt.transient({'serveProbe': {'curlExit': 0, 'status': 503}}))
+        self.assertTrue(vlt.transient({'error': 'error sending request for url (https://x)'}))
+        self.assertFalse(vlt.transient({'serveProbe': {'curlExit': 0, 'status': 200},
+                                        'failingChecks': ['freshCi']}))
+
+    def test_a_transport_failure_reruns_from_scratch(self):
+        with tempfile.TemporaryDirectory() as temp:
+            rows = [{'cell': 'c', 'error': 'error sending request for url (https://x)'},
+                    {'cell': 'c', 'matchesExpectation': True}]
+
+            class Fake:
+                case = Path(temp)
+
+                def __init__(self, *_):
+                    pass
+
+                def run_cell(self):
+                    return rows.pop(0)
+
+            with patch.object(vlt.time, 'sleep'), patch('sys.stdout'):
+                row = vlt.run_with_retries(Fake, ('1.2.0', 'hosted', 'direct'))
+            self.assertTrue(row['matchesExpectation'])
+            self.assertEqual(len(row['transportRetries']), 1)
+            self.assertTrue((Path(temp) / 'result.json').is_file())
+
+
+class VltProbeTests(unittest.TestCase):
+    def test_header_blocks_take_the_last_response(self):
+        dump = ('HTTP/1.1 302 Found\r\nLocation: /x\r\n\r\n'
+                'HTTP/2 200\r\ncontent-encoding: gzip\r\ncache-control: public\r\n\r\n')
+        self.assertEqual(vlt.parse_header_blocks(dump),
+                         (200, {'content-encoding': 'gzip', 'cache-control': 'public'}))
+        self.assertEqual(vlt.parse_header_blocks(''), (None, {}))
+
+    def test_identity_encodings(self):
+        for value in (None, '', ' ', 'identity', 'IDENTITY'):
+            self.assertTrue(vlt.encoding_is_identity(value), value)
+        for value in ('gzip', 'br', 'gzip, identity'):
+            self.assertFalse(vlt.encoding_is_identity(value), value)
+
+    def test_grant_selection_fails_closed(self):
+        ok = {'results': {vlt.UUID: {'status': 'reused', 'url': 'u', 'artifacts': [
+            {'kind': 'yarn-berry-zip', 'url': 'z', 'integrity': {'sha512': None}},
+            {'kind': 'tarball', 'url': 't', 'integrity': {'sha512': 'sha512-x'}}]}}}
+        self.assertEqual(vlt.select_tarball(ok), ('t', 'sha512-x'))
+        for broken in ({'results': {}},
+                       {'results': {vlt.UUID: {'status': 'withdrawn'}}},
+                       {'results': {vlt.UUID: {'status': 'granted', 'artifacts': [
+                           {'kind': 'tarball', 'integrity': {}}]}}}):
+            with self.assertRaises(RuntimeError):
+                vlt.select_tarball(broken)
+
+    def test_envelope_codes_read_every_channel(self):
+        envelope = {'redirect': {'warnings': [{'code': 'a'}],
+                                 'skipped': [{'reason': 'redirect_vlt_artifact_unverifiable'}]},
+                    'vendor': {'events': [{'errorCode': 'b', 'reason': 'prose with spaces'}]}}
+        self.assertEqual(sorted(vlt.envelope_codes(envelope)),
+                         ['a', 'b', 'redirect_vlt_artifact_unverifiable'])
+
+
 if __name__ == "__main__":
     unittest.main()
diff --git a/scripts/tests/test_ci_vlt_rows.py b/scripts/tests/test_ci_vlt_rows.py
new file mode 100644
index 00000000..b43c87ed
--- /dev/null
+++ b/scripts/tests/test_ci_vlt_rows.py
@@ -0,0 +1,332 @@
+"""The vlt CI rows (DESIGN §8.4): ci.yml's required `e2e` rows and
+`hosted-e2e` wiring, and the era × suite × OS coverage of
+vlt-compatibility.yml. Parses the workflows with a small reader of the YAML
+subset they use (no PyYAML on the runners)."""
+
+import importlib.util
+import re
+import unittest
+from pathlib import Path
+
+ROOT = Path(__file__).parents[2]
+CI = ROOT / ".github" / "workflows" / "ci.yml"
+COMPAT = ROOT / ".github" / "workflows" / "vlt-compatibility.yml"
+WATCHDOG = ROOT / ".github" / "workflows" / "vlt-serve-watchdog.yml"
+SUITES = ["e2e_redirect_vlt_build", "e2e_vendor_vlt_build", "mode_migration_vlt", "e2e_safety_vlt",
+          "e2e_vlt"]
+ERAS = ["A0", "A", "B", "C", "D", "E", "F"]
+OSES = ["ubuntu-latest", "macos-latest", "windows-latest"]
+
+
+def load_script(name):
+    spec = importlib.util.spec_from_file_location(name, Path(__file__).parents[1] / f"{name}.py")
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+backtest = load_script("backtest-vlt")
+
+
+def strip_comment(line):
+    quote = None
+    for i, ch in enumerate(line):
+        if quote:
+            if ch == quote:
+                quote = None
+        elif ch in "'\"":
+            quote = ch
+        elif ch == "#" and (i == 0 or line[i - 1] in " \t"):
+            return line[:i].rstrip()
+    return line.rstrip()
+
+
+def indent(line):
+    return len(line) - len(line.lstrip(" "))
+
+
+def scalar(text):
+    text = text.strip()
+    if len(text) >= 2 and text[0] == text[-1] and text[0] in "'\"":
+        return text[1:-1]
+    return text
+
+
+def split_top(text):
+    """Split a flow mapping's body at top-level commas."""
+    parts, depth, quote, start = [], 0, None, 0
+    for i, ch in enumerate(text):
+        if quote:
+            if ch == quote:
+                quote = None
+        elif ch in "'\"":
+            quote = ch
+        elif ch in "{[":
+            depth += 1
+        elif ch in "}]":
+            depth -= 1
+        elif ch == "," and depth == 0:
+            parts.append(text[start:i])
+            start = i + 1
+    parts.append(text[start:])
+    return [p for p in (p.strip() for p in parts) if p]
+
+
+def flow_mapping(text):
+    body = text.strip()
+    assert body.startswith("{") and body.endswith("}"), body
+    out = {}
+    for item in split_top(body[1:-1]):
+        key, _, value = item.partition(":")
+        out[key.strip()] = scalar(value)
+    return out
+
+
+def jobs(text):
+    """{job id: its lines} of a workflow."""
+    lines = text.splitlines()
+    start = lines.index("jobs:")
+    found, current = {}, None
+    for line in lines[start + 1:]:
+        match = re.match(r"^  ([A-Za-z0-9_-]+):\s*$", line)
+        if match:
+            current = match.group(1)
+            found[current] = []
+        elif current and (not line.strip() or line.startswith("   ") or line.startswith("#")):
+            found[current].append(line)
+        elif current and line.strip() and not line.startswith(" "):
+            current = None
+    return found
+
+
+def matrix_include(job_lines):
+    """The `strategy.matrix.include` rows of a job (flow or block style)."""
+    lines = [strip_comment(l) for l in job_lines]
+    at = next(i for i, l in enumerate(lines) if l.strip() == "include:")
+    base = indent(lines[at])
+    rows, current, item_indent = [], None, None
+    for line in lines[at + 1:]:
+        if not line.strip():
+            continue
+        if indent(line) <= base:
+            break
+        stripped = line.strip()
+        if stripped.startswith("- "):
+            item_indent = indent(line)
+            body = stripped[2:]
+            if body.startswith("{"):
+                current = flow_mapping(body)
+            else:
+                key, _, value = body.partition(":")
+                current = {key.strip(): scalar(value)}
+            rows.append(current)
+        elif current is not None and indent(line) > item_indent:
+            key, _, value = stripped.partition(":")
+            current[key.strip()] = scalar(value)
+    return rows
+
+
+def steps(job_lines):
+    """[(name, text)] of a job's steps."""
+    out, current = [], None
+    for line in job_lines:
+        match = re.match(r"^      - (?:name: (.*)|uses: .*|id: .*)$", line)
+        if match:
+            current = [match.group(1) or "", [line]]
+            out.append(current)
+        elif current is not None:
+            current[1].append(line)
+    return [(name, "\n".join(body)) for name, body in out]
+
+
+def step(job_lines, name):
+    for step_name, text in steps(job_lines):
+        if step_name == name:
+            return text
+    raise AssertionError(f"no step named {name!r}")
+
+
+class CiE2eVltRows(unittest.TestCase):
+    ci = jobs(CI.read_text(encoding="utf-8"))
+    rows = matrix_include(ci["e2e"])
+    vlt_rows = [r for r in rows if "vlt" in r or "vlt" in r.get("suite", "")]
+
+    def test_every_vlt_row_pins_a_release_and_includes_the_ignored_legs(self):
+        self.assertTrue(self.vlt_rows)
+        for row in self.vlt_rows:
+            with self.subTest(row=row):
+                self.assertTrue(row.get("vlt"), "a vlt row must pin a vlt release")
+                self.assertIn("--include-ignored", row.get("test_filter", ""),
+                              "the job default `--ignored` alone selects nothing vacuously")
+                self.assertIn("vlt_pinned_matrix", row.get("test_filter", ""))
+                self.assertIn(row["suite"], SUITES)
+
+    def test_the_pr_rows_are_the_design_table(self):
+        got = sorted((r["suite"], r["os"], r["vlt"], r.get("vlt_store_linker", ""),
+                      r.get("vlt_upgrade", "")) for r in self.vlt_rows)
+        want = []
+        for suite in ("e2e_redirect_vlt_build", "e2e_vendor_vlt_build", "mode_migration_vlt",
+                      "e2e_vlt"):
+            want += [(suite, os_name, "1.2.0", "", "") for os_name in OSES]
+        want += [("e2e_redirect_vlt_build", "ubuntu-latest", v, "", "")
+                 for v in ("0.0.0-16", "0.0.0-32", "1.0.0-rc.14", "1.0.0-rc.32", "1.0.4",
+                           "1.1.1")]
+        want += [("e2e_vendor_vlt_build", "ubuntu-latest", v, "", "")
+                 for v in ("0.0.0-32", "1.0.0-rc.14", "1.0.0-rc.32", "1.0.4")]
+        want += [("e2e_vendor_vlt_build", "windows-latest", "1.0.0-rc.14", "", ""),
+                 ("mode_migration_vlt", "ubuntu-latest", "0.0.0-32", "", ""),
+                 ("mode_migration_vlt", "ubuntu-latest", "1.0.0-rc.14", "", "1.2.0"),
+                 ("mode_migration_vlt", "windows-latest", "1.0.0-rc.14", "", ""),
+                 ("e2e_safety_vlt", "ubuntu-latest", "1.2.0", "", ""),
+                 ("e2e_safety_vlt", "ubuntu-latest", "1.2.0", "hardlink", ""),
+                 ("e2e_safety_vlt", "macos-latest", "1.2.0", "hardlink", ""),
+                 ("e2e_safety_vlt", "windows-latest", "1.2.0", "hardlink", ""),
+                 ("e2e_vlt", "windows-latest", "1.0.0-rc.14", "", "")]
+        want += [("e2e_vlt", "ubuntu-latest", v, "", "")
+                 for v in ("0.0.0-32", "1.0.0-rc.12", "1.0.0-rc.32", "1.0.7")]
+        self.assertEqual(len(want), 35)
+        self.assertEqual(got, sorted(want))
+
+    def test_every_era_has_a_row(self):
+        eras = {backtest.era_of(r["vlt"]) for r in self.vlt_rows}
+        self.assertEqual(sorted(eras, key=ERAS.index), ERAS)
+
+    def test_rows_pin_supported_releases(self):
+        supported, excluded = backtest.release_lists()
+        for row in self.vlt_rows:
+            for version in filter(None, (row["vlt"], row.get("vlt_upgrade"))):
+                self.assertEqual(backtest.release_status(version, supported, excluded),
+                                 "supported", version)
+
+    def test_the_steps_install_vlt_and_check_the_legs(self):
+        e2e = "\n".join(self.ci["e2e"])
+        self.assertIn("key: ${{ matrix.suite }}-${{ matrix.vlt || ", e2e,
+                      "vlt releases share a suite, so the release is part of the cache key")
+        setup = step(self.ci["e2e"], "Setup vlt")
+        self.assertIn("if: matrix.vlt != ''", setup)
+        self.assertIn("scripts/install-vlt.sh", setup)
+        for exported in ("SOCKET_PATCH_VLT_E2E_JS=", "SOCKET_PATCH_VLT_E2E_VERSION=",
+                         "SOCKET_PATCH_VLT_E2E_REQUIRED=1", "SOCKET_PATCH_VLT_E2E_STORE_LINKER=",
+                         "SOCKET_PATCH_VLT_E2E_UPGRADE_JS=", "LANG=C", "LC_ALL=C"):
+            self.assertIn(exported, setup)
+        node = step(self.ci["e2e"], "Setup Node.js 24 (vlt legs)")
+        self.assertIn("node-version: '24.21.0'", node)
+        run = step(self.ci["e2e"], "Run vlt e2e tests")
+        self.assertIn("if: matrix.vlt != ''", run)
+        self.assertIn("SOCKET_PATCH_VLT_E2E_REQUIRED: ${{ matrix.vlt != '' && '1' || '' }}", run)
+        self.assertIn("scripts/check-vlt-legs.py", run)
+        self.assertIn("vlt-leg-manifest.json", run)
+        other = step(self.ci["e2e"], "Run e2e tests")
+        self.assertIn("if: matrix.vlt == ''", other)
+
+    def test_hosted_e2e_proves_vlt_against_production(self):
+        hosted = self.ci["hosted-e2e"]
+        setup = step(hosted, "Setup npm-family package managers")
+        self.assertIn("scripts/install-vlt.sh 1.2.0", setup)
+        for exported in ("SOCKET_PATCH_VLT_E2E_JS=", "SOCKET_PATCH_VLT_E2E_VERSION=1.2.0",
+                         "SOCKET_PATCH_VLT_E2E_REQUIRED=1", "SOCKET_PATCH_HOSTED_E2E_STRICT=1"):
+            self.assertIn(exported, setup)
+        text = "\n".join(hosted)
+        self.assertNotIn("SOCKET_PATCH_VLT_HOSTED_PRODUCTION_REQUIRED", text,
+                         "stays unset until the serve fix is verified")
+        self.assertIn("check-vlt-legs.py", step(hosted, "Run hosted-mode production e2e"))
+        vendored = step(hosted, "Run vendored-mode production e2e (vlt)")
+        self.assertIn("--test e2e_vendored_production", vendored)
+        self.assertIn("--include-ignored vlt_pinned_matrix", vendored)
+        self.assertIn("check-vlt-legs.py", vendored)
+        self.assertIn("if: steps.gate.outputs.run == 'true'", vendored)
+
+
+class CompatibilityWorkflow(unittest.TestCase):
+    compat = jobs(COMPAT.read_text(encoding="utf-8"))
+    rows = matrix_include(compat["install-proof"])
+
+    def covered(self):
+        cells = set()
+        for row in self.rows:
+            suites = row.get("suites", " ".join(SUITES)).split()
+            for suite in suites:
+                cells.add((backtest.era_of(row["vlt"]), suite, row["os"]))
+        return cells
+
+    def test_every_era_suite_and_os_is_covered(self):
+        cells = self.covered()
+        missing = [(e, s, o) for e in ERAS for s in SUITES for o in OSES if (e, s, o) not in cells]
+        self.assertEqual(missing, [])
+
+    def test_the_design_release_lists_are_in_the_matrix(self):
+        plain = {}
+        for row in self.rows:
+            if not ({"node", "linker", "cache_root", "suites"} & set(row)):
+                plain.setdefault(row["os"], []).append(row["vlt"])
+        self.assertEqual(len(plain["ubuntu-latest"]), 31)
+        self.assertLessEqual(
+            {"0.0.0-30", "1.0.0-rc.8", "1.0.0-rc.13", "1.0.0-rc.14", "1.0.0-rc.15", "1.0.0-rc.22",
+             "1.0.0-rc.33", "1.0.8", "1.1.1", "1.2.0"}, set(plain["macos-latest"]))
+        self.assertEqual(len(plain["windows-latest"]), 15)
+        supported, excluded = backtest.release_lists()
+        for row in self.rows:
+            self.assertEqual(backtest.release_status(row["vlt"], supported, excluded), "supported",
+                             row)
+
+    def test_node_floors_and_store_linkers(self):
+        floors = sorted((r["vlt"], r["node"]) for r in self.rows if "node" in r)
+        self.assertEqual(floors, [("1.0.0-rc.18", "22.9.0"), ("1.0.0-rc.9", "22.0.0"),
+                                  ("1.2.0", "22.22.0")])
+        linkers = sorted((r["os"], r["linker"], r.get("cache_root", "")) for r in self.rows
+                         if "linker" in r)
+        self.assertEqual(linkers, sorted([
+            ("ubuntu-latest", "auto", ""), ("ubuntu-latest", "hardlink", ""),
+            ("ubuntu-latest", "copy", ""), ("ubuntu-latest", "unpack", ""),
+            ("ubuntu-latest", "hardlink", "/dev/shm/vlt-e2e-cache"),
+            ("macos-latest", "auto", ""), ("macos-latest", "hardlink", ""),
+            ("windows-latest", "auto", ""), ("windows-latest", "hardlink", "")]))
+        self.assertIn("gen-vlt-collation-golden.mjs",
+                      step(self.compat["install-proof"], "Collation golden under this Node"))
+
+    def test_jobs_and_triggers(self):
+        for job in ("build", "install-proof", "native", "lock-diff", "canary", "downgrade"):
+            self.assertIn(job, self.compat)
+        text = COMPAT.read_text(encoding="utf-8")
+        self.assertIn("schedule:", text)
+        self.assertIn("workflow_dispatch:", text)
+        for path in ("'scripts/backtest-vlt.py'", "'scripts/check-vlt-legs.py'",
+                     "'crates/socket-patch-core/src/vendor/**'", "'Cargo.lock'",
+                     "'rust-toolchain.toml'", "'.github/workflows/vlt-compatibility.yml'"):
+            self.assertEqual(text.count(path), 2, f"{path} in both pull_request and push filters")
+        self.assertIn("continue-on-error: true", "\n".join(self.compat["downgrade"]))
+        self.assertIn("--canary-checks", "\n".join(self.compat["canary"]))
+        self.assertIn("--diff-locks", "\n".join(self.compat["lock-diff"]))
+        native = "\n".join(self.compat["native"])
+        self.assertIn("vlt-results-${{ matrix.os }}-${{ matrix.vlt }}", native)
+        self.assertIn("native-vlt/captures/**/result.json", native)
+        self.assertIn("native-vlt/captures/**/tree/**", native)
+
+    def test_watchdog(self):
+        text = WATCHDOG.read_text(encoding="utf-8")
+        self.assertIn("cron: '23 */6 * * *'", text)
+        self.assertIn("continue-on-error: true", text)
+        self.assertIn("scripts/backtest-vlt.py --serve-probe", text)
+
+
+class ReaderSelfTests(unittest.TestCase):
+    def test_flow_and_block_rows(self):
+        job = """    strategy:
+      matrix:
+        include:
+          # a comment
+          - {os: ubuntu-latest, suite: a, test_filter: 'x:: --ignored', vlt: '1.2.0'}
+          - os: macos-latest
+            suite: b  # trailing
+            bun: '1.4.2'
+    runs-on: x""".splitlines()
+        self.assertEqual(matrix_include(job), [
+            {"os": "ubuntu-latest", "suite": "a", "test_filter": "x:: --ignored", "vlt": "1.2.0"},
+            {"os": "macos-latest", "suite": "b", "bun": "1.4.2"}])
+
+    def test_comment_inside_quotes_is_kept(self):
+        self.assertEqual(strip_comment("a: '#b' # c"), "a: '#b'")
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/scripts/tests/test_vlt_coverage.py b/scripts/tests/test_vlt_coverage.py
new file mode 100644
index 00000000..d817722d
--- /dev/null
+++ b/scripts/tests/test_vlt_coverage.py
@@ -0,0 +1,195 @@
+"""docs/testing/vlt-coverage.json (DESIGN §8.4): every vlt code (§2.3) is
+asserted by a test, and every test, golden and CI row the map names exists."""
+
+import importlib.util
+import json
+import re
+import unittest
+from pathlib import Path
+
+ROOT = Path(__file__).parents[2]
+MAP = ROOT / "docs" / "testing" / "vlt-coverage.json"
+CONTRACT = ROOT / "crates" / "socket-patch-cli" / "CLI_CONTRACT.md"
+GOLDENS = ROOT / "crates" / "socket-patch-core" / "tests" / "fixtures" / "redirect"
+
+# DESIGN §2.3, the complete list of codes vlt support adds.
+CODES = [
+    "redirect_vlt_lock_unsupported", "redirect_vlt_missing_sha512", "redirect_vlt_entry_not_found",
+    "redirect_vlt_entry_vendored", "redirect_vlt_unsupported_lock_key",
+    "redirect_vlt_custom_registry_skipped", "redirect_vlt_old_lockfile_ignored",
+    "redirect_vlt_scalar_registry_ignored", "redirect_vlt_lockfile_version_missing",
+    "redirect_vlt_sibling_lockfiles", "redirect_vlt_no_lockfile", "redirect_vlt_artifact_unverifiable",
+    "redirect_vlt_reinstall_required", "vendor_vlt_transitive_unsupported",
+    "vendor_vlt_lock_out_of_sync", "vendor_vlt_legacy_lockfile", "vendor_flavor_changed",
+    "vendor_artifact_gitignored", "vlt_root_scripts_not_run",
+]
+MODE_COMMANDS = [
+    "hosted/scan", "hosted/get", "hosted/rollback", "hosted/remove", "hosted/vex",
+    "hosted/takeover (vendored to hosted)", "vendored/vendor", "vendored/scan", "vendored/get",
+    "vendored/revert", "vendored/repair", "vendored/remove", "vendored/list", "vendored/vex",
+    "vendored/takeover (hosted to vendored)", "vendored/scan --prune", "agent/scan", "agent/get",
+    "agent/apply", "agent/rollback", "agent/remove", "agent/list", "agent/vex", "agent/crawl",
+    "setup",
+]
+FN = re.compile(r"^(?P<indent>\s*)(?:pub(?:\([a-z]+\))?\s+)?(?:async\s+)?fn\s+(?P<name>[A-Za-z0-9_]+)")
+ASSERTS = re.compile(r"assert|expect|\.contains\(|matches!")
+
+
+def load_rows_module():
+    spec = importlib.util.spec_from_file_location(
+        "test_ci_vlt_rows", Path(__file__).with_name("test_ci_vlt_rows.py"))
+    module = importlib.util.module_from_spec(spec)
+    spec.loader.exec_module(module)
+    return module
+
+
+def rust_sources():
+    return sorted(p for p in (ROOT / "crates").rglob("*.rs") if "target" not in p.parts)
+
+
+def test_regions():
+    """(path, lines) of test code: files under a crate's `tests/`, and the
+    part of a source file from its first `#[cfg(test)]` on."""
+    out = []
+    for path in rust_sources():
+        lines = path.read_text(encoding="utf-8", errors="replace").splitlines()
+        rel = path.relative_to(ROOT).parts
+        if "tests" in rel:
+            out.append((path, lines))
+            continue
+        start = next((i for i, line in enumerate(lines) if line.strip().startswith("#[cfg(test)]")),
+                     None)
+        if start is not None:
+            out.append((path, lines[start:]))
+    return out
+
+
+def asserted_in_rust(code, regions):
+    """The code is a literal within six lines of an assertion in test code."""
+    for _, lines in regions:
+        for i, line in enumerate(lines):
+            if f'"{code}"' in line and any(ASSERTS.search(l) for l in lines[max(0, i - 6):i + 7]):
+                return True
+    return False
+
+
+def asserted_in_goldens(code):
+    return any(code in json.loads(p.read_text(encoding="utf-8"))
+               for p in GOLDENS.rglob("expected-warnings.json"))
+
+
+def fn_bodies():
+    """{fn name: [body text, …]} of every Rust fn."""
+    bodies = {}
+    for path in rust_sources():
+        lines = path.read_text(encoding="utf-8", errors="replace").splitlines()
+        starts = [(i, m) for i, line in enumerate(lines) for m in [FN.match(line)] if m]
+        for n, (i, m) in enumerate(starts):
+            end = len(lines)
+            for j, other in starts[n + 1:]:
+                if len(other.group("indent")) <= len(m.group("indent")):
+                    end = j
+                    break
+            bodies.setdefault(m.group("name"), []).append("\n".join(lines[i:end]))
+    return bodies
+
+
+class VltCoverageMap(unittest.TestCase):
+    data = json.loads(MAP.read_text(encoding="utf-8"))
+    bodies = fn_bodies()
+    rows = load_rows_module()
+
+    def check_names(self, names, code=None):
+        for name in names:
+            with self.subTest(name=name):
+                if name.startswith("golden:"):
+                    case = GOLDENS / name[len("golden:"):]
+                    self.assertTrue((case / "expected-warnings.json").is_file(), name)
+                    if code:
+                        self.assertIn(code, json.loads(
+                            (case / "expected-warnings.json").read_text(encoding="utf-8")), name)
+                elif name.startswith(("ci:", "compat:")):
+                    self.assertIn(name, self.ci_ids(), name)
+                else:
+                    self.assertIn(name, self.bodies, f"no `fn {name}` under crates/")
+
+    def ci_ids(self):
+        ci = self.rows.jobs((ROOT / ".github/workflows/ci.yml").read_text(encoding="utf-8"))
+        compat = self.rows.jobs(
+            (ROOT / ".github/workflows/vlt-compatibility.yml").read_text(encoding="utf-8"))
+        ids = {f"ci:{r['suite']}:{r['os']}:{r['vlt']}"
+               for r in self.rows.matrix_include(ci["e2e"]) if "vlt" in r}
+        ids |= {f"compat:{r['os']}:{r['vlt']}"
+                for r in self.rows.matrix_include(compat["install-proof"])}
+        return ids
+
+    def test_every_code_is_mapped_and_documented(self):
+        self.assertEqual(sorted(self.data["codes"]), sorted(CODES))
+        contract = CONTRACT.read_text(encoding="utf-8")
+        for code in CODES:
+            self.assertTrue(re.search(rf"^\| [^\n]*`{code}`", contract, re.M),
+                            f"{code} is not in a CLI_CONTRACT.md table row")
+
+    def test_every_code_is_asserted_by_a_test(self):
+        regions = test_regions()
+        for code in CODES:
+            with self.subTest(code=code):
+                self.assertTrue(asserted_in_rust(code, regions) or asserted_in_goldens(code),
+                                f"{code} appears in no assertion or golden")
+
+    def test_every_mapped_test_exists_and_one_names_the_code(self):
+        for code, names in self.data["codes"].items():
+            self.assertTrue(names, code)
+            self.check_names(names, code)
+            named = any(code in json.loads((GOLDENS / n[len("golden:"):] /
+                                            "expected-warnings.json").read_text(encoding="utf-8"))
+                        if n.startswith("golden:") else
+                        any(code in body for body in self.bodies.get(n, []))
+                        for n in names)
+            self.assertTrue(named, f"no test listed for {code} mentions it")
+
+    def test_every_advisory_variant_maps_to_existing_tests(self):
+        variants = self.data["advisoryVariants"]
+        for key, names in variants.items():
+            self.assertIn(key.split(":", 1)[0], CODES, key)
+            self.assertTrue(names, key)
+            self.check_names(names)
+        for code in ("redirect_vlt_reinstall_required", "redirect_vlt_artifact_unverifiable",
+                     "vlt_root_scripts_not_run"):
+            self.assertTrue(any(k.startswith(code + ":") for k in variants), code)
+
+    def test_every_mode_command_cell_maps_to_existing_tests(self):
+        self.assertEqual(sorted(self.data["modeCommand"]), sorted(MODE_COMMANDS))
+        for key, names in self.data["modeCommand"].items():
+            self.assertTrue(names, key)
+            self.check_names(names)
+
+    def test_every_era_os_cell_maps_to_ci_rows(self):
+        cells = self.data["eraOs"]
+        want = [f"{era}/{os_name}" for era in self.rows.ERAS
+                for os_name in ("linux", "macos", "windows")]
+        self.assertEqual(sorted(cells), sorted(want))
+        ids = self.ci_ids()
+        backtest = self.rows.backtest
+        for cell, names in cells.items():
+            era, os_name = cell.split("/")
+            with self.subTest(cell=cell):
+                self.assertTrue(names, cell)
+                for name in names:
+                    self.assertIn(name, ids)
+                    runner = name.split(":")[-2]
+                    self.assertTrue(runner.startswith({"linux": "ubuntu", "macos": "macos",
+                                                       "windows": "windows"}[os_name]), name)
+                    self.assertEqual(backtest.era_of(name.split(":")[-1]), era, name)
+
+
+class AssertionReaderSelfTests(unittest.TestCase):
+    def test_a_literal_near_an_assert_counts(self):
+        regions = [(None, ['let x = 1;', 'assert_eq!(code, "vendor_x");'])]
+        self.assertTrue(asserted_in_rust("vendor_x", regions))
+        far = [(None, ['"vendor_y"'] + ['let a = 1;'] * 10 + ['assert!(true);'])]
+        self.assertFalse(asserted_in_rust("vendor_y", far))
+
+
+if __name__ == "__main__":
+    unittest.main()
diff --git a/scripts/vlt-historical-integrity.json b/scripts/vlt-historical-integrity.json
new file mode 100644
index 00000000..b859e404
--- /dev/null
+++ b/scripts/vlt-historical-integrity.json
@@ -0,0 +1,68 @@
+{
+  "0.0.0-1": "sha512-q71kbjsuX+ws73HE8pIKHRPRm1FXDyCE2kljn7Arv3PbEUsk9s0ah8oZUIW5Q6Q/ZFltuSjdR0enTECLbkGxzA==",
+  "0.0.0-11": "sha512-22/KyQTv7qhRlMzvyDiKMEbUmLEUUyap9xyBSltkQDpBkeyUGppE7qEC5kTsHSRCKByq/SED+MM6Rt2BXsXklw==",
+  "0.0.0-12": "sha512-+Sjtd7Edacet634zkCh7BBzHrgfOiBAlDVmgQFZqBvzPA3WObYkWigNwhLA9aQcM8mk0NxtJjt7CQ8V5c6B+ZA==",
+  "0.0.0-13": "sha512-TwuQEfXe5g/ay5KGOZ97RvQ6PCcTF540YznHs+PtI06REW7ow1JdYa37dwigpxilLkSVrxTw7+cGwd6OfUZq5Q==",
+  "0.0.0-14": "sha512-EqRJZjW640qraBW8hmONur6st0fD9J9EVPNkDdVplY/ZkehliBWqKJxh3Dz8u2kcDKnLrjNNxG/7pVk03cMFtA==",
+  "0.0.0-15": "sha512-YlFIHMSsMonpkF19ztB02Nf8i5EfHm47c42ZXhnc65gNORCAQgXcuZ6EIoPEh1vYGyM15E44cpD4A4xjwRatNA==",
+  "0.0.0-16": "sha512-dub6Du5EpJgTBNTHxJhGcM/neTCtw9gBGeTHXcDspihM2JSo9vhQqwxKwTIHVuMpQyLHCFOY+g/xA3m+rVzS+w==",
+  "0.0.0-17": "sha512-0Z9KpzGv34QrrxzI1XkaSMuHWMK49vzjNwavr15WgoOrvoHwq/d+uOQ94llMGlj9gjt1MbFXFEgTGHVrL8IaxA==",
+  "0.0.0-18": "sha512-KuqEgLhup3pJMxwIBPF8Y4wGGu1jKxoeoRLnGL1hmnanAooNsbP7y0/LtyrUW/tBtOnHhoikUyqpOWyoolNBrw==",
+  "0.0.0-19": "sha512-4tY9mM8H6c667sanrZsRNQsmwQ3EZ1DzJasIkO3SclkxfHOkrkjPNk6JFxM50ECmkLqiXj5I4/Km+bVAQ7p01Q==",
+  "0.0.0-20": "sha512-gvQFQXJAFcHx3oI8AgQkH3mu77Smv1wxCnDcpUvBzgjRETGLefQjfjh2ufbme17zDjQlYJXkPM9FUjwX9MK1Iw==",
+  "0.0.0-21": "sha512-vYAPIMYADePqTxqACvUDYwYJQJ2PHRy1EE5x4/TPnjiYJDEdSuj8BUvC6x6lmixHtXsnKbdi7h8mE0NHKF8wxA==",
+  "0.0.0-23": "sha512-ClEFLeyB2Mle1P0x0qyW91JSVX6htTZd2kEaMjhSxUwayku2Vn1fAJGzZBFF8XOLWg424NaDywEHZvDtNab53Q==",
+  "0.0.0-24": "sha512-ITjvJCEISnoXT0LKt3zUFgoP3IeO2g2dWgEApFWCTZCyS3U9TvCzMwZur+bJQCCavOqFG7NcumZHafjylAIa4Q==",
+  "0.0.0-25": "sha512-h2MIuWmAQ+kOXpUOunK8jN7n+QA0SYxTmQctPkPhvbpISKwTBB3XvGg+JREkA8chd7PuYAn+kCNueU58vuZV+g==",
+  "0.0.0-26": "sha512-nTJZyG2X+kpUI1EiXSwMdeksC+A77yMk1rmbLePkfH8Bdhj42gKWZ6iZ7XrfzhZcoDFqsxBYkZqrMe8VYH3zEA==",
+  "0.0.0-27": "sha512-UdKV3iqLjA3kL4BF365hT6ogQ4GvWQsBYL7wHIgROYzfKsUuIhwM2045m9zw3oixa8Vkbvmk5D1BHqwrwxFSEA==",
+  "0.0.0-28": "sha512-dgBPstNhwUVAg2Zuq0DADhHmN4vkhBvQ65NEMix8YOCBfPm4Y2qStcDDqDYZZMAJzqnDVVqKvhpYdVSFZPP0ow==",
+  "0.0.0-29": "sha512-tyIrsXYphfWdlL6zV8gXaZEzdWG5ODkVjekqdpZplueAmPzfjpWMRVZPUJtkOOEDmzMF3I8Lh+cg7k7ZhhTXng==",
+  "0.0.0-30": "sha512-Ovla5AbvNzVMl3CJjIzMEyP2fCM0KHBQt8z3X8qaPZK26G9AkPNKN4BX1XRKeU8Gzl05c+NEIsj3fCwnYi89iQ==",
+  "0.0.0-31": "sha512-q1h9QKAhS0AJlqri5OUB4UfhNOY+nrEgwkpRH1qCm9qKZrugPUZeEheoK8ffUuirRHOPUi6LgfouHe72b5v6bw==",
+  "0.0.0-32": "sha512-2ZW5+Vh8rocZ9PtwGbU9XhvGA5i68nuzdjtfoxyd5rJeN6mAKpnaJi91hpooWDF6Brho8hyMv518TKPtDrRHZw==",
+  "1.0.0-rc.1": "sha512-TAS6Bong4DAbQqFMmyLa/v2XgQ6s3B2t62DPzgZrEGeBQW1q3jICoSWHkiYIYS9jCfJ1L+oHn8G/Cy/nsFSZYw==",
+  "1.0.0-rc.2": "sha512-tRE0uy/6JY/rtEzdlvmGtewcjjdC+a4Kb7j0TMY9R5f+w0FqAbdT2VqTmoDmsxIFVl2PZuMkP7MKw7+CAZUXvQ==",
+  "1.0.0-rc.3": "sha512-w5Y8BoA5cBka3vuc+UXSp8NF6NXOp/FuDSf/rzL9NlSaSJwNw8jJmtb/0dl1wy2byEzwkXzNZPjH4gpvJF3Q/Q==",
+  "1.0.0-rc.4": "sha512-9J+C4FqoJA1o92Rf9kbOzJXC/p4HfWbA04X1qDin2ByCYqrp2WCd1UDTSDFGmjNUNzUqSGdVKtGDue4wNnXcJg==",
+  "1.0.0-rc.5": "sha512-AlFJq5JmEERqMIv/ibZ627XF81E9qgLXkNU2gICgJxYRHyamDszVGhTBXKAYoYBC5DUEZKLPdLPCugwKf0jpZg==",
+  "1.0.0-rc.6": "sha512-WJyqEJlkYKPRdOAD45iqgadOS/ibPtV9qTxVbsav8JSfFeEVnNXhx5XYAN4UtuuX0kvQ+LetC0zWBtvAL7ML0Q==",
+  "1.0.0-rc.7": "sha512-Dn41+SOZbO5cHw1TPQn5V3X+aY6BI+gMdii++/JdsoGG8qtnbJbu15wKnfHiZ94AuTrygLUbBYRPDVwUB/O4Fg==",
+  "1.0.0-rc.8": "sha512-U6Yz8On9WKkBCKxQ7mnOzUDZmOuKkoBrHXXmZP1t1ahp9Jzl9xLaBIw2lbQXiXOEFHM434sclhIfsDeNyrvEiA==",
+  "1.0.0-rc.9": "sha512-/Qw+nxE2H6dgnpVu4TMz1c3Vh5S6/rZxSm85IWR5FuAmCL78BZ/UZbfb5m5cLbsDao8m/9SVVBxAe58Keu4lxg==",
+  "1.0.0-rc.10": "sha512-P8JHpJgGEhpNZJN1BtJArjk3i0Iwym1Vm4YNhH5WoUwIULhLqVLkLOrGTiwX1K9zhkNA2MNRPPpDUXubY526wQ==",
+  "1.0.0-rc.11": "sha512-ihs94YwRT+nJzhElsT311HDvVONB4VQl0d8kbuQRpYN909LEQucYd2mREKoVdtHShDbr2/z2EhgznXjGtXHygQ==",
+  "1.0.0-rc.12": "sha512-aY3yVR+aI5L/fzk+VrDoCgN6+UUpW3IK2miXN/lbbKugWKfUvBUaiQE2lVyZqgjCGpBzSA6fc39wpD/P8sPD/A==",
+  "1.0.0-rc.13": "sha512-vTfHS2e5aB/LKPKgGdKsgHlZEYJ6U4qhVLKxDhoeK+vZknk+FK8tiAvG9xnuD3BDsuE8BZz86a6FO6HBcWQ5Dw==",
+  "1.0.0-rc.14": "sha512-2eeyEYVrVZip455/FGOK7cxtzh/BV5sCuUZJiDUPPaae15A3jtiDV9BMVqFPgVav1d9Uuq+hbgFOz07cDIydtg==",
+  "1.0.0-rc.15": "sha512-V6v4G55X/s/jwJ4VpXNnmlh3GpNUFovF4ZZjXDrdHVVLcn9LUt5CPtwbLc12NGz5ApQqJjQh0svKmeVmyGz/iw==",
+  "1.0.0-rc.16": "sha512-d5+clatbgR1iIM4JnpGyn+xmUHDKXcx3wyETuRvkd8ag8wBVKeKMEDvM0ciJgC4xd1FwLdAtJXi9gUI9oG3H6g==",
+  "1.0.0-rc.17": "sha512-nq6SktJ1diL0z9WKtYadK0Cbpgcd0cbDm+4su6Q+Cgiz0xv274v6Mgy+TrrfmUDrBqI4aoqnPSDDZwWFGwg/zw==",
+  "1.0.0-rc.18": "sha512-TdIZLoo5OsxIMZR1CO8hUebFLW+0Y5akWiLmuQy82PcfOX41bdVh1ZlsrA097JJWFzEb7xN94rBtM4en3rr8Iw==",
+  "1.0.0-rc.22": "sha512-Jm2D881nFMqV+YFlTmwjDX5DzRWt1/c+d93YWwbOja8A4YS+g8Zh3e5uX0ph9vJSQGwkN0tinmige+NG+qngWA==",
+  "1.0.0-rc.23": "sha512-SZT4KJR54tYzZXnwjFw28u1nRsnJEWVJsXYAagePtfnuZYkVtXvuyOqbE4d+EYIKkocl3dgLAlVvE3xjoqCNqQ==",
+  "1.0.0-rc.24": "sha512-d1VKj/ujtR/a4NsnHp+2/YPwCbCwP//bELev7SUuLBM9VAAcMckUQ5zdwCRsKieLibK95gUNMaWyvM2PgZWuVg==",
+  "1.0.0-rc.25": "sha512-sz7Uz/BsxMjHdpgnygNn5FulbYMCdeNnfGAP7+vrs2gSdIyn9HrmLhjHsyQJMbAARDHwuEB/QUdlv1YhAGSTGw==",
+  "1.0.0-rc.26": "sha512-daS5xLLsZDrNAy7iSRHDDm0XHiUyvYdA3jr9fLEoqJue5O5EhwABKsh7msvE6hQlqT5yR/EnQeWBTlSczL8pEA==",
+  "1.0.0-rc.27": "sha512-FV/SO2ii00OE3aavaMImPMeUJbYtMHqhuHaf8aptiBprP1Il/0bDfEBT8jvToiK/Waa0pOpba9YXRq/UlG7dAg==",
+  "1.0.0-rc.28": "sha512-OSKetbuenKIRS1m27TG4VWrwwP6A3/74KPyXS2r1QCV/qxSIINJ/gafymsk+E//r9a9Y7mO2TtLY/GbZj8kJgA==",
+  "1.0.0-rc.29": "sha512-jNRmcZU7ljIJozfaHG5OLNeivJrH3M8NnMST4dKQnYG4FcBcnvmTV/nQzuuDUoQSLIIvtcXVPR5/uYVF9qVggQ==",
+  "1.0.0-rc.30": "sha512-/scKOYx0EW4sdQ3XBMbkHI6WqySOT/dYcTqFst9eZZtHExKi0nAKeGKaIomEVwZys7LrKyIrtMAQ0imQg18OVg==",
+  "1.0.0-rc.31": "sha512-yecHyn3cj6L1u29d07ctxDHf9+9duH9e+CIZPjuiYyIs7B5JrsunNxn5aa5KEpqOhTQQrTJ/SvgIx5hINlM2Tw==",
+  "1.0.0-rc.32": "sha512-/E4lSdir0iZz7chEFaJdeC00zBckXF3zFwlhpNj0oCmbqGIzJnryl9egvegRdBDTsecnh1+5vRxk/YT/5li5/w==",
+  "1.0.0-rc.33": "sha512-WhQ315iAxWD9Ckl0jkwJocuUWIpJfsuxYakyz47SifLmjE5FDnaLLVF91Cn+jJQtDAAzAmQnRmc2QQg8Yksehw==",
+  "1.0.0-rc.34": "sha512-Bwc7EfzUMP2IxVuyE/tQQbAuP9X5hI8SH5PDMLp4pUXAPEaVqQwU8rnDKFb+78UXHx7sw3QQUw8DJPUeDDtSAw==",
+  "1.0.1": "sha512-+EVCj7/jfTsotOQjrOvteDQSLgTVYu005eslkaAypPYBUdZ+AN8Y3cHk6F100l9mFrvdN3d99ypmPYSv2++FLA==",
+  "1.0.2": "sha512-ZbviHaqrZSqo+ofr48gJ7LzmaUYjTCcL9tUwGRUcKXvYoi1KhLF1fn78y43VdnbW6kxKwutfRE84RYs/QkjiqA==",
+  "1.0.3": "sha512-EJfJ63qRRPmbcQRVjkQ7jVz3clBsVewL0oN3CKQNXfBzU1nnX4DSuP7GHbNnUwQKwjmVbyjkyqi1ga9oMjEfGg==",
+  "1.0.4": "sha512-BFGVl4syYW/jK3tR3aIQQzte5/2ilCIPtPUxm/v0cuIWesmE6DPjrD+eCzhBTO2BqRaoUaLXOOVjdw+0LAyFiw==",
+  "1.0.5": "sha512-i0cBCWRC/1Xk1kxSlhFZpUli8579oVLdrgDW//hDwn1qmJ4KhcBGDgw+J2UxwLLHgo6X/1iz8ftOomzc5GAczA==",
+  "1.0.6": "sha512-pXuVqBIg6amMlbQX3JjTUh4mv6P9BVISlbBafyCwruxT6Kp+SjMqWZVlTvJqeJn8txjqBu+bIEL5OnyBB9rAyg==",
+  "1.0.7": "sha512-s5NhjDO2Un7yeavY6YjbzdrdBPp+rYaPt7Rb+jS1CbHu/Ck1slK06elSgrMakKgGsJDMAR3jopn8Gzbk4aS71w==",
+  "1.0.8": "sha512-XYK5F62oKdwnmii2UQdcWZ9Xupa55NZNYNmjxSTeXcjdVmKS3Zko5L77MyikXRxh/n7Khs5OZmgEj+6D7qqPAw==",
+  "1.0.9": "sha512-5iyY4KYnU2t2O/sy6/G+BwlUSDwKTnmjhhYyqTFtHa5KdfHAjiUEGHGdBOm0TDKPrfPeZu6CPwrgKdyQc+/HDQ==",
+  "1.0.10": "sha512-yawzDKPtzO8a8Sa3b4Kxe5/f2HFhlYasmjPZX/8iqWV3t6vlelhKDKsK3+vvzetf3xDNEkyQoHgp/mQc5Q6GpQ==",
+  "1.1.0": "sha512-Udlf9V9La9uE6ROgHoglIo1is2fH4uAMneLfVU1P/hbJH/y7FfHankLd7tc/+O8JZHiWDQNunG1ys5Csyp7CTA==",
+  "1.1.1": "sha512-kLDMPqK7LrqJ19xmFIVKrf03F7SCTZpXJ8M0Qm4qd3ftnb8pXvyPmwO1hmFwMOm3TO1TH4J7qbKdE7KkkVo2pw==",
+  "1.2.0": "sha512-t7ONkM8YgRlY0g+6l+OU4oS2WS/dp7DK/vmFwNqxA0D+ehPWprNOTTH3uUYURAnCg5lr9vzJSmX9nNCcG5xGXA=="
+}

From f4a8afb9cf63219026324c6f306e492af5a0a561 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 09:25:46 -0400
Subject: [PATCH 28/46] Fix vlt backtest and CI review findings

The vlt compatibility backtest no longer fails every hosted cell on
0.0.0-16 and 0.0.0-32 while the service re-encodes the artifact: a
blocked cell now owes only its refusal code, since the withheld
dependency never reaches a rewriter. The tampered-lock check accepts
vlt 0.0.0-16's optional-skip failure the way the depscan capture does,
so those cells pass once the serve fix ships.

Vendored cells now also prove the user's existing tree: a plain
`vlt install` and then `vlt ci` must land the vendored bytes. From
0.0.0-30 vlt keeps an installed optional dependency on a plain
install; that is pinned in the boundary table and documented, and
`vlt ci` must still link the patch.

The production e2e retries in CI now actually retry, a narrowed
compatibility dispatch no longer fails its lock diff, and the README
and vlt notes say vendored mode needs a 0.0.0-19 or later lock.

Assisted-by: Claude Code:claude-opus-5-5
---
 .github/workflows/ci.yml                 |   9 +-
 .github/workflows/vlt-compatibility.yml  |   9 +-
 README.md                                |   6 +-
 docs/ecosystems.md                       |  12 ++-
 docs/testing/vlt-compatibility.md        |   5 +-
 scripts/backtest-vlt.py                  |  80 +++++++++++++--
 scripts/tests/test_backtest_harnesses.py | 123 ++++++++++++++++++++++-
 7 files changed, 217 insertions(+), 27 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b1936cf4..2604a7aa 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1861,9 +1861,10 @@ jobs:
           set -o pipefail
           for attempt in 1 2 3; do
             echo "::group::hosted-e2e attempt $attempt"
+            # The step shell runs with -e: keep a failed attempt from ending it.
+            status=0
             cargo test -p socket-patch-cli --test e2e_hosted_production -- \
-              --ignored --nocapture --test-threads=4 2>&1 | tee hosted-e2e.log
-            status=$?
+              --ignored --nocapture --test-threads=4 2>&1 | tee hosted-e2e.log || status=$?
             echo "::endgroup::"
             if [ "$status" -eq 0 ]; then
               # The vlt leg (probe-driven: the clean refusal while the artifact
@@ -1888,9 +1889,9 @@ jobs:
           set -uo pipefail
           for attempt in 1 2 3; do
             echo "::group::vendored vlt production attempt $attempt"
+            status=0
             cargo test -p socket-patch-cli --test e2e_vendored_production -- \
-              --include-ignored vlt_pinned_matrix --nocapture 2>&1 | tee vlt-vendored-production.log
-            status=$?
+              --include-ignored vlt_pinned_matrix --nocapture 2>&1 | tee vlt-vendored-production.log || status=$?
             echo "::endgroup::"
             if [ "$status" -eq 0 ]; then
               python3 scripts/check-vlt-legs.py \
diff --git a/.github/workflows/vlt-compatibility.yml b/.github/workflows/vlt-compatibility.yml
index e539a485..d11ce292 100644
--- a/.github/workflows/vlt-compatibility.yml
+++ b/.github/workflows/vlt-compatibility.yml
@@ -442,11 +442,16 @@ jobs:
       - name: Windows and macOS locks equal Linux
         env:
           VERSIONS_OVERRIDE: ${{ github.event.inputs.versions }}
+          SHAPES_OVERRIDE: ${{ github.event.inputs.shapes }}
+          MODES_OVERRIDE: ${{ github.event.inputs.modes }}
         run: |
           required=()
-          if [ -z "$VERSIONS_OVERRIDE" ]; then
+          modes=(hosted vendored agent)
+          if [ -n "$MODES_OVERRIDE" ]; then read -r -a modes <<<"$MODES_OVERRIDE"; fi
+          # The required set only covers cells the native jobs were asked to run.
+          if [ -z "$VERSIONS_OVERRIDE" ] && { [ -z "$SHAPES_OVERRIDE" ] || [[ " $SHAPES_OVERRIDE " == *" direct "* ]]; }; then
             for v in 1.2.0 1.0.0-rc.14; do
-              for m in hosted vendored agent; do required+=("$v:$m:direct"); done
+              for m in "${modes[@]}"; do required+=("$v:$m:direct"); done
             done
           fi
           python3 scripts/backtest-vlt.py --diff-locks results --out lock-diff \
diff --git a/README.md b/README.md
index 379cb56f..8fb14170 100644
--- a/README.md
+++ b/README.md
@@ -290,8 +290,10 @@ for the tested versions, workspace behavior, and installer integrity limits.
 
 ### vlt compatibility
 
-[vlt](https://www.vlt.sh) projects (`vlt-lock.json`) work in every mode, on every vlt
-release from 0.0.0-1 to 1.2.0 (both DepID grammars and every `lockfileVersion`).
+[vlt](https://www.vlt.sh) projects (`vlt-lock.json`) work in agent and hosted mode on
+every vlt release from 0.0.0-1 to 1.2.0 (both DepID grammars and every
+`lockfileVersion`), and in vendored mode on locks with `lockfileVersion` 0 or 1
+(0.0.0-19 and later); older locks are refused with `vendor_lockfile_version_unsupported`.
 Agent mode patches each copy in `node_modules/.vlt` without writing through vlt 1.2's
 shared store. Hosted mode repoints the patched nodes' integrity and URL, first checks
 that each artifact is served the way vlt can verify, and removes stale installed copies
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index 77fd139f..91a5625f 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -140,9 +140,11 @@ unchanged specifiers).
 
 ## npm: vlt notes
 
-[vlt](https://www.vlt.sh) is supported in agent, vendored and hosted mode on every
-release from 0.0.0-1 to 1.2.0, excluding the broken and never-published releases listed
-in [vlt compatibility](testing/vlt-compatibility.md#releases). vlt's lock is
+[vlt](https://www.vlt.sh) is supported in agent and hosted mode on every release from
+0.0.0-1 to 1.2.0, and in vendored mode from 0.0.0-19 (the first release whose lock has a
+`lockfileVersion`; older locks are refused with `vendor_lockfile_version_unsupported`),
+excluding the broken and never-published releases listed in
+[vlt compatibility](testing/vlt-compatibility.md#releases). vlt's lock is
 `vlt-lock.json`; its installed tree is `node_modules/.vlt/<DepID>/node_modules/<name>`
 plus the hidden lock `node_modules/.vlt-lock.json`, which vlt trusts as the installed
 graph. From 1.2.0 vlt also keeps a machine-wide content store (`store-linker`, hardlinked
@@ -240,7 +242,9 @@ use hosted mode for those. From vlt 1.0.8 a root dependency with resolved peers
 `~peer.<hex>` extra even with one peer context (a workspace member's from rc.15), and
 vendored mode refuses such a variant instance today. Before rc.6 vlt cannot reinstall a
 vendored `file:` dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A
-locks), and A0 locks are refused.
+locks), and A0 locks are refused. From 0.0.0-30 a plain `vlt install` keeps an optional
+dependency's installed upstream copy after vendoring; run `vlt ci` to link the vendored
+directory.
 
