@visulima/vis 0.0.1 → 1.0.0-alpha.10

package/dist/packem_chunks/bin.js

@@ -0,0 +1,87 @@
+var Gn=Object.defineProperty;var f=(e,t)=>Gn(e,"name",{value:t,configurable:!0});import{createRequire as Hn}from"node:module";import{lazyNamed as K,createCerebro as Kn}from"@visulima/cerebro";import Yn from"@visulima/cerebro/command/completion";import Qn from"@visulima/cerebro/compile-cache";import{applyHeapTuning as Xn}from"@visulima/cerebro/heap-tuning";import{errorHandlerPlugin as Zn}from"@visulima/cerebro/plugins/error-handler";import{ensureDirSync as Ve,isAccessibleSync as u,readFileSync as j,walkSync as Qt,readJsonSync as U,writeFileSync as A}from"@visulima/fs";import{findMonorepoRootSync as Xt}from"@visulima/package";import{join as d,resolve as st,dirname as eo,parse as to}from"@visulima/path";import{useApp as Zt,useInput as en,Dialog as et,Text as g,Box as S,ScrollView as no,ScrollBar as oo,useWindowSize as ao,render as ro}from"@visulima/tui";import io,{useState as Pe,useRef as Ie,useEffect as tt,useCallback as tn,useSyncExternalStore as so}from"react";import{jsx as m,jsxs as b}from"react/jsx-runtime";import{m as Me}from"../packem_shared/target-merge-DNa-6eWu.js";import{findVisConfigFile as Ae,loadVisConfig as jt}from"./config.js";import{readYamlSync as nn}from"@visulima/fs/yaml";import{hyperlink as mo}from"@visulima/ansi";import{dim as De,red as Xe,bold as oe,yellow as Re,cyan as pe,green as go}from"@visulima/colorize";import{validRange as ko,satisfies as bo,coerce as wo,lt as $o,gt as So}from"semver";import{createPail as xo}from"@visulima/pail";import{resolveAdd as jo,whichBin as Co,execPmCommandInteractive as Oo,resolveInstall as Po,resolveDedupe as Ro,resolveDlx as Io,resolveExec as Bo,resolveLink as Vo,resolvePmCommand as Ao,resolveRemove as Eo,resolveUnlink as To,resolveWhy as Do,detectPackageManager as Mo,resolveOutdated as No}from"#native";const qn=Hn(import.meta.url),ve=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,Be=f(e=>{if(typeof ve<"u"&&ve.versions&&ve.versions.node){const[t,n]=ve.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return ve.getBuiltinModule(e)}return qn(e)},"__cjs_getBuiltinModule"),{env:Qe}=ve,{spawnSync:ke,execSync:lo}=Be("node:child_process"),{writeFileSync:E,statSync:we,readdirSync:ae,rmSync:lt,copyFileSync:co,unlinkSync:Fe,mkdirSync:po,cpSync:uo}=Be("node:fs"),{platform:fo,homedir:Le}=Be("node:os"),{resolve:ho,join:yo}=Be("node:path"),{createInterface:vo}=Be("node:readline");var Wo="1.0.0-alpha.9";const Ne={version:Wo};var Fo=Object.defineProperty,Lo=f((e,t)=>Fo(e,"name",{value:t,configurable:!0}),"e$H");const _o={argument:{description:"Target selector (same syntax as `vis run`): `build`, `:build`, `~:test`, `#tag:lint`, …",name:"selector",type:String},description:"Show the execution plan for a target without running it",examples:[["vis action-graph build","Print the task plan for `build` on every project"],["vis action-graph :test","Moon-style selector"],["vis action-graph build --json","Emit a JSON description of the plan"],['vis action-graph lint --query "tag=frontend"',"Filter projects by query"]],group:"Workspace",loader:Lo(()=>import("./handler.js"),"loader"),name:"action-graph",options:[{defaultValue:!1,description:"Emit JSON instead of ASCII",name:"json",type:Boolean},{description:"Filter matched projects by a query",name:"query",type:String}]};var zo=Object.defineProperty,Uo=f((e,t)=>zo(e,"name",{value:t,configurable:!0}),"e$G");const Jo={argument:{description:"Packages to add (e.g., react react-dom)",name:"packages",type:String},description:"Add packages using the detected package manager",examples:[["vis add react react-dom","Add packages"],["vis add -D typescript @types/react","Add as dev dependencies"],["vis add react --filter app","Add to specific workspace package"],["vis add -g typescript","Add globally (uses npm)"],["vis add lodash -w","Add to workspace root"],["vis add lodash --no-socket-check","Add without Socket.dev check"],["vis add lodash --no-typosquat-check","Skip typosquat name check"],["vis add lodash --run-scripts","Run lifecycle scripts (opts out of vis's default block-by-default policy)"]],group:"Dependencies",loader:Uo(()=>import("./handler2.js"),"loader"),name:"add",options:[{alias:"D",defaultValue:!1,description:"Add as dev dependency",name:"save-dev",type:Boolean},{alias:"E",defaultValue:!1,description:"Save exact version",name:"exact",type:Boolean},{alias:"P",defaultValue:!1,description:"Add as peer dependency",name:"save-peer",type:Boolean},{alias:"O",defaultValue:!1,description:"Add as optional dependency",name:"save-optional",type:Boolean},{alias:"g",defaultValue:!1,description:"Install globally (uses npm)",name:"global",type:Boolean},{alias:"w",defaultValue:!1,description:"Add to workspace root",name:"workspace-root",type:Boolean},{defaultValue:!1,description:"Use workspace protocol (pnpm)",name:"workspace",type:Boolean},{alias:"F",description:"Filter by workspace package name",multiple:!0,name:"filter",type:String},{defaultValue:!1,description:"Skip typosquat name check before adding",name:"no-typosquat-check",type:Boolean},{defaultValue:!1,description:"Skip Socket.dev security check before adding",name:"no-socket-check",type:Boolean},{defaultValue:!1,description:"Run lifecycle scripts during add (opts out of vis's default block-by-default policy; allowlisted packages run via security.allowBuilds)",name:"run-scripts",type:Boolean}]};var Go=Object.defineProperty,Ho=f((e,t)=>Go(e,"name",{value:t,configurable:!0}),"e$F");const qo={argument:{description:"The target to run (e.g., build, test, lint)",name:"target",type:String},description:"Run a target only on projects affected by recent changes",examples:[["vis affected build","Run build on affected projects"],["vis affected test --base=main","Run tests on projects changed since main"]],group:"Run & Execute",loader:Ho(()=>import("./handler3.js"),"loader"),name:"affected",options:[{defaultValue:"HEAD~1",description:"Git base ref for comparison",name:"base",type:String},{defaultValue:"HEAD",description:"Git head ref for comparison",name:"head",type:String},{defaultValue:"deep",description:'Downstream scope: "none", "direct", or "deep" — controls how far to include dependents of changed projects',name:"downstream",type:String},{defaultValue:"none",description:'Upstream scope: "none", "direct", or "deep" — controls how far to include dependencies of changed projects',name:"upstream",type:String},{defaultValue:3,description:"Maximum number of parallel tasks",name:"parallel",type:Number},{defaultValue:!0,description:"Enable caching (use --no-cache to disable)",name:"cache",type:Boolean},{defaultValue:!1,description:"Show what would run without executing",name:"dry-run",type:Boolean},{description:'Partition tasks for distributed CI (e.g., "1/4" for first of four runners). Falls back to VIS_PARTITION env var.',name:"partition",type:String},{description:"Filter affected projects by a query (e.g. 'language=typescript && tag=lib')",name:"query",type:String}]},ct={description:"Output format: table or json (default: table)",name:"format",type:String},Ko={commandPath:["ai"],description:"List detected AI providers and show which one is selected",examples:[["vis ai providers","List all AI providers and their status"],["vis ai providers --format json","Output as JSON"]],group:"System",loader:K(()=>import("./handler29.js"),"aiProvidersExecute"),name:"providers",options:[ct]},Yo={commandPath:["ai"],description:"Test the best available AI provider with a quick prompt",examples:[["vis ai test","Test the selected provider"]],group:"System",loader:K(()=>import("./handler29.js"),"aiTestExecute"),name:"test",options:[]},Qo={argument:{description:"Task ID to propose a fix for (e.g. @my/app:build)",name:"taskId",type:String},commandPath:["ai"],description:"Read a failed task's logs and propose a structured patch (Phase 1: local-only, no git)",examples:[["vis ai fix @myorg/app:build","Print proposed patch for the failed task"],["vis ai fix @myorg/app:build --apply","Apply the patch to disk after confirming"],["vis ai fix @myorg/app:build --format json","Machine-readable patch output"],["vis ai fix @myorg/app:build --run 2026-04-28T...","Inspect a specific historical run"]],group:"System",loader:K(()=>import("./handler29.js"),"aiFixExecute"),name:"fix",options:[ct,{description:"Use a specific run ID from .task-runner/runs/ instead of the latest run",name:"run",type:String},{defaultValue:!1,description:"Apply the proposed patch to disk after printing it",name:"apply",type:Boolean},{defaultValue:!1,description:"Bypass the AI response cache",name:"no-cache",type:Boolean},{defaultValue:!1,description:"Skip the confirmation prompt before applying",name:"yes",type:Boolean}]},Xo={description:"AI-assisted commands: provider detection and failure-fix proposals (cache management lives under `vis cache`)",examples:[["vis ai","List all AI subcommands"],["vis ai --format json","Machine-readable subcommand catalogue (for AI agents)"]],group:"System",loader:K(()=>import("./handler29.js"),"aiRootExecute"),name:"ai",options:[ct]},on=[Xo,Ko,Yo,Qo],yp=Object.defineProperty({__proto__:null,default:on},Symbol.toStringTag,{value:"Module"});var Zo=Object.defineProperty,ea=f((e,t)=>Zo(e,"name",{value:t,configurable:!0}),"e$E");const ta={argument:{description:"Package name to analyze (e.g., react)",name:"package",required:!0,type:String},description:"Analyze a single package update with AI",examples:[["vis analyze react","Analyze updating react to latest"],["vis analyze react 19.0.0","Analyze updating react to specific version"],["vis analyze react --ai-type security","Run security-focused analysis"],["vis analyze react --format json","Output as JSON"]],group:"System",loader:ea(()=>import("./handler4.js"),"loader"),name:"analyze",options:[{description:"AI analysis type: impact, security, compatibility, or recommend (default: impact)",name:"ai-type",type:String},{defaultValue:!1,description:"Check for known security vulnerabilities",name:"security",type:Boolean},{description:"Output format: table or json (default: table)",name:"format",type:String}]};var na=Object.defineProperty,oa=f((e,t)=>na(e,"name",{value:t,configurable:!0}),"e$D");const aa={description:"Review and approve dependencies with build scripts",examples:[["vis approve-builds","Scan and list unapproved build scripts"],["vis approve-builds --all","Approve all pending builds (pnpm)"],["vis approve-builds --sync-native","Sync allowBuilds to native PM config"]],group:"Security & Health",loader:oa(()=>import("./handler5.js"),"loader"),name:"approve-builds",options:[{defaultValue:!1,description:"Approve all pending builds without prompting (pnpm only)",name:"all",type:Boolean},{defaultValue:!1,description:"Force vis scanning even for pnpm (instead of delegating)",name:"scan",type:Boolean},{defaultValue:!1,description:"Sync allowBuilds to native PM config (bun: trustedDependencies, npm: .npmrc, yarn: .yarnrc.yml)",name:"sync-native",type:Boolean}]};var ra=Object.defineProperty,ia=f((e,t)=>ra(e,"name",{value:t,configurable:!0}),"e$C");const sa={description:"Audit installed packages for vulnerabilities and supply chain risks",examples:[["vis audit","Full audit of all installed packages"],["vis audit --severity high","Show only high/critical issues"],["vis audit --format json","Output as JSON for CI integration"],["vis audit --fix","Show fix suggestions for vulnerabilities"],["vis audit --exit-code","Exit with code 1 if issues found (for CI)"],["vis audit --show-accepted","Include acknowledged risks in output"],["vis audit --sync","Sync accepted risks to native PM config (pnpm-workspace.yaml / .yarnrc.yml)"]],group:"Security & Health",loader:ia(()=>import("./handler30.js"),"loader"),name:"audit",options:[{description:"Minimum severity to report: low, medium, high, critical (default: low)",name:"severity",type:String},{description:"Output format: table or json (default: table)",name:"format",type:String},{defaultValue:!1,description:"Show fix suggestions for vulnerabilities",name:"fix",type:Boolean},{defaultValue:!1,description:"Exit with code 1 if any issues found (for CI)",name:"exit-code",type:Boolean},{defaultValue:!1,description:"Include acknowledged (accepted risk) issues in output",name:"show-accepted",type:Boolean},{defaultValue:!1,description:"Sync vis accepted risks to native PM config (pnpm-workspace.yaml / .yarnrc.yml)",name:"sync",type:Boolean}]},_e={description:"Cache directory (overrides config and default). Relative paths are resolved against the workspace root.",name:"cache-dir",type:String},dt={description:"Cache scope: 'shared' (default — main worktree's cache), 'worktree' (this checkout's local cache), or 'all' (both)",name:"scope",type:String},an={description:"Cache type: 'task' (workspace task cache), 'ai' (AI response cache), 'socket' (Socket.dev report cache), or 'all' (default)",name:"type",type:String},la={commandPath:["cache"],description:"List all cache entries",examples:[["vis cache list","List all cache entries"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cacheListExecute"),name:"list",options:[_e,dt,{description:"Output format: table or json (default: table)",name:"format",type:String}]},ca={commandPath:["cache"],description:"Remove cache entries (defaults to all stores: workspace task cache, AI responses, Socket.dev reports)",examples:[["vis cache clean","Remove all cache entries from every store"],["vis cache clean --type=ai","Clear only the AI response cache"],["vis cache clean --type=task","Clear only the workspace task cache"],["vis cache clean --dry-run","Preview what clean would remove"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cacheCleanExecute"),name:"clean",options:[_e,an,{defaultValue:!1,description:"Preview without deleting",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Skip the confirmation prompt for out-of-workspace cache directories",name:"force",type:Boolean}]},da={commandPath:["cache"],description:"Remove old and oversized cache entries",examples:[["vis cache prune","Remove old and oversized entries"],["vis cache prune --max-age-days=3 --max-size=500MB","Prune with custom limits"],["vis cache prune --keep-last=30","Keep only the 30 most recent entries"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cachePruneExecute"),name:"prune",options:[_e,dt,{description:"Remove entries older than N days",name:"max-age-days",type:Number},{description:"Evict oldest entries until cache is under this size (e.g. 500MB)",name:"max-size",type:String},{description:"Keep only the N most recent entries (sorted newest-first by mtime)",name:"keep-last",type:Number}]},pa={commandPath:["cache"],description:"Print on-disk footprint and stats for one or more cache stores (task / ai / socket)",examples:[["vis cache size","Show stats for every cache store"],["vis cache size --type=ai","Show only the AI response cache (entries, size, oldest, newest)"],["vis cache size --type=task --format=json","Machine-readable task cache size"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cacheSizeExecute"),name:"size",options:[_e,dt,an,{description:"Output format: table or json (default: table)",name:"format",type:String}]},rn={description:"Output format: table or json (default: table)",name:"format",type:String},sn={description:"Use a specific run ID from .task-runner/runs/ instead of the latest run",name:"run",type:String},ua={argument:{description:"Task ID to explain (e.g. @my/app:build)",name:"taskId",type:String},commandPath:["cache"],description:"Explain why a task missed the cache by diffing hash inputs against the previous run",examples:[["vis cache why @myorg/app:build","Show which inputs changed since the last run"],["vis cache why @myorg/app:build --json","Machine-readable output for CI"],["vis cache why @myorg/app:build --run 2026-04-28T...","Inspect