crash: bun add remote package tar.gz dependency loop and errors

[mizulu]

How can we reproduce the crash?

adding a package directly from a remote tar file

bun pm cache rm
bun add https://myhost/package-1.0.0.tar.gz // worked
bun add https://myhost/package-1.0.0.tar.gz?1 // has a dependency loop error will show
bun add https://myhost/package-1.0.0.tar.gz // some errors
bun add https://myhost/package-1.0.0.tar.gz // ENOTEMPTY: Directory not empty (NtSetInformationFile()) + InstallFailed extracting tarball from
bun pm cache rm
bun add https://myhost/bunner-1.0.0.tar.gz // bun add v1.2.18-canary.1 (29dd416) installed then panic(main thread): Internal assertion failure

bun add v1.2.18-canary.1 (29dd4166)
  🔍 Resolving [1/1] error: moving "https://myhost/package-1.0.0.tar.gz" to cache dir failed

Relevant log output

Stack Trace (bun.report)

Bun v1.2.18-canary (29dd416) on windows x86_64 [AddCommand]

panic: Internal assertion failure

• js_ast.zig:3672: asProperty
• install.zig:7498: updatePackageJSONAndInstallWithManagerWithUpdates
• install.zig:7008: updatePackageJSONAndInstallAndCLI
• install.zig:6961: updatePackageJSONAndInstall
• install.zig:6363: updatePackageJSONAndInstallCatchError
• cli.zig:48: start
• main.zig:67: main
• exe_common.inl:78: invoke_main

Features: tsconfig, binlinks, extracted_packages, lifecycle_scripts, text_lockfile, spawn

[github-actions]

Thank you for reporting this crash.

For Bun's internal tracking, this issue is BUN-MFD.