 **Agent mode.** `apply` and `rollback` patch every store copy of a `name@version`
 (legacy and tilde DepIDs, peer and modifier variants, transitive-only packages) and
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 5e93a14e..3c9bff64 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -101,7 +101,9 @@ The backtest writes `captures/<vlt>-<mode>-<shape>/{result.json,cli-output.json,
 and `summary.{json,md}`, and exits non-zero when any cell's verdict differs
 from the oracle. While patch.socket.dev re-encodes the artifact, hosted cells
 record `blocked-by-server-encoding`, and only when the cell's own probe saw a
-non-identity `Content-Encoding` and the CLI refused cleanly;
+non-identity `Content-Encoding` and the CLI refused cleanly. A blocked cell
+must carry only `redirect_vlt_artifact_unverifiable`: the withheld dependency
+never reaches a rewriter, so its lock-level and vendored codes are not due.
 `--identity-mirror` previews the hosted proof through a loopback mirror that
 fetches the artifact un-encoded (never an import source). `--serve-probe` is
 the watchdog's probe, `--canary-checks` the canary's watchdogs, and
@@ -262,6 +264,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | an optional-only project: lock-driven installs install nothing | `0.0.0-30 … 1.0.4` | — | — | — | — |
 | an optional-only project installs from the lock again | `>= 1.0.5` | — | — | — | — |
 | after a hosted→vendored takeover a plain `vlt install` already links the vendored dir | `<= 0.0.0-29` | — | — | — | — |
+| a plain `vlt install` keeps an installed optional dependency whose spec moved to a vendored `file:` directory (the upstream copy stays linked until `vlt ci`) | `>= 0.0.0-30` | — | — | — | — |
 | lockless `file:` directory dependencies fail to resolve | `0.0.0-31 … 1.0.0-rc.5` | — | — | — | — |
 | a re-save (`vlt install <new>`) drops slot [3] of default-registry nodes (the hosted URL; the patched integrity stays, so `vlt ci` fails `EINTEGRITY` until a rescan re-pins, and rollback reports drift) | `1.0.0-rc.6 … 1.0.0-rc.17` | — | — | — | — |
 | a warm cache re-fetches a changed tarball and fails its integrity (no stale-bytes hazard) | `1.0.0-rc.27 … 1.0.2` | — | — | — | — |
diff --git a/scripts/backtest-vlt.py b/scripts/backtest-vlt.py
index 72f20773..cbd6d8df 100644
--- a/scripts/backtest-vlt.py
+++ b/scripts/backtest-vlt.py
@@ -22,7 +22,10 @@
 rollbackByteIdentical and rollbackOriginalBytes.
 Checks (vendored): cliSuccess, publishedPatch, referenceWritten,
 lockFormatPreserved, freshCi, freshOrdinary, vexManifestless,
-repeatStableLock, repair (a deleted payload is rebuilt and installs patched),
+repeatStableLock, warmOrdinary / warmCi (the project's own tree, which still
+links the registry copy; from 0.0.0-30 `vlt install` keeps an optional one),
+repair (a deleted payload is rebuilt and installs
+patched),
 rollbackByteIdentical (`vendor --revert`) and rollbackOriginalBytes.
 Checks (agent): cliSuccess, manifestWritten, lockUnchanged, patchedBytes,
 survivesNoopInstall, repeatStableLock, rollbackByteIdentical and
@@ -97,10 +100,12 @@
 ACME_REGISTRY = 'https://registry.yarnpkg.com/'
 VLT_ACCEPT_ENCODING = 'gzip;q=1.0, identity;q=0.5'
 BLOCKED = 'blocked-by-server-encoding'
+BLOCKED_CODES = ['redirect_vlt_artifact_unverifiable']
 VERDICTS = ['patched', 'safe-refusal', 'unsafe', 'error', 'unsupported', BLOCKED]
 COMMAND_TIMEOUT = 600
 VEX_PRODUCT = 'pkg:npm/vlt-patch-backtest@1.0.0'
 OPTIONAL_HELD = 'unpatched copies of optional dependencies'
+A0_SKIPPED_OPTIONAL = 'Could not read package.json file'
 OPTIONAL_ONLY_LOCK = ('installs no optional dependency from the lock of a project that declares '
                       'only optional dependencies')
 
@@ -161,10 +166,11 @@ def unlisted_releases(published, supported, excluded):
 
 
 # ---------------------------------------------------------------------------
-# Shapes (a subset of depscan's capture-vlt.py SHAPES, with the same names and
-# the same oracle; the production patch is minimist@1.2.2 only, so shapes that
-# need a scoped, transitive-only or peer-bearing patch are left to the
-# hermetic suites and the local capture).
+# Shapes (a subset of depscan's capture-vlt.py SHAPES, with the same names).
+# The oracle follows the committed boundary table; capture-vlt.py does not yet
+# match it for optional-only cells on 0.0.0-24 … 0.0.0-31. The production
+# patch is minimist@1.2.2 only, so shapes that need a scoped, transitive-only
+# or peer-bearing patch are left to the hermetic suites and the local capture.
 
 def manifest(name='vlt-patch-backtest', **sections):
     data = dict(name=name, version='1.0.0', private=True)
@@ -310,6 +316,26 @@ def known_vlt_limitation(version, mode, shape_name):
     return None
 
 
+def optional_warm_kept(version, mode, shape_name):
+    """From 0.0.0-30 a plain `vlt install` keeps an installed optional
+    dependency whose spec moved to the vendored `file:` directory; `vlt ci`
+    relinks it (boundary table)."""
+    return mode == 'vendored' and bool(SHAPES[shape_name].get('optional')) and at_least(
+        version, '0.0.0-30')
+
+
+def integrity_enforced(version, optional, code, err, installed, patched_bytes_used):
+    """The tampered checkout failed on the digest. vlt skips an optional
+    dependency that fails to fetch, and 0.0.0-16 then fails reading its
+    package.json: when the untampered checkout installed the patched bytes,
+    only the wrong digest kept the target out (depscan's capture-vlt.py
+    rule)."""
+    if code != 0 and 'integrity' in err.lower():
+        return True
+    skipped = code == 0 or (era_of(version) == 'A0' and A0_SKIPPED_OPTIONAL in err)
+    return bool(optional) and not installed and skipped and patched_bytes_used is True
+
+
 def churn_exempt(version, mode, shape_name):
     """rc.14 rewrites an alias-named `file:` dependency's peer-edge bareSpec on
     its first `ci` (DESIGN §8.3 byte-stability oracle)."""
@@ -336,12 +362,22 @@ def observed_verdict(row):
     return 'unsafe'
 
 
+def required_codes(row):
+    """The codes the row must carry. A blocked cell's dep is withheld from
+    every rewriter (and a conversion never reaches its second run), so only
+    the refusal's own code is due, not the cell's lock-level or vendored
+    codes."""
+    if row.get('verdict') == BLOCKED:
+        return BLOCKED_CODES
+    return row.get('expectedCodes', [])
+
+
 def matches_expectation(row):
     """Observed == expected. Two allowances: a must-patch hosted cell whose
     probe saw a content-encoded artifact and whose CLI refused cleanly
     (BLOCKED), and a must-patch cell whose only unproven checks are the
     documented vlt limitation (`expectedLimitation`)."""
-    if not set(row.get('expectedCodes', [])) <= set(row.get('codes', [])):
+    if not set(required_codes(row)) <= set(row.get('codes', [])):
         return False
     verdict, expected = row.get('verdict'), row.get('expectedVerdict')
     if verdict == expected:
@@ -952,6 +988,7 @@ def __init__(self, ctx, version, mode, shape_name):
         self.project = self.case / 'project'
         self.record = ctx['record']
         self.envelopes = []
+        self.fresh_patched = {}
 
     # CLI -------------------------------------------------------------------
     def cli(self, args, cwd=None):
@@ -1147,6 +1184,8 @@ def blocked_refusal(self, row, envelopes, reference):
         if clean:
             row['blocked'] = True
             row['blockedByProbe'] = probe.get('contentEncoding')
+            row['expectedCodesUnblocked'] = row['expectedCodes']
+            row['expectedCodes'] = BLOCKED_CODES
             row.pop('manifestSha256', None)
             row['manifestSha256'] = capture_tree(self.project, self.case / 'tree')
             row['checks'].pop('serveEncodingIdentity', None)
@@ -1190,6 +1229,7 @@ def installs(self, row, checks, vlt, lock_after, text):
                 row.setdefault('churn', []).append(f'{label}: skip:vlt-own-churn')
             patched, row[label + 'Files'] = self.holds(checkout, text, 'after')
             checks[label] = code == 0 and stable and patched
+            self.fresh_patched[label] = code == 0 and patched
             shutil.rmtree(checkout, ignore_errors=True)
         self.limitation(row, checks, ['freshCi', 'freshOrdinary'])
 
@@ -1286,9 +1326,9 @@ def check_hosted(self, row, checks, before_lock, vlt, original):
         checkout, code, err = self.fresh(vlt, 'tamper', files)
         row['tamperTail'] = tail(err, 1500)
         installed = any(p.is_dir() for p in self.copies(checkout, text))
-        checks['tamperedDigest'] = tampered != lock_after and (
-            (code != 0 and 'integrity' in err.lower())
-            or (self.spec.get('optional') and code == 0 and not installed))
+        checks['tamperedDigest'] = tampered != lock_after and integrity_enforced(
+            self.version, self.spec.get('optional'), code, err, installed,
+            self.fresh_patched.get('freshCi'))
         shutil.rmtree(checkout, ignore_errors=True)
         self.limitation(row, checks, ['tamperedDigest'])
         self.vex(row, checks, vlt, 'redirected', record or self.record)
@@ -1305,11 +1345,27 @@ def check_hosted(self, row, checks, before_lock, vlt, original):
             code, _, _ = vlt.run(['install'], self.project, self.home('install'), self.log)
             patched, row['warmOrdinaryFiles'] = self.holds(self.project, text, 'after')
             checks['warmOrdinary'] = code == 0 and patched
+        self.warm_ci(row, checks, vlt, text)
+        self.rolled_back(row, checks, vlt, original, text)
+
+    def warm_ci(self, row, checks, vlt, text):
         code, _, _ = vlt.reinstall(self.project, self.home('install'), self.log)
         patched, row['warmCiFiles'] = self.holds(self.project, text, 'after')
         checks['warmCi'] = code == 0 and patched
         self.limitation(row, checks, ['warmOrdinary', 'warmCi'])
-        self.rolled_back(row, checks, vlt, original, text)
+
+    def warm(self, row, checks, vlt, text):
+        """The project's own tree, which still links the registry copy: an
+        ordinary install lands the vendored bytes (or, where vlt keeps an
+        optional dependency, leaves the upstream copy intact), then a locked
+        one lands them."""
+        code, _, _ = vlt.run(['install'], self.project, self.home('install'), self.log)
+        patched, row['warmOrdinaryFiles'] = self.holds(self.project, text, 'after')
+        if not patched and optional_warm_kept(self.version, self.mode, self.shape_name):
+            patched, _ = self.holds(self.project, text, 'before')
+            row['warmOrdinaryKeptUpstream'] = patched
+        checks['warmOrdinary'] = code == 0 and patched
+        self.warm_ci(row, checks, vlt, text)
 
     def check_vendored(self, row, checks, before_lock, vlt, original):
         if self.unchanged(row):
@@ -1344,6 +1400,8 @@ def check_vendored(self, row, checks, before_lock, vlt, original):
         self.installs(row, checks, vlt, lock_after, text)
         self.vex(row, checks, vlt, 'vendored', record or self.record)
         self.repeat(row, checks, lock_after)
+        self.warm(row, checks, vlt, text)
+        lock_before_repair = (self.project / 'vlt-lock.json').read_bytes()
         payload_dir = self.project / payload
         shutil.rmtree(payload_dir)
         code, out, _ = self.cli(['repair', '--yes', '--cwd', self.project])
@@ -1355,7 +1413,7 @@ def check_vendored(self, row, checks, before_lock, vlt, original):
         checkout, install_code, _ = self.fresh(vlt, 'repair-checkout', snapshot(self.project))
         patched, row['repairFiles'] = self.holds(checkout, text, 'after')
         checks['repair'] = code == 0 and rebuilt and install_code == 0 and patched and (
-            self.project / 'vlt-lock.json').read_bytes() == lock_after
+            self.project / 'vlt-lock.json').read_bytes() == lock_before_repair
         shutil.rmtree(checkout, ignore_errors=True)
         self.limitation(row, checks, ['repair'])
         self.rolled_back(row, checks, vlt, original, text)
diff --git a/scripts/tests/test_backtest_harnesses.py b/scripts/tests/test_backtest_harnesses.py
index b2cdb129..107127af 100644
--- a/scripts/tests/test_backtest_harnesses.py
+++ b/scripts/tests/test_backtest_harnesses.py
@@ -339,18 +339,64 @@ def test_matches_expectation(self):
                          'a spurious refusal of a must-patch cell fails')
         self.assertFalse(vlt.matches_expectation(self.row(expectedCodes=['x'])),
                          'a missing documented code fails')
+        refused = vlt.BLOCKED_CODES
         self.assertTrue(vlt.matches_expectation(self.row(verdict=vlt.BLOCKED,
-                                                         blockedByProbe='gzip')))
-        self.assertFalse(vlt.matches_expectation(self.row(verdict=vlt.BLOCKED)),
+                                                         blockedByProbe='gzip', codes=refused)))
+        self.assertFalse(vlt.matches_expectation(self.row(verdict=vlt.BLOCKED, codes=refused)),
                          'blocked needs the probe to have seen a content-encoding')
         self.assertFalse(vlt.matches_expectation(self.row(
-            verdict=vlt.BLOCKED, blockedByProbe='gzip', expectedVerdict='safe-refusal')))
+            verdict=vlt.BLOCKED, blockedByProbe='gzip', expectedVerdict='safe-refusal',
+            codes=refused)))
         limited = self.row(verdict='unsupported', vltLimitations=['x'], expectedLimitation='x')
         self.assertTrue(vlt.matches_expectation(limited))
         self.assertFalse(vlt.matches_expectation(dict(limited, expectedLimitation=None)),
                          'only a documented limitation may leave a cell unproven')
         self.assertFalse(vlt.matches_expectation(dict(limited, failingChecks=['freshCi'])))
 
+    def test_a_blocked_cell_needs_only_the_refusal_code(self):
+        for version, mode, shape in (('0.0.0-16', 'hosted', 'direct'),
+                                     ('0.0.0-32', 'hosted', 'direct'),
+                                     ('0.0.0-32', 'vendored', 'hosted-then-vendored')):
+            with self.subTest(version=version, mode=mode, shape=shape):
+                expected = vlt.expected_codes(version, mode, shape)
+                self.assertTrue(expected, 'the unblocked cell owes lock-level or vendored codes')
+                blocked = self.row(verdict=vlt.BLOCKED, blockedByProbe='gzip',
+                                   expectedCodes=expected,
+                                   codes=['redirect_vlt_artifact_unverifiable'])
+                self.assertTrue(vlt.matches_expectation(blocked))
+                self.assertFalse(vlt.matches_expectation(dict(blocked, codes=[])),
+                                 'the refusal code itself is still due')
+                self.assertFalse(vlt.matches_expectation(dict(
+                    blocked, verdict='patched', codes=['redirect_vlt_artifact_unverifiable'])),
+                                 'a cell that ran still owes its codes')
+
+    def test_a_warm_install_keeps_a_vendored_optional_copy_from_0_0_0_30(self):
+        for version, kept in (('0.0.0-29', False), ('0.0.0-30', True), ('1.2.0', True)):
+            with self.subTest(version=version):
+                self.assertEqual(vlt.optional_warm_kept(version, 'vendored', 'optional-mixed'),
+                                 kept)
+        self.assertFalse(vlt.optional_warm_kept('1.2.0', 'vendored', 'direct'))
+        self.assertFalse(vlt.optional_warm_kept('1.2.0', 'hosted', 'optional-mixed'))
+
+    def test_integrity_enforced(self):
+        wrong = 'error: EINTEGRITY integrity mismatch'
+        self.assertTrue(vlt.integrity_enforced('1.2.0', False, 1, wrong, False, True))
+        self.assertFalse(vlt.integrity_enforced('1.2.0', False, 1, 'ENOTFOUND', False, True))
+        self.assertFalse(vlt.integrity_enforced('1.2.0', False, 0, '', False, True),
+                         'a required dependency must fail the install')
+        self.assertTrue(vlt.integrity_enforced('1.2.0', True, 0, '', False, True),
+                        'vlt skips an optional dependency that fails to fetch')
+        self.assertFalse(vlt.integrity_enforced('1.2.0', True, 0, '', True, True))
+        self.assertFalse(vlt.integrity_enforced('1.2.0', True, 0, '', False, False),
+                         'a skip proves nothing unless the untampered lock installed the patch')
+        self.assertFalse(vlt.integrity_enforced('1.2.0', True, 0, '', False, None))
+        a0 = 'Error: Could not read package.json file'
+        self.assertTrue(vlt.integrity_enforced('0.0.0-16', True, 1, a0, False, True),
+                        '0.0.0-16 fails reading the skipped optional package.json')
+        self.assertFalse(vlt.integrity_enforced('0.0.0-32', True, 1, a0, False, True))
+        self.assertFalse(vlt.integrity_enforced('0.0.0-16', False, 1, a0, False, True))
+        self.assertFalse(vlt.integrity_enforced('0.0.0-16', True, 1, a0, False, False))
+
     def test_observed_verdict(self):
         self.assertEqual(vlt.observed_verdict({'error': 'x'}), 'error')
         self.assertEqual(vlt.observed_verdict({'blocked': True}), vlt.BLOCKED)
@@ -573,6 +619,77 @@ def run_cell(self):
             self.assertTrue((Path(temp) / 'result.json').is_file())
 
 
+class VltBlockedRefusalTests(unittest.TestCase):
+    """`blocked-by-server-encoding` needs the cell's own probe to have seen a
+    content-encoded 200 and the CLI to have refused cleanly."""
+
+    DETAIL = ('vlt would fail to verify https://patch.socket.dev/x.tgz: content-encoding gzip; '
+              'nothing was written for pkg:npm/minimist@1.2.2')
+
+    def setUp(self):
+        self.temp = tempfile.TemporaryDirectory()
+        self.addCleanup(self.temp.cleanup)
+        self.cell = vlt.Cell({'out': Path(self.temp.name), 'record': {}}, '1.2.0', 'hosted',
+                             'direct')
+        self.cell.project.mkdir(parents=True)
+        (self.cell.project / 'vlt-lock.json').write_text('{"nodes":{}}\n', encoding='utf-8')
+        (self.cell.project / 'package.json').write_text('{}\n', encoding='utf-8')
+        self.reference = vlt.snapshot(self.cell.project)
+
+    def row(self, encoding='gzip', status=200, expected='patched'):
+        return dict(serveProbe={'status': status, 'contentEncoding': encoding},
+                    expectedVerdict=expected, expectedCodes=['redirect_vlt_old_lockfile_ignored'],
+                    codes=[], checks={'serveEncodingIdentity': False})
+
+    def envelope(self, detail=DETAIL):
+        return {'redirect': {'warnings': [{'code': 'redirect_vlt_artifact_unverifiable',
+                                           'detail': detail}]}}
+
+    def test_a_clean_refusal_of_an_encoded_artifact_is_blocked(self):
+        row = self.row()
+        self.assertTrue(self.cell.blocked_refusal(row, [self.envelope()], self.reference))
+        self.assertTrue(row['blocked'])
+        self.assertEqual(row['blockedByProbe'], 'gzip')
+        self.assertEqual(row['expectedCodes'], vlt.BLOCKED_CODES)
+        self.assertEqual(row['expectedCodesUnblocked'], ['redirect_vlt_old_lockfile_ignored'])
+        self.assertNotIn('serveEncodingIdentity', row['checks'])
+        self.assertEqual(sorted(row['manifestSha256']), ['package.json', 'vlt-lock.json'])
+
+    def test_an_identity_probe_is_never_blocked(self):
+        for encoding in (None, '', 'identity'):
+            with self.subTest(encoding=encoding):
+                row = self.row(encoding=encoding)
+                self.assertFalse(self.cell.blocked_refusal(row, [self.envelope()],
+                                                           self.reference))
+                self.assertNotIn('blocked', row)
+
+    def test_a_changed_project_is_not_a_clean_refusal(self):
+        (self.cell.project / 'vlt-lock.json').write_text('{"nodes":{"x":[]}}\n',
+                                                         encoding='utf-8')
+        row = self.row()
+        self.assertFalse(self.cell.blocked_refusal(row, [self.envelope()], self.reference))
+        self.assertNotIn('blocked', row)
+
+    def test_a_non_200_probe_or_a_must_refuse_cell_is_not_blocked(self):
+        for row in (self.row(status=503), self.row(status=None),
+                    self.row(expected='safe-refusal')):
+            with self.subTest(row=row):
+                self.assertFalse(self.cell.blocked_refusal(row, [self.envelope()],
+                                                           self.reference))
+                self.assertNotIn('blocked', row)
+
+    def test_the_refusal_must_name_the_encoding_and_write_nothing(self):
+        for envelope in (self.envelope('vlt would fail to verify x: sha512 mismatch; '
+                                       'nothing was written'),
+                         self.envelope('content-encoding gzip'),
+                         {'redirect': {'warnings': [{'code': 'redirect_vlt_lock_unsupported',
+                                                     'detail': self.DETAIL}]}}):
+            with self.subTest(envelope=envelope):
+                row = self.row()
+                self.assertFalse(self.cell.blocked_refusal(row, [envelope], self.reference))
+                self.assertNotIn('blocked', row)
+
+
 class VltProbeTests(unittest.TestCase):
     def test_header_blocks_take_the_last_response(self):
         dump = ('HTTP/1.1 302 Found\r\nLocation: /x\r\n\r\n'

From b10c7471e2b8d5ea7d0fc1a3477becca879ece46 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 10:31:44 -0400
Subject: [PATCH 29/46] Vendor vlt deps that carry one peer context

From vlt 1.0.8 a root dependency with resolved peers, and from rc.15 a
workspace member's, gets a peer extra on its lock node even with a
single peer context, so vendored mode refused them. Such a node is now
vendored as a file node without the extra, exactly as vlt writes file:
dependencies, with its peer edges moved along; revert restores the
original node. Several instances or modifier variants still refuse.

Vendoring an optional dependency now prints
vendor_vlt_reinstall_required: from vlt 0.0.0-30 a plain vlt install
keeps the old installed copy, so users are told to run vlt ci. The
same advisory names any dependency whose link still points at vlt's
store. Era-A locks with scalar-registry ids now warn
vendor_vlt_legacy_lockfile, and the takeover advisory no longer calls
kept registry copies hosted artifacts.

The byte-stability fixtures now come from real vlt 1.2.0, 1.0.10,
1.0.4, rc.32 and rc.14, checked through vlt ci, warm and cold frozen
installs and vlt install <new>, and the vendored capstone gains legs
for a single peer context and an optional dependency on a warm tree.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  28 +-
 README.md                                     |   4 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   7 +-
 .../src/commands/scan/hosted/vlt.rs           |  16 +-
 .../tests/e2e_redirect_vlt_build.rs           |   4 +-
 .../tests/e2e_vendor_vlt_build.rs             | 327 +++++++++++++---
 .../tests/in_process_vendor/vlt.rs            | 171 +++++++-
 .../in_process_vendor_bun_takeover/vlt.rs     |   4 +-
 .../tests/vlt-leg-manifest.json               |   6 +-
 .../tests/vlt_e2e_common/mod.rs               |  30 +-
 .../tests/vlt_vendor_common/mod.rs            |   2 +-
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 370 +++++++++++++++++-
 .../src/vendor/vlt_lock_text.rs               |  46 +++
 .../socket-patch-core/src/vex/discover/vlt.rs |   2 +-
 .../1.0.0-rc.14/cases/peer-member/case.json   |   7 +
 .../cases/peer-member/expected/package.json   |   4 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/peer-member/expected/vlt-lock.json  |  17 +
 .../projects/peer-member/package.json         |   4 +
 .../peer-member/packages/a/package.json       |   8 +
 .../projects/peer-member/vlt-lock.json        |  17 +
 .../1.0.0-rc.14/projects/peer-member/vlt.json |   3 +
 .../cases/alias-selfref-peer/case.json        |   7 +
 .../alias-selfref-peer/expected/package.json  |   9 +
 .../alias-selfref-peer/expected/vlt-lock.json |  19 +
 .../npm/vlt/1.0.0-rc.32/cases/alias/case.json |   7 +
 .../cases/alias/expected/package.json         |   9 +
 .../cases/alias/expected/vlt-lock.json        |  19 +
 .../vlt/1.0.0-rc.32/cases/dev-edge/case.json  |   7 +
 .../cases/dev-edge/expected/package.json      |  19 +
 .../dev-edge/expected/packages/a/package.json |   8 +
 .../cases/dev-edge/expected/vlt-lock.json     |  42 ++
 .../vlt/1.0.0-rc.32/cases/left-pad/case.json  |   7 +
 .../cases/left-pad/expected/package.json      |  19 +
 .../left-pad/expected/packages/a/package.json |   8 +
 .../cases/left-pad/expected/vlt-lock.json     |  42 ++
 .../1.0.0-rc.32/cases/member-only/case.json   |   7 +
 .../cases/member-only/expected/package.json   |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/member-only/expected/vlt-lock.json  |  42 ++
 .../1.0.0-rc.32/cases/optional-edge/case.json |   7 +
 .../cases/optional-edge/expected/package.json |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../optional-edge/expected/vlt-lock.json      |  42 ++
 .../1.0.0-rc.32/cases/peer-member/case.json   |   7 +
 .../cases/peer-member/expected/package.json   |   4 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/peer-member/expected/vlt-lock.json  |  17 +
 .../npm/vlt/1.0.0-rc.32/cases/peer/case.json  |   7 +
 .../cases/peer/expected/package.json          |  19 +
 .../peer/expected/packages/a/package.json     |   8 +
 .../cases/peer/expected/vlt-lock.json         |  42 ++
 .../vlt/1.0.0-rc.32/cases/scoped/case.json    |   7 +
 .../cases/scoped/expected/package.json        |  19 +
 .../scoped/expected/packages/a/package.json   |   8 +
 .../cases/scoped/expected/vlt-lock.json       |  42 ++
 .../vlt/1.0.0-rc.32/cases/semver/case.json    |   7 +
 .../cases/semver/expected/package.json        |  19 +
 .../semver/expected/packages/a/package.json   |   8 +
 .../cases/semver/expected/vlt-lock.json       |  42 ++
 .../cases/supports-color/case.json            |   7 +
 .../supports-color/expected/package.json      |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../supports-color/expected/vlt-lock.json     |  42 ++
 .../1.0.0-rc.32/cases/transitive/case.json    |   6 +
 .../1.0.0-rc.32/projects/alias/package.json   |   9 +
 .../1.0.0-rc.32/projects/alias/vlt-lock.json  |  19 +
 .../vlt/1.0.0-rc.32/projects/alias/vlt.json   |   1 +
 .../projects/peer-member/package.json         |   4 +
 .../peer-member/packages/a/package.json       |   8 +
 .../projects/peer-member/vlt-lock.json        |  17 +
 .../1.0.0-rc.32/projects/peer-member/vlt.json |   3 +
 .../projects/workspace/package.json           |  19 +
 .../workspace/packages/a/package.json         |   8 +
 .../projects/workspace/vlt-lock.json          |  42 ++
 .../1.0.0-rc.32/projects/workspace/vlt.json   |   3 +
 .../1.0.10/cases/alias-selfref-peer/case.json |   3 +-
 .../alias-selfref-peer/expected/package.json  |   9 +
 .../alias-selfref-peer/expected/vlt-lock.json |  23 ++
 .../vlt/1.0.10/cases/peer-member/case.json    |   7 +
 .../cases/peer-member/expected/package.json   |   4 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/peer-member/expected/vlt-lock.json  |  21 +
 .../npm/vlt/1.0.10/cases/peer/case.json       |   3 +-
 .../1.0.10/cases/peer/expected/package.json   |  19 +
 .../peer/expected/packages/a/package.json     |   8 +
 .../1.0.10/cases/peer/expected/vlt-lock.json  |  46 +++
 .../1.0.10/projects/peer-member/package.json  |   4 +
 .../peer-member/packages/a/package.json       |   8 +
 .../1.0.10/projects/peer-member/vlt-lock.json |  21 +
 .../vlt/1.0.10/projects/peer-member/vlt.json  |   8 +
 .../1.0.4/cases/alias-selfref-peer/case.json  |   7 +
 .../alias-selfref-peer/expected/package.json  |   9 +
 .../alias-selfref-peer/expected/vlt-lock.json |  23 ++
 .../npm/vlt/1.0.4/cases/alias/case.json       |   7 +
 .../1.0.4/cases/alias/expected/package.json   |   9 +
 .../1.0.4/cases/alias/expected/vlt-lock.json  |  23 ++
 .../npm/vlt/1.0.4/cases/dev-edge/case.json    |   7 +
 .../cases/dev-edge/expected/package.json      |  19 +
 .../dev-edge/expected/packages/a/package.json |   8 +
 .../cases/dev-edge/expected/vlt-lock.json     |  46 +++
 .../npm/vlt/1.0.4/cases/left-pad/case.json    |   7 +
 .../cases/left-pad/expected/package.json      |  19 +
 .../left-pad/expected/packages/a/package.json |   8 +
 .../cases/left-pad/expected/vlt-lock.json     |  46 +++
 .../npm/vlt/1.0.4/cases/member-only/case.json |   7 +
 .../cases/member-only/expected/package.json   |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/member-only/expected/vlt-lock.json  |  46 +++
 .../vlt/1.0.4/cases/optional-edge/case.json   |   7 +
 .../cases/optional-edge/expected/package.json |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../optional-edge/expected/vlt-lock.json      |  46 +++
 .../npm/vlt/1.0.4/cases/peer-member/case.json |   7 +
 .../cases/peer-member/expected/package.json   |   4 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/peer-member/expected/vlt-lock.json  |  21 +
 .../vendor/npm/vlt/1.0.4/cases/peer/case.json |   7 +
 .../1.0.4/cases/peer/expected/package.json    |  19 +
 .../peer/expected/packages/a/package.json     |   8 +
 .../1.0.4/cases/peer/expected/vlt-lock.json   |  46 +++
 .../npm/vlt/1.0.4/cases/scoped/case.json      |   7 +
 .../1.0.4/cases/scoped/expected/package.json  |  19 +
 .../scoped/expected/packages/a/package.json   |   8 +
 .../1.0.4/cases/scoped/expected/vlt-lock.json |  46 +++
 .../npm/vlt/1.0.4/cases/semver/case.json      |   7 +
 .../1.0.4/cases/semver/expected/package.json  |  19 +
 .../semver/expected/packages/a/package.json   |   8 +
 .../1.0.4/cases/semver/expected/vlt-lock.json |  46 +++
 .../vlt/1.0.4/cases/supports-color/case.json  |   7 +
 .../supports-color/expected/package.json      |  19 +
 .../expected/packages/a/package.json          |   8 +
 .../supports-color/expected/vlt-lock.json     |  46 +++
 .../npm/vlt/1.0.4/cases/transitive/case.json  |   6 +
 .../npm/vlt/1.0.4/projects/alias/package.json |   9 +
 .../vlt/1.0.4/projects/alias/vlt-lock.json    |  23 ++
 .../npm/vlt/1.0.4/projects/alias/vlt.json     |   7 +
 .../1.0.4/projects/peer-member/package.json   |   4 +
 .../peer-member/packages/a/package.json       |   8 +
 .../1.0.4/projects/peer-member/vlt-lock.json  |  21 +
 .../vlt/1.0.4/projects/peer-member/vlt.json   |   8 +
 .../vlt/1.0.4/projects/workspace/package.json |  19 +
 .../workspace/packages/a/package.json         |   8 +
 .../1.0.4/projects/workspace/vlt-lock.json    |  46 +++
 .../npm/vlt/1.0.4/projects/workspace/vlt.json |   8 +
 .../1.2.0/cases/alias-selfref-peer/case.json  |   3 +-
 .../alias-selfref-peer/expected/package.json  |   9 +
 .../alias-selfref-peer/expected/vlt-lock.json |  23 ++
 .../npm/vlt/1.2.0/cases/peer-member/case.json |   7 +
 .../cases/peer-member/expected/package.json   |   4 +
 .../expected/packages/a/package.json          |   8 +
 .../cases/peer-member/expected/vlt-lock.json  |  21 +
 .../vendor/npm/vlt/1.2.0/cases/peer/case.json |   3 +-
 .../1.2.0/cases/peer/expected/package.json    |  19 +
 .../peer/expected/packages/a/package.json     |   8 +
 .../1.2.0/cases/peer/expected/vlt-lock.json   |  46 +++
 .../1.2.0/projects/peer-member/package.json   |   4 +
 .../peer-member/packages/a/package.json       |   8 +
 .../1.2.0/projects/peer-member/vlt-lock.json  |  21 +
 .../vlt/1.2.0/projects/peer-member/vlt.json   |   8 +
 .../fixtures/vendor/npm/vlt/regenerate.sh     |  37 +-
 .../tests/fixtures/vendor/npm/vlt/surgery.mjs |   8 +-
 crates/socket-patch-core/tests/vlt_locks.rs   |   4 +-
 docs/ecosystems.md                            |  29 +-
 docs/testing/vlt-compatibility.md             |  12 +-
 docs/testing/vlt-coverage.json                |  18 +-
 scripts/backtest-vlt.py                       |   5 +-
 scripts/tests/test_backtest_harnesses.py      |  11 +
 scripts/tests/test_vlt_coverage.py            |   7 +-
 169 files changed, 3228 insertions(+), 150 deletions(-)
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/transitive/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/transitive/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/case.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/packages/a/package.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt-lock.json
 create mode 100644 crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt.json

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b850dc3f..58966e8e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -323,11 +323,17 @@ into the new version's section — see docs/releasing.md.
   own ignores while `.gitattributes` keeps EOL conversion off it. The
   lock's node becomes a `file` node, its importer edges and the importers'
   `package.json` specs move to the `file:` path, and every moved entry is
-  placed where vlt's own serializer puts it, so `vlt ci` keeps the lock
-  byte-identical (checked against vlt 1.2.0, 1.0.10 and 1.0.0-rc.14).
-  Transitive targets (`vendor_vlt_transitive_unsupported`), peer or
-  modifier variants, foreign registries, peer edges and dependencies
-  declared in several fields refuse before any write, as do locks vlt
+  placed where vlt's own serializer puts it, so `vlt ci`, warm and cold
+  `vlt install --frozen-lockfile` keep the lock byte-identical and `vlt
+  install <new>` keeps the wiring (checked against vlt 1.2.0, 1.0.10,
+  1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14). A node whose only extra is one
+  peer context (a root dependency with resolved peers from vlt 1.0.8, a
+  workspace member's from rc.15) is vendored without the extra, as vlt
+  writes `file:` dependencies. Transitive targets
+  (`vendor_vlt_transitive_unsupported`), several instances of one
+  `name@version`, modifier variants, foreign registries, peer edges and
+  dependencies declared in several fields refuse before any write, as do
+  locks vlt
   cannot read and specs that no longer match the lock
   (`vendor_vlt_lock_out_of_sync`); a payload git would ignore refuses with
   `vendor_artifact_gitignored`, and a package already vendored through
@@ -335,7 +341,13 @@ into the new version's section — see docs/releasing.md.
   restores the registry node, edges and specs (keeping flags, trailing
   slots and outgoing edge values vlt rewrote since) or keeps everything on
   drift. Lock inventory reads `vlt-lock.json` too, Socket-hosted pins
-  included.
+  included. Era-A locks (`··` ids, or URL-segment ids equal to a scalar
+  `registry`) warn `vendor_vlt_legacy_lockfile`. A vendored optional
+  dependency gets the new `vendor_vlt_reinstall_required` advisory: from
+  vlt 0.0.0-30 a plain `vlt install` keeps its installed upstream copy,
+  so it says to run `vlt ci` (or delete `node_modules` and run `vlt
+  install`); it also names any dependency whose `node_modules` link still
+  resolves to vlt's store.
 - **Vendored vlt through every command.** `vendor`, `scan --mode vendored`
   and `get --mode vendored` run the complete vlt vendored preflight (lock
   version and layout, transitive, peer or foreign-registry targets,
@@ -348,7 +360,9 @@ into the new version's section — see docs/releasing.md.
   artifact is staged inventory-verified when nothing is installed (a fresh
   clone), and vlt's own link to it is never taken as a pristine source.
   After a hosted → vendored takeover the store copies vlt installed from
-  the hosted pin are removed (`redirect_vlt_reinstall_required`). `repair`
+  the hosted pin are removed (`redirect_vlt_reinstall_required`), except
+  optional ones, which the advisory reports as installed copies of the
+  vendored optional dependencies. `repair`
   finds vlt references in `vlt-lock.json` and workspace `package.json`
   files, rebuilds vlt directories against the inventory that leaves out
   vlt's `node_modules/` links, restores a missing `<uuid>/.gitignore` or
diff --git a/README.md b/README.md
index 8fb14170..fe8c26e7 100644
--- a/README.md
+++ b/README.md
@@ -299,7 +299,9 @@ shared store. Hosted mode repoints the patched nodes' integrity and URL, first c
 that each artifact is served the way vlt can verify, and removes stale installed copies
 so the next `vlt install` fetches the patched packages. Vendored mode commits a patched
 package directory for each direct dependency of the root or a workspace member
-(transitive dependencies need hosted mode). vlt is detected ahead of every other
+(transitive dependencies need hosted mode), including one vlt gave a single peer
+context; after vendoring an optional dependency run `vlt ci`, because a plain `vlt
+install` keeps its installed upstream copy. vlt is detected ahead of every other
 npm-family package manager. vlt ledgers require the socket-patch release that adds vlt support.
 See [vlt notes](docs/ecosystems.md#npm-vlt-notes) for the caveats (`vlt update`, optional
 dependencies, registry configuration) and [vlt compatibility](docs/testing/vlt-compatibility.md)
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 57f91aaf..1d65f4ba 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -703,7 +703,7 @@ to **six flavors**.
 | npm / pnpm LEGACY (lockfileVersion 5.4 = pnpm 7, 6.0 = pnpm 8; flavor `pnpm-legacy`) | (same tarball) | root `package.json` `pnpm.overrides` **+** legacy lock surgery (overrides / root dep + specifiers / packages rekey to a bare `file:` key with recomputed integrity / in-package dep refs). **No `pnpm-workspace.yaml` is written** (pnpm ≤ 8 reads overrides only from package.json). The lock's SPECIFIER is machine-ABSOLUTE — pnpm ≤ 8 absolutizes `file:` overrides itself — surfaced as `vendor_pnpm_legacy_absolute_specifier`. Legacy WORKSPACE locks (`importers:`) refused | same-path `pnpm install --frozen-lockfile --offline`, cold store (byte-stable on pnpm 7.33.5 / 8.15.9). A checkout at a DIFFERENT path fails the frozen check (path-bound specifier) and must run `pnpm install --offline --no-frozen-lockfile` once (the flag matters on CI, where pnpm defaults frozen on), which installs the vendored tarball and re-resolves only the specifier line |
 | npm / bun (`bun.lock`, lockfileVersion 0, 1 or 2 — `vendor_lockfile_version_unsupported` otherwise) | (same tarball) | `bun.lock` only: the packages entry's registry 4-tuple → local 3-tuple with recomputed `sha512`; the entry's `{deps}` meta, the lock's version line and its line endings are preserved. A lock holding `workspace:` packages is refused `vendor_bun_workspace_unsupported` unless lockfileVersion is 2 — Bun 1.2–1.3 resolve a workspace member's local-tarball path relative to the MEMBER (ENOENT on our root-relative path), 1.4 relative to the lockfile, and a committed version-2 lock is the only proof every consumer runs Bun ≥ 1.4 (a deliberate over-approximation: a package declared only by the workspace root would install on version 1 too). The gate fires only on a run that would WRITE a new local tuple, so in-sync re-runs, `already_vendored` skips and `repair` rebuilds on such a lock pass. The detail names the version and the remedy: delete `bun.lock` and re-lock with Bun ≥ 1.4 (an in-place `bun install` keeps the existing lockfileVersion), or `--mode hosted`. Native binary support is described in the next row. `scan`/`get --mode vendored` apply all four refusals BEFORE downloading (see the `get --mode vendored` bullet). Bun 1.1.39–1.3.9 re-save the local tuple WITHOUT its `sha512` on any later lock re-save (`bun add`, `bun install` after a manifest change); the digest-less 2-tuple is recognised as the same wiring — an in-sync re-run stays `already_vendored` and re-pins the digest on disk (no new wiring record) when the committed artifact still holds the bytes the lock was written from — otherwise, as for any stale tuple of ours, the line is re-pinned and the fresh entry carries the new fingerprint — `repair` rebuilds through it, and `vendor --revert` / `rollback` restore the registry line over it (a 2-tuple at ANOTHER uuid is still `vendor_lock_entry_drifted`) | `bun install --frozen-lockfile`, cold cache (the local tarball's sha512 is enforced by Bun ≥ 1.3.10; 1.1.39–1.3.9 install it unverified — the committed artifact is the protection there) |
 | npm / bun binary (`bun.lockb`, native binary format 1, 2 or 3) | (same tarball) | Rewrite matching binary package resolutions and integrity in place; preserve topology and unrelated metadata, update binary offsets and the package metadata hash. Text `bun.lock` takes precedence. `bun_lockb_package` wiring snapshots recover pristine registry metadata for repair and support per-package revert and hosted ↔ vendored migration. Binary discovery and rewrites require no installed Bun runtime. Malformed or unsupported content refuses `vendor_bun_lockb_invalid` before download or takeover. | Frozen installs with the original compatible Bun reader; see `docs/testing/bun-compatibility.md` for the release matrix and historical runtime integrity limits. |
-| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), peer or modifier variant instances (a node with any extra: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's), importer `peer` edges, foreign registries, a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical (checked on 1.2.0, 1.0.10 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
+| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. A node whose only extra is one peer context (`ṗ:N`, `peer.N`, `peer.<16 hex>`: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's) becomes a `file` node without the extra, as vlt writes `file:` dependencies, keeping its peer edges; revert restores the extra-bearing DepID. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), two or more instances of one `name@version` or a modifier extra, importer `peer` edges, foreign registries, a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile`; an optional dependency (or any dependency node_modules still links to its installed upstream copy) gets `vendor_vlt_reinstall_required` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical, also through a warm and a cold `vlt install --frozen-lockfile` (checked on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
 | cargo | crate dir `<name>-<version>/` (no `.cargo-checksum.json`) | (v5.0) `[patch.crates-io]` path entry in the **workspace-root `Cargo.toml`** (the manifest beside the `Cargo.lock` it detaches — never `.cargo/config*`) **+** Cargo.lock surgery (the `[[package]]` entry's `source`/`checksum` removed and its `version` set to the copy's TAGGED version `<version>+socket.<uuid>` — `<core>+<meta>.socket.<uuid>` when the version already has build metadata — with every lock reference that spells the old version rewritten, formats v1–v4; the copy's own `Cargo.toml` version carries the same tag, so the patched crate sees it in `CARGO_PKG_VERSION`; revert restores the lock byte for byte). Key: always the Socket-owned `<name>-socket-<first 8 hex of the uuid>` with `package = "<name>"` (the full uuid hex when that key is taken), never the bare crate name — cargo lets a config-file `[patch]` item (project, ancestor directory or `$CARGO_HOME`) replace the manifest item with the same key whatever its version, so keys any of those configs use are avoided and a re-run moves an entry off a now-shadowed key; two versions of one crate are wired side by side. Pre-v5 wiring in `.cargo/config.toml` / `.cargo/config` is moved into `Cargo.toml` by a re-run (`vendor`, `scan`/`get --mode vendored`) or `repair` (`cargo_wiring_migrated` note; the ledger's `cargo_patch_entry` record then names `Cargo.toml`); a detached lock entry left unwired by the pre-v5 multi-version overwrite is re-wired the same way (`cargo_wiring_restored`); every revert removes both spellings | `cargo build --locked --offline` on a fresh checkout — single-version manifest `[patch]` also builds with no network on cargo older than 1.56 (the old config-file wiring's floor); two vendored versions of ONE crate need `--offline` on cargo 1.56 and a populated registry index (or network access) on older cargo such as 1.41, which loads the index to tell them apart. Note: path deps build **without** `--cap-lints allow` |
 | golang | module dir `<module>@<version>/` | `go.mod` `replace <module> <ver> => ./.socket/vendor/golang/<uuid>/<module>@<ver>` | `go build` with `GOPROXY=off` + empty `GOMODCACHE` (directory replaces bypass go.sum entirely; survives `go mod tidy`) |
 | composer | package dir `<vendor>/<name>@<version>/` | `composer.lock` only: entry's `dist` → `{type: "path", url, reference: null}`, `source` removed, `transport-options: {symlink: false}` added. `content-hash` unaffected; `composer.json` untouched | `composer install` (from the lock alone, real copy not symlink, works under `--network none`). `composer update <pkg>` reverts it |
@@ -1268,7 +1268,8 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_fetch_unverifiable` | `skipped` (warning) | vendor: the lockfile records no usable integrity for the missing package; nothing was fetched (fail-closed) and the `package_not_installed` skip follows. |
 | `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
 | `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
-| `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (`··` default-registry ids, vlt 0.0.0-19 … 1.0.0-rc.8): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
+| `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
+| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links and says `vlt install` (or `vlt ci`) links the vendored copy. The package is vendored either way. |
 | `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
 | `vendor_artifact_gitignored` | `failed` | vendor (vlt): inside a git work tree, `git check-ignore --no-index` reports the new artifact's uuid directory as ignored by a rule its own `.gitignore` cannot override (such as a root `.socket/` rule; the detail names the rule). Remedy: drop that rule for `.socket/vendor/`. Refused before any write. |
 | `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
@@ -1309,7 +1310,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
-| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies, so there both commands remove the installed copy and the detail says to upgrade vlt to 1.0.5 or later first. The detail says whether copies were removed, left stale by a skipped cleanup, could not be checked, or none were stale, and adds how many optional copies were kept whenever there are any. Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies, so there both commands remove the installed copy and the detail says to upgrade vlt to 1.0.5 or later first. The detail says whether copies were removed, left stale by a skipped cleanup, could not be checked, or none were stale, and adds how many optional copies were kept whenever there are any. The kept optional copies are named by what they are: `unpatched copies of optional dependencies` after `scan`/`get`, `patched copies of optional dependencies` after `rollback`/`remove`, and `installed copies of the vendored optional dependencies` after a hosted → vendored takeover (the copy the hosted pin left installed, which may still be the registry bytes). Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
 | `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Otherwise it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none, a lock the reported `vlt` would not write: always without a usable `vlt` (absent, non-zero exit, timeout); with one at or above 1.0.0-rc.13, for a lock with no `lockfileVersion`, and for a `0` lock when it reports 1.0.0-rc.15 or later (which refuses a v0 lock, so another vlt installs the project). Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index b7630d5e..b450f637 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -376,11 +376,11 @@ fn rollback_detail(tally: &HealTally, restored: usize) -> Option<String> {
 }
 
 fn takeover_detail(tally: &HealTally, vendored: usize) -> Option<String> {
-    let held = "copies of the hosted artifacts of optional dependencies";
+    let held = "installed copies of the vendored optional dependencies";
     let detail = if tally.stale_left > 0 {
         format!(
-            "vendored {vendored} hosted-pinned packages, but node_modules still holds {} copies \
-             of the hosted artifacts; run `vlt install` (or re-run without \
+            "vendored {vendored} hosted-pinned packages, but node_modules still holds {} \
+             installed copies of the vendored packages; run `vlt install` (or re-run without \
              --no-vlt-install-cleanup)",
             tally.stale_left
         )
@@ -614,7 +614,7 @@ mod tests {
         let also = |held: &str| format!("node_modules also still holds 2 {held}; {OPTIONAL_KEPT}");
         let unpatched = also("unpatched copies of optional dependencies");
         let patched = also("patched copies of optional dependencies");
-        let hosted = also("copies of the hosted artifacts of optional dependencies");
+        let hosted = also("installed copies of the vendored optional dependencies");
 
         assert_eq!(
             reinstall_detail(&optional(0, 0, 0)),
@@ -672,8 +672,8 @@ mod tests {
         assert_eq!(
             takeover_detail(&optional(0, 0, 0), 1).unwrap(),
             format!(
-                "vendored 1 hosted-pinned packages, but node_modules still holds 2 copies of the \
-                 hosted artifacts of optional dependencies; {OPTIONAL_KEPT}"
+                "vendored 1 hosted-pinned packages, but node_modules still holds 2 installed \
+                 copies of the vendored optional dependencies; {OPTIONAL_KEPT}"
             )
         );
         assert_eq!(
@@ -686,8 +686,8 @@ mod tests {
         assert_eq!(
             takeover_detail(&optional(0, 1, 0), 2).unwrap(),
             format!(
-                "vendored 2 hosted-pinned packages, but node_modules still holds 1 copies of the \
-                 hosted artifacts; run `vlt install` (or re-run without \
+                "vendored 2 hosted-pinned packages, but node_modules still holds 1 installed \
+                 copies of the vendored packages; run `vlt install` (or re-run without \
                  --no-vlt-install-cleanup). {hosted}"
             )
         );
diff --git a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
index 6fce372e..2ed2fa9e 100644
--- a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
@@ -1452,8 +1452,8 @@ async fn vlt_pinned_matrix_hosted_then_vendored_optional_takeover() {
         assert_eq!(
             detail,
             format!(
-                "vendored 1 hosted-pinned packages, but node_modules still holds 1 copies of \
-                 the hosted artifacts of optional dependencies; {OPTIONAL_KEPT}"
+                "vendored 1 hosted-pinned packages, but node_modules still holds 1 installed \
+                 copies of the vendored optional dependencies; {OPTIONAL_KEPT}"
             ),
             "{kind}"
         );
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index e890b265..5aa4524b 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -406,18 +406,7 @@ async fn vlt_pinned_matrix_vendored_alias_selfref() {
 const USX: (&str, &str) = ("use-sync-external-store", "1.2.0");
 const REACT: (&str, &str) = ("react", "18.2.0");
 
-/// `use-sync-external-store` beside react 18, a direct dependency of the
-/// root or of workspace member `packages/a`. Where vlt gives the node a
-/// peer extra (members from rc.15, the root from 1.0.8) vendored mode
-/// refuses it today (`vendor_lock_entry_unsupported`, nothing written);
-/// elsewhere it is vendored and `with-selector`'s self-reference
-/// (`require('use-sync-external-store/shim')`) loads the patched copy after
-/// a fresh `vlt ci`.
-async fn peer_selfref(name: &'static str, member: bool) {
-    let Some(leg) = vendored_leg(name) else {
-        return;
-    };
-    let importer = if member { "packages/a" } else { "" };
+fn peer_shape(member: bool) -> Shape {
     let mut shape = Shape {
         deps: vec![USX, REACT],
         pins: vec![
@@ -425,6 +414,7 @@ async fn peer_selfref(name: &'static str, member: bool) {
             REACT,
             ("loose-envify", "1.4.0"),
             ("js-tokens", "4.0.0"),
+            MS,
         ],
         targets: vec![(USX.0, USX.1, UUID_USX, "shim/index.js")],
         warm: true,
@@ -438,47 +428,38 @@ async fn peer_selfref(name: &'static str, member: bool) {
             package_json("a", &[USX, REACT]),
         )];
     }
-    let fx = Fixture::build(leg, shape).await;
-    let t = fx.t().clone();
-    let ids = fx.store_ids(&t);
+    shape
+}
+
+/// The one use-sync-external-store node, with the peer extra vlt gives it
+/// exactly where the measured boundary says (members from rc.15, the root
+/// from 1.0.8).
+fn assert_peer_boundary(fx: &Fixture, member: bool) -> String {
+    let ids = fx.store_ids(fx.t());
     assert_eq!(ids.len(), 1, "{ids:?}");
-    let id = &ids[0];
+    let id = ids[0].clone();
     let sep = if fx.leg.era().tilde() { '~' } else { '·' };
-    let extra = id.split(sep).count() > 3;
     assert_eq!(
-        extra,
+        id.split(sep).count() > 3,
         direct_peer_extra(fx.leg.version(), member),
         "the measured peer-extra boundary: {id}"
     );
-    if extra {
-        let manifest = fx.proj.join(importer).join("package.json");
-        let pkg = std::fs::read(&manifest).unwrap();
-        let lock = lock_bytes(&fx.proj);
-        let out = socket_api(
-            &fx.proj,
-            &fx.svc,
-            &["scan", "--mode", "vendored"],
-            &["--vendor-source", "build"],
-        );
-        assert_eq!(out.code, 1, "{out}");
-        let refusal = coded(&out.json())
-            .into_iter()
-            .find(|e| e["errorCode"] == "vendor_lock_entry_unsupported")
-            .map(Value::to_string)
-            .unwrap_or_else(|| panic!("a vendor_lock_entry_unsupported refusal: {out}"));
-        assert!(
-            refusal.contains(&format!("a variant instance ({id})")),
-            "{refusal}"
-        );
-        assert_eq!(lock_bytes(&fx.proj), lock, "the lock is untouched");
-        assert_eq!(
-            std::fs::read(&manifest).unwrap(),
-            pkg,
-            "{importer}/package.json"
-        );
-        assert!(!fx.proj.join(".socket/vendor/npm").exists(), "no artifact");
-        return fx.leg.ran();
-    }
+    id
+}
+
+/// `use-sync-external-store` beside react 18, a direct dependency of the
+/// root or of workspace member `packages/a`, is vendored whether or not vlt
+/// gave its node a peer extra, and `with-selector`'s self-reference
+/// (`require('use-sync-external-store/shim')`) loads the patched copy after
+/// a fresh `vlt ci`.
+async fn peer_selfref(name: &'static str, member: bool) {
+    let Some(leg) = vendored_leg(name) else {
+        return;
+    };
+    let importer = if member { "packages/a" } else { "" };
+    let fx = Fixture::build(leg, peer_shape(member)).await;
+    let t = fx.t().clone();
+    assert_peer_boundary(&fx, member);
     vendor_scan(&fx);
     assert_vendored(&fx, &t, importer);
     let co = fx.checkout(&format!("fresh-{name}"));
@@ -517,6 +498,202 @@ async fn vlt_pinned_matrix_vendored_peer_member_selfref() {
     peer_selfref("peer_member_selfref", true).await;
 }
 
+/// Every lock entry of `expected` except the values of `file_id`'s own
+/// edges (rc.14 rewrites their peer specs on each reify) is in `got`.
+fn assert_entries_kept(expected: &[u8], got: &[u8], file_id: &str, what: &str) {
+    let entries = |bytes: &[u8]| -> std::collections::BTreeMap<String, String> {
+        String::from_utf8_lossy(bytes)
+            .lines()
+            .filter(|l| l.starts_with("    \""))
+            .map(|l| {
+                let l = l.trim_end_matches('\r').trim_end_matches(',');
+                let key = l[4..].split_once("\": ").unwrap().0.to_string();
+                (key, l.to_string())
+            })
+            .collect()
+    };
+    let after = entries(got);
+    let own = format!("\"{file_id} ");
+    for (key, line) in entries(expected) {
+        let kept =
+            after.get(&key) == Some(&line) || (key.starts_with(&own) && after.contains_key(&key));
+        assert!(
+            kept,
+            "{what}: lost `{line}`:\n{}",
+            String::from_utf8_lossy(got)
+        );
+    }
+}
+
+/// A single peer context (the root from 1.0.8, a workspace member from
+/// rc.15): the node is vendored without its extra, as vlt writes `file:`
+/// dependencies, its peer edge moves to the file node, and the wiring is
+/// byte-stable through a warm and a cold `vlt install --frozen-lockfile`,
+/// a fresh `vlt ci`, and kept by `vlt install <new>`; the revert restores
+/// the extra-bearing lock byte for byte.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_single_peer_context() {
+    let Some(leg) = vendored_leg("single_peer_context") else {
+        return;
+    };
+    let mut leg = leg;
+    for member in [false, true] {
+        let which = if member { "member" } else { "root" };
+        let importer = if member { "packages/a" } else { "" };
+        let fx = Fixture::build(leg, peer_shape(member)).await;
+        let t = fx.t().clone();
+        let reg_id = assert_peer_boundary(&fx, member);
+        let lock_before = lock_bytes(&fx.proj);
+        let manifest = fx.proj.join(importer).join("package.json");
+        let pkg_before = std::fs::read(&manifest).unwrap();
+        vendor_scan(&fx);
+        assert_vendored(&fx, &t, importer);
+        let lock = read_lock(&fx.proj);
+        assert!(
+            node_ids(&lock, USX.0, USX.1).is_empty(),
+            "{which}: {lock:#}"
+        );
+        let r = rel(&t);
+        let file_id = lock["nodes"]
+            .as_object()
+            .unwrap()
+            .iter()
+            .find(|(_, tuple)| tuple[3] == r)
+            .map(|(id, _)| id.clone())
+            .unwrap();
+        let sep = if fx.leg.era().tilde() { '~' } else { '·' };
+        assert_eq!(
+            file_id.split(sep).count(),
+            2,
+            "{which}: no extra on {file_id}"
+        );
+        let edges = lock["edges"].as_object().unwrap();
+        let peer = edges[&format!("{file_id} react")].as_str().unwrap();
+        assert!(peer.starts_with("peer "), "{which}: {peer}");
+        assert!(
+            !edges.keys().any(|k| k.starts_with(&format!("{reg_id} "))),
+            "{which}: every edge of {reg_id} moved: {lock:#}"
+        );
+        let wired = lock_bytes(&fx.proj);
+        fx.vlt_ok(&fx.proj, &fx.leg.frozen_args());
+        assert_eq!(lock_bytes(&fx.proj), wired, "{which}: warm frozen install");
+        assert_eq!(
+            state_at(&importer_dir(&fx.proj, importer, &t.name), &t),
+            State::Patched,
+            "{which}: warm frozen install links the vendored copy"
+        );
+        let co = fx.checkout(&format!("fresh-{which}"));
+        assert_ci_byte_stable(&fx.leg, &co, &VltRun::profile(which), false);
+        let frozen = format!("fresh-{which}-frozen");
+        std::fs::remove_dir_all(co.join("node_modules")).unwrap();
+        let _ = std::fs::remove_dir_all(co.join(importer).join("node_modules"));
+        fx.vlt_ok_profile(&co, &fx.leg.frozen_args(), &frozen);
+        assert_eq!(lock_bytes(&co), wired, "{which}: cold frozen install");
+        assert_eq!(
+            state_at(&importer_dir(&co, importer, &t.name), &t),
+            State::Patched,
+            "{which}: cold frozen install"
+        );
+        fx.vlt_ok_profile(&co, &["install", &format!("{}@{}", MS.0, MS.1)], &frozen);
+        assert_entries_kept(&wired, &lock_bytes(&co), &file_id, which);
+        assert_eq!(
+            state_at(&importer_dir(&co, importer, &t.name), &t),
+            State::Patched,
+            "{which}: vlt install <new> keeps the vendored copy"
+        );
+        let out = vendor_revert(&fx.proj);
+        assert_eq!(out.code, 0, "{which}: {out}");
+        assert_eq!(
+            String::from_utf8_lossy(&lock_bytes(&fx.proj)),
+            String::from_utf8_lossy(&lock_before),
+            "{which}: the revert restores {reg_id}"
+        );
+        assert_eq!(std::fs::read(&manifest).unwrap(), pkg_before, "{which}");
+        leg = fx.leg;
+    }
+    leg.ran();
+}
+
+const REINSTALL_REQUIRED: &str = "vendor_vlt_reinstall_required";
+
+fn reinstall_advisories(doc: &Value) -> Vec<String> {
+    coded(doc)
+        .into_iter()
+        .filter(|e| e["errorCode"] == REINSTALL_REQUIRED)
+        .map(Value::to_string)
+        .collect()
+}
+
+/// An optional dependency moved to its vendored dir on a warm tree gets
+/// `vendor_vlt_reinstall_required`: from 0.0.0-30 a plain `vlt install`
+/// keeps the installed upstream copy linked (and an in-sync rerun repeats
+/// the advisory), and `vlt ci` links the vendored copy, after which the
+/// advisory is gone.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_vendored_optional_warm_reinstall() {
+    let Some(leg) = vendored_leg("optional_warm_reinstall") else {
+        return;
+    };
+    let shape = Shape {
+        deps: vec![LP],
+        optional: vec![MS],
+        pins: vec![LP, MS],
+        targets: vec![(MS.0, MS.1, UUID_MS, "index.js")],
+        warm: true,
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    assert_eq!(state(&fx.proj, &t), State::Pristine, "the warm tree");
+    let doc = vendor_scan(&fx);
+    let got = reinstall_advisories(&doc);
+    assert_eq!(got.len(), 1, "{doc:#}");
+    assert!(
+        got[0].contains("ms@2.1.3 is an optional dependency")
+            && got[0].contains("run `vlt ci` (or delete node_modules and run `vlt install`)"),
+        "{}",
+        got[0]
+    );
+    assert_vendored(&fx, &t, "");
+
+    fx.vlt_ok(&fx.proj, &["install"]);
+    let kept = fx.leg.at_least(VENDORED_OPTIONAL_INSTALL_KEPT_FROM);
+    assert_eq!(
+        state(&fx.proj, &t),
+        if kept {
+            State::Pristine
+        } else {
+            State::Patched
+        },
+        "a plain `vlt install` on {}",
+        fx.leg.tc.raw
+    );
+    let doc = vendor_scan(&fx);
+    assert_eq!(
+        reinstall_advisories(&doc).len(),
+        usize::from(kept),
+        "the in-sync rerun: {doc:#}"
+    );
+
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(
+        state(&fx.proj, &t),
+        State::Patched,
+        "`vlt ci` links the vendored copy"
+    );
+    let link = std::fs::canonicalize(importer_dir(&fx.proj, "", &t.name)).unwrap();
+    assert!(
+        link.to_string_lossy().replace('\\', "/").contains(&rel(&t)),
+        "{}",
+        link.display()
+    );
+    let doc = vendor_scan(&fx);
+    assert!(reinstall_advisories(&doc).is_empty(), "{doc:#}");
+    fx.leg.ran();
+}
+
 /// A dependency with dependencies: vlt creates the link dir inside the
 /// vendored package (socket-patch never reads or commits it) and `git
 /// status` stays clean.
@@ -1054,8 +1231,10 @@ async fn vlt_pinned_matrix_vendored_transitive_refused() {
     fx.leg.ran();
 }
 
-/// An era-A lock (0.0.0-19 … rc.8) with `··` ids (the default registry,
-/// public npm) vendors with `vendor_vlt_legacy_lockfile`.
+/// An era-A lock (0.0.0-19 … rc.8) vendors with
+/// `vendor_vlt_legacy_lockfile`, whether its default-registry ids are `··`
+/// (public npm) or URL segments equal to a scalar `registry` (the local
+/// registry the harness configures).
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
@@ -1065,21 +1244,41 @@ async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
     if leg.era() != VltEra::A {
         return leg.skip("not-legacy-lockfile");
     }
-    let mut shape = Shape::with_bystander().warm();
-    shape.vlt_json.no_registry = true;
-    let fx = Fixture::build(leg, shape).await;
-    let lock = read_lock(&fx.proj);
-    assert!(
-        node_id(&lock, LP.0, LP.1).starts_with("··"),
-        "the default registry writes `··` ids: {lock:#}"
-    );
-    let doc = vendor_scan(&fx);
-    assert!(
-        doc.to_string().contains("vendor_vlt_legacy_lockfile"),
-        "{doc:#}"
-    );
-    assert_fresh_vendored(&fx, fx.t(), "fresh-legacy");
-    fx.leg.ran();
+    let mut leg = leg;
+    for scalar in [false, true] {
+        let mut shape = Shape::with_bystander().warm();
+        shape.vlt_json.no_registry = !scalar;
+        let fx = Fixture::build(leg, shape).await;
+        let lock = read_lock(&fx.proj);
+        let id = node_id(&lock, LP.0, LP.1);
+        if scalar {
+            assert!(
+                id.starts_with("·http") && lock["options"]["registry"].is_string(),
+                "a scalar registry writes URL-segment ids: {lock:#}"
+            );
+        } else {
+            assert!(
+                id.starts_with("··"),
+                "the default registry writes `··` ids: {lock:#}"
+            );
+        }
+        let doc = vendor_scan(&fx);
+        assert!(
+            doc.to_string().contains("vendor_vlt_legacy_lockfile"),
+            "{doc:#}"
+        );
+        assert_fresh_vendored(
+            &fx,
+            fx.t(),
+            if scalar {
+                "fresh-legacy-scalar"
+            } else {
+                "fresh-legacy"
+            },
+        );
+        leg = fx.leg;
+    }
+    leg.ran();
 }
 
 /// An A0 lock (no `lockfileVersion`, ≤ 0.0.0-18) is refused
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
index 46f2d73d..56f9e26c 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -179,10 +179,161 @@ fn vendor_vlt_refuses_transitive() {
     run_capture_case("1.2.0", "transitive");
 }
 
+/// A node whose only extra is one peer context (the root from vlt 1.0.8, a
+/// workspace member from rc.15) is vendored without the extra, exactly as
+/// real vlt keeps it through `vlt ci`, and reverts to the extra-bearing
+/// DepID.
 #[test]
-fn vendor_vlt_refuses_peer_variants() {
-    run_capture_case("1.2.0", "peer");
-    run_capture_case("1.0.10", "alias-selfref-peer");
+fn vendor_vlt_single_peer_context_drops_extra() {
+    for (vlt, case) in [
+        ("1.2.0", "peer"),
+        ("1.2.0", "peer-member"),
+        ("1.0.10", "alias-selfref-peer"),
+        ("1.0.4", "peer-member"),
+        ("1.0.0-rc.32", "peer-member"),
+    ] {
+        let lock = std::fs::read_to_string(
+            fixtures()
+                .join(vlt)
+                .join("projects")
+                .join(
+                    &cases(vlt)
+                        .into_iter()
+                        .find(|c| c.name == case)
+                        .unwrap()
+                        .project,
+                )
+                .join(VLT_LOCK),
+        )
+        .unwrap();
+        assert!(
+            lock.contains("use-sync-external-store@1.2.0~peer."),
+            "{vlt}/{case}: the capture carries a peer extra"
+        );
+        run_capture_case(vlt, case);
+    }
+}
+
+/// Several instances of one name@version, or a modifier extra, stay
+/// refused before any write.
+#[test]
+fn vendor_vlt_refuses_peer_and_modifier_variants() {
+    let two = Lock::v1(
+        &[
+            &reg_node("~npm~left-pad@1.3.0~peer.1"),
+            &reg_node("~npm~left-pad@1.3.0~peer.2"),
+        ],
+        &[
+            "\"file~_d left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0~peer.1\"",
+            "\"workspace~packages+a left-pad\": \"prod 1.3.0 ~npm~left-pad@1.3.0~peer.2\"",
+        ],
+    );
+    let detail = refused_with(&two.render(), ROOT_PKG, "vendor_lock_entry_unsupported");
+    assert!(
+        detail.contains("2 instances") && detail.contains("peer/modifier variants"),
+        "{detail}"
+    );
+    let modifier = "~npm~left-pad@1.3.0~_croot_s_g_s#left-pad";
+    let lock = Lock::v1(
+        &[&reg_node(modifier)],
+        &[&format!("\"file~_d left-pad\": \"prod 1.3.0 {modifier}\"")],
+    );
+    let detail = refused_with(&lock.render(), ROOT_PKG, "vendor_lock_entry_unsupported");
+    assert!(
+        detail.contains(&format!("a modifier variant instance ({modifier})")),
+        "{detail}"
+    );
+}
+
+/// `vendor_vlt_reinstall_required`: a rewired optional dependency always
+/// gets the `vlt ci` advisory; an in-sync rerun gets it again only while
+/// node_modules still links the installed upstream copy.
+#[test]
+fn vendor_vlt_optional_edge_asks_for_vlt_ci() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let lock = Lock::v1(
+        &[&reg_node("~npm~left-pad@1.3.0")],
+        &["\"file~_d left-pad\": \"optional 1.3.0 ~npm~left-pad@1.3.0\""],
+    );
+    let pkg = ROOT_PKG.replace("\"dependencies\"", "\"optionalDependencies\"");
+    project(root, &lock, &pkg, "~npm~left-pad@1.3.0");
+    let store = store_dir(root, "~npm~left-pad@1.3.0", NAME);
+    link_dir(&store, &root.join("node_modules").join(NAME));
+    let advisory = |env: &Value| -> Vec<String> {
+        events(env)
+            .iter()
+            .filter(|e| e["errorCode"] == "vendor_vlt_reinstall_required")
+            .map(|e| e.to_string())
+            .collect()
+    };
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let got = advisory(&env);
+    assert_eq!(got.len(), 1, "{env:#}");
+    assert!(
+        got[0].contains("left-pad@1.3.0 is an optional dependency")
+            && got[0].contains("run `vlt ci` (or delete node_modules and run `vlt install`)")
+            && got[0].contains("before 1.0.5"),
+        "{}",
+        got[0]
+    );
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(
+        codes(&env).contains(&"already_vendored".to_string()),
+        "{env:#}"
+    );
+    assert_eq!(
+        advisory(&env).len(),
+        1,
+        "the upstream copy is still linked: {env:#}"
+    );
+    unlink_dir(&root.join("node_modules").join(NAME));
+    link_dir(
+        &root.join(rel_dir(UUID, NAME, VERSION)),
+        &root.join("node_modules").join(NAME),
+    );
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(
+        advisory(&env).is_empty(),
+        "linked to the vendored copy: {env:#}"
+    );
+}
+
+/// A prod dependency whose link still resolves into vlt's store gets the
+/// reinstall advisory; one without a stale link gets none.
+#[test]
+fn vendor_vlt_stale_prod_link_asks_for_a_reinstall() {
+    let tmp = tempfile::tempdir().unwrap();
+    direct_project(tmp.path());
+    let (code, env, _) = vendor(tmp.path(), &[]);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(
+        !codes(&env).contains(&"vendor_vlt_reinstall_required".to_string()),
+        "{env:#}"
+    );
+
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let store = store_dir(root, "~npm~left-pad@1.3.0", NAME);
+    link_dir(&store, &root.join("node_modules").join(NAME));
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let detail = events(&env)
+        .into_iter()
+        .find(|e| e["errorCode"] == "vendor_vlt_reinstall_required")
+        .unwrap_or_else(|| panic!("{env:#}"))
+        .to_string();
+    assert!(
+        detail.contains(
+            "node_modules/left-pad still links left-pad@1.3.0 to its installed upstream copy; \
+             run `vlt install` (or `vlt ci`) to link the vendored copy"
+        ),
+        "{detail}"
+    );
 }
 