a specific historical run"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cacheWhyExecute"),name:"why",options:[rn,sn]},fa={argument:{description:"Task ID to print the hash for (e.g. @my/app:build)",name:"taskId",type:String},commandPath:["cache"],description:"Print the recorded hash and per-input hash details for a task",examples:[["vis cache hash @myorg/app:build","Show the resolved hash + contributing inputs"],["vis cache hash @myorg/app:build --json","Machine-readable output"]],group:"Workspace",loader:K(()=>import("./handler6.js"),"cacheHashExecute"),name:"hash",options:[rn,sn]},ma=[la,ca,da,pa,ua,fa];var ga=Object.defineProperty,ha=f((e,t)=>ga(e,"name",{value:t,configurable:!0}),"e$B");const ya={alias:["c","outdated"],argument:{description:"Specific packages to check (checks all if omitted)",name:"packages",type:String},description:"Check for outdated dependencies, security vulnerabilities, and supply chain settings",examples:[["vis check","Check all catalog dependencies"],["vis check react","Check specific packages"],["vis check --target minor","Only show minor/patch updates"],["vis check --exclude '@types/*'","Exclude packages by pattern"],["vis check --no-security","Skip vulnerability scanning"],["vis check --security-config","Audit supply chain security settings"],["vis check --security-config --sync","Sync security config to pnpm-workspace.yaml"]],group:"Security & Health",loader:ha(()=>import("./handler7.js"),"loader"),name:"check",options:[{alias:"t",description:"Update target: latest, minor, or patch (default: latest)",name:"target",type:String},{description:"Glob pattern to include packages (repeatable)",lazyMultiple:!0,name:"include",type:String},{description:"Glob pattern to exclude packages (repeatable)",lazyMultiple:!0,name:"exclude",type:String},{defaultValue:!1,description:"Include prerelease versions",name:"prerelease",type:Boolean},{defaultValue:!1,description:"Skip security vulnerability scanning",name:"no-security",type:Boolean},{defaultValue:!1,description:"Audit supply chain security settings",name:"security-config",type:Boolean},{defaultValue:!1,description:"Sync security settings to pnpm-workspace.yaml (pnpm only, requires --security-config)",name:"sync",type:Boolean},{description:"Output format: table, json, or minimal (default: table)",name:"format",type:String},{defaultValue:!1,description:"Exit with code 1 if outdated dependencies found (for CI)",name:"exit-code",type:Boolean},{defaultValue:!1,description:"Run AI analysis on outdated packages",name:"ai",type:Boolean},{description:"AI analysis type: impact, security, compatibility, or recommend",name:"ai-type",type:String},{alias:"D",defaultValue:!1,description:"Check only devDependencies (npm/yarn mode)",name:"dev",type:Boolean},{alias:"P",defaultValue:!1,description:"Check only dependencies (npm/yarn mode)",name:"prod",type:Boolean}]};var va=Object.defineProperty,ka=f((e,t)=>va(e,"name",{value:t,configurable:!0}),"e$A");const ba={argument:{description:"Comma-separated list of targets to run (e.g., lint,test,build)",name:"targets",type:String},description:"Run affected targets in a CI-optimized pipeline",examples:[["vis ci lint,test,build","Run lint, test, and build on affected projects"],["vis ci test --base=origin/main","Override the base ref"],["vis ci build --no-install","Skip the install step (assume deps already present)"],["vis ci build --parallel=6","Increase concurrency"]],group:"Run & Execute",loader:ka(()=>import("./handler8.js"),"loader"),name:"ci",options:[{defaultValue:!0,description:"Install dependencies before running targets (use --no-install to skip)",name:"install",type:Boolean},{defaultValue:!1,description:"Skip the toolchain pre-flight (no auto-install for any pinned tool: node / pnpm / yarn / npm / bun / deno / go / python / ruby / rust)",name:"skip-toolchain",type:Boolean},{description:"Git base ref for affected detection (default: auto-detected from CI env)",name:"base",type:String},{description:"Git head ref for affected detection (default: HEAD)",name:"head",type:String},{defaultValue:"none",description:"Upstream scope: none | direct | deep",name:"upstream",type:String},{defaultValue:"deep",description:"Downstream scope: none | direct | deep",name:"downstream",type:String},{defaultValue:4,description:"Maximum number of parallel tasks per target",name:"parallel",type:Number},{description:'Partition tasks for distributed CI (e.g., "1/4")',name:"partition",type:String},{description:"Filter affected projects by a query (e.g. 'language=typescript && tag=lib')",name:"query",type:String}]};var wa=Object.defineProperty,$a=f((e,t)=>wa(e,"name",{value:t,configurable:!0}),"e$z");const Sa={description:"Remove node_modules from all workspace projects",examples:[["vis clean","Remove all node_modules directories"],["vis clean --lockfile","Also remove lockfiles"],["vis clean --dry-run","Preview what would be removed"]],group:"Workspace",loader:$a(()=>import("./handler9.js"),"loader"),name:"clean",options:[{alias:"l",defaultValue:!1,description:"Also remove lockfiles (pnpm-lock.yaml, package-lock.json, etc.)",name:"lockfile",type:Boolean},{defaultValue:!1,description:"Preview what would be removed without deleting",name:"dry-run",type:Boolean}]};var xa=Object.defineProperty,ja=f((e,t)=>xa(e,"name",{value:t,configurable:!0}),"e$y");const Ca={argument:{description:"Template to use (e.g., vis:app, create-vite, user/repo) — omit for interactive mode",name:"template",type:String},description:"Create a new project from a template",examples:[["vis create","Interactive project scaffolding"],["vis create vis:monorepo my-workspace","Create a monorepo workspace"],["vis create vis:app my-app","Scaffold a Vite application"],["vis create vis:library my-lib","Create a TypeScript library"],["vis create vite my-app -- --template react-ts","Use create-vite with React TypeScript"],["vis create user/repo my-project","Clone a GitHub template"],["vis create --list","Show available templates"]],group:"Scaffold & Config",loader:ja(()=>import("./handler42.js"),"loader"),name:"create",options:[{defaultValue:!1,description:"Show available templates",name:"list",type:Boolean},{description:"Generate editor configs (vscode)",name:"editor",type:String},{defaultValue:!1,description:"Initialize a git repository",name:"git-init",type:Boolean},{defaultValue:!1,description:"Skip interactive prompts",name:"no-interactive",type:Boolean}]};var Oa=Object.defineProperty,Pa=f((e,t)=>Oa(e,"name",{value:t,configurable:!0}),"e$x");const Ra={description:"Deduplicate dependencies using the detected package manager",examples:[["vis dedupe","Run deduplication"],["vis dedupe --check","Preview changes without modifying (CI-friendly)"]],group:"Dependencies",loader:Pa(()=>import("./handler10.js"),"loader"),name:"dedupe",options:[{defaultValue:!1,description:"Preview changes without modifying files (dry-run)",name:"check",type:Boolean}]};var Ia=Object.defineProperty,Ba=f((e,t)=>Ia(e,"name",{value:t,configurable:!0}),"e$w");const Va={alias:"dc",description:"Create or update .devcontainer/devcontainer.json interactively",examples:[["vis devcontainer","Launch interactive devcontainer config editor"],["vis dc","Alias for devcontainer"],["vis devcontainer --template node-pnpm","Start from Node.js + pnpm template"]],group:"Scaffold & Config",loader:Ba(()=>import("./handler44.js"),"loader"),name:"devcontainer",options:[{alias:"t",description:"Start from a template: node, node-pnpm, node-postgres, node-dind, fullstack, python, go, rust, java, devops, minimal, custom",name:"template",type:String},{alias:"o",description:"Output path (default: .devcontainer/devcontainer.json)",name:"output",type:String}]};var Aa=Object.defineProperty,Ea=f((e,t)=>Aa(e,"name",{value:t,configurable:!0}),"e$v");const Ta={argument:{description:"Package to execute (optionally with @version)",name:"package",type:String},description:"Execute a remote package without permanent installation",examples:[["vis dlx create-vite my-app","Scaffold a new project"],["vis dlx typescript@5.5.4 tsc --version","Run specific version"],["vis dlx -p cowsay -p lolcatjs -c 'echo hi | cowsay | lolcatjs'","Multiple packages with shell"]],group:"Run & Execute",loader:Ea(()=>import("./handler11.js"),"loader"),name:"dlx",options:[{alias:"p",description:"Additional packages to install (repeatable)",multiple:!0,name:"package",type:String},{alias:"c",defaultValue:!1,description:"Execute within shell environment",name:"shell-mode",type:Boolean},{alias:"s",defaultValue:!1,description:"Suppress output except command results",name:"silent",type:Boolean}]};var Da=Object.defineProperty,Ma=f((e,t)=>Da(e,"name",{value:t,configurable:!0}),"e$u");const Na={argument:{description:"Docker subcommand: scaffold | prune",name:"subcommand",type:String},description:"Docker integration — scaffold a minimal context or prune unfocused deps",examples:[["vis docker scaffold --focus=my-app","Generate .vis/docker/workspace for my-app + its deps"],["vis docker scaffold --focus=my-app --include-sources","Also copy focus source trees"],["vis docker scaffold --focus=my-app,other --out=.vis/docker","Focus multiple projects"],["vis docker prune --context=.vis/docker","Strip unfocused projects inside a build stage"]],group:"Workspace",loader:Ma(()=>import("./handler12.js"),"loader"),name:"docker",options:[{description:"Project name(s) to focus on — comma-separated for multiple",name:"focus",type:String},{description:"Output directory for the scaffold (default: .vis/docker)",name:"out",type:String},{defaultValue:!1,description:"Also copy focus project source trees to <out>/sources",name:"include-sources",type:Boolean},{description:"Scaffold root for `vis docker prune` (default: .vis/docker)",name:"context",type:String}]};var Wa=Object.defineProperty,Fa=f((e,t)=>Wa(e,"name",{value:t,configurable:!0}),"e$t");const La={description:"Run a full project health check (outdated, security, duplicates, optimizations)",examples:[["vis doctor","Full project health check"],["vis doctor --fix","Check and auto-apply safe fixes"],["vis doctor --format json","Machine-readable output for CI"],["vis doctor --only security","Only run the security scans"],["vis doctor --skip optimization,runtime","Skip the listed sections"],["vis doctor --quiet","Summary only, no per-section breakdown"],["vis doctor --no-progress","Disable live progress UI (sequential logs)"],["vis doctor --exit-code","Exit with code 1 if security issues found"],["vis doctor --exit-code --strict","Fail on any issue (outdated, duplicates, security)"]],group:"Security & Health",loader:Fa(()=>import("./handler41.js"),"loader"),name:"doctor",options:[{description:"Output format: table or json (default: table). Alias: --json",name:"format",type:String},{defaultValue:!1,description:"Shorthand for --format json",name:"json",type:Boolean},{defaultValue:!1,description:"Exit with code 1 if issues found",name:"exit-code",type:Boolean},{defaultValue:!1,description:"Auto-apply safe fixes (security overrides + codemods, SIGTERM orphans)",name:"fix",type:Boolean},{defaultValue:!1,description:"With --fix: escalate orphan cleanup to SIGKILL / taskkill /F (use when SIGTERM is ignored)",name:"fix-force",type:Boolean},{defaultValue:!1,description:"With --exit-code: also fail on outdated and duplicate deps",name:"strict",type:Boolean},{description:"Comma-separated sections to run: dependencies,security,optimization,runtime",name:"only",type:String},{description:"Comma-separated sections to skip",name:"skip",type:String},{defaultValue:!1,description:"Suppress per-section detail; print summary only",name:"quiet",type:Boolean},{defaultValue:!1,description:"Disable live progress UI (forces sequential logs)",name:"no-progress",type:Boolean},{defaultValue:!1,description:"Bypass the doctor result cache (~/.vis/cache/doctor)",name:"no-cache",type:Boolean},{description:"Comma-separated package name patterns to scope findings (supports * globs, e.g. '@types/*,react')",name:"filter",type:String}]};var _a=Object.defineProperty,za=f((e,t)=>_a(e,"name",{value:t,configurable:!0}),"e$s");const Ua={argument:{description:"Command to execute followed by arguments",name:"command",type:String},description:"Execute a local node_modules/.bin command (no remote fallback)",examples:[["vis exec eslint .","Run local eslint"],["vis exec tsc --noEmit","Run local TypeScript check"],["vis exec -r -- eslint .","Run in all workspace packages"],["vis exec -c 'echo $PATH'","Shell mode"]],group:"Run & Execute",loader:za(()=>import("./handler13.js"),"loader"),name:"exec",options:[{alias:"c",defaultValue:!1,description:"Execute within shell environment",name:"shell-mode",type:Boolean},{alias:"r",defaultValue:!1,description:"Run in every workspace package",name:"recursive",type:Boolean},{alias:"w",defaultValue:!1,description:"Run on workspace root only",name:"workspace-root",type:Boolean},{alias:"F",description:"Filter packages by name pattern",multiple:!0,name:"filter",type:String},{defaultValue:!1,description:"Run concurrently without topological ordering",name:"parallel",type:Boolean},{defaultValue:!1,description:"Reverse topological execution order",name:"reverse",type:Boolean}]};var Ja=Object.defineProperty,Ga=f((e,t)=>Ja(e,"name",{value:t,configurable:!0}),"e$r");const Ha={argument:{description:"Template name (or remote source like git://… or npm://…) — omit for interactive picker",name:"template",type:String},description:"Scaffold files from an in-repo template",examples:[["vis generate","Pick a template interactively"],["vis generate package","Run the 'package' template"],["vis generate component -- --name=Button --style=primary","Pre-fill option values"],["vis generate package --to=./packages/new --force","Custom destination + overwrite"],["vis generate package --dry-run","Print planned writes without touching disk"],["vis generate git://github.com/org/template#main","Fetch and run a remote template"],["vis generate --list","Show discovered templates"]],group:"Scaffold & Config",loader:Ga(()=>import("./handler35.js"),"loader"),name:"generate",options:[{defaultValue:!1,description:"List discovered templates",name:"list",type:Boolean},{description:"Destination directory",name:"to",type:String},{defaultValue:!1,description:"Print planned writes without touching disk",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Overwrite existing files without prompting",name:"force",type:Boolean},{defaultValue:!1,description:"Skip prompts; use template defaults",name:"defaults",type:Boolean},{defaultValue:!1,description:"Skip running post-generation scripts",name:"skip-scripts",type:Boolean},{defaultValue:!1,description:"Skip interactive prompts (errors on missing required values)",name:"no-interactive",type:Boolean},{defaultValue:!1,description:"Prefer locally cached remote templates over re-downloading",name:"prefer-offline",type:Boolean}]};var qa=Object.defineProperty,Ka=f((e,t)=>qa(e,"name",{value:t,configurable:!0}),"t$h");const Ya={description:"Visualize the project dependency graph",examples:[["vis graph","Show colored dependency graph (TUI in TTY, ASCII otherwise)"],["vis graph --format=ascii","Force ASCII tree output"],["vis graph --format=dot","Output in Graphviz DOT format"],["vis graph --format=html --output=graph.html","Generate interactive HTML graph"],["vis graph --format=json --output=graph.json","Save JSON graph to file"]],group:"Workspace",loader:Ka(()=>import("./handler36.js"),"loader"),name:"graph",options:[{alias:"f",defaultValue:void 0,description:"Output format: tui, ascii, dot, json, html (default: tui in TTY, ascii otherwise)",name:"format",type:String},{alias:"o",description:"Write output to file instead of stdout",name:"output",type:String},{alias:"d",description:"Maximum dependency tree depth for ASCII output (default: unlimited)",name:"depth",type:Number}]},ln=["pre-commit","pre-merge-commit","prepare-commit-msg","commit-msg","post-commit","applypatch-msg","pre-applypatch","post-applypatch","pre-rebase","post-rewrite","post-checkout","post-merge","pre-push","pre-auto-gc"],cn=".vis-hooks",vp=[".pre-commit-config.yaml",".pre-commit-config.yml","prek.toml"],kp={commit:"pre-commit","merge-commit":"pre-merge-commit",push:"pre-push"},bp=new Set(["commit-msg","post-checkout","post-commit","post-merge","post-rewrite","pre-commit","pre-merge-commit","pre-push","pre-rebase","prepare-commit-msg"]),wp=new Set(["commit-msg","post-checkout","post-merge","post-rewrite","pre-rebase","prepare-commit-msg"]),$p=new Set(["fail","script","system"]);var Qa=Object.defineProperty,fe=f((e,t)=>Qa(e,"name",{value:t,configurable:!0}),"e$p");const me={defaultValue:cn,description:"Custom hooks directory",name:"hooks-dir",type:String},ge=[{defaultValue:void 0,description:"Set to 0 to disable git hooks, set to 2 for debug output",name:"VIS_GIT_HOOKS",type:String}],Xa={commandPath:["hook"],description:"Install git hooks for the workspace (migrates husky / prek on prompt)",env:[...ge],examples:[["vis hook install","Install git hooks in .vis-hooks/"],["vis hook install --hooks-dir=.githooks","Install hooks in a custom directory"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookInstallExecute})),"loader"),name:"install",options:[me]},Za={commandPath:["hook"],description:"Remove git hooks and reset core.hooksPath",env:[...ge],examples:[["vis hook uninstall","Remove git hooks and reset core.hooksPath"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookUninstallExecute})),"loader"),name:"uninstall",options:[me]},er={commandPath:["hook"],description:"Migrate from husky or prek to vis hooks (auto-detected)",env:[...ge],examples:[["vis hook migrate","Migrate from husky or prek to vis hooks (auto-detected)"],["vis hook migrate --dry-run","Preview what a migration would write without touching disk"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookMigrateExecute})),"loader"),name:"migrate",options:[me,{defaultValue:!1,description:"Preview migrate without writing files",name:"dry-run",type:Boolean}]},tr={commandPath:["hook"],description:"Show configured hooks grouped by stage",env:[...ge],examples:[["vis hook list","Show configured hooks grouped by stage"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookListExecute})),"loader"),name:"list",options:[me]},nr={commandPath:["hook"],description:"Sanity-check installed hooks and the bundled runner",env:[...ge],examples:[["vis hook validate","Sanity-check installed hooks and the bundled runner"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookValidateExecute})),"loader"),name:"validate",options:[me]},or={argument:{description:"Hook stage to run (e.g. pre-commit, commit-msg). Defaults to pre-commit.",name:"stage",type:String},commandPath:["hook"],description:"Run a specific hook stage against tracked files",env:[...ge],examples:[["vis hook run pre-commit --all-files","Run the pre-commit hooks against every tracked file"],["vis hook run pre-commit --from-ref=main --to-ref=HEAD","Run pre-commit hooks on files changed between two refs"],["vis hook run pre-commit --last-commit","Shortcut for --from-ref HEAD~1 --to-ref HEAD"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookRunExecute})),"loader"),name:"run",options:[me,{defaultValue:!1,description:"Run against every tracked file",name:"all-files",type:Boolean},{defaultValue:void 0,description:"Include files changed since this ref",name:"from-ref",type:String},{defaultValue:void 0,description:"Include files changed up to this ref",name:"to-ref",type:String},{defaultValue:!1,description:"Shortcut for --from-ref HEAD~1 --to-ref HEAD",name:"last-commit",type:Boolean}]},ar={argument:{description:"Target to add (currently: `secrets`)",name:"target",type:String},commandPath:["hook"],description:"Add a managed hook snippet (e.g. `vis secrets --staged`)",env:[...ge],examples:[["vis hook add secrets","Add a pre-commit hook that runs `vis secrets --staged`"]],group:"Scaffold & Config",loader:fe(()=>import("./handler38.js").then(e=>({default:e.hookAddExecute})),"loader"),name:"add",options:[me]},rr=[Xa,Za,er,tr,nr,or,ar];var ir=Object.defineProperty,sr=f((e,t)=>ir(e,"name",{value:t,configurable:!0}),"e$o");const lr={argument:{description:"Project name to check (required)",name:"project",type:String},description:'Exit with inverted codes for CI "Ignored Build Step" gating (Vercel/Netlify)',examples:[["vis ignore my-app","Check if my-app is affected and decide whether to build"],["vis ignore my-app --base $VERCEL_GIT_PREVIOUS_SHA","Explicit base ref"],["vis ignore my-app --json","Emit the decision as JSON instead of text"],["vis ignore my-app --verbose","Print debug info about the decision path"],["vis ignore my-app --exit-zero-on-build","Normal exit semantics (0=build, 0=skip)"]],group:"Run & Execute",loader:sr(()=>import("./handler31.js"),"loader"),name:"ignore",options:[{description:"Git base ref for comparison. Defaults to CI provider env vars, then HEAD~1.",name:"base",type:String},{defaultValue:"HEAD",description:"Git head ref for comparison",name:"head",type:String},{defaultValue:"deep",description:'Downstream scope: "none", "direct", or "deep"',name:"downstream",type:String},{defaultValue:"none",description:'Upstream scope: "none", "direct", or "deep"',name:"upstream",type:String},{defaultValue:!1,description:"Emit the decision as JSON on stdout instead of human text",name:"json",type:Boolean},{defaultValue:!1,description:"Exit 0 on build (normal semantics) instead of 1 (inverted Vercel/Netlify semantics)",name:"exit-zero-on-build",type:Boolean},{defaultValue:!1,description:"Enable verbose debug output",name:"verbose",type:Boolean}]};var cr=Object.defineProperty,dr=f((e,t)=>cr(e,"name",{value:t,configurable:!0}),"e$n");const pr={description:"Remove vis from the system (self-uninstall)",examples:[["vis implode","Interactive uninstall"],["vis implode --yes","Non-interactive uninstall (CI)"]],group:"System",loader:dr(()=>import("./handler14.js"),"loader"),name:"implode",options:[{alias:"y",defaultValue:!1,description:"Skip confirmation prompt",name:"yes",type:Boolean}]};var ur=Object.defineProperty,fr=f((e,t)=>ur(e,"name",{value:t,configurable:!0}),"e$m");const mr={alias:"view",argument:{description:"Package name followed by optional metadata fields (e.g. 'react version dependencies')",name:"args",type:String},description:"Show npm registry metadata for a package (alias of `npm view` / `pnpm view` / `yarn info` / `bun pm view`)",examples:[["vis info react","Full registry metadata for react"],["vis info react version","Latest version only"],["vis info react versions","All published versions"],["vis info react@18 dependencies","Dependencies of react@18"],["vis info react --json","Emit JSON"],["vis view react","Alias matching npm/pnpm"]],group:"Dependencies",loader:fr(()=>import("./handler15.js"),"loader"),name:"info",options:[{defaultValue:!1,description:"Output as JSON",name:"json",type:Boolean}]};var gr=Object.defineProperty,hr=f((e,t)=>gr(e,"name",{value:t,configurable:!0}),"e$l");const yr={description:"Initialize vis.config.ts with best-practice security defaults",examples:[["vis init","Interactive setup wizard"],["vis init --no-interactive","Create minimal config without prompts"],["vis init --force","Overwrite existing config"],["vis init --sync-native","Also sync to native PM config files"]],group:"Scaffold & Config",loader:hr(()=>import("./handler16.js"),"loader"),name:"init",options:[{defaultValue:!1,description:"Overwrite existing config file",name:"force",type:Boolean},{defaultValue:!1,description:"Skip interactive prompts",name:"no-interactive",type:Boolean},{defaultValue:!1,description:"Sync settings to native PM config files",name:"sync-native",type:Boolean}]};var vr=Object.defineProperty,kr=f((e,t)=>vr(e,"name",{value:t,configurable:!0}),"e$k");const br={alias:"i",description:"Install dependencies using the detected package manager",examples:[["vis install","Install all dependencies (frozen-lockfile by default when a lockfile is present)"],["vis i --no-frozen-lockfile","Allow lockfile updates (escape hatch for the default)"],["vis install --ci","Clean install: wipe node_modules + frozen lockfile (mirrors npm ci / pnpm ci)"],["vis install --prefer-offline","Use cached packages when available, fall back to network"],["vis install --prod","Install production dependencies only"],["vis install --filter app","Install for specific workspace package"],["vis install --run-scripts","Run lifecycle scripts (opts out of vis's default block-by-default policy; allowlisted packages run via security.allowBuilds)"],["vis install --no-typosquat-check","Skip typosquat name check"],["vis install --installer aube","Force aube as the installer (errors if not on PATH)"],["vis install --no-aube","Bypass aube; use the lockfile-detected PM"]],group:"Dependencies",loader:kr(()=>import("./handler17.js"),"loader"),name:"install",options:[{alias:"P",defaultValue:!1,description:"Skip devDependencies",name:"prod",type:Boolean},{alias:"D",defaultValue:!1,description:"Install devDependencies only",name:"dev",type:Boolean},{defaultValue:!1,description:"Use frozen lockfile (CI mode, maps to npm ci)",name:"frozen-lockfile",type:Boolean},{defaultValue:!1,description:"Opt out of vis's default frozen-lockfile behavior and allow lockfile updates",name:"no-frozen-lockfile",type:Boolean},{defaultValue:!1,description:"Clean install: wipe node_modules then install with frozen lockfile",name:"ci",type:Boolean},{alias:"f",defaultValue:!1,description:"Force reinstall all dependencies",name:"force",type:Boolean},{defaultValue:!1,description:"Run lifecycle scripts (opts out of vis's default block-by-default policy; allowlisted packages run via security.allowBuilds)",name:"run-scripts",type:Boolean},{defaultValue:!1,description:"Update lockfile without installing",name:"lockfile-only",type:Boolean},{defaultValue:!1,description:"Skip optional dependencies",name:"no-optional",type:Boolean},{defaultValue:!1,description:"Use only cached packages",name:"offline",type:Boolean},{defaultValue:!1,description:"Prefer cached packages, fall back to network when missing",name:"prefer-offline",type:Boolean},{alias:"s",defaultValue:!1,description:"Suppress output",name:"silent",type:Boolean},{alias:"r",defaultValue:!1,description:"Install in all workspace packages",name:"recursive",type:Boolean},{alias:"w",defaultValue:!1,description:"Target workspace root",name:"workspace-root",type:Boolean},{alias:"F",description:"Filter by workspace package name",multiple:!0,name:"filter",type:String},{defaultValue:!1,description:"Skip typosquat name check",name:"no-typosquat-check",type:Boolean},{description:"Pick the installer explicitly. One of: auto, aube, pnpm, npm, yarn, bun. Overrides VIS_INSTALLER and install.backend in vis.config.",name:"installer",type:String},{defaultValue:!1,description:"Skip aube and use the lockfile-detected PM. Wins over --installer / VIS_INSTALLER / install.backend.",name:"no-aube",type:Boolean}]};var wr=Object.defineProperty,$r=f((e,t)=>wr(e,"name",{value:t,configurable:!0}),"e$j");const Sr={alias:"ln",argument:{description:"Package name or directory path to link (omit to register current package)",name:"target",type:String},description:"Link a local package for development",examples:[["vis link ./packages/utils","Link local directory package (works on all PMs)"],["vis link","Register current package globally (pnpm <=10, yarn, npm, bun)"],["vis link react","Link global package into current project (pnpm <=10, yarn, npm, bun)"]],group:"Dependencies",loader:$r(()=>import("./handler18.js"),"loader"),name:"link"};var xr=Object.defineProperty,jr=f((e,t)=>xr(e,"name",{value:t,configurable:!0}),"e$i");const Cr={description:"List all workspace projects with metadata",examples:[["vis list","Show all projects"],["vis list --json","Machine-readable output"],['vis list --query "tag=frontend"',"Filter by query"]],group:"Workspace",loader:jr(()=>import("./handler19.js"),"loader"),name:"list",options:[{defaultValue:!1,description:"Emit JSON instead of a table",name:"json",type:Boolean},{description:"Filter projects by query",name:"query",type:String}]};var Or=Object.defineProperty,Y=f((e,t)=>Or(e,"name",{value:t,configurable:!0}),"t$c");const ee=[{defaultValue:!1,description:"Preview changes without applying",name:"dry-run",type:Boolean},{alias:"y",defaultValue:!1,description:"Skip the confirmation prompt",name:"yes",type:Boolean}],Pr={commandPath:["migrate"],description:"Migrate dependencies and scripts to vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateDepsExecute})),"loader"),name:"deps",options:[...ee]},Rr={commandPath:["migrate"],description:"Inline lint-staged configuration into vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateLintStagedExecute})),"loader"),name:"lint-staged",options:[...ee]},Ir={commandPath:["migrate"],description:"Inline nano-staged configuration into vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateNanoStagedExecute})),"loader"),name:"nano-staged",options:[...ee]},Br={commandPath:["migrate"],description:"Migrate turborepo tasks/config to vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateTurborepoExecute})),"loader"),name:"turborepo",options:[...ee]},Vr={commandPath:["migrate"],description:"Migrate nx targets/config to vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateNxExecute})),"loader"),name:"nx",options:[...ee]},Ar={commandPath:["migrate"],description:"Migrate moon tasks/templates to vis",group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateMoonExecute})),"loader"),name:"moon",options:[...ee,{defaultValue:!1,description:"Copy .moon/templates/* into .vis/templates/* so `vis generate` works without .moon/",name:"copy-templates",type:Boolean}]},Er={commandPath:["migrate"],description:"Migrate gitleaks config/baseline/hooks to `vis secrets`",examples:[["vis migrate gitleaks","Migrate gitleaks config/baseline/hooks to `vis secrets`"]],group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateGitleaksExecute})),"loader"),name:"gitleaks",options:[...ee]},Tr={commandPath:["migrate"],description:"Migrate Kingfisher baseline/hooks/scripts to `vis secrets`",examples:[["vis migrate kingfisher","Migrate Kingfisher baseline/hooks/scripts to `vis secrets`"]],group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateKingfisherExecute})),"loader"),name:"kingfisher",options:[...ee]},Dr={commandPath:["migrate"],description:"Replace secretlint with `vis secrets`",examples:[["vis migrate secretlint","Replace secretlint with `vis secrets`"]],group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateSecretlintExecute})),"loader"),name:"secretlint",options:[...ee]},Mr={commandPath:["migrate"],description:"Audit the workspace for stray gitleaks/secretlint references (exit 1 on issues)",examples:[["vis migrate verify","Audit the workspace for stray gitleaks/secretlint references (exit 1 on issues)"]],group:"Scaffold & Config",loader:Y(()=>import("./handler34.js").then(e=>({default:e.migrateVerifyExecute})),"loader"),name:"verify",options:[]},Nr=[Pr,Rr,Ir,Br,Vr,Ar,Er,Tr,Dr,Mr];var Wr=Object.defineProperty,Fr=f((e,t)=>Wr(e,"name",{value:t,configurable:!0}),"r$b");const Lr=new Set(["--cwd"]),_r=new Set(["--help","--version","-h","-V"]),zr=Fr(e=>{const t=[];for(let n=0;n<e.length;n+=1){const o=e[n];if(o!==void 0){if(_r.has(o))return!1;if(o.startsWith("-")){const a=o.indexOf("="),r=a===-1?o:o.slice(0,a);if(Lr.has(r)&&a===-1){const i=e[n+1];i!==void 0&&!i.startsWith("-")&&(n+=1)}continue}t.push(o)}}return t.length===1&&t[0]==="migrate"},"isBareMigrateInvocation");var Ur=Object.defineProperty,Jr=f((e,t)=>Ur(e,"name",{value:t,configurable:!0}),"t$b");const Ct=Jr(e=>e in Qe&&Qe[e]!=="0"&&Qe[e]!=="false","check"),ue=Ct("CI")||Ct("CONTINUOUS_INTEGRATION");var Gr=Object.defineProperty,Ze=f((e,t)=>Gr(e,"name",{value:t,configurable:!0}),"i$b");class Hr{static{f(this,"MigrateStore")}static{Ze(this,"MigrateStore")}#e;#n=new Set;constructor(t){this.#e={applyProgress:null,checkedItems:new Set(t.map(n=>n.entry.id)),error:null,focusedPanel:"list",items:t,phase:"browsing",selectedIndex:0}}getSnapshot=Ze(()=>this.#e,"getSnapshot");subscribe=Ze(t=>(this.#n.add(t),()=>{this.#n.delete(t)}),"subscribe");getCheckedItems(){return this.#e.items.filter(t=>this.#e.checkedItems.has(t.entry.id))}getSelectedItem(){return this.#e.items[this.#e.selectedIndex]??null}setSelectedIndex(t){const n=Math.max(0,Math.min(t,this.#e.items.length-1));n!==this.#e.selectedIndex&&this.#t({...this.#e,selectedIndex:n})}setFocusedPanel(t){t!==this.#e.focusedPanel&&this.#t({...this.#e,focusedPanel:t})}toggleCheck(t){const n=new Set(this.#e.checkedItems);n.has(t)?n.delete(t):n.add(t),this.#t({...this.#e,checkedItems:n})}checkAll(){this.#t({...this.#e,checkedItems:new Set(this.#e.items.map(t=>t.entry.id))})}uncheckAll(){this.#t({...this.#e,checkedItems:new Set})}toggleAll(){this.#e.checkedItems.size===this.#e.items.length?this.uncheckAll():this.checkAll()}startApply(){const t=this.getCheckedItems().length;this.#t({...this.#e,applyProgress:{current:0,total:t},phase:"applying"})}updateApplyProgress(t){this.#e.applyProgress&&this.#t({...this.#e,applyProgress:{...this.#e.applyProgress,current:t}})}markDone(){this.#t({...this.#e,phase:"done"})}setError(t){this.#t({...this.#e,error:t,phase:"error"})}#t(t){this.#e=t;for(const n of this.#n)try{n()}catch{}}}var qr=Object.defineProperty,Kr=f((e,t)=>qr(e,"name",{value:t,configurable:!0}),"f$7");const Ot=Kr(({autoExitSeconds:e,onCancel:t,visible:n})=>{const{exit:o}=Zt(),[a,r]=Pe(e||3),i=Ie(null),s=Ie(0);tt(()=>(n&&(r(e||3),s.current=Date.now(),i.current=setInterval(()=>{r(c=>Math.max(0,c-1))},1e3)),()=>{i.current&&(clearInterval(i.current),i.current=null)}),[n,e]),tt(()=>{a<=0&&n&&(i.current&&(clearInterval(i.current),i.current=null),o())},[a,n,o]);const l=tn(()=>{i.current&&(clearInterval(i.current),i.current=null),t()},[t]);return en((c,p)=>{Date.now()-s.current<200||(c==="q"?o():l())},{isActive:n}),m(et,{backgroundColor:"#1e1e1e",footer:b(g,{dimColor:!0,children:["Press"," ",m(g,{bold:!0,color:"white",children:"q"})," ","to exit,"," ",m(g,{bold:!0,color:"white",children:"any key"})," ","to stay"]}),title:`Exiting in ${a}…`,visible:n,width:50,children:m(g,{dimColor:!0,children:"Stay to explore the results interactively."})})},"QuitDialog");var Yr=Object.defineProperty,dn=f((e,t)=>Yr(e,"name",{value:t,configurable:!0}),"n$b");const Qr=dn(e=>{if(e.startsWith("⚠"))return"yellow";e.startsWith("── ")||e.startsWith("[dry-run]")},"colorForPreviewLine"),Xr=dn(({focused:e,item:t,scrollRef:n})=>t?b(S,{borderColor:e?"white":"gray",borderStyle:"single",flexDirection:"column",flexGrow:1,children:[m(S,{flexShrink:0,paddingTop:1,paddingX:2,children:m(g,{bold:!0,color:"white",children:t.entry.title})}),m(S,{flexShrink:0,paddingBottom:1,paddingX:2,children:m(g,{dimColor:!0,children:t.entry.description})}),m(no,{flexGrow:1,flexShrink:1,paddingX:2,ref:n,scrollbar:!0,scrollbarColor:"gray",scrollbarStyle:"block",children:b(S,{flexDirection:"column",children:[m(g,{dimColor:!0,children:"── What will change ──"}),m(g,{}),t.preview.length===0&&m(g,{dimColor:!0,children:"(no preview available)"}),t.preview.map((a,r)=>{const i=Qr(a);return a===""?m(g,{},`blank-${String(r)}`):m(g,{color:i,children:a},`${String(r)}-${a.slice(0,20)}`)})]})})]}):m(S,{alignItems:"center",borderColor:"gray",borderStyle:"single",flexDirection:"column",flexGrow:1,justifyContent:"center",children:m(g,{dimColor:!0,children:"No migration selected"})}),"MigrateDetailPanel");var Zr=Object.defineProperty,pn=f((e,t)=>Zr(e,"name",{value:t,configurable:!0}),"g$9");const ei=pn(({checked:e,isSelected:t,item:n})=>{const o=e?"☑":"☐",a=n.preview.length;return b(S,{flexShrink:0,height:1,children:[m(g,{children:t?">":" "}),b(g,{color:e?"white":"gray",children:[" ",o," "]}),m(S,{flexGrow:1,children:m(g,{bold:t,inverse:t,wrap:"truncate",children:n.entry.title})}),b(g,{dimColor:!0,children:[" ",a," ","change",a===1?"":"s"," "]})]})},"MigrationRow"),ti=pn(({checkedItems:e,focused:t,isDryRun:n,items:o,scrollOffset:a,selectedIndex:r,viewportHeight:i})=>{const s=t?"white":"gray",l=o.filter(v=>e.has(v.entry.id)).length,c=o.map((v,$)=>m(ei,{checked:e.has(v.entry.id),isSelected:$===r,item:v},v.entry.id)),p=o.length,h=p>i&&i>0;return b(S,{borderColor:s,borderStyle:"single",flexDirection:"column",flexGrow:1,children:[b(S,{flexShrink:0,gap:1,paddingX:1,children:[m(g,{bold:!0,inverse:!0,children:" MIGRATE "}),b(g,{wrap:"truncate",children:[o.length," ","applicable"]}),l>0&&b(g,{dimColor:!0,children:[" — ",l," selected"]}),n&&m(g,{color:"yellow",children:" (dry-run)"})]}),b(S,{flexDirection:"row",flexGrow:1,overflow:"hidden",children:[m(S,{flexDirection:"column",flexGrow:1,overflow:"hidden",paddingLeft:1,children:m(S,{flexDirection:"column",marginTop:-a,children:c})}),h&&m(S,{flexShrink:0,marginLeft:1,marginRight:1,children:m(oo,{contentHeight:p,placement:"inset",scrollOffset:a,style:"block",viewportHeight:i})})]})]})},"MigrateListPanel");var ni=Object.defineProperty,oi=f((e,t)=>ni(e,"name",{value:t,configurable:!0}),"N$6");const ai=100,ri=40,ii=10,si=oi(({autoExitSeconds:e=0,isDryRun:t,store:n})=>{const{exit:o}=Zt(),{columns:a,rows:r}=ao(),i=so(n.subscribe,n.getSnapshot),[s,l]=Pe(!1),[c,p]=Pe(!1),[h,v]=Pe(!1),[$,P]=Pe(0),R=Ie(null),G=Ie(null),xe=Ie(null),le=i.items[i.selectedIndex]??null,ce=Math.max(1,r-6),de=tn(C=>{P(O=>C>=O+ce?Math.max(0,C-ce+1):C<O?Math.max(0,C):O)},[ce]);if(tt(()=>{G.current?.scrollToTop()},[le?.entry.id]),en((C,O)=>{if(C==="c"&&O.ctrl){o();return}if(!h){if(c){C==="u"||O.return?(p(!1),n.startApply(),o(n.getCheckedItems())):O.escape||C==="q"?p(!1):O.downArrow||C==="j"?xe.current?.scrollBy(1):(O.upArrow||C==="k")&&xe.current?.scrollBy(-1);return}if(s){O.escape||C==="?"?l(!1):C==="q"?(l(!1),v(!0)):O.downArrow||C==="j"?R.current?.scrollBy(1):(O.upArrow||C==="k")&&R.current?.scrollBy(-1);return}if(C==="?"){l(!0);return}if(C==="q"){v(!0);return}if(O.tab){n.setFocusedPanel(i.focusedPanel==="list"?"detail":"list");return}if(i.focusedPanel==="list"){if(O.downArrow||C==="j"){const W=Math.min(i.selectedIndex+1,i.items.length-1);n.setSelectedIndex(W),de(W);return}if(O.upArrow||C==="k"){const W=Math.max(i.selectedIndex-1,0);n.setSelectedIndex(W),de(W);return}if(O.pageDown){const W=Math.min(i.selectedIndex+10,i.items.length-1);n.setSelectedIndex(W),de(W);return}if(O.pageUp){const W=Math.max(i.selectedIndex-10,0);n.setSelectedIndex(W),de(W);return}if(O.home){n.setSelectedIndex(0),P(0);return}if(O.end){const W=i.items.length-1;n.setSelectedIndex(W),de(W);return}if(C===" "||O.return){le&&n.toggleCheck(le.entry.id);return}if(C==="a"){n.toggleAll();return}if(C==="u"&&!t&&i.checkedItems.size>0){p(!0);return}O.rightArrow&&n.setFocusedPanel("detail");return}if(i.focusedPanel==="detail"){if(O.escape||O.leftArrow){n.setFocusedPanel("list");return}if(O.downArrow||C==="j"){G.current?.scrollBy(1);return}if(O.upArrow||C==="k"){G.current?.scrollBy(-1);return}if(O.pageDown){G.current?.scrollBy(10);return}if(O.pageUp){G.current?.scrollBy(-10);return}if(O.home){G.current?.scrollToTop();return}O.end&&G.current?.scrollToBottom()}}},{isActive:!0}),a<ri||r<ii)return m(S,{alignItems:"center",height:r,justifyContent:"center",width:a,children:b(g,{color:"yellow",children:["Terminal too small (",a,"x",r,")"]})});const je=a>=ai,ye=[b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"q"}),m(g,{dimColor:!0,children:"QUIT"})]},"q"),b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"?"}),m(g,{dimColor:!0,children:"HELP"})]},"?"),b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"↑↓"}),m(g,{dimColor:!0,children:"NAV"})]},"nav"),b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"Space"}),m(g,{dimColor:!0,children:"CHECK"})]},"sp"),b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"a"}),m(g,{dimColor:!0,children:"ALL"})]},"a")];!t&&i.checkedItems.size>0&&ye.push(b(S,{gap:1,children:[m(g,{bold:!0,color:"green",children:"u"}),m(g,{dimColor:!0,children:"APPLY"})]},"u")),ye.push(b(S,{gap:1,children:[m(g,{bold:!0,color:"white",children:"Tab"}),m(g,{dimColor:!0,children:"PANEL"})]},"tab"));const Ke=m(S,{borderBottom:!1,borderColor:"gray",borderLeft:!1,borderRight:!1,borderStyle:"single",flexShrink:0,children:m(S,{flexWrap:"wrap",gap:2,paddingX:1,children:ye})}),Ye=b(et,{footer:b(g,{dimColor:!0,children:[m(g,{bold:!0,color:"white",children:"↑↓"})," scroll  ",m(g,{bold:!0,color:"white",children:"?"}),"/",m(g,{bold:!0,color:"white",children:"Esc"})," close"]}),scrollRef:R,title:"KEYBOARD SHORTCUTS",visible:s,width:52,children:[b(S,{flexDirection:"column",marginBottom:1,children:[m(g,{bold:!0,color:"white",children:"NAVIGATION"}),b(g,{children:[m(g,{bold:!0,color:"white",children:" ↑/k"}),m(g,{dimColor:!0,children:" Move up"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" ↓/j"}),m(g,{dimColor:!0,children:" Move down"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" Tab"}),m(g,{dimColor:!0,children:" Switch panel"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" →/←"}),m(g,{dimColor:!0,children:" Focus detail/list"})]})]}),b(S,{flexDirection:"column",marginBottom:1,children:[m(g,{bold:!0,color:"white",children:"SELECTION"}),b(g,{children:[m(g,{bold:!0,color:"white",children:" Space"}),m(g,{dimColor:!0,children:" Toggle migration"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" a"}),m(g,{dimColor:!0,children:" Toggle all"})]})]}),b(S,{flexDirection:"column",children:[m(g,{bold:!0,color:"white",children:"ACTIONS"}),!t&&b(g,{children:[m(g,{bold:!0,color:"white",children:" u"}),m(g,{dimColor:!0,children:" Apply selected migrations"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" q"}),m(g,{dimColor:!0,children:" Quit"})]}),b(g,{children:[m(g,{bold:!0,color:"white",children:" ?"}),m(g,{dimColor:!0,children:" Toggle help"})]})]})]}),Ce=n.getCheckedItems(),Te=m(S,{alignItems:"center",flexDirection:"column",children:b(g,{dimColor:!0,children:["Press ",m(g,{bold:!0,color:"white",children:"u"})," or ",m(g,{bold:!0,color:"white",children:"Enter"})," to confirm, ",m(g,{bold:!0,color:"white",children:"Esc"})," to cancel"]})}),$t=m(et,{footer:Te,scrollRef:xe,title:`Apply ${String(Ce.length)} migration${Ce.length===1?"":"s"}?`,visible:c,width:70,children:Ce.map(C=>b(S,{gap:1,children:[b(g,{children:[" ",C.entry.title]}),b(g,{dimColor:!0,children:["(",C.preview.length," ","change",C.preview.length===1?"":"s",")"]})]},C.entry.id))}),St=m(ti,{checkedItems:i.checkedItems,focused:i.focusedPanel==="list",isDryRun:t,items:i.items,scrollOffset:$,selectedIndex:i.selectedIndex,viewportHeight:ce}),xt=m(Xr,{focused:i.focusedPanel==="detail",item:le,scrollRef:G});if(je){const C=Math.floor(a*.55);return b(S,{flexDirection:"column",height:r,width:a,children:[b(S,{flexDirection:"row",flexGrow:1,children:[m(S,{flexGrow:1,children:St}),m(S,{width:C,children:xt})]}),Ke,$t,m(Ot,{autoExitSeconds:e||3,onCancel:f(()=>{v(!1)},"onCancel"),visible:h}),Ye]})}const Jn=Math.floor(r*.45);return b(S,{flexDirection:"column",height:r,width:a,children:[m(S,{height:Jn,children:St}),m(S,{flexGrow:1,children:xt}),Ke,$t,m(Ot,{autoExitSeconds:e||3,onCancel:f(()=>{v(!1)},"onCancel"),visible:h}),Ye]})},"VisMigrateApp");var li=Object.defineProperty,ci=f((e,t)=>li(e,"name",{value:t,configurable:!0}),"t$a");const un=[".lintstagedrc.json",".lintstagedrc"],fn=[".lintstagedrc.yaml",".lintstagedrc.yml",".lintstagedrc.mjs","lint-staged.config.mjs",".lintstagedrc.cjs","lint-staged.config.cjs",".lintstagedrc.js","lint-staged.config.js",".lintstagedrc.ts","lint-staged.config.ts",".lintstagedrc.mts","lint-staged.config.mts",".lintstagedrc.cts","lint-staged.config.cts"],pt=[...un,...fn],di=[/^((?:[A-Z_][A-Z0-9_]*(?:=\S*)?\s+)*)(pnpm|pnpm exec|npx|yarn|yarn run|npm exec|npm run|bunx|bun run|bun x)\s+lint-staged\b/,/^((?:[A-Z_][A-Z0-9_]*(?:=\S*)?\s+)*)lint-staged\b/],mn=[".nano-staged.json",".nanostagedrc"],gn=[".nano-staged.mjs",".nano-staged.cjs",".nano-staged.js","nano-staged.config.mjs","nano-staged.config.cjs","nano-staged.config.js","nano-staged.config.mts","nano-staged.config.cts","nano-staged.config.ts"],ut=[...mn,...gn],pi=[/^((?:[A-Z_][A-Z0-9_]*(?:=\S*)?\s+)*)(pnpm|pnpm exec|npx|yarn|yarn run|npm exec|npm run|bunx|bun run|bun x)\s+nano-staged\b/,/^((?:[A-Z_][A-Z0-9_]*(?:=\S*)?\s+)*)nano-staged\b/],hn=["husky","lint-staged","nano-staged"],ui=/\(is-ci \|\| husky \|\| exit 0\)\s*&&\s*/g,fi=/\bhusky(?:\s+install)?\s*&&\s*/g,mi=/\s*&&\s*husky(?:\s+install)?/g,gi=/\s*\|\|\s*husky(?:\s+install)?/g,hi=[ui,fi,mi,gi],yn=ci(e=>{if(e==="husky"||e==="husky install")return;let t=e;for(const n of hi)t=t.replace(n,"");return t=t.trim(),t===e?e:t||void 0},"cleanHuskyFromScript");var yi=Object.defineProperty,We=f((e,t)=>yi(e,"name",{value:t,configurable:!0}),"o$b");const vi=/\/$/,ki=We(e=>{let t='"$0"';for(let n=0;n<e;n+=1)t=`"$(dirname ${t})"`;return t},"nestedDirname"),bi=We(e=>{const t=e.split("/").filter(n=>n!==""&&n!==".").length+2;return`#!/usr/bin/env sh
+{ [ "$VIS_GIT_HOOKS" = "2" ]; } && set -x
+n=$(basename "$0")
+s=$(dirname "$(dirname "$0")")/$n
+
+[ ! -f "$s" ] && exit 0
+
+{ [ "\${VIS_GIT_HOOKS-}" = "0" ]; } && exit 0
+
+d=${ki(t)}
+export PATH="$d/node_modules/.bin:$PATH"
+sh -e "$s" "$@"
+c=$?
+
+[ $c != 0 ] && echo "vis - $n script failed (code $c)"
+[ $c = 127 ] && echo "vis - command not found in PATH=$PATH"
+exit $c`},"hookScript"),wi=We((e=cn)=>{if(process.env.VIS_GIT_HOOKS==="0")return{isError:!1,message:"skip install (git hooks disabled via VIS_GIT_HOOKS=0)"};if(e.includes(".."))return{isError:!0,message:'".." is not allowed in hooks directory path'};const t=ke("git",["rev-parse","--show-prefix"]);if(t.status===void 0||t.status===null)return{isError:!0,message:"git command not found"};if(t.status!==0)return{isError:!1,message:".git directory not found (not a git repository)"};const n=We((c="")=>d(e,"_",c),"internal"),o=t.stdout.toString().trim().replace(vi,""),a=o?`${o}/${e}/_`:`${e}/_`,r=ke("git",["config","--local","core.hooksPath"]),i=r.status===0?r.stdout?.toString().trim():"";if(i&&i!==a)return{isError:!1,message:`core.hooksPath is already set to "${i}", skipping`};const{status:s,stderr:l}=ke("git",["config","core.hooksPath",a]);if(s==null)return{isError:!0,message:"git command not found"};if(s)return{isError:!0,message:String(l)};Ve(n()),E(n(".gitignore"),"*"),E(n("h"),bi(e),{mode:493});for(const c of ln)E(n(c),`#!/usr/bin/env sh
+. "$(dirname "$0")/h"`,{mode:493});return{isError:!1,message:""}},"installHooks");var $i=Object.defineProperty,re=f((e,t)=>$i(e,"name",{value:t,configurable:!0}),"u$7");const Si=[".husky",".config/husky"],xi=/^\. "\$\(dirname "\$0"\)\/common\.sh"\s*/m,ji=re(e=>{for(const t of Si)if(u(d(e,t))&&we(d(e,t)).isDirectory())return t},"detectHuskyDirectory"),Ci=re((e,t)=>{const n=new Map,o=d(e,t),a=new Set(ln);for(const r of ae(o)){if(r==="_"||r===".gitignore"||r.startsWith("."))continue;const i=d(o,r);we(i).isFile()&&(!a.has(r)&&r!=="common.sh"||n.set(r,j(i)))}return n},"readHuskyHooks"),Oi=re(e=>e.replace(xi,""),"transformHookScript"),vn=re(e=>u(d(e,"pnpm-lock.yaml"))||u(d(e,"pnpm-workspace.yaml"))?"pnpm":u(d(e,"yarn.lock"))?"yarn":u(d(e,"bun.lockb"))||u(d(e,"bun.lock"))?"bun":"npm","detectPackageManager"),Pi=re((e,t)=>{const n=vn(e),o={bun:["bun","remove","husky"],npm:["npm","uninstall","husky"],pnpm:["pnpm","remove","husky"],yarn:["yarn","remove","husky"]},[a,...r]=o[n];t.info(`Removing husky package via ${n}...`);const i=ke(a,r,{cwd:e,encoding:"utf8",stdio:"pipe"});return i.status!==0?(t.info(`Warning: failed to remove husky via ${n} (${i.stderr?.trim()??"unknown error"})`),!1):!0},"uninstallHuskyPackage"),Ri=re((e,t,n)=>{const o=yn(n);if(o!==n)return o?(e[t]=o,`updated "${t}" script`):(delete e[t],`removed "${t}" script (was: "${n}")`)},"processScript"),Ii=re(e=>{const t=d(e,"package.json");if(!u(t))return{modified:!1,removedScriptReferences:[]};const n=j(t),o=JSON.parse(n),a=[],r=o.scripts;if(r)for(const[i,s]of Object.entries(r)){if(typeof s!="string")continue;const l=Ri(r,i,s);l&&a.push(l)}return a.length>0&&E(t,`${JSON.stringify(o,void 0,4)}