 // ── synthetic shapes ─────────────────────────────────────────────────────
@@ -723,6 +874,20 @@ fn vendor_vlt_revendor_new_uuid() {
 
 /// vlt's post-install layout: `node_modules/<name>` links the committed
 /// dir of `uuid`, and the store copy is gone.
+fn link_dir(target: &Path, link: &Path) {
+    std::fs::create_dir_all(link.parent().unwrap()).unwrap();
+    #[cfg(unix)]
+    std::os::unix::fs::symlink(target, link).unwrap();
+    #[cfg(windows)]
+    std::os::windows::fs::symlink_dir(target, link).unwrap();
+}
+
+fn unlink_dir(link: &Path) {
+    std::fs::remove_file(link)
+        .or_else(|_| std::fs::remove_dir(link))
+        .unwrap();
+}
+
 fn link_vendored_dir(root: &Path, uuid: &str) {
     std::fs::remove_dir_all(root.join("node_modules")).unwrap();
     std::fs::create_dir_all(root.join("node_modules")).unwrap();
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
index dd3951c7..7bc87e3f 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
@@ -555,8 +555,8 @@ async fn vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy() {
     assert_eq!(
         detail_of(&env, "redirect_vlt_reinstall_required"),
         format!(
-            "vendored 1 hosted-pinned packages, but node_modules still holds 1 copies of the \
-             hosted artifacts of optional dependencies; {}",
+            "vendored 1 hosted-pinned packages, but node_modules still holds 1 installed copies \
+             of the vendored optional dependencies; {}",
             hosted::OPTIONAL_KEPT
         )
     );
diff --git a/crates/socket-patch-cli/tests/vlt-leg-manifest.json b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
index d4753023..635b5cd2 100644
--- a/crates/socket-patch-cli/tests/vlt-leg-manifest.json
+++ b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
@@ -52,6 +52,8 @@
         "alias_selfref",
         "peer_root_selfref",
         "peer_member_selfref",
+        "single_peer_context",
+        "optional_warm_reinstall",
         "dep_with_deps",
         "hostile_gitignore",
         "autocrlf_checkout",
@@ -189,6 +191,8 @@
       "alias_selfref",
       "peer_root_selfref",
       "peer_member_selfref",
+      "single_peer_context",
+      "optional_warm_reinstall",
       "dep_with_deps",
       "hostile_gitignore",
       "autocrlf_checkout",
@@ -567,7 +571,7 @@
       "reason": "npm-alias-non-hermetic"
     },
     {
-      "boundary": "era A (`\u00b7\u00b7` ids): `vendor_vlt_legacy_lockfile`",
+      "boundary": "era A (`\u00b7\u00b7` ids, or scalar-registry URL-segment ids with no `\u00b7npm\u00b7` id): `vendor_vlt_legacy_lockfile`",
       "suite": "vendored",
       "legs": [
         "legacy_lockfile_warning"
diff --git a/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
index c1ca9b0d..0303ca82 100644
--- a/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_e2e_common/mod.rs
@@ -179,6 +179,10 @@ pub const LOCKFILE_VERSION_CHECKED_FROM: VltVersion = VltVersion::rc(15);
 /// `vlt ci` installs optional dependencies from the lock of an
 /// optional-only project.
 pub const OPTIONAL_ONLY_CI_FROM: VltVersion = VltVersion::release(1, 0, 5);
+/// A plain `vlt install` keeps the installed upstream copy of an optional
+/// dependency whose spec moved to a vendored `file:` dir (only `vlt ci`
+/// links the vendored copy).
+pub const VENDORED_OPTIONAL_INSTALL_KEPT_FROM: VltVersion = VltVersion::zero(30);
 /// `vlt install --force` exists.
 pub const INSTALL_FORCE_FROM: VltVersion = VltVersion::rc(28);
 /// `registries.npm` is required by install commands.
@@ -782,9 +786,9 @@ pub fn write_shims(bin: &Path, js: &Path, log: &Path) {
     write_shims_for(bin, js, log, &socket_bin());
 }
 
-/// [`write_shims`] with the `npx` shim running `socket`. cmd.exe's `%*`
-/// ignores `shift`, so the `.cmd` shim rebuilds the argument list after
-/// the package token itself.
+/// [`write_shims`] with the `npx` shim running `socket`. The `.cmd` shim
+/// forwards the raw `%*` text after the package token (and its `@version`):
+/// `%1` … split on `,`, `;` and `=`, and `%*` ignores `shift`.
 pub fn write_shims_for(bin: &Path, js: &Path, log: &Path, socket: &Path) {
     std::fs::create_dir_all(bin).unwrap();
     let sh_npx = format!(
@@ -797,7 +801,7 @@ pub fn write_shims_for(bin: &Path, js: &Path, log: &Path, socket: &Path) {
         js.display()
     );
     let cmd_npx = format!(
-        "@echo off\r\nsetlocal\r\nset SP_ARGS=\r\n:loop\r\nif \"%~1\"==\"\" goto run\r\nset SP_PKG=%~1\r\nshift\r\nif \"%SP_PKG:~0,28%\"==\"@socketsecurity/socket-patch\" goto collect\r\ngoto loop\r\n:collect\r\nif \"%~1\"==\"\" goto run\r\nset SP_ARGS=%SP_ARGS% %1\r\nshift\r\ngoto collect\r\n:run\r\n>>\"{log}\" echo npx%SP_ARGS%\r\n\"{socket}\"%SP_ARGS%\r\n",
+        "@echo off\r\nsetlocal\r\nset \"SP_ALL=%*\"\r\nset SP_ARGS=\r\nif not defined SP_ALL goto run\r\nset \"SP_REST=%SP_ALL:*@socketsecurity/socket-patch=%\"\r\nif \"%SP_REST%\"==\"%SP_ALL%\" goto run\r\nset \"SP_ARGS=%SP_REST%\"\r\nif not defined SP_ARGS goto run\r\nif not \"%SP_ARGS:~0,1%\"==\"@\" goto run\r\nset SP_ARGS=\r\nfor /f \"tokens=1,*\" %%a in (\"%SP_REST%\") do if not \"%%b\"==\"\" set \"SP_ARGS= %%b\"\r\n:run\r\n>>\"{log}\" echo npx%SP_ARGS%\r\n\"{socket}\"%SP_ARGS%\r\n",
         log = log.display(),
         socket = socket.display()
     );
@@ -1253,8 +1257,13 @@ pub fn git_sha256(bytes: &[u8]) -> String {
     hex::encode(h.finalize())
 }
 
+/// A dir vlt (rc.14) renames an old tree to and deletes in the background.
+pub fn is_vlt_delete_staging(name: &std::ffi::OsStr) -> bool {
+    name.to_string_lossy().starts_with(".VLT.DELETE.")
+}
+
 /// Every regular file under `dir` (relative, forward-slashed), skipping
-/// `node_modules` and following no links.
+/// `node_modules`, vlt's `.VLT.DELETE.*` staging dirs and links.
 pub fn package_files(dir: &Path) -> BTreeMap<String, Vec<u8>> {
     fn walk(base: &Path, dir: &Path, out: &mut BTreeMap<String, Vec<u8>>) {
         let mut entries: Vec<_> = std::fs::read_dir(dir)
@@ -1266,7 +1275,7 @@ pub fn package_files(dir: &Path) -> BTreeMap<String, Vec<u8>> {
             let ty = e.file_type().unwrap();
             let p = e.path();
             if ty.is_dir() {
-                if e.file_name() == "node_modules" {
+                if e.file_name() == "node_modules" || is_vlt_delete_staging(&e.file_name()) {
                     continue;
                 }
                 walk(base, &p, out);
@@ -2098,7 +2107,7 @@ pub fn fresh_checkout(proj: &Path, dest: &Path) -> PathBuf {
         };
         for e in rd.flatten() {
             let name = e.file_name();
-            if name.to_string_lossy().starts_with(".VLT.DELETE") {
+            if is_vlt_delete_staging(&name) {
                 continue;
             }
             let Ok(ty) = e.file_type() else {
@@ -2178,7 +2187,10 @@ fn snap_walk(label: &str, base: &Path, dir: &Path, out: &mut BTreeMap<String, St
     let Ok(rd) = std::fs::read_dir(dir) else {
         return;
     };
-    let mut entries: Vec<_> = rd.map(|e| e.unwrap()).collect();
+    let mut entries: Vec<_> = rd
+        .map(|e| e.unwrap())
+        .filter(|e| !is_vlt_delete_staging(&e.file_name()))
+        .collect();
     entries.sort_by_key(|e| e.file_name());
     for e in entries {
         let p = e.path();
@@ -2224,7 +2236,7 @@ impl Snapshot {
             for e in rd {
                 let e = e.unwrap();
                 let name = e.file_name().to_string_lossy().into_owned();
-                if exclude.contains(&name) || name.starts_with(".VLT.DELETE") {
+                if exclude.contains(&name) || name.starts_with(".VLT.DELETE.") {
                     continue;
                 }
                 let mut one = BTreeMap::new();
diff --git a/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs b/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs
index 76639107..6e46e146 100644
--- a/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_vendor_common/mod.rs
@@ -38,7 +38,7 @@ pub const REG_URL: &str = "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.
 pub const VLT_LOCK: &str = "vlt-lock.json";
 
 /// The real-vlt versions whose captures are committed.
-pub const CAPTURED: &[&str] = &["1.2.0", "1.0.10", "1.0.0-rc.14"];
+pub const CAPTURED: &[&str] = &["1.2.0", "1.0.10", "1.0.4", "1.0.0-rc.32", "1.0.0-rc.14"];
 
 pub fn git_sha256(bytes: &[u8]) -> String {
     let mut hasher = Sha256::new();
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index bf0268d8..38c61432 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -2,7 +2,9 @@
 //! for a direct dependency (DESIGN §4.5).
 //!
 //! The target's default-registry node becomes a `file` node naming the
-//! directory artifact ([`super::npm_dir`]); its importer edges and the
+//! directory artifact ([`super::npm_dir`]), without the peer-context extra
+//! a single-context node may carry (vlt never gives a `file` node one, and
+//! keeps its peer edges); its importer edges and the
 //! importers' package.json specs move to `file:<path relative to the
 //! importer>`, and its own outgoing edges are re-keyed to the new DepID.
 //! Every other line of the lock stays byte-identical, and the moved entries
@@ -19,7 +21,7 @@ use std::path::Path;
 
 use serde_json::Value;
 
-use crate::constants::npm_family::VLT_LOCK;
+use crate::constants::npm_family::{VLT_LOCK, VLT_STORE_DIR};
 use crate::constants::SOCKET_DIR;
 use crate::manifest::schema::PatchRecord;
 use crate::patch::apply::PatchSources;
@@ -35,11 +37,11 @@ use super::state::{
     WiringRecord,
 };
 use super::vlt_lock_text::{
-    edges_block, entry_text, file_dep_id, is_default_registry, is_importer_dep_id, nodes_block,
-    parse_edge_entry_text, parse_edge_line, parse_node_entry_text, parse_node_line,
-    parse_vendored_dir_path, render_entry_line, render_tuple_with_slots, sniff_lock, split_dep_id,
-    split_lines, vendored_dir_rel, vlt_collate, vlt_edge_cmp, DepIdEra, DepIdKind, LockSniff,
-    ParsedLock, SectionSpan,
+    edges_block, entry_text, file_dep_id, is_default_registry, is_importer_dep_id,
+    is_registry_url_segment, nodes_block, parse_edge_entry_text, parse_edge_line,
+    parse_node_entry_text, parse_node_line, parse_vendored_dir_path, render_entry_line,
+    render_tuple_with_slots, sniff_lock, split_dep_id, split_lines, vendored_dir_rel, vlt_collate,
+    vlt_edge_cmp, DepIdEra, DepIdKind, LockSniff, ParsedLock, SectionSpan,
 };
 use super::{RevertOpts, RevertOutcome, VendorOutcome, VendorWarning};
 
@@ -263,8 +265,31 @@ impl LockDoc {
         self.parsed.options()
     }
 
-    fn legacy_default_keys(&self) -> bool {
-        self.nodes.entries.iter().any(|e| e.key.starts_with("··"))
+    /// An era-A lock (0.0.0-19 … 1.0.0-rc.8): a `··` id, or default-registry
+    /// ids that are URL segments equal to a scalar `options.registry` with
+    /// no `·npm·` id beside them (era B spells the default registry `npm`
+    /// whatever the scalar).
+    fn is_era_a(&self) -> bool {
+        if self.era != DepIdEra::Legacy {
+            return false;
+        }
+        let mut url_segment = false;
+        for e in &self.nodes.entries {
+            if e.key.starts_with("··") {
+                return true;
+            }
+            let Some(dep_id) = split_dep_id(&e.key) else {
+                continue;
+            };
+            if dep_id.kind != DepIdKind::Registry || dep_id.era != DepIdEra::Legacy {
+                continue;
+            }
+            if dep_id.first == "npm" {
+                return false;
+            }
+            url_segment |= is_registry_url_segment(&dep_id.first, self.options());
+        }
+        url_segment
     }
 }
 
@@ -373,6 +398,8 @@ fn importer_dir(from: &str) -> Option<String> {
         .then_some(dep_id.first)
 }
 
+/// The one default-registry instance of `name@version` (plain or with only
+/// a peer-context extra) or our own vendored node, with its importer edges.
 fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refusal> {
     let options = doc.options();
     let mut defaults = Vec::new();
@@ -385,7 +412,8 @@ fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refus
         match dep_id.kind {
             DepIdKind::Registry if dep_id.registry_identity() == Some((name, version)) => {
                 if is_default_registry(&dep_id.first, options) {
-                    defaults.push((i, dep_id.extra.is_some()));
+                    let variant = dep_id.extra.is_some() && !dep_id.has_peer_extra_only();
+                    defaults.push((i, variant));
                 } else {
                     foreign.push(i);
                 }
@@ -437,7 +465,7 @@ fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refus
                 format!(
                     "vlt-lock.json holds {} ({}): peer/modifier variants; use --mode hosted",
                     if ids.len() == 1 {
-                        "a variant instance".to_string()
+                        "a modifier variant instance".to_string()
                     } else {
                         format!("{} instances", ids.len())
                     },
@@ -994,6 +1022,81 @@ async fn prior_vlt_entry(project_root: &Path, purl: &str) -> Option<VendorEntry>
     })
 }
 
+const REINSTALL_REQUIRED: &str = "vendor_vlt_reinstall_required";
+
+/// The importer edges whose `node_modules/<dep>` still resolves into vlt's
+/// store, i.e. to an installed registry copy rather than the vendored dir.
+async fn stale_links<'t>(project_root: &Path, target: &'t Target) -> Vec<&'t ImporterEdge> {
+    let Ok(store) = tokio::fs::canonicalize(project_root.join(VLT_STORE_DIR)).await else {
+        return Vec::new();
+    };
+    let mut stale = Vec::new();
+    for edge in &target.importers {
+        let link = project_root
+            .join(&edge.dir)
+            .join("node_modules")
+            .join(&edge.dep);
+        if tokio::fs::canonicalize(&link)
+            .await
+            .is_ok_and(|real| real.starts_with(&store))
+        {
+            stale.push(edge);
+        }
+    }
+    stale
+}
+
+/// `vendor_vlt_reinstall_required`: from 0.0.0-30 a plain `vlt install`
+/// keeps an installed optional dependency whose spec moved to a `file:`
+/// dir, so every rewired or still-stale optional edge needs `vlt ci`; a
+/// stale link of any other edge needs a reinstall.
+async fn reinstall_advisory(
+    project_root: &Path,
+    name: &str,
+    version: &str,
+    target: &Target,
+    rewired: bool,
+) -> Option<VendorWarning> {
+    let stale = stale_links(project_root, target).await;
+    let optional = target.importers.iter().any(|e| {
+        e.edge_type == "optional" && (rewired || stale.iter().any(|s| s.index == e.index))
+    });
+    if optional {
+        return Some(VendorWarning::new(
+            REINSTALL_REQUIRED,
+            format!(
+                "{name}@{version} is an optional dependency: `vlt install` (vlt 0.0.0-30 and \
+                 later) keeps an installed upstream copy of an optional dependency whose spec \
+                 moved to a vendored `file:` directory, so run `vlt ci` (or delete node_modules \
+                 and run `vlt install`) to link the vendored copy. vlt releases before 1.0.5 \
+                 install no optional dependency from the lock of a project that declares only \
+                 optional dependencies: upgrade vlt to 1.0.5 or later first."
+            ),
+        ));
+    }
+    if stale.is_empty() {
+        return None;
+    }
+    let links: Vec<String> = stale
+        .iter()
+        .map(|e| {
+            if e.dir.is_empty() {
+                format!("node_modules/{}", e.dep)
+            } else {
+                format!("{}/node_modules/{}", e.dir, e.dep)
+            }
+        })
+        .collect();
+    Some(VendorWarning::new(
+        REINSTALL_REQUIRED,
+        format!(
+            "{} still links {name}@{version} to its installed upstream copy; run `vlt install` \
+             (or `vlt ci`) to link the vendored copy",
+            links.join(", ")
+        ),
+    ))
+}
+
 /// Vendor one installed npm package into a vlt project (see the module
 /// doc). Same contract as the other npm backends: refuse-early / wire-last,
 /// `entry` present iff `result.success` and not a dry run, and an in-sync
@@ -1020,11 +1123,12 @@ pub(crate) async fn vendor_vlt(
         Err((code, detail)) => return refused(code, detail),
     };
     let mut warnings = Vec::new();
-    if analysis.doc.legacy_default_keys() {
+    if analysis.doc.is_era_a() {
         warnings.push(VendorWarning::new(
             "vendor_vlt_legacy_lockfile",
-            "vlt-lock.json was written by vlt 0.0.0-19 … 1.0.0-rc.8 (`··` ids); those releases \
-             install the vendored lock but fail if it is deleted and re-created — upgrade vlt",
+            "vlt-lock.json was written by vlt 0.0.0-19 … 1.0.0-rc.8 (`··` or scalar-registry URL \
+             ids); those releases install the vendored lock but fail if it is deleted and \
+             re-created — upgrade vlt",
         ));
     }
     let prior = prior_vlt_entry(project_root, purl).await;
@@ -1033,6 +1137,15 @@ pub(crate) async fn vendor_vlt(
         Err((code, detail)) => return refused(code, detail),
     };
 
+    let reinstall = reinstall_advisory(
+        project_root,
+        name,
+        version,
+        &analysis.target,
+        wiring.is_some(),
+    )
+    .await;
+
     let (staged, result) = match stage_patch_dir(
         purl,
         installed_dir,
@@ -1049,6 +1162,7 @@ pub(crate) async fn vendor_vlt(
         Ok(pair) => pair,
         Err(outcome) => return *outcome,
     };
+    warnings.extend(reinstall);
     let Some(staged) = staged else {
         return done(result, None, warnings);
     };
@@ -1946,6 +2060,8 @@ mod tests {
     #[tokio::test]
     async fn target_analysis_refusals() {
         let url_node = r#""~npm~left-pad@1.3.0~peer.1": [0,"left-pad","sha512-P=="]"#;
+        let modifier_node =
+            r#""~npm~left-pad@1.3.0~_croot_s_g_s#left-pad": [0,"left-pad","sha512-M=="]"#;
         let cases: Vec<(String, &str, &str, &str)> = vec![
             (
                 render(1, &[r#""~acme~left-pad@1.3.0": [0,"left-pad","sha512-A=="]"#], &[r#""file~_d left-pad": "prod 1.3.0 ~acme~left-pad@1.3.0""#]),
@@ -1960,10 +2076,16 @@ mod tests {
                 "peer/modifier variants; use --mode hosted",
             ),
             (
-                render(1, &[url_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0~peer.1""#]),
+                render(1, &[modifier_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0~_croot_s_g_s#left-pad""#]),
                 ROOT_PKG,
                 UNSUPPORTED,
-                "peer/modifier variants",
+                "a modifier variant instance (~npm~left-pad@1.3.0~_croot_s_g_s#left-pad): peer/modifier variants",
+            ),
+            (
+                render(1, &[REG_NODE.replace("~npm~left-pad@1.3.0", "~npm~left-pad@1.3.0~peer.2").as_str(), url_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0~peer.1""#, r#""workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0~peer.2""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "2 instances",
             ),
             (
                 render(1, &[r#""~npm~a@1.0.0": [0,"a"]"#], &[]),
@@ -2024,6 +2146,222 @@ mod tests {
         }
     }
 
+    #[tokio::test]
+    async fn a_single_peer_context_is_vendored_without_its_extra() {
+        let member_pkg =
+            "{\n  \"name\": \"a\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+        let rows = [
+            (
+                1,
+                "~npm~left-pad@1.3.0~peer.0df72515a50372ba",
+                "file~_d",
+                "~npm~z@1.0.0",
+                "",
+            ),
+            (
+                1,
+                "~npm~left-pad@1.3.0~peer.1",
+                "workspace~packages+a",
+                "~npm~z@1.0.0",
+                "packages/a",
+            ),
+            (
+                0,
+                "·npm·left-pad@1.3.0·%E1%B9%97%3A3",
+                "file·.",
+                "·npm·z@1.0.0",
+                "",
+            ),
+        ];
+        for (version, reg, importer, z, dir) in rows {
+            let lock = render(
+                version,
+                &[
+                    &format!(
+                        r#""{reg}": [0,"left-pad","sha512-REG==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"]"#
+                    ),
+                    &format!(r#""{z}": [0,"z","sha512-Z=="]"#),
+                ],
+                &[
+                    &format!(r#""{importer} left-pad": "prod 1.3.0 {reg}""#),
+                    &format!(r#""{reg} z": "peer ^1.0.0 {z}""#),
+                ],
+            );
+            let pkg_rel = if dir.is_empty() {
+                PACKAGE_JSON.to_string()
+            } else {
+                format!("{dir}/{PACKAGE_JSON}")
+            };
+            let pkg = if dir.is_empty() { ROOT_PKG } else { member_pkg };
+            let fx = fx(&lock, &[(pkg_rel.as_str(), pkg)]).await;
+            let (entry, _) = entry_of(run(&fx, UUID, false).await);
+            let rel = format!(".socket/vendor/npm/{UUID}/left-pad-1.3.0/node_modules/left-pad");
+            let era = if version == 1 {
+                DepIdEra::Tilde
+            } else {
+                DepIdEra::Legacy
+            };
+            let file_id = file_dep_id(&rel, era);
+            let spec = importer_spec(dir, &rel);
+            assert_eq!(
+                read(&fx, VLT_LOCK).await,
+                render(
+                    version,
+                    &[
+                        &format!(r#""{z}": [0,"z","sha512-Z=="]"#),
+                        &format!(r#""{file_id}": [0,"left-pad",null,"{rel}"]"#),
+                    ],
+                    &[
+                        &format!(r#""{importer} left-pad": "prod {spec} {file_id}""#),
+                        &format!(r#""{file_id} z": "peer ^1.0.0 {z}""#),
+                    ],
+                ),
+                "{reg}"
+            );
+            assert!(read(&fx, &pkg_rel)
+                .await
+                .contains(&format!("\"left-pad\": \"{spec}\"")));
+            assert_eq!(entry.wiring[1].key.as_deref(), Some(reg), "{reg}");
+            let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+            assert!(out.success && out.warnings.is_empty(), "{reg}: {out:?}");
+            assert_eq!(
+                read(&fx, VLT_LOCK).await,
+                lock,
+                "{reg}: revert restores the extra"
+            );
+            assert_eq!(read(&fx, &pkg_rel).await, pkg, "{reg}");
+        }
+    }
+
+    #[tokio::test]
+    async fn a_scalar_registry_era_a_lock_warns_like_an_empty_segment_one() {
+        let url_id = "·https%3A§§registry.yarnpkg.com§·left-pad@1.3.0";
+        let lock = |registry: &str, extra_node: Option<&str>| {
+            let mut nodes = vec![format!(r#""{url_id}": [0,"left-pad","sha512-REG=="]"#)];
+            nodes.extend(extra_node.map(str::to_string));
+            let nodes: Vec<&str> = nodes.iter().map(String::as_str).collect();
+            render(
+                0,
+                &nodes,
+                &[&format!(r#""file·. left-pad": "prod 1.3.0 {url_id}""#)],
+            )
+            .replace(
+                "\"options\": {}",
+                &format!("\"options\": {{\"registry\": \"{registry}\"}}"),
+            )
+        };
+        let cases = [
+            (lock("https://registry.yarnpkg.com", None), true),
+            (lock("https://registry.yarnpkg.com/", None), true),
+            (lock("https://registry.npmjs.org/", None), false),
+            (
+                lock(
+                    "https://registry.yarnpkg.com/",
+                    Some(r#""·npm·a@1.0.0": [0,"a","sha512-A=="]"#),
+                ),
+                false,
+            ),
+        ];
+        for (lock, warns) in cases {
+            let fx = fx(&lock, &[(PACKAGE_JSON, ROOT_PKG)]).await;
+            let outcome = run(&fx, UUID, false).await;
+            if lock.contains("registry.npmjs.org") {
+                let (code, _) = refusal(outcome);
+                assert_eq!(code, UNSUPPORTED, "{lock}");
+                continue;
+            }
+            let (_, warnings) = entry_of(outcome);
+            assert_eq!(
+                codes(&warnings).contains(&"vendor_vlt_legacy_lockfile"),
+                warns,
+                "{lock}: {warnings:?}"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn an_optional_or_stale_linked_edge_asks_for_vlt_ci() {
+        let optional_lock = basic_lock().replace(
+            "\"file~_d left-pad\": \"prod 1.3.0",
+            "\"file~_d left-pad\": \"optional 1.3.0",
+        );
+        let optional_pkg = "{\n  \"name\": \"root\",\n  \"dependencies\": {\n    \"a\": \"1.0.0\"\n  },\n  \"optionalDependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+        let fx = fx(&optional_lock, &[(PACKAGE_JSON, optional_pkg)]).await;
+        let (entry, warnings) = entry_of(run(&fx, UUID, false).await);
+        let advisory: Vec<&VendorWarning> = warnings
+            .iter()
+            .filter(|w| w.code == REINSTALL_REQUIRED)
+            .collect();
+        assert_eq!(advisory.len(), 1, "{warnings:?}");
+        assert!(
+            advisory[0].detail.starts_with(
+                "left-pad@1.3.0 is an optional dependency: `vlt install` (vlt 0.0.0-30 and later) \
+                 keeps an installed upstream copy"
+            ),
+            "{}",
+            advisory[0].detail
+        );
+        assert!(advisory[0].detail.contains("run `vlt ci`"));
+        persist(&fx, &entry).await;
+        let rerun = run(&fx, UUID, false).await;
+        let VendorOutcome::Done { warnings, .. } = rerun else {
+            panic!("{rerun:?}");
+        };
+        assert!(
+            !codes(&warnings).contains(&REINSTALL_REQUIRED),
+            "{warnings:?}"
+        );
+
+        let store = fx
+            .root
+            .join(VLT_STORE_DIR)
+            .join(REG)
+            .join("node_modules/left-pad");
+        std::fs::create_dir_all(&store).unwrap();
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(&store, fx.root.join("node_modules/left-pad")).unwrap();
+        #[cfg(windows)]
+        std::os::windows::fs::symlink_dir(&store, fx.root.join("node_modules/left-pad")).unwrap();
+        let VendorOutcome::Done { warnings, .. } = run(&fx, UUID, false).await else {
+            panic!("rerun");
+        };
+        assert!(
+            warnings.iter().any(|w| w.code == REINSTALL_REQUIRED
+                && w.detail
+                    .starts_with("left-pad@1.3.0 is an optional dependency")),
+            "an in-sync rerun with the upstream copy still linked: {warnings:?}"
+        );
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (_, warnings) = entry_of(run(&fx, UUID, false).await);
+        assert!(
+            !codes(&warnings).contains(&REINSTALL_REQUIRED),
+            "{warnings:?}"
+        );
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let store = fx
+            .root
+            .join(VLT_STORE_DIR)
+            .join(REG)
+            .join("node_modules/left-pad");
+        std::fs::create_dir_all(&store).unwrap();
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(&store, fx.root.join("node_modules/left-pad")).unwrap();
+        #[cfg(windows)]
+        std::os::windows::fs::symlink_dir(&store, fx.root.join("node_modules/left-pad")).unwrap();
+        let (_, warnings) = entry_of(run(&fx, UUID, false).await);
+        let advisory: Vec<&VendorWarning> = warnings
+            .iter()
+            .filter(|w| w.code == REINSTALL_REQUIRED)
+            .collect();
+        assert_eq!(advisory.len(), 1, "{warnings:?}");
+        assert_eq!(
+            advisory[0].detail,
+            "node_modules/left-pad still links left-pad@1.3.0 to its installed upstream copy; run \
+             `vlt install` (or `vlt ci`) to link the vendored copy"
+        );
+    }
+
     #[tokio::test]
     async fn a_peer_range_beside_the_dev_edge_is_left_untouched() {
         let lock = render(
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
index 8df8928d..3a4517da 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -80,6 +80,28 @@ impl DepId {
             _ => None,
         }
     }
+
+    /// Whether the extra names only a peer context: `ṗ:<n>` (rc.6 …
+    /// rc.14), `peer.<n>` (rc.15 … 1.0.7) or `peer.<16 hex>` (1.0.8 on).
+    /// Modifier queries, and an id without an extra, are not.
+    pub(crate) fn has_peer_extra_only(&self) -> bool {
+        let Some(extra) = self
+            .extra
+            .as_deref()
+            .and_then(|e| decode_segment(e, self.era))
+        else {
+            return false;
+        };
+        let digits = |s: &str| !s.is_empty() && s.bytes().all(|b| b.is_ascii_digit());
+        if let Some(context) = extra.strip_prefix("peer.") {
+            return digits(context)
+                || (context.len() == 16
+                    && context
+                        .bytes()
+                        .all(|b| b.is_ascii_digit() || (b'a'..=b'f').contains(&b)));
+        }
+        extra.strip_prefix("ṗ:").is_some_and(digits)
+    }
 }
 
 pub(crate) fn dep_id_era(id: &str) -> Option<DepIdEra> {
@@ -1488,6 +1510,30 @@ mod tests {
         assert_eq!(file_dep_id(".", Legacy), "file·.");
     }
 
+    #[test]
+    fn a_peer_context_is_the_only_extra_vendoring_drops() {
+        let rows = [
+            ("~npm~x@1.0.0~peer.2", true),
+            ("~npm~x@1.0.0~peer.0df72515a50372ba", true),
+            ("·npm·x@1.0.0·%E1%B9%97%3A3", true),
+            ("··x@1.0.0·%E1%B9%97%3A12", true),
+            ("~npm~x@1.0.0~ṗ_c3", true),
+            ("~npm~x@1.0.0", false),
+            ("~npm~x@1.0.0~peer.", false),
+            ("~npm~x@1.0.0~peer.0DF72515A50372BA", false),
+            ("~npm~x@1.0.0~peer.0df72515a50372b", false),
+            ("~npm~x@1.0.0~peer.2x", false),
+            ("~npm~x@1.0.0~_croot_s_g_s#x", false),
+            ("··x@1.0.0·%3Aroot%20%3E%20%23x", false),
+            ("·npm·x@1.0.0·%E1%B9%97%3A", false),
+            ("·npm·x@1.0.0·%E1%B9%97%3A3%20", false),
+        ];
+        for (id, peer_only) in rows {
+            let dep_id = split_dep_id(id).unwrap_or_else(|| panic!("{id}"));
+            assert_eq!(dep_id.has_peer_extra_only(), peer_only, "{id}");
+        }
+    }
+
     #[test]
     fn test_decode_vlt_dep_id_store_entries() {
         let owned = |n: &str, v: &str| Some((n.to_string(), v.to_string()));
diff --git a/crates/socket-patch-core/src/vex/discover/vlt.rs b/crates/socket-patch-core/src/vex/discover/vlt.rs
index 950c6516..ebbb4477 100644
--- a/crates/socket-patch-core/src/vex/discover/vlt.rs
+++ b/crates/socket-patch-core/src/vex/discover/vlt.rs
@@ -435,7 +435,7 @@ mod tests {
     async fn every_vendored_capture_wires_its_case_purl() {
         let root = fixture_path("vendor/npm/vlt");
         let mut checked = 0;
-        for version in ["1.2.0", "1.0.10", "1.0.0-rc.14"] {
+        for version in ["1.2.0", "1.0.10", "1.0.4", "1.0.0-rc.32", "1.0.0-rc.14"] {
             let cases = root.join(version).join("cases");
             for case in std::fs::read_dir(&cases).unwrap() {
                 let dir = case.unwrap().path();
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/case.json
new file mode 100644
index 00000000..0fa32ffe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "peer-member",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/packages/a/package.json
new file mode 100644
index 00000000..869ecc41
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/vlt-lock.json
new file mode 100644
index 00000000..954cb824
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/cases/peer-member/expected/vlt-lock.json
@@ -0,0 +1,17 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "workspace·packages§a react": "prod 18.2.0 ·npm·react@18.2.0",
+    "workspace·packages§a use-sync-external-store": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "file·.socket§vendor§npm§11111111-2222-4333-8444-555555555555§use-sync-external-store-1.2.0§node_modules§use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/packages/a/package.json
new file mode 100644
index 00000000..bfc1164c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "1.2.0",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt-lock.json
new file mode 100644
index 00000000..edadcf5b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt-lock.json
@@ -0,0 +1,17 @@
+{
+  "lockfileVersion": 0,
+  "options": {},
+  "nodes": {
+    "·npm·js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "·npm·loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "·npm·react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "·npm·use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="]
+  },
+  "edges": {
+    "workspace·packages§a react": "prod 18.2.0 ·npm·react@18.2.0",
+    "workspace·packages§a use-sync-external-store": "prod 1.2.0 ·npm·use-sync-external-store@1.2.0",
+    "·npm·loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ·npm·js-tokens@4.0.0",
+    "·npm·react@18.2.0 loose-envify": "prod ^1.1.0 ·npm·loose-envify@1.4.0",
+    "·npm·use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ·npm·react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt.json
new file mode 100644
index 00000000..d6fc9d95
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.14/projects/peer-member/vlt.json
@@ -0,0 +1,3 @@
+{
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/case.json
new file mode 100644
index 00000000..63eff6c7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/package.json
new file mode 100644
index 00000000..48d192ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/vlt-lock.json
new file mode 100644
index 00000000..ec2c4bec
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias-selfref-peer/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/case.json
new file mode 100644
index 00000000..6c9a0f29
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/package.json
new file mode 100644
index 00000000..2246ce1e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/vlt-lock.json
new file mode 100644
index 00000000..363471d4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/alias/expected/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/case.json
new file mode 100644
index 00000000..dead58d7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/is-number@7.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/package.json
new file mode 100644
index 00000000..b5085327
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..2880779d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/dev-edge/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number": [2,"is-number",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"]
+  },
+  "edges": {
+    "file~_d is-number": "dev file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/case.json
new file mode 100644
index 00000000..c98fb091
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/package.json
new file mode 100644
index 00000000..ee2d0698
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/packages/a/package.json
new file mode 100644
index 00000000..17bfc18d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/vlt-lock.json
new file mode 100644
index 00000000..0e18bdf5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/left-pad/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/case.json
new file mode 100644
index 00000000..38c6aba5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/debug@4.3.4",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/packages/a/package.json
new file mode 100644
index 00000000..6506dc3d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/vlt-lock.json
new file mode 100644
index 00000000..54845e60
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/member-only/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug": [0,"debug",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a debug": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug ms": "prod 2.1.2 ~npm~ms@2.1.2"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/case.json
new file mode 100644
index 00000000..38775dc8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/escape-string-regexp@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/package.json
new file mode 100644
index 00000000..ef388d4c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..a9dfbff4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/optional-edge/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp": [1,"escape-string-regexp",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp",null,null,null,{  "engines": {    "node": ">=10"  }}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/case.json
new file mode 100644
index 00000000..0fa32ffe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "peer-member",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/packages/a/package.json
new file mode 100644
index 00000000..869ecc41
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/vlt-lock.json
new file mode 100644
index 00000000..81864149
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer-member/expected/vlt-lock.json
@@ -0,0 +1,17 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/case.json
new file mode 100644
index 00000000..5bd8da3a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/package.json
new file mode 100644
index 00000000..601ef7bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/vlt-lock.json
new file mode 100644
index 00000000..0b2ab695
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/peer/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/case.json
new file mode 100644
index 00000000..7358fac5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/package.json
new file mode 100644
index 00000000..cb3d0b8c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/vlt-lock.json
new file mode 100644
index 00000000..0275b4d6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/scoped/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare": [0,"@isaacs/string-locale-compare",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d @isaacs/string-locale-compare": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/case.json
new file mode 100644
index 00000000..3d937dc3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/semver@7.6.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/package.json
new file mode 100644
index 00000000..59ac3005
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/vlt-lock.json
new file mode 100644
index 00000000..66605fbb
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/semver/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver": [0,"semver",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d semver": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/case.json
new file mode 100644
index 00000000..a0f4f351
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/supports-color@7.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/package.json
new file mode 100644
index 00000000..6796bab6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/vlt-lock.json
new file mode 100644
index 00000000..5f4ef1ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/supports-color/expected/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color": [0,"supports-color",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d supports-color": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/transitive/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/transitive/case.json
new file mode 100644
index 00000000..6b2b1999
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/cases/transitive/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/has-flag@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_vlt_transitive_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/package.json
new file mode 100644
index 00000000..25865836
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt-lock.json
new file mode 100644
index 00000000..4fc64f0d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt-lock.json
@@ -0,0 +1,19 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt.json
new file mode 100644
index 00000000..0967ef42
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/alias/vlt.json
@@ -0,0 +1 @@
+{}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/packages/a/package.json
new file mode 100644
index 00000000..bfc1164c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "1.2.0",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt-lock.json
new file mode 100644
index 00000000..8668d4d4
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt-lock.json
@@ -0,0 +1,17 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~use-sync-external-store@1.2.0~peer.1": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.1",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.1 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt.json
new file mode 100644
index 00000000..d6fc9d95
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/peer-member/vlt.json
@@ -0,0 +1,3 @@
+{
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt-lock.json
new file mode 100644
index 00000000..12009d87
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt-lock.json
@@ -0,0 +1,42 @@
+{
+  "lockfileVersion": 1,
+  "options": {},
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ=="],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ=="],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==",null,null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng=="],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA=="],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",null,null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA=="],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ=="],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==",null,null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw=="],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA=="],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt.json
new file mode 100644
index 00000000..d6fc9d95
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.0-rc.32/projects/workspace/vlt.json
@@ -0,0 +1,3 @@
+{
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
index 0d80425a..63eff6c7 100644
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/case.json
@@ -2,5 +2,6 @@
   "project": "alias",
   "purl": "pkg:npm/use-sync-external-store@1.2.0",
   "uuid": "11111111-2222-4333-8444-555555555555",
-  "refusal": "vendor_lock_entry_unsupported"
+  "refusal": null,
+  "ciChurn": []
 }
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/package.json
new file mode 100644
index 00000000..48d192ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/vlt-lock.json
new file mode 100644
index 00000000..c2437c49
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/alias-selfref-peer/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/case.json
new file mode 100644
index 00000000..0fa32ffe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "peer-member",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/packages/a/package.json
new file mode 100644
index 00000000..869ecc41
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/vlt-lock.json
new file mode 100644
index 00000000..cb14fd65
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer-member/expected/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
index 57104202..5bd8da3a 100644
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/case.json
@@ -2,5 +2,6 @@
   "project": "workspace",
   "purl": "pkg:npm/use-sync-external-store@1.2.0",
   "uuid": "11111111-2222-4333-8444-555555555555",
-  "refusal": "vendor_lock_entry_unsupported"
+  "refusal": null,
+  "ciChurn": []
 }
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/package.json
new file mode 100644
index 00000000..601ef7bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/vlt-lock.json
new file mode 100644
index 00000000..979f5f98
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/cases/peer/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/packages/a/package.json
new file mode 100644
index 00000000..bfc1164c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "1.2.0",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt-lock.json
new file mode 100644
index 00000000..ccb2cc0a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.10/projects/peer-member/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/case.json
new file mode 100644
index 00000000..63eff6c7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/package.json
new file mode 100644
index 00000000..48d192ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/vlt-lock.json
new file mode 100644
index 00000000..c2437c49
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias-selfref-peer/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/case.json
new file mode 100644
index 00000000..6c9a0f29
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "alias",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/package.json
new file mode 100644
index 00000000..2246ce1e
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/vlt-lock.json
new file mode 100644
index 00000000..f69cc1c7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/alias/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d lp": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/case.json
new file mode 100644
index 00000000..dead58d7
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/is-number@7.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/package.json
new file mode 100644
index 00000000..b5085327
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..3b6a1fe9
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/dev-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number": [2,"is-number",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number"]
+  },
+  "edges": {
+    "file~_d is-number": "dev file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/is-number-7.0.0/node_modules/is-number file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+is-number-7.0.0+node__modules+is-number",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/case.json
new file mode 100644
index 00000000..c98fb091
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/left-pad@1.3.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/package.json
new file mode 100644
index 00000000..ee2d0698
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/packages/a/package.json
new file mode 100644
index 00000000..17bfc18d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/vlt-lock.json
new file mode 100644
index 00000000..34048758
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/left-pad/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad": [0,"left-pad",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d left-pad": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/left-pad-1.3.0/node_modules/left-pad file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+left-pad-1.3.0+node__modules+left-pad",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/case.json
new file mode 100644
index 00000000..38c6aba5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/debug@4.3.4",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/packages/a/package.json
new file mode 100644
index 00000000..6506dc3d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/vlt-lock.json
new file mode 100644
index 00000000..e288fbb8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/member-only/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug": [0,"debug",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "workspace~packages+a debug": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/debug-4.3.4/node_modules/debug file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+debug-4.3.4+node__modules+debug ms": "prod 2.1.2 ~npm~ms@2.1.2"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/case.json
new file mode 100644
index 00000000..38775dc8
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/escape-string-regexp@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/package.json
new file mode 100644
index 00000000..ef388d4c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/vlt-lock.json
new file mode 100644
index 00000000..83200efb
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/optional-edge/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp": [1,"escape-string-regexp",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp",null,null,null,{  "engines": {    "node": ">=10"  }}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/escape-string-regexp-4.0.0/node_modules/escape-string-regexp file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+escape-string-regexp-4.0.0+node__modules+escape-string-regexp",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/case.json
new file mode 100644
index 00000000..0fa32ffe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "peer-member",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/packages/a/package.json
new file mode 100644
index 00000000..869ecc41
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/vlt-lock.json
new file mode 100644
index 00000000..cb14fd65
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer-member/expected/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/case.json
new file mode 100644
index 00000000..5bd8da3a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/package.json
new file mode 100644
index 00000000..601ef7bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/vlt-lock.json
new file mode 100644
index 00000000..979f5f98
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/peer/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/case.json
new file mode 100644
index 00000000..7358fac5
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/package.json
new file mode 100644
index 00000000..cb3d0b8c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/vlt-lock.json
new file mode 100644
index 00000000..7e36422b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/scoped/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare": [0,"@isaacs/string-locale-compare",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d @isaacs/string-locale-compare": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/@isaacs/string-locale-compare-1.1.0/node_modules/@isaacs/string-locale-compare file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+@isaacs+string-locale-compare-1.1.0+node__modules+@isaacs+string-locale-compare",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/case.json
new file mode 100644
index 00000000..3d937dc3
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/semver@7.6.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/package.json
new file mode 100644
index 00000000..59ac3005
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/vlt-lock.json
new file mode 100644
index 00000000..f33f2f7d
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/semver/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver": [0,"semver",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver",null,null,null,null,{  "semver": "bin/semver.js"}]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d semver": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/semver-7.6.0/node_modules/semver file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+semver-7.6.0+node__modules+semver lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/case.json
new file mode 100644
index 00000000..a0f4f351
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/supports-color@7.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/package.json
new file mode 100644
index 00000000..6796bab6
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/vlt-lock.json
new file mode 100644
index 00000000..02b66d64
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/supports-color/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color": [0,"supports-color",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "file~_d supports-color": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/supports-color-7.2.0/node_modules/supports-color file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+supports-color-7.2.0+node__modules+supports-color has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/transitive/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/transitive/case.json
new file mode 100644
index 00000000..6b2b1999
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/cases/transitive/case.json
@@ -0,0 +1,6 @@
+{
+  "project": "workspace",
+  "purl": "pkg:npm/has-flag@4.0.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": "vendor_vlt_transitive_unsupported"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/package.json
new file mode 100644
index 00000000..25865836
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "npm:use-sync-external-store@1.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt-lock.json
new file mode 100644
index 00000000..a9751d22
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod npm:use-sync-external-store@1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt.json
new file mode 100644
index 00000000..edaf227f
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/alias/vlt.json
@@ -0,0 +1,7 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/packages/a/package.json
new file mode 100644
index 00000000..bfc1164c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "1.2.0",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt-lock.json
new file mode 100644
index 00000000..b9879f59
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.1": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.1",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.1 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/peer-member/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/package.json
new file mode 100644
index 00000000..8ea00c2b
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "1.2.0"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt-lock.json
new file mode 100644
index 00000000..e3ca365a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "~npm~use-sync-external-store@1.2.0 react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.0.4/projects/workspace/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
index 0d80425a..63eff6c7 100644
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/case.json
@@ -2,5 +2,6 @@
   "project": "alias",
   "purl": "pkg:npm/use-sync-external-store@1.2.0",
   "uuid": "11111111-2222-4333-8444-555555555555",
-  "refusal": "vendor_lock_entry_unsupported"
+  "refusal": null,
+  "ciChurn": []
 }
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/package.json
new file mode 100644
index 00000000..48d192ea
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "lp": "npm:left-pad@1.3.0",
+    "react": "18.2.0",
+    "usx": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/vlt-lock.json
new file mode 100644
index 00000000..c2437c49
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/alias-selfref-peer/expected/vlt-lock.json
@@ -0,0 +1,23 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d lp": "prod npm:left-pad@1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d usx": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/case.json
new file mode 100644
index 00000000..0fa32ffe
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/case.json
@@ -0,0 +1,7 @@
+{
+  "project": "peer-member",
+  "purl": "pkg:npm/use-sync-external-store@1.2.0",
+  "uuid": "11111111-2222-4333-8444-555555555555",
+  "refusal": null,
+  "ciChurn": []
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/packages/a/package.json
new file mode 100644
index 00000000..869ecc41
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/vlt-lock.json
new file mode 100644
index 00000000..cb14fd65
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer-member/expected/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod file:../../.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
index 57104202..5bd8da3a 100644
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/case.json
@@ -2,5 +2,6 @@
   "project": "workspace",
   "purl": "pkg:npm/use-sync-external-store@1.2.0",
   "uuid": "11111111-2222-4333-8444-555555555555",
-  "refusal": "vendor_lock_entry_unsupported"
+  "refusal": null,
+  "ciChurn": []
 }
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/package.json
new file mode 100644
index 00000000..601ef7bf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "root",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "ms": "2.1.3",
+    "supports-color": "7.2.0",
+    "@isaacs/string-locale-compare": "1.1.0",
+    "semver": "7.6.0",
+    "react": "18.2.0",
+    "use-sync-external-store": "file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"
+  },
+  "devDependencies": {
+    "is-number": "7.0.0"
+  },
+  "optionalDependencies": {
+    "escape-string-regexp": "4.0.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/packages/a/package.json
new file mode 100644
index 00000000..90360a71
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "left-pad": "1.3.0",
+    "debug": "4.3.4"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/vlt-lock.json
new file mode 100644
index 00000000..979f5f98
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/cases/peer/expected/vlt-lock.json
@@ -0,0 +1,46 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~@isaacs+string-locale-compare@1.1.0": [0,"@isaacs/string-locale-compare","sha512-SQ7Kzhh9+D+ZW9MA0zkYv3VXhIDNx+LzM6EJ+/65I3QY+enU6Itte7E5XX7EWrqLW2FN4n06GWzBnPoC3th2aQ==","https://registry.npmjs.org/@isaacs/string-locale-compare/-/string-locale-compare-1.1.0.tgz"],
+    "~npm~debug@4.3.4": [0,"debug","sha512-PRWFHuSU3eDtQJPvnNY7Jcket1j0t5OuOsFzPPzsekD52Zl8qUfFIPEiswXqIvHWGVHOgX+7G/vCNNhehwxfkQ==","https://registry.npmjs.org/debug/-/debug-4.3.4.tgz"],
+    "~npm~escape-string-regexp@4.0.0": [1,"escape-string-regexp","sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==","https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz",null,null,null,{  "engines": {    "node": ">=10"  }}],
+    "~npm~has-flag@4.0.0": [0,"has-flag","sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==","https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz"],
+    "~npm~is-number@7.0.0": [2,"is-number","sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==","https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"],
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~left-pad@1.3.0": [0,"left-pad","sha512-XI5MPzVNApjAyhQzphX8BkmKsKUxD4LdyK24iZeQGinBN9yTQT3bFlCBy/aVx2HrNcqQGsdot8ghrjyrvMCoEA==","https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~lru-cache@6.0.0": [0,"lru-cache","sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==","https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz"],
+    "~npm~ms@2.1.2": [0,"ms","sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==","https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"],
+    "~npm~ms@2.1.3": [0,"ms","sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==","https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~semver@7.6.0": [0,"semver","sha512-EnwXhrlwXMk9gKu5/flx5sv/an57AkRplG3hTK68W7FRDN+k+OWBj65M7719OkA82XLBxrcX0KSHj+X5COhOVg==","https://registry.npmjs.org/semver/-/semver-7.6.0.tgz",null,null,null,null,{  "semver": "bin/semver.js"}],
+    "~npm~supports-color@7.2.0": [0,"supports-color","sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==","https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz"],
+    "~npm~yallist@4.0.0": [0,"yallist","sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==","https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"],
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store": [0,"use-sync-external-store",null,".socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store"]
+  },
+  "edges": {
+    "file~_d is-number": "dev 7.0.0 ~npm~is-number@7.0.0",
+    "file~_d escape-string-regexp": "optional 4.0.0 ~npm~escape-string-regexp@4.0.0",
+    "file~_d @isaacs/string-locale-compare": "prod 1.1.0 ~npm~@isaacs+string-locale-compare@1.1.0",
+    "file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "file~_d ms": "prod 2.1.3 ~npm~ms@2.1.3",
+    "file~_d react": "prod 18.2.0 ~npm~react@18.2.0",
+    "file~_d semver": "prod 7.6.0 ~npm~semver@7.6.0",
+    "file~_d supports-color": "prod 7.2.0 ~npm~supports-color@7.2.0",
+    "file~_d use-sync-external-store": "prod file:./.socket/vendor/npm/11111111-2222-4333-8444-555555555555/use-sync-external-store-1.2.0/node_modules/use-sync-external-store file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store",
+    "workspace~packages+a debug": "prod 4.3.4 ~npm~debug@4.3.4",
+    "workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0",
+    "~npm~debug@4.3.4 ms": "prod 2.1.2 ~npm~ms@2.1.2",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~lru-cache@6.0.0 yallist": "prod ^4.0.0 ~npm~yallist@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~semver@7.6.0 lru-cache": "prod ^6.0.0 ~npm~lru-cache@6.0.0",
+    "~npm~supports-color@7.2.0 has-flag": "prod ^4.0.0 ~npm~has-flag@4.0.0",
+    "file~.socket+vendor+npm+11111111-2222-4333-8444-555555555555+use-sync-external-store-1.2.0+node__modules+use-sync-external-store react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/package.json
new file mode 100644
index 00000000..c4daf955
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "root",
+  "version": "1.0.0"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/packages/a/package.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/packages/a/package.json
new file mode 100644
index 00000000..bfc1164c
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/packages/a/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "a",
+  "version": "1.0.0",
+  "dependencies": {
+    "use-sync-external-store": "1.2.0",
+    "react": "18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt-lock.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt-lock.json
new file mode 100644
index 00000000..ccb2cc0a
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt-lock.json
@@ -0,0 +1,21 @@
+{
+  "lockfileVersion": 1,
+  "options": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "nodes": {
+    "~npm~js-tokens@4.0.0": [0,"js-tokens","sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==","https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"],
+    "~npm~loose-envify@1.4.0": [0,"loose-envify","sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==","https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",null,null,null,null,{  "loose-envify": "cli.js"}],
+    "~npm~react@18.2.0": [0,"react","sha512-/3IjMdb2L9QbBdWiW5e3P2/npwMBaU9mHCSCUzNln0ZCYbcfTsGbTJrU/kGemdH2IWmB2ioZ+zkxtmq6g09fGQ==","https://registry.npmjs.org/react/-/react-18.2.0.tgz"],
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba": [0,"use-sync-external-store","sha512-eEgnFxGQ1Ife9bzYs6VLi8/4X6CObHMw9Qr9tPY43iKwsPw8xE8+EFsf/2cFZ5S3esXgpWgtSCtLNS41F+sKPA==","https://registry.npmjs.org/use-sync-external-store/-/use-sync-external-store-1.2.0.tgz"]
+  },
+  "edges": {
+    "workspace~packages+a react": "prod 18.2.0 ~npm~react@18.2.0",
+    "workspace~packages+a use-sync-external-store": "prod 1.2.0 ~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba",
+    "~npm~loose-envify@1.4.0 js-tokens": "prod ^3.0.0 || ^4.0.0 ~npm~js-tokens@4.0.0",
+    "~npm~react@18.2.0 loose-envify": "prod ^1.1.0 ~npm~loose-envify@1.4.0",
+    "~npm~use-sync-external-store@1.2.0~peer.0df72515a50372ba react": "peer ^16.8.0 || ^17.0.0 || ^18.0.0 ~npm~react@18.2.0"
+  }
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt.json b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt.json
new file mode 100644
index 00000000..c34a23cf
--- /dev/null
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/1.2.0/projects/peer-member/vlt.json
@@ -0,0 +1,8 @@
+{
+  "config": {
+    "registries": {
+      "npm": "https://registry.npmjs.org/"
+    }
+  },
+  "workspaces": "packages/*"
+}
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
index ab67f0ad..042770e2 100755
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
@@ -8,7 +8,11 @@
 # <version>/cases/<case>/ holds case.json and, unless refused, expected/.
 # A lock ci rewrites is recorded in case.json `ciChurn` (pairs of the line
 # surgery wrote and the line vlt wrote); the expected lock is then taken
-# after a second `ci`, which must leave it unchanged.
+# after a second `ci`, which must leave it unchanged. Every expected lock
+# must also survive `vlt install --frozen-lockfile` byte for byte (warm,
+# then from a clean node_modules), and `vlt install escape-html@1.0.3`
+# must keep every entry of it unchanged, except the values of the vendored
+# node's own edges (rc.14 rewrites their peer specs on every reify).
 #
 # usage: VLT_BIN_DIR=<dir holding <version>/node_modules/vlt/vlt.js> ./regenerate.sh
 set -euo pipefail
@@ -19,7 +23,7 @@ HERE=$(cd "$(dirname "$0")" && pwd)
 WORK=$(mktemp -d)
 trap 'rm -rf "$WORK"' EXIT
 UUID=11111111-2222-4333-8444-555555555555
-VERSIONS=${VERSIONS:-"1.2.0 1.0.10 1.0.0-rc.14"}
+VERSIONS=${VERSIONS:-"1.2.0 1.0.10 1.0.4 1.0.0-rc.32 1.0.0-rc.14"}
 
 vlt() {
   local version=$1 xdg=$2
@@ -44,6 +48,12 @@ write_project() {
       json '{"name":"root","version":"1.0.0","dependencies":{"left-pad":"1.3.0","ms":"2.1.3","supports-color":"7.2.0","@isaacs/string-locale-compare":"1.1.0","semver":"7.6.0","react":"18.2.0","use-sync-external-store":"1.2.0"},"devDependencies":{"is-number":"7.0.0"},"optionalDependencies":{"escape-string-regexp":"4.0.0"}}' >"$dir/package.json"
       json '{"name":"a","version":"1.0.0","dependencies":{"left-pad":"1.3.0","debug":"4.3.4"}}' >"$dir/packages/a/package.json"
       ;;
+    peer-member)
+      mkdir -p "$dir/packages/a"
+      json "{${cfg:+$cfg,}\"workspaces\":\"packages/*\"}" >"$dir/vlt.json"
+      json '{"name":"root","version":"1.0.0"}' >"$dir/package.json"
+      json '{"name":"a","version":"1.0.0","dependencies":{"use-sync-external-store":"1.2.0","react":"18.2.0"}}' >"$dir/packages/a/package.json"
+      ;;
     alias)
       json "{${cfg}}" >"$dir/vlt.json"
       json '{"name":"root","version":"1.0.0","dependencies":{"lp":"npm:left-pad@1.3.0","react":"18.2.0","usx":"npm:use-sync-external-store@1.2.0"}}' >"$dir/package.json"
@@ -60,6 +70,7 @@ dev-edge:workspace:is-number@7.0.0
 optional-edge:workspace:escape-string-regexp@4.0.0
 member-only:workspace:debug@4.3.4
 peer:workspace:use-sync-external-store@1.2.0
+peer-member:peer-member:use-sync-external-store@1.2.0
 transitive:workspace:has-flag@4.0.0
 alias:alias:left-pad@1.3.0
 alias-selfref-peer:alias:use-sync-external-store@1.2.0"
@@ -72,7 +83,7 @@ copy_inputs() {
 }
 
 for version in $VERSIONS; do
-  for project in workspace alias; do
+  for project in workspace peer-member alias; do
     base=$WORK/$version/$project
     write_project "$project" "$version" "$base"
     (cd "$base" && vlt "$version" "$WORK/xdg-$version" install >"$WORK/$version-$project-install.log" 2>&1)
@@ -137,5 +148,25 @@ for version in $VERSIONS; do
     json "{\"project\":\"$project\",\"purl\":\"pkg:npm/$target\",\"uuid\":\"$UUID\",\"refusal\":null,\"ciChurn\":$churn}" >"$out/case.json"
     copy_inputs "$run" "$out/expected"
     rm -f "$out/expected/vlt.json"
+    cp "$run/vlt-lock.json" "$WORK/expected.json"
+    (cd "$run" && vlt "$version" "$WORK/xdg-$version" install --frozen-lockfile >"$WORK/$version-$case-frozen.log" 2>&1)
+    cmp -s "$WORK/expected.json" "$run/vlt-lock.json" || { echo "$version $case: install --frozen-lockfile changed the lock" >&2; exit 1; }
+    (cd "$run" && rm -rf node_modules packages/a/node_modules && vlt "$version" "$WORK/xdg-$version" install --frozen-lockfile >"$WORK/$version-$case-frozen-cold.log" 2>&1)
+    cmp -s "$WORK/expected.json" "$run/vlt-lock.json" || { echo "$version $case: a cold install --frozen-lockfile changed the lock" >&2; exit 1; }
+    (cd "$run" && vlt "$version" "$WORK/xdg-$version" install escape-html@1.0.3 >"$WORK/$version-$case-new.log" 2>&1)
+    node -e '
+      const fs = require("fs");
+      const entries = f => new Map(fs.readFileSync(f, "utf8").split("\n")
+        .filter(l => l.startsWith("    \"")).map(l => l.replace(/,?\r?$/, ""))
+        .map(l => [JSON.parse(l.slice(4, l.indexOf("\": ") + 1)), l]));
+      const after = entries(process.argv[2]);
+      const own = process.argv[3] + " ";
+      const lost = [...entries(process.argv[1])].filter(([k, l]) =>
+        after.get(k) !== l && !(k.startsWith(own) && after.has(k)));
+      if (lost.length || !fs.readFileSync(process.argv[2], "utf8").includes("escape-html")) {
+        console.error(JSON.stringify(lost)); process.exit(1);
+      }
+    ' "$WORK/expected.json" "$run/vlt-lock.json" "$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).fileId)' "$verdict")" || { echo "$version $case: vlt install <new> dropped the wiring" >&2; exit 1; }
+    echo "$version $case: frozen-lockfile byte-stable, install <new> keeps the wiring"
   done
 done
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs
index 65e2f9d4..6e92a594 100644
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/surgery.mjs
@@ -1,7 +1,9 @@
 // Independent JS reading of DESIGN §4.5 (vendored vlt wiring of a direct
 // target), used only to build the byte-stability fixtures: its output is
 // handed to real `vlt ci`, and the lock vlt writes back is the expected
-// lock. Orders with Node's own `localeCompare(…, 'en')`, like vlt.
+// lock. Orders with Node's own `localeCompare(…, 'en')`, like vlt. A node
+// whose only extra is a peer context becomes a `file` node without it, as
+// vlt writes `file:` dependencies.
 //
 // usage: node surgery.mjs <project> <name@version> <uuid>
 // prints {"refusal": code, "detail": …} or {"rel": …, "fileId": …}
@@ -107,7 +109,9 @@ const instances = nodes
 if (instances.some(({ r }) => !isDefault(r.segment))) {
   refuse('vendor_lock_entry_unsupported', "not from vlt's default registry")
 }
-if (instances.length > 1 || instances.some(({ r }) => r.extra !== undefined)) {
+const PEER_CONTEXT = /^(?:peer\.(?:\d+|[0-9a-f]{16})|ṗ:\d+)$/
+if (instances.length > 1 ||
+    instances.some(({ r }) => r.extra !== undefined && !PEER_CONTEXT.test(dec(r.extra)))) {
   refuse('vendor_lock_entry_unsupported', 'peer/modifier variants; use --mode hosted')
 }
 if (instances.length === 0) refuse('vendor_lock_entry_not_found', `${target}`)
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index cde9a128..79b76cfe 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -398,7 +398,7 @@ struct Case {
 
 fn cases() -> Vec<Case> {
     let mut out = Vec::new();
-    for version in ["1.2.0", "1.0.10", "1.0.0-rc.14"] {
+    for version in ["1.2.0", "1.0.10", "1.0.4", "1.0.0-rc.32", "1.0.0-rc.14"] {
         let root = vendor_root().join(version);
         let mut names: Vec<String> = fs::read_dir(root.join("cases"))
             .unwrap()
@@ -612,7 +612,7 @@ fn expect_done(outcome: VendorOutcome, label: &str) -> VendorEntry {
 #[test]
 fn every_vendored_case_is_a_regenerated_fixture() {
     let all = cases();
-    assert_eq!(all.len(), 33, "11 cases on each of 3 vlt versions");
+    assert_eq!(all.len(), 60, "12 cases on each of 5 vlt versions");
     for case in &all {
         assert_eq!(
             case.refusal.is_none(),
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index 91a5625f..2c5861b7 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -194,7 +194,11 @@ outside the project, no link target and no copy socket-patch cannot judge is eve
 removed. A stale copy of an optional dependency is kept, because `vlt install` does not
 put back a removed optional dependency; the advisory says to run `vlt ci` instead, and to
 upgrade to vlt 1.0.5 first when every dependency is optional (earlier releases install no
-optional dependency from the lock of such a project). `--no-vlt-install-cleanup` (or
+optional dependency from the lock of such a project; mixed projects install it on every
+release). The advisory names the kept copies by what they are: unpatched copies after
+`scan`/`get`, patched copies after `rollback`/`remove`, and, after a hosted → vendored
+takeover, the installed copies of the now-vendored optional dependencies (whatever bytes
+the hosted pin left installed). `--no-vlt-install-cleanup` (or
 `SOCKET_NO_VLT_INSTALL_CLEANUP`) keeps the tree. `redirect_vlt_reinstall_required` says
 what happened and what to run; a stale or unchecked copy is never attested by the run's
 `--vex`.
@@ -236,15 +240,20 @@ stays byte-exact. The lock's node becomes a `file` node, the importer edges and
 importers' `package.json` specs move to the `file:` path, and every moved entry is placed
 where vlt's own serializer puts it, so `vlt ci` keeps the lock byte-identical. Transitive
 targets are refused (`vendor_vlt_transitive_unsupported`: vlt silently reverts
-transitive lock surgery), as are peer or modifier variants, importer peer edges, foreign
-registries and a dependency declared in several fields (`vendor_lock_entry_unsupported`);
-use hosted mode for those. From vlt 1.0.8 a root dependency with resolved peers carries a
-`~peer.<hex>` extra even with one peer context (a workspace member's from rc.15), and
-vendored mode refuses such a variant instance today. Before rc.6 vlt cannot reinstall a
-vendored `file:` dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A
-locks), and A0 locks are refused. From 0.0.0-30 a plain `vlt install` keeps an optional
-dependency's installed upstream copy after vendoring; run `vlt ci` to link the vendored
-directory.
+transitive lock surgery), as are several instances of one `name@version`, modifier
+variants, importer peer edges, foreign registries and a dependency declared in several
+fields (`vendor_lock_entry_unsupported`); use hosted mode for those. From vlt 1.0.8 a root
+dependency with resolved peers carries a `~peer.<hex>` extra even with one peer context (a
+workspace member's a `~peer.N` one from rc.15): vendored mode writes its `file` node
+without the extra, exactly as vlt writes a `file:` dependency, keeps its peer edges, and
+`vendor --revert` restores the extra. Before rc.6 vlt cannot reinstall a vendored `file:`
+dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A locks: `··` ids, or
+URL-segment ids equal to a scalar `registry`), and A0 locks are refused. From 0.0.0-30 a
+plain `vlt install` keeps an optional dependency's installed upstream copy after
+vendoring; `vendor_vlt_reinstall_required` says to run `vlt ci` (or delete `node_modules`
+and run `vlt install`) to link the vendored directory, and to upgrade to vlt 1.0.5 first
+when every dependency is optional. The same advisory names any dependency whose
+`node_modules` link still resolves to vlt's store.
 