+`,"utf8"),{modified:a.length>0,removedScriptReferences:a}},"cleanPackageJsonScripts"),Sp=re((e,t,n,o={})=>{const a=ji(e),r=o.dryRun===!0;if(!a)return{isError:!0,message:"No husky installation found (.husky/ or .config/husky/)"};n.info(`Found husky at ${a}/`);const i=Ci(e,a);if(i.size===0&&n.info("No user-defined hooks found in husky directory."),!r){const c=ke("git",["config","--local","core.hooksPath"]),p=c.status===0?c.stdout?.toString().trim():"";p&&(p===".husky/_"||p.startsWith(".husky"))&&ke("git",["config","--local","--unset","core.hooksPath"]);const h=wi(t);if(h.isError)return h;h.message&&n.info(h.message)}const s=d(e,t);r||Ve(s);let l=0;for(const[c,p]of i){if(c==="common.sh"){r?n.info("  (would copy) common.sh"):(E(d(s,c),p,{mode:493}),n.info("  Copied common.sh"));continue}if(r)n.info(`  (would migrate) ${c}`);else{const h=Oi(p);E(d(s,c),h,{mode:493}),n.info(`  Migrated ${c}`)}l+=1}if(r)n.info("  (would remove) husky npm package and clean package.json scripts"),n.info(`  (would remove) ${a}/ directory`);else{Pi(e,n);const c=Ii(e);if(c.modified){n.info("Updated package.json scripts:");for(const h of c.removedScriptReferences)n.info(`  ${h}`)}const p=d(e,a);lt(p,{force:!0,recursive:!0}),n.info(`Removed ${a}/`)}return{isError:!1,message:`${r?"would migrate":"Migration complete:"} ${l} hook${l===1?"":"s"} ${r?"from":"migrated from"} ${a}/ to ${t}/`}},"migrateFromHusky");var Bi=Object.defineProperty,ie=f((e,t)=>Bi(e,"name",{value:t,configurable:!0}),"s$7");const Vi={server:{cache:!1,interactive:!1,persistent:!0,runInCI:!1},utility:{cache:!1,runInCI:!1}},Ai=ie(e=>{const t=e.preset??e.options?.preset;if(!t)return e;const n=Vi[t];if(!n)return e;const{cache:o,...a}=n;return{...e,cache:e.cache??o,options:{...a,...e.options}}},"applyPreset"),Ei=ie(()=>{const e=fo();return e==="darwin"?"macos":e==="win32"?"windows":"linux"},"detectCurrentOs"),xp=ie((e,t,n=!0)=>{const o=e?.runInCI??!0;return o===!0||o==="always"?!0:o===!1?!t:o==="affected"?!t||n:!0},"shouldRunInCI"),jp=ie((e,t)=>{if(t===!1)return{};const n=t===!0?Ti("production"):Array.isArray(t)?t:[t],o={};for(const a of n)Object.assign(o,Di(e,a));return o},"loadEnvFile"),Ti=ie(e=>{const t=[".env"];return e&&t.push(`.env.${e}`),e!=="test"&&t.push(".env.local"),e&&e!=="test"&&t.push(`.env.${e}.local`),t},"resolveEnvCascade"),Di=ie((e,t)=>{const n=t.startsWith("/")?t:d(e,t);if(!u(n))return{};let o;try{o=j(n)}catch{return{}}const a={};for(const r of o.split(/\r?\n/)){const i=r.trim();if(i===""||i.startsWith("#"))continue;const s=i.indexOf("=");if(s===-1)continue;const l=i.slice(0,s).trim();if(l==="")continue;let c=i.slice(s+1).trim();(c.startsWith('"')&&c.endsWith('"')||c.startsWith("'")&&c.endsWith("'"))&&(c=c.slice(1,-1)),a[l]=c}return a},"loadSingleEnvFile"),Cp=ie((e,t=Ei())=>{if(e)return t==="windows"&&e.windowsShell?e.windowsShell:(t==="linux"||t==="macos")&&e.unixShell?e.unixShell:e.shell},"resolveTargetShell"),Mi=ie(e=>{if(e==="run")return!1;if(e==="build"||e==="test")return!0},"defaultCacheForType");var Ni=Object.defineProperty,T=f((e,t)=>Ni(e,"name",{value:t,configurable:!0}),"c$7");const Wi=/\/+$/,Fi=/\/\*\*$/,Li=/\/\*\/\*$/,_i=/^['"]|['"]$/g,kn=/node_modules/,bn=/\.git/,be=T(e=>{try{return U(e)}catch{return}},"readJsonFileSafe"),zi=T((e,t,n)=>{for(const o of Qt(e,{includeFiles:!1,includeSymlinks:!1,skip:[kn,bn]}))if(o.path!==e&&u(d(o.path,"package.json"))){const a=o.path.slice(e.length+1);n.push(`${t}/${a}`)}},"scanDirectoryRecursive"),Ui=T((e,t,n)=>{const o=t.slice(0,-2),a=st(e,o);if(u(a))for(const r of Qt(a,{includeFiles:!1,includeSymlinks:!1,maxDepth:1,skip:[kn,bn]}))r.path!==a&&u(d(r.path,"package.json"))&&n.push(d(o,r.name))},"resolveSimpleGlob"),Ji=T((e,t,n)=>{const o=t.replace(Fi,"").replace(Li,""),a=st(e,o);u(a)&&zi(a,o,n)},"resolveDoubleGlob"),Gi=T((e,t,n)=>{const o=st(e,t);u(o)&&u(d(o,"package.json"))&&n.push(t)},"resolveExactDirectory"),wn=T((e,t)=>{const n=[];for(const o of t){const a=o.replace(Wi,"");a.startsWith("!")||(a.endsWith("/*")?Ui(e,a,n):a.endsWith("/**")||a.endsWith("/*/*")?Ji(e,a,n):Gi(e,a,n))}return n},"resolveWorkspacePatterns"),$n=T((e,t,n=new Set)=>{if(!e)return[];const o=[];for(const a of e){if(typeof a=="object"&&a&&"group"in a){const r=a.group;if(n.has(r))throw new Error(`Cycle detected in vis.config taskGroups: ${[...n,r].join(" → ")}`);const i=t?.[r];if(!i)throw new Error(`Unknown taskGroup "${r}" referenced in dependsOn. Declare it under \`taskGroups\` in vis.config.ts.`);o.push(...$n(i,t,new Set([...n,r])));continue}o.push(a)}return o},"expandTaskGroups"),ft=T(e=>{if(Array.isArray(e)){if(e.length===0)throw new Error('Invalid package.json `workspaces`: empty array. Add at least one pattern like "packages/*" or remove the field.');for(const t of e)if(typeof t!="string"||t.trim().length===0)throw new TypeError(`Invalid package.json \`workspaces\` entry: expected a non-empty glob string, got ${JSON.stringify(t)}.`);return e}if(e&&typeof e=="object"){const{packages:t}=e;if(t===void 0)throw new Error('Invalid package.json `workspaces`: object form requires a `packages` array (e.g. `{ "packages": ["packages/*"] }`).');if(!Array.isArray(t))throw new TypeError(`Invalid package.json \`workspaces.packages\`: expected an array of glob strings, got ${typeof t}.`);return ft(t)}throw new TypeError(`Invalid package.json \`workspaces\`: expected an array or { packages: string[] } object, got ${typeof e}.`)},"validateWorkspacesField"),Sn=T(e=>{const t=d(e,"pnpm-workspace.yaml");if(!u(t))return;const n=j(t),o=[];let a=!1;for(const r of n.split(`
+`)){const i=r.trim();if(i==="packages:"){a=!0;continue}if(a){if(i.startsWith("- ")){const s=i.slice(2).replaceAll(_i,"");o.push(s)}else if(i&&!i.startsWith("#"))break}}return o.length>0?o:void 0},"readPnpmWorkspacePatterns"),Pt="@filegroup:",Hi=T((e,t,n)=>{if(!e)return!0;if(e.projectType&&e.projectType!==n)return!1;if(e.tags&&e.tags.length>0){const o=new Set(t?.tags);if(!e.tags.some(a=>o.has(a)))return!1}if(e.layer){const o=Array.isArray(e.layer)?e.layer:[e.layer];if(t?.layer===void 0||!o.includes(t.layer))return!1}if(e.stack){const o=Array.isArray(e.stack)?e.stack:[e.stack];if(t?.stack===void 0||!o.includes(t.stack))return!1}if(e.language){const o=Array.isArray(e.language)?e.language:[e.language];if(t?.language===void 0||!o.includes(t.language))return!1}return!0},"scopeMatches"),qi=T((e,t,n)=>{const o={};for(const[a,r]of Object.entries(e.targetDefaults??{}))o[a]=Me(void 0,r);for(const a of e.taskDefaults??[])if(Hi(a.scope,t,n))for(const[r,i]of Object.entries(a.targets))o[r]=Me(o[r],i);return o},"collectTargetDefaults"),Ki=T((e,t)=>{if(!e)return e;const n=[];for(const o of e){if(typeof o=="string"&&o.startsWith(Pt)){const a=o.slice(Pt.length),r=t?.[a];r&&n.push(...r);continue}n.push(o)}return n},"resolveFileGroupInputs"),Rt=T((e,t,n,o,a)=>{const r={...Me(o,n),options:{...o?.options,...n?.options}};t&&r.command===void 0&&r.executor===void 0&&(r.command=t),r.inputs&&(r.inputs=Ki(r.inputs,a));const i=Ai(r);return i.cache===void 0&&(i.cache=Mi(i.type)),i},"mergeTarget"),Yi=T((e,t,n,o)=>{const a={},r=new Set;for(const[i,s]of Object.entries(e??{}))r.add(i),a[i]=Rt(i,s,t?.[i],n[i],o);for(const[i,s]of Object.entries(t??{}))r.has(i)||(a[i]=Rt(i,void 0,s,n[i],o));return a},"createTargetsFromScripts"),Qi=T((e,t)=>{if(e===void 0&&t===void 0)return;const n=new Set([...Object.keys(e??{}),...Object.keys(t??{})]),o={};for(const a of n)o[a]=Me(e?.[a],t?.[a]);return o},"mergeProjectTargets"),Xi=T((e,t={},n)=>{const o={},a=new Map,r=new Map,i=Sn(e),s=be(d(e,"package.json"));let l;if(i?l=i:s?.workspaces!==void 0&&(l=ft(s.workspaces)),!l)throw new Error("No workspace configuration found. Expected pnpm-workspace.yaml or package.json workspaces field.");const c=wn(e,l);for(const p of c){const h=d(e,p,"package.json"),v=be(h);if(!v?.name)continue;r.set(v.name,v);const $=d(e,p,"project.json"),P=be($);let R="library";P?.projectType?R=P.projectType:v.bin!==void 0&&(R="application");const G=qi(t,P,R),xe=Qi(P?.targets,n?.get(p)?.targets),le=Yi(v.scripts,xe,G,t.fileGroups);a.set(v.name,le);const ce={};for(const[de,je]of Object.entries(le)){const{options:ye,preset:Ke,type:Ye,...Ce}=je,Te=je.dependsOn?$n(je.dependsOn,t.taskGroups):void 0;ce[de]={...Ce,...Te?{dependsOn:Te}:{},...ye?{options:ye}:{}}}o[v.name]={implicitDependencies:P?.implicitDependencies,language:P?.language,layer:P?.layer,owners:P?.owners,project:P?.project,projectType:R,root:p,sourceRoot:P?.sourceRoot??`${p}/src`,stack:P?.stack,tags:P?.tags,targets:ce}}return{config:t,packageJsons:r,projectOptions:a,workspace:{projects:o}}},"discoverWorkspace"),Op=T((e,t,n)=>{const o={},a={},r=new Set(Object.keys(t.projects));for(const[i,s]of Object.entries(t.projects)){o[i]={data:s,name:i,type:s.projectType??"library"},a[i]=[];const l=n?.get(i)??be(d(e,s.root,"package.json"));if(!l)continue;const c=[[l.dependencies,"static"],[l.devDependencies,"devDependency"],[l.peerDependencies,"peerDependency"]],p=new Set;for(const[h,v]of c)if(h)for(const $ of Object.keys(h))r.has($)&&!p.has($)&&(p.add($),a[i]?.push({source:i,target:$,type:v}))}return{dependencies:a,nodes:o}},"buildProjectGraph"),Pp=T(async e=>{const{loadVisTaskConfig:t}=await import("./config.js"),n=Sn(e),o=be(d(e,"package.json"));let a;if(n?a=n:o?.workspaces!==void 0&&(a=ft(o.workspaces)),!a)return new Map;const r=wn(e,a),i=new Map;return await Promise.all(r.map(async s=>{const l=be(d(e,s,"package.json"));if(!l?.name)return;const c=await t(e,d(e,s),l.name);c!==void 0&&i.set(s,c)})),i},"loadVisTaskConfigsForWorkspace");var Zi=Object.defineProperty,es=f((e,t)=>Zi(e,"name",{value:t,configurable:!0}),"t$9");const B=es((e,t)=>{if(!u(e))return;const n=`${e}.bak`;u(n)||(t?.backupsCreated.includes(n)??!1)||(co(e,n),t&&t.backupsCreated.push(n))},"backupFile");var ts=Object.defineProperty,ze=f((e,t)=>ts(e,"name",{value:t,configurable:!0}),"e$g");const J=ze(e=>{try{const t=j(e);return JSON.parse(t)}catch{return}},"readJsonFile"),Ue=ze(e=>{if(!u(e))return!1;try{return JSON.parse(j(e)),!0}catch{return!1}},"isJsonFile"),ns=/\n([ \t]+)"/,mt=ze(e=>ns.exec(e)?.[1]?.length??4,"detectJsonIndent"),os=ze((e,t,n)=>{if(!u(e))return!1;const o=j(e);let a;try{a=JSON.parse(o)}catch{return!1}const r=t(a);if(r===void 0)return!1;const i=mt(o);return n&&B(e,n),E(e,`${JSON.stringify(r,void 0,i)}
+`,"utf8"),!0},"editJsonFile");var as=Object.defineProperty,se=f((e,t)=>as(e,"name",{value:t,configurable:!0}),"f$5");const rs=/\blint-staged\b/g,is=se((e,t)=>{let n=!1;const o={...e};for(const[a,r]of Object.entries(o)){if(typeof r!="string")continue;let i=yn(r);i&&(i=i.replaceAll(rs,"vis staged").trim()||void 0),i!==r&&(i?o[a]=i:delete o[a],n=!0,t.rewrittenScriptCount+=1)}return{modified:n,scripts:o}},"rewriteScripts"),xn=se((e,t,n,o)=>{const a=d(e,"package.json");u(a)&&os(a,r=>{let i=!1;for(const l of hn){const c=r.dependencies,p=r.devDependencies;c?.[l]&&(delete c[l],i=!0,o.removedPackageCount+=1),p?.[l]&&(delete p[l],i=!0,o.removedPackageCount+=1)}if(Object.keys(n).length>0)switch(t){case"bun":{const l=r.workspaces,c=l&&!Array.isArray(l)?l:void 0,p={...c?.catalog??r.catalog};for(const[v,$]of Object.entries(n))p[v]=$;c?.catalog==null?r.catalog=p:c.catalog=p;const h=r.overrides??{};for(const v of Object.keys(n))h[v]="catalog:";r.overrides=h,i=!0;break}case"npm":{const l=r.overrides??{};r.overrides={...l,...n},i=!0;break}case"pnpm":{const l=r.pnpm??{},c=l.overrides??{};l.overrides={...c,...n},r.pnpm=l,i=!0;break}case"yarn":{const l=r.resolutions??{};r.resolutions={...l,...n},i=!0;break}}const s=r.scripts;if(s){const l=is(s,o);l.modified&&(r.scripts=l.scripts,i=!0)}return i?r:void 0})},"rewritePackageJson"),ss=se((e,t,n,o)=>{try{const{workspace:a}=Xi(e);for(const r of Object.values(a.projects)){const i=d(e,r.root);xn(i,t,n,o)}}catch{}},"migrateMonorepoPackages"),ls=se(e=>e.startsWith("- ")||e!==""&&!e.includes(":")&&!e.startsWith("#"),"isCatalogSectionEnd"),cs=se(e=>{let t=!1,n="";const o=new Set;for(const a of e){const r=a.trim();if(r==="catalog:"){t=!0;continue}if(!t)continue;if(ls(r))break;const i=r.includes(":")?r.split(":")[0]?.trim():void 0;i&&(o.add(i),n=n||a.slice(0,a.indexOf(r)))}return{entries:o,indent:n||"  "}},"parseCatalogEntries"),ds=se((e,t,n)=>{const o=[];let a=!1,r=!1;for(let i=0;i<e.length;i+=1){const s=e[i],l=s.trim();if(o.push(s),l==="catalog:"){r=!0;continue}if(r&&!a){const c=e[i+1]?.trim()??"";(!c.includes(":")||c.startsWith("- ")||!c||c==="catalog:")&&(o.push(...t),a=!0,r=!1)}}return a||(n.includes("catalog:")||o.push("catalog:"),o.push(...t)),o},"insertCatalogEntries"),ps=se((e,t)=>{const n=d(e,"pnpm-workspace.yaml");if(!u(n)||Object.keys(t).length===0)return;const o=j(n),a=o.split(`
+`),{entries:r,indent:i}=cs(a),s=[];for(const[c,p]of Object.entries(t))r.has(c)||s.push(`${i}${c}: "${p}"`);if(s.length===0)return;const l=ds(a,s,o);B(n),E(n,l.join(`
+`),"utf8")},"updatePnpmWorkspaceCatalog"),It=se((e,t,n,o,a,r)=>{const i=n.overrides??{};if(o.dryRun){a.info("[dry-run] Would rewrite package.json files (remove husky/lint-staged, rewrite scripts)"),Object.keys(i).length>0&&a.info(`[dry-run] Would add overrides: ${JSON.stringify(i)}`);return}xn(e,t,i,r),a.info("Rewritten root package.json"),ss(e,t,i,r),t==="pnpm"&&ps(e,i)},"migrateDeps");var us=Object.defineProperty,Je=f((e,t)=>us(e,"name",{value:t,configurable:!0}),"t$8");const H=Je(()=>({backupsCreated:[],gitHooksConfigured:!1,inlinedLintStagedConfigCount:0,manualSteps:[],mergedStagedConfigCount:0,perMigration:{},removedConfigCount:0,removedPackageCount:0,rewrittenScriptCount:0,warnings:[]}),"createMigrationReport"),D=Je((e,t)=>{!e||e.warnings.includes(t)||e.warnings.push(t)},"addMigrationWarning"),F=Je((e,t)=>{!e||e.manualSteps.includes(t)||e.manualSteps.push(t)},"addManualStep"),q=Je((e,t,n,o=1)=>{const a=e.perMigration[t]??{removedConfigCount:0,removedPackageCount:0,rewrittenScriptCount:0};a[n]+=o,e.perMigration[t]=a,e[n]+=o},"bumpPerMigration");var fs=Object.defineProperty,Q=f((e,t)=>fs(e,"name",{value:t,configurable:!0}),"d$3");const ms=["gitleaks.toml",".gitleaks.toml"],gs=["gitleaks-report.json",".gitleaks-report.json","baseline.json"],Ge=Q(e=>ms.find(t=>u(d(e,t))),"detectGitleaksConfig"),gt=Q(e=>{const t=d(e,".gitleaksignore");return u(t)?t:void 0},"detectGitleaksIgnore"),ht=Q(e=>{for(const t of gs){const n=d(e,t);if(u(n))try{const o=JSON.parse(j(n));if(Array.isArray(o)&&o.length>0&&typeof o[0]=="object"&&o[0]!==null&&"RuleID"in o[0])return n}catch{}}},"detectGitleaksBaseline"),hs=Q(e=>e.map(t=>({description:t.Description??"",endColumn:t.EndColumn??0,endLine:t.EndLine??t.StartLine??0,entropy:t.Entropy??0,file:t.File??"",match:t.Match??"",ruleId:t.RuleID??"",secret:t.Secret??"",startColumn:t.StartColumn??0,startLine:t.StartLine??0,tags:t.Tags??[]})),"convertBaseline"),ys=Q((e,t,n,o)=>{const a=ht(e);if(!a)return;const r=d(e,".secrets-baseline.json");if(u(r)&&a!==r){D(o,`.secrets-baseline.json already exists — leaving ${a} in place`);return}const i=J(a);if(!Array.isArray(i)){D(o,`Could not parse ${a} as a gitleaks baseline`);return}const s=hs(i);if(t){n.info(`[dry-run] Would convert ${a} -> ${r} (${String(s.length)} findings)`);return}B(a,o),A(r,`${JSON.stringify(s,null,4)}
+`),n.info(`Converted ${a} -> ${r} (${String(s.length)} findings)`),q(o,"gitleaks","rewrittenScriptCount")},"migrateBaseline"),vs=Q((e,t,n,o)=>{const a=d(e,"package.json");if(!u(a))return;const r=J(a);if(!r)return;const i=Ge(e),s=i?`vis secrets --config ${i}`:"vis secrets";let l=!1;if(r.scripts){for(const[c,p]of Object.entries(r.scripts))if(typeof p=="string"&&/\bgitleaks\b/.test(p)){const h=p.replaceAll(/\bgitleaks(?:\s+(?:detect|protect))?\b[^\n&|;]*/g,s).trim();h!==p&&(r.scripts[c]=h,l=!0,n.info(`  scripts.${c}: "${p}" -> "${h}"`),q(o,"gitleaks","rewrittenScriptCount"))}}if(r.devDependencies){const c=r.devDependencies;for(const p of["gitleaks","@gitleaks/cli"])p in c&&(delete c[p],l=!0,q(o,"gitleaks","removedPackageCount"),n.info(`  removed devDependency: ${p}`))}if(l){if(t){n.info(`[dry-run] Would update ${a}`);return}B(a,o),A(a,`${JSON.stringify(r,null,4)}
+`)}},"rewriteScripts"),ks=Q((e,t,n,o)=>{const a=[".husky/pre-commit",".vis-hooks/pre-commit",".git/hooks/pre-commit"],r=Ge(e),i=r?`vis secrets --staged --config ${r}`:"vis secrets --staged";for(const s of a){const l=d(e,s);if(!u(l))continue;const c=j(l);if(!/\bgitleaks\b/.test(c))continue;const p=c.replaceAll(/\bgitleaks(?:\s+(?:detect|protect))?\b[^\n&|;]*/g,i);if(t){n.info(`[dry-run] Would rewrite ${l}`);continue}B(l,o),A(l,p),o.gitHooksConfigured=!0,n.info(`Rewrote gitleaks invocation in ${s}`)}},"rewriteHooks"),bs=/^([^:#][^:]*):([^:]+):(\d+)$/,ws=Q(e=>{const t=bs.exec(e.trim());if(!t)return;const[,n,o,a]=t,r=Number.parseInt(a??"0",10);return{description:"",endColumn:0,endLine:r,entropy:0,file:n??"",match:"",ruleId:o??"",secret:"",startColumn:0,startLine:r,tags:[]}},"fingerprintToBaselineEntry"),$s=Q((e,t,n,o)=>{const a=gt(e);if(!a)return;const r=j(a).split(/\r?\n/).map(p=>p.trim()).filter(p=>p.length>0&&!p.startsWith("#")).map(p=>ws(p)).filter(p=>p!==void 0);r.length===0&&D(o,`${a} contained no recognisable fingerprint lines — deleting it.`);const i=d(e,".secrets-baseline.json"),s=u(i)?J(i)??[]:[],l=new Set(s.map(p=>`${p.file}:${p.ruleId}:${String(p.startLine)}`)),c=[...s];for(const p of r){const h=`${p.file}:${p.ruleId}:${String(p.startLine)}`;l.has(h)||(l.add(h),c.push(p))}if(t){n.info(`[dry-run] Would merge ${String(r.length)} .gitleaksignore fingerprint(s) into ${i}, then delete ${a}.`);return}B(a,o),u(i)&&B(i,o),A(i,`${JSON.stringify(c,null,4)}
+`),Fe(a),n.info(`Merged ${String(r.length)} fingerprint(s) from ${a} into ${i}; removed .gitleaksignore.`),q(o,"gitleaks","rewrittenScriptCount",r.length)},"migrateIgnoreFile"),Bt=Q((e,t,n,o)=>{const a=Ge(e),r=gt(e);return a??r??ht(e)?(a&&(n.info(`Keeping ${a} as-is (compatible with vis secrets --config).`),F(o,`Run \`vis secrets --config ${a}\` or rename to .gitleaksignore-compatible defaults.`)),r&&$s(e,t.dryRun,n,o),ys(e,t.dryRun,n,o),vs(e,t.dryRun,n,o),ks(e,t.dryRun,n,o),F(o,"Review CI workflows (.github/workflows/*.yml) for gitleaks-action calls — replace with `vis secrets`."),!0):(t.silent||n.info("No gitleaks artifacts found — nothing to migrate."),!1)},"migrateGitleaks");var Ss=Object.defineProperty,te=f((e,t)=>Ss(e,"name",{value:t,configurable:!0}),"g$4");const xs=["kingfisher-baseline.yaml",".kingfisher-baseline.yaml","kingfisher-baseline.yml",".kingfisher-baseline.yml"],js=["kingfisher-rules.yml","kingfisher-rules.yaml",".kingfisher-rules.yml",".kingfisher-rules.yaml"],yt=te(e=>xs.find(t=>u(d(e,t))),"detectKingfisherBaseline"),He=te(e=>js.find(t=>u(d(e,t))),"detectKingfisherRules"),Cs=te(e=>{const t=[];let n={};for(const o of e.split(/\r?\n/)){const a=o.replace(/#.*$/,"");(/^\s*-\s*filepath\s*:/.test(a)||/^\s*-\s*$/.test(a))&&(n.filepath&&typeof n.linenum=="number"&&n.fingerprint&&t.push(n),n={});const r=/filepath\s*:\s*(.+?)\s*$/.exec(a);if(r?.[1]){n.filepath=r[1].replaceAll(/^["']|["']$/g,"");continue}const i=/fingerprint\s*:\s*(.+?)\s*$/.exec(a);if(i?.[1]){n.fingerprint=i[1].replaceAll(/^["']|["']$/g,"");continue}const s=/linenum\s*:\s*(\d+)/.exec(a);s?.[1]&&(n.linenum=Number.parseInt(s[1],10))}return n.filepath&&typeof n.linenum=="number"&&n.fingerprint&&t.push(n),t},"parseKingfisherBaseline"),Os=te(e=>({_kingfisherMigration:{legacyFingerprint:e.fingerprint,note:"Kingfisher xxhash — regenerate by running `vis secrets --update-baseline`."},description:"",endColumn:0,endLine:e.linenum,entropy:0,file:e.filepath,match:"",ruleId:"",secret:"",startColumn:0,startLine:e.linenum,tags:[]}),"toPlaceholderEntry"),Ps=te((e,t,n,o)=>{const a=yt(e);if(!a)return;const r=d(e,a);let i;try{i=Cs(j(r))}catch(c){const p=c instanceof Error?c.message:String(c);D(o,`Could not parse ${a} as a Kingfisher baseline: ${p}`);return}if(i.length===0){D(o,`${a} contained no recognisable records — leaving it in place for manual review.`);return}const s=d(e,".secrets-baseline.json");if(u(s)){D(o,`.secrets-baseline.json already exists — leaving Kingfisher baseline at ${a} for manual merge.`);return}const l=i.map(c=>Os(c));if(t){n.info(`[dry-run] Would convert ${a} -> .secrets-baseline.json (${String(l.length)} placeholder finding(s))`),F(o,"Run `vis secrets --update-baseline` after migration — Kingfisher xxhash fingerprints aren't interchangeable with our content-hash.");return}B(r,o),A(s,`${JSON.stringify(l,null,4)}
+`),n.info(`Converted ${a} -> .secrets-baseline.json (${String(l.length)} placeholder finding(s))`),F(o,"Run `vis secrets --update-baseline` — the converted entries are placeholders until the scanner computes real fingerprints."),q(o,"kingfisher","rewrittenScriptCount")},"migrateBaseline"),jn=/\bkingfisher(?:\s+(?:scan|validate|rules|update|manage-baseline|report|github|gitlab|bitbucket))?\b[^\n&|;]*/g,Rs=te((e,t,n,o)=>{const a=d(e,"package.json");if(!u(a))return;const r=J(a);if(!r)return;const i=He(e),s=i?`vis secrets --config ${i}`:"vis secrets";let l=!1;if(r.scripts)for(const[c,p]of Object.entries(r.scripts)){if(typeof p!="string"||!/\bkingfisher\b/.test(p))continue;const h=p.replaceAll(jn,v=>v.includes("validate")?`${s} --validate`:s).trim();h!==p&&(r.scripts[c]=h,l=!0,n.info(`  scripts.${c}: "${p}" -> "${h}"`),q(o,"kingfisher","rewrittenScriptCount"))}if(r.devDependencies){const c=r.devDependencies;for(const p of["kingfisher","@mongodb/kingfisher","kingfisher-scanner"])p in c&&(delete c[p],l=!0,q(o,"kingfisher","removedPackageCount"),n.info(`  removed devDependency: ${p}`))}if(l){if(t){n.info(`[dry-run] Would update ${a}`);return}B(a,o),A(a,`${JSON.stringify(r,null,4)}
+`)}},"rewriteScripts"),Is=te((e,t,n,o)=>{const a=He(e),r=a?`vis secrets --staged --config ${a}`:"vis secrets --staged";for(const i of Cn){const s=d(e,i);if(!u(s))continue;const l=j(s);if(!/\bkingfisher\b/.test(l))continue;const c=l.replaceAll(jn,r);if(t){n.info(`[dry-run] Would rewrite ${s}`);continue}B(s,o),A(s,c),o.gitHooksConfigured=!0,n.info(`Rewrote kingfisher invocation in ${i}`)}},"rewriteHooks"),Cn=[".husky/pre-commit",".vis-hooks/pre-commit",".git/hooks/pre-commit"],Vt=te(e=>{if(!u(e))return!1;try{return/\bkingfisher\b/.test(j(e))}catch{return!1}},"hasKingfisherRef"),At=te((e,t,n,o)=>{const a=yt(e),r=He(e),i=Vt(d(e,"package.json")),s=Cn.some(l=>Vt(d(e,l)));return(a??r)||i||s?(r&&(n.info(`Found custom Kingfisher ruleset at ${r} — keeping it for now.`),F(o,`Convert ${r} to gitleaks-shaped JSON using \`packages/tooling/secret-scanner/scripts/kingfisher-converter.mjs\`, then point \`vis secrets --config\` at the result.`)),a&&Ps(e,t.dryRun,n,o),Rs(e,t.dryRun,n,o),Is(e,t.dryRun,n,o),F(o,"Replace `# kingfisher:ignore` markers with `# secret-scanner:allow` (or keep `# gitleaks:allow` — the scanner accepts both)."),F(o,"Review CI workflows (.github/workflows/*.yml) for Kingfisher action/docker invocations — replace with `vis secrets`."),!0):(t.silent||n.info("No Kingfisher artifacts found — nothing to migrate."),!1)},"migrateKingfisher");var Bs=Object.defineProperty,M=f((e,t)=>Bs(e,"name",{value:t,configurable:!0}),"r$8");const Vs=/\bstaged\s*:/,Et=/(defineConfig\(\{)/,Tt=/(export\s+default\s+\{)/;M(e=>pt.some(t=>u(d(e,t))),"hasStandaloneLintStagedConfig");const As=M(e=>{for(const n of fn)if(u(d(e,n)))return!0;const t=d(e,".lintstagedrc");return u(t)&&!Ue(t)},"hasUnsupportedLintStagedConfig"),Es=M(e=>{const t=Ae(e);if(!t)return!1;const n=j(t);return Vs.test(n)},"hasStagedConfigInVisConfig"),On=M(e=>{const t=d(e,"package.json");if(u(t)&&J(t)?.["lint-staged"])return"package.json";for(const n of pt)if(u(d(e,n)))return n},"detectLintStagedConfig"),Ts=M(e=>J(d(e,"package.json"))?.["lint-staged"],"extractLintStagedFromPackageJson"),Ds=M(e=>J(e),"parseLintStagedJsonFile"),nt=M(e=>`    staged: {
+${Object.entries(e).map(([t,n])=>{const o=Array.isArray(n)?`[${n.map(a=>JSON.stringify(a)).join(", ")}]`:JSON.stringify(n);return`        ${JSON.stringify(t)}: ${o}`}).join(`,
+`)},
+    }`,"generateStagedConfigSnippet"),Ms=M((e,t,n)=>{const o=Ae(e);if(o){const i=j(o),s=nt(t);let l;return Et.test(i)?l=i.replace(Et,`$1
+${s},`):Tt.test(i)&&(l=i.replace(Tt,`$1
+${s},`)),l?(B(o),E(o,l,"utf8"),n.info(`Merged staged config into ${o}`),!0):(n.warn(`Could not auto-insert staged config into ${o} — please add manually`),!1)}const a=d(e,"vis.config.ts"),r=`import { defineConfig } from "@visulima/vis/config";
+
+export default defineConfig({
+${nt(t)},
+});
+`;return E(a,r,"utf8"),n.info(`Created ${a} with staged config`),!0},"insertStagedIntoVisConfig"),Ns=M(e=>{const t=d(e,"package.json"),n={configRemoved:!1,dependencyRemoved:!1};if(!u(t))return n;const o=j(t),a=JSON.parse(o);let r=!1;a["lint-staged"]&&(delete a["lint-staged"],r=!0,n.configRemoved=!0);const i=a.devDependencies,s=a.dependencies;if(i?.["lint-staged"]&&(delete i["lint-staged"],r=!0,n.dependencyRemoved=!0),s?.["lint-staged"]&&(delete s["lint-staged"],r=!0,n.dependencyRemoved=!0),r){const l=mt(o);B(t),E(t,`${JSON.stringify(a,void 0,l)}
+`,"utf8")}return n},"removeLintStagedFromPackageJson"),Ws=M((e,t)=>{for(const n of pt){const o=d(e,n);u(o)&&(B(o,t),Fe(o),t.removedConfigCount+=1)}},"removeLintStagedConfigFiles"),Fs=M((e,t)=>{const n=d(e,t,"pre-commit");if(!u(n))return!1;const o=j(n);if(o.includes("vis staged"))return!1;const a=o.split(`
+`);let r=!1;const i=[];for(const s of a){const l=s.trim();if(!r){let c=!1;for(const p of di){const h=p.exec(l);if(h){const v=s.slice(0,s.length-s.trimStart().length),$=h[1]?.trim()??"",P=l.slice(h[0].length).trim(),R=[$,"vis staged",P].filter(Boolean);i.push(`${v}${R.join(" ")}`),r=!0,c=!0;break}}if(c)continue}i.push(s)}return r?(B(n),E(n,i.join(`
+`)),!0):!1},"rewritePreCommitHook"),Ls=M((e,t,n)=>{if(t==="package.json")return Ts(e);const o=d(e,t);if(!un.includes(t)){D(n,`${t} cannot be auto-migrated — please add "staged" config to vis.config.ts manually`),F(n,`Manually convert ${t} to staged config in vis.config.ts`);return}if(t===".lintstagedrc"&&!Ue(o)){D(n,".lintstagedrc is not JSON format — please migrate manually");return}return Ds(o)},"extractConfig"),Pn=M((e,t)=>{const{configRemoved:n,dependencyRemoved:o}=Ns(e);n&&(t.inlinedLintStagedConfigCount+=1),o&&(t.removedPackageCount+=1),Ws(e,t)},"cleanupLintStagedArtifacts"),_s=M((e,t,n,o)=>{const a=[".vis-hooks",".husky"];for(const r of a)u(d(e,r))&&Fs(e,r)&&(o.gitHooksConfigured=!0,t.silent||n.info(`Rewrote pre-commit hook in ${r}/ to use "vis staged"`))},"rewriteHooks"),zs=M((e,t,n,o,a)=>{Ms(e,t,o)&&(a.mergedStagedConfigCount+=1),Pn(e,a),_s(e,n,o,a)},"applyMigration"),Dt=M((e,t,n,o)=>{const a=On(e);if(!a)return t.silent||n.info("No lint-staged configuration found — nothing to migrate."),!1;if(As(e)&&(D(o,'Non-JSON lint-staged config found — please migrate to "staged" in vis.config.ts manually'),F(o,"Convert your lint-staged config file to JSON format or add staged config to vis.config.ts manually")),Es(e))return D(o,'vis.config.ts already has a "staged" config — skipping lint-staged merge'),t.silent||n.warn('vis.config.ts already has a "staged" config — skipping'),t.dryRun||Pn(e,o),!0;const r=Ls(e,a,o);return!r||Object.keys(r).length===0?(t.silent||n.warn("lint-staged config is empty — skipping"),!1):t.dryRun?(t.silent||(n.info("[dry-run] Would insert staged config into vis.config.ts:"),n.info(nt(r))),!0):(zs(e,r,t,n,o),!0)},"migrateLintStaged");var Us=Object.defineProperty,vt=f((e,t)=>Us(e,"name",{value:t,configurable:!0}),"t$7");const kt=vt(e=>JSON.stringify(e,null,4).replaceAll(/"(\w+)":/g,"$1:"),"serializeConfigObject"),bt=vt((e,t,n,o,a)=>{const r=d(e,"vis.config.ts");return u(r)&&!n.dryRun?(o.warn("vis.config.ts already exists — refusing to overwrite. Remove it first or run with --dry-run."),a.warnings.push("vis.config.ts already exists; migration skipped writing the file."),!1):(n.dryRun?(o.info("── vis.config.ts (preview) ──"),o.info(t),o.info("── end preview ──")):(A(r,t),o.info(`Wrote ${r}`)),!0)},"writeVisConfig"),Rn=vt((e,t)=>{const n=d(e,t);if(u(n))try{return JSON.parse(j(n))}catch(o){throw new Error(`Failed to parse ${n}: ${o.message}`)}},"readJsonConfig");var Js=Object.defineProperty,$e=f((e,t)=>Js(e,"name",{value:t,configurable:!0}),"c$5");const Gs=$e(e=>{const t={};return e.command&&(t.command=Array.isArray(e.args)?`${e.command} ${e.args.join(" ")}`:e.args?`${e.command} ${e.args}`:e.command),e.deps&&e.deps.length>0&&(t.dependsOn=e.deps),e.inputs&&e.inputs.length>0&&(t.inputs=e.inputs),e.outputs&&e.outputs.length>0&&(t.outputs=e.outputs),e.type&&(t.type=e.type),e.preset&&(t.preset=e.preset),e.options&&(t.options=e.options),t},"taskToVisTarget"),Hs=$e(e=>{const t={};e.fileGroups&&(t.fileGroups=e.fileGroups);const n={};for(const[o,a]of Object.entries(e.tasks??{}))n[o]=Gs(a);return Object.keys(n).length>0&&(t.targetDefaults=n),e.implicitInputs&&e.implicitInputs.length>0&&(t.namedInputs={default:e.implicitInputs}),["// Migrated from moon's .moon/tasks.yml by `vis migrate moon`.","// Per-project moon.yml files can be converted to project.json —","// review the generated file and move project-specific tasks there.","",'import { defineConfig } from "@visulima/vis/config";',"",`export default defineConfig(${kt(t)});`,""].join(`