 **Agent mode.** `apply` and `rollback` patch every store copy of a `name@version`
 (legacy and tilde DepIDs, peer and modifier variants, transitive-only packages) and
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 3c9bff64..849a9893 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -31,7 +31,7 @@ socket-patch alike.
 
 | Layer | Where | What it proves |
 |---|---|---|
-| Unit and golden | `socket-patch-core` lib tests; `tests/redirect_golden.rs` (`npm/vlt/*`, shared with depscan's TS rewriter), `tests/redirect_golden_reverse_replay.rs`, `tests/vlt_locks.rs` (captured locks of every era) | DepID codec, collation (`tests/fixtures/vlt/collation-golden.json`), the node-line grammar, the hosted slot rewrite and its slot revert, vendored lock surgery and its inverse, lock inventory, VEX discovery |
+| Unit and golden | `socket-patch-core` lib tests; `tests/redirect_golden.rs` (`npm/vlt/*`, shared with depscan's TS rewriter), `tests/redirect_golden_reverse_replay.rs`, `tests/vlt_locks.rs` (captured locks of every era, and vendored wiring byte for byte against what real `vlt ci`, `vlt install --frozen-lockfile` and `vlt install <new>` keep on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14) | DepID codec, collation (`tests/fixtures/vlt/collation-golden.json`), the node-line grammar, the hosted slot rewrite and its slot revert, vendored lock surgery and its inverse, lock inventory, VEX discovery |
 | Hermetic suites | `in_process_redirect`, `in_process_vendor`, `in_process_rollback_hosted`, `in_process_vendor_bun_takeover`, `repair_vendor_flavors_e2e`, `e2e_vex_lockfile`, `setup_invariants`, … (the 3-OS `test` job) | every code of the vlt support, the artifact preflight against a wiremock server, the heal, takeovers, repair, the CLI surface |
 | Real-vlt capstones | the five binaries below plus the vlt legs of `e2e_hosted_production` / `e2e_vendored_production` | real installs: `vlt ci` and frozen installs of patched locks, byte-stable locks, integrity enforcement, the heal on a warm tree, re-saves, upgrades, the hardlinked global store, the setup hook |
 | Native backtest | `scripts/backtest-vlt.py` | the production service end to end, per release, mode and project shape, against an oracle of the documented boundaries |
@@ -192,7 +192,7 @@ them per OS).
 | Binary | Suite | Legs |
 |---|---|---|
 | `e2e_redirect_vlt_build` | `hosted` | `scan_fresh_ci`, `frozen_dead_registry`, `ordinary_install_stable`, `get_uuid_fresh_ci`, `tamper_cold_eintegrity`, `rollback_byte_exact`, `rerun_noop`, `warm_tree_invalidates`, `no_cleanup_stays_stale`, `heal_rule_b_hidden_lock_without_node`, `heal_rule_c_no_hidden_lock`, `heal_rule_c_no_record`, `scoped`, `peer_workspace_instances`, `install_newdep_preserves`, `update_drops`, `resave_install_rollback`, `resave_crlf_rollback`, `resave_update_rollback`, `crlf_lock`, `mirror_registries_npm`, `scalar_registry`, `named_alias_untouched`, `scoped_registry_untouched`, `jsr_untouched`, `default_registry_alias`, `registry_from_env`, `registry_from_user_config`, `content_encoding_refused`, `old_lockfile_ignored`, `warm_cache_hazard`, `idempotence`, `manifestless_vex`, `ts_written_lock`, `optional_dependency_heal`, `then_vendored_optional_takeover`, `platform_optional_skipped` |
-| `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `peer_root_selfref`, `peer_member_selfref`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
+| `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `peer_root_selfref`, `peer_member_selfref`, `single_peer_context`, `optional_warm_reinstall`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
 | `mode_migration_vlt` | `migration` | `vendored_then_hosted`, `hosted_then_vendored`, `dry_run_parity`, `scoped_unwind_one_of_two`, `rollback_from_mixed`, `agent_apply_yields_to_vendored`, `agent_apply_after_hosted`, `hosted_scan_keeps_agent_patched_tree`, `agent_rollback_after_takeovers`, `pm_switch_npm_to_vlt`, `pm_switch_vlt_to_npm`, `flavor_changed`, `upgrade_hosted`, `upgrade_vendored` |
 | `e2e_safety_vlt` | `safety` | `linux_auto`, `explicit_hardlink`, `private_copies`, `cross_device_cache`, `agent_rollback`, `peer_fanout`, `hosted_heal`, `vendored_build`, `vendor_revert_and_repair`, `layout_note` |
 | `e2e_vlt` | `agent` | `scan_apply_rollback_list`, `get_and_remove`, `install_then_apply_patches_file`, `transitive_only_dep_apply_patches_store`, `lockfile_supplement`, `launcher`, `persistence_survives`, `persistence_reverted_by_reinstall`, `reruns_and_vex` |
@@ -237,7 +237,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | a platform-skipped optional dependency makes the install fail (`Dependency node could not be found`) | `0.0.0-31 … 1.0.0-rc.1` | — | hosted | `platform_optional_skipped` | `vlt-platform-optional-bug` |
 | a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | vendored | `workspace_member_selfref`, `alias_selfref` | `non-hermetic-registry` |
 | `npm:` alias specs resolve against public npm even with `registries.npm` | `1.0.0-rc.30 … 1.0.0-rc.32` | — | vendored | `alias_selfref` | `npm-alias-non-hermetic` |
-| era A (`··` ids): `vendor_vlt_legacy_lockfile` | `> 1.0.0-rc.8` | — | vendored | `legacy_lockfile_warning` | `not-legacy-lockfile` |
+| era A (`··` ids, or scalar-registry URL-segment ids with no `·npm·` id): `vendor_vlt_legacy_lockfile` | `> 1.0.0-rc.8` | — | vendored | `legacy_lockfile_warning` | `not-legacy-lockfile` |
 | `lockfileVersion` is written | `>= 0.0.0-19` | — | vendored | `absent_version_refused` | `lockfile-version-present` |
 | the upgrade legs need a second vlt | `all` | `upgrade=unset` | migration | `upgrade_hosted`, `upgrade_vendored` | `no-upgrade-vlt` |
 | only a v0 lock (0.0.0-19 … rc.14) meets a grammar change | `> 1.0.0-rc.14` | — | migration | `upgrade_hosted`, `upgrade_vendored` | `no-grammar-upgrade` |
@@ -264,14 +264,14 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | an optional-only project: lock-driven installs install nothing | `0.0.0-30 … 1.0.4` | — | — | — | — |
 | an optional-only project installs from the lock again | `>= 1.0.5` | — | — | — | — |
 | after a hosted→vendored takeover a plain `vlt install` already links the vendored dir | `<= 0.0.0-29` | — | — | — | — |
-| a plain `vlt install` keeps an installed optional dependency whose spec moved to a vendored `file:` directory (the upstream copy stays linked until `vlt ci`) | `>= 0.0.0-30` | — | — | — | — |
+| a plain `vlt install` keeps an installed optional dependency whose spec moved to a vendored `file:` directory (the upstream copy stays linked until `vlt ci`); vendored mode says so with `vendor_vlt_reinstall_required`, which `optional_warm_reinstall` pins | `>= 0.0.0-30` | — | — | — | — |
 | lockless `file:` directory dependencies fail to resolve | `0.0.0-31 … 1.0.0-rc.5` | — | — | — | — |
 | a re-save (`vlt install <new>`) drops slot [3] of default-registry nodes (the hosted URL; the patched integrity stays, so `vlt ci` fails `EINTEGRITY` until a rescan re-pins, and rollback reports drift) | `1.0.0-rc.6 … 1.0.0-rc.17` | — | — | — | — |
 | a warm cache re-fetches a changed tarball and fails its integrity (no stale-bytes hazard) | `1.0.0-rc.27 … 1.0.2` | — | — | — | — |
 | `vlt update` re-resolves an unchanged exact spec (dropping a hosted pin); earlier releases keep the locked node | `>= 1.0.8` | — | — | — | — |
 | vlt.json spells the scope map `scoped-registries` (`scope-registries` before) | `>= 1.0.0-rc.28` | — | — | — | — |
-| a workspace member's direct dependency with resolved peers (use-sync-external-store beside react) gets a peer extra (`~peer.1`); vendored mode refuses such a variant instance (`vendor_lock_entry_unsupported`, nothing written), which `peer_member_selfref` pins until vendored mode accepts a single peer context | `>= 1.0.0-rc.15` | — | — | — | — |
-| the root importer's direct dependency with resolved peers gets a peer extra (`~peer.<16 hex>`); `peer_root_selfref` pins the same refusal | `>= 1.0.8` | — | — | — | — |
+| a workspace member's direct dependency with resolved peers (use-sync-external-store beside react) gets a peer extra (`~peer.1`); vendored mode writes its `file` node without the extra, as vlt writes `file:` dependencies, and `single_peer_context` / `peer_member_selfref` pin the lock byte-stable through `vlt ci`, `vlt install --frozen-lockfile` and `vlt install <new>` | `>= 1.0.0-rc.15` | — | — | — | — |
+| the root importer's direct dependency with resolved peers gets a peer extra (`~peer.<16 hex>`); vendored mode drops it the same way (`single_peer_context`, `peer_root_selfref`) | `>= 1.0.8` | — | — | — | — |
 | two workspaces with use-sync-external-store beside react 17 and react 18 share ONE peer instance (`peer_workspace_instances` pins the count); no real-vlt shape was found that writes several instances of one name@version, so multi-instance pinning is covered by the in-process goldens only | `all` | — | — | — | — |
 
 ## OS coverage
diff --git a/docs/testing/vlt-coverage.json b/docs/testing/vlt-coverage.json
index 02684d0b..bdf9afae 100644
--- a/docs/testing/vlt-coverage.json
+++ b/docs/testing/vlt-coverage.json
@@ -88,7 +88,14 @@
     "vendor_vlt_legacy_lockfile": [
       "vendor_vlt_legacy_lockfile_warning",
       "the_legacy_era_warns_and_wires_with_its_own_grammar",
-      "vlt_pinned_matrix_vendored_legacy_lockfile_warning"
+      "vlt_pinned_matrix_vendored_legacy_lockfile_warning",
+      "a_scalar_registry_era_a_lock_warns_like_an_empty_segment_one"
+    ],
+    "vendor_vlt_reinstall_required": [
+      "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "vendor_vlt_optional_edge_asks_for_vlt_ci",
+      "vendor_vlt_stale_prod_link_asks_for_a_reinstall",
+      "vlt_pinned_matrix_vendored_optional_warm_reinstall"
     ],
     "vendor_flavor_changed": [
       "vendor_vlt_refuses_flavor_changed",
@@ -145,6 +152,15 @@
       "vlt_failed_vendor_after_the_takeover_revert_still_heals_the_store",
       "vlt_pinned_matrix_hosted_then_vendored_optional_takeover"
     ],
+    "vendor_vlt_reinstall_required: optional dependency rewired or still linked upstream": [
+      "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "vendor_vlt_optional_edge_asks_for_vlt_ci",
+      "vlt_pinned_matrix_vendored_optional_warm_reinstall"
+    ],
+    "vendor_vlt_reinstall_required: a non-optional dependency still linked upstream": [
+      "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "vendor_vlt_stale_prod_link_asks_for_a_reinstall"
+    ],
     "redirect_vlt_artifact_unverifiable: content-encoding": [
       "scan_redirect_vlt_artifact_content_encoding_refused"
     ],
diff --git a/scripts/backtest-vlt.py b/scripts/backtest-vlt.py
index cbd6d8df..88e7b087 100644
--- a/scripts/backtest-vlt.py
+++ b/scripts/backtest-vlt.py
@@ -492,7 +492,10 @@ def to_crlf(data):
 
 def skipped_dir(parts):
     """node_modules is never committed, except the vendored payload's own
-    `<leaf>/node_modules/<name>` dir under .socket/vendor/."""
+    `<leaf>/node_modules/<name>` dir under .socket/vendor/; neither is a
+    `.VLT.DELETE.<n>.<name>` dir vlt rc.14 deletes in the background."""
+    if any(part.startswith('.VLT.DELETE.') for part in parts):
+        return True
     if 'node_modules' not in parts:
         return False
     if parts[:2] != ('.socket', 'vendor'):
diff --git a/scripts/tests/test_backtest_harnesses.py b/scripts/tests/test_backtest_harnesses.py
index 107127af..827788e1 100644
--- a/scripts/tests/test_backtest_harnesses.py
+++ b/scripts/tests/test_backtest_harnesses.py
@@ -564,6 +564,17 @@ def test_snapshot_keeps_the_vendored_payload_and_drops_node_modules(self):
                 'package.json', 'vlt-lock.json', 'vlt.json', 'packages/a/package.json',
                 f'{payload}/package.json', '.socket/vendor/state.json']))
 
+    def test_snapshot_skips_vlt_background_delete_dirs(self):
+        with tempfile.TemporaryDirectory() as temp:
+            root = Path(temp)
+            payload = f'.socket/vendor/npm/{vlt.UUID}/minimist-1.2.2/node_modules/minimist'
+            for rel in ['package.json', '.VLT.DELETE.3.node_modules/.vlt/x/package.json',
+                        f'{payload}/index.js', f'{payload}/.VLT.DELETE.1.node_modules/d/index.js',
+                        'packages/a/.VLT.DELETE.7.node_modules/m/package.json']:
+                (root / rel).parent.mkdir(parents=True, exist_ok=True)
+                (root / rel).write_text(rel)
+            self.assertEqual(sorted(vlt.snapshot(root)), sorted(['package.json', f'{payload}/index.js']))
+
     def test_remove_node_modules_keeps_the_vendored_payload(self):
         with tempfile.TemporaryDirectory() as temp:
             root = Path(temp)
diff --git a/scripts/tests/test_vlt_coverage.py b/scripts/tests/test_vlt_coverage.py
index d817722d..25de75f1 100644
--- a/scripts/tests/test_vlt_coverage.py
+++ b/scripts/tests/test_vlt_coverage.py
@@ -12,7 +12,8 @@
 CONTRACT = ROOT / "crates" / "socket-patch-cli" / "CLI_CONTRACT.md"
 GOLDENS = ROOT / "crates" / "socket-patch-core" / "tests" / "fixtures" / "redirect"
 
-# DESIGN §2.3, the complete list of codes vlt support adds.
+# DESIGN §2.3, the complete list of codes vlt support adds (plus
+# vendor_vlt_reinstall_required, added after the design).
 CODES = [
     "redirect_vlt_lock_unsupported", "redirect_vlt_missing_sha512", "redirect_vlt_entry_not_found",
     "redirect_vlt_entry_vendored", "redirect_vlt_unsupported_lock_key",
@@ -20,8 +21,8 @@
     "redirect_vlt_scalar_registry_ignored", "redirect_vlt_lockfile_version_missing",
     "redirect_vlt_sibling_lockfiles", "redirect_vlt_no_lockfile", "redirect_vlt_artifact_unverifiable",
     "redirect_vlt_reinstall_required", "vendor_vlt_transitive_unsupported",
-    "vendor_vlt_lock_out_of_sync", "vendor_vlt_legacy_lockfile", "vendor_flavor_changed",
-    "vendor_artifact_gitignored", "vlt_root_scripts_not_run",
+    "vendor_vlt_lock_out_of_sync", "vendor_vlt_legacy_lockfile", "vendor_vlt_reinstall_required",
+    "vendor_flavor_changed", "vendor_artifact_gitignored", "vlt_root_scripts_not_run",
 ]
 MODE_COMMANDS = [
     "hosted/scan", "hosted/get", "hosted/rollback", "hosted/remove", "hosted/vex",

From 75ff14912fb78f7f3c5b8ce1dbbf4b6fbae14ba8 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 11:33:27 -0400
Subject: [PATCH 30/46] Ask for vlt ci after reverting optional vlt deps

Reverting a vendored optional vlt dependency left node_modules linked
to the removed vendored directory, and from vlt 0.0.0-30 a plain vlt
install keeps that dangling link, so the dependency silently vanished.
vendor --revert, and the revert a vendored-to-hosted takeover runs, now
print vendor_vlt_reinstall_required telling users to run vlt ci; a
revert whose importer links still point into the vendored directory
says to reinstall too.

A vendoring run whose patch fails to apply no longer prints the
advisory, since nothing was vendored. The fixture oracle now requires
vlt install <new> to keep the vendored node's edges byte-identical on
every release except rc.14, and new tests cover the advisory on dry
runs, workspace members and both takeover directions.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |   5 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   2 +-
 .../src/commands/scan/hosted.rs               |   9 +
 .../tests/e2e_vendor_vlt_build.rs             |  45 +++-
 .../tests/in_process_vendor/vlt.rs            |  72 ++++-
 .../in_process_vendor_bun_takeover/vlt.rs     |  43 +++
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 246 +++++++++++++++++-
 .../fixtures/vendor/npm/vlt/regenerate.sh     |  14 +-
 crates/socket-patch-core/tests/vlt_locks.rs   |  15 +-
 docs/ecosystems.md                            |   4 +-
 docs/testing/vlt-compatibility.md             |   2 +-
 docs/testing/vlt-coverage.json                |  20 ++
 12 files changed, 459 insertions(+), 18 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 58966e8e..afdfd6be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -347,7 +347,10 @@ into the new version's section — see docs/releasing.md.
   vlt 0.0.0-30 a plain `vlt install` keeps its installed upstream copy,
   so it says to run `vlt ci` (or delete `node_modules` and run `vlt
   install`); it also names any dependency whose `node_modules` link still
-  resolves to vlt's store.
+  resolves to vlt's store. Reverting a vendored optional dependency (also
+  in a vendored-to-hosted takeover) gives the same advisory, since from
+  vlt 0.0.0-30 a plain `vlt install` then keeps the link to the removed
+  vendored directory.
 - **Vendored vlt through every command.** `vendor`, `scan --mode vendored`
   and `get --mode vendored` run the complete vlt vendored preflight (lock
   version and layout, transitive, peer or foreign-registry targets,
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 1d65f4ba..5818240d 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -1269,7 +1269,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
 | `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
 | `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
-| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links and says `vlt install` (or `vlt ci`) links the vendored copy. The package is vendored either way. |
+| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
 | `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
 | `vendor_artifact_gitignored` | `failed` | vendor (vlt): inside a git work tree, `git check-ignore --no-index` reports the new artifact's uuid directory as ignored by a rule its own `.gitignore` cannot override (such as a root `.socket/` rule; the detail names the rule). Remedy: drop that rule for `.socket/vendor/`. Refused before any write. |
 | `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 1a553c75..919aaedc 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -1674,6 +1674,15 @@ pub(crate) async fn run_redirect_selected(
                          takeover: the project is now fully hosted for this package)"
                     ),
                 }));
+                takeover_pre_warnings.extend(
+                    outcome
+                        .warnings
+                        .iter()
+                        .filter(|w| {
+                            w.code == socket_patch_core::vendor::vlt_lock::REINSTALL_REQUIRED
+                        })
+                        .map(|w| serde_json::json!({ "code": w.code, "detail": w.detail })),
+                );
                 takeover_migrated.push(purl.clone());
                 takeover_files.extend(entry.wiring.iter().map(|w| w.file.clone()));
             } else {
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index 5aa4524b..ffd39f6d 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -629,7 +629,8 @@ fn reinstall_advisories(doc: &Value) -> Vec<String> {
 /// `vendor_vlt_reinstall_required`: from 0.0.0-30 a plain `vlt install`
 /// keeps the installed upstream copy linked (and an in-sync rerun repeats
 /// the advisory), and `vlt ci` links the vendored copy, after which the
-/// advisory is gone.
+/// advisory is gone. Reverting it asks for `vlt ci` again: a plain `vlt
+/// install` then leaves the link to the removed vendored dir dangling.
 #[tokio::test(flavor = "multi_thread")]
 #[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
 async fn vlt_pinned_matrix_vendored_optional_warm_reinstall() {
@@ -647,6 +648,7 @@ async fn vlt_pinned_matrix_vendored_optional_warm_reinstall() {
     let fx = Fixture::build(leg, shape).await;
     let t = fx.t().clone();
     assert_eq!(state(&fx.proj, &t), State::Pristine, "the warm tree");
+    let lock_before = lock_bytes(&fx.proj);
     let doc = vendor_scan(&fx);
     let got = reinstall_advisories(&doc);
     assert_eq!(got.len(), 1, "{doc:#}");
@@ -691,6 +693,47 @@ async fn vlt_pinned_matrix_vendored_optional_warm_reinstall() {
     );
     let doc = vendor_scan(&fx);
     assert!(reinstall_advisories(&doc).is_empty(), "{doc:#}");
+
+    let out = vendor_revert(&fx.proj);
+    assert_eq!(out.code, 0, "{out}");
+    let got = reinstall_advisories(&out.json());
+    assert_eq!(got.len(), 1, "{out}");
+    assert!(
+        got[0].contains("ms@2.1.3 is an optional dependency")
+            && got[0].contains("run `vlt ci` (or delete node_modules and run `vlt install`)"),
+        "{}",
+        got[0]
+    );
+    assert_eq!(
+        lock_bytes(&fx.proj),
+        lock_before,
+        "the revert restores the lock"
+    );
+    fx.vlt_ok(&fx.proj, &["install"]);
+    let link = importer_dir(&fx.proj, "", &t.name);
+    if kept {
+        assert!(
+            std::fs::symlink_metadata(&link).is_ok() && std::fs::metadata(&link).is_err(),
+            "a plain `vlt install` on {} keeps the link to the removed vendored dir",
+            fx.leg.tc.raw
+        );
+    } else {
+        assert_eq!(state(&fx.proj, &t), State::Pristine, "{}", fx.leg.tc.raw);
+    }
+    fx.vlt_ok(&fx.proj, &fx.leg.locked_install_args());
+    assert_eq!(
+        state(&fx.proj, &t),
+        State::Pristine,
+        "`vlt ci` links the upstream copy"
+    );
+    let link = std::fs::canonicalize(&link).unwrap();
+    assert!(
+        link.to_string_lossy()
+            .replace('\\', "/")
+            .contains("node_modules/.vlt/"),
+        "{}",
+        link.display()
+    );
     fx.leg.ran();
 }
 
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
index 56f9e26c..349a034a 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -872,8 +872,6 @@ fn vendor_vlt_revendor_new_uuid() {
     assert_eq!(read(root, "package.json"), pkg);
 }
 
-/// vlt's post-install layout: `node_modules/<name>` links the committed
-/// dir of `uuid`, and the store copy is gone.
 fn link_dir(target: &Path, link: &Path) {
     std::fs::create_dir_all(link.parent().unwrap()).unwrap();
     #[cfg(unix)]
@@ -888,6 +886,8 @@ fn unlink_dir(link: &Path) {
         .unwrap();
 }
 
+/// vlt's post-install layout: `node_modules/<name>` links the committed
+/// dir of `uuid`, and the store copy is gone.
 fn link_vendored_dir(root: &Path, uuid: &str) {
     std::fs::remove_dir_all(root.join("node_modules")).unwrap();
     std::fs::create_dir_all(root.join("node_modules")).unwrap();
@@ -1083,6 +1083,74 @@ fn vendor_vlt_revert_byte_exact() {
     vendor_and_revert(tmp.path());
 }
 
+/// A revert while node_modules still links the vendored dir asks for a
+/// reinstall: `vlt ci` for an optional dependency (`vlt install` keeps its
+/// link), `vlt install` for any other; an unlinked revert asks nothing.
+#[test]
+fn vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy() {
+    let reinstall = |env: &Value| -> Vec<String> {
+        events(env)
+            .iter()
+            .filter(|e| e["errorCode"] == "vendor_vlt_reinstall_required")
+            .map(|e| e.to_string())
+            .collect()
+    };
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let lock = Lock::v1(
+        &[&reg_node("~npm~left-pad@1.3.0")],
+        &["\"file~_d left-pad\": \"optional 1.3.0 ~npm~left-pad@1.3.0\""],
+    );
+    let pkg = ROOT_PKG.replace("\"dependencies\"", "\"optionalDependencies\"");
+    project(root, &lock, &pkg, "~npm~left-pad@1.3.0");
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    link_vendored_dir(root, UUID);
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let got = reinstall(&env);
+    assert_eq!(got.len(), 1, "{env:#}");
+    assert!(
+        got[0].contains(
+            "left-pad@1.3.0 is an optional dependency: `vlt install` (vlt 0.0.0-30 and later) \
+             keeps node_modules linked to the vendored `file:` directory"
+        ) && got[0].contains("run `vlt ci` (or delete node_modules and run `vlt install`)"),
+        "{}",
+        got[0]
+    );
+    assert_eq!(read(root, VLT_LOCK), lock.render());
+    assert_eq!(read(root, "package.json"), pkg);
+    assert!(!uuid_dir(root, UUID).exists());
+
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    link_vendored_dir(root, UUID);
+    let (code, env, stderr) = revert(root);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    let got = reinstall(&env);
+    assert_eq!(got.len(), 1, "{env:#}");
+    assert!(
+        got[0].contains(
+            "node_modules/left-pad still links left-pad@1.3.0 to its vendored copy; run `vlt \
+             install` (or `vlt ci`) to link the restored copy"
+        ),
+        "{}",
+        got[0]
+    );
+
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    direct_project(root);
+    let (code, env, _) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}");
+    let (code, env, _) = revert(root);
+    assert_eq!(code, 0, "{env:#}");
+    assert!(reinstall(&env).is_empty(), "{env:#}");
+}
+
 #[test]
 fn vendor_vlt_revert_after_outgoing_peer_value_rewrite() {
     let tmp = tempfile::tempdir().unwrap();
diff --git a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
index 7bc87e3f..d1715cf9 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor_bun_takeover/vlt.rs
@@ -560,9 +560,52 @@ async fn vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy() {
             hosted::OPTIONAL_KEPT
         )
     );
+    assert!(
+        detail_of(&env, "vendor_vlt_reinstall_required")
+            .starts_with("left-pad@1.3.0 is an optional dependency"),
+        "{env:#}"
+    );
     assert_eq!(
         std::fs::read(hosted::store_dir(root, TILDE_ID).join("index.js")).unwrap(),
         PATCHED
     );
     assert!(root.join("node_modules/.vlt-lock.json").exists());
 }
+
+/// A vendored optional dependency taken over by `scan --mode hosted`: the
+/// revert's `vlt ci` advisory reaches the takeover's warnings.
+#[tokio::test(flavor = "multi_thread")]
+async fn vlt_vendored_then_hosted_takeover_of_an_optional_dep_asks_for_vlt_ci() {
+    let tmp = tempfile::tempdir().unwrap();
+    let root = tmp.path();
+    let lock = registry_lock().replace("\"prod 1.3.0", "\"optional 1.3.0");
+    let pkg = PACKAGE_JSON.replace("\"dependencies\"", "\"optionalDependencies\"");
+    std::fs::write(root.join("vlt-lock.json"), &lock).unwrap();
+    std::fs::write(root.join("package.json"), &pkg).unwrap();
+    hosted::install_importer(root, PRISTINE);
+    seed_manifest(root);
+    let (code, env, stderr) = vendor(root, &[]);
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(hosted::read(root, "vlt-lock.json").contains(&rel()));
+    std::fs::remove_file(root.join(".socket/manifest.json")).unwrap();
+    let server = MockServer::start().await;
+    mock_api(&server).await;
+
+    let (code, env, stderr) = scan(root, &server, "hosted", &[]);
+
+    assert_eq!(code, 0, "{env:#}\n{stderr}");
+    assert!(
+        all_codes(&env).contains(&"redirect_takeover_reverted_vendored".to_string()),
+        "{env:#}"
+    );
+    let detail = detail_of(&env, "vendor_vlt_reinstall_required");
+    assert!(
+        detail.starts_with(
+            "left-pad@1.3.0 is an optional dependency: `vlt install` (vlt 0.0.0-30 and later) \
+             keeps node_modules linked to the vendored `file:` directory"
+        ) && detail.contains("run `vlt ci`"),
+        "{detail}"
+    );
+    assert_eq!(hosted::read(root, "package.json"), pkg);
+    assert!(!root.join(format!(".socket/vendor/npm/{UUID}")).exists());
+}
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 38c61432..48e3413a 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -30,7 +30,9 @@ use crate::utils::fs::{atomic_write_bytes_preserving_mode, read_regular_to_strin
 use crate::utils::socket_dir::remove_tree_and_prune;
 
 use super::common::{already_patched_result, done, refused};
-use super::npm_common::{done_failure_unstage, guard_coordinates, guard_revert_uuid_dir};
+use super::npm_common::{
+    done_failure_unstage, guard_coordinates, guard_revert_uuid_dir, parse_npm_purl,
+};
 use super::npm_dir::{dependency_token, replace_dependency_token, stage_patch_dir, SpanError};
 use super::state::{
     load_state, write_marker_or_warn, VendorArtifact, VendorEntry, VendorMarker, WiringAction,
@@ -1022,7 +1024,7 @@ async fn prior_vlt_entry(project_root: &Path, purl: &str) -> Option<VendorEntry>
     })
 }
 
-const REINSTALL_REQUIRED: &str = "vendor_vlt_reinstall_required";
+pub const REINSTALL_REQUIRED: &str = "vendor_vlt_reinstall_required";
 
 /// The importer edges whose `node_modules/<dep>` still resolves into vlt's
 /// store, i.e. to an installed registry copy rather than the vendored dir.
@@ -1162,7 +1164,9 @@ pub(crate) async fn vendor_vlt(
         Ok(pair) => pair,
         Err(outcome) => return *outcome,
     };
-    warnings.extend(reinstall);
+    if result.success {
+        warnings.extend(reinstall);
+    }
     let Some(staged) = staged else {
         return done(result, None, warnings);
     };
@@ -1585,6 +1589,67 @@ fn lock_key_under(key: &str, uuid: &str) -> bool {
     split_dep_id(key).is_some_and(|d| d.kind == DepIdKind::File && d.first.starts_with(&prefix))
 }
 
+/// A revert's `vendor_vlt_reinstall_required`: an importer's
+/// `node_modules/<dep>` still resolving into the vendored dir outlives the
+/// revert, and a plain `vlt install` keeps it for an optional dependency
+/// whose spec moved back from the `file:` dir, so that one needs `vlt ci`.
+async fn revert_reinstall_advisory(
+    project_root: &Path,
+    entry: &VendorEntry,
+    uuid_dir: &Path,
+    restored_optional: bool,
+) -> Option<VendorWarning> {
+    let vendored = tokio::fs::canonicalize(uuid_dir).await.ok();
+    let mut stale: Vec<String> = Vec::new();
+    let mut stale_optional = false;
+    for rec in entry.wiring.iter().filter(|r| r.kind == KIND_PKG_DEP) {
+        let (Some(vendored), Some((field, name))) = (
+            vendored.as_ref(),
+            rec.key.as_deref().and_then(split_pkg_key),
+        ) else {
+            continue;
+        };
+        let dir = rec.file.strip_suffix(PACKAGE_JSON).unwrap_or_default();
+        let link = format!("{dir}node_modules/{name}");
+        if stale.contains(&link) {
+            continue;
+        }
+        if tokio::fs::canonicalize(project_root.join(&link))
+            .await
+            .is_ok_and(|real| real.starts_with(vendored))
+        {
+            stale_optional |= field == "optionalDependencies";
+            stale.push(link);
+        }
+    }
+    let label = parse_npm_purl(&entry.base_purl)
+        .map_or_else(|| entry.base_purl.clone(), |(n, v)| format!("{n}@{v}"));
+    if restored_optional || stale_optional {
+        return Some(VendorWarning::new(
+            REINSTALL_REQUIRED,
+            format!(
+                "{label} is an optional dependency: `vlt install` (vlt 0.0.0-30 and later) \
+                 keeps node_modules linked to the vendored `file:` directory of an optional \
+                 dependency whose spec moved back from it, so run `vlt ci` (or delete \
+                 node_modules and run `vlt install`) to link the restored copy. vlt releases \
+                 before 1.0.5 install no optional dependency from the lock of a project that \
+                 declares only optional dependencies: upgrade vlt to 1.0.5 or later first."
+            ),
+        ));
+    }
+    if stale.is_empty() {
+        return None;
+    }
+    Some(VendorWarning::new(
+        REINSTALL_REQUIRED,
+        format!(
+            "{} still links {label} to its vendored copy; run `vlt install` (or `vlt ci`) to \
+             link the restored copy",
+            stale.join(", ")
+        ),
+    ))
+}
+
 /// Undo one vlt-vendored package: every record through its §4.5.3 inverse,
 /// all or nothing, then remove the artifact.
 pub async fn revert_vlt_opts(
@@ -1728,12 +1793,23 @@ pub async fn revert_vlt_opts(
         }
     }
 
+    let uuid_dir = project_root.join(&uuid_dir_rel);
+    let restored_optional = !already_reverted
+        && entry.wiring.iter().any(|r| {
+            r.kind == KIND_PKG_DEP
+                && r.key
+                    .as_deref()
+                    .and_then(split_pkg_key)
+                    .is_some_and(|(field, _)| field == "optionalDependencies")
+        });
+    let reinstall =
+        revert_reinstall_advisory(project_root, entry, &uuid_dir, restored_optional).await;
     if !keep_artifact {
-        let uuid_dir = project_root.join(&uuid_dir_rel);
         if let Err(e) = remove_tree_and_prune(&uuid_dir, &project_root.join(SOCKET_DIR)).await {
             return RevertOutcome::failed(format!("cannot remove {uuid_dir_rel}: {e}"));
         }
     }
+    outcome.warnings.extend(reinstall);
     outcome
 }
 
@@ -2362,6 +2438,168 @@ mod tests {
         );
     }
 
+    fn link(target: &std::path::Path, link: &std::path::Path) {
+        std::fs::create_dir_all(link.parent().unwrap()).unwrap();
+        #[cfg(unix)]
+        std::os::unix::fs::symlink(target, link).unwrap();
+        #[cfg(windows)]
+        std::os::windows::fs::symlink_dir(target, link).unwrap();
+    }
+
+    fn store_copy(fx: &Fx) -> std::path::PathBuf {
+        let store = fx
+            .root
+            .join(VLT_STORE_DIR)
+            .join(REG)
+            .join("node_modules/left-pad");
+        std::fs::create_dir_all(&store).unwrap();
+        store
+    }
+
+    const OPTIONAL_PKG: &str = "{\n  \"name\": \"root\",\n  \"dependencies\": {\n    \"a\": \"1.0.0\"\n  },\n  \"optionalDependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+
+    fn optional_lock() -> String {
+        render(
+            1,
+            &[
+                r#""~npm~a@1.0.0": [0,"a","sha512-A=="]"#,
+                REG_NODE,
+                r#""~npm~z@1.0.0": [0,"z","sha512-Z=="]"#,
+            ],
+            &[
+                r#""file~_d left-pad": "optional 1.3.0 ~npm~left-pad@1.3.0""#,
+                r#""file~_d a": "prod 1.0.0 ~npm~a@1.0.0""#,
+                r#""~npm~left-pad@1.3.0 z": "prod ^1.0.0 ~npm~z@1.0.0""#,
+            ],
+        )
+    }
+
+    #[tokio::test]
+    async fn the_reinstall_advisory_follows_dry_runs_members_and_failed_patches() {
+        let fx = fx(&optional_lock(), &[(PACKAGE_JSON, OPTIONAL_PKG)]).await;
+        let VendorOutcome::Done {
+            result,
+            entry: None,
+            warnings,
+        } = run(&fx, UUID, true).await
+        else {
+            panic!("dry run");
+        };
+        assert!(result.success);
+        assert!(
+            warnings.iter().any(|w| w.code == REINSTALL_REQUIRED
+                && w.detail
+                    .starts_with("left-pad@1.3.0 is an optional dependency")),
+            "{warnings:?}"
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, optional_lock());
+        assert_eq!(read(&fx, PACKAGE_JSON).await, OPTIONAL_PKG);
+        assert!(!fx.root.join(".socket").exists());
+
+        let fx = self::fx(&optional_lock(), &[(PACKAGE_JSON, OPTIONAL_PKG)]).await;
+        tokio::fs::remove_file(fx.blobs.join(compute_git_sha256_from_bytes(PATCHED)))
+            .await
+            .unwrap();
+        let VendorOutcome::Done {
+            result, warnings, ..
+        } = run(&fx, UUID, false).await
+        else {
+            panic!("failed patch");
+        };
+        assert!(!result.success, "{result:?}");
+        assert!(
+            !codes(&warnings).contains(&REINSTALL_REQUIRED),
+            "{warnings:?}"
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, optional_lock());
+        assert_eq!(read(&fx, PACKAGE_JSON).await, OPTIONAL_PKG);
+
+        let lock = render(
+            1,
+            &[REG_NODE],
+            &[r#""workspace~packages+a left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#],
+        );
+        let member_pkg =
+            "{\n  \"name\": \"a\",\n  \"dependencies\": {\n    \"left-pad\": \"1.3.0\"\n  }\n}\n";
+        let fx = self::fx(&lock, &[("packages/a/package.json", member_pkg)]).await;
+        link(
+            &store_copy(&fx),
+            &fx.root.join("packages/a/node_modules/left-pad"),
+        );
+        let (_, warnings) = entry_of(run(&fx, UUID, false).await);
+        let advisory: Vec<&VendorWarning> = warnings
+            .iter()
+            .filter(|w| w.code == REINSTALL_REQUIRED)
+            .collect();
+        assert_eq!(advisory.len(), 1, "{warnings:?}");
+        assert_eq!(
+            advisory[0].detail,
+            "packages/a/node_modules/left-pad still links left-pad@1.3.0 to its installed upstream \
+             copy; run `vlt install` (or `vlt ci`) to link the vendored copy"
+        );
+    }
+
+    #[tokio::test]
+    async fn a_revert_asks_for_a_reinstall_while_a_link_or_an_optional_spec_moves_back() {
+        let committed = |fx: &Fx| uuid_dir(fx, UUID).join("left-pad-1.3.0/node_modules/left-pad");
+
+        let fx = fx(&optional_lock(), &[(PACKAGE_JSON, OPTIONAL_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success, "{out:?}");
+        let advisory: Vec<&VendorWarning> = out
+            .warnings
+            .iter()
+            .filter(|w| w.code == REINSTALL_REQUIRED)
+            .collect();
+        assert_eq!(advisory.len(), 1, "{out:?}");
+        assert!(
+            advisory[0].detail.starts_with(
+                "left-pad@1.3.0 is an optional dependency: `vlt install` (vlt 0.0.0-30 and \
+                 later) keeps node_modules linked to the vendored `file:` directory"
+            ),
+            "{}",
+            advisory[0].detail
+        );
+        assert!(advisory[0].detail.contains("run `vlt ci`"));
+        assert_eq!(read(&fx, VLT_LOCK).await, optional_lock());
+        assert!(!uuid_dir(&fx, UUID).exists());
+
+        let fx = self::fx(&optional_lock(), &[(PACKAGE_JSON, OPTIONAL_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        tokio::fs::write(fx.root.join(VLT_LOCK), optional_lock())
+            .await
+            .unwrap();
+        tokio::fs::write(fx.root.join(PACKAGE_JSON), OPTIONAL_PKG)
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+
+        let fx = self::fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        link(&committed(&fx), &fx.root.join("node_modules/left-pad"));
+        let dry = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(true)).await;
+        assert!(dry.success && dry.warnings.is_empty(), "{dry:?}");
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success, "{out:?}");
+        assert_eq!(
+            out.warnings,
+            vec![VendorWarning::new(
+                REINSTALL_REQUIRED,
+                "node_modules/left-pad still links left-pad@1.3.0 to its vendored copy; run `vlt \
+                 install` (or `vlt ci`) to link the restored copy"
+            )]
+        );
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+        assert!(!uuid_dir(&fx, UUID).exists());
+    }
+
     #[tokio::test]
     async fn a_peer_range_beside_the_dev_edge_is_left_untouched() {
         let lock = render(
diff --git a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
index 042770e2..7d1aa973 100755
--- a/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
+++ b/crates/socket-patch-core/tests/fixtures/vendor/npm/vlt/regenerate.sh
@@ -11,8 +11,8 @@
 # after a second `ci`, which must leave it unchanged. Every expected lock
 # must also survive `vlt install --frozen-lockfile` byte for byte (warm,
 # then from a clean node_modules), and `vlt install escape-html@1.0.3`
-# must keep every entry of it unchanged, except the values of the vendored
-# node's own edges (rc.14 rewrites their peer specs on every reify).
+# must keep every entry of it unchanged, except on rc.14 the values of the
+# vendored node's own edges (rc.14 rewrites their peer specs on every reify).
 #
 # usage: VLT_BIN_DIR=<dir holding <version>/node_modules/vlt/vlt.js> ./regenerate.sh
 set -euo pipefail
@@ -154,19 +154,23 @@ for version in $VERSIONS; do
     (cd "$run" && rm -rf node_modules packages/a/node_modules && vlt "$version" "$WORK/xdg-$version" install --frozen-lockfile >"$WORK/$version-$case-frozen-cold.log" 2>&1)
     cmp -s "$WORK/expected.json" "$run/vlt-lock.json" || { echo "$version $case: a cold install --frozen-lockfile changed the lock" >&2; exit 1; }
     (cd "$run" && vlt "$version" "$WORK/xdg-$version" install escape-html@1.0.3 >"$WORK/$version-$case-new.log" 2>&1)
+    own=
+    if [ "$version" = 1.0.0-rc.14 ]; then
+      own=$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).fileId)' "$verdict")
+    fi
     node -e '
       const fs = require("fs");
       const entries = f => new Map(fs.readFileSync(f, "utf8").split("\n")
         .filter(l => l.startsWith("    \"")).map(l => l.replace(/,?\r?$/, ""))
         .map(l => [JSON.parse(l.slice(4, l.indexOf("\": ") + 1)), l]));
       const after = entries(process.argv[2]);
-      const own = process.argv[3] + " ";
+      const own = process.argv[3] && process.argv[3] + " ";
       const lost = [...entries(process.argv[1])].filter(([k, l]) =>
-        after.get(k) !== l && !(k.startsWith(own) && after.has(k)));
+        after.get(k) !== l && !(own && k.startsWith(own) && after.has(k)));
       if (lost.length || !fs.readFileSync(process.argv[2], "utf8").includes("escape-html")) {
         console.error(JSON.stringify(lost)); process.exit(1);
       }
-    ' "$WORK/expected.json" "$run/vlt-lock.json" "$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).fileId)' "$verdict")" || { echo "$version $case: vlt install <new> dropped the wiring" >&2; exit 1; }
+    ' "$WORK/expected.json" "$run/vlt-lock.json" "$own" || { echo "$version $case: vlt install <new> dropped the wiring" >&2; exit 1; }
     echo "$version $case: frozen-lockfile byte-stable, install <new> keeps the wiring"
   done
 done
diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index 79b76cfe..afc39f52 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -719,8 +719,19 @@ async fn vendored_wiring_matches_what_vlt_ci_writes_and_reverts_byte_exact() {
 
         let reverted = revert_npm_any(&entry, &staged.root, false).await;
         assert!(reverted.success, "{label}: {:?}", reverted.error);
-        assert!(
-            reverted.warnings.is_empty(),
+        let optional = entry.wiring.iter().any(|r| {
+            r.kind == "vlt_pkg_dep"
+                && r.key
+                    .as_deref()
+                    .is_some_and(|k| k.starts_with("optionalDependencies/"))
+        });
+        assert_eq!(
+            reverted.warnings.iter().map(|w| w.code).collect::<Vec<_>>(),
+            if optional {
+                vec!["vendor_vlt_reinstall_required"]
+            } else {
+                Vec::new()
+            },
             "{label}: {:?}",
             reverted.warnings
         );
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index 2c5861b7..f1e432b4 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -253,7 +253,9 @@ plain `vlt install` keeps an optional dependency's installed upstream copy after
 vendoring; `vendor_vlt_reinstall_required` says to run `vlt ci` (or delete `node_modules`
 and run `vlt install`) to link the vendored directory, and to upgrade to vlt 1.0.5 first
 when every dependency is optional. The same advisory names any dependency whose
-`node_modules` link still resolves to vlt's store.
+`node_modules` link still resolves to vlt's store, and `vendor --revert` repeats it for an
+optional dependency (a plain `vlt install` keeps the link to the removed vendored
+directory) or a link still into the vendored directory.
 
 **Agent mode.** `apply` and `rollback` patch every store copy of a `name@version`
 (legacy and tilde DepIDs, peer and modifier variants, transitive-only packages) and
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 849a9893..e9b5123c 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -264,7 +264,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | an optional-only project: lock-driven installs install nothing | `0.0.0-30 … 1.0.4` | — | — | — | — |
 | an optional-only project installs from the lock again | `>= 1.0.5` | — | — | — | — |
 | after a hosted→vendored takeover a plain `vlt install` already links the vendored dir | `<= 0.0.0-29` | — | — | — | — |
-| a plain `vlt install` keeps an installed optional dependency whose spec moved to a vendored `file:` directory (the upstream copy stays linked until `vlt ci`); vendored mode says so with `vendor_vlt_reinstall_required`, which `optional_warm_reinstall` pins | `>= 0.0.0-30` | — | — | — | — |
+| a plain `vlt install` keeps an installed optional dependency whose spec moved to a vendored `file:` directory (the upstream copy stays linked until `vlt ci`); vendored mode says so with `vendor_vlt_reinstall_required`, which `optional_warm_reinstall` pins; the same holds in reverse after `vendor --revert` (the link to the removed vendored directory stays until `vlt ci`), and the revert repeats the advisory | `>= 0.0.0-30` | — | — | — | — |
 | lockless `file:` directory dependencies fail to resolve | `0.0.0-31 … 1.0.0-rc.5` | — | — | — | — |
 | a re-save (`vlt install <new>`) drops slot [3] of default-registry nodes (the hosted URL; the patched integrity stays, so `vlt ci` fails `EINTEGRITY` until a rescan re-pins, and rollback reports drift) | `1.0.0-rc.6 … 1.0.0-rc.17` | — | — | — | — |
 | a warm cache re-fetches a changed tarball and fails its integrity (no stale-bytes hazard) | `1.0.0-rc.27 … 1.0.2` | — | — | — | — |
diff --git a/docs/testing/vlt-coverage.json b/docs/testing/vlt-coverage.json
index bdf9afae..f80d3e8c 100644
--- a/docs/testing/vlt-coverage.json
+++ b/docs/testing/vlt-coverage.json
@@ -93,8 +93,13 @@
     ],
     "vendor_vlt_reinstall_required": [
       "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "the_reinstall_advisory_follows_dry_runs_members_and_failed_patches",
+      "a_revert_asks_for_a_reinstall_while_a_link_or_an_optional_spec_moves_back",
       "vendor_vlt_optional_edge_asks_for_vlt_ci",
       "vendor_vlt_stale_prod_link_asks_for_a_reinstall",
+      "vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy",
+      "vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy",
+      "vlt_vendored_then_hosted_takeover_of_an_optional_dep_asks_for_vlt_ci",
       "vlt_pinned_matrix_vendored_optional_warm_reinstall"
     ],
     "vendor_flavor_changed": [
@@ -154,13 +159,26 @@
     ],
     "vendor_vlt_reinstall_required: optional dependency rewired or still linked upstream": [
       "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "the_reinstall_advisory_follows_dry_runs_members_and_failed_patches",
       "vendor_vlt_optional_edge_asks_for_vlt_ci",
+      "vlt_hosted_then_vendored_takeover_keeps_an_optional_hosted_copy",
       "vlt_pinned_matrix_vendored_optional_warm_reinstall"
     ],
     "vendor_vlt_reinstall_required: a non-optional dependency still linked upstream": [
       "an_optional_or_stale_linked_edge_asks_for_vlt_ci",
+      "the_reinstall_advisory_follows_dry_runs_members_and_failed_patches",
       "vendor_vlt_stale_prod_link_asks_for_a_reinstall"
     ],
+    "vendor_vlt_reinstall_required: revert of an optional dependency (vendor --revert, vendored to hosted takeover)": [
+      "a_revert_asks_for_a_reinstall_while_a_link_or_an_optional_spec_moves_back",
+      "vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy",
+      "vlt_vendored_then_hosted_takeover_of_an_optional_dep_asks_for_vlt_ci",
+      "vlt_pinned_matrix_vendored_optional_warm_reinstall"
+    ],
+    "vendor_vlt_reinstall_required: revert with a link still into the vendored dir": [
+      "a_revert_asks_for_a_reinstall_while_a_link_or_an_optional_spec_moves_back",
+      "vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy"
+    ],
     "redirect_vlt_artifact_unverifiable: content-encoding": [
       "scan_redirect_vlt_artifact_content_encoding_refused"
     ],
@@ -220,6 +238,7 @@
     "hosted/takeover (vendored to hosted)": [
       "vlt_vendored_then_scan_hosted_takeover_round_trips_to_registry",
       "vlt_vendored_then_get_hosted_takeover_round_trips_to_registry",
+      "vlt_vendored_then_hosted_takeover_of_an_optional_dep_asks_for_vlt_ci",
       "vlt_pinned_matrix_migration_vendored_then_hosted"
     ],
     "vendored/vendor": [
@@ -240,6 +259,7 @@
       "vendor_vlt_revert_byte_exact",
       "vendor_vlt_revert_identity_already_reverted",
       "vendor_vlt_revert_cross_grammar_drift_detail",
+      "vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy",
       "vlt_pinned_matrix_vendored_revert_byte_exact"
     ],
     "vendored/repair": [

From 4a7bf1904770953576d8cfd27f91f14d877bf144 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 13:32:33 -0400
Subject: [PATCH 31/46] Wait for vlt's background work in vlt tests

The first CI run of the vlt suites failed on four real causes:

- vlt finishes work in detached children after a command returns (the
  1.2.0 global-store explode on Linux, cache unzip, deletion of
  .VLT.DELETE staging dirs). Legs raced them: the Linux 1.2.0 heal
  legs saw store entries appear, the Windows hook-abort leg saw a
  staging dir mid-delete, and the Windows hardlink leg reinstalled
  before the store was complete. Every harness vlt run now preloads a
  hook that waits for those children where vlt would exit.
- git refuses the \\?\ verbatim leg root on Windows, so the vendored
  clone legs clone with root-relative paths; the Windows junction unit
  test passed a '/' path to mklink, which reads it as a switch.
- vlt's engines field is not the Node it runs on: 0.0.0-11 ... -30 need
  22.7.0 (ESM without "type": "module") and 0.0.0-31 ... rc.18 need
  22.13.0 (node:sqlite). install-vlt.sh enforces the measured floors
  before running vlt and the Node-floor rows test them; those rows no
  longer install the 1.2.0 upgrade vlt, which cannot run there.
- rc.8's scalar-registry vendored arm now configures the local
  registry, and pins that rc.7 ... rc.29 re-resolve such a lock on
  vlt ci instead of asserting a byte-stable lock.

Assisted-by: Claude Code:claude-opus-5-5
---
 .github/workflows/vlt-compatibility.yml       | 14 ++--
 crates/socket-patch-cli/tests/common/mod.rs   | 69 ++++++++++++++++-
 .../tests/e2e_vendor_vlt_build.rs             | 74 +++++++++++++++----
 .../src/patch/redirect/vlt_heal.rs            | 12 ++-
 docs/testing/vlt-compatibility.md             | 14 +++-
 scripts/install-vlt.sh                        | 32 +++++---
 scripts/tests/test_ci_vlt_rows.py             |  4 +-
 7 files changed, 174 insertions(+), 45 deletions(-)

diff --git a/.github/workflows/vlt-compatibility.yml b/.github/workflows/vlt-compatibility.yml
index d11ce292..6fd588bd 100644
--- a/.github/workflows/vlt-compatibility.yml
+++ b/.github/workflows/vlt-compatibility.yml
@@ -251,10 +251,12 @@ jobs:
           - {os: windows-latest, vlt: '1.0.10'}
           - {os: windows-latest, vlt: '1.1.1'}
           - {os: windows-latest, vlt: '1.2.0'}
-          # Node engine floors (DESIGN §1.1), with the collation golden (ICU drift).
+          # Node floors (DESIGN §1.1 as measured, scripts/install-vlt.sh): the
+          # newest release on each, with the collation golden (ICU drift).
           - {os: ubuntu-latest, vlt: '1.2.0', node: '22.22.0'}
-          - {os: ubuntu-latest, vlt: '1.0.0-rc.18', node: '22.9.0'}
-          - {os: ubuntu-latest, vlt: '1.0.0-rc.9', node: '22.0.0'}
+          - {os: ubuntu-latest, vlt: '1.0.0-rc.18', node: '22.13.0'}
+          - {os: ubuntu-latest, vlt: '0.0.0-30', node: '22.7.0'}
+          - {os: ubuntu-latest, vlt: '0.0.0-1', node: '22.0.0'}
           # Store linkers of the global store (1.2.0), safety suite only.
           - {os: ubuntu-latest, vlt: '1.2.0', linker: auto, suites: e2e_safety_vlt}
           - {os: ubuntu-latest, vlt: '1.2.0', linker: hardlink, suites: e2e_safety_vlt}
@@ -285,13 +287,15 @@ jobs:
         shell: bash
         env:
           VLT_TEST_VERSION: ${{ matrix.vlt }}
+          NODE_PIN: ${{ matrix.node }}
         run: |
           set -euo pipefail
           js=$(scripts/install-vlt.sh "$VLT_TEST_VERSION" "$RUNNER_TEMP/vlt-tool")
           echo "SOCKET_PATCH_VLT_E2E_JS=$js" >> "$GITHUB_ENV"
           # A lockfileVersion-0 writer (0.0.0-19 … rc.14) also gets the
-          # upgrade legs, against 1.2.0.
-          if VLT_TEST_VERSION=$VLT_TEST_VERSION node -e '
+          # upgrade legs, against 1.2.0 — except on a Node-floor row, whose
+          # Node is below 1.2.0's floor (the legs then skip no-upgrade-vlt).
+          if [ -z "$NODE_PIN" ] && VLT_TEST_VERSION=$VLT_TEST_VERSION node -e '
             const m = /^0\.0\.0-(\d+)$|^1\.0\.0-rc\.(\d+)$/.exec(process.env.VLT_TEST_VERSION);
             process.exit(m && (m[1] ? Number(m[1]) >= 19 : Number(m[2]) <= 14) ? 0 : 1);'; then
             up=$(scripts/install-vlt.sh 1.2.0 "$RUNNER_TEMP/vlt-upgrade")
diff --git a/crates/socket-patch-cli/tests/common/mod.rs b/crates/socket-patch-cli/tests/common/mod.rs
index 8d0ddc30..fc781fe6 100644
--- a/crates/socket-patch-cli/tests/common/mod.rs
+++ b/crates/socket-patch-cli/tests/common/mod.rs
@@ -217,14 +217,81 @@ pub fn cargo_run(cwd: &Path, args: &[&str], extra_env: &[(&str, &str)]) -> Outpu
     cmd.output().expect("failed to run cargo")
 }
 
+/// Preloaded into every harness vlt run (`--import`, so vlt's own
+/// children do not inherit it). vlt finishes work in detached, unref'd
+/// children after the command returns: the global-store explode and the
+/// cache unzip (`cache-unzip`, spawned on `beforeExit`), the deletion of
+/// `.VLT.DELETE.*` staging dirs (`rollback-remove`) and cache
+/// revalidation. The legs assert the tree vlt leaves once that work is
+/// done, so where vlt would exit (`beforeExit` with nothing left to run,
+/// or an explicit `process.exit`) the hook closes those children's stdin,
+/// as the exit would (0.0.0-1 never ends it), and exits only after they
+/// have. Children are spawned exactly as vlt asks. One still running after
+/// 120 s is no longer awaited.
+const VLT_SETTLE_JS: &str = r#"import cp from 'node:child_process';
+import { syncBuiltinESMExports } from 'node:module';
+const spawn = cp.spawn;
+const pending = new Set();
+let spawned = 0;
+let settled = -1;
+cp.spawn = function (file, args, opts) {
+  const child = spawn.apply(this, arguments);
+  const o = Array.isArray(args) ? opts : args;
+  if (!o || !o.detached || child.pid === undefined) return child;
+  spawned++;
+  pending.add(child);
+  const cap = setTimeout(() => pending.delete(child), 120000);
+  cap.unref();
+  child.once('exit', () => { clearTimeout(cap); pending.delete(child); });
+  return child;
+};
+syncBuiltinESMExports();
+const drain = (done) => {
+  settled = spawned;
+  for (const c of pending) {
+    try { if (c.stdin && !c.stdin.writableEnded) c.stdin.end(); } catch {}
+  }
+  const wait = () => {
+    if (pending.size) setTimeout(wait, 20);
+    else done();
+  };
+  wait();
+};
+process.on('beforeExit', () => {
+  if (settled !== spawned || pending.size) setImmediate(() => drain(() => {}));
+});
+const exit = process.exit;
+process.exit = function (code) {
+  if (!pending.size) return exit.call(process, code);
+  if (code !== undefined && code !== null) process.exitCode = code;
+  drain(() => exit.call(process, process.exitCode));
+};
+"#;
+
+/// [`VLT_SETTLE_JS`] as a `data:` URL for `node --import`.
+fn vlt_settle_import() -> String {
+    let mut url = String::from("data:text/javascript,");
+    for b in VLT_SETTLE_JS.bytes() {
+        if b.is_ascii_alphanumeric() || b"-_.~".contains(&b) {
+            url.push(char::from(b));
+        } else {
+            url.push_str(&format!("%{b:02X}"));
+        }
+    }
+    url
+}
+
 /// Run the vlt at `vlt_js` (`node --no-warnings <vlt.js> <args>`) in
 /// `cwd`: ambient vlt/npm/socket config scrubbed, caches sandboxed,
 /// telemetry off and the `C` locale (vlt's edge order follows it), then
 /// `extra_env`. Spawning `node` directly keeps Windows off the `vlt.cmd`
-/// shim `Command::new` cannot see.
+/// shim `Command::new` cannot see. The run returns once vlt's background
+/// children have exited too ([`VLT_SETTLE_JS`]).
 pub fn vlt_run(cwd: &Path, vlt_js: &Path, args: &[&str], extra_env: &[(&str, &str)]) -> Output {
     let mut cmd = Command::new("node");
     cmd.arg("--no-warnings")
+        .arg("--import")
+        .arg(vlt_settle_import())
         .arg(vlt_js)
         .args(args)
         .current_dir(cwd);
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index ffd39f6d..7dc50904 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -163,6 +163,16 @@ fn assert_vendored(fx: &Fixture, t: &PatchTarget, importer: &str) {
     }
 }
 