+`)},"renderVisConfig"),qs=$e(e=>{const t=d(e,".moon");if(!u(t))return;for(const o of["tasks.yml","tasks.yaml"]){const a=d(t,o);if(u(a))return a}const n=d(t,"tasks");if(u(n)){const o=ae(n).filter(a=>a.endsWith(".yml")||a.endsWith(".yaml")).sort();if(o.length>0)return d(n,o[0])}},"findMoonTasksFile"),Ks=$e(e=>{const t=d(e,".moon","templates");if(!u(t))return[];const n=[];try{for(const o of ae(t,{withFileTypes:!0}))o.isDirectory()&&u(d(t,o.name,"template.yml"))&&n.push(o.name)}catch{}return n.sort()},"findMoonTemplates"),Ys=$e((e,t,n,o,a)=>{const r=d(e,".moon","templates"),i=d(e,".vis","templates");n||po(i,{recursive:!0});for(const s of t){const l=d(r,s),c=d(i,s);if(u(c)){a.warnings.push(`Template "${s}" already exists at .vis/templates/${s} — left untouched. Remove or rename either copy to resolve.`);continue}if(n){o.info(`Would copy .moon/templates/${s} → .vis/templates/${s}`);continue}try{uo(l,c,{recursive:!0}),o.info(`Copied .moon/templates/${s} → .vis/templates/${s}`)}catch(p){const h=p instanceof Error?p.message:String(p);a.warnings.push(`Failed to copy template "${s}": ${h}`)}}!n&&t.length>0&&a.manualSteps.push(`Copied ${String(t.length)} template${t.length===1?"":"s"} from .moon/templates/ to .vis/templates/. Remove the .moon/templates/ directory when ready.`)},"copyMoonTemplatesToVis"),Mt=$e((e,t,n,o)=>{const a=qs(e);if(!a){n.warn("No .moon/tasks.yml (or .moon/tasks/<scope>.yml) found — nothing to migrate."),o.warnings.push("No moon tasks file at workspace root.");return}let r;try{r=nn(a)}catch(c){throw new Error(`Failed to parse ${a}: ${c.message}`)}for(const[c,p]of Object.entries(r.tasks??{}))p.env&&Object.keys(p.env).length>0&&o.warnings.push(`Task "${c}" has an \`env\` block which vis does not support — set environment variables in the command or a wrapper script.`),p.platform&&o.warnings.push(`Task "${c}" has a \`platform\` field ("${p.platform}") which vis does not support — review and remove.`),p.toolchain&&o.warnings.push(`Task "${c}" has a \`toolchain\` field ("${p.toolchain}") which vis does not support — review and remove.`),Array.isArray(p.args)&&p.args.some(h=>h.includes(" "))&&o.warnings.push(`Task "${c}" has \`args\` entries containing spaces — vis flattens args into the command string so quoting may need manual adjustment.`);r.extends&&r.extends.length>0&&o.warnings.push("`extends` was found in the moon config but has no direct vis equivalent — inline the referenced files or use vis's `taskDefaults` blocks."),r.implicitDeps&&r.implicitDeps.length>0&&o.warnings.push("`implicitDeps` was found in the moon config but has no direct vis equivalent — add explicit `dependsOn` entries in project.json instead."),r.taskOptions&&Object.keys(r.taskOptions).length>0&&o.warnings.push("`taskOptions` was found in the moon config but has no direct vis equivalent — review and apply settings per-target in vis.config.ts.");const i=Hs(r);if(!bt(e,i,t,n,o))return;o.manualSteps.push("moon's per-project `moon.yml` files should be converted to `project.json`. vis reads targets, tags, layer, stack, language, and owners from project.json — the field names match."),o.manualSteps.push("Scoped `.moon/tasks/<scope>.yml` files map to vis's `taskDefaults` with a `scope` block. Only the first scope file was parsed — review the generated file."),o.manualSteps.push("vis tasks support `when: { os, env, branch, ci, not.* }` for conditional execution and `always: true` for cleanup tasks that fire even when upstream fails. Review tasks that used moon's `local: true`, `options.runInCI`, or shell-based platform gating — the new surface is more expressive and may simplify them. See docs/guides/conditional-and-finally-tasks.mdx.");const s=Ks(e);if(s.length===0)return;const l=s.map(c=>`"${c}"`).join(", ");t.copyTemplates?Ys(e,s,!!t.dryRun,n,o):o.manualSteps.push(`Detected ${String(s.length)} template${s.length===1?"":"s"} under .moon/templates/ (${l}). They are already usable via \`vis generate <name>\` — vis auto-discovers moon-format template directories at runtime. To decouple from moon entirely, re-run \`vis migrate moon --copy-templates\` to physically move them to .vis/templates/.`)},"migrateMoon");var Qs=Object.defineProperty,N=f((e,t)=>Qs(e,"name",{value:t,configurable:!0}),"r$7");const Xs=/\bstaged\s*:/,Nt=/(defineConfig\(\{)/,Wt=/(export\s+default\s+\{)/;N(e=>ut.some(t=>u(d(e,t))),"hasStandaloneNanoStagedConfig");const Zs=N(e=>{for(const n of gn)if(u(d(e,n)))return!0;const t=d(e,".nanostagedrc");return u(t)&&!Ue(t)},"hasUnsupportedNanoStagedConfig"),el=N(e=>{const t=Ae(e);return t?Xs.test(j(t)):!1},"hasStagedConfigInVisConfig"),In=N(e=>{const t=d(e,"package.json");if(u(t)&&J(t)?.["nano-staged"])return"package.json";for(const n of ut)if(u(d(e,n)))return n},"detectNanoStagedConfig"),tl=N(e=>J(d(e,"package.json"))?.["nano-staged"],"extractNanoStagedFromPackageJson"),nl=N(e=>J(e),"parseNanoStagedJsonFile"),ot=N(e=>`    staged: {
+${Object.entries(e).map(([t,n])=>{const o=Array.isArray(n)?`[${n.map(a=>JSON.stringify(a)).join(", ")}]`:JSON.stringify(n);return`        ${JSON.stringify(t)}: ${o}`}).join(`,
+`)},
+    }`,"generateStagedConfigSnippet"),ol=N((e,t,n)=>{const o=Ae(e);if(o){const i=j(o),s=ot(t);let l;return Nt.test(i)?l=i.replace(Nt,`$1
+${s},`):Wt.test(i)&&(l=i.replace(Wt,`$1
+${s},`)),l?(B(o),E(o,l,"utf8"),n.info(`Merged staged config into ${o}`),!0):(n.warn(`Could not auto-insert staged config into ${o} — please add manually`),!1)}const a=d(e,"vis.config.ts"),r=`import { defineConfig } from "@visulima/vis/config";
+
+export default defineConfig({
+${ot(t)},
+});
+`;return E(a,r,"utf8"),n.info(`Created ${a} with staged config`),!0},"insertStagedIntoVisConfig"),al=N(e=>{const t=d(e,"package.json"),n={configRemoved:!1,dependencyRemoved:!1};if(!u(t))return n;const o=j(t),a=JSON.parse(o);let r=!1;a["nano-staged"]&&(delete a["nano-staged"],r=!0,n.configRemoved=!0);const i=a.devDependencies,s=a.dependencies;if(i?.["nano-staged"]&&(delete i["nano-staged"],r=!0,n.dependencyRemoved=!0),s?.["nano-staged"]&&(delete s["nano-staged"],r=!0,n.dependencyRemoved=!0),r){const l=mt(o);B(t),E(t,`${JSON.stringify(a,void 0,l)}
+`,"utf8")}return n},"removeNanoStagedFromPackageJson"),rl=N((e,t)=>{for(const n of ut){const o=d(e,n);u(o)&&(B(o,t),Fe(o),t.removedConfigCount+=1)}},"removeNanoStagedConfigFiles"),il=N((e,t)=>{const n=d(e,t,"pre-commit");if(!u(n))return!1;const o=j(n);if(o.includes("vis staged"))return!1;const a=o.split(`
+`);let r=!1;const i=[];for(const s of a){const l=s.trim();if(!r){let c=!1;for(const p of pi){const h=p.exec(l);if(h){const v=s.slice(0,s.length-s.trimStart().length),$=h[1]?.trim()??"",P=l.slice(h[0].length).trim(),R=[$,"vis staged",P].filter(Boolean);i.push(`${v}${R.join(" ")}`),r=!0,c=!0;break}}if(c)continue}i.push(s)}return r?(B(n),E(n,i.join(`
+`)),!0):!1},"rewritePreCommitHook"),sl=N((e,t,n)=>{if(t==="package.json")return tl(e);const o=d(e,t);if(!mn.includes(t)){D(n,`${t} cannot be auto-migrated — please add "staged" config to vis.config.ts manually`),F(n,`Manually convert ${t} to staged config in vis.config.ts`);return}if(t===".nanostagedrc"&&!Ue(o)){D(n,".nanostagedrc is not JSON format — please migrate manually");return}return nl(o)},"extractConfig"),Bn=N((e,t)=>{const{configRemoved:n,dependencyRemoved:o}=al(e);n&&(t.inlinedLintStagedConfigCount+=1),o&&(t.removedPackageCount+=1),rl(e,t)},"cleanupNanoStagedArtifacts"),ll=N((e,t,n,o)=>{const a=[".vis-hooks",".husky"];for(const r of a)u(d(e,r))&&il(e,r)&&(o.gitHooksConfigured=!0,t.silent||n.info(`Rewrote pre-commit hook in ${r}/ to use "vis staged"`))},"rewriteHooks"),cl=N((e,t,n,o,a)=>{ol(e,t,o)&&(a.mergedStagedConfigCount+=1),Bn(e,a),ll(e,n,o,a)},"applyMigration"),Ft=N((e,t,n,o)=>{const a=In(e);if(!a)return t.silent||n.info("No nano-staged configuration found — nothing to migrate."),!1;if(Zs(e)&&(D(o,'Non-JSON nano-staged config found — please migrate to "staged" in vis.config.ts manually'),F(o,"Convert your nano-staged config file to JSON format or add staged config to vis.config.ts manually")),el(e))return D(o,'vis.config.ts already has a "staged" config — skipping nano-staged merge'),t.silent||n.warn('vis.config.ts already has a "staged" config — skipping'),t.dryRun||Bn(e,o),!0;const r=sl(e,a,o);return!r||Object.keys(r).length===0?(t.silent||n.warn("nano-staged config is empty — skipping"),!1):t.dryRun?(t.silent||(n.info("[dry-run] Would insert staged config into vis.config.ts:"),n.info(ot(r))),!0):(cl(e,r,t,n,o),!0)},"migrateNanoStaged");var dl=Object.defineProperty,Vn=f((e,t)=>dl(e,"name",{value:t,configurable:!0}),"a$7");const pl=Vn(e=>{const t={};return e.namedInputs&&Object.keys(e.namedInputs).length>0&&(t.namedInputs=e.namedInputs),e.targetDefaults&&Object.keys(e.targetDefaults).length>0&&(t.targetDefaults=e.targetDefaults),["// Migrated from nx.json by `vis migrate nx`.","// Per-project project.json files are compatible with vis and do not need to be rewritten —","// vis already reads targets, tags, implicitDependencies, and sourceRoot.","",'import { defineConfig } from "@visulima/vis/config";',"",`export default defineConfig(${kt(t)});`,""].join(`
+`)},"renderVisConfig"),Lt=Vn((e,t,n,o)=>{const a=Rn(e,"nx.json");if(!a){n.warn("No nx.json found in workspace root — nothing to migrate."),o.warnings.push("No nx.json at workspace root.");return}const r=pl(a);bt(e,r,t,n,o)&&(o.manualSteps.push("Existing project.json files are vis-compatible and have been left untouched. Rename `sourceRoot` -> `sourceRoot` is identical; `tags`, `implicitDependencies`, and `targets` translate directly."),o.manualSteps.push("vis adds two task primitives nx doesn't expose declaratively: `when: { os, env, branch, ci, not.* }` for conditional execution (replaces ad-hoc `configurations`) and `always: true` for finally/teardown tasks that run even when upstream fails. See docs/guides/conditional-and-finally-tasks.mdx."),(a.affected?.defaultBase||a.defaultBase)&&o.manualSteps.push(`nx's default base branch (${a.affected?.defaultBase??a.defaultBase}) is honoured by vis via the --base flag; no vis config change needed.`))},"migrateNx");var ul=Object.defineProperty,Z=f((e,t)=>ul(e,"name",{value:t,configurable:!0}),"a$6");const An=[".secretlintrc",".secretlintrc.json",".secretlintrc.js",".secretlintrc.mjs",".secretlintrc.cjs",".secretlintrc.yml",".secretlintrc.yaml"],En=[".secretlintignore"],Tn=Z(e=>An.find(t=>u(d(e,t))),"detectSecretlintConfig"),Dn=Z(e=>En.find(t=>u(d(e,t))),"detectSecretlintIgnore"),fl=Z((e,t,n)=>{if(t.endsWith(".js")||t.endsWith(".mjs")||t.endsWith(".cjs"))return D(n,`${t} is a JS config — cannot auto-extract rule IDs. Review manually to confirm coverage.`),[];if(t.endsWith(".yml")||t.endsWith(".yaml"))return D(n,`${t} is YAML — cannot auto-extract rule IDs without a YAML parser. Review manually.`),[];const o=J(d(e,t));if(!o)return[];const a=new Set,r=Z(i=>{if(i)for(const s of i)s.id&&a.add(s.id),s.rules&&r(s.rules)},"walk");return r(o.rules),[...a]},"extractRuleIds"),ml=Z((e,t,n,o)=>{for(const a of[...An,...En]){const r=d(e,a);if(u(r)){if(t){n.info(`[dry-run] Would remove ${r}`);continue}B(r,o),Fe(r),q(o,"secretlint","removedConfigCount"),n.info(`Removed ${r}`)}}},"removeSecretlintConfigFiles"),gl=Z((e,t,n,o)=>{const a=d(e,".secretlintignore");if(!u(a))return;const r=j(a).split(/\r?\n/).map(i=>i.trim()).filter(i=>i&&!i.startsWith("#"));r.length!==0&&(F(o,`.secretlintignore contained ${String(r.length)} path pattern(s). vis secrets uses .gitignore + --exclude / --exclude-from; add these globs to your .gitignore or pass --exclude: ${r.slice(0,5).join(", ")}${r.length>5?", ...":""}`),t&&n.info(`[dry-run] Would consume ${a} (${String(r.length)} patterns) and surface as manual step.`))},"convertIgnoreFile"),hl=Z((e,t,n,o)=>{const a=d(e,"package.json");if(!u(a))return;const r=J(a);if(!r)return;let i=!1;if(r.scripts){for(const[s,l]of Object.entries(r.scripts))if(typeof l=="string"&&/\bsecretlint\b/.test(l)){const c=l.replaceAll(/\bsecretlint\b[^\n&|;]*/g,"vis secrets").trim();c!==l&&(r.scripts[s]=c,i=!0,q(o,"secretlint","rewrittenScriptCount"),n.info(`  scripts.${s}: "${l}" -> "${c}"`))}}if(r.devDependencies){const s=r.devDependencies,l=[];for(const c of Object.keys(s))(c==="secretlint"||c.startsWith("@secretlint/"))&&(delete s[c],l.push(c),i=!0,q(o,"secretlint","removedPackageCount"));l.length>0&&n.info(`  removed ${String(l.length)} secretlint devDependencies: ${l.join(", ")}`)}if(i){if(t){n.info(`[dry-run] Would update ${a}`);return}B(a,o),A(a,`${JSON.stringify(r,null,4)}
+`)}},"rewriteScripts"),yl=Z((e,t,n,o)=>{const a=[".husky/pre-commit",".vis-hooks/pre-commit",".git/hooks/pre-commit"];for(const r of a){const i=d(e,r);if(!u(i))continue;const s=j(i);if(!/\bsecretlint\b/.test(s))continue;const l=s.replaceAll(/\bsecretlint\b[^\n&|;]*/g,"vis secrets --staged");if(t){n.info(`[dry-run] Would rewrite ${i}`);continue}B(i,o),A(i,l),o.gitHooksConfigured=!0,n.info(`Rewrote secretlint invocation in ${r}`)}},"rewriteHooks"),_t=Z((e,t,n,o)=>{const a=Tn(e),r=Dn(e);if(!(a??r))return t.silent||n.info("No secretlint artifacts found — nothing to migrate."),!1;if(a){const i=fl(e,a,o);n.info(`Found ${a}`),i.length>0?(n.info(`  active rules/presets: ${i.join(", ")}`),F(o,`secretlint used these rules: ${i.join(", ")}. vis secrets ships the gitleaks ruleset (177 rules covering AWS/GCP/Azure/GitHub/Slack/Stripe and more). Verify parity before removing secretlint.`)):F(o,`Rule IDs could not be auto-extracted from ${a}. Verify that the bundled gitleaks ruleset covers your secretlint rule set.`)}return gl(e,t.dryRun,n,o),hl(e,t.dryRun,n,o),yl(e,t.dryRun,n,o),ml(e,t.dryRun,n,o),!0},"migrateSecretlint");var vl=Object.defineProperty,wt=f((e,t)=>vl(e,"name",{value:t,configurable:!0}),"u$4");const kl=wt(e=>e.map(t=>{if(t.startsWith("^"))return{dependencies:!0,target:t.slice(1)};if(t.includes("#")){const[n,o]=t.split("#");return{projects:n,target:o}}return t}),"convertDependsOn"),bl=wt(e=>{const t=e.tasks??e.pipeline??{},n={};for(const[r,i]of Object.entries(t)){if(r.includes("#"))continue;const s={};i.persistent&&(s.persistent=!0),i.interactive&&(s.interactive=!0);const l={};i.cache===!1&&(l.cache=!1),i.dependsOn&&i.dependsOn.length>0&&(l.dependsOn=kl(i.dependsOn)),i.inputs&&i.inputs.length>0&&(l.inputs=i.inputs),i.outputs&&i.outputs.length>0&&(l.outputs=i.outputs),i.env&&i.env.length>0&&(l.env=i.env),i.passThroughEnv&&i.passThroughEnv.length>0&&(l.passThroughEnv=i.passThroughEnv),Object.keys(s).length>0&&(l.options=s),n[r]=l}const o={};Object.keys(n).length>0&&(o.targetDefaults=n);const a={};return e.globalDependencies&&e.globalDependencies.length>0&&(a.globalInputs=e.globalDependencies),e.globalEnv&&e.globalEnv.length>0&&(a.globalEnv=e.globalEnv),e.globalPassThroughEnv&&e.globalPassThroughEnv.length>0&&(a.globalPassThroughEnv=e.globalPassThroughEnv),Object.keys(a).length>0&&(o.taskRunnerOptions=a),["// Migrated from turbo.json by `vis migrate turborepo`.","// Review the generated targetDefaults and move project-specific tasks","// into each project's project.json.","",'import { defineConfig } from "@visulima/vis/config";',"",`export default defineConfig(${kt(o)});`,""].join(`
+`)},"renderVisConfig"),zt=wt((e,t,n,o)=>{const a=Rn(e,"turbo.json");if(!a){n.warn("No turbo.json found in workspace root — nothing to migrate."),o.warnings.push("No turbo.json at workspace root.");return}const r=bl(a);if(!bt(e,r,t,n,o))return;o.manualSteps.push("Review targetDefaults in vis.config.ts — project-specific tasks (turbo's project#task syntax) were skipped and should be moved into each project's project.json."),o.manualSteps.push("vis adds two task primitives turbo doesn't have: `when: { os, env, branch, ci, not.* }` for conditional execution and `always: true` for finally/teardown tasks that run even when upstream fails. See docs/guides/conditional-and-finally-tasks.mdx.");const i=a.tasks??a.pipeline??{};Object.values(i).some(s=>s.outputLogs!==void 0)&&o.warnings.push("`outputLogs` was found on one or more tasks but vis has no equivalent setting — review and remove."),a.remoteCache?.enabled&&o.manualSteps.push("turbo remote cache detected. vis speaks the same HTTP protocol — set taskRunnerOptions.remoteCache { url, token, teamId } in vis.config.ts.")},"migrateTurborepo");var wl=Object.defineProperty,w=f((e,t)=>wl(e,"name",{value:t,configurable:!0}),"n$a");const $l=/\b(?:husky|lint-staged|nano-staged)\b/,Sl=w(e=>{const t=d(e,"package.json");if(u(t))try{return JSON.parse(j(t))}catch{return}},"readPackageJson"),xl=w((e,t)=>{const n=Sl(e);if(!n)return!1;const o={...n.dependencies,...n.devDependencies};for(const r of hn)if(o[r])return!0;if(n.scripts){for(const r of Object.values(n.scripts))if(typeof r=="string"&&$l.test(r))return!0}const{overrides:a}=t;return a?Object.keys(a).length>0:!1},"detectDepsNeedsMigration"),jl=w(e=>u(d(e,"turbo.json")),"detectTurborepo"),Cl=w(e=>u(d(e,"nx.json")),"detectNx"),Ol=w(e=>u(d(e,".moon")),"detectMoon"),X=w(()=>{const e=[];return{lines:e,logger:{info:w(t=>{e.push(t)},"info"),warn:w(t=>{e.push(`⚠  ${t}`)},"warn")}}},"createCapturingLogger"),Pl=[{apply:w(({packageManager:e,root:t,visConfig:n},o,a)=>{It(t,e,n,{dryRun:!1},a,o)},"apply"),description:"Remove husky/lint-staged/nano-staged from package.json and rewrite scripts to `vis staged`.",detect:w(({root:e,visConfig:t})=>xl(e,t),"detect"),id:"deps",probe:w(({packageManager:e,root:t,visConfig:n})=>{const{lines:o,logger:a}=X(),r=H();return It(t,e,n,{dryRun:!0},a,r),o},"probe"),title:"Dependencies & scripts"},{apply:w(({root:e},t,n)=>{Dt(e,{dryRun:!1},n,t)},"apply"),description:"Inline lint-staged configuration into vis.config.ts.",detect:w(({root:e})=>!!On(e),"detect"),id:"lint-staged",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return Dt(e,{dryRun:!0},n,o),t},"probe"),title:"lint-staged"},{apply:w(({root:e},t,n)=>{Ft(e,{dryRun:!1},n,t)},"apply"),description:"Inline nano-staged configuration into vis.config.ts.",detect:w(({root:e})=>!!In(e),"detect"),id:"nano-staged",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return Ft(e,{dryRun:!0},n,o),t},"probe"),title:"nano-staged"},{apply:w(({root:e},t,n)=>{zt(e,{dryRun:!1},n,t)},"apply"),description:"Translate turbo.json tasks into vis.config.ts.",detect:w(({root:e})=>jl(e),"detect"),id:"turborepo",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return zt(e,{dryRun:!0},n,o),t},"probe"),title:"Turborepo"},{apply:w(({root:e},t,n)=>{Lt(e,{dryRun:!1},n,t)},"apply"),description:"Translate nx.json targets into vis.config.ts.",detect:w(({root:e})=>Cl(e),"detect"),id:"nx",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return Lt(e,{dryRun:!0},n,o),t},"probe"),title:"Nx"},{apply:w(({root:e},t,n)=>{Mt(e,{copyTemplates:!1,dryRun:!1},n,t)},"apply"),description:"Translate .moon/tasks.yml into vis.config.ts.",detect:w(({root:e})=>Ol(e),"detect"),id:"moon",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return Mt(e,{copyTemplates:!1,dryRun:!0},n,o),t},"probe"),title:"Moon"},{apply:w(({root:e},t,n)=>{Bt(e,{dryRun:!1},n,t)},"apply"),description:"Convert gitleaks config/baseline/hooks to `vis secrets`.",detect:w(({root:e})=>!!