+/// `p` relative to the leg root, `/`-separated, for a git run in the root:
+/// git rejects the `\\?\` verbatim paths the canonical root has on Windows
+/// ("could not create work tree dir … Invalid argument").
+fn leg_relative(fx: &Fixture, p: &Path) -> String {
+    p.strip_prefix(&fx.leg.root)
+        .expect("a path under the leg root")
+        .to_string_lossy()
+        .replace('\\', "/")
+}
+
 /// A fresh checkout's locked install and frozen install land the patched
 /// payload with the lock byte-stable.
 fn assert_fresh_vendored(fx: &Fixture, t: &PatchTarget, name: &str) -> PathBuf {
@@ -778,8 +788,8 @@ async fn vlt_pinned_matrix_vendored_dep_with_deps() {
         &[
             "clone",
             "-q",
-            fx.proj.to_str().unwrap(),
-            co.to_str().unwrap(),
+            &leg_relative(&fx, &fx.proj),
+            &leg_relative(&fx, &co),
         ],
     );
     fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "clone");
@@ -817,8 +827,8 @@ async fn vlt_pinned_matrix_vendored_hostile_gitignore() {
         &[
             "clone",
             "-q",
-            fx.proj.to_str().unwrap(),
-            co.to_str().unwrap(),
+            &leg_relative(&fx, &fx.proj),
+            &leg_relative(&fx, &co),
         ],
     );
     fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "clone");
@@ -848,8 +858,8 @@ async fn vlt_pinned_matrix_vendored_autocrlf_checkout() {
             "core.autocrlf=true",
             "clone",
             "-q",
-            fx.proj.to_str().unwrap(),
-            co.to_str().unwrap(),
+            &leg_relative(&fx, &fx.proj),
+            &leg_relative(&fx, &co),
         ],
     );
     let payload = package_files(&co.join(rel(fx.t())));
@@ -1290,7 +1300,25 @@ async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
     let mut leg = leg;
     for scalar in [false, true] {
         let mut shape = Shape::with_bystander().warm();
-        shape.vlt_json.no_registry = !scalar;
+        if scalar {
+            // The harness's own vlt.json names npmjs on rc.7 … rc.29
+            // (`scalar_registry_ignored`), which rc.8 writes as `··` ids:
+            // name the local registry, as `hosted/scalar_registry` does.
+            shape = shape.vlt_json_fn(|v, r| {
+                let config = json!({ "registry": r });
+                let mut doc = if flat_vlt_json(v) {
+                    config
+                } else {
+                    json!({ "config": config })
+                };
+                if lock_ignored_without_modifiers(v) {
+                    doc["modifiers"] = json!({});
+                }
+                doc
+            });
+        } else {
+            shape.vlt_json.no_registry = true;
+        }
         let fx = Fixture::build(leg, shape).await;
         let lock = read_lock(&fx.proj);
         let id = node_id(&lock, LP.0, LP.1);
@@ -1310,15 +1338,29 @@ async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
             doc.to_string().contains("vendor_vlt_legacy_lockfile"),
             "{doc:#}"
         );
-        assert_fresh_vendored(
-            &fx,
-            fx.t(),
-            if scalar {
-                "fresh-legacy-scalar"
-            } else {
-                "fresh-legacy"
-            },
-        );
+        if scalar && scalar_registry_ignored(fx.leg.version()) {
+            // rc.7 … rc.29 re-resolve a scalar-registry lock: `vlt ci`
+            // rewrites the bystander's URL-segment id to `··` (measured on
+            // rc.8), so only the vendored payload is asserted.
+            let co = fx.checkout("fresh-legacy-scalar");
+            fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-legacy-scalar");
+            assert_eq!(state(&co, fx.t()), State::Patched);
+            let ci = read_lock(&co);
+            assert!(
+                node_id(&ci, MS.0, MS.1).starts_with("··"),
+                "vlt re-resolved the scalar-registry lock: {ci:#}"
+            );
+        } else {
+            assert_fresh_vendored(
+                &fx,
+                fx.t(),
+                if scalar {
+                    "fresh-legacy-scalar"
+                } else {
+                    "fresh-legacy"
+                },
+            );
+        }
         leg = fx.leg;
     }
     leg.ran();
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
index 29f88ae5..18c9cd43 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
@@ -901,19 +901,17 @@ mod tests {
         let sibling_dir = package_dir(root, sibling, "ms");
         std::fs::create_dir_all(&sibling_dir).unwrap();
         std::fs::write(sibling_dir.join("index.js"), b"ms").unwrap();
-        let entry = root.join(VLT_STORE_DIR).join(ID).join("node_modules");
+        // `mklink` reads a `/` as a switch: build both paths from components.
+        let vlt_dir = root.join("node_modules").join(".vlt");
+        let entry = vlt_dir.join(ID).join("node_modules");
         std::fs::create_dir_all(entry.join("left-pad")).unwrap();
         let status = std::process::Command::new("cmd")
             .args(["/C", "mklink", "/J"])
             .arg(entry.join("ms"))
-            .arg(
-                root.join(VLT_STORE_DIR)
-                    .join(sibling)
-                    .join("node_modules/ms"),
-            )
+            .arg(vlt_dir.join(sibling).join("node_modules").join("ms"))
             .status()
             .unwrap();
-        assert!(status.success());
+        assert!(status.success(), "mklink /J failed");
         if std::os::windows::fs::symlink_dir(
             root.join(VLT_STORE_DIR).join(sibling),
             entry.join("dir-link"),
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index e9b5123c..1797efd2 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -63,8 +63,8 @@ asserted and each named test or row exists.
   `versions` / `shapes` / `modes`). A path-filtered workflow cannot be a
   required check. Jobs: `build` (the capstones and the CLI, once per OS);
   `install-proof` (every capstone on 31 Linux, 11 macOS and 15 Windows
-  releases, the Node engine floors 22.22.0 / 22.9.0 / 22.0.0 with the collation
-  golden, and the store linkers auto / hardlink / copy / unpack / a `/dev/shm`
+  releases, the Node floors 22.22.0 / 22.13.0 / 22.7.0 / 22.0.0 with the
+  collation golden, and the store linkers auto / hardlink / copy / unpack / a `/dev/shm`
   cache root); `native` (the backtest against production, artifacts
   `vlt-results-<os>-<vlt>` in depscan's capture `result.json` shape);
   `lock-diff` (the same cell's `vlt-lock.json` must be byte-identical on Linux,
@@ -152,6 +152,13 @@ cargo test -p socket-patch-cli --test e2e_redirect_vlt_build -- --include-ignore
 python3 scripts/check-vlt-legs.py --manifest crates/socket-patch-cli/tests/vlt-leg-manifest.json vlt-leg.log
 ```
 
+vlt finishes some work in detached children after a command returns: the
+global-store explode on 1.2.0 (Linux `auto`, `hardlink`, `copy`), the cache
+unzip, cache revalidation and the deletion of `.VLT.DELETE.*` staging dirs.
+Every harness vlt run preloads a hook (`node --import`, not inherited by those
+children) that spawns them attached and waits for them, so a leg asserts the
+tree vlt leaves once its work is done, never a race with it.
+
 Every leg is a test named `vlt_pinned_matrix_<suite>_<leg>` that prints one
 `VLT-LEG <vlt-version> <os> <suite> <leg> ran|skip:<reason>` line.
 `scripts/check-vlt-legs.py` fails a run on `0 passed`, on a binary that
@@ -220,8 +227,11 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | A0 locks are refused by vendored mode | `<= 0.0.0-18` | — | migration | `*` | `a0-vendored-unsupported` |
 | A0 locks are refused by vendored mode | `<= 0.0.0-18` | — | production | `vendored_install_proof` | `a0-vendored-unsupported` |
 | the global store and `store-linker` | `< 1.2.0` | — | safety | `*` | `no-global-store` |
+| `vlt install` needs Node >= 22.7.0, above `engines` (`>=22`): the CLI is ESM without `"type": "module"`, and Node detects module syntax unflagged only from 22.7.0 (22.6.0: `SyntaxError: Cannot use import statement outside a module`); `install-proof` runs 0.0.0-30 on 22.7.0 | `0.0.0-11 … 0.0.0-30` | — | — | — | — |
+| `vlt install` loads `node:sqlite`, unflagged from Node 22.13.0, above `engines` (`>=22` through rc.9, `>=22.9.0` for rc.10 … rc.18; 22.12.0: `ERR_UNKNOWN_BUILTIN_MODULE`); `install-proof` runs rc.18 on 22.13.0 | `0.0.0-31 … 1.0.0-rc.18` | — | — | — | — |
 | `vlt ci`, `--frozen-lockfile`, `--expect-lockfile` exist | `< 0.0.0-19` | — | hosted | `frozen_dead_registry`, `optional_dependency_heal`, `then_vendored_optional_takeover` | `no-vlt-ci` |
 | a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | hosted | `frozen_dead_registry` | `non-hermetic-registry` |
+| the same re-resolution makes `vlt ci` rewrite a vendored era-A lock's scalar-registry ids to `··` (the vendored `file:` payload still installs patched), so `legacy_lockfile_warning`'s scalar arm pins that instead of a byte-stable lock | `1.0.0-rc.7 … 1.0.0-rc.8` | — | — | — | — |
 | registry tarball integrity is not enforced on a cold fetch | `== 0.0.0-1` | — | hosted | `tamper_cold_eintegrity` | `integrity-unenforced` |
 | bare specs honor `registries.npm` | `< 1.0.0-rc.33` | — | hosted | `mirror_registries_npm` | `registries-npm-ignored` |
 | named registry specs (`acme:x@1`), scoped registries and URL-segment DepIDs exist (flat-config releases record every registry node under the default segment) | `< 0.0.0-14` | — | hosted | `named_alias_untouched` | `no-named-registry-specs` |
diff --git a/scripts/install-vlt.sh b/scripts/install-vlt.sh
index 41579d32..e4064097 100755
--- a/scripts/install-vlt.sh
+++ b/scripts/install-vlt.sh
@@ -6,10 +6,16 @@
 # `npm pack` (5 attempts), then the tarball's sha512 must equal the registry's
 # `dist.integrity` and, when scripts/vlt-historical-integrity.json lists the
 # release, that committed pin too (fail closed). The tarball is installed
-# with `npm install --prefix <prefix> --ignore-scripts`, and `node vlt.js
-# --version` must print the release. Finally the running Node must meet the
-# release's engine floor (DESIGN §1.1): >=22 through 1.0.0-rc.9, >=22.9.0 for
-# rc.10 … rc.18, >=22.22.0 from rc.22.
+# with `npm install --prefix <prefix> --ignore-scripts`. The running Node
+# must meet the Node floor the release's CLI actually runs on (checked before
+# vlt runs), and `node vlt.js --version` must print the release. The floor is
+# above the
+# `engines` field (>=22 through rc.9, >=22.9.0 for rc.10 … rc.18) where that
+# field is wrong: 0.0.0-11 … 0.0.0-30 ship ESM without `"type": "module"`
+# (Node >= 22.7.0, which detects module syntax unflagged), 0.0.0-31 … rc.18
+# load `node:sqlite` on `vlt install` (Node >= 22.13.0, which unflags it),
+# and every release from rc.22 declares >=22.22.0. 0.0.0-1 is
+# `"type": "module"` and runs from 22.0.0.
 set -euo pipefail
 
 if [ "$#" -ne 2 ]; then
@@ -63,21 +69,16 @@ if (actual !== expected || (pinned !== undefined && pinned !== expected)) {
 npm install --prefix "$prefix" --no-audit --no-fund --ignore-scripts --no-package-lock "$tarball" >&2
 rm -f "$tarball"
 js="$prefix/node_modules/vlt/vlt.js"
-actual=$(node --no-warnings "$js" --version)
-if [ "$actual" != "$version" ]; then
-  echo "expected vlt $version at $js, got $actual" >&2
-  exit 1
-fi
 
 # shellcheck disable=SC2016 # JavaScript, not shell
 VLT_VERSION=$version node -e '
 const v = process.env.VLT_VERSION;
 const m = /^(\d+)\.(\d+)\.(\d+)(?:-(rc\.)?(\d+))?$/.exec(v);
 if (!m) { console.error(`not a vlt release: ${v}`); process.exit(1); }
-const rc = m[4] ? Number(m[5]) : null;
+const pre = m[5] === undefined ? null : Number(m[5]);
 let floor = "22.22.0";
-if (m[1] === "0" || (rc !== null && rc <= 9)) floor = "22.0.0";
-else if (rc !== null && rc <= 18) floor = "22.9.0";
+if (m[1] === "0") floor = pre === null || pre <= 10 ? "22.0.0" : pre <= 30 ? "22.7.0" : "22.13.0";
+else if (m[4] && pre <= 18) floor = "22.13.0";
 const have = process.versions.node.split(".").map(Number);
 const need = floor.split(".").map(Number);
 for (let i = 0; i < 3; i++) {
@@ -88,4 +89,11 @@ for (let i = 0; i < 3; i++) {
   }
 }
 '
+# After the floor check, so a too-old Node fails with the floor message
+# rather than vlt's own SyntaxError / ERR_UNKNOWN_BUILTIN_MODULE.
+actual=$(node --no-warnings "$js" --version)
+if [ "$actual" != "$version" ]; then
+  echo "expected vlt $version at $js, got $actual" >&2
+  exit 1
+fi
 printf '%s\n' "$js"
diff --git a/scripts/tests/test_ci_vlt_rows.py b/scripts/tests/test_ci_vlt_rows.py
index b43c87ed..94ddb8fc 100644
--- a/scripts/tests/test_ci_vlt_rows.py
+++ b/scripts/tests/test_ci_vlt_rows.py
@@ -271,8 +271,8 @@ def test_the_design_release_lists_are_in_the_matrix(self):
 
     def test_node_floors_and_store_linkers(self):
         floors = sorted((r["vlt"], r["node"]) for r in self.rows if "node" in r)
-        self.assertEqual(floors, [("1.0.0-rc.18", "22.9.0"), ("1.0.0-rc.9", "22.0.0"),
-                                  ("1.2.0", "22.22.0")])
+        self.assertEqual(floors, [("0.0.0-1", "22.0.0"), ("0.0.0-30", "22.7.0"),
+                                  ("1.0.0-rc.18", "22.13.0"), ("1.2.0", "22.22.0")])
         linkers = sorted((r["os"], r["linker"], r.get("cache_root", "")) for r in self.rows
                          if "linker" in r)
         self.assertEqual(linkers, sorted([

From 218bd1e75bd375bb764699d37eb2270d05cb178a Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 14:12:26 -0400
Subject: [PATCH 32/46] Retry backtest cells on patch API 5xx errors

The vlt and bun backtests rerun a cell from a clean tree when the
patch service's transport fails, but only recognized a request error.
A 5xx from the production patch API (504 gateway timeouts, 503
upstream resets) is the same external failure, and it failed three
native backtest jobs in the last two CI runs. Both harnesses now retry
it too; a 4xx still fails the cell at once, and a 5xx that persists
still fails after three attempts.

Assisted-by: Claude Code:claude-opus-5-5
---
 scripts/backtest-bun.py                  | 11 +++++++++--
 scripts/backtest-vlt.py                  | 12 +++++++++---
 scripts/tests/test_backtest_harnesses.py | 10 ++++++++++
 3 files changed, 28 insertions(+), 5 deletions(-)

diff --git a/scripts/backtest-bun.py b/scripts/backtest-bun.py
index a01e28e0..80de166f 100644
--- a/scripts/backtest-bun.py
+++ b/scripts/backtest-bun.py
@@ -150,13 +150,20 @@ def save(path, data):
     path.write_text(json.dumps(data, indent=2) + '\n', encoding='utf-8')
 
 
+# The CLI's own report of a transport failure: a request error, or a 5xx from
+# the patch API (e.g. "API request failed with status 503: upstream connect
+# error or disconnect/reset before headers").
+CLI_TRANSPORT_FAILURE = re.compile(r'error sending request for url \(|API request failed with status 5\d\d\b')
+
+
 def has_transport_failure(value):
-    """Only explicit request transport errors qualify for a fresh-cell retry."""
+    """Only explicit request transport errors (a request error or a patch API
+    5xx) qualify for a fresh-cell retry."""
     if isinstance(value, dict):
         return any(has_transport_failure(item) for item in value.values())
     if isinstance(value, list):
         return any(has_transport_failure(item) for item in value)
-    return isinstance(value, str) and 'error sending request for url (' in value
+    return isinstance(value, str) and bool(CLI_TRANSPORT_FAILURE.search(value))
 
 
 def retry_network_cell(run_case, job, root, attempts=3):
diff --git a/scripts/backtest-vlt.py b/scripts/backtest-vlt.py
index 88e7b087..ae142c2d 100644
--- a/scripts/backtest-vlt.py
+++ b/scripts/backtest-vlt.py
@@ -1454,16 +1454,22 @@ def check_agent(self, row, checks, before_lock, vlt, original):
         checks['rollbackOriginalBytes'] = pristine
 
 
+# The CLI's own report of a transport failure: a request error, or a 5xx from
+# the patch API (e.g. "API request failed with status 504: error code: 504").
+CLI_TRANSPORT_FAILURE = re.compile(r'error sending request for url \(|API request failed with status 5\d\d\b')
+
+
 def transient(row):
-    """A failure the service's transport caused (a request error, or a probe
-    that got no 2xx/4xx answer), never a functional one."""
+    """A failure the service's transport caused (a request error, a 5xx from
+    the patch API, or a probe that got no 2xx/4xx answer), never a
+    functional one."""
     if row.get('matchesExpectation'):
         return False
     probe = row.get('serveProbe') or {}
     if probe and (probe.get('curlExit') or (probe.get('status') or 0) >= 500
                   or probe.get('status') is None):
         return True
-    return 'error sending request for url (' in json.dumps(row)
+    return bool(CLI_TRANSPORT_FAILURE.search(json.dumps(row)))
 
 
 def run_with_retries(cell_factory, job, attempts=3):
diff --git a/scripts/tests/test_backtest_harnesses.py b/scripts/tests/test_backtest_harnesses.py
index 827788e1..b5b7dc07 100644
--- a/scripts/tests/test_backtest_harnesses.py
+++ b/scripts/tests/test_backtest_harnesses.py
@@ -55,6 +55,13 @@ def run_case(_job):
             self.assertEqual((evidence / 'cli.log').read_text(), 'failed request evidence')
             self.assertFalse((evidence / 'cache').exists())
 
+    def test_a_patch_api_5xx_is_a_transport_failure(self):
+        self.assertTrue(bun.has_transport_failure({'repeat': {'error': (
+            'failed to resolve patch references: API request failed with status 503: upstream '
+            'connect error or disconnect/reset before headers')}}))
+        self.assertTrue(bun.has_transport_failure(['API request failed with status 504: error code: 504']))
+        self.assertFalse(bun.has_transport_failure({'error': 'API request failed with status 404: not found'}))
+
     def test_functional_failure_is_never_retried(self):
         with tempfile.TemporaryDirectory() as temp:
             row = dict(passed=False, checks={'frozenPatchedBytes': False}, error='installed bytes differ')
@@ -606,6 +613,9 @@ def test_only_transport_failures_retry(self):
         self.assertTrue(vlt.transient({'serveProbe': {'curlExit': 7}}))
         self.assertTrue(vlt.transient({'serveProbe': {'curlExit': 0, 'status': 503}}))
         self.assertTrue(vlt.transient({'error': 'error sending request for url (https://x)'}))
+        self.assertTrue(vlt.transient({'cliStderrTail': 'Error: Failed to resolve patch references: API '
+                                                        'request failed with status 504: error code: 504'}))
+        self.assertFalse(vlt.transient({'cliStderrTail': 'API request failed with status 404: not found'}))
         self.assertFalse(vlt.transient({'serveProbe': {'curlExit': 0, 'status': 200},
                                         'failingChecks': ['freshCi']}))
 

From f57aebc17cd4c34c9f82451a42fefa23e94ee191 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 15:35:54 -0400
Subject: [PATCH 33/46] Stop vendor hanging on large packages in git

Vendoring a package with a few thousand files inside a git work tree
(date-fns@2.30.0 has 5722) hung forever. The gitignore probe wrote the
whole path list to `git check-ignore -v` before reading its answers,
and git answers every path, so once its output pipe filled neither
side could move. The probe now reads git's output while it writes the
paths, and its 30 second limit covers the whole exchange.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../socket-patch-core/src/vendor/npm_dir.rs   | 53 ++++++++++++++++---
 1 file changed, 47 insertions(+), 6 deletions(-)

diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
index ba0643f2..1904aab8 100644
--- a/crates/socket-patch-core/src/vendor/npm_dir.rs
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -406,13 +406,23 @@ async fn git_output(
         .kill_on_drop(true)
         .spawn()
         .ok()?;
-    if let (Some(input), Some(mut pipe)) = (stdin, child.stdin.take()) {
-        pipe.write_all(input.as_bytes()).await.ok()?;
-    }
-    let output = tokio::time::timeout(std::time::Duration::from_secs(30), child.wait_with_output())
+    let pipe = child.stdin.take();
+    // `check-ignore -v` answers each path as it reads it, so stdout must
+    // drain while stdin is written or both pipes fill and neither side moves.
+    let write_input = async move {
+        if let (Some(input), Some(mut pipe)) = (stdin, pipe) {
+            pipe.write_all(input.as_bytes()).await?;
+        }
+        Ok::<(), std::io::Error>(())
+    };
+    let exchange = async {
+        let (written, output) = tokio::join!(write_input, child.wait_with_output());
+        written.ok()?;
+        output.ok()
+    };
+    let output = tokio::time::timeout(std::time::Duration::from_secs(30), exchange)
         .await
-        .ok()?
-        .ok()?;
+        .ok()??;
     Some((
         output.status.code()?,
         String::from_utf8_lossy(&output.stdout).into_owned(),
@@ -1096,4 +1106,35 @@ mod tests {
             .await
             .is_none());
     }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn the_gitignore_probe_finishes_for_thousands_of_paths() {
+        let Some(git) = crate::utils::process::resolve_tool("git") else {
+            return;
+        };
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let status = std::process::Command::new(&git)
+            .args(["init", "-q"])
+            .current_dir(root)
+            .status()
+            .unwrap();
+        assert!(status.success());
+        let uuid = root.join(".socket/vendor/npm/u");
+        std::fs::create_dir_all(&uuid).unwrap();
+        restore_uuid_metadata(&uuid).await.unwrap();
+        let mut paths: Vec<String> = (0..6000)
+            .map(|i| format!(".socket/vendor/npm/u/d-2.30.0/node_modules/d/esm/f{i}/index.js"))
+            .collect();
+        let probe =
+            tokio::time::timeout(std::time::Duration::from_secs(60), gitignored(root, &paths));
+        assert_eq!(probe.await.expect("probe deadlocked"), None);
+        std::fs::write(root.join(".gitignore"), ".socket/\n").unwrap();
+        paths.push(".socket/vendor/npm/u/.gitignore".to_string());
+        let probe =
+            tokio::time::timeout(std::time::Duration::from_secs(60), gitignored(root, &paths));
+        let rules = probe.await.expect("probe deadlocked").unwrap();
+        assert!(rules.contains(".gitignore:1:.socket/"), "{rules}");
+    }
 }

From 61dc3addc65a424461daae9acbd0d48a89d90de4 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 15:51:32 -0400
Subject: [PATCH 34/46] Roll back vlt pins that vlt moved or chained

Two ledger states left a hosted vlt pin that rollback and remove
refused forever, and the refusal's advice (re-run the scan) could not
fix either one:

- From vlt 1.0.8 a dependency with resolved peers is keyed by its peer
  context, so bumping its peer (`vlt install react@18.3.1`) re-keys the
  pinned node and carries the hosted pin to the new id. Rollback now
  restores the registry pin on every default-registry node of the same
  package that holds exactly the recorded pin, and heals the patched
  copy installed under the new id. A rescan that pins such a node again
  merges into the old ledger edit and keeps its registry entry instead
  of recording the Socket pin as the original.
- The server's hosted PRs append one ledger edit per PR, and a later
  CLI rescan merged into the oldest one, leaving the newer link stale.
  The rescan now folds the whole chain into one edit.

A real-vlt leg pins a peer-keyed package, bumps its peer, rescans and
rolls back on 1.0.8 and later.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../socket-patch-cli/src/commands/rollback.rs |  14 +-
 .../src/commands/scan/hosted.rs               | 161 ++++++++++++--
 .../socket-patch-cli/src/commands/vendor.rs   |   8 +
 .../tests/e2e_redirect_vlt_build.rs           |  68 ++++++
 .../tests/vlt-leg-manifest.json               |  16 ++
 .../src/patch/redirect/replay.rs              |  34 ++-
 .../src/patch/redirect/takeover.rs            |  42 +++-
 .../src/patch/redirect/vlt.rs                 | 196 ++++++++++++++++--
 .../src/patch/redirect/vlt_heal.rs            |  77 +++++--
 docs/testing/vlt-compatibility.md             |   3 +-
 10 files changed, 555 insertions(+), 64 deletions(-)

diff --git a/crates/socket-patch-cli/src/commands/rollback.rs b/crates/socket-patch-cli/src/commands/rollback.rs
index 3f117270..919806cc 100644
--- a/crates/socket-patch-cli/src/commands/rollback.rs
+++ b/crates/socket-patch-cli/src/commands/rollback.rs
@@ -1054,8 +1054,18 @@ pub(crate) async fn run_hosted_leg(
     } else {
         purls.to_vec()
     };
-    let vlt_targets =
-        socket_patch_core::patch::redirect::vlt_heal::ledger_targets(state, &vlt_scope);
+    let vlt_lock = tokio::fs::read_to_string(
+        common
+            .cwd
+            .join(socket_patch_core::constants::npm_family::VLT_LOCK),
+    )
+    .await
+    .ok();
+    let vlt_targets = socket_patch_core::patch::redirect::vlt_heal::ledger_targets(
+        state,
+        &vlt_scope,
+        vlt_lock.as_deref(),
+    );
     // When the whole-ledger replay will run anyway (the scope covers every
     // record), npm purls on Bun projects defer to it so all lockfile edits
     // are staged together atomically. A scoped unwind of one of several
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted.rs b/crates/socket-patch-cli/src/commands/scan/hosted.rs
index 919aaedc..7511cd79 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted.rs
@@ -3464,18 +3464,36 @@ fn format_next_steps(
 }
 
 /// Merge this run's vlt node edits into the recorded ones. A fresh edit
-/// for the same `key` and DepID keeps the recorded `original` (the
-/// pristine registry entry) and takes the fresh `new`; one whose recorded
-/// same-key edits all name DepIDs the pre-run lock no longer holds (a
-/// re-lock, or a new id grammar after a vlt upgrade) replaces them,
-/// `original` included. Returns, per fresh edit, whether it was merged
-/// (anything else is appended as usual).
+/// for the same `key` and DepID keeps the oldest recorded `original` (the
+/// pristine registry entry), takes the fresh `new` and drops the chain's
+/// later links (a server-written ledger appends one per hosted PR). One
+/// whose recorded same-key edits all name DepIDs the pre-run lock no longer
+/// holds (a re-lock, or a new id grammar after a vlt upgrade) replaces
+/// them. So does one for another key of the same `name@version` whose
+/// vanished recorded edit's pin vlt carried to the fresh DepID (a new peer
+/// context). A replacing edit keeps the recorded pristine slots when vlt
+/// carried the pin ([`carried_pin_original`]). Returns, per fresh edit,
+/// whether it was merged (anything else is appended as usual).
 fn rebase_vlt_edits(
     ledger: &mut Vec<socket_patch_core::patch::redirect::FileEdit>,
     fresh: &[socket_patch_core::patch::redirect::FileEdit],
     before_lock: Option<&str>,
 ) -> Vec<bool> {
-    use socket_patch_core::patch::redirect::vlt::{edit_dep_id, lock_node_ids, KIND};
+    use socket_patch_core::patch::redirect::vlt::{
+        carried_pin_original, edit_dep_id, lock_node_ids, KIND,
+    };
+    use socket_patch_core::patch::redirect::FileEdit;
+    fn superseding(edit: &FileEdit, old: &FileEdit) -> FileEdit {
+        let mut next = edit.clone();
+        if let Some(original) = carried_pin_original(edit, old) {
+            next.original = Some(original);
+        }
+        next
+    }
+    fn key_base(key: &Option<String>) -> Option<&str> {
+        key.as_deref()
+            .map(|k| k.split_once('~').map_or(k, |(base, _)| base))
+    }
     let live = before_lock.and_then(lock_node_ids).unwrap_or_default();
     let mut merged = vec![false; fresh.len()];
     for (i, edit) in fresh.iter().enumerate() {
@@ -3489,25 +3507,42 @@ fn rebase_vlt_edits(
             .filter(|(_, old)| old.kind == KIND && old.path == edit.path && old.key == edit.key)
             .map(|(j, _)| j)
             .collect();
-        if let Some(&j) = same_key
+        let same_dep: Vec<usize> = same_key
             .iter()
-            .find(|&&j| id.is_some() && edit_dep_id(&ledger[j]) == id)
-        {
-            ledger[j].new = edit.new.clone();
-            ledger[j].action = edit.action.clone();
+            .copied()
+            .filter(|&j| id.is_some() && edit_dep_id(&ledger[j]) == id)
+            .collect();
+        if let Some((&first, rest)) = same_dep.split_first() {
+            ledger[first].new = edit.new.clone();
+            ledger[first].action = edit.action.clone();
+            for &j in rest.iter().rev() {
+                ledger.remove(j);
+            }
             merged[i] = true;
             continue;
         }
-        let vanished: Vec<usize> = same_key
-            .into_iter()
-            .filter(|&j| edit_dep_id(&ledger[j]).is_none_or(|old| !live.contains(&old)))
-            .collect();
-        if let Some((&first, rest)) = vanished.split_first() {
-            ledger[first] = edit.clone();
+        let vanished = |j: &usize| edit_dep_id(&ledger[*j]).is_none_or(|old| !live.contains(&old));
+        let gone: Vec<usize> = same_key.into_iter().filter(vanished).collect();
+        if let Some((&first, rest)) = gone.split_first() {
+            ledger[first] = superseding(edit, &ledger[first]);
             for &j in rest.iter().rev() {
                 ledger.remove(j);
             }
             merged[i] = true;
+            continue;
+        }
+        let rekeyed = (0..ledger.len()).find(|j| {
+            let old = &ledger[*j];
+            old.kind == KIND
+                && old.path == edit.path
+                && old.key != edit.key
+                && key_base(&old.key) == key_base(&edit.key)
+                && vanished(j)
+                && carried_pin_original(edit, old).is_some()
+        });
+        if let Some(j) = rekeyed {
+            ledger[j] = superseding(edit, &ledger[j]);
+            merged[i] = true;
         }
     }
     merged
@@ -5131,6 +5166,96 @@ mod tests {
         );
     }
 
+    fn vlt_pinned_at(edit: &FileEdit, id: &str) -> Option<serde_json::Value> {
+        let new = edit.new.as_ref()?.as_str()?;
+        let (_, tuple) = new.split_once(": ")?;
+        Some(serde_json::Value::String(format!("\"{id}\": {tuple}")))
+    }
+
+    #[test]
+    fn vlt_rerun_collapses_a_server_appended_chain_into_one_link() {
+        let first = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-pa", "ua");
+        let mut second = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-pb", "ub");
+        second.original = first.new.clone();
+        let mut ledger = vec![first, second.clone()];
+        let mut fresh = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-pc", "uc");
+        fresh.original = second.new.clone();
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&["~npm~x@1.0.0"])),
+        );
+        assert_eq!(merged, [true]);
+        assert_eq!(
+            ledger,
+            [FileEdit {
+                original: vlt_edit("x@1.0.0", "~npm~x@1.0.0", "", "").original,
+                ..fresh
+            }]
+        );
+    }
+
+    #[test]
+    fn vlt_rerun_after_a_peer_context_rekey_keeps_the_pristine_slots() {
+        let old_id = "~npm~x@1.0.0~peer.0df72515a50372ba";
+        let new_id = "~npm~x@1.0.0~peer.32643a3290c32d5d";
+        let recorded = vlt_edit("x@1.0.0~peer.0df72515a50372ba", old_id, "sha512-p1", "u1");
+        let mut ledger = vec![
+            vlt_edit("y@1.0.0", "~npm~y@1.0.0", "sha512-p", "u"),
+            recorded.clone(),
+        ];
+        let mut fresh = vlt_edit("x@1.0.0~peer.32643a3290c32d5d", new_id, "sha512-p2", "u2");
+        fresh.original = vlt_pinned_at(&recorded, new_id);
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&[new_id, "~npm~y@1.0.0"])),
+        );
+        assert_eq!(merged, [true]);
+        assert_eq!(ledger.len(), 2);
+        assert_eq!(ledger[1].key, fresh.key);
+        assert_eq!(ledger[1].new, fresh.new);
+        assert_eq!(
+            ledger[1].original,
+            Some(serde_json::Value::String(format!(
+                "\"{new_id}\": [0,\"x\",\"sha512-reg\"]"
+            )))
+        );
+
+        let mut pristine = vec![recorded.clone()];
+        let relocked = vlt_edit("x@1.0.0~peer.32643a3290c32d5d", new_id, "sha512-p2", "u2");
+        let merged = rebase_vlt_edits(
+            &mut pristine,
+            std::slice::from_ref(&relocked),
+            Some(&vlt_lock_with(&[new_id])),
+        );
+        assert_eq!(merged, [false], "a re-lock that dropped the pin appends");
+        assert_eq!(pristine, [recorded]);
+    }
+
+    #[test]
+    fn vlt_relocked_dep_id_that_kept_the_pin_keeps_the_pristine_slots() {
+        let recorded = vlt_edit("x@1.0.0", "·npm·x@1.0.0", "sha512-p1", "u1");
+        let mut ledger = vec![recorded.clone()];
+        let mut fresh = vlt_edit("x@1.0.0", "~npm~x@1.0.0", "sha512-p2", "u2");
+        fresh.original = vlt_pinned_at(&recorded, "~npm~x@1.0.0");
+        let merged = rebase_vlt_edits(
+            &mut ledger,
+            std::slice::from_ref(&fresh),
+            Some(&vlt_lock_with(&["~npm~x@1.0.0"])),
+        );
+        assert_eq!(merged, [true]);
+        assert_eq!(
+            ledger,
+            [FileEdit {
+                original: Some(serde_json::Value::String(
+                    "\"~npm~x@1.0.0\": [0,\"x\",\"sha512-reg\"]".into()
+                )),
+                ..fresh
+            }]
+        );
+    }
+
     #[test]
     fn vlt_edit_of_a_live_sibling_dep_id_is_appended() {
         let mut ledger = vec![vlt_edit("x@1.0.0", "··x@1.0.0", "sha512-p", "u")];
diff --git a/crates/socket-patch-cli/src/commands/vendor.rs b/crates/socket-patch-cli/src/commands/vendor.rs
index c0bd837c..81c024c4 100644
--- a/crates/socket-patch-cli/src/commands/vendor.rs
+++ b/crates/socket-patch-cli/src/commands/vendor.rs
@@ -1721,9 +1721,17 @@ pub(crate) async fn vendor_records(
                     }
                 } else if claimed {
                     let ledger = redirect_ledger.as_mut().expect("claimed implies Some");
+                    let vlt_lock = tokio::fs::read_to_string(
+                        common
+                            .cwd
+                            .join(socket_patch_core::constants::npm_family::VLT_LOCK),
+                    )
+                    .await
+                    .ok();
                     let targets = socket_patch_core::patch::redirect::vlt_heal::ledger_targets(
                         ledger,
                         std::slice::from_ref(candidate),
+                        vlt_lock.as_deref(),
                     );
                     match socket_patch_core::patch::redirect::revert_redirect_purl(
                         &common.cwd,
diff --git a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
index 2ed2fa9e..f3b6e5b0 100644
--- a/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_redirect_vlt_build.rs
@@ -458,6 +458,74 @@ async fn vlt_pinned_matrix_hosted_peer_workspace_instances() {
     fx.leg.ran();
 }
 
+/// From 1.0.8 vlt keys a root dependency with resolved peers by its peer
+/// context (`~peer.<16 hex>`), so `vlt install <peer>@<new>` re-keys the
+/// pinned node and carries the pin to the new DepID: a rescan leaves the
+/// ledger alone, and rollback restores the registry pin on the new DepID.
+#[tokio::test(flavor = "multi_thread")]
+#[ignore = "real vlt: SOCKET_PATCH_VLT_E2E_JS"]
+async fn vlt_pinned_matrix_hosted_peer_rekey_rollback() {
+    let Some(leg) = hosted_leg("peer_rekey_rollback") else {
+        return;
+    };
+    if !leg.at_least(PEER_HASH_FROM) {
+        return leg.skip("no-root-peer-extra");
+    }
+    let usx = ("use-sync-external-store", "1.2.0");
+    let shape = Shape {
+        deps: vec![usx, ("react", "18.2.0")],
+        pins: vec![
+            usx,
+            ("react", "18.2.0"),
+            ("react", "18.3.1"),
+            ("loose-envify", "1.4.0"),
+            ("js-tokens", "4.0.0"),
+        ],
+        targets: vec![(usx.0, usx.1, UUID_USX, "index.js")],
+        ..Shape::left_pad()
+    };
+    let fx = Fixture::build(leg, shape).await;
+    let t = fx.t().clone();
+    let before: Value = serde_json::from_slice(&fx.lock_before).unwrap();
+    let pinned_id = node_id(&before, &t.name, &t.version);
+    assert!(pinned_id.contains("~peer."), "{before:#}");
+    let doc = fx.scan(&[]);
+    assert_eq!(doc["redirect"]["redirected"], 1, "{doc:#}");
+    fx.vlt_ok(&fx.proj, &["install", "react@18.3.1"]);
+    let rekeyed_id = node_id(&read_lock(&fx.proj), &t.name, &t.version);
+    assert_ne!(rekeyed_id, pinned_id, "vlt re-keys the peer context");
+    assert_pinned(&fx.proj, &fx.svc, &t);
+    assert_eq!(state(&fx.proj, &t), State::Patched);
+    let lock = lock_bytes(&fx.proj);
+    let ledger = fx.ledger();
+    fx.scan(&[]);
+    assert_eq!(lock_bytes(&fx.proj), lock, "the rescan keeps the lock");
+    assert_eq!(fx.ledger(), ledger, "the rescan keeps the ledger");
+    let out = rollback(&fx.proj, &[]);
+    assert_eq!(out.code, 0, "{out}");
+    assert_not_pinned(&fx.proj, &t);
+    fx.assert_advisory(&out.json(), &advisory_rolled_back(1));
+    assert!(
+        !store_entry(&fx.proj, &rekeyed_id).exists(),
+        "the patched copy under the re-keyed DepID is healed"
+    );
+    let after = read_lock(&fx.proj);
+    assert_eq!(
+        after["nodes"][&rekeyed_id][2], before["nodes"][&pinned_id][2],
+        "the registry integrity is back on the re-keyed node: {after:#}"
+    );
+    assert!(
+        !String::from_utf8_lossy(&lock_bytes(&fx.proj)).contains(&fx.svc.artifact_url(&t)),
+        "no hosted URL is left"
+    );
+    fx.vlt_ok(&fx.proj, &["install"]);
+    assert_eq!(state(&fx.proj, &t), State::Pristine);
+    let co = fx.checkout("after-rollback");
+    fx.vlt_ok_profile(&co, &["ci"], "after-rollback");
+    assert_eq!(state(&co, &t), State::Pristine);
+    fx.leg.ran();
+}
+
 // ── lock re-saves ─────────────────────────────────────────────────────────
 
 /// `vlt install <newdep>` keeps the redirect.
diff --git a/crates/socket-patch-cli/tests/vlt-leg-manifest.json b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
index 635b5cd2..2248dd1e 100644
--- a/crates/socket-patch-cli/tests/vlt-leg-manifest.json
+++ b/crates/socket-patch-cli/tests/vlt-leg-manifest.json
@@ -17,6 +17,7 @@
         "heal_rule_c_no_record",
         "scoped",
         "peer_workspace_instances",
+        "peer_rekey_rollback",
         "install_newdep_preserves",
         "update_drops",
         "resave_install_rollback",
@@ -158,6 +159,7 @@
       "heal_rule_c_no_record",
       "scoped",
       "peer_workspace_instances",
+      "peer_rekey_rollback",
       "install_newdep_preserves",
       "update_drops",
       "resave_install_rollback",
@@ -539,6 +541,20 @@
       "conditions": [],
       "reason": "vlt-platform-optional-bug"
     },
+    {
+      "boundary": "the root importer's direct dependency with resolved peers has no peer extra, so bumping its peer never re-keys the pinned node (`peer_rekey_rollback` pins the re-key and the rollback that follows it)",
+      "suite": "hosted",
+      "legs": [
+        "peer_rekey_rollback"
+      ],
+      "except": [],
+      "versions": {
+        "op": "<",
+        "a": "1.0.8"
+      },
+      "conditions": [],
+      "reason": "no-root-peer-extra"
+    },
     {
       "boundary": "a scalar `registry` makes lock-driven installs re-resolve from public npm",
       "suite": "vendored",
diff --git a/crates/socket-patch-core/src/patch/redirect/replay.rs b/crates/socket-patch-core/src/patch/redirect/replay.rs
index cc642562..4a0549e8 100644
--- a/crates/socket-patch-core/src/patch/redirect/replay.rs
+++ b/crates/socket-patch-core/src/patch/redirect/replay.rs
@@ -1094,14 +1094,20 @@ pub async fn revert_remaining_redirect_edits(
         for &idx in &vanished_vlt {
             let edit = &state.edits[idx];
             let checked = match staged_read(&staged, project_root, &edit.path).await {
-                Ok(Some(content)) => super::vlt::check_vanished(&content, edit),
+                Ok(Some(content)) => super::vlt::revert_vanished(&content, edit),
                 Ok(None) => Err(format!("{} no longer exists", edit.path)),
                 Err(error) => Err(error),
             };
-            if let Err(reason) = checked {
-                refuse(reason, &mut outcome);
-                refused_groups.insert(group);
-                continue 'group;
+            match checked {
+                Ok(Some(restored)) => {
+                    staged.insert(edit.path.clone(), Some(restored));
+                }
+                Ok(None) => {}
+                Err(reason) => {
+                    refuse(reason, &mut outcome);
+                    refused_groups.insert(group);
+                    continue 'group;
+                }
             }
         }
 
@@ -2258,19 +2264,29 @@ mod tests {
             assert!(state.edits.is_empty() && state.records.is_empty());
         }
 
+        // vlt re-keyed the only pinned node and carried the pin with it.
         let dir = TempDir::new().unwrap();
         write(dir.path(), "vlt-lock.json", &vlt_lock(&plain_hosted)).await;
         let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
         let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
+        assert!(out.fully_reverted(), "{out:?}");
+        assert_eq!(
+            read(dir.path(), "vlt-lock.json").await,
+            vlt_lock(&plain_registry)
+        );
+        assert!(state.edits.is_empty() && state.records.is_empty());
+
+        let dir = TempDir::new().unwrap();
+        let other = plain_hosted.replace("sha512-p", "sha512-x");
+        write(dir.path(), "vlt-lock.json", &vlt_lock(&other)).await;
+        let mut state = state_with(vec![vlt_edit()], &["pkg:npm/minimist@1.2.8"]);
+        let out = revert_remaining_redirect_edits(dir.path(), &mut state, false).await;
         assert_eq!(out.refusals.len(), 1, "{out:?}");
         assert!(
             out.refusals[0].reason.contains("still pins its hosted URL"),
             "{out:?}"
         );
-        assert_eq!(
-            read(dir.path(), "vlt-lock.json").await,
-            vlt_lock(&plain_hosted)
-        );
+        assert_eq!(read(dir.path(), "vlt-lock.json").await, vlt_lock(&other));
     }
 
     #[tokio::test]
diff --git a/crates/socket-patch-core/src/patch/redirect/takeover.rs b/crates/socket-patch-core/src/patch/redirect/takeover.rs
index 20ea162d..fc471ba2 100644
--- a/crates/socket-patch-core/src/patch/redirect/takeover.rs
+++ b/crates/socket-patch-core/src/patch/redirect/takeover.rs
@@ -1058,7 +1058,12 @@ pub async fn revert_npm_redirect_purl(
                 edit.path
             ));
         };
-        super::vlt::check_vanished(&content, edit)?;
+        if let Some(restored) = super::vlt::revert_vanished(&content, edit)? {
+            staged.insert(edit.path.clone(), Some(restored));
+            if !out.reverted_files.contains(&edit.path) {
+                out.reverted_files.push(edit.path.clone());
+            }
+        }
     }
 
     // LAST ONE OUT: the `.npmrc` `allow-remote=all` auto-config exists only
@@ -2669,6 +2674,41 @@ mod tests {
         }
     }
 
+    #[tokio::test]
+    async fn npm_vlt_takeover_follows_a_pin_vlt_carried_to_a_new_peer_context() {
+        let hosted = format!("\"sha512-p\",\"{NPM_URL}\"");
+        let old_id = "~npm~left-pad@1.3.0~peer.0df72515a50372ba";
+        let new_id = "~npm~left-pad@1.3.0~peer.32643a3290c32d5d";
+        let tmp = tempfile::tempdir().unwrap();
+        let root = tmp.path();
+        let wired = vlt_lock(&[
+            vlt_entry(new_id, &hosted),
+            vlt_entry("~npm~right-pad@1.3.0", "\"sha512-q\""),
+        ]);
+        tokio::fs::write(root.join("vlt-lock.json"), &wired)
+            .await
+            .unwrap();
+        let mut state = RedirectState::new();
+        state.records.insert(NPM_PURL.into(), record());
+        state.edits = vec![vlt_node_edit(
+            "left-pad@1.3.0~peer.0df72515a50372ba",
+            old_id,
+        )];
+        revert_redirect_purl(root, &mut state, NPM_PURL, false)
+            .await
+            .expect("revert succeeds");
+        assert_eq!(
+            tokio::fs::read_to_string(root.join("vlt-lock.json"))
+                .await
+                .unwrap(),
+            vlt_lock(&[
+                vlt_entry(new_id, "\"sha512-r\""),
+                vlt_entry("~npm~right-pad@1.3.0", "\"sha512-q\""),
+            ])
+        );
+        assert!(state.edits.is_empty() && state.records.is_empty());
+    }
+
     #[tokio::test]
     async fn npm_unclassified_edit_naming_the_purl_refuses_the_claim_untouched() {
         for dry_run in [true, false] {
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index 2fadf504..c6beebb9 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -537,7 +537,7 @@ pub(crate) enum SlotRevert {
     /// The line already holds `original`'s slots.
     Unchanged,
     /// No line has the DepID. Every instance of a `name@version` shares one
-    /// hosted URL, so [`check_vanished`] runs only after the transaction's
+    /// hosted URL, so [`revert_vanished`] runs only after the transaction's
     /// other edits are staged.
     Vanished,
 }
@@ -610,23 +610,109 @@ pub(crate) fn revert_vlt_slots(text: &str, edit: &FileEdit) -> Result<SlotRevert
     }
 }
 
-/// A [`SlotRevert::Vanished`] edit is already reverted (a re-lock dropped
-/// its pin) unless its hosted URL is still on some line of `text`, the lock
-/// with every other edit of the same revert already staged.
-pub(crate) fn check_vanished(text: &str, edit: &FileEdit) -> Result<(), String> {
-    let (_, new) = recorded(edit)?;
-    let url_left = slot_value(&new, 3)
-        .as_ref()
-        .and_then(Value::as_str)
-        .is_some_and(|url| text.contains(url));
-    if url_left {
-        Err(drift(
+/// Finish a [`SlotRevert::Vanished`] edit against `text`, the lock with
+/// every other edit of the same revert already staged. `Ok(None)`: a
+/// re-lock dropped the pin, so nothing is left to revert. `Ok(Some(text))`:
+/// vlt re-keyed the node (a new peer context) and carried the pin, so every
+/// default-registry instance of the same `name@version` that holds exactly
+/// `new`'s slots gets `original`'s back. The hosted URL on any other line
+/// is drift.
+pub(crate) fn revert_vanished(text: &str, edit: &FileEdit) -> Result<Option<String>, String> {
+    let (original, new) = recorded(edit)?;
+    let Some(url) = slot_value(&new, 3).and_then(|v| v.as_str().map(str::to_string)) else {
+        return Ok(None);
+    };
+    if !text.contains(url.as_str()) {
+        return Ok(None);
+    }
+    let lines = split_lines(text);
+    let mut out: Vec<String> = lines.iter().map(|l| (*l).to_string()).collect();
+    let carried = carried_pin_lines(text, &lines, &new);
+    for &i in &carried {
+        let line = parse_node_line(lines[i]).expect("carried_pin_lines parsed this line");
+        let tuple = render_tuple_with_slots(
+            &line.entry.elems,
+            original.slot(2).filter(|s| *s != "null"),
+            original.slot(3).filter(|s| *s != "null"),
+        );
+        out[i] = render_entry_line(&entry_text(line.entry.key, &tuple), line.comma, line.cr);
+    }
+    let restored = out.join("\n");
+    if carried.is_empty() || restored.contains(url.as_str()) {
+        return Err(drift(
             new.key,
             &format!("no longer has {}, but still pins its hosted URL", new.key),
-        ))
-    } else {
-        Ok(())
+        ));
+    }
+    Ok(Some(restored))
+}
+
+/// The nodes-section lines of `text` that hold `new`'s pin under another
+/// DepID: default-registry instances of the same `name@version` whose
+/// slots [2] and [3] are exactly `new`'s.
+fn carried_pin_lines(text: &str, lines: &[&str], new: &NodeEntry<'_>) -> Vec<usize> {
+    let Some(recorded_id) = split_dep_id(new.key) else {
+        return Vec::new();
+    };
+    let Some(identity) = recorded_id.registry_identity() else {
+        return Vec::new();
+    };
+    let LockSniff::Readable(lock) = sniff_lock(text) else {
+        return Vec::new();
+    };
+    let Some(span) = nodes_block(lines) else {
+        return Vec::new();
+    };
+    span.entry_lines()
+        .filter(|&i| {
+            parse_node_line(lines[i]).is_some_and(|line| {
+                line.entry.key != new.key
+                    && split_dep_id(line.entry.key).is_some_and(|id| {
+                        id.registry_identity() == Some(identity)
+                            && is_default_registry(&id.first, lock.options())
+                    })
+                    && same_slots(&line.entry, new)
+            })
+        })
+        .collect()
+}
+
+/// The DepIDs (with their slot [0] flags) a [`KIND`] edit's pin moved to
+/// when vlt re-keyed its node: empty while `text` still holds the recorded
+/// DepID.
+pub(crate) fn carried_pin_ids(text: &str, edit: &FileEdit) -> Vec<(String, Option<u64>)> {
+    let Ok((_, new)) = recorded(edit) else {
+        return Vec::new();
+    };
+    let lines = split_lines(text);
+    let prefix = format!("    \"{}\": ", new.key);
+    if lines.iter().any(|l| l.starts_with(prefix.as_str())) {
+        return Vec::new();
     }
+    carried_pin_lines(text, &lines, &new)
+        .into_iter()
+        .filter_map(|i| parse_node_line(lines[i]))
+        .map(|l| (l.entry.key.to_string(), l.entry.elems[0].parse().ok()))
+        .collect()
+}
+
+/// The `original` a fresh edit takes when it supersedes `old`, a recorded
+/// edit whose DepID vanished, if vlt carried `old`'s pin to the fresh
+/// DepID: the fresh entry is then Socket's, not the registry's, so it gets
+/// `old`'s pristine slots back. `None` when the fresh entry is not `old`'s
+/// pin (a re-lock that dropped it already left the pristine entry).
+pub fn carried_pin_original(fresh: &FileEdit, old: &FileEdit) -> Option<Value> {
+    let fresh_original = parse_node_entry_text(fresh.original.as_ref()?.as_str()?)?;
+    let (old_original, old_new) = recorded(old).ok()?;
+    if !same_slots(&fresh_original, &old_new) {
+        return None;
+    }
+    let tuple = render_tuple_with_slots(
+        &fresh_original.elems,
+        old_original.slot(2).filter(|s| *s != "null"),
+        old_original.slot(3).filter(|s| *s != "null"),
+    );
+    Some(Value::String(entry_text(fresh_original.key, &tuple)))
 }
 
 #[cfg(test)]
@@ -905,7 +991,7 @@ mod tests {
         match revert_vlt_slots(lock, edit)? {
             SlotRevert::Restored(text) => Ok(Some(text)),
             SlotRevert::Unchanged => Ok(None),
-            SlotRevert::Vanished => check_vanished(lock, edit).map(|()| None),
+            SlotRevert::Vanished => revert_vanished(lock, edit),
         }
     }
 
@@ -997,11 +1083,23 @@ mod tests {
         )]);
         assert!(revert(&other, &edit).unwrap_err().contains("drifted"));
         let moved = lock_with(&[&format!(
-            "\"~npm~left-pad@1.3.0~peer.1\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"
+            "\"~npm~left-pad@1.3.0~peer.1\": [0,\"left-pad\",\"sha512-OTHER==\",\"{URL}\"]"
         )]);
         let err = revert(&moved, &edit).unwrap_err();
         assert!(err.contains("still pins its hosted URL"), "{err}");
         assert!(err.contains("restore the registry pin for ~npm~left-pad@1.3.0 manually"));
+        let elsewhere = lock_with(&[&format!(
+            "\"~npm~right-pad@1.3.0\": [0,\"right-pad\",\"{SHA}\",\"{URL}\"]"
+        )]);
+        let err = revert(&elsewhere, &edit).unwrap_err();
+        assert!(err.contains("still pins its hosted URL"), "{err}");
+        let foreign = format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"options\": {{\"registries\": {{\"acme\": \
+             \"https://acme.test/\"}}}},\n  \"nodes\": {{\n    \"~acme~left-pad@1.3.0\": \
+             [0,\"left-pad\",\"{SHA}\",\"{URL}\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+        );
+        let err = revert(&foreign, &edit).unwrap_err();
+        assert!(err.contains("still pins its hosted URL"), "{err}");
         let twice = format!(
             "{{\n  \"nodes\": {{\n    {},\n    {}\n  }}\n}}\n",
             hosted_entry(),
@@ -1017,6 +1115,70 @@ mod tests {
             .contains("canonical"));
     }
 
+    #[test]
+    fn revert_follows_a_pin_vlt_carried_to_a_new_peer_context() {
+        let old_id = "~npm~left-pad@1.3.0~peer.0df72515a50372ba";
+        let new_id = "~npm~left-pad@1.3.0~peer.32643a3290c32d5d";
+        let edit = vlt_edit(
+            &format!("\"{old_id}\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"{old_id}\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"),
+        );
+        let sibling = "\"~npm~zz@1.0.0\": [0,\"zz\",\"sha512-z\"]";
+        let rekeyed = lock_with(&[
+            &format!("\"{new_id}\": [2,\"left-pad\",\"{SHA}\",\"{URL}\",null,null,null,\"lib\"]"),
+            sibling,
+        ]);
+        assert_eq!(
+            revert(&rekeyed, &edit).unwrap().unwrap(),
+            lock_with(&[
+                &format!(
+                    "\"{new_id}\": [2,\"left-pad\",\"{REG_SHA}\",null,null,null,null,\"lib\"]"
+                ),
+                sibling,
+            ])
+        );
+        let crlf = lock_with(&[&format!(
+            "\"{new_id}\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"
+        )])
+        .replace('\n', "\r\n");
+        assert_eq!(
+            revert(&crlf, &edit).unwrap().unwrap(),
+            lock_with(&[&format!("\"{new_id}\": [0,\"left-pad\",\"{REG_SHA}\"]")])
+                .replace('\n', "\r\n")
+        );
+        let both = lock_with(&[
+            &format!("\"{new_id}\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"),
+            &format!("\"~npm~right-pad@1.3.0\": [0,\"right-pad\",\"sha512-R==\",\"{URL}\"]"),
+        ]);
+        let err = revert(&both, &edit).unwrap_err();
+        assert!(err.contains("still pins its hosted URL"), "{err}");
+    }
+
+    #[test]
+    fn a_superseding_edit_keeps_the_pristine_slots_of_a_carried_pin() {
+        let old_id = "~npm~left-pad@1.3.0~peer.1";
+        let new_id = "~npm~left-pad@1.3.0~peer.2";
+        let old = vlt_edit(
+            &format!("\"{old_id}\": [0,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"{old_id}\": [0,\"left-pad\",\"{SHA}\",\"{URL}\"]"),
+        );
+        let carried = vlt_edit(
+            &format!("\"{new_id}\": [1,\"left-pad\",\"{SHA}\",\"{URL}\"]"),
+            &format!("\"{new_id}\": [1,\"left-pad\",\"sha512-P2==\",\"u2\"]"),
+        );
+        assert_eq!(
+            carried_pin_original(&carried, &old),
+            Some(Value::String(format!(
+                "\"{new_id}\": [1,\"left-pad\",\"{REG_SHA}\"]"
+            )))
+        );
+        let relocked = vlt_edit(
+            &format!("\"{new_id}\": [1,\"left-pad\",\"{REG_SHA}\"]"),
+            &format!("\"{new_id}\": [1,\"left-pad\",\"{SHA}\",\"{URL}\"]"),
+        );
+        assert_eq!(carried_pin_original(&relocked, &old), None);
+    }
+
     #[test]
     fn revert_refuses_a_malformed_ledger_edit() {
         let mut edit = vlt_edit(&registry_entry(), &hosted_entry());
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
index 18c9cd43..53547140 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt_heal.rs
@@ -459,8 +459,14 @@ pub async fn invalidate(root: &Path, state: &InstallState, stale: &[String]) ->
 }
 
 /// The vlt nodes the ledger's `redirect_vlt_lock_node` edits name for each
-/// of `purls`, with the purl's patch record.
-pub fn ledger_targets(state: &RedirectState, purls: &[String]) -> Vec<LedgerTarget> {
+/// of `purls`, with the purl's patch record. With the pre-revert `lock`,
+/// a node vlt re-keyed (a new peer context) is named by the DepID its pin
+/// moved to, since that is where the patched installed copy lives.
+pub fn ledger_targets(
+    state: &RedirectState,
+    purls: &[String],
+    lock: Option<&str>,
+) -> Vec<LedgerTarget> {
     let mut out: Vec<LedgerTarget> = Vec::new();
     for purl in purls {
         let Some((ecosystem, name, version)) = purl_parts(purl) else {
@@ -492,16 +498,20 @@ pub fn ledger_targets(state: &RedirectState, purls: &[String]) -> Vec<LedgerTarg
             else {
                 continue;
             };
-            if out.iter().any(|t| t.dep_id == entry.key && t.purl == *purl) {
-                continue;
+            let mut nodes = vec![(entry.key.to_string(), entry.elems[0].parse().ok())];
+            nodes.extend(lock.map_or_else(Vec::new, |text| vlt::carried_pin_ids(text, edit)));
+            for (dep_id, flags) in nodes {
+                if out.iter().any(|t| t.dep_id == dep_id && t.purl == *purl) {
+                    continue;
+                }
+                out.push(LedgerTarget {
+                    purl: purl.clone(),
+                    dep_id,
+                    name: name.clone(),
+                    record: record.clone(),
+                    flags,
+                });
             }
-            out.push(LedgerTarget {
-                purl: purl.clone(),
-                dep_id: entry.key.to_string(),
-                name: name.clone(),
-                record: record.clone(),
-                flags: entry.elems[0].parse().ok(),
-            });
         }
     }
     out
@@ -977,13 +987,47 @@ mod tests {
         state
             .records
             .insert("pkg:npm/left-pad@1.3.0".into(), record());
-        let targets = ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()]);
+        let targets = ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()], None);
         let ids: Vec<&str> = targets.iter().map(|t| t.dep_id.as_str()).collect();
         assert_eq!(ids, ["~npm~left-pad@1.3.0", "~npm~left-pad@1.3.0~peer.2"]);
         assert!(targets.iter().all(|t| t.record.is_some()));
         assert!(targets.iter().all(|t| t.flags == Some(0)));
     }
 
+    #[test]
+    fn ledger_targets_follow_a_pin_vlt_carried_to_a_new_peer_context() {
+        let old_id = "~npm~left-pad@1.3.0~peer.0df72515a50372ba";
+        let new_id = "~npm~left-pad@1.3.0~peer.32643a3290c32d5d";
+        let mut state = RedirectState::new();
+        state.edits = vec![FileEdit {
+            path: "vlt-lock.json".into(),
+            kind: vlt::KIND.into(),
+            action: "rewritten".into(),
+            key: Some("left-pad@1.3.0~peer.0df72515a50372ba".into()),
+            original: Some(Value::String(format!(
+                "\"{old_id}\": [0,\"left-pad\",\"r\"]"
+            ))),
+            new: Some(Value::String(format!(
+                "\"{old_id}\": [0,\"left-pad\",\"s\",\"u\"]"
+            ))),
+        }];
+        let lock = format!(
+            "{{\n  \"lockfileVersion\": 1,\n  \"nodes\": {{\n    \"{new_id}\": \
+             [2,\"left-pad\",\"s\",\"u\"]\n  }},\n  \"edges\": {{}}\n}}\n"
+        );
+        let purls = ["pkg:npm/left-pad@1.3.0".to_string()];
+        let targets: Vec<(String, Option<u64>)> = ledger_targets(&state, &purls, Some(&lock))
+            .into_iter()
+            .map(|t| (t.dep_id, t.flags))
+            .collect();
+        assert_eq!(
+            targets,
+            [(old_id.to_string(), Some(0)), (new_id.to_string(), Some(2))]
+        );
+        let kept = lock.replace(new_id, old_id);
+        assert_eq!(ledger_targets(&state, &purls, Some(&kept)).len(), 1);
+    }
+
     #[test]
     fn ledger_targets_carry_the_recorded_flags() {
         let mut state = RedirectState::new();
@@ -1001,10 +1045,11 @@ mod tests {
             new: None,
         })
         .collect();
-        let flags: Vec<Option<u64>> = ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()])
-            .iter()
-            .map(|t| t.flags)
-            .collect();
+        let flags: Vec<Option<u64>> =
+            ledger_targets(&state, &["pkg:npm/left-pad@1.3.0".into()], None)
+                .iter()
+                .map(|t| t.flags)
+                .collect();
         assert_eq!(flags, [Some(0), Some(3)]);
     }
 
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 1797efd2..23f7e758 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -198,7 +198,7 @@ them per OS).
 
 | Binary | Suite | Legs |
 |---|---|---|
-| `e2e_redirect_vlt_build` | `hosted` | `scan_fresh_ci`, `frozen_dead_registry`, `ordinary_install_stable`, `get_uuid_fresh_ci`, `tamper_cold_eintegrity`, `rollback_byte_exact`, `rerun_noop`, `warm_tree_invalidates`, `no_cleanup_stays_stale`, `heal_rule_b_hidden_lock_without_node`, `heal_rule_c_no_hidden_lock`, `heal_rule_c_no_record`, `scoped`, `peer_workspace_instances`, `install_newdep_preserves`, `update_drops`, `resave_install_rollback`, `resave_crlf_rollback`, `resave_update_rollback`, `crlf_lock`, `mirror_registries_npm`, `scalar_registry`, `named_alias_untouched`, `scoped_registry_untouched`, `jsr_untouched`, `default_registry_alias`, `registry_from_env`, `registry_from_user_config`, `content_encoding_refused`, `old_lockfile_ignored`, `warm_cache_hazard`, `idempotence`, `manifestless_vex`, `ts_written_lock`, `optional_dependency_heal`, `then_vendored_optional_takeover`, `platform_optional_skipped` |
+| `e2e_redirect_vlt_build` | `hosted` | `scan_fresh_ci`, `frozen_dead_registry`, `ordinary_install_stable`, `get_uuid_fresh_ci`, `tamper_cold_eintegrity`, `rollback_byte_exact`, `rerun_noop`, `warm_tree_invalidates`, `no_cleanup_stays_stale`, `heal_rule_b_hidden_lock_without_node`, `heal_rule_c_no_hidden_lock`, `heal_rule_c_no_record`, `scoped`, `peer_workspace_instances`, `peer_rekey_rollback`, `install_newdep_preserves`, `update_drops`, `resave_install_rollback`, `resave_crlf_rollback`, `resave_update_rollback`, `crlf_lock`, `mirror_registries_npm`, `scalar_registry`, `named_alias_untouched`, `scoped_registry_untouched`, `jsr_untouched`, `default_registry_alias`, `registry_from_env`, `registry_from_user_config`, `content_encoding_refused`, `old_lockfile_ignored`, `warm_cache_hazard`, `idempotence`, `manifestless_vex`, `ts_written_lock`, `optional_dependency_heal`, `then_vendored_optional_takeover`, `platform_optional_skipped` |
 | `e2e_vendor_vlt_build` | `vendored` | `scan_fresh_ci`, `get_build_fresh_ci`, `get_service_fresh_ci`, `durability`, `workspace_member_selfref`, `alias_selfref`, `peer_root_selfref`, `peer_member_selfref`, `single_peer_context`, `optional_warm_reinstall`, `dep_with_deps`, `hostile_gitignore`, `autocrlf_checkout`, `bin_bearing`, `package_json_devdeps_patch`, `repair_rebuilds`, `idempotency`, `revert_byte_exact`, `resave_install_revert`, `resave_uninstall_revert`, `resave_crlf_revert`, `tamper_planted_file`, `tamper_file_content`, `tamper_payload_package_json`, `tamper_symlink_outside`, `tamper_deleted_gitignore`, `tamper_lock_file_node_path`, `transitive_refused`, `legacy_lockfile_warning`, `absent_version_refused`, `lockless_reinstall`, `manifestless_vex` |
 | `mode_migration_vlt` | `migration` | `vendored_then_hosted`, `hosted_then_vendored`, `dry_run_parity`, `scoped_unwind_one_of_two`, `rollback_from_mixed`, `agent_apply_yields_to_vendored`, `agent_apply_after_hosted`, `hosted_scan_keeps_agent_patched_tree`, `agent_rollback_after_takeovers`, `pm_switch_npm_to_vlt`, `pm_switch_vlt_to_npm`, `flavor_changed`, `upgrade_hosted`, `upgrade_vendored` |
 | `e2e_safety_vlt` | `safety` | `linux_auto`, `explicit_hardlink`, `private_copies`, `cross_device_cache`, `agent_rollback`, `peer_fanout`, `hosted_heal`, `vendored_build`, `vendor_revert_and_repair`, `layout_note` |
@@ -245,6 +245,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | `vlt update` exists | `< 0.0.0-20` | — | hosted | `update_drops`, `resave_update_rollback` | `no-vlt-update` |
 | the golden `basic` lock (`registries.npm`, no scalar `registry`) is what the release writes | `< 1.0.5` | — | hosted | `ts_written_lock` | `golden-grammar` |
 | a platform-skipped optional dependency makes the install fail (`Dependency node could not be found`) | `0.0.0-31 … 1.0.0-rc.1` | — | hosted | `platform_optional_skipped` | `vlt-platform-optional-bug` |
+| the root importer's direct dependency with resolved peers has no peer extra, so bumping its peer never re-keys the pinned node (`peer_rekey_rollback` pins the re-key and the rollback that follows it) | `< 1.0.8` | — | hosted | `peer_rekey_rollback` | `no-root-peer-extra` |
 | a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | vendored | `workspace_member_selfref`, `alias_selfref` | `non-hermetic-registry` |
 | `npm:` alias specs resolve against public npm even with `registries.npm` | `1.0.0-rc.30 … 1.0.0-rc.32` | — | vendored | `alias_selfref` | `npm-alias-non-hermetic` |
 | era A (`··` ids, or scalar-registry URL-segment ids with no `·npm·` id): `vendor_vlt_legacy_lockfile` | `> 1.0.0-rc.8` | — | vendored | `legacy_lockfile_warning` | `not-legacy-lockfile` |

From 327e103cf9809a8be647a89a7dbfc2582a7489f3 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 15:58:10 -0400
Subject: [PATCH 35/46] Don't attest vlt packages also installed by URL

A vlt project could install the same package twice: from the registry
and from a git, remote-tarball or local-directory dependency (an lp2
alias pointing at left-pad's tarball URL, say). Only the registry copy
is patched, yet hosted and vendored runs reported the package as
patched, and `vex` attested it as not affected while `require('lp2')`
still loaded the unpatched code.

- `vex` no longer attests a vlt package from its lock pin or vendored
  directory when such a node of the same name exists, since vlt records
  no version for it. A remote tarball whose `<name>-<version>.tgz` leaf
  names another version does not count.
- Hosted mode still pins the registry copy but warns
  `redirect_vlt_custom_registry_skipped` and keeps the package out of
  the run's `--vex`.
- Vendored mode refuses the package, as it already refuses a copy from
  another registry.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/CLI_CONTRACT.md       |  4 +-
 .../src/patch/redirect/vlt.rs                 | 46 ++++++++-
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 42 +++++++-
 .../src/vendor/vlt_lock_text.rs               | 57 +++++++++++
 .../socket-patch-core/src/vex/discover/vlt.rs | 95 ++++++++++++++++++-
 .../expected-warnings.json                    |  4 +-
 .../vex-discover-golden/redirect-npm.json     |  4 +-
 7 files changed, 237 insertions(+), 15 deletions(-)

diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 5818240d..aec555b3 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -703,7 +703,7 @@ to **six flavors**.
 | npm / pnpm LEGACY (lockfileVersion 5.4 = pnpm 7, 6.0 = pnpm 8; flavor `pnpm-legacy`) | (same tarball) | root `package.json` `pnpm.overrides` **+** legacy lock surgery (overrides / root dep + specifiers / packages rekey to a bare `file:` key with recomputed integrity / in-package dep refs). **No `pnpm-workspace.yaml` is written** (pnpm ≤ 8 reads overrides only from package.json). The lock's SPECIFIER is machine-ABSOLUTE — pnpm ≤ 8 absolutizes `file:` overrides itself — surfaced as `vendor_pnpm_legacy_absolute_specifier`. Legacy WORKSPACE locks (`importers:`) refused | same-path `pnpm install --frozen-lockfile --offline`, cold store (byte-stable on pnpm 7.33.5 / 8.15.9). A checkout at a DIFFERENT path fails the frozen check (path-bound specifier) and must run `pnpm install --offline --no-frozen-lockfile` once (the flag matters on CI, where pnpm defaults frozen on), which installs the vendored tarball and re-resolves only the specifier line |
 | npm / bun (`bun.lock`, lockfileVersion 0, 1 or 2 — `vendor_lockfile_version_unsupported` otherwise) | (same tarball) | `bun.lock` only: the packages entry's registry 4-tuple → local 3-tuple with recomputed `sha512`; the entry's `{deps}` meta, the lock's version line and its line endings are preserved. A lock holding `workspace:` packages is refused `vendor_bun_workspace_unsupported` unless lockfileVersion is 2 — Bun 1.2–1.3 resolve a workspace member's local-tarball path relative to the MEMBER (ENOENT on our root-relative path), 1.4 relative to the lockfile, and a committed version-2 lock is the only proof every consumer runs Bun ≥ 1.4 (a deliberate over-approximation: a package declared only by the workspace root would install on version 1 too). The gate fires only on a run that would WRITE a new local tuple, so in-sync re-runs, `already_vendored` skips and `repair` rebuilds on such a lock pass. The detail names the version and the remedy: delete `bun.lock` and re-lock with Bun ≥ 1.4 (an in-place `bun install` keeps the existing lockfileVersion), or `--mode hosted`. Native binary support is described in the next row. `scan`/`get --mode vendored` apply all four refusals BEFORE downloading (see the `get --mode vendored` bullet). Bun 1.1.39–1.3.9 re-save the local tuple WITHOUT its `sha512` on any later lock re-save (`bun add`, `bun install` after a manifest change); the digest-less 2-tuple is recognised as the same wiring — an in-sync re-run stays `already_vendored` and re-pins the digest on disk (no new wiring record) when the committed artifact still holds the bytes the lock was written from — otherwise, as for any stale tuple of ours, the line is re-pinned and the fresh entry carries the new fingerprint — `repair` rebuilds through it, and `vendor --revert` / `rollback` restore the registry line over it (a 2-tuple at ANOTHER uuid is still `vendor_lock_entry_drifted`) | `bun install --frozen-lockfile`, cold cache (the local tarball's sha512 is enforced by Bun ≥ 1.3.10; 1.1.39–1.3.9 install it unverified — the committed artifact is the protection there) |
 | npm / bun binary (`bun.lockb`, native binary format 1, 2 or 3) | (same tarball) | Rewrite matching binary package resolutions and integrity in place; preserve topology and unrelated metadata, update binary offsets and the package metadata hash. Text `bun.lock` takes precedence. `bun_lockb_package` wiring snapshots recover pristine registry metadata for repair and support per-package revert and hosted ↔ vendored migration. Binary discovery and rewrites require no installed Bun runtime. Malformed or unsupported content refuses `vendor_bun_lockb_invalid` before download or takeover. | Frozen installs with the original compatible Bun reader; see `docs/testing/bun-compatibility.md` for the release matrix and historical runtime integrity limits. |
-| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. A node whose only extra is one peer context (`ṗ:N`, `peer.N`, `peer.<16 hex>`: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's) becomes a `file` node without the extra, as vlt writes `file:` dependencies, keeping its peer edges; revert restores the extra-bearing DepID. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), two or more instances of one `name@version` or a modifier extra, importer `peer` edges, foreign registries, a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile`; an optional dependency (or any dependency node_modules still links to its installed upstream copy) gets `vendor_vlt_reinstall_required` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical, also through a warm and a cold `vlt install --frozen-lockfile` (checked on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
+| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. A node whose only extra is one peer context (`ṗ:N`, `peer.N`, `peer.<16 hex>`: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's) becomes a `file` node without the extra, as vlt writes `file:` dependencies, keeping its peer edges; revert restores the extra-bearing DepID. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), two or more instances of one `name@version` or a modifier extra, importer `peer` edges, foreign registries, a git, remote-tarball or local-directory node of the same package name (vlt records no version for it), a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile`; an optional dependency (or any dependency node_modules still links to its installed upstream copy) gets `vendor_vlt_reinstall_required` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical, also through a warm and a cold `vlt install --frozen-lockfile` (checked on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
 | cargo | crate dir `<name>-<version>/` (no `.cargo-checksum.json`) | (v5.0) `[patch.crates-io]` path entry in the **workspace-root `Cargo.toml`** (the manifest beside the `Cargo.lock` it detaches — never `.cargo/config*`) **+** Cargo.lock surgery (the `[[package]]` entry's `source`/`checksum` removed and its `version` set to the copy's TAGGED version `<version>+socket.<uuid>` — `<core>+<meta>.socket.<uuid>` when the version already has build metadata — with every lock reference that spells the old version rewritten, formats v1–v4; the copy's own `Cargo.toml` version carries the same tag, so the patched crate sees it in `CARGO_PKG_VERSION`; revert restores the lock byte for byte). Key: always the Socket-owned `<name>-socket-<first 8 hex of the uuid>` with `package = "<name>"` (the full uuid hex when that key is taken), never the bare crate name — cargo lets a config-file `[patch]` item (project, ancestor directory or `$CARGO_HOME`) replace the manifest item with the same key whatever its version, so keys any of those configs use are avoided and a re-run moves an entry off a now-shadowed key; two versions of one crate are wired side by side. Pre-v5 wiring in `.cargo/config.toml` / `.cargo/config` is moved into `Cargo.toml` by a re-run (`vendor`, `scan`/`get --mode vendored`) or `repair` (`cargo_wiring_migrated` note; the ledger's `cargo_patch_entry` record then names `Cargo.toml`); a detached lock entry left unwired by the pre-v5 multi-version overwrite is re-wired the same way (`cargo_wiring_restored`); every revert removes both spellings | `cargo build --locked --offline` on a fresh checkout — single-version manifest `[patch]` also builds with no network on cargo older than 1.56 (the old config-file wiring's floor); two vendored versions of ONE crate need `--offline` on cargo 1.56 and a populated registry index (or network access) on older cargo such as 1.41, which loads the index to tell them apart. Note: path deps build **without** `--cap-lints allow` |
 | golang | module dir `<module>@<version>/` | `go.mod` `replace <module> <ver> => ./.socket/vendor/golang/<uuid>/<module>@<ver>` | `go build` with `GOPROXY=off` + empty `GOMODCACHE` (directory replaces bypass go.sum entirely; survives `go mod tidy`) |
 | composer | package dir `<vendor>/<name>@<version>/` | `composer.lock` only: entry's `dist` → `{type: "path", url, reference: null}`, `source` removed, `transport-options: {symlink: false}` added. `content-hash` unaffected; `composer.json` untouched | `composer install` (from the lock alone, real copy not symlink, works under `--network none`). `composer update <pkg>` reverts it |
@@ -1305,7 +1305,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_bun_entry_not_found` / `redirect_bun_missing_sha512` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (bun): the lock has no rewritable entry at the granted version (re-resolved, or occupied by an unowned URL/file spec) / the grant carries no sha512 integrity. Per-dep; nothing rewritten for it; exit 0. NOT emitted for the digest-less 2-tuple Bun 1.1.39–1.3.9 re-save our URL tuple as — that entry counts as redirected and is healed. |
 | `redirect_vlt_lock_unsupported` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` has a `lockfileVersion` other than absent, `0` or `1` (decided on the raw JSON token), is not a JSON object, starts with a UTF-8 BOM, or its `nodes` section is not vlt's one-node-per-line layout. Nothing rewritten; also refuses a vendored → hosted takeover of a `flavor: "vlt"` entry before its revert (`redirect.skipped[].reason`). Exit 0. |
 | `redirect_vlt_missing_sha512` / `redirect_vlt_entry_not_found` / `redirect_vlt_entry_vendored` / `redirect_vlt_unsupported_lock_key` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the grant has no sha512 / the lock has no default-registry node for `name@version` / the only match is a vendored `file` node under `.socket/vendor/npm/<uuid>/` / a default-registry instance is outside vlt's node-line grammar or still unpatched after the splice. Per dep; none of the dep's instances is written, and a refused dep is never confirmed, whichever lock drives. Exit 0. |
-| `redirect_vlt_custom_registry_skipped` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): same-`name@version` nodes under a named alias, a scoped registry or jsr were left untouched (hosted mode only redirects vlt's default registry). The dep is still redirected, but the run's `--vex` does not attest it. |
+| `redirect_vlt_custom_registry_skipped` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): same-`name@version` nodes under a named alias, a scoped registry or jsr, or git, remote-tarball or local-directory nodes of the same package name (vlt records no version for those; a remote tarball whose `<name>-<version>.tgz` leaf names another version does not count), were left untouched (hosted mode only redirects vlt's default registry). The dep is still redirected, but the run's `--vex` does not attest it, and neither does a later `vex` from the lock alone. |
 | `redirect_vlt_lockfile_version_missing` / `redirect_vlt_old_lockfile_ignored` / `redirect_vlt_scalar_registry_ignored` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the lock has no `lockfileVersion` (vlt ≥ 1.0.0-rc.15 re-resolves it) / a legacy default-registry id without `"modifiers"` in `vlt.json` (vlt 0.0.0-16 … 0.0.0-24 ignore the lock) / a scalar `registry` option that vlt 1.0.0-rc.7 … rc.29 honor over the lock. The deps stay redirected, but the run's `--vex` does not attest them. |
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index c6beebb9..8cf291d0 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -17,9 +17,10 @@ use crate::constants::npm_family::{
     BUN_LOCK, BUN_LOCKB, NPM_LOCKS, PNPM_LOCK, VLT_CONFIG, VLT_HIDDEN_LOCK_REL, VLT_LOCK,
 };
 use crate::vendor::vlt_lock_text::{
-    entry_text, is_default_registry, is_registry_url_segment, nodes_block, parse_node_entry_text,
-    parse_node_line, parse_vendored_path, render_entry_line, render_tuple_with_slots, sniff_lock,
-    split_dep_id, split_lines, DepIdKind, LockSniff, NodeEntry, ParsedLock, SectionSpan,
+    entry_text, installs_outside_registry, is_default_registry, is_registry_url_segment,
+    nodes_block, parse_node_entry_text, parse_node_line, parse_vendored_path, render_entry_line,
+    render_tuple_with_slots, sniff_lock, split_dep_id, split_lines, DepIdKind, LockSniff,
+    NodeEntry, ParsedLock, SectionSpan,
 };
 
 /// The ledger kind of a hosted vlt node splice.
@@ -375,6 +376,26 @@ fn rewrite_dep(
             ),
         });
     }
+    let outside: Vec<&str> = nodes
+        .iter()
+        .filter(|(id, tuple)| {
+            let slot1 = tuple.get(1).and_then(Value::as_str).unwrap_or_default();
+            split_dep_id(id)
+                .is_some_and(|dep_id| installs_outside_registry(&dep_id, slot1, &name, version))
+        })
+        .map(|(id, _)| id.as_str())
+        .collect();
+    if !outside.is_empty() {
+        result.vlt_foreign_uuids.insert(dep.patch_uuid.clone());
+        result.warnings.push(RewriteWarning {
+            code: "redirect_vlt_custom_registry_skipped".into(),
+            detail: format!(
+                "hosted mode only redirects registry packages; {} also install {name} from git, \
+                 a remote tarball or a local directory and stay unpatched (use agent mode)",
+                outside.join(", ")
+            ),
+        });
+    }
     let Some(sha512) = dep.integrity.sha512.as_deref().filter(|s| !s.is_empty()) else {
         result.warnings.push(RewriteWarning {
             code: "redirect_vlt_missing_sha512".into(),
@@ -968,6 +989,25 @@ mod tests {
         assert!(preflight_vlt_hosted(&files(&[(VLT_LOCK, &ok)])).is_ok());
     }
 
+    #[test]
+    fn a_git_remote_or_file_install_of_the_package_is_withheld() {
+        let remote = "\"remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz\": \
+                      [0,\"left-pad\",\"sha512-r\"]";
+        let lock = lock_with(&[remote, &registry_entry()]);
+        let result = rewrite(&lock, &[dep("left-pad", "1.3.0", Some(SHA))]);
+        assert_eq!(codes(&result), ["redirect_vlt_custom_registry_skipped"]);
+        assert!(result.warnings[0].detail.contains("remote~https_c++"));
+        assert!(result.vlt_foreign_uuids.contains("uuid-left-pad"));
+        assert!(result.confirmed_vlt_uuids.contains("uuid-left-pad"));
+        assert_eq!(result.edits.len(), 1);
+
+        let older = remote.replace("1.3.0.tgz", "1.2.0.tgz");
+        let lock = lock_with(&[&older, &registry_entry()]);
+        let result = rewrite(&lock, &[dep("left-pad", "1.3.0", Some(SHA))]);
+        assert!(result.warnings.is_empty(), "{:?}", result.warnings);
+        assert!(result.vlt_foreign_uuids.is_empty());
+    }
+
     #[test]
     fn missing_sha512_and_empty_sha512_refuse() {
         let lock = lock_with(&[&registry_entry()]);
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 48e3413a..f822beee 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -39,11 +39,12 @@ use super::state::{
     WiringRecord,
 };
 use super::vlt_lock_text::{
-    edges_block, entry_text, file_dep_id, is_default_registry, is_importer_dep_id,
-    is_registry_url_segment, nodes_block, parse_edge_entry_text, parse_edge_line,
-    parse_node_entry_text, parse_node_line, parse_vendored_dir_path, render_entry_line,
-    render_tuple_with_slots, sniff_lock, split_dep_id, split_lines, vendored_dir_rel, vlt_collate,
-    vlt_edge_cmp, DepIdEra, DepIdKind, LockSniff, ParsedLock, SectionSpan,
+    edges_block, entry_text, file_dep_id, installs_outside_registry, is_default_registry,
+    is_importer_dep_id, is_registry_url_segment, nodes_block, parse_edge_entry_text,
+    parse_edge_line, parse_node_entry_text, parse_node_line, parse_vendored_dir_path,
+    render_entry_line, render_tuple_with_slots, sniff_lock, split_dep_id, split_lines,
+    vendored_dir_rel, vlt_collate, vlt_edge_cmp, DepIdEra, DepIdKind, LockSniff, ParsedLock,
+    SectionSpan,
 };
 use super::{RevertOpts, RevertOutcome, VendorOutcome, VendorWarning};
 
@@ -407,10 +408,18 @@ fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refus
     let mut defaults = Vec::new();
     let mut foreign = Vec::new();
     let mut ours = Vec::new();
+    let mut outside = Vec::new();
     for (i, e) in doc.nodes.entries.iter().enumerate() {
         let Some(dep_id) = split_dep_id(&e.key) else {
             continue;
         };
+        let slot1 = parse_node_entry_text(&e.text()).and_then(|n| n.name());
+        if slot1
+            .as_deref()
+            .is_some_and(|slot1| installs_outside_registry(&dep_id, slot1, name, version))
+        {
+            outside.push(i);
+        }
         match dep_id.kind {
             DepIdKind::Registry if dep_id.registry_identity() == Some((name, version)) => {
                 if is_default_registry(&dep_id.first, options) {
@@ -444,6 +453,17 @@ fn find_target(doc: &LockDoc, name: &str, version: &str) -> Result<Target, Refus
             ),
         ));
     }
+    if let Some(&i) = outside.first() {
+        return Err((
+            UNSUPPORTED,
+            format!(
+                "vlt-lock.json also installs {name} from {}, a git, remote tarball or local \
+                 directory dependency that vendoring cannot rewire and whose version vlt does \
+                 not record; remove that dependency, or use agent mode",
+                key(i)
+            ),
+        ));
+    }
     let (index, is_ours) = match (defaults.as_slice(), ours.as_slice()) {
         ([(i, false)], []) => (*i, false),
         ([], [i]) => (*i, true),
@@ -2145,6 +2165,18 @@ mod tests {
                 UNSUPPORTED,
                 "not from vlt's default registry",
             ),
+            (
+                render(1, &[r#""remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz": [0,"left-pad","sha512-R=="]"#, REG_NODE], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#, r#""file~_d lp2": "prod https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "also installs left-pad from remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz",
+            ),
+            (
+                render(1, &[r#""git~github_cfoo+left-pad~v1.3.0": [0,"left-pad"]"#, REG_NODE], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#, r#""file~_d lp2": "prod github:foo/left-pad#v1.3.0 git~github_cfoo+left-pad~v1.3.0""#]),
+                ROOT_PKG,
+                UNSUPPORTED,
+                "a git, remote tarball or local directory dependency",
+            ),
             (
                 render(1, &[REG_NODE, url_node], &[r#""file~_d left-pad": "prod 1.3.0 ~npm~left-pad@1.3.0""#]),
                 ROOT_PKG,
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
index 3a4517da..e10e7c5f 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock_text.rs
@@ -353,6 +353,37 @@ pub(crate) fn registry_name_version(second: &str) -> Option<(&str, &str)> {
     (is_registry_package_name(name) && is_npm_semver(version)).then_some((name, version))
 }
 
+/// Whether a node with id `dep_id` and slot [1] `slot1` may install
+/// `name@version` from outside every registry and socket-patch's vendored
+/// dirs: a git, remote or user `file:` node of that name. Those ids carry
+/// no version, so any of them counts unless a remote tarball's
+/// `<name>-<version>.tgz` leaf names another version.
+pub(crate) fn installs_outside_registry(
+    dep_id: &DepId,
+    slot1: &str,
+    name: &str,
+    version: &str,
+) -> bool {
+    if slot1 != name {
+        return false;
+    }
+    match dep_id.kind {
+        DepIdKind::Git => true,
+        DepIdKind::File => !dep_id.first.starts_with(".socket/vendor/"),
+        DepIdKind::Remote => {
+            let path = dep_id.first.split(['?', '#']).next().unwrap_or_default();
+            let leaf = path.rsplit('/').next().unwrap_or_default();
+            let bare = name.rsplit('/').next().unwrap_or(name);
+            leaf.strip_prefix(bare)
+                .and_then(|rest| rest.strip_prefix('-'))
+                .and_then(|rest| rest.strip_suffix(".tgz"))
+                .filter(|v| is_npm_semver(v))
+                .is_none_or(|v| v == version)
+        }
+        DepIdKind::Registry | DepIdKind::Workspace => false,
+    }
+}
+
 /// The store decoder: `(full name, version)` of a `.vlt/<DepID>` entry,
 /// from any registry segment (the store holds every installed copy) and
 /// ignoring the extra. Git, remote, file, workspace and undecodable ids are
@@ -2503,4 +2534,30 @@ mod tests {
             ]
         );
     }
+
+    #[test]
+    fn nodes_that_install_a_package_outside_every_registry() {
+        let outside = |id: &str, slot1: &str| {
+            installs_outside_registry(&split_dep_id(id).unwrap(), slot1, "left-pad", "1.3.0")
+        };
+        assert!(outside("git~github_cfoo+left-pad~v1.3.0", "left-pad"));
+        assert!(outside("file~vendor+left-pad", "left-pad"));
+        assert!(outside(
+            "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz",
+            "left-pad"
+        ));
+        assert!(outside("remote~https_c++example.test+lp.tgz", "left-pad"));
+        assert!(!outside(
+            "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz",
+            "left-pad"
+        ));
+        assert!(!outside("git~github_cfoo+right-pad~v1.3.0", "right-pad"));
+        assert!(!outside(
+            "file~.socket+vendor+npm+u+left-pad-1.3.0+node__modules+left-pad",
+            "left-pad"
+        ));
+        assert!(!outside("~npm~left-pad@1.3.0", "left-pad"));
+        assert!(!outside("~acme~left-pad@1.3.0", "left-pad"));
+        assert!(!outside("workspace~packages+left-pad", "left-pad"));
+    }
 }
diff --git a/crates/socket-patch-core/src/vex/discover/vlt.rs b/crates/socket-patch-core/src/vex/discover/vlt.rs
index ebbb4477..9dd8712c 100644
--- a/crates/socket-patch-core/src/vex/discover/vlt.rs
+++ b/crates/socket-patch-core/src/vex/discover/vlt.rs
@@ -44,6 +44,10 @@
 //! * a vendored ref beside it is diagnosed ([`DIAG_REF_UNATTRIBUTABLE`])
 //!   and not emitted, since only the committed directory would be hashed.
 //!
+//! A git, remote or user `file:` node whose slot [1] names the package
+//! counts the same way (no writer rewires it, and its id records no
+//! version), unless a remote tarball's leaf names another version.
+//!
 //! Every other registry instance is evidence against another lock's wiring
 //! of the same package ([`Discovery::resolved_elsewhere`]).
 //!
@@ -71,7 +75,7 @@ use crate::utils::digest::is_sri_pin;
 use crate::utils::purl::percent_decode_purl_component;
 use crate::vendor::lock_inventory::vlt::{vlt_lock_model, VltLockNode};
 use crate::vendor::lock_inventory::LockIntegrity;
-use crate::vendor::vlt_lock_text::{parse_vendored_path, DepIdKind};
+use crate::vendor::vlt_lock_text::{installs_outside_registry, parse_vendored_path, DepIdKind};
 
 pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
     let Some(text) = ctx.read_text(VLT_LOCK, out).await else {
@@ -99,7 +103,25 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
             _ => None,
         })
         .collect();
+    // A git, remote or user `file:` node of the same package installs bytes
+    // no Socket writer rewires, and its id records no version.
+    let outside = |name: &str, version: &str| {
+        lock.nodes
+            .iter()
+            .find(|n| installs_outside_registry(&n.dep_id, &n.name, name, version))
+            .map(|n| n.key.as_str())
+    };
     for (node, found) in lock.nodes.iter().zip(&classified) {
+        let outside_source = match found {
+            Classified::Hosted { .. } => node
+                .dep_id
+                .registry_identity()
+                .and_then(|(name, version)| outside(name, version)),
+            Classified::Vendored { path, .. } => {
+                parse_vendored_path(path, &node.name).and_then(|p| outside(&p.name, &p.version))
+            }
+            _ => None,
+        };
         match found {
             Classified::Registry(purl) => out.resolved_elsewhere(VLT_LOCK, Some(purl.clone())),
             Classified::Hosted {
@@ -108,7 +130,7 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                 url,
                 integrity,
             } => {
-                let pin = (!unattested.contains(purl.as_str()))
+                let pin = (!unattested.contains(purl.as_str()) && outside_source.is_none())
                     .then(|| LockIntegrity::Sri(integrity.clone()));
                 out.push(PatchedRef::hosted(
                     purl.clone(),
@@ -134,6 +156,20 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                     ),
                 );
             }
+            Classified::Vendored { purl, path } if outside_source.is_some() => {
+                out.diag(
+                    DIAG_REF_UNATTRIBUTABLE,
+                    VLT_LOCK,
+                    format!(
+                        "{VLT_LOCK}: {}: {purl} is wired to {path}, but {} also installs the \
+                         package from outside the registry, and vlt records no version for it, \
+                         so the vendored patch is not attested; remove the dependents that \
+                         resolve that node",
+                        node.key,
+                        outside_source.unwrap_or_default()
+                    ),
+                );
+            }
             Classified::Vendored { purl, path } => {
                 if let Some(vref) = vendor_ref(path) {
                     out.push(PatchedRef::vendored(purl.clone(), &vref, VLT_LOCK, None));
@@ -780,6 +816,61 @@ mod tests {
         assert_refs(&out, &[(PURL, UUID_B, WiringMode::Vendored)]);
     }
 
+    #[tokio::test]
+    async fn a_git_remote_or_file_node_of_the_package_withholds_the_lock_basis() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        let path = dir_path(UUID_B);
+        let remote = "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.3.0.tgz";
+        for other in [
+            node(remote, "left-pad", Some(UPSTREAM), None),
+            node("git~github_cfoo+left-pad~v1.3.0", "left-pad", None, None),
+            node(
+                "file~vendor+left-pad",
+                "left-pad",
+                None,
+                Some("vendor/left-pad"),
+            ),
+        ] {
+            let out = discover(&lock(
+                Some(1),
+                &[
+                    node("~npm~left-pad@1.3.0", "left-pad", Some(SRI), Some(&hosted)),
+                    other.clone(),
+                ],
+            ))
+            .await;
+            assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+            assert_eq!(out.refs[0].locked_integrity, None, "{other}");
+            assert!(!out.refs[0].lockfile_basis_ok(), "{other}");
+
+            let out = discover(&lock(
+                Some(1),
+                &[
+                    node(&file_id(&path), "left-pad", None, Some(&path)),
+                    other.clone(),
+                ],
+            ))
+            .await;
+            assert!(out.refs.is_empty(), "{other}: {:?}", out.refs);
+            assert_eq!(diag_codes(&out), vec![DIAG_REF_UNATTRIBUTABLE], "{other}");
+        }
+
+        let older = "remote~https_c++registry.npmjs.org+left-pad+-+left-pad-1.2.0.tgz";
+        let out = discover(&lock(
+            Some(1),
+            &[
+                node("~npm~left-pad@1.3.0", "left-pad", Some(SRI), Some(&hosted)),
+                node(older, "left-pad", Some(UPSTREAM), None),
+                node("git~github_cfoo+right-pad~v1.3.0", "right-pad", None, None),
+            ],
+        ))
+        .await;
+        assert_eq!(
+            out.refs[0].locked_integrity,
+            Some(LockIntegrity::Sri(SRI.into()))
+        );
+    }
+
     #[tokio::test]
     async fn a_diagnosed_same_version_instance_withholds_the_lock_basis() {
         let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
diff --git a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
index fe51488c..dfc8880b 100644
--- a/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
+++ b/crates/socket-patch-core/tests/fixtures/redirect/npm/vlt/remote-file-git-untouched/expected-warnings.json
@@ -1 +1,3 @@
-[]
+[
+  "redirect_vlt_custom_registry_skipped"
+]
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 799f0596..4348e5f3 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -5412,10 +5412,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       }
     ],
     "diagnostics": [],

From c163142348194bc1a4d314e4918ffc98955c1133 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 16:00:03 -0400
Subject: [PATCH 36/46] Warn when a vlt re-vendor strands node_modules

Vendoring a new patch over an installed, already vendored vlt package
removes the old patch's directory, but node_modules still linked into
it, so `require()` failed until the next `vlt install`. The run
reported success with no advisory. It now emits
`vendor_vlt_reinstall_required` naming the links into the replaced
directory and asking for `vlt install` (or `vlt ci`).

Assisted-by: Claude Code:claude-opus-5-5
---
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 120 ++++++++++++++----
 1 file changed, 98 insertions(+), 22 deletions(-)

diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index f822beee..621dea8e 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -17,7 +17,7 @@
 
 use std::cmp::Ordering;
 use std::collections::{BTreeMap, BTreeSet};
-use std::path::Path;
+use std::path::{Path, PathBuf};
 
 use serde_json::Value;
 
@@ -1054,13 +1054,9 @@ async fn stale_links<'t>(project_root: &Path, target: &'t Target) -> Vec<&'t Imp
     };
     let mut stale = Vec::new();
     for edge in &target.importers {
-        let link = project_root
-            .join(&edge.dir)
-            .join("node_modules")
-            .join(&edge.dep);
-        if tokio::fs::canonicalize(&link)
+        if importer_link_target(project_root, edge)
             .await
-            .is_ok_and(|real| real.starts_with(&store))
+            .is_some_and(|real| real.starts_with(&store))
         {
             stale.push(edge);
         }
@@ -1068,6 +1064,56 @@ async fn stale_links<'t>(project_root: &Path, target: &'t Target) -> Vec<&'t Imp
     stale
 }
 
+async fn importer_link_target(project_root: &Path, edge: &ImporterEdge) -> Option<PathBuf> {
+    let link = project_root
+        .join(&edge.dir)
+        .join("node_modules")
+        .join(&edge.dep);
+    tokio::fs::canonicalize(&link).await.ok()
+}
+
+/// Importer links that resolve into another uuid's vendored dir, which a
+/// re-vendor to `uuid` removes: they dangle until vlt relinks them.
+async fn superseded_links<'t>(
+    project_root: &Path,
+    target: &'t Target,
+    uuid: &str,
+) -> Vec<&'t ImporterEdge> {
+    let Some(vendor_npm) = super::path::vendor_uuid_dir_rel("npm", uuid)
+        .and_then(|rel| Path::new(&rel).parent().map(Path::to_path_buf))
+    else {
+        return Vec::new();
+    };
+    let Ok(vendor_npm) = tokio::fs::canonicalize(project_root.join(vendor_npm)).await else {
+        return Vec::new();
+    };
+    let current = vendor_npm.join(uuid);
+    let mut superseded = Vec::new();
+    for edge in &target.importers {
+        if importer_link_target(project_root, edge)
+            .await
+            .is_some_and(|real| real.starts_with(&vendor_npm) && !real.starts_with(&current))
+        {
+            superseded.push(edge);
+        }
+    }
+    superseded
+}
+
+fn link_names(edges: &[&ImporterEdge]) -> String {
+    edges
+        .iter()
+        .map(|e| {
+            if e.dir.is_empty() {
+                format!("node_modules/{}", e.dep)
+            } else {
+                format!("{}/node_modules/{}", e.dir, e.dep)
+            }
+        })
+        .collect::<Vec<String>>()
+        .join(", ")
+}
+
 /// `vendor_vlt_reinstall_required`: from 0.0.0-30 a plain `vlt install`
 /// keeps an installed optional dependency whose spec moved to a `file:`
 /// dir, so every rewired or still-stale optional edge needs `vlt ci`; a
@@ -1076,12 +1122,15 @@ async fn reinstall_advisory(
     project_root: &Path,
     name: &str,
     version: &str,
+    uuid: &str,
     target: &Target,
     rewired: bool,
 ) -> Option<VendorWarning> {
     let stale = stale_links(project_root, target).await;
+    let superseded = superseded_links(project_root, target, uuid).await;
     let optional = target.importers.iter().any(|e| {
-        e.edge_type == "optional" && (rewired || stale.iter().any(|s| s.index == e.index))
+        e.edge_type == "optional"
+            && (rewired || stale.iter().chain(&superseded).any(|s| s.index == e.index))
     });
     if optional {
         return Some(VendorWarning::new(
@@ -1096,25 +1145,28 @@ async fn reinstall_advisory(
             ),
         ));
     }
-    if stale.is_empty() {
+    let mut details = Vec::new();
+    if !stale.is_empty() {
+        details.push(format!(
+            "{} still links {name}@{version} to its installed upstream copy",
+            link_names(&stale)
+        ));
+    }
+    if !superseded.is_empty() {
+        details.push(format!(
+            "{} links {name}@{version} to the vendored dir of the patch this one replaces, \
+             which is removed, so requiring it fails",
+            link_names(&superseded)
+        ));
+    }
+    if details.is_empty() {
         return None;
     }
-    let links: Vec<String> = stale
-        .iter()
-        .map(|e| {
-            if e.dir.is_empty() {
-                format!("node_modules/{}", e.dep)
-            } else {
-                format!("{}/node_modules/{}", e.dir, e.dep)
-            }
-        })
-        .collect();
     Some(VendorWarning::new(
         REINSTALL_REQUIRED,
         format!(
-            "{} still links {name}@{version} to its installed upstream copy; run `vlt install` \
-             (or `vlt ci`) to link the vendored copy",
-            links.join(", ")
+            "{}; run `vlt install` (or `vlt ci`) to link the vendored copy",
+            details.join("; ")
         ),
     ))
 }
@@ -1163,6 +1215,7 @@ pub(crate) async fn vendor_vlt(
         project_root,
         name,
         version,
+        &record.uuid,
         &analysis.target,
         wiring.is_some(),
     )
@@ -2793,6 +2846,29 @@ mod tests {
         assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
     }
 
+    #[tokio::test]
+    async fn a_new_uuid_warns_about_links_into_the_replaced_dir() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        link(
+            &fx.root.join(&first.artifact.path),
+            &fx.root.join("node_modules/left-pad"),
+        );
+        let (_, warnings) = entry_of(run(&fx, UUID2, false).await);
+        let advisory: Vec<&VendorWarning> = warnings
+            .iter()
+            .filter(|w| w.code == REINSTALL_REQUIRED)
+            .collect();
+        assert_eq!(advisory.len(), 1, "{warnings:?}");
+        assert_eq!(
+            advisory[0].detail,
+            "node_modules/left-pad links left-pad@1.3.0 to the vendored dir of the patch this \
+             one replaces, which is removed, so requiring it fails; run `vlt install` (or `vlt \
+             ci`) to link the vendored copy"
+        );
+    }
+
     #[tokio::test]
     async fn uuid_metadata_is_restored_for_the_entry() {
         let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;

From 1c99a8ab87f9e05c015e7b0647535b1951d760de Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 16:05:39 -0400
Subject: [PATCH 37/46] Keep vlt's dependency links through repair

`repair` moved a corrupt vlt payload aside, rebuilt it, then deleted
the old copy, and vlt's links to the package's own dependencies went
with it: `require('debug')` failed with "Cannot find module 'ms'" while
repair reported success with no warning. Repair now moves those links
back into the rebuilt payload when they are only links.

When a rebuild cannot keep them (the old `node_modules/` held planted
files), vendor and repair emit `vendor_vlt_reinstall_required` asking
for `vlt ci`. The old hint said `vlt install`, which does not re-link
them on any tested vlt release.

The contract and coverage map also document the advisory for links
into the directory a re-vendor replaces.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/CLI_CONTRACT.md       |   2 +-
 .../src/commands/repair_vendor.rs             |   5 +
 .../tests/e2e_vendor_vlt_build.rs             |  19 +++
 .../socket-patch-core/src/vendor/npm_dir.rs   |   2 +-
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 119 ++++++++++++++++--
 docs/testing/vlt-coverage.json                |   8 ++
 6 files changed, 142 insertions(+), 13 deletions(-)

diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index aec555b3..1b9d4eac 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -1269,7 +1269,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
 | `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
 | `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
-| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
+| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency; (c) an importer's link resolves into the vendored dir of the patch this run replaces (a new patch uuid), which the run removes: the detail names the links and says `vlt install` (or `vlt ci`) links the new vendored copy; (d) a rebuild of the payload (vendor, or `repair` after a corrupt or missing payload) could not keep vlt's links to the package's own dependencies (its old `node_modules/` held more than links): the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`), since a plain `vlt install` does not re-link them. `repair` moves those links back into the rebuilt payload when they are only links. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
 | `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
 | `vendor_artifact_gitignored` | `failed` | vendor (vlt): inside a git work tree, `git check-ignore --no-index` reports the new artifact's uuid directory as ignored by a rule its own `.gitignore` cannot override (such as a root `.socket/` rule; the detail names the rule). Remedy: drop that rule for `.socket/vendor/`. Refused before any write. |
 | `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
diff --git a/crates/socket-patch-cli/src/commands/repair_vendor.rs b/crates/socket-patch-cli/src/commands/repair_vendor.rs
index 0944f81e..bb1411ce 100644
--- a/crates/socket-patch-cli/src/commands/repair_vendor.rs
+++ b/crates/socket-patch-cli/src/commands/repair_vendor.rs
@@ -1601,6 +1601,11 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                 // condemned bytes now (post-verify failures below keep
                 // their existing nothing-kept contract).
                 if let Some((_, kept)) = &aside {
+                    if let Some(w) =
+                        vendor::vlt_lock::keep_vlt_links(&c.entry, kept, &common.cwd).await
+                    {
+                        record_warning(env, &c.purl, &w, common);
+                    }
                     let _ = remove_tree(kept).await;
                 }
                 for w in &warnings {
diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index 7dc50904..ede961f4 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -782,6 +782,25 @@ async fn vlt_pinned_matrix_vendored_dep_with_deps() {
         !tracked.contains(&format!("{}/node_modules/", rel(&t))),
         "{tracked}"
     );
+    // A stray edit condemns the payload; the rebuild keeps vlt's links.
+    let readme = fx.proj.join(rel(&t)).join("README.md");
+    let mut text = std::fs::read_to_string(&readme).unwrap();
+    text.push_str("\nstray\n");
+    write(&readme, &text);
+    let out = repair(&fx);
+    assert_eq!(out.code, 0, "{out}");
+    assert!(inner.join("ms").exists(), "repair keeps vlt's links: {out}");
+    let loaded = std::process::Command::new("node")
+        .args(["-e", "require('debug')"])
+        .current_dir(&fx.proj)
+        .output()
+        .unwrap();
+    assert_ok(&loaded, "require('debug') after repair");
+    assert_eq!(std::fs::read_to_string(&readme).unwrap(), {
+        let mut t = text.clone();
+        t.truncate(t.len() - "\nstray\n".len());
+        t
+    });
     let co = fx.leg.root.join("clone");
     git_ok(
         &fx.leg.root,
diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
index 1904aab8..50c8cafa 100644
--- a/crates/socket-patch-core/src/vendor/npm_dir.rs
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -62,7 +62,7 @@ pub(super) struct NpmStagedDir {
     /// The committed dir passed the reuse check; nothing was written.
     pub reused: bool,
     /// A rebuild discarded the old dir's `node_modules/` (it held more
-    /// than vlt's links), so the package needs `vlt install` to re-link.
+    /// than vlt's links), so the package needs `vlt ci` to re-link.
     pub links_dropped: bool,
 }
 
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 621dea8e..dd5c976b 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -1171,6 +1171,57 @@ async fn reinstall_advisory(
     ))
 }
 
+/// `vendor_vlt_reinstall_required` for a rebuilt dir that lost vlt's
+/// links to its dependencies. A plain `vlt install` does not put them back
+/// (measured on rc.14 through 1.2.0); `vlt ci` does.
+fn links_dropped_warning(name: &str, version: &str) -> VendorWarning {
+    VendorWarning::new(
+        REINSTALL_REQUIRED,
+        format!(
+            "the rebuilt vendored dir for {name}@{version} has none of vlt's links to its \
+             dependencies (its old node_modules/ held more than those links and was \
+             discarded), so requiring them fails; run `vlt ci` (or delete node_modules and run \
+             `vlt install`) to re-link them, as a plain `vlt install` does not"
+        ),
+    )
+}
+
+/// Repair's set-aside moves a whole uuid dir away before the rebuild, vlt's
+/// links to the package's dependencies (`<dir>/node_modules/`) included.
+/// After a successful rebuild at `project_root`, move them back from
+/// `kept_uuid_dir` when they are only links; otherwise the rebuilt dir has
+/// none, and the returned advisory says how to re-link them.
+pub async fn keep_vlt_links(
+    entry: &VendorEntry,
+    kept_uuid_dir: &Path,
+    project_root: &Path,
+) -> Option<VendorWarning> {
+    if entry.flavor.as_deref() != Some(FLAVOR) {
+        return None;
+    }
+    let uuid_rel = super::path::vendor_uuid_dir_rel("npm", &entry.uuid)?;
+    let within = entry
+        .artifact
+        .path
+        .strip_prefix(uuid_rel.as_str())?
+        .strip_prefix('/')?;
+    if !is_safe_multi_segment(within) {
+        return None;
+    }
+    let kept_rel = kept_uuid_dir.join(within);
+    let old_links = kept_rel.join("node_modules");
+    tokio::fs::symlink_metadata(&old_links).await.ok()?;
+    let live_links = project_root.join(&entry.artifact.path).join("node_modules");
+    let (name, version) = super::npm_common::parse_npm_purl(&entry.base_purl).unwrap_or_default();
+    if tokio::fs::symlink_metadata(&live_links).await.is_ok()
+        || !super::npm_dir::node_modules_holds_only_links(&kept_rel).await
+        || tokio::fs::rename(&old_links, &live_links).await.is_err()
+    {
+        return Some(links_dropped_warning(&name, &version));
+    }
+    None
+}
+
 /// Vendor one installed npm package into a vlt project (see the module
 /// doc). Same contract as the other npm backends: refuse-early / wire-last,
 /// `entry` present iff `result.success` and not a dry run, and an in-sync
@@ -1243,6 +1294,9 @@ pub(crate) async fn vendor_vlt(
     let Some(staged) = staged else {
         return done(result, None, warnings);
     };
+    if staged.links_dropped {
+        warnings.push(links_dropped_warning(name, version));
+    }
     if staged.staged_pkg_json.is_some() {
         warnings.push(VendorWarning::new(
             "vendor_dep_manifest_stale",
@@ -1288,17 +1342,11 @@ pub(crate) async fn vendor_vlt(
                 warnings,
             );
         }
-        let relink = if staged.links_dropped {
-            "; its node_modules/ held more than vlt's dependency links and was discarded, so \
-             run `vlt install` to re-link its dependencies"
-        } else {
-            ""
-        };
         warnings.push(VendorWarning::new(
             "vendor_artifact_rebuilt",
             format!(
                 "the committed vendored dir for {name}@{version} was missing or stale; rebuilt \
-                 at {} (vlt-lock.json and package.json untouched){relink}",
+                 at {} (vlt-lock.json and package.json untouched)",
                 staged.rel_dir
             ),
         ));
@@ -3635,14 +3683,63 @@ mod tests {
             .unwrap();
         let (_, entry, warnings) = done_parts(run(&fx, UUID, false).await);
         assert!(entry.is_some());
-        assert_eq!(codes(&warnings), ["vendor_artifact_rebuilt"]);
-        assert!(
-            warnings[0].detail.contains("run `vlt install`"),
-            "{warnings:?}"
+        assert_eq!(
+            codes(&warnings),
+            [REINSTALL_REQUIRED, "vendor_artifact_rebuilt"]
         );
+        assert!(warnings[0].detail.contains("run `vlt ci`"), "{warnings:?}");
+        assert!(!warnings[1].detail.contains("vlt install"), "{warnings:?}");
         assert!(!links.exists());
     }
 
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn repair_moves_vlt_links_back_from_the_set_aside_dir() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (first, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &first).await;
+        let live = uuid_dir(&fx, UUID);
+        let kept = live.with_file_name(format!("{UUID}.pre-rebuild"));
+        let within = first
+            .artifact
+            .path
+            .strip_prefix(&format!(".socket/vendor/npm/{UUID}/"))
+            .unwrap()
+            .to_string();
+        let target = "../../../../../../../../node_modules/.vlt/z";
+        let plant = |planted: bool| {
+            let links = kept.join(&within).join("node_modules");
+            std::fs::create_dir_all(links.join(".bin")).unwrap();
+            std::os::unix::fs::symlink(target, links.join("z")).unwrap();
+            if planted {
+                std::fs::write(links.join("planted.js"), b"x").unwrap();
+            }
+        };
+
+        plant(false);
+        assert_eq!(keep_vlt_links(&first, &kept, &fx.root).await, None);
+        let live_links = fx.root.join(&first.artifact.path).join("node_modules");
+        assert_eq!(
+            std::fs::read_link(live_links.join("z")).unwrap(),
+            std::path::Path::new(target)
+        );
+        assert!(!kept.join(&within).join("node_modules").exists());
+
+        std::fs::remove_dir_all(&live_links).unwrap();
+        plant(true);
+        let warning = keep_vlt_links(&first, &kept, &fx.root).await.unwrap();
+        assert_eq!(warning.code, REINSTALL_REQUIRED);
+        assert!(warning.detail.contains("run `vlt ci`"), "{warning:?}");
+        assert!(!live_links.exists());
+
+        std::fs::remove_dir_all(&kept).unwrap();
+        assert_eq!(keep_vlt_links(&first, &kept, &fx.root).await, None);
+        let mut npm = first.clone();
+        npm.flavor = None;
+        plant(false);
+        assert_eq!(keep_vlt_links(&npm, &kept, &fx.root).await, None);
+    }
+
     #[tokio::test]
     async fn an_in_sync_rerun_restores_the_uuid_metadata() {
         let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
diff --git a/docs/testing/vlt-coverage.json b/docs/testing/vlt-coverage.json
index f80d3e8c..27daf119 100644
--- a/docs/testing/vlt-coverage.json
+++ b/docs/testing/vlt-coverage.json
@@ -169,6 +169,14 @@
       "the_reinstall_advisory_follows_dry_runs_members_and_failed_patches",
       "vendor_vlt_stale_prod_link_asks_for_a_reinstall"
     ],
+    "vendor_vlt_reinstall_required: a link still into the vendored dir of the patch a re-vendor replaces": [
+      "a_new_uuid_warns_about_links_into_the_replaced_dir"
+    ],
+    "vendor_vlt_reinstall_required: a rebuild could not keep vlt's links inside the payload (vendor, repair)": [
+      "a_rebuild_keeps_vlt_links_and_says_to_reinstall_when_it_cannot",
+      "repair_moves_vlt_links_back_from_the_set_aside_dir",
+      "vlt_pinned_matrix_vendored_dep_with_deps"
+    ],
     "vendor_vlt_reinstall_required: revert of an optional dependency (vendor --revert, vendored to hosted takeover)": [
       "a_revert_asks_for_a_reinstall_while_a_link_or_an_optional_spec_moves_back",
       "vendor_vlt_revert_asks_for_a_reinstall_of_a_linked_vendored_copy",

From 16272f48e1232ae9ff8b7b859e05b3b089ac0b83 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 16:07:32 -0400
Subject: [PATCH 38/46] Give repair a vlt remedy that works

After `.socket/vendor/state.json` is lost in a vendored vlt project,
repair restores the entry without a file fingerprint and told the user
to run `socket-patch vendor` to record one. That run always refused:
the rewired lock no longer holds a registry resolution and the only
installed copy is the vendored dir. For vlt entries the advice now
reads: restore the registry version spec in package.json, run
`vlt install`, then run `socket-patch vendor`, which re-vendors the
package and records the fingerprint (checked with vlt 1.2.0).

Assisted-by: Claude Code:claude-opus-5-5
---
 .../src/commands/repair_vendor.rs             | 22 +++++++++++++------
 .../tests/in_process_vendor/vlt.rs            | 12 ++++++++++
 2 files changed, 27 insertions(+), 7 deletions(-)

diff --git a/crates/socket-patch-cli/src/commands/repair_vendor.rs b/crates/socket-patch-cli/src/commands/repair_vendor.rs
index bb1411ce..24d4570b 100644
--- a/crates/socket-patch-cli/src/commands/repair_vendor.rs
+++ b/crates/socket-patch-cli/src/commands/repair_vendor.rs
@@ -427,9 +427,18 @@ fn soft_restore_without_fingerprint(
     env: &mut Envelope,
     common: &GlobalArgs,
     purl: &str,
-    artifact_path: &str,
+    entry: &VendorEntry,
     why: &str,
 ) {
+    let artifact_path = entry.artifact.path.as_str();
+    // A vlt lock rewired to the vendored dir keeps no registry resolution,
+    // so `vendor` alone has no pristine copy to re-vendor from.
+    let remedy = if entry.flavor.as_deref() == Some(vendor::vlt_lock::FLAVOR) {
+        "restore the registry version spec in the package.json files that name the vendored \
+         dir, run `vlt install`, then run `socket-patch vendor` to re-vendor and record one"
+    } else {
+        "run `socket-patch vendor` to re-vendor and record one"
+    };
     record_warning(
         env,
         purl,
@@ -438,8 +447,7 @@ fn soft_restore_without_fingerprint(
             format!(
                 "the ledger entry was reconstructed but its artifact has no independent \
                  integrity anchor and {why}; the entry was restored without a whole-file \
-                 fingerprint (only the patched members were verified) — run `socket-patch \
-                 vendor` to re-vendor and record one"
+                 fingerprint (only the patched members were verified) — {remedy}"
             ),
         ),
         common,
@@ -1262,7 +1270,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                         env,
                         common,
                         &c.purl,
-                        &c.entry.artifact.path,
+                        &c.entry,
                         "its patch content has no local source to rebuild from",
                     );
                     rebuilt += 1;
@@ -1345,7 +1353,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                     env,
                     common,
                     &c.purl,
-                    &c.entry.artifact.path,
+                    &c.entry,
                     "the package is not installed and --offline prevents fetching a \
                      pristine copy to rebuild from",
                 );
@@ -1418,7 +1426,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                         env,
                         common,
                         &c.purl,
-                        &c.entry.artifact.path,
+                        &c.entry,
                         "no verifiable pristine source exists to rebuild from (the package \
                          is not installed, the lockfile is rewired to the vendored artifact, \
                          and the reconstructed entry records no recoverable registry \
@@ -1456,7 +1464,7 @@ pub(crate) async fn repair_vendored_artifacts_with_references(
                         env,
                         common,
                         &c.purl,
-                        &c.entry.artifact.path,
+                        &c.entry,
                         &format!("the pristine fetch failed ({detail})"),
                     );
                     rebuilt += 1;
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
index 349a034a..cb62fdf1 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -935,6 +935,18 @@ fn vendor_vlt_linked_install_without_a_ledger_entry_points_at_repair() {
     let cwd = root.to_str().unwrap().to_string();
     let (code, env, _) = socket(root, &["repair", "--json", "--offline", "--cwd", &cwd], &[]);
     assert_eq!(code, 0, "{env:#}");
+    let unverified = events(&env)
+        .into_iter()
+        .find(|e| e["errorCode"] == "vendor_inventory_unverified")
+        .unwrap_or_else(|| panic!("{env:#}"));
+    assert!(
+        unverified["reason"].as_str().unwrap().ends_with(
+            "restore the registry version spec in the package.json files that name the \
+             vendored dir, run `vlt install`, then run `socket-patch vendor` to re-vendor and \
+             record one"
+        ),
+        "{unverified:#}"
+    );
     let entry = ledger_entry(root, PURL);
     assert_eq!(entry["flavor"], "vlt", "{env:#}");
     assert_eq!(entry["uuid"], UUID, "{env:#}");

From 9350fd0203c099dfdb9f0ec0c65f6f3f575017c3 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 16:11:08 -0400
Subject: [PATCH 39/46] Point vlt at vlt update for patched manifests

When a vendored vlt patch changes package.json dependencies,
`vendor_dep_manifest_stale` said `vlt install` would re-resolve them.
It never does: vlt installs the vendored node's recorded edges, so a
dependency the patch adds stayed uninstalled through `vlt install` and
`vlt ci`. The advisory now names `vlt update`, the command that
re-resolves them, and says it resolves the whole project.

After such an update, `vendor --revert` left the edges vlt had added
from the vendored node in the lock, pointing from a node that no
longer existed. Revert now drops them, along with nodes only those
edges kept, so the reverted lock matches the pre-vendor one and stays
byte-stable through `vlt ci` (checked with vlt 1.2.0).

Assisted-by: Claude Code:claude-opus-5-5
---
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 99 ++++++++++++++++++-
 1 file changed, 96 insertions(+), 3 deletions(-)

diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index dd5c976b..8b07938e 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -1302,8 +1302,9 @@ pub(crate) async fn vendor_vlt(
             "vendor_dep_manifest_stale",
             format!(
                 "the patch rewrites {name}@{version}'s package.json; vlt-lock.json keeps the \
-                 node's recorded dependency edges — if the patch changed dependency ranges, run \
-                 `vlt install` to re-resolve them"
+                 node's recorded dependency edges, and `vlt install` and `vlt ci` install from \
+                 them — if the patch changed dependency ranges, run `vlt update` to re-resolve \
+                 them (it resolves every dependency of the project from scratch)"
             ),
         ));
     }
@@ -1890,6 +1891,9 @@ pub async fn revert_vlt_opts(
             outcome.keep_artifact(&uuid_dir_rel);
             return outcome;
         }
+        if let Some(staged) = staged.as_mut() {
+            drop_unrecorded_file_edges(staged, entry);
+        }
         let new_lock = match (doc.as_ref(), staged) {
             (Some(doc), Some(staged)) => Some(render_restored(doc, staged)),
             _ => None,
@@ -1934,6 +1938,50 @@ pub async fn revert_vlt_opts(
     outcome
 }
 
+/// Edges vlt added from the vendored `file` node after vendoring (a `vlt
+/// update` resolving a dependency the patch added) have no wiring record
+/// and would dangle from the node the revert removes: drop them, and every
+/// node that only they kept in the lock.
+fn drop_unrecorded_file_edges(staged: &mut Staged, entry: &VendorEntry) {
+    let live = |staged: &Staged, id: &str| {
+        staged
+            .nodes
+            .iter()
+            .enumerate()
+            .any(|(i, e)| e.key == id && !staged.merged_nodes.contains(&i))
+    };
+    let mut gone: Vec<String> = entry
+        .wiring
+        .iter()
+        .filter(|r| r.kind == KIND_LOCK_NODE)
+        .filter_map(|r| fragment(&r.new).and_then(parse_node_entry_text))
+        .map(|n| n.key.to_string())
+        .filter(|id| !live(staged, id))
+        .collect();
+    let target_of = |e: &Entry| parse_edge_entry_text(&e.text()).map(|x| x.target().to_string());
+    while let Some(id) = gone.pop() {
+        let mut targets = Vec::new();
+        for (i, e) in staged.edges.iter().enumerate() {
+            if e.edge_from() == id && staged.merged_edges.insert(i) {
+                targets.extend(target_of(e));
+            }
+        }
+        for target in targets {
+            let referenced = staged.edges.iter().enumerate().any(|(i, e)| {
+                !staged.merged_edges.contains(&i) && target_of(e).as_deref() == Some(&target)
+            });
+            if referenced {
+                continue;
+            }
+            if let Some(i) = staged.nodes.iter().position(|e| e.key == target) {
+                if staged.merged_nodes.insert(i) {
+                    gone.push(target);
+                }
+            }
+        }
+    }
+}
+
 /// A block without its merged entries, the restored ones re-placed
 /// (§4.5.4) in the forward record order.
 fn restored_block(
@@ -2894,6 +2942,50 @@ mod tests {
         assert_eq!(read(&fx, PACKAGE_JSON).await, ROOT_PKG);
     }
 
+    #[tokio::test]
+    async fn revert_drops_the_edges_vlt_added_from_the_vendored_node() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        let (entry, _) = entry_of(run(&fx, UUID, false).await);
+        persist(&fx, &entry).await;
+        let lock = read(&fx, VLT_LOCK).await;
+        let file_id = lock
+            .lines()
+            .find_map(|l| {
+                l.trim_start()
+                    .strip_prefix('"')
+                    .and_then(|l| l.split_once("\": ["))
+                    .map(|(id, _)| id.to_string())
+                    .filter(|id| id.starts_with("file~.socket"))
+            })
+            .expect("the vendored file node");
+        let insert_before = |text: &str, before: &str, line: String| {
+            let at = text.find(before).expect(before);
+            let at = text[..at].rfind('\n').unwrap() + 1;
+            format!("{}    {line},\n{}", &text[..at], &text[at..])
+        };
+        let updated = insert_before(
+            &lock,
+            "\"~npm~z@1.0.0\": [",
+            r#""~npm~escape-html@1.0.3": [0,"escape-html","sha512-E=="]"#.to_string(),
+        );
+        let updated = insert_before(
+            &updated,
+            &format!("\"{file_id} z\": "),
+            format!(r#""{file_id} escape-html": "prod 1.0.3 ~npm~escape-html@1.0.3""#),
+        );
+        let updated = insert_before(
+            &updated,
+            &format!("\"{file_id} escape-html\": "),
+            format!(r#""{file_id} a": "prod 1.0.0 ~npm~a@1.0.0""#),
+        );
+        tokio::fs::write(fx.root.join(VLT_LOCK), &updated)
+            .await
+            .unwrap();
+        let out = revert_vlt_opts(&entry, &fx.root, RevertOpts::new(false)).await;
+        assert!(out.success && out.warnings.is_empty(), "{out:?}");
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+    }
+
     #[tokio::test]
     async fn a_new_uuid_warns_about_links_into_the_replaced_dir() {
         let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
@@ -3000,7 +3092,8 @@ mod tests {
         assert!(
             warnings
                 .iter()
-                .any(|w| w.code == "vendor_dep_manifest_stale"),
+                .any(|w| w.code == "vendor_dep_manifest_stale"
+                    && w.detail.contains("run `vlt update` to re-resolve them")),
             "{warnings:?}"
         );
         let committed = read(&fx, &format!("{}/package.json", entry.artifact.path)).await;

From f51932c92933c0cc9f5b1b68724a060f78296723 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 16:16:40 -0400
Subject: [PATCH 40/46] Refuse to vendor vlt packages that vlt builds

vlt builds a registry copy in the untracked `node_modules/.vlt` store
but a `file:` dependency in place. After vendoring a package with an
install script (esbuild's postinstall, a node-gyp addon) the `vlt build`
that vlt asks for rewrote the committed payload: esbuild's 9 KB JS shim
became a 9.7 MB Mach-O binary staged for commit, every later `vendor`
failed on the inventory, and `repair` restored the shim only until the
next build.

Vendored mode now refuses a package that declares a `preinstall`,
`install`, `postinstall` or `prepare` script or ships a `binding.gyp`
(`vendor_vlt_build_scripts_unsupported`, remedy `--mode hosted`), in
the preflight and on every build of the payload.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/CLI_CONTRACT.md       |  3 +-
 .../socket-patch-core/src/vendor/npm_dir.rs   | 72 +++++++++++++++++++
 .../socket-patch-core/src/vendor/vlt_lock.rs  | 54 ++++++++++++++
 docs/ecosystems.md                            |  7 +-
 4 files changed, 133 insertions(+), 3 deletions(-)

diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index 1b9d4eac..ba5e4e37 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -703,7 +703,7 @@ to **six flavors**.
 | npm / pnpm LEGACY (lockfileVersion 5.4 = pnpm 7, 6.0 = pnpm 8; flavor `pnpm-legacy`) | (same tarball) | root `package.json` `pnpm.overrides` **+** legacy lock surgery (overrides / root dep + specifiers / packages rekey to a bare `file:` key with recomputed integrity / in-package dep refs). **No `pnpm-workspace.yaml` is written** (pnpm ≤ 8 reads overrides only from package.json). The lock's SPECIFIER is machine-ABSOLUTE — pnpm ≤ 8 absolutizes `file:` overrides itself — surfaced as `vendor_pnpm_legacy_absolute_specifier`. Legacy WORKSPACE locks (`importers:`) refused | same-path `pnpm install --frozen-lockfile --offline`, cold store (byte-stable on pnpm 7.33.5 / 8.15.9). A checkout at a DIFFERENT path fails the frozen check (path-bound specifier) and must run `pnpm install --offline --no-frozen-lockfile` once (the flag matters on CI, where pnpm defaults frozen on), which installs the vendored tarball and re-resolves only the specifier line |
 | npm / bun (`bun.lock`, lockfileVersion 0, 1 or 2 — `vendor_lockfile_version_unsupported` otherwise) | (same tarball) | `bun.lock` only: the packages entry's registry 4-tuple → local 3-tuple with recomputed `sha512`; the entry's `{deps}` meta, the lock's version line and its line endings are preserved. A lock holding `workspace:` packages is refused `vendor_bun_workspace_unsupported` unless lockfileVersion is 2 — Bun 1.2–1.3 resolve a workspace member's local-tarball path relative to the MEMBER (ENOENT on our root-relative path), 1.4 relative to the lockfile, and a committed version-2 lock is the only proof every consumer runs Bun ≥ 1.4 (a deliberate over-approximation: a package declared only by the workspace root would install on version 1 too). The gate fires only on a run that would WRITE a new local tuple, so in-sync re-runs, `already_vendored` skips and `repair` rebuilds on such a lock pass. The detail names the version and the remedy: delete `bun.lock` and re-lock with Bun ≥ 1.4 (an in-place `bun install` keeps the existing lockfileVersion), or `--mode hosted`. Native binary support is described in the next row. `scan`/`get --mode vendored` apply all four refusals BEFORE downloading (see the `get --mode vendored` bullet). Bun 1.1.39–1.3.9 re-save the local tuple WITHOUT its `sha512` on any later lock re-save (`bun add`, `bun install` after a manifest change); the digest-less 2-tuple is recognised as the same wiring — an in-sync re-run stays `already_vendored` and re-pins the digest on disk (no new wiring record) when the committed artifact still holds the bytes the lock was written from — otherwise, as for any stale tuple of ours, the line is re-pinned and the fresh entry carries the new fingerprint — `repair` rebuilds through it, and `vendor --revert` / `rollback` restore the registry line over it (a 2-tuple at ANOTHER uuid is still `vendor_lock_entry_drifted`) | `bun install --frozen-lockfile`, cold cache (the local tarball's sha512 is enforced by Bun ≥ 1.3.10; 1.1.39–1.3.9 install it unverified — the committed artifact is the protection there) |
 | npm / bun binary (`bun.lockb`, native binary format 1, 2 or 3) | (same tarball) | Rewrite matching binary package resolutions and integrity in place; preserve topology and unrelated metadata, update binary offsets and the package metadata hash. Text `bun.lock` takes precedence. `bun_lockb_package` wiring snapshots recover pristine registry metadata for repair and support per-package revert and hosted ↔ vendored migration. Binary discovery and rewrites require no installed Bun runtime. Malformed or unsupported content refuses `vendor_bun_lockb_invalid` before download or takeover. | Frozen installs with the original compatible Bun reader; see `docs/testing/bun-compatibility.md` for the release matrix and historical runtime integrity limits. |
-| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. A node whose only extra is one peer context (`ṗ:N`, `peer.N`, `peer.<16 hex>`: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's) becomes a `file` node without the extra, as vlt writes `file:` dependencies, keeping its peer edges; revert restores the extra-bearing DepID. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), two or more instances of one `name@version` or a modifier extra, importer `peer` edges, foreign registries, a git, remote-tarball or local-directory node of the same package name (vlt records no version for it), a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile`; an optional dependency (or any dependency node_modules still links to its installed upstream copy) gets `vendor_vlt_reinstall_required` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical, also through a warm and a cold `vlt install --frozen-lockfile` (checked on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
+| npm / vlt (`vlt-lock.json`, lockfileVersion 0 or 1 — A0 locks without a version and every other version refuse `vendor_lockfile_version_unsupported`; flavor `vlt`) | patched package **directory** `.socket/vendor/npm/<uuid>/[@scope/]<name>-<version>/node_modules/<name>/` (the extra `node_modules/<name>` level lets a package `require()` its own name), its `package.json` without `devDependencies`, plus `<uuid>/.gitignore` (re-includes the payload against the project's ignores, ignores vlt's links inside it) and `<uuid>/.gitattributes` (`-text`) | direct dependencies of the root or a workspace member only: the lock node becomes a `file` node for the directory, its importer edges and outgoing edges are re-keyed, and each importer's `package.json` spec becomes `file:<path>`; every moved entry lands where vlt's serializer puts it. A node whose only extra is one peer context (`ṗ:N`, `peer.N`, `peer.<16 hex>`: from vlt 1.0.8 a root dependency with resolved peers, from rc.15 a workspace member's) becomes a `file` node without the extra, as vlt writes `file:` dependencies, keeping its peer edges; revert restores the extra-bearing DepID. Refused before any write: transitive targets (`vendor_vlt_transitive_unsupported`), two or more instances of one `name@version` or a modifier extra, importer `peer` edges, foreign registries, a git, remote-tarball or local-directory node of the same package name (vlt records no version for it), a package `vlt build` would build in place (`vendor_vlt_build_scripts_unsupported`), a name declared in several dependency fields (`vendor_lock_entry_unsupported`), a spec that disagrees with the lock (`vendor_vlt_lock_out_of_sync`), a payload git would ignore (`vendor_artifact_gitignored`), a purl vendored under another flavor (`vendor_flavor_changed`); era-A locks warn `vendor_vlt_legacy_lockfile`; an optional dependency (or any dependency node_modules still links to its installed upstream copy) gets `vendor_vlt_reinstall_required` | fresh checkout, `vlt ci` with cold caches: the patched bytes load and `vlt-lock.json` stays byte-identical, also through a warm and a cold `vlt install --frozen-lockfile` (checked on 1.2.0, 1.0.10, 1.0.4, 1.0.0-rc.32 and 1.0.0-rc.14, and on every release by `docs/testing/vlt-compatibility.md`); no-op installs, `vlt install <new>`, `uninstall` and `vlt update` keep the direct dependency vendored. `vendor --revert` restores the registry node, edges and specs, keeping what vlt re-laid since, and refuses on drift |
 | cargo | crate dir `<name>-<version>/` (no `.cargo-checksum.json`) | (v5.0) `[patch.crates-io]` path entry in the **workspace-root `Cargo.toml`** (the manifest beside the `Cargo.lock` it detaches — never `.cargo/config*`) **+** Cargo.lock surgery (the `[[package]]` entry's `source`/`checksum` removed and its `version` set to the copy's TAGGED version `<version>+socket.<uuid>` — `<core>+<meta>.socket.<uuid>` when the version already has build metadata — with every lock reference that spells the old version rewritten, formats v1–v4; the copy's own `Cargo.toml` version carries the same tag, so the patched crate sees it in `CARGO_PKG_VERSION`; revert restores the lock byte for byte). Key: always the Socket-owned `<name>-socket-<first 8 hex of the uuid>` with `package = "<name>"` (the full uuid hex when that key is taken), never the bare crate name — cargo lets a config-file `[patch]` item (project, ancestor directory or `$CARGO_HOME`) replace the manifest item with the same key whatever its version, so keys any of those configs use are avoided and a re-run moves an entry off a now-shadowed key; two versions of one crate are wired side by side. Pre-v5 wiring in `.cargo/config.toml` / `.cargo/config` is moved into `Cargo.toml` by a re-run (`vendor`, `scan`/`get --mode vendored`) or `repair` (`cargo_wiring_migrated` note; the ledger's `cargo_patch_entry` record then names `Cargo.toml`); a detached lock entry left unwired by the pre-v5 multi-version overwrite is re-wired the same way (`cargo_wiring_restored`); every revert removes both spellings | `cargo build --locked --offline` on a fresh checkout — single-version manifest `[patch]` also builds with no network on cargo older than 1.56 (the old config-file wiring's floor); two vendored versions of ONE crate need `--offline` on cargo 1.56 and a populated registry index (or network access) on older cargo such as 1.41, which loads the index to tell them apart. Note: path deps build **without** `--cap-lints allow` |
 | golang | module dir `<module>@<version>/` | `go.mod` `replace <module> <ver> => ./.socket/vendor/golang/<uuid>/<module>@<ver>` | `go build` with `GOPROXY=off` + empty `GOMODCACHE` (directory replaces bypass go.sum entirely; survives `go mod tidy`) |
 | composer | package dir `<vendor>/<name>@<version>/` | `composer.lock` only: entry's `dist` → `{type: "path", url, reference: null}`, `source` removed, `transport-options: {symlink: false}` added. `content-hash` unaffected; `composer.json` untouched | `composer install` (from the lock alone, real copy not symlink, works under `--network none`). `composer update <pkg>` reverts it |
@@ -1268,6 +1268,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_fetch_unverifiable` | `skipped` (warning) | vendor: the lockfile records no usable integrity for the missing package; nothing was fetched (fail-closed) and the `package_not_installed` skip follows. |
 | `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
 | `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
+| `vendor_vlt_build_scripts_unsupported` | `failed` | vendor (vlt): the package declares a `preinstall`, `install`, `postinstall` or `prepare` script, or ships a `binding.gyp`. vlt builds a registry copy in the untracked store, but a vendored `file:` dependency in place, so `vlt build` would rewrite the committed artifact (a platform binary over a JS shim, say) and every later vendor, repair and `vex` would treat it as tampered. Remedy: `--mode hosted`. Refused before any write. |
 | `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
 | `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency; (c) an importer's link resolves into the vendored dir of the patch this run replaces (a new patch uuid), which the run removes: the detail names the links and says `vlt install` (or `vlt ci`) links the new vendored copy; (d) a rebuild of the payload (vendor, or `repair` after a corrupt or missing payload) could not keep vlt's links to the package's own dependencies (its old `node_modules/` held more than links): the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`), since a plain `vlt install` does not re-link them. `repair` moves those links back into the rebuilt payload when they are only links. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
 | `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
diff --git a/crates/socket-patch-core/src/vendor/npm_dir.rs b/crates/socket-patch-core/src/vendor/npm_dir.rs
index 50c8cafa..6fecee0b 100644
--- a/crates/socket-patch-core/src/vendor/npm_dir.rs
+++ b/crates/socket-patch-core/src/vendor/npm_dir.rs
@@ -707,10 +707,53 @@ async fn prune_staged_node_modules(
                 ),
             )));
         }
+        let gyp = tokio::fs::symlink_metadata(stage.join(BINDING_GYP))
+            .await
+            .is_ok();
+        let steps = vlt_build_steps(&pkg, gyp);
+        if !steps.is_empty() {
+            return Err(Box::new(refused(
+                BUILD_STEPS_UNSUPPORTED,
+                build_steps_detail(name, version, &steps),
+            )));
+        }
     }
     Ok(())
 }
 
+pub(crate) const BUILD_STEPS_UNSUPPORTED: &str = "vendor_vlt_build_scripts_unsupported";
+pub(crate) const BINDING_GYP: &str = "binding.gyp";
+
+/// What `vlt build` runs in a package's own directory: its `preinstall`,
+/// `install`, `postinstall` and `prepare` scripts, and node-gyp for a
+/// `binding.gyp`. vlt builds a registry copy in the untracked store, but a
+/// vendored `file:` dependency in place, inside the committed artifact.
+pub(crate) fn vlt_build_steps(pkg: &Value, has_binding_gyp: bool) -> Vec<String> {
+    let scripts = pkg.get("scripts").and_then(Value::as_object);
+    let mut steps: Vec<String> = ["preinstall", "install", "postinstall", "prepare"]
+        .iter()
+        .filter(|k| {
+            scripts
+                .and_then(|s| s.get(**k))
+                .and_then(Value::as_str)
+                .is_some_and(|v| !v.trim().is_empty())
+        })
+        .map(|k| format!("a `{k}` script"))
+        .collect();
+    if has_binding_gyp {
+        steps.push(format!("node-gyp for its {BINDING_GYP}"));
+    }
+    steps
+}
+
+pub(crate) fn build_steps_detail(name: &str, version: &str, steps: &[String]) -> String {
+    format!(
+        "{name}@{version} has {}, which `vlt build` runs inside a vendored package's committed \
+         directory, rewriting the artifact; use --mode hosted",
+        steps.join(" and ")
+    )
+}
+
 async fn read_manifest(dir: &Path) -> Result<Value, String> {
     let text = crate::utils::fs::read_regular_to_string(&dir.join("package.json"))
         .await
@@ -1054,6 +1097,35 @@ mod tests {
         }
     }
 
+    #[test]
+    fn vlt_build_steps_name_every_script_vlt_build_runs_in_place() {
+        let pkg = serde_json::json!({
+            "scripts": {
+                "postinstall": "node install.js",
+                "prepare": "husky",
+                "install": " ",
+                "test": "tap",
+                "build": "tsc"
+            }
+        });
+        assert_eq!(
+            vlt_build_steps(&pkg, true),
+            [
+                "a `postinstall` script",
+                "a `prepare` script",
+                "node-gyp for its binding.gyp"
+            ]
+        );
+        assert!(vlt_build_steps(&serde_json::json!({"scripts": {"test": "x"}}), false).is_empty());
+        assert!(vlt_build_steps(&serde_json::json!({}), false).is_empty());
+        assert_eq!(
+            build_steps_detail("esbuild", "0.20.2", &vlt_build_steps(&pkg, false)),
+            "esbuild@0.20.2 has a `postinstall` script and a `prepare` script, which `vlt build` \
+             runs inside a vendored package's committed directory, rewriting the artifact; use \
+             --mode hosted"
+        );
+    }
+
     #[test]
     fn check_ignore_records_split_on_nul_so_a_drive_letter_source_parses() {
         let out = "C:/Users/u/.gitignore_global\x003\x00!dist/\x00.socket/p/dist/i.js\x00\
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 8b07938e..04aee407 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -739,6 +739,19 @@ pub async fn vlt_vendor_preflight(
                     format!("{name}@{version} declares bundleDependencies; vendoring would drop its bundled node_modules and break installs"),
                 ));
             }
+            let gyp = match store.parent() {
+                Some(dir) => tokio::fs::symlink_metadata(dir.join(super::npm_dir::BINDING_GYP))
+                    .await
+                    .is_ok(),
+                None => false,
+            };
+            let steps = super::npm_dir::vlt_build_steps(&pkg, gyp);
+            if !steps.is_empty() {
+                return Err((
+                    super::npm_dir::BUILD_STEPS_UNSUPPORTED,
+                    super::npm_dir::build_steps_detail(&name, &version, &steps),
+                ));
+            }
         }
         if let Err(SpanError::Duplicate(_)) = super::npm_dir::strip_dev_dependencies(&text) {
             return Err((
@@ -3239,6 +3252,31 @@ mod tests {
             .await
             .unwrap_err();
         assert_eq!(code, "vendor_bundled_deps_unsupported");
+        tokio::fs::write(
+            store.join(PACKAGE_JSON),
+            "{\"scripts\":{\"postinstall\":\"node install.js\"}}",
+        )
+        .await
+        .unwrap();
+        let (code, detail) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+            .await
+            .unwrap_err();
+        assert_eq!(code, crate::vendor::npm_dir::BUILD_STEPS_UNSUPPORTED);
+        assert!(detail.contains("a `postinstall` script"), "{detail}");
+        tokio::fs::write(store.join(PACKAGE_JSON), "{}")
+            .await
+            .unwrap();
+        tokio::fs::write(store.join("binding.gyp"), "{}")
+            .await
+            .unwrap();
+        let (code, detail) = vlt_vendor_preflight(&fx.root, PURL, UUID)
+            .await
+            .unwrap_err();
+        assert_eq!(code, crate::vendor::npm_dir::BUILD_STEPS_UNSUPPORTED);
+        assert!(detail.contains("node-gyp"), "{detail}");
+        tokio::fs::remove_file(store.join("binding.gyp"))
+            .await
+            .unwrap();
         tokio::fs::write(
             store.join(PACKAGE_JSON),
             "{\"devDependencies\":{},\"devDependencies\":{}}",
@@ -3903,6 +3941,22 @@ mod tests {
         assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
     }
 
+    #[tokio::test]
+    async fn a_package_vlt_would_build_in_place_refuses_on_the_local_build() {
+        let fx = fx(&basic_lock(), &[(PACKAGE_JSON, ROOT_PKG)]).await;
+        tokio::fs::write(
+            fx.installed.join(PACKAGE_JSON),
+            "{\"name\":\"left-pad\",\"version\":\"1.3.0\",\"scripts\":{\"install\":\"node-gyp rebuild\"}}",
+        )
+        .await
+        .unwrap();
+        let (code, detail) = refusal(run(&fx, UUID, false).await);
+        assert_eq!(code, crate::vendor::npm_dir::BUILD_STEPS_UNSUPPORTED);
+        assert!(detail.ends_with("use --mode hosted"), "{detail}");
+        assert!(!fx.root.join(".socket").exists());
+        assert_eq!(read(&fx, VLT_LOCK).await, basic_lock());
+    }
+
     #[tokio::test]
     async fn the_service_tree_is_pruned_and_a_bundling_one_refuses() {
         use crate::vendor::test_support::{mount_granted, service_cfg};
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index f1e432b4..d84cea13 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -241,8 +241,11 @@ importers' `package.json` specs move to the `file:` path, and every moved entry
 where vlt's own serializer puts it, so `vlt ci` keeps the lock byte-identical. Transitive
 targets are refused (`vendor_vlt_transitive_unsupported`: vlt silently reverts
 transitive lock surgery), as are several instances of one `name@version`, modifier
-variants, importer peer edges, foreign registries and a dependency declared in several
-fields (`vendor_lock_entry_unsupported`); use hosted mode for those. From vlt 1.0.8 a root
+variants, importer peer edges, foreign registries, a git, remote-tarball or local-directory
+node of the same package and a dependency declared in several fields
+(`vendor_lock_entry_unsupported`), and a package with a `preinstall`, `install`,
+`postinstall` or `prepare` script or a `binding.gyp`, which `vlt build` would build inside
+the committed directory (`vendor_vlt_build_scripts_unsupported`); use hosted mode for those. From vlt 1.0.8 a root
 dependency with resolved peers carries a `~peer.<hex>` extra even with one peer context (a
 workspace member's a `~peer.N` one from rc.15): vendored mode writes its `file` node
 without the extra, exactly as vlt writes a `file:` dependency, keeps its peer edges, and

From a87e2fd2df0033cc1b7bb0b6cf7e8a6feaf144a6 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:24:33 -0400
Subject: [PATCH 41/46] Withhold vlt pins a vlt release may discard

Standalone `socket-patch vex` attested a hosted vlt pin from the lock
alone even when some vlt release ignores that lock and installs the
registry package instead: a lock with no lockfileVersion (vlt >= rc.15
re-resolves it), a pre-v1 legacy-id lock without vlt.json "modifiers",
or a scalar registry the lock cannot use. In-run `scan --vex` already
withheld those deps, so the two disagreed.

Discovery now runs the hosted rewriter's own lock-level conditions (one
shared predicate, reading vlt.json for "modifiers"). In such a lock
every hosted reference keeps no lock pin, so only an installed tree
whose copies verify attests it, and one patched_ref_unattributable
warning names the packages and why.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                  |  13 +-
 crates/socket-patch-cli/CLI_CONTRACT.md       |   2 +-
 .../src/commands/scan/hosted/vlt.rs           |  11 +-
 .../tests/e2e_vex_lockfile/vlt.rs             |  22 +-
 .../src/patch/redirect/vlt.rs                 | 125 +++++---
 .../src/vendor/lock_inventory/vlt.rs          |   5 +-
 .../socket-patch-core/src/vex/discover/vlt.rs | 164 ++++++++++-
 .../vex-discover-golden/redirect-npm.json     | 276 ++++++++++++------
 8 files changed, 459 insertions(+), 159 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index afdfd6be..6efc680b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -391,11 +391,14 @@ into the new version's section — see docs/releasing.md.
   of its installed copies (pnpm and vlt peer, modifier and registry-alias
   instances), and a same-version instance on another registry (or a
   Socket-shaped one that does not verify) keeps a vlt hosted pin from
-  attesting before install. A vendored vlt directory verified without its
-  vendor ledger checks a devDependencies-stripped `package.json` against
-  the patched blob in `.socket/blobs`, and is omitted as
-  `vendor_manifest_unverifiable` when that blob is absent. `setup.manual`
-  accepts `vlt`.
+  attesting before install, as does a lock some vlt release discards (no
+  `lockfileVersion`, a pre-v1 legacy-id lock without vlt.json `modifiers`,
+  or a scalar `registry` outside a v1 lock with `registries.npm`), which
+  also warns `patched_ref_unattributable`. A vendored vlt directory
+  verified without its vendor ledger checks a devDependencies-stripped
+  `package.json` against the patched blob in `.socket/blobs`, and is
+  omitted as `vendor_manifest_unverifiable` when that blob is absent.
+  `setup.manual` accepts `vlt`.
 - **`setup` wires vlt projects.** A `vlt-lock.json`, `vlt.json`,
   `node_modules/.vlt-lock.json` or `node_modules/.vlt/` directory in the
   project root makes `setup` treat it as vlt, ahead of any pnpm marker. The
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index ba5e4e37..db14f7b5 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -201,7 +201,7 @@ Discovery is read-only, never touches the network, and never fails the run: a ma
 | pnpm | `pnpm-lock.yaml` (every `lockfileVersion`); `shrinkwrap.yaml` only when there is no `pnpm-lock.yaml`; with `rush.json`, `common/config/rush/pnpm-lock.yaml` + `common/config/subspaces/*/pnpm-lock.yaml` | `packages:` `resolution.tarball` on the patch host | `file:.socket/vendor/npm/…` tarball + key | `integrity`, required |
 | yarn | `yarn.lock` (classic and berry) | classic `resolved`; berry `resolution: …::__archiveUrl=<url>` | classic `resolved "file:./.socket/vendor/npm/…#<sha1>"`; berry `file:` entry **plus** a root `package.json` `resolutions` mapping onto the same artifact (without it the entry is orphaned: diagnosed, no ref) | classic `integrity` / `#sha1`, berry `checksum`, required |
 | bun | `bun.lock`; `bun.lockb` only when there is no `bun.lock` (bun reads exactly one) | URL tuple / binary remote-tarball resolution; version from the URL leaf | `.socket/vendor/npm/<uuid>/<name>-<ver>.tgz` tuple / local-tarball resolution | `sha512-…`, required. A 2-tuple that Bun < 1.3.10 re-saved without its digest is still a reference, but it attests only from an installed tree. |
-| vlt | `vlt-lock.json` (lockfileVersion absent, `0` or `1`; a BOM-prefixed, unparseable, non-object or other-version lock is not read: diagnosed, no ref). `vlt.json` and `node_modules/.vlt-lock.json` are never wiring. | a registry node (any segment) whose slot [3] is a `/patch/npm/…` URL on the patch host with the leaf `<bare>-<ver>.tgz` of its DepID's `name@version`, whose embedded `<name>/<ver>` path (when present) is that `name@version`, and slot [1] == name; version from the DepID | a `file` node `.socket/vendor/npm/<uuid>/<name>-<ver>/node_modules/<name>` (or a user-installed `<name>-<ver>.tgz`) with slot [1] == name; version from the path. A same-`name@version` registry node, or a diagnosed Socket-shaped one, beside it is diagnosed, no ref. | slot [2] `sha512-…`, required (a hosted node without one is no reference). A same-`name@version` node on another registry, or a diagnosed Socket-shaped one, keeps the reference but withholds the lockfile basis: only an installed tree whose every store copy verifies attests. |
+| vlt | `vlt-lock.json` (lockfileVersion absent, `0` or `1`; a BOM-prefixed, unparseable, non-object or other-version lock is not read: diagnosed, no ref). `vlt.json` (read only for its `modifiers`) and `node_modules/.vlt-lock.json` are never wiring. | a registry node (any segment) whose slot [3] is a `/patch/npm/…` URL on the patch host with the leaf `<bare>-<ver>.tgz` of its DepID's `name@version`, whose embedded `<name>/<ver>` path (when present) is that `name@version`, and slot [1] == name; version from the DepID | a `file` node `.socket/vendor/npm/<uuid>/<name>-<ver>/node_modules/<name>` (or a user-installed `<name>-<ver>.tgz`) with slot [1] == name; version from the path. A same-`name@version` registry node, or a diagnosed Socket-shaped one, beside it is diagnosed, no ref. | slot [2] `sha512-…`, required (a hosted node without one is no reference). A same-`name@version` node on another registry, or a diagnosed Socket-shaped one, keeps the reference but withholds the lockfile basis: only an installed tree whose every store copy verifies attests. So does a lock some vlt release discards, the conditions of `redirect_vlt_lockfile_version_missing`, `redirect_vlt_old_lockfile_ignored` and `redirect_vlt_scalar_registry_ignored` (which in-run `--vex` withholds too): every hosted reference in it keeps no pin, and one `patched_ref_unattributable` names them. |
 | cargo | `Cargo.lock`, `Cargo.toml`, `.cargo/config` (else `.cargo/config.toml`) | `Cargo.lock` `source = "sparse+…/<uuid>/index/"`, confirmed by `Cargo.toml`: a crate the root manifest declares must pin `registry = "socket-patch-<uuid>"`. A reverted pin is diagnosed, no ref. | `[patch.<source>] <key> = { path = ".socket/vendor/cargo/<uuid>/<name>-<ver>" }` — primarily the root `Cargo.toml` (v5 `vendor`; key-agnostic: `<name>` is `package` when renamed, else the key, so `<name>-socket-<uuid8>` keys count), also the project config (pre-v5 wiring), live only while the lock holds a sourceless entry for it that is not in `[[patch.unused]]`; a manifest entry cargo ignores — the project config redefines its key with another path, or a `[patch."https://github.com/rust-lang/crates.io-index"]` table replaces `[patch.crates-io]` — is diagnosed (`patched_ref_invalid`), no ref | `checksum` (v1: `[metadata]`), required |
 | golang | `go.mod`, `go.work`, `go.sum`, `go.work.sum` | `replace M v => patch.socket.dev/gopatch/<uuid> <sver>` | `replace M v => ./.socket/vendor/golang/<uuid>/M@v` | both go.sum lines, required. A replace that `require` no longer selects (`require M v'`) is inert: diagnosed, no ref. |
 | pypi | `uv.lock` (confirmed by `pyproject.toml` `[tool.uv.sources]` when present), PEP 723 `<script>.py.lock`, `pylock.toml` / `pylock.<name>.toml`, `poetry.lock`, `pdm.lock`, `Pipfile.lock`, `requirements.txt` + its in-root `-r` includes, PEP 508 direct references in `pyproject.toml` / `hatch.toml` | Socket-host artifact url | `.socket/vendor/pypi/<uuid>/<wheel>` naming the entry's own dist | sha256, required |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index b450f637..3aceb98b 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -21,15 +21,6 @@ use super::StaleInstallOutcome;
 pub(super) const REINSTALL_REQUIRED: &str = "redirect_vlt_reinstall_required";
 const ARTIFACT_UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
 
-/// The lock-level warnings that say vlt may discard the redirect (§3.9 (c);
-/// `redirect_vlt_sibling_lockfiles` says nothing about vlt's reading of the
-/// lock).
-const DISCARDING_LOCK_WARNINGS: [&str; 3] = [
-    "redirect_vlt_lockfile_version_missing",
-    "redirect_vlt_old_lockfile_ignored",
-    "redirect_vlt_scalar_registry_ignored",
-];
-
 /// Whether vlt's install state exists: the hidden lock as a regular file,
 /// or the store as a real directory. Stat only; the hidden lock can be
 /// megabytes and is never read into the rewriter's input.
@@ -477,7 +468,7 @@ pub(super) async fn heal_after_rewrite(
     let lock_discards = inputs
         .rewrite_warning_codes
         .iter()
-        .any(|code| DISCARDING_LOCK_WARNINGS.contains(code));
+        .any(|code| vlt::DISCARDING_LOCK_CODES.contains(code));
     for (purl, uuid) in inputs.confirmed {
         if !inputs.confirmed_vlt.contains(uuid) {
             continue;
diff --git a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
index 2af7d2c7..5ee6dce1 100644
--- a/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
+++ b/crates/socket-patch-cli/tests/e2e_vex_lockfile/vlt.rs
@@ -19,7 +19,9 @@
 //!     `(redirected)` from the patch API's record;
 //!   - a tampered or pristine store copy is omitted (`hash_mismatch` /
 //!     `not_applied`) even though the importer copy is patched;
-//!   - not installed attests from the lock's sha512 pin;
+//!   - not installed attests from the lock's sha512 pin, except in the
+//!     version-less lock vlt ≥ rc.15 re-resolves (`package_not_found`,
+//!     `patched_ref_unattributable`);
 //!   - a record naming another package, or another patch, is omitted
 //!     (`record_mismatch`);
 //!   - `--offline` is omitted (`record_unavailable`) with zero requests;
@@ -172,8 +174,22 @@ fn hosted_every_vlt_era_manifestless_evidence_cells() {
 
         std::fs::remove_dir_all(root.join("node_modules")).unwrap();
         let out = run_vex(&bin, root, &online(&api));
-        assert_eq!(out.code, Some(0), "[{tag}] not installed: {out}");
-        assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+        if *era == Era::A0 {
+            // vlt ≥ rc.15 re-resolves a version-less lock, so its pin is no
+            // evidence of what installs (as in-run `--vex` withholds it).
+            assert_eq!(out.code, Some(1), "[{tag}] not installed: {out}");
+            assert_not_attested(&out.envelope, PURL, "package_not_found");
+            assert_absent(out.doc.as_ref(), PURL);
+            assert!(
+                out.envelope
+                    .to_string()
+                    .contains("patched_ref_unattributable"),
+                "[{tag}] the withheld pin is diagnosed: {out}"
+            );
+        } else {
+            assert_eq!(out.code, Some(0), "[{tag}] not installed: {out}");
+            assert_attested(out.doc(), PURL, UUID, Marker::Redirected, VULNS);
+        }
         install(root, id, PATCHED);
 
         for (what, uuid, purl) in [
diff --git a/crates/socket-patch-core/src/patch/redirect/vlt.rs b/crates/socket-patch-core/src/patch/redirect/vlt.rs
index 8cf291d0..f40b5f11 100644
--- a/crates/socket-patch-core/src/patch/redirect/vlt.rs
+++ b/crates/socket-patch-core/src/patch/redirect/vlt.rs
@@ -19,7 +19,7 @@ use crate::constants::npm_family::{
 use crate::vendor::vlt_lock_text::{
     entry_text, installs_outside_registry, is_default_registry, is_registry_url_segment,
     nodes_block, parse_node_entry_text, parse_node_line, parse_vendored_path, render_entry_line,
-    render_tuple_with_slots, sniff_lock, split_dep_id, split_lines, DepIdKind, LockSniff,
+    render_tuple_with_slots, sniff_lock, split_dep_id, split_lines, DepId, DepIdKind, LockSniff,
     NodeEntry, ParsedLock, SectionSpan,
 };
 
@@ -163,20 +163,33 @@ pub(super) fn has_vendored_instance(lock: &HostedLock, dep: &DepOverride) -> boo
         .is_some_and(|nodes| has_vendored_node(nodes, &full_name(dep), &dep.version))
 }
 
-fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>) -> bool {
-    if lock.parsed.version == Some(1) {
+/// The lock-level warnings that say vlt may discard the lock's pins
+/// (§3.9 (c)): neither in-run nor standalone VEX attests a hosted pin of such
+/// a lock from the lock alone.
+pub const DISCARDING_LOCK_CODES: [&str; 3] = [
+    VERSION_MISSING,
+    OLD_LOCKFILE_IGNORED,
+    SCALAR_REGISTRY_IGNORED,
+];
+
+const VERSION_MISSING: &str = "redirect_vlt_lockfile_version_missing";
+const OLD_LOCKFILE_IGNORED: &str = "redirect_vlt_old_lockfile_ignored";
+const SCALAR_REGISTRY_IGNORED: &str = "redirect_vlt_scalar_registry_ignored";
+
+fn is_old_lockfile_ignored<'a>(
+    version: Option<u64>,
+    options: Option<&Map<String, Value>>,
+    mut ids: impl Iterator<Item = &'a DepId>,
+    vlt_config: Option<&str>,
+) -> bool {
+    if version == Some(1) {
         return false;
     }
-    let options = lock.parsed.options();
-    let has_legacy_default = lock.parsed.nodes().is_some_and(|nodes| {
-        nodes.keys().any(|id| {
-            split_dep_id(id).is_some_and(|dep_id| {
-                dep_id.kind == DepIdKind::Registry
-                    && (dep_id.first.is_empty() || is_registry_url_segment(&dep_id.first, options))
-            })
-        })
+    let has_legacy_default = ids.any(|dep_id| {
+        dep_id.kind == DepIdKind::Registry
+            && (dep_id.first.is_empty() || is_registry_url_segment(&dep_id.first, options))
     });
-    let declares_modifiers = files.get(VLT_CONFIG).is_some_and(|text| {
+    let declares_modifiers = vlt_config.is_some_and(|text| {
         let text = text.strip_prefix('\u{feff}').unwrap_or(text);
         serde_json::from_str::<Value>(text)
             .ok()
@@ -186,8 +199,7 @@ fn is_old_lockfile_ignored(lock: &HostedLock, files: &BTreeMap<String, String>)
     has_legacy_default && !declares_modifiers
 }
 
-fn is_scalar_registry_ignored(lock: &HostedLock) -> bool {
-    let options = lock.parsed.options();
+fn is_scalar_registry_ignored(version: Option<u64>, options: Option<&Map<String, Value>>) -> bool {
     let scalar = options
         .and_then(|o| o.get("registry"))
         .is_some_and(Value::is_string);
@@ -195,7 +207,47 @@ fn is_scalar_registry_ignored(lock: &HostedLock) -> bool {
         .and_then(|o| o.get("registries"))
         .and_then(|r| r.get("npm"))
         .is_some_and(Value::is_string);
-    scalar && (lock.parsed.version != Some(1) || !registries_npm)
+    scalar && (version != Some(1) || !registries_npm)
+}
+
+/// Which of [`DISCARDING_LOCK_CODES`] hold, in that order, for a lock of
+/// `version` and `options` whose node ids are `ids`, given `vlt.json`'s
+/// text.
+pub(crate) fn discarding_lock_codes<'a>(
+    version: Option<u64>,
+    options: Option<&Map<String, Value>>,
+    ids: impl Iterator<Item = &'a DepId>,
+    vlt_config: Option<&str>,
+) -> Vec<&'static str> {
+    let mut codes = Vec::new();
+    if version.is_none() {
+        codes.push(VERSION_MISSING);
+    }
+    if is_old_lockfile_ignored(version, options, ids, vlt_config) {
+        codes.push(OLD_LOCKFILE_IGNORED);
+    }
+    if is_scalar_registry_ignored(version, options) {
+        codes.push(SCALAR_REGISTRY_IGNORED);
+    }
+    codes
+}
+
+/// Why vlt may discard the lock, for one of [`DISCARDING_LOCK_CODES`].
+pub(crate) fn discarding_lock_detail(code: &str) -> &'static str {
+    match code {
+        VERSION_MISSING => {
+            "vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently re-resolves it on \
+             `vlt install` (and `vlt ci` fails); re-lock with a current vlt"
+        }
+        OLD_LOCKFILE_IGNORED => {
+            "vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \
+             \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json"
+        }
+        _ => {
+            "vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is configured; \
+             upgrade vlt to ≥ 1.0.0-rc.30"
+        }
+    }
 }
 
 fn lock_level_warnings(
@@ -203,32 +255,23 @@ fn lock_level_warnings(
     files: &BTreeMap<String, String>,
     bun_lockb_present: bool,
 ) -> Vec<RewriteWarning> {
-    let mut warnings = Vec::new();
-    if lock.parsed.version.is_none() {
-        warnings.push(RewriteWarning {
-            code: "redirect_vlt_lockfile_version_missing".into(),
-            detail: "vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently \
-                     re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a \
-                     current vlt"
-                .into(),
-        });
-    }
-    if is_old_lockfile_ignored(lock, files) {
-        warnings.push(RewriteWarning {
-            code: "redirect_vlt_old_lockfile_ignored".into(),
-            detail: "vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \
-                     \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json"
-                .into(),
-        });
-    }
-    if is_scalar_registry_ignored(lock) {
-        warnings.push(RewriteWarning {
-            code: "redirect_vlt_scalar_registry_ignored".into(),
-            detail: "vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is \
-                     configured; upgrade vlt to ≥ 1.0.0-rc.30"
-                .into(),
-        });
-    }
+    let ids: Vec<DepId> = lock
+        .parsed
+        .nodes()
+        .map(|nodes| nodes.keys().filter_map(|id| split_dep_id(id)).collect())
+        .unwrap_or_default();
+    let mut warnings: Vec<RewriteWarning> = discarding_lock_codes(
+        lock.parsed.version,
+        lock.parsed.options(),
+        ids.iter(),
+        files.get(VLT_CONFIG).map(String::as_str),
+    )
+    .into_iter()
+    .map(|code| RewriteWarning {
+        code: code.into(),
+        detail: discarding_lock_detail(code).into(),
+    })
+    .collect();
     if !vlt_drives(files, bun_lockb_present) {
         let others = sibling_locks(files, bun_lockb_present);
         warnings.push(RewriteWarning {
diff --git a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
index 0190ee06..fceb1346 100644
--- a/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
+++ b/crates/socket-patch-core/src/vendor/lock_inventory/vlt.rs
@@ -27,9 +27,11 @@ pub(crate) struct VltLockNode {
     pub(crate) location: Option<String>,
 }
 
-/// A readable `vlt-lock.json`: its `options` and every node whose id splits.
+/// A readable `vlt-lock.json`: its `lockfileVersion` (`None` when absent),
+/// its `options` and every node whose id splits.
 #[derive(Debug, Clone)]
 pub(crate) struct VltLock {
+    pub(crate) version: Option<u64>,
     pub(crate) options: Option<Map<String, Value>>,
     pub(crate) nodes: Vec<VltLockNode>,
 }
@@ -80,6 +82,7 @@ pub(crate) fn vlt_lock_model(text: &str) -> Result<VltLock, String> {
         })
         .unwrap_or_default();
     Ok(VltLock {
+        version: lock.version,
         options: lock.options().cloned(),
         nodes,
     })
diff --git a/crates/socket-patch-core/src/vex/discover/vlt.rs b/crates/socket-patch-core/src/vex/discover/vlt.rs
index 9dd8712c..e62e94ef 100644
--- a/crates/socket-patch-core/src/vex/discover/vlt.rs
+++ b/crates/socket-patch-core/src/vex/discover/vlt.rs
@@ -51,6 +51,18 @@
 //! Every other registry instance is evidence against another lock's wiring
 //! of the same package ([`Discovery::resolved_elsewhere`]).
 //!
+//! ## Locks a vlt release discards
+//!
+//! A lock with no `lockfileVersion`, a pre-v1 lock with `··` or
+//! scalar-registry URL ids and no vlt.json `modifiers`, or a lock with a
+//! scalar `registry` (outside a v1 lock that also has `registries.npm`) is
+//! re-resolved by some vlt releases, which then install the registry bytes
+//! (the hosted rewriter's [`DISCARDING_LOCK_CODES`], which in-run VEX
+//! withholds too). Its hosted refs keep no lock pin, so only an installed
+//! tree attests them, and one [`DIAG_REF_UNATTRIBUTABLE`] names them.
+//!
+//! [`DISCARDING_LOCK_CODES`]: crate::patch::redirect::vlt::DISCARDING_LOCK_CODES
+//!
 //! ## Parsing
 //!
 //! A BOM-prefixed (never stripped), unparseable, non-object or
@@ -61,7 +73,7 @@
 //!
 //! Non-goals: nested `*/vlt-lock.json` (a separate project, DESIGN D3), the
 //! hidden `node_modules/.vlt-lock.json` (install state, not wiring) and
-//! `vlt.json` (registry definitions only).
+//! `vlt.json` as wiring (it is read only for its `modifiers`, above).
 
 use std::collections::BTreeSet;
 
@@ -69,8 +81,9 @@ use super::{
     npm_purl, vendor_ref, DiscoverCtx, Discovery, PatchedRef, DIAG_LOCKFILE_UNPARSEABLE,
     DIAG_REF_INVALID, DIAG_REF_UNATTRIBUTABLE,
 };
-use crate::constants::npm_family::VLT_LOCK;
+use crate::constants::npm_family::{VLT_CONFIG, VLT_LOCK};
 use crate::patch::redirect::hosted_url_names;
+use crate::patch::redirect::vlt::{discarding_lock_codes, discarding_lock_detail};
 use crate::utils::digest::is_sri_pin;
 use crate::utils::purl::percent_decode_purl_component;
 use crate::vendor::lock_inventory::vlt::{vlt_lock_model, VltLockNode};
@@ -92,6 +105,15 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
             return;
         }
     };
+    // `vlt.json` is never wiring; read only for its `modifiers`.
+    let vlt_config = ctx.read_text(VLT_CONFIG, out).await;
+    let discards = discarding_lock_codes(
+        lock.version,
+        lock.options.as_ref(),
+        lock.nodes.iter().map(|n| &n.dep_id),
+        vlt_config.as_deref(),
+    );
+    let mut discarded_pins: BTreeSet<&str> = BTreeSet::new();
     let classified: Vec<Classified> = lock.nodes.iter().map(|n| classify(ctx, n)).collect();
     let unattested: BTreeSet<&str> = classified
         .iter()
@@ -130,8 +152,13 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
                 url,
                 integrity,
             } => {
-                let pin = (!unattested.contains(purl.as_str()) && outside_source.is_none())
-                    .then(|| LockIntegrity::Sri(integrity.clone()));
+                if !discards.is_empty() {
+                    discarded_pins.insert(purl.as_str());
+                }
+                let pin = (discards.is_empty()
+                    && !unattested.contains(purl.as_str())
+                    && outside_source.is_none())
+                .then(|| LockIntegrity::Sri(integrity.clone()));
                 out.push(PatchedRef::hosted(
                     purl.clone(),
                     uuid.clone(),
@@ -181,6 +208,24 @@ pub(crate) async fn extract(ctx: &DiscoverCtx<'_>, out: &mut Discovery) {
             Classified::Other => {}
         }
     }
+    if !discarded_pins.is_empty() {
+        let why: Vec<&str> = discards
+            .iter()
+            .copied()
+            .map(discarding_lock_detail)
+            .collect();
+        out.diag(
+            DIAG_REF_UNATTRIBUTABLE,
+            VLT_LOCK,
+            format!(
+                "{VLT_LOCK}: a vlt release may discard its hosted pins of {} ({}), so they are \
+                 not attested from the lock alone, only from an installed tree whose every copy \
+                 verifies",
+                discarded_pins.into_iter().collect::<Vec<_>>().join(", "),
+                why.join("; ")
+            ),
+        );
+    }
 }
 
 /// What one node is, before the lock-wide instance rule applies.
@@ -401,7 +446,6 @@ mod tests {
             (Some(1), "~npm~left-pad@1.3.0"),
             (Some(1), "~npm~left-pad@1.3.0~peer.0df72515a50372ba"),
             (Some(0), "·npm·left-pad@1.3.0"),
-            (None, "··left-pad@1.3.0"),
             (Some(1), "~acme~left-pad@1.3.0"),
         ] {
             let out = discover(&lock(
@@ -422,6 +466,116 @@ mod tests {
         }
     }
 
+    fn lock_with_options(version: &str, options: &str, nodes: &[String]) -> String {
+        format!(
+            "{{\n{version}  \"options\": {options},\n  \"nodes\": {{\n    {}\n  }},\n  \
+             \"edges\": {{}}\n}}\n",
+            nodes.join(",\n    ")
+        )
+    }
+
+    /// A lock some vlt release discards (the hosted rewriter's
+    /// `redirect_vlt_lockfile_version_missing`, `_old_lockfile_ignored` and
+    /// `_scalar_registry_ignored`) keeps its hosted refs without the lock
+    /// pin, as in-run VEX withholds them, and says why once.
+    #[tokio::test]
+    async fn hosted_pins_of_a_lock_vlt_may_discard_are_withheld() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        let pinned = |id: &str| node(id, "left-pad", Some(SRI), Some(&hosted));
+        let scalar = r#"{"registry":"https://registry.npmjs.org/"}"#;
+        for (text, vlt_json, why) in [
+            (
+                lock(None, &[pinned("··left-pad@1.3.0")]),
+                None,
+                "no lockfileVersion",
+            ),
+            (
+                lock(Some(0), &[pinned("··left-pad@1.3.0")]),
+                None,
+                "0.0.0-16 … 0.0.0-24",
+            ),
+            (
+                lock(Some(0), &[pinned("··left-pad@1.3.0")]),
+                Some("{}"),
+                "0.0.0-16 … 0.0.0-24",
+            ),
+            (
+                lock_with_options(
+                    "  \"lockfileVersion\": 1,\n",
+                    scalar,
+                    &[pinned("~https_c++registry.npmjs.org+~left-pad@1.3.0")],
+                ),
+                None,
+                "rc.7 … rc.29",
+            ),
+            (
+                lock_with_options(
+                    "  \"lockfileVersion\": 0,\n",
+                    r#"{"registry":"https://registry.npmjs.org/","registries":{"npm":"https://registry.npmjs.org/"}}"#,
+                    &[pinned("·npm·left-pad@1.3.0")],
+                ),
+                None,
+                "rc.7 … rc.29",
+            ),
+        ] {
+            let p = Project::new();
+            p.write("vlt-lock.json", &text);
+            if let Some(config) = vlt_json {
+                p.write("vlt.json", config);
+            }
+            let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+            assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+            let r = &out.refs[0];
+            assert_eq!(r.locked_integrity, None, "{text}");
+            assert!(r.integrity_required && !r.lockfile_basis_ok(), "{text}");
+            assert_eq!(out.diagnostics.len(), 1, "{text}: {:?}", out.diagnostics);
+            let d = &out.diagnostics[0];
+            assert_eq!(d.code, DIAG_REF_UNATTRIBUTABLE, "{text}");
+            assert!(
+                d.detail.contains(PURL) && d.detail.contains(why),
+                "{text}: {}",
+                d.detail
+            );
+        }
+    }
+
+    /// The same locks with what makes vlt read them keep the pin: a v0
+    /// `··` lock whose vlt.json declares `modifiers`, and a v1 lock whose
+    /// scalar `registry` sits beside `registries.npm`.
+    #[tokio::test]
+    async fn hosted_pins_of_a_lock_vlt_reads_are_kept() {
+        let hosted = url(UUID_A, "left-pad-1.3.0.tgz");
+        let pinned = |id: &str| node(id, "left-pad", Some(SRI), Some(&hosted));
+        for (text, vlt_json) in [
+            (
+                lock(Some(0), &[pinned("··left-pad@1.3.0")]),
+                Some(r#"{"modifiers":{}}"#),
+            ),
+            (
+                lock_with_options(
+                    "  \"lockfileVersion\": 1,\n",
+                    r#"{"registry":"https://registry.npmjs.org/","registries":{"npm":"https://registry.npmjs.org/"}}"#,
+                    &[pinned("~npm~left-pad@1.3.0")],
+                ),
+                None,
+            ),
+        ] {
+            let p = Project::new();
+            p.write("vlt-lock.json", &text);
+            if let Some(config) = vlt_json {
+                p.write("vlt.json", config);
+            }
+            let out = p.run(|c, o| Box::pin(super::extract(c, o))).await;
+            assert_refs(&out, &[(PURL, UUID_A, WiringMode::Hosted)]);
+            assert_eq!(
+                out.refs[0].locked_integrity,
+                Some(LockIntegrity::Sri(SRI.into())),
+                "{text}"
+            );
+            assert!(out.diagnostics.is_empty(), "{text}: {:?}", out.diagnostics);
+        }
+    }
+
     #[tokio::test]
     async fn committed_hosted_and_vendored_fixtures_are_refs() {
         let p = Project::new();
diff --git a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
index 4348e5f3..ede25a19 100644
--- a/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
+++ b/crates/socket-patch-core/tests/fixtures/vex-discover-golden/redirect-npm.json
@@ -1181,10 +1181,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/fsevents@2.3.3",
@@ -1192,10 +1192,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/left-pad@1.3.0",
@@ -1203,10 +1203,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/semver@7.6.0",
@@ -1214,10 +1214,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/use-sync-external-store@1.2.0",
@@ -1225,13 +1225,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/@isaacs/string-locale-compare@1.1.0, pkg:npm/fsevents@2.3.3, pkg:npm/left-pad@1.3.0, pkg:npm/semver@7.6.0, pkg:npm/use-sync-external-store@1.2.0 (vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a current vlt; vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "00000000-0000-4000-8000-000000000000",
@@ -1404,10 +1410,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/fsevents@2.3.3",
@@ -1415,10 +1421,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/left-pad@1.3.0",
@@ -1426,10 +1432,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/ms@2.1.3",
@@ -1437,10 +1443,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/semver@7.6.0",
@@ -1448,10 +1454,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/use-sync-external-store@1.2.0",
@@ -1459,13 +1465,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/@isaacs/string-locale-compare@1.1.0, pkg:npm/fsevents@2.3.3, pkg:npm/left-pad@1.3.0, pkg:npm/ms@2.1.3, pkg:npm/semver@7.6.0, pkg:npm/use-sync-external-store@1.2.0 (vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a current vlt; vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "00000000-0000-4000-8000-000000000000",
@@ -1652,10 +1664,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/fsevents@2.3.3",
@@ -1663,10 +1675,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/left-pad@1.3.0",
@@ -1674,10 +1686,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/ms@2.1.3",
@@ -1685,10 +1697,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/semver@7.6.0",
@@ -1696,10 +1708,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/use-sync-external-store@1.2.0",
@@ -1707,13 +1719,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/@isaacs/string-locale-compare@1.1.0, pkg:npm/fsevents@2.3.3, pkg:npm/left-pad@1.3.0, pkg:npm/ms@2.1.3, pkg:npm/semver@7.6.0, pkg:npm/use-sync-external-store@1.2.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "00000000-0000-4000-8000-000000000000",
@@ -1900,10 +1918,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/fsevents@2.3.3",
@@ -1911,10 +1929,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/left-pad@1.3.0",
@@ -1922,10 +1940,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/ms@2.1.3",
@@ -1933,10 +1951,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/semver@7.6.0",
@@ -1944,10 +1962,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/use-sync-external-store@1.2.0",
@@ -1955,13 +1973,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/@isaacs/string-locale-compare@1.1.0, pkg:npm/fsevents@2.3.3, pkg:npm/left-pad@1.3.0, pkg:npm/ms@2.1.3, pkg:npm/semver@7.6.0, pkg:npm/use-sync-external-store@1.2.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "00000000-0000-4000-8000-000000000000",
@@ -3100,10 +3124,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/bbbbbbbb-bbbb-4bbb-8bbb-bbbbbbbbbbbb/string-locale-compare-1.1.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/fsevents@2.3.3",
@@ -3111,10 +3135,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-00000000000000000000000000000000000000000000000000000000000000000000000000000000000000==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/00000000-0000-4000-8000-000000000000/fsevents-2.3.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/left-pad@1.3.0",
@@ -3122,10 +3146,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/ms@2.1.3",
@@ -3133,10 +3157,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/dddddddd-dddd-4ddd-8ddd-dddddddddddd/ms-2.1.3.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/semver@7.6.0",
@@ -3144,10 +3168,10 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/ffffffff-ffff-4fff-8fff-ffffffffffff/semver-7.6.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
       },
       {
         "purl": "pkg:npm/use-sync-external-store@1.2.0",
@@ -3155,13 +3179,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/cccccccc-cccc-4ccc-8ccc-cccccccccccc/use-sync-external-store-1.2.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/@isaacs/string-locale-compare@1.1.0, pkg:npm/fsevents@2.3.3, pkg:npm/left-pad@1.3.0, pkg:npm/ms@2.1.3, pkg:npm/semver@7.6.0, pkg:npm/use-sync-external-store@1.2.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "00000000-0000-4000-8000-000000000000",
@@ -4267,13 +4297,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4317,13 +4353,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a current vlt; vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4367,13 +4409,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt-lock.json has no lockfileVersion; vlt ≥ 1.0.0-rc.15 silently re-resolves it on `vlt install` (and `vlt ci` fails); re-lock with a current vlt; vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4417,13 +4465,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is configured; upgrade vlt to ≥ 1.0.0-rc.30), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4517,13 +4571,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4567,13 +4627,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -4676,13 +4742,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json; vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is configured; upgrade vlt to ≥ 1.0.0-rc.30), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -5512,13 +5584,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json; vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is configured; upgrade vlt to ≥ 1.0.0-rc.30), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -5562,13 +5640,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 1.0.0-rc.7 … rc.29 ignore vlt-lock.json when a scalar `registry` is configured; upgrade vlt to ≥ 1.0.0-rc.30), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",
@@ -6167,13 +6251,19 @@
         "mode": "hosted",
         "source_file": "vlt-lock.json",
         "artifact_rel": null,
-        "locked_integrity": "Sri(\"sha512-AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==\")",
+        "locked_integrity": null,
         "integrity_required": true,
         "url": "https://patch.socket.dev/patch/npm/11111111-1111-1111-1111-111111111111/aaaaaaaa-aaaa-4aaa-8aaa-aaaaaaaaaaaa/left-pad-1.3.0.tgz",
-        "lockfile_basis_ok": true
+        "lockfile_basis_ok": false
+      }
+    ],
+    "diagnostics": [
+      {
+        "code": "patched_ref_unattributable",
+        "file": "vlt-lock.json",
+        "detail": "vlt-lock.json: a vlt release may discard its hosted pins of pkg:npm/left-pad@1.3.0 (vlt 0.0.0-16 … 0.0.0-24 ignore vlt-lock.json unless vlt.json declares \"modifiers\": {}; upgrade vlt or add \"modifiers\": {} to vlt.json), so they are not attested from the lock alone, only from an installed tree whose every copy verifies"
       }
     ],
-    "diagnostics": [],
     "recognized": [
       {
         "uuid": "11111111-1111-1111-1111-111111111111",

From 3b76e6191a11d511c4d0b13e6477572964b38600 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:24:49 -0400
Subject: [PATCH 42/46] Name the measured vlt reinstall windows

The vendor_vlt_legacy_lockfile warning told every era-A vlt user that a
vendored lock cannot be deleted and re-created, but only vlt 0.0.0-31
through 1.0.0-rc.5 fail that way; 0.0.0-19 through 0.0.0-30 and rc.6
through rc.8 reinstall the vendored directory fine. The optional
dependency advisories likewise blamed every release before 1.0.5,
although vlt 0.0.0-23 and older install such a project from its lock.

The warning, the advisories, CLI_CONTRACT.md, docs/ecosystems.md and
the changelog now name the measured windows (0.0.0-31 ... 1.0.0-rc.5 and
0.0.0-30 ... 1.0.4), matching the compatibility boundary table.

Assisted-by: Claude Code:claude-opus-5-5
---
 CHANGELOG.md                                   |  2 +-
 crates/socket-patch-cli/CLI_CONTRACT.md        |  6 +++---
 .../src/commands/scan/hosted/vlt.rs            |  2 +-
 .../tests/in_process_vendor/vlt.rs             |  2 +-
 .../tests/vlt_e2e_common/fixture.rs            |  2 +-
 .../tests/vlt_hosted_common/mod.rs             |  2 +-
 .../socket-patch-core/src/vendor/vlt_lock.rs   | 18 +++++++++++++-----
 docs/ecosystems.md                             | 12 ++++++------
 8 files changed, 27 insertions(+), 19 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6efc680b..125b0a0d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -307,7 +307,7 @@ into the new version's section — see docs/releasing.md.
   copy of an optional dependency is never removed, because `vlt install`
   would not put it back; the advisory says to run `vlt ci` instead
   (after upgrading to vlt 1.0.5 or later when every dependency is
-  optional, since older releases would drop the installed copy). A
+  optional, since 0.0.0-30 … 1.0.4 would drop the installed copy). A
   same-run `--vex` does not attest a vlt package whose installed copy is
   stale or unchecked, whose lock a vlt release may ignore, or which also
   resolves from a non-default registry. vlt ledgers require the socket-patch
diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index db14f7b5..cb29b142 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -1269,8 +1269,8 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `vendor_vlt_transitive_unsupported` | `failed` | vendor (vlt): the target has an inbound edge from another package in `vlt-lock.json` (the detail names it); vendored mode rewires only direct dependencies of the root or a workspace member, because vlt silently reverts transitive lock surgery. Remedy: `--mode hosted`. Refused before any download or write, dry runs included (`would_refuse`). |
 | `vendor_vlt_lock_out_of_sync` | `failed` | vendor (vlt): an importer's `package.json` is missing, unparseable, or declares a spec for the dependency that differs from the lock's importer edge. Remedy: `vlt install` first. Refused before any write. |
 | `vendor_vlt_build_scripts_unsupported` | `failed` | vendor (vlt): the package declares a `preinstall`, `install`, `postinstall` or `prepare` script, or ships a `binding.gyp`. vlt builds a registry copy in the untracked store, but a vendored `file:` dependency in place, so `vlt build` would rewrite the committed artifact (a platform binary over a JS shim, say) and every later vendor, repair and `vex` would treat it as tampered. Remedy: `--mode hosted`. Refused before any write. |
-| `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar): those releases install the vendored lock but fail if it is deleted and re-created. The package is still vendored; remedy: upgrade vlt. |
-| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency; (c) an importer's link resolves into the vendored dir of the patch this run replaces (a new patch uuid), which the run removes: the detail names the links and says `vlt install` (or `vlt ci`) links the new vendored copy; (d) a rebuild of the payload (vendor, or `repair` after a corrupt or missing payload) could not keep vlt's links to the package's own dependencies (its old `node_modules/` held more than links): the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`), since a plain `vlt install` does not re-link them. `repair` moves those links back into the rebuilt payload when they are only links. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
+| `vendor_vlt_legacy_lockfile` | `skipped` (warning) | vendor (vlt): an era-A lock (vlt 0.0.0-19 … 1.0.0-rc.8): a `··` default-registry id, or default-registry ids that are URL segments equal to a scalar `options.registry` with no `·npm·` id (era B writes `·npm·` whatever the scalar). vlt 0.0.0-31 … 1.0.0-rc.5 install the vendored lock but fail to reinstall the vendored `file:` dependency if `vlt-lock.json` is deleted and re-created (the other era-A releases reinstall it; the lock does not say which release reads it). The package is still vendored; remedy: upgrade vlt. |
+| `vendor_vlt_reinstall_required` | `skipped` (advisory; human: `Warning (vendor_vlt_reinstall_required): …`) | vendor / scan / get `--mode vendored` (vlt), wet and dry runs, and in-sync reruns: (a) the run rewires an optional dependency, or an importer's `node_modules/<name>` of an optional dependency still resolves into `node_modules/.vlt/`: from vlt 0.0.0-30 a plain `vlt install` (1.2.0: also `--force`) keeps that installed upstream copy linked; the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the vendored copy, and that vlt 0.0.0-30 … 1.0.4 install no optional dependency from the lock of a project that declares only optional dependencies (upgrade to 1.0.5 or later first); (b) otherwise, an importer's link of the dependency still resolves into `node_modules/.vlt/`: the detail names the links (`node_modules/<name>`, `<member dir>/node_modules/<name>`) and says `vlt install` (or `vlt ci`) links the vendored copy — on a warm tree after a plain `vlt install` that is true of every vendored direct dependency; (c) an importer's link resolves into the vendored dir of the patch this run replaces (a new patch uuid), which the run removes: the detail names the links and says `vlt install` (or `vlt ci`) links the new vendored copy; (d) a rebuild of the payload (vendor, or `repair` after a corrupt or missing payload) could not keep vlt's links to the package's own dependencies (its old `node_modules/` held more than links): the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`), since a plain `vlt install` does not re-link them. `repair` moves those links back into the rebuilt payload when they are only links. The package is vendored either way; a run whose patch fails to apply emits neither. A wet `vendor --revert` (and the revert a vendored → hosted takeover runs, whose advisory joins `redirect.warnings[]`): (a) the revert moves an `optionalDependencies` spec back from the `file:` dir, or an optional importer's `node_modules/<name>` still resolves into the vendored uuid dir: from vlt 0.0.0-30 a plain `vlt install` keeps that link (dangling once the dir is removed), so the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`) to link the restored copy, with the same vlt 1.0.5 note; (b) otherwise, an importer's link still resolves into the vendored uuid dir: the detail names the links and says `vlt install` (or `vlt ci`) links the restored copy. A dry-run revert emits neither. |
 | `vendor_flavor_changed` | `failed` | vendor (npm): the purl's vendor ledger entry was written for another lockfile `flavor` than the one the router now detects (for example `npm` → `vlt` after switching package managers). Remedy: `socket-patch vendor --revert` it first, then re-vendor. Refused before any write. |
 | `vendor_artifact_gitignored` | `failed` | vendor (vlt): inside a git work tree, `git check-ignore --no-index` reports the new artifact's uuid directory as ignored by a rule its own `.gitignore` cannot override (such as a root `.socket/` rule; the detail names the rule). Remedy: drop that rule for `.socket/vendor/`. Refused before any write. |
 | `vendor_ledger_entry_missing` | `failed` | vendor (vlt): the only installed copy is vlt's link to a committed vendored directory, but the vendor ledger has no entry for the package; run `socket-patch repair` to restore it. Replaces the `package_not_installed` skip. |
@@ -1311,7 +1311,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
 | `redirect_vlt_no_lockfile` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt.json` or vlt's install state is present without `vlt-lock.json`; replaces `redirect_npm_no_lockfile` for vlt projects. |
 | `redirect_vlt_artifact_unverifiable` | `redirect.warnings[]` (warning), `redirect.skipped[].reason` | scan/get `--mode hosted` (vlt): before any takeover or rewrite (dry runs included), each granted artifact with a default-registry instance in `vlt-lock.json` (or, for a purl a `flavor: "vlt"` vendored entry claims, its vendored node, probed before the takeover reverts it) is fetched once as vlt fetches it (`accept-encoding: gzip;q=1.0, identity;q=0.5`, no `Authorization`, up to 10 redirects) and must return 200 with no content encoding (or `identity`) and the granted sha512. On failure (`content-encoding <v>`, `sha512 mismatch`, `http <status>`, `fetch error <e>`, `offline`) the dep is withheld from every rewriter when vlt drives or it is vlt-vendored (which also keeps it vendored), and from the vlt rewrite only otherwise (detail "…; vlt-lock.json was not changed for {purl}"; only the sibling lock this run rewrote can confirm it). A lock already pinned by an earlier run is left pinned, and neither confirmed nor attested. Projects without `vlt-lock.json` make no such request. Exit 0. |
-| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt releases before 1.0.5 install no optional dependency from the lock of a project that declares only optional dependencies, so there both commands remove the installed copy and the detail says to upgrade vlt to 1.0.5 or later first. The detail says whether copies were removed, left stale by a skipped cleanup, could not be checked, or none were stale, and adds how many optional copies were kept whenever there are any. The kept optional copies are named by what they are: `unpatched copies of optional dependencies` after `scan`/`get`, `patched copies of optional dependencies` after `rollback`/`remove`, and `installed copies of the vendored optional dependencies` after a hosted → vendored takeover (the copy the hosted pin left installed, which may still be the registry bytes). Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
+| `redirect_vlt_reinstall_required` | `redirect.warnings[]` (advisory); rollback/remove `warnings[]` (+ human stderr) | vlt: `vlt-lock.json` pins (or, after rollback/remove, no longer pins) Socket-patched packages, and vlt never refreshes an installed copy. The heal removes `node_modules/.vlt-lock.json` and each stale `node_modules/.vlt/<DepID>` of a Socket-owned node (never a link's target, never outside the project, never a copy it cannot judge) unless `--no-vlt-install-cleanup` or `--dry-run`. It never removes an optional node's copy (lock flags 1 or 3, or flags it cannot read): `vlt install` does not put a removed optional dependency back (its link dangles) unless the same install also reinstalls a non-optional node, so such a copy is left stale and the detail says to run `vlt ci` (or delete `node_modules` and run `vlt install`); vlt 0.0.0-30 … 1.0.4 install no optional dependency from the lock of a project that declares only optional dependencies, so there both commands remove the installed copy and the detail says to upgrade vlt to 1.0.5 or later first. The detail says whether copies were removed, left stale by a skipped cleanup, could not be checked, or none were stale, and adds how many optional copies were kept whenever there are any. The kept optional copies are named by what they are: `unpatched copies of optional dependencies` after `scan`/`get`, `patched copies of optional dependencies` after `rollback`/`remove`, and `installed copies of the vendored optional dependencies` after a hosted → vendored takeover (the copy the hosted pin left installed, which may still be the registry bytes). Stale or unchecked copies are not attested by the run's `--vex`, nor is a confirmed vlt pin the heal did not check (a URL on a host other than patch.socket.dev and the configured `--patch-server-url`/`--api-url`). A hidden lock that cannot be removed keeps every store entry. Invalidation failures only warn. |
 | `vlt_root_scripts_not_run` | setup `warnings[]` entry `vlt_root_scripts_not_run: <detail>` (advisory; human: `Warning (vlt_root_scripts_not_run): <detail>` on stderr, muted by `--silent`) | setup (vlt project, npm in scope, every non-`no_files` run incl. `--dry-run` and already-configured): vlt before 1.0.0-rc.13 never runs a root `postinstall`, so the wired hook would not fire. Definite when the `vlt` on `PATH` (absolute entries only; spawned with `VLT_TELEMETRY=0`, 5 s budget) reports a semver below 1.0.0-rc.13 (the detail ends in "(`vlt --version` reports <v>)"); an unparseable `--version` never warns. Otherwise it is a "may" when `vlt-lock.json` has `lockfileVersion` `0` or none, a lock the reported `vlt` would not write: always without a usable `vlt` (absent, non-zero exit, timeout); with one at or above 1.0.0-rc.13, for a lock with no `lockfileVersion`, and for a `0` lock when it reports 1.0.0-rc.15 or later (which refuses a v0 lock, so another vlt installs the project). Remedy: upgrade vlt or run `socket-patch apply` after `vlt ci`. The hook is still written. |
 | `vendor_prebuilt_stub_invalid` | `failed` / `skipped` (warning) | vendor (gem, `--vendor-source`): the served stub gemspec fails the rubygems `summary`/`authors` bar, so bundler would refuse the vendored path source at install time. `service`: refusal naming the missing attributes; `auto`: loud warning + local-build fallback — or, when the gem is also not installed locally (no stub to derive), a refusal naming the served defect and the install-the-gem remedy. |
 | `gem_spec_invalid` | `failed` | vendor (gem): the LOCAL `specifications/` stub gemspec fails the same rubygems `summary`/`authors` bar (a corrupted or hand-edited gem home); the refusal names the file — reinstall the gem (`gem pristine <name>` / fresh `bundle install`). |
diff --git a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
index 3aceb98b..9095a2e5 100644
--- a/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
+++ b/crates/socket-patch-cli/src/commands/scan/hosted/vlt.rs
@@ -266,7 +266,7 @@ async fn heal_targets(
 /// Why the heal keeps stale optional copies, and what refreshes them.
 const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does not \
      reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run `vlt \
-     install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     install`). vlt 0.0.0-30 … 1.0.4 install no optional dependency from the lock of a \
      project that declares only optional dependencies, so there both commands remove the \
      installed copy: upgrade vlt to 1.0.5 or later first.";
 
diff --git a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
index cb62fdf1..77a4de5a 100644
--- a/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_vendor/vlt.rs
@@ -274,7 +274,7 @@ fn vendor_vlt_optional_edge_asks_for_vlt_ci() {
     assert!(
         got[0].contains("left-pad@1.3.0 is an optional dependency")
             && got[0].contains("run `vlt ci` (or delete node_modules and run `vlt install`)")
-            && got[0].contains("before 1.0.5"),
+            && got[0].contains("vlt 0.0.0-30 … 1.0.4 install no optional dependency"),
         "{}",
         got[0]
     );
diff --git a/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs b/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
index 89b4b12f..01fe282a 100644
--- a/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
+++ b/crates/socket-patch-cli/tests/vlt_e2e_common/fixture.rs
@@ -25,7 +25,7 @@ pub const ADVISORY: &str = "redirect_vlt_reinstall_required";
 pub const UNVERIFIABLE: &str = "redirect_vlt_artifact_unverifiable";
 pub const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does not \
      reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run `vlt \
-     install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     install`). vlt 0.0.0-30 … 1.0.4 install no optional dependency from the lock of a \
      project that declares only optional dependencies, so there both commands remove the \
      installed copy: upgrade vlt to 1.0.5 or later first.";
 pub const VLT_UPDATE_NOTE: &str =
diff --git a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
index a10d08a0..dc41ae81 100644
--- a/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
+++ b/crates/socket-patch-cli/tests/vlt_hosted_common/mod.rs
@@ -69,7 +69,7 @@ pub fn advisory_undeterminable(n: usize) -> String {
 /// Why the heal keeps stale optional copies, shared by every heal's detail.
 pub const OPTIONAL_KEPT: &str = "socket-patch does not remove them because `vlt install` does \
      not reinstall a removed optional dependency. Run `vlt ci` (or delete node_modules and run \
-     `vlt install`). vlt releases before 1.0.5 install no optional dependency from the lock of a \
+     `vlt install`). vlt 0.0.0-30 … 1.0.4 install no optional dependency from the lock of a \
      project that declares only optional dependencies, so there both commands remove the \
      installed copy: upgrade vlt to 1.0.5 or later first.";
 
diff --git a/crates/socket-patch-core/src/vendor/vlt_lock.rs b/crates/socket-patch-core/src/vendor/vlt_lock.rs
index 04aee407..140b444c 100644
--- a/crates/socket-patch-core/src/vendor/vlt_lock.rs
+++ b/crates/socket-patch-core/src/vendor/vlt_lock.rs
@@ -1152,7 +1152,7 @@ async fn reinstall_advisory(
                 "{name}@{version} is an optional dependency: `vlt install` (vlt 0.0.0-30 and \
                  later) keeps an installed upstream copy of an optional dependency whose spec \
                  moved to a vendored `file:` directory, so run `vlt ci` (or delete node_modules \
-                 and run `vlt install`) to link the vendored copy. vlt releases before 1.0.5 \
+                 and run `vlt install`) to link the vendored copy. vlt 0.0.0-30 … 1.0.4 \
                  install no optional dependency from the lock of a project that declares only \
                  optional dependencies: upgrade vlt to 1.0.5 or later first."
             ),
@@ -1265,8 +1265,9 @@ pub(crate) async fn vendor_vlt(
         warnings.push(VendorWarning::new(
             "vendor_vlt_legacy_lockfile",
             "vlt-lock.json was written by vlt 0.0.0-19 … 1.0.0-rc.8 (`··` or scalar-registry URL \
-             ids); those releases install the vendored lock but fail if it is deleted and \
-             re-created — upgrade vlt",
+             ids); vlt 0.0.0-31 … 1.0.0-rc.5 install the vendored lock but fail to reinstall \
+             the vendored `file:` dependency if vlt-lock.json is deleted and re-created — \
+             upgrade vlt",
         ));
     }
     let prior = prior_vlt_entry(project_root, purl).await;
@@ -1766,8 +1767,8 @@ async fn revert_reinstall_advisory(
                 "{label} is an optional dependency: `vlt install` (vlt 0.0.0-30 and later) \
                  keeps node_modules linked to the vendored `file:` directory of an optional \
                  dependency whose spec moved back from it, so run `vlt ci` (or delete \
-                 node_modules and run `vlt install`) to link the restored copy. vlt releases \
-                 before 1.0.5 install no optional dependency from the lock of a project that \
+                 node_modules and run `vlt install`) to link the restored copy. vlt 0.0.0-30 \
+                 … 1.0.4 install no optional dependency from the lock of a project that \
                  declares only optional dependencies: upgrade vlt to 1.0.5 or later first."
             ),
         ));
@@ -2825,6 +2826,13 @@ mod tests {
         let fx = fx(&lock, &[(PACKAGE_JSON, ROOT_PKG)]).await;
         let (_, warnings) = entry_of(run(&fx, UUID, false).await);
         assert_eq!(warnings[0].code, "vendor_vlt_legacy_lockfile");
+        assert!(
+            warnings[0]
+                .detail
+                .contains("vlt 0.0.0-31 … 1.0.0-rc.5 install the vendored lock but fail"),
+            "only the measured lockless-reinstall window fails: {}",
+            warnings[0].detail
+        );
         let wired = read(&fx, VLT_LOCK).await;
         assert!(
             wired.contains(&format!(
diff --git a/docs/ecosystems.md b/docs/ecosystems.md
index d84cea13..72531a2a 100644
--- a/docs/ecosystems.md
+++ b/docs/ecosystems.md
@@ -193,8 +193,8 @@ patched packages; `rollback` and `remove` do the same for the registry bytes. No
 outside the project, no link target and no copy socket-patch cannot judge is ever
 removed. A stale copy of an optional dependency is kept, because `vlt install` does not
 put back a removed optional dependency; the advisory says to run `vlt ci` instead, and to
-upgrade to vlt 1.0.5 first when every dependency is optional (earlier releases install no
-optional dependency from the lock of such a project; mixed projects install it on every
+upgrade to vlt 1.0.5 first when every dependency is optional (vlt 0.0.0-30 … 1.0.4 install
+no optional dependency from the lock of such a project; mixed projects install it on every
 release). The advisory names the kept copies by what they are: unpatched copies after
 `scan`/`get`, patched copies after `rollback`/`remove`, and, after a hosted → vendored
 takeover, the installed copies of the now-vendored optional dependencies (whatever bytes
@@ -249,13 +249,13 @@ the committed directory (`vendor_vlt_build_scripts_unsupported`); use hosted mod
 dependency with resolved peers carries a `~peer.<hex>` extra even with one peer context (a
 workspace member's a `~peer.N` one from rc.15): vendored mode writes its `file` node
 without the extra, exactly as vlt writes a `file:` dependency, keeps its peer edges, and
-`vendor --revert` restores the extra. Before rc.6 vlt cannot reinstall a vendored `file:`
-dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A locks: `··` ids, or
-URL-segment ids equal to a scalar `registry`), and A0 locks are refused. From 0.0.0-30 a
+`vendor --revert` restores the extra. vlt 0.0.0-31 … rc.5 cannot reinstall a vendored
+`file:` dependency without the lock (`vendor_vlt_legacy_lockfile` on era-A locks: `··` ids,
+or URL-segment ids equal to a scalar `registry`), and A0 locks are refused. From 0.0.0-30 a
 plain `vlt install` keeps an optional dependency's installed upstream copy after
 vendoring; `vendor_vlt_reinstall_required` says to run `vlt ci` (or delete `node_modules`
 and run `vlt install`) to link the vendored directory, and to upgrade to vlt 1.0.5 first
-when every dependency is optional. The same advisory names any dependency whose
+when every dependency is optional (0.0.0-30 … 1.0.4 install none from the lock). The same advisory names any dependency whose
 `node_modules` link still resolves to vlt's store, and `vendor --revert` repeats it for an
 optional dependency (a plain `vlt install` keeps the link to the removed vendored
 directory) or a link still into the vendored directory.

From ca96dc28d8fea17f753e616cd71aec10c3f5a2a8 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:24:56 -0400
Subject: [PATCH 43/46] Correct the vlt hosted confirmation contract

CLI_CONTRACT.md said a dep refused by the vlt rewriter is refused for
every lock only while vlt drives, and elsewhere that all four per-dep
vlt codes leave a dep unconfirmed whichever lock drives. Neither matched
the code: a dep the rewriter refuses (missing sha512, unsupported lock
key) is never confirmed, even when package-lock.json already carries its
hosted URL, while a dep vlt-lock.json merely lacks (entry not found or
vendored) is confirmed by a sibling lock when vlt does not drive.

Both passages now state that rule, and two in-process tests pin it.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/CLI_CONTRACT.md       |  4 +-
 .../tests/in_process_redirect/vlt.rs          | 59 +++++++++++++++++++
 2 files changed, 61 insertions(+), 2 deletions(-)

diff --git a/crates/socket-patch-cli/CLI_CONTRACT.md b/crates/socket-patch-cli/CLI_CONTRACT.md
index cb29b142..acc098aa 100644
--- a/crates/socket-patch-cli/CLI_CONTRACT.md
+++ b/crates/socket-patch-cli/CLI_CONTRACT.md
@@ -100,7 +100,7 @@ For a **9.0 root lock**, the CLI ensures `pnpm-workspace.yaml` carries `trustLoc
 
 `redirect_pnpm_no_lockfile` names pnpm when installer markers exist without a lock; `redirect_pnpm_entry_vendored` identifies a vendored entry instead of reporting it missing. Supported `shrinkwrap.yaml` files are writable lockfiles, not read-only markers.
 
-**vlt hosted-mode contract**: `scan` / `get --mode hosted` rewrite, in `vlt-lock.json`, every default-registry node of a granted `name@version` (the `''` / `npm` segment or a URL segment equal to the lock's scalar `registry`, both DepID grammars, every peer and modifier variant): slot [2] becomes the granted sha512 and slot [3] the hosted URL (appended to a 3-tuple); the DepID, flags and trailing slots, the line ending and every other byte stay. One `redirect_vlt_lock_node` ledger edit per changed node records the entry text (`"<DepID>": <tuple>`, no indent, comma or `\r`). `options` is never edited and `vlt.json` is only read. A lock with another `lockfileVersion` (decided on the raw JSON token), a BOM, a non-object body or a `nodes` section outside vlt's one-node-per-line layout refuses the whole lock (`redirect_vlt_lock_unsupported`). **Confirmation**: vlt drives when its install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is present or no other npm-family lock is; then only `vlt-lock.json` confirms a uuid, and a dep the vlt rewrite refuses is refused for every lock. Otherwise every lock is rewritten, `redirect_vlt_sibling_lockfiles` warns, and the other locks' rules confirm. **Artifact preflight**: before any takeover or write (dry runs included), each granted artifact with a default-registry instance is fetched once as vlt fetches it and must verify, else the dep is withheld (`redirect_vlt_artifact_unverifiable`, see the tag table). **Heal**: stale installed copies of Socket-owned nodes are removed so the next `vlt install` extracts the patched bytes, and `rollback` / `remove` do the same for the registry bytes (`--no-vlt-install-cleanup` keeps them; optional dependencies' copies are always kept); `redirect_vlt_reinstall_required` says what happened and what to run. The same-run `--vex` never attests a vlt package whose installed copy is stale or unchecked, whose lock a vlt release may ignore (`redirect_vlt_lockfile_version_missing`, `redirect_vlt_old_lockfile_ignored`, `redirect_vlt_scalar_registry_ignored`), or which also resolves from a non-default registry (`redirect_vlt_custom_registry_skipped`). `vlt.json` or vlt install state without `vlt-lock.json` warns `redirect_vlt_no_lockfile` instead of `redirect_npm_no_lockfile`. vlt ledgers require the socket-patch release that adds vlt support. Tested releases: `docs/testing/vlt-compatibility.md`.
+**vlt hosted-mode contract**: `scan` / `get --mode hosted` rewrite, in `vlt-lock.json`, every default-registry node of a granted `name@version` (the `''` / `npm` segment or a URL segment equal to the lock's scalar `registry`, both DepID grammars, every peer and modifier variant): slot [2] becomes the granted sha512 and slot [3] the hosted URL (appended to a 3-tuple); the DepID, flags and trailing slots, the line ending and every other byte stay. One `redirect_vlt_lock_node` ledger edit per changed node records the entry text (`"<DepID>": <tuple>`, no indent, comma or `\r`). `options` is never edited and `vlt.json` is only read. A lock with another `lockfileVersion` (decided on the raw JSON token), a BOM, a non-object body or a `nodes` section outside vlt's one-node-per-line layout refuses the whole lock (`redirect_vlt_lock_unsupported`). **Confirmation**: vlt drives when its install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is present or no other npm-family lock is; then only `vlt-lock.json` confirms a uuid. Otherwise every lock is rewritten, `redirect_vlt_sibling_lockfiles` warns, and the other locks' rules confirm, including a dep `vlt-lock.json` merely does not wire (`redirect_vlt_entry_not_found`, `redirect_vlt_entry_vendored`). Whichever lock drives, a dep the vlt rewriter refuses (`redirect_vlt_missing_sha512`, `redirect_vlt_unsupported_lock_key`) is never confirmed by any lock, although a sibling lock may already carry its rewritten URL. **Artifact preflight**: before any takeover or write (dry runs included), each granted artifact with a default-registry instance is fetched once as vlt fetches it and must verify, else the dep is withheld (`redirect_vlt_artifact_unverifiable`, see the tag table). **Heal**: stale installed copies of Socket-owned nodes are removed so the next `vlt install` extracts the patched bytes, and `rollback` / `remove` do the same for the registry bytes (`--no-vlt-install-cleanup` keeps them; optional dependencies' copies are always kept); `redirect_vlt_reinstall_required` says what happened and what to run. The same-run `--vex` never attests a vlt package whose installed copy is stale or unchecked, whose lock a vlt release may ignore (`redirect_vlt_lockfile_version_missing`, `redirect_vlt_old_lockfile_ignored`, `redirect_vlt_scalar_registry_ignored`), or which also resolves from a non-default registry (`redirect_vlt_custom_registry_skipped`). `vlt.json` or vlt install state without `vlt-lock.json` warns `redirect_vlt_no_lockfile` instead of `redirect_npm_no_lockfile`. vlt ledgers require the socket-patch release that adds vlt support. Tested releases: `docs/testing/vlt-compatibility.md`.
 
 **Takeover reconciliation (npm family, bun and vlt included)**: vendoring over a hosted-redirected purl (`vendor`, `scan --mode vendored`, `get --mode vendored`) first REVERTS that purl's hosted lockfile edits to their pre-redirect registry values through the per-purl redirect revert, drops the purl's record + package edits from `redirect-state.json`, and then vendors — so the vendor ledger records the PRISTINE registry fragment as its wiring `original` and `vendor --revert` lands back on registry state, never on an expiring hosted URL. The run that takes over records a `vendor_takeover_reverted_redirect` advisory event (`skipped` action beside the purl's genuine outcome; the human path prints `Warning (vendor_takeover_reverted_redirect): …`). `--dry-run` PROBES the same revert against an in-memory ledger clone instead of promising it: a clean probe reports `vendor_would_revert_redirect`, and a drifted lock or an undecidable ledger edit surfaces in the preview with the wet run's `redirect_revert_failed` code and detail (for bun, whose hosted rewrite replaces the entry's `name@version` spec, the preview first runs the Bun vendored preflight described below and then stops at the advisory instead of reading the still-hosted lock — a lock the vendored backend would refuse is previewed as the wet run's `failed <code>`, never as `vendor_would_revert_redirect`). A purl whose hosted edits cannot be cleanly reverted fails `redirect_revert_failed` (exit 1 / `partial_failure`, nothing vendored for it, the hosted wiring left in place, the remedy in the detail). **bun** participates like every other npm-family flavor: binary `redirect_bun_lockb_package` snapshots are claimed by their recorded package identity and restore individual binary resolutions; its text `redirect_bun_lock_package` edits are claimed by the recorded line's spec — the registry spec `<name>@<version>`, or a hosted URL whose tarball leaf is `<name>-<version>.tgz` — so a sibling version's or an aliased sibling's edit is neither claimed nor a refusal, and only an edit that mentions the package without being a bun packages-entry line refuses (remedy: an unscoped `socket-patch rollback`, whose whole-ledger replay unwinds bun.lock hosted edits; never hand-edit the ledger). The same claim rule serves scoped `rollback <purl>` / `remove <purl>` of one of several hosted bun records (see "Hosted unwind coverage"). Hosted → vendored and vendored → hosted (`redirect_takeover_reverted_vendored` in `redirect.warnings[]`) both work in place on bun locks the target mode accepts. **Bun vendored preflight before the takeover**: `vendor` — like `scan` / `get --mode vendored`, whose pre-download preflight runs earlier — checks `bun.lock` / `bun.lockb` with the shared Bun vendored preflight BEFORE the per-purl hosted revert, so a hosted-redirected purl on a lock the vendored backend refuses (a pre-version-2 `workspace:` lock → `vendor_bun_workspace_unsupported`; a malformed or unsupported binary lock → `vendor_bun_lockb_invalid`; an unsupported text-lock version → its code) is reported `failed <code>` with the hosted wiring, the redirect ledger and active Bun lock byte-untouched (exit 1 / `partial_failure`): the package stays hosted-patched instead of being un-hosted and then refused. `vendor --dry-run` previews that same `failed` code (exit-code parity with the wet run, nothing written) instead of promising `vendor_would_revert_redirect`. Pinned by `tests/in_process_vendor_bun_takeover.rs` and, against real Bun, `tests/mode_migration_bun.rs`. **golang** takes over the same way: the per-purl revert drops the module's hosted `replace`, removes the socket module's go.sum lines, puts the pruned upstream go.sum lines back in go's sort order, and drops the ledger record, so the vendored `replace` is recorded over pristine go.mod/go.sum (a go.mod whose replace for the module is no longer the recorded one refuses `redirect_revert_failed`). The separate run-level `vendor_supersedes_redirect` warning covers the reconcile-only case — a live lock that already proves vendored won over a stale hosted ledger record (the vendor wiring then holds the hosted-spliced fragment as `original`) — and fires exactly once, on the run that drops the stale records. Which way the live lock points is decided by the same lockfile discovery and ledger-liveness rules `vex` gates attestations on (see "Manifest-less VEX (lockfile discovery)"), for this warning, its `redirect_supersedes_vendored` twin and `hosted_wiring_retained` alike.
 
@@ -1305,7 +1305,7 @@ Every `--json` invocation emits a single JSON object that follows the **unified
 | `redirect_bun_lockb_invalid` | `redirect.warnings[]` (warning) | scan/get `--mode hosted`: the native binary lock is malformed, unreadable, unsupported or cannot be rewritten safely. No installer is spawned and no binary or sibling npm lock edit or takeover occurs; dry-run reports the same format error. Exit 0, `redirected: 0`. |
 | `redirect_bun_entry_not_found` / `redirect_bun_missing_sha512` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (bun): the lock has no rewritable entry at the granted version (re-resolved, or occupied by an unowned URL/file spec) / the grant carries no sha512 integrity. Per-dep; nothing rewritten for it; exit 0. NOT emitted for the digest-less 2-tuple Bun 1.1.39–1.3.9 re-save our URL tuple as — that entry counts as redirected and is healed. |
 | `redirect_vlt_lock_unsupported` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` has a `lockfileVersion` other than absent, `0` or `1` (decided on the raw JSON token), is not a JSON object, starts with a UTF-8 BOM, or its `nodes` section is not vlt's one-node-per-line layout. Nothing rewritten; also refuses a vendored → hosted takeover of a `flavor: "vlt"` entry before its revert (`redirect.skipped[].reason`). Exit 0. |
-| `redirect_vlt_missing_sha512` / `redirect_vlt_entry_not_found` / `redirect_vlt_entry_vendored` / `redirect_vlt_unsupported_lock_key` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the grant has no sha512 / the lock has no default-registry node for `name@version` / the only match is a vendored `file` node under `.socket/vendor/npm/<uuid>/` / a default-registry instance is outside vlt's node-line grammar or still unpatched after the splice. Per dep; none of the dep's instances is written, and a refused dep is never confirmed, whichever lock drives. Exit 0. |
+| `redirect_vlt_missing_sha512` / `redirect_vlt_entry_not_found` / `redirect_vlt_entry_vendored` / `redirect_vlt_unsupported_lock_key` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the grant has no sha512 / the lock has no default-registry node for `name@version` / the only match is a vendored `file` node under `.socket/vendor/npm/<uuid>/` / a default-registry instance is outside vlt's node-line grammar or still unpatched after the splice. Per dep; none of the dep's instances is written. `redirect_vlt_missing_sha512` and `redirect_vlt_unsupported_lock_key` refuse the dep: it is never confirmed, whichever lock drives (a sibling lock may still carry its rewritten URL). `redirect_vlt_entry_not_found` and `redirect_vlt_entry_vendored` only say `vlt-lock.json` does not wire it: while vlt drives it is not confirmed; otherwise a sibling lock's rules may confirm it. Exit 0. |
 | `redirect_vlt_custom_registry_skipped` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): same-`name@version` nodes under a named alias, a scoped registry or jsr, or git, remote-tarball or local-directory nodes of the same package name (vlt records no version for those; a remote tarball whose `<name>-<version>.tgz` leaf names another version does not count), were left untouched (hosted mode only redirects vlt's default registry). The dep is still redirected, but the run's `--vex` does not attest it, and neither does a later `vex` from the lock alone. |
 | `redirect_vlt_lockfile_version_missing` / `redirect_vlt_old_lockfile_ignored` / `redirect_vlt_scalar_registry_ignored` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): the lock has no `lockfileVersion` (vlt ≥ 1.0.0-rc.15 re-resolves it) / a legacy default-registry id without `"modifiers"` in `vlt.json` (vlt 0.0.0-16 … 0.0.0-24 ignore the lock) / a scalar `registry` option that vlt 1.0.0-rc.7 … rc.29 honor over the lock. The deps stay redirected, but the run's `--vex` does not attest them. |
 | `redirect_vlt_sibling_lockfiles` | `redirect.warnings[]` (warning) | scan/get `--mode hosted` (vlt): `vlt-lock.json` and another npm-family lock are both present and vlt's install state (`node_modules/.vlt-lock.json` or `node_modules/.vlt/`) is not, so both locks were rewritten and the other lock's rules confirm. |
diff --git a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
index 23174b1f..8635e9b8 100644
--- a/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
+++ b/crates/socket-patch-cli/tests/in_process_redirect/vlt.rs
@@ -598,6 +598,65 @@ async fn scan_redirect_vlt_drives_entry_not_found_sibling_rewrite_does_not_confi
     assert_eq!(artifact_requests(&server).await, 0);
 }
 
+/// When vlt does not drive (a sibling lock and no vlt install state), a
+/// dep vlt-lock.json merely lacks is confirmed by the sibling lock's rules.
+#[tokio::test]
+async fn scan_redirect_vlt_not_driving_entry_not_found_sibling_confirms() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_package_json(tmp.path());
+    std::fs::write(
+        tmp.path().join("vlt-lock.json"),
+        lock_with(Era::V1, &["\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string()]),
+    )
+    .unwrap();
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    let codes = warning_codes(&doc);
+    assert!(
+        codes.contains(&"redirect_vlt_entry_not_found".to_string())
+            && codes.contains(&"redirect_vlt_sibling_lockfiles".to_string()),
+        "{doc:#}"
+    );
+    assert!(read(tmp.path(), "package-lock.json").contains(&artifact_url(&server)));
+    assert_eq!(redirected(&doc), 1, "{doc:#}");
+    assert!(ledger(tmp.path())["records"][PURL].is_object());
+}
+
+/// A dep the vlt rewriter refuses is confirmed by no lock, even when vlt
+/// does not drive and the sibling lock already carries its hosted URL.
+#[tokio::test]
+async fn scan_redirect_vlt_not_driving_refused_dep_is_not_confirmed_by_the_sibling() {
+    let server = MockServer::start().await;
+    mock_all(&server).await;
+    let tmp = tempfile::tempdir().unwrap();
+    write_package_json(tmp.path());
+    let off_grammar =
+        format!("\"{TILDE_ID}\": [0, \"{NAME}\", \"{UPSTREAM_SHA512}\", \"{REGISTRY_URL}\"]");
+    let lock = lock_with(
+        Era::V1,
+        &["\"~npm~ms@2.1.3\": [0,\"ms\"]".to_string(), off_grammar],
+    );
+    std::fs::write(tmp.path().join("vlt-lock.json"), &lock).unwrap();
+    std::fs::write(tmp.path().join("package-lock.json"), package_lock()).unwrap();
+
+    let (_, doc) = scan_hosted(tmp.path(), &server, &["--no-npm-allow-remote-config"], &[]);
+
+    let codes = warning_codes(&doc);
+    assert!(
+        codes.contains(&"redirect_vlt_unsupported_lock_key".to_string())
+            && codes.contains(&"redirect_vlt_sibling_lockfiles".to_string()),
+        "{doc:#}"
+    );
+    assert_eq!(read(tmp.path(), "vlt-lock.json"), lock);
+    assert!(read(tmp.path(), "package-lock.json").contains(&artifact_url(&server)));
+    assert_eq!(redirected(&doc), 0, "{doc:#}");
+    assert!(!ledger_path(tmp.path()).exists() || ledger(tmp.path())["records"][PURL].is_null());
+}
+
 const VENDORED_UUID: &str = "11111111-2222-4333-8444-555555555555";
 
 /// A vlt project whose left-pad is vendored (§3.4 D19 dir node) and

From 88c0efc3f534383b3eb736671f6723764f88b514 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:25:02 -0400
Subject: [PATCH 44/46] Check frozen installs in the vlt scalar legacy leg
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

On vlt rc.7 and rc.8, the vendored era-A scalar-registry leg skipped
the frozen-install half of its fresh-checkout check and hard-asserted
that vlt ci re-keys the bystander package from public npm, a vlt quirk
unrelated to socket-patch that was measured on rc.8 only.

The leg now asserts that the vendored node and payload survive vlt ci,
then clears node_modules and requires a frozen install to land the
patch again without changing the lock vlt ci wrote. The bystander
re-key is only logged. Measured on rc.7 and rc.8 (both re-key it to a
`··` id); the boundary table row says so.

Assisted-by: Claude Code:claude-opus-5-5
---
 .../tests/e2e_vendor_vlt_build.rs             | 51 +++++++++++++------
 docs/testing/vlt-compatibility.md             |  2 +-
 2 files changed, 37 insertions(+), 16 deletions(-)

diff --git a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
index ede961f4..d14a94ef 100644
--- a/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
+++ b/crates/socket-patch-cli/tests/e2e_vendor_vlt_build.rs
@@ -122,18 +122,25 @@ fn repair(fx: &Fixture) -> SocketOut {
     socket_api(&fx.proj, &fx.svc, &["repair"], &[])
 }
 
+/// The lock's `file` node wiring `t`'s vendored dir, if any.
+fn vendored_file_node(lock: &Value, t: &PatchTarget) -> Option<String> {
+    let r = rel(t);
+    lock["nodes"]
+        .as_object()?
+        .iter()
+        .find(|(id, tuple)| id.starts_with("file") && tuple[3] == r)
+        .map(|(id, _)| id.clone())
+}
+
 /// The committed wiring for `t`: the importer spec, the lock's `file` node
 /// and the payload (with `devDependencies` stripped from package.json).
 fn assert_vendored(fx: &Fixture, t: &PatchTarget, importer: &str) {
     let r = rel(t);
     let lock = read_lock(&fx.proj);
-    let file_node = lock["nodes"]
-        .as_object()
-        .unwrap()
-        .iter()
-        .find(|(id, _)| id.starts_with("file") && lock["nodes"][*id][3] == r)
-        .map(|(id, _)| id.clone());
-    assert!(file_node.is_some(), "a file node for {r}: {lock:#}");
+    assert!(
+        vendored_file_node(&lock, t).is_some(),
+        "a file node for {r}: {lock:#}"
+    );
     let pkg: Value = serde_json::from_slice(
         &std::fs::read(fx.proj.join(importer).join("package.json")).unwrap(),
     )
@@ -1358,17 +1365,31 @@ async fn vlt_pinned_matrix_vendored_legacy_lockfile_warning() {
             "{doc:#}"
         );
         if scalar && scalar_registry_ignored(fx.leg.version()) {
-            // rc.7 … rc.29 re-resolve a scalar-registry lock: `vlt ci`
-            // rewrites the bystander's URL-segment id to `··` (measured on
-            // rc.8), so only the vendored payload is asserted.
-            let co = fx.checkout("fresh-legacy-scalar");
-            fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), "fresh-legacy-scalar");
-            assert_eq!(state(&co, fx.t()), State::Patched);
+            // rc.7 … rc.29 re-resolve a scalar-registry lock, so `vlt ci`
+            // is not byte-stable here: it re-keys the bystander from
+            // (public) npm, which is vlt's business and only logged. The
+            // vendored node and payload must survive it, and the frozen
+            // install must land them again on the lock `vlt ci` wrote.
+            let name = "fresh-legacy-scalar";
+            let co = fx.checkout(name);
+            fx.vlt_ok_profile(&co, &fx.leg.locked_install_args(), name);
+            assert_eq!(state(&co, fx.t()), State::Patched, "after ci");
             let ci = read_lock(&co);
             assert!(
-                node_id(&ci, MS.0, MS.1).starts_with("··"),
-                "vlt re-resolved the scalar-registry lock: {ci:#}"
+                vendored_file_node(&ci, fx.t()).is_some(),
+                "ci keeps the vendored node: {ci:#}"
+            );
+            eprintln!(
+                "observed: vlt {} ci re-keys the bystander as {:?}",
+                fx.leg.tc.raw,
+                node_ids(&ci, MS.0, MS.1)
             );
+            let frozen = fx.leg.frozen_args();
+            std::fs::remove_dir_all(co.join("node_modules")).unwrap();
+            let before = lock_bytes(&co);
+            fx.vlt_ok_profile(&co, &frozen, &format!("{name}-frozen"));
+            assert_eq!(state(&co, fx.t()), State::Patched, "after {frozen:?}");
+            assert_eq!(lock_bytes(&co), before, "frozen keeps the post-ci lock");
         } else {
             assert_fresh_vendored(
                 &fx,
diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md
index 23f7e758..7129edf7 100644
--- a/docs/testing/vlt-compatibility.md
+++ b/docs/testing/vlt-compatibility.md
@@ -231,7 +231,7 @@ store-linker knob, `unset` when not given), `cache_root` and `upgrade`
 | `vlt install` loads `node:sqlite`, unflagged from Node 22.13.0, above `engines` (`>=22` through rc.9, `>=22.9.0` for rc.10 … rc.18; 22.12.0: `ERR_UNKNOWN_BUILTIN_MODULE`); `install-proof` runs rc.18 on 22.13.0 | `0.0.0-31 … 1.0.0-rc.18` | — | — | — | — |
 | `vlt ci`, `--frozen-lockfile`, `--expect-lockfile` exist | `< 0.0.0-19` | — | hosted | `frozen_dead_registry`, `optional_dependency_heal`, `then_vendored_optional_takeover` | `no-vlt-ci` |
 | a scalar `registry` makes lock-driven installs re-resolve from public npm | `1.0.0-rc.7 … 1.0.0-rc.29` | — | hosted | `frozen_dead_registry` | `non-hermetic-registry` |
-| the same re-resolution makes `vlt ci` rewrite a vendored era-A lock's scalar-registry ids to `··` (the vendored `file:` payload still installs patched), so `legacy_lockfile_warning`'s scalar arm pins that instead of a byte-stable lock | `1.0.0-rc.7 … 1.0.0-rc.8` | — | — | — | — |
+| the same re-resolution makes `vlt ci` rewrite a vendored era-A lock's scalar-registry ids to `··` (measured on rc.7 and rc.8; the vendored `file:` node and payload survive it), so `legacy_lockfile_warning`'s scalar arm asserts the patched payload after `vlt ci` and a frozen install that keeps the lock `vlt ci` wrote, and only logs the re-keyed bystander | `1.0.0-rc.7 … 1.0.0-rc.8` | — | — | — | — |
 | registry tarball integrity is not enforced on a cold fetch | `== 0.0.0-1` | — | hosted | `tamper_cold_eintegrity` | `integrity-unenforced` |
 | bare specs honor `registries.npm` | `< 1.0.0-rc.33` | — | hosted | `mirror_registries_npm` | `registries-npm-ignored` |
 | named registry specs (`acme:x@1`), scoped registries and URL-segment DepIDs exist (flat-config releases record every registry node under the default segment) | `< 0.0.0-14` | — | hosted | `named_alias_untouched` | `no-named-registry-specs` |

From 799b0a2c0891a32ad941c4d74c9e50991946e0cb Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:25:24 -0400
Subject: [PATCH 45/46] Log when the vlt settle hook stops waiting

The test harness hook that waits for vlt's detached children dropped a
child silently after 120 s, so a leg that then saw a half-finished tree
failed with no hint of why. The hook now writes a `vlt-settle:` line to
stderr naming the child it stopped waiting for. The cap can be set with
SOCKET_PATCH_VLT_SETTLE_CAP_MS, which a new test uses to check the line
and that a quick child is still awaited silently.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-cli/tests/common/mod.rs | 10 +++-
 crates/socket-patch-cli/tests/e2e_vlt.rs    | 62 +++++++++++++++++++++
 2 files changed, 70 insertions(+), 2 deletions(-)

diff --git a/crates/socket-patch-cli/tests/common/mod.rs b/crates/socket-patch-cli/tests/common/mod.rs
index fc781fe6..7199ee0e 100644
--- a/crates/socket-patch-cli/tests/common/mod.rs
+++ b/crates/socket-patch-cli/tests/common/mod.rs
@@ -227,11 +227,14 @@ pub fn cargo_run(cwd: &Path, args: &[&str], extra_env: &[(&str, &str)]) -> Outpu
 /// or an explicit `process.exit`) the hook closes those children's stdin,
 /// as the exit would (0.0.0-1 never ends it), and exits only after they
 /// have. Children are spawned exactly as vlt asks. One still running after
-/// 120 s is no longer awaited.
+/// 120 s (`SOCKET_PATCH_VLT_SETTLE_CAP_MS`) is no longer awaited, and the
+/// hook says so on stderr: a leg that then sees a half-finished tree names
+/// the child it stopped waiting for.
 const VLT_SETTLE_JS: &str = r#"import cp from 'node:child_process';
 import { syncBuiltinESMExports } from 'node:module';
 const spawn = cp.spawn;
 const pending = new Set();
+const capMs = Number(process.env.SOCKET_PATCH_VLT_SETTLE_CAP_MS) || 120000;
 let spawned = 0;
 let settled = -1;
 cp.spawn = function (file, args, opts) {
@@ -240,7 +243,10 @@ cp.spawn = function (file, args, opts) {
   if (!o || !o.detached || child.pid === undefined) return child;
   spawned++;
   pending.add(child);
-  const cap = setTimeout(() => pending.delete(child), 120000);
+  const cap = setTimeout(() => {
+    pending.delete(child);
+    process.stderr.write(`vlt-settle: stopped waiting for detached child ${child.pid} (${file} ${Array.isArray(args) ? args.join(' ') : ''}) after ${capMs} ms\n`);
+  }, capMs);
   cap.unref();
   child.once('exit', () => { clearTimeout(cap); pending.delete(child); });
   return child;
diff --git a/crates/socket-patch-cli/tests/e2e_vlt.rs b/crates/socket-patch-cli/tests/e2e_vlt.rs
index ee25d471..dc9e45e5 100644
--- a/crates/socket-patch-cli/tests/e2e_vlt.rs
+++ b/crates/socket-patch-cli/tests/e2e_vlt.rs
@@ -762,3 +762,65 @@ async fn vlt_pinned_matrix_setup_hook_abort_leaves_no_staging() {
     assert!(!out.stdout.contains(".VLT.DELETE"), "{out}");
     fx.leg.ran();
 }
+
+// ── harness ───────────────────────────────────────────────────────────────
+
+/// A stand-in `vlt.js` that spawns one detached child living `child_ms`
+/// and exits at once, as vlt's cache unzip does.
+fn fake_vlt(dir: &Path, child_ms: u64) -> std::path::PathBuf {
+    let js = dir.join("fake-vlt.mjs");
+    std::fs::write(
+        &js,
+        format!(
+            "import cp from 'node:child_process';\n\
+             const child = cp.spawn(process.execPath, ['-e', 'setTimeout(() => {{}}, \
+             {child_ms})'], {{ detached: true, stdio: 'ignore' }});\n\
+             child.unref();\n\
+             process.exit(0);\n"
+        ),
+    )
+    .unwrap();
+    js
+}
+
+/// The settle hook awaits a detached child that finishes, silently, and
+/// gives up on one past its cap with a stderr line naming it.
+#[test]
+fn vlt_settle_hook_reports_the_child_it_stops_waiting_for() {
+    if std::process::Command::new("node")
+        .arg("--version")
+        .output()
+        .map_or(true, |o| !o.status.success())
+    {
+        eprintln!("skip: no node on PATH");
+        return;
+    }
+    let tmp = tempfile::tempdir().unwrap();
+    let marker = "vlt-settle: stopped waiting for detached child";
+
+    let quick = fake_vlt(tmp.path(), 200);
+    let out = vlt_e2e_common::common::vlt_run(tmp.path(), &quick, &[], &[]);
+    let stderr = String::from_utf8_lossy(&out.stderr);
+    assert!(out.status.success(), "{stderr}");
+    assert!(!stderr.contains(marker), "{stderr}");
+
+    let slow = fake_vlt(tmp.path(), 4000);
+    let start = std::time::Instant::now();
+    let out = vlt_e2e_common::common::vlt_run(
+        tmp.path(),
+        &slow,
+        &[],
+        &[("SOCKET_PATCH_VLT_SETTLE_CAP_MS", "300")],
+    );
+    let stderr = String::from_utf8_lossy(&out.stderr);
+    assert!(out.status.success(), "{stderr}");
+    assert!(
+        start.elapsed() < std::time::Duration::from_millis(3500),
+        "the capped child is not awaited: {:?}",
+        start.elapsed()
+    );
+    assert!(
+        stderr.contains(marker) && stderr.contains("after 300 ms"),
+        "{stderr}"
+    );
+}

From ff2ceb8fd9195e8f30d4a8d77011e9a2ee5cdca9 Mon Sep 17 00:00:00 2001
From: Mikola Lysenko <mikolalysenko@gmail.com>
Date: Sat, 26 Sep 2026 17:43:33 -0400
Subject: [PATCH 46/46] Expect withheld vlt pins in the capture VEX test

The capture VEX test still expected every hosted pin of every captured
lock to be attested, but discovery now withholds the pins of a lock
some vlt release discards (the 0.0.0-1 and 0.0.0-16 captures have no
lockfileVersion). It now copies each capture's vlt.json beside the
lock and expects those locks to keep their refs unpinned with one
patched_ref_unattributable warning.

Assisted-by: Claude Code:claude-opus-5-5
---
 crates/socket-patch-core/tests/vlt_locks.rs | 26 ++++++++++++++-------
 1 file changed, 18 insertions(+), 8 deletions(-)

diff --git a/crates/socket-patch-core/tests/vlt_locks.rs b/crates/socket-patch-core/tests/vlt_locks.rs
index afc39f52..e3d67008 100644
--- a/crates/socket-patch-core/tests/vlt_locks.rs
+++ b/crates/socket-patch-core/tests/vlt_locks.rs
@@ -18,6 +18,7 @@ use serde_json::Value;
 use socket_patch_core::hash::git_sha256::compute_git_sha256_from_bytes;
 use socket_patch_core::manifest::schema::{PatchFileInfo, PatchRecord};
 use socket_patch_core::patch::apply::PatchSources;
+use socket_patch_core::patch::redirect::vlt::DISCARDING_LOCK_CODES;
 use socket_patch_core::patch::redirect::{rewrite_registry_redirect, DepOverride};
 use socket_patch_core::vendor::lock_inventory::{inventory_project, LockIntegrity};
 use socket_patch_core::vendor::npm_flavor::{revert_npm_any, vendor_npm_any};
@@ -883,9 +884,12 @@ async fn lock_inventory_reads_every_capture_and_drops_vendored_nodes() {
 #[tokio::test]
 async fn vex_discovers_every_hosted_rewrite_and_nothing_before_it() {
     let overrides = overrides();
-    for (version, targets, _) in CAPTURES {
+    for (version, targets, warnings) in CAPTURES {
         let files = read_capture(version);
         let rewritten = rewrite_registry_redirect(&files, &overrides);
+        let discarded = warnings
+            .iter()
+            .any(|code| DISCARDING_LOCK_CODES.contains(code));
         for (label, text) in [
             ("input", files["vlt-lock.json"].clone()),
             ("output", rewritten.files["vlt-lock.json"].clone()),
@@ -896,9 +900,18 @@ async fn vex_discovers_every_hosted_rewrite_and_nothing_before_it() {
         ] {
             let tmp = tempfile::tempdir().unwrap();
             fs::write(tmp.path().join("vlt-lock.json"), &text).unwrap();
+            if let Some(config) = files.get("vlt.json") {
+                fs::write(tmp.path().join("vlt.json"), config).unwrap();
+            }
             let out = discover_patched_refs(tmp.path()).await;
-            assert!(
-                out.diagnostics.is_empty(),
+            let codes: Vec<&str> = out.diagnostics.iter().map(|d| d.code).collect();
+            let want_codes: Vec<&str> = if discarded && label != "input" {
+                vec!["patched_ref_unattributable"]
+            } else {
+                Vec::new()
+            };
+            assert_eq!(
+                codes, want_codes,
                 "{version} {label}: {:?}",
                 out.diagnostics
             );
@@ -907,11 +920,8 @@ async fn vex_discovers_every_hosted_rewrite_and_nothing_before_it() {
                 .iter()
                 .map(|r| {
                     assert_eq!(r.mode, WiringMode::Hosted, "{version} {label}");
-                    assert_eq!(
-                        r.locked_integrity,
-                        Some(LockIntegrity::Sri(patched_sha(&r.uuid))),
-                        "{version} {label}"
-                    );
+                    let pin = (!discarded).then(|| LockIntegrity::Sri(patched_sha(&r.uuid)));
+                    assert_eq!(r.locked_integrity, pin, "{version} {label}");
                     (r.purl.clone(), r.uuid.clone())
                 })
                 .collect();