(Ge(e)??gt(e)??ht(e)),"detect"),id:"gitleaks",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return Bt(e,{dryRun:!0},n,o),t},"probe"),title:"Gitleaks"},{apply:w(({root:e},t,n)=>{At(e,{dryRun:!1},n,t)},"apply"),description:"Convert Kingfisher baseline/rules/hooks to `vis secrets`.",detect:w(({root:e})=>!!(yt(e)??He(e)),"detect"),id:"kingfisher",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return At(e,{dryRun:!0},n,o),t},"probe"),title:"Kingfisher"},{apply:w(({root:e},t,n)=>{_t(e,{dryRun:!1},n,t)},"apply"),description:"Replace secretlint config/hooks with `vis secrets`.",detect:w(({root:e})=>!!(Tn(e)??Dn(e)),"detect"),id:"secretlint",probe:w(({root:e})=>{const{lines:t,logger:n}=X(),o=H();return _t(e,{dryRun:!0},n,o),t},"probe"),title:"Secretlint"}],Rl=w(e=>Pl.filter(t=>t.detect(e)),"getApplicableMigrations"),Il=w((e,t)=>({packageManager:vn(e),root:e,visConfig:t}),"buildProbeContext");var Bl=Object.defineProperty,Vl=f((e,t)=>Bl(e,"name",{value:t,configurable:!0}),"s$4");const Al=Vl((e,t)=>{t.info("── Migration Summary ──");const n=[["Staged configs merged into vis.config.ts",e.mergedStagedConfigCount],["Lint-staged configs inlined",e.inlinedLintStagedConfigCount],["Config files removed",e.removedConfigCount],["Packages removed",e.removedPackageCount],["Scripts rewritten",e.rewrittenScriptCount]];for(const[a,r]of n)r>0&&t.info(`  ${a}: ${String(r)}`);e.gitHooksConfigured&&t.info("  Pre-commit hook updated to use vis staged");const o=Object.entries(e.perMigration);if(o.length>0){t.info(""),t.info("By migration:");for(const[a,r]of o){const i=[];r.removedConfigCount>0&&i.push(`${String(r.removedConfigCount)} config(s) removed`),r.removedPackageCount>0&&i.push(`${String(r.removedPackageCount)} package(s) removed`),r.rewrittenScriptCount>0&&i.push(`${String(r.rewrittenScriptCount)} script(s) rewritten`),t.info(`  ${a}: ${i.join(", ")||"no changes"}`)}}if(e.backupsCreated.length>0&&(t.info(""),t.info(`Created ${String(e.backupsCreated.length)} .bak file(s) for rollback. Remove them once you're happy.`)),e.warnings.length>0){t.info(""),t.warn("Warnings:");for(const a of e.warnings)t.warn(`  - ${a}`)}if(e.manualSteps.length>0){t.info(""),t.info("Manual steps required:");for(const a of e.manualSteps)t.info(`  - ${a}`)}},"printSummary");var El=Object.defineProperty,Mn=f((e,t)=>El(e,"name",{value:t,configurable:!0}),"c$3");const Tl=Mn((e,t)=>{if(e.length===0){t.info("No applicable migrations detected in this workspace.");return}t.info(`Detected migrations (non-interactive preview):
+`);for(const n of e){t.info(`  • ${n.entry.title} — ${n.entry.description}`);for(const o of n.preview)t.info(`      ${o}`);t.info("")}t.info("Run a specific migration with `vis migrate <name>` (e.g. `vis migrate deps`).")},"renderFallbackTable"),Dl=Mn(async e=>{const t=e.workspaceRoot??process.cwd(),n=e.visConfig??{},o=Il(t,n),a=Rl(o).map(h=>({entry:h,preview:h.probe(o)}));if(!(process.stdout.isTTY&&!ue)){Tl(a,e.logger);return}if(a.length===0){e.logger.info("No applicable migrations detected in this workspace.");return}const r=new Hr(a),i=n.tui?.autoExit??!1,s=i===!0?3:typeof i=="number"?i:0,l=await ro(io.createElement(si,{autoExitSeconds:s,isDryRun:!1,store:r}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0}).waitUntilExit();if(!l||l.length===0){e.logger.info("No migrations selected — exiting.");return}const c=H(),p=[];for(const h of l)try{e.logger.info(`── Applying ${h.entry.title} ──`),h.entry.apply(o,c,e.logger),e.logger.info("")}catch(v){p.push({entry:h.entry,error:v}),e.logger.warn(`Failed to apply ${h.entry.title}: ${v.message}`)}Al(c,e.logger),p.length>0&&(e.logger.warn(""),e.logger.warn(`${String(p.length)} migration(s) failed — see messages above.`),process.exitCode=1)},"runMigrateInteractive");var Ml=Object.defineProperty,Nl=f((e,t)=>Ml(e,"name",{value:t,configurable:!0}),"e$f");const Wl={description:"Analyze and optimize dependencies using e18e replacements and @socketregistry overrides",examples:[["vis optimize","Interactive TUI to select and apply optimizations"],["vis optimize --dry-run","Preview available optimizations"],["vis optimize --pin","Pin Socket.dev overrides to exact versions"],["vis optimize --prod","Only optimize production dependencies"]],group:"Workspace",loader:Nl(()=>import("./handler39.js").then(e=>e.h),"loader"),name:"optimize",options:[{alias:"d",defaultValue:!1,description:"Preview available optimizations without applying",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Pin Socket.dev overrides to exact versions",name:"pin",type:Boolean},{defaultValue:!1,description:"Only optimize production dependencies",name:"prod",type:Boolean},{defaultValue:!1,description:"Skip running install after applying overrides",name:"no-install",type:Boolean},{description:"Output format: table or json (default: table)",name:"format",type:String}]};var Fl=Object.defineProperty,Ll=f((e,t)=>Fl(e,"name",{value:t,configurable:!0}),"e$e");const _l={argument:{description:"Subcommand and arguments (e.g., cache dir, publish --dry-run, list --depth 0)",name:"args",type:String},description:"Package manager utilities (cache, publish, audit, list, config, etc.)",examples:[["vis pm cache dir","Show cache directory"],["vis pm cache clean","Clean cache"],["vis pm publish --dry-run","Preview publishing"],["vis pm list --depth 0","List direct dependencies"],["vis pm audit","Run security audit"],["vis pm whoami","Show logged-in user"]],group:"System",loader:Ll(()=>import("./handler20.js"),"loader"),name:"pm"};var zl=Object.defineProperty,Ul=f((e,t)=>zl(e,"name",{value:t,configurable:!0}),"e$d");const Jl={alias:["rm","un","uninstall"],argument:{description:"Packages to remove",name:"packages",type:String},description:"Remove packages using the detected package manager",examples:[["vis remove lodash","Remove a package"],["vis rm old-package","Remove using alias"],["vis remove --filter app react","Remove from specific workspace"],["vis remove -g typescript","Remove global package"]],group:"Dependencies",loader:Ul(()=>import("./handler21.js"),"loader"),name:"remove",options:[{alias:"D",defaultValue:!1,description:"Remove from devDependencies",name:"save-dev",type:Boolean},{alias:"g",defaultValue:!1,description:"Remove global package",name:"global",type:Boolean},{alias:"r",defaultValue:!1,description:"Remove from all workspace packages",name:"recursive",type:Boolean},{alias:"w",defaultValue:!1,description:"Remove from workspace root",name:"workspace-root",type:Boolean},{alias:"F",description:"Filter by workspace package name",multiple:!0,name:"filter",type:String}]};var Gl=Object.defineProperty,Hl=f((e,t)=>Gl(e,"name",{value:t,configurable:!0}),"e$c");const ql={argument:{description:"The target to run (e.g., build, test, lint)",name:"target",type:String},description:"Run a target across workspace projects",examples:[["vis run","List all available targets"],["vis run build","Run build on all projects"],["vis run :build","Run build on all projects (moon-style)"],["vis run ~:test","Run test on the project closest to the current directory"],['vis run "#frontend:build"',"Run build on projects tagged 'frontend'"],['vis run :build --query "language=typescript"',"Filter by project metadata"],["vis run test --affected","Run test only on git-changed projects"],["vis run build --fail-fast","Stop on first failure"],["vis run build --dry-run","Show execution plan without running"]],group:"Run & Execute",loader:Hl(()=>import("./handler43.js"),"loader"),name:"run",options:[{alias:"p",description:"Comma-separated list of projects to run",name:"projects",type:String},{defaultValue:!1,description:"Skip the toolchain pre-flight (no auto-install for any pinned tool: node / pnpm / yarn / npm / bun / deno / go / python / ruby / rust)",name:"skip-toolchain",type:Boolean},{defaultValue:3,description:"Maximum number of parallel tasks (falls back to VIS_RUN_CONCURRENCY_LIMIT env var, then 3)",name:"parallel",type:Number},{defaultValue:!0,description:"Enable caching (use --no-cache to disable)",name:"cache",type:Boolean},{description:"Custom cache directory",name:"cache-dir",type:String},{defaultValue:!1,description:"Show what would run without executing",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Generate a run summary after execution",name:"summarize",type:Boolean},{description:'Partition tasks for distributed CI (e.g., "1/4" for first of four runners). Falls back to VIS_PARTITION env var.',name:"partition",type:String},{defaultValue:!1,description:"Skip project constraint validation",name:"skip-constraints",type:Boolean},{description:"Filter matched projects by a query (e.g. 'language=typescript && tag=lib')",name:"query",type:String},{defaultValue:!1,description:"Only run on projects affected by git changes (shorthand for vis affected)",name:"affected",type:Boolean},{defaultValue:!1,description:"Rerun affected tasks on file change. Ctrl+C to exit.",name:"watch",type:Boolean},{defaultValue:!1,description:"Stop all tasks on first failure",name:"fail-fast",type:Boolean},{description:"Output mode: interleaved (pass-through), labeled (prefix each line with [pkg#task]), or grouped (vite-task-style block)",name:"log",type:String},{description:"Output style: normal (print every task) or quiet (skip output for successful/cached tasks; failed tasks still print in CI mode, and remain in TUI scrollback in interactive mode). Per-target options.outputStyle overrides this.",name:"output-style",type:String},{defaultValue:!1,description:"Run every task through a pseudo-terminal so color-aware tools render as if attached to a TTY (disables caching)",name:"pty",type:Boolean},{description:"Global retry budget: cap on total task retries across the run (per-target retryCount is still honored up to the budget)",name:"retry-budget",type:Number},{description:"Write a Chrome Tracing JSON profile of the run to this path (open in chrome://tracing or Perfetto)",name:"profile",type:String},{defaultValue:!1,description:"Render the most-recent run's saved summary (from .task-runner/last-summary.json) and exit without executing any tasks",name:"last-details",type:Boolean},{defaultValue:!0,description:"Show flaky task report on failure (use --no-flaky to suppress)",name:"flaky",type:Boolean}]};var Kl=Object.defineProperty,Yl=f((e,t)=>Kl(e,"name",{value:t,configurable:!0}),"e$b");const Ql={description:"Generate a CycloneDX 1.6 Software Bill of Materials for the workspace",examples:[["vis sbom","Write the full-workspace SBOM to sbom.cdx.json"],["vis sbom --focus=my-app","Scope the SBOM to my-app's transitive closure"],["vis sbom --focus=my-app,other","Focus multiple projects"],["vis sbom --format=xml --output=sbom.cdx.xml","Emit XML instead of JSON"],["vis sbom --include-dev","Include devDependencies (default: production only)"],["vis sbom --output=-","Write to stdout"]],group:"Security & Health",loader:Yl(()=>import("./handler40.js"),"loader"),name:"sbom",options:[{description:"Project name(s) to focus on — comma-separated for multiple",name:"focus",type:String},{defaultValue:"json",description:"Output format: json (default) or xml",name:"format",type:String},{description:"Output path (use '-' for stdout; default: sbom.cdx.json)",name:"output",type:String},{defaultValue:!1,description:"Include devDependencies (default: production only)",name:"include-dev",type:Boolean}]};var Xl=Object.defineProperty,Zl=f((e,t)=>Xl(e,"name",{value:t,configurable:!0}),"e$a");const ec={argument:{description:"One or more paths to scan (defaults to workspace root)",name:"paths",type:String},description:"Scan a repository for hardcoded secrets and credentials",examples:[["vis secrets","Scan the workspace with grouped, colourised output"],["vis secrets --staged","Scan only files staged for the current commit (pre-commit hooks)"],["vis secrets --since main","Scan only files changed since the `main` branch"],["vis secrets --affected","Scan only projects affected by the current branch"],["vis secrets --init","Write an initial baseline from current findings"],["vis secrets --list-rules","Print all bundled detection rules"],["vis secrets --list-validators","Print non-HTTP validator types in the ruleset + install hints for each"],["vis secrets --exclude-rule generic-api-key --exclude-rule aws-access-token","Drop noisy rules"],["vis secrets --include-rule stripe-access-token","Check a single rule"],["vis secrets --enable-rule tag:preset:weak-passwords","Enable an opt-in rule group additively (defaults still fire)"],["vis secrets --include-rule tag:preset:password-manager","Restrict output to one opt-in group only"],["vis secrets --min-confidence high","Drop rules without a high confidence label (CI-friendly precision filter)"],["vis secrets --validate --only-verified","Live-verify each finding against its provider (one HTTP call per finding)"],["vis secrets --exclude 'dist/**' --exclude-from .secretsignore","Extra gitignore-syntax exclusions for the walker"],["vis secrets --config ./leaks.json --no-extend-bundled","Use only the supplied config, skip the bundled ruleset"],["vis secrets --concurrency 4","Cap the rayon thread pool (0 / omit = auto)"],["vis secrets --baseline .secrets-baseline.json","Suppress known findings; print diff vs. baseline"],["vis secrets --update-baseline","Merge current findings into the baseline (use --replace-baseline to overwrite)"],["vis secrets --format sarif > report.sarif","SARIF output for GitHub code-scanning"]],group:"Security",loader:Zl(()=>import("./handler37.js"),"loader"),name:"secrets",options:[{description:"Path to a JSON config (gitleaks-compatible shape). Defaults to the bundled ruleset.",name:"config",type:String},{description:"Drop rules below this author-declared confidence: low (default), medium, high. Rules without a declared confidence (every gitleaks rule) are treated as low, so --min-confidence medium or higher drops them along with explicit low-confidence rules.",name:"min-confidence",type:String},{defaultValue:!1,description:"Live-verify each finding against its provider (one HTTP call per finding, max 8 concurrent). Only supports Kingfisher-style HTTP validators with StatusMatch / WordMatch response matchers; other types (gRPC, multi-step, checksum) mark the finding as validation=skipped. WARNING: sends candidate secrets to the provider — some providers alert their security team on failed auth attempts.",name:"validate",type:Boolean},{defaultValue:!1,description:"With --validate, drop every finding whose validation is not 'verified'. Useful for CI gating.",name:"only-verified",type:Boolean},{defaultValue:!1,description:"With --config, do not merge on top of the bundled ruleset — replace it.",name:"no-extend-bundled",type:Boolean},{defaultValue:"text",description:"Output format: text (default), json, sarif",name:"format",type:String},{description:"Path to a baseline JSON of previously-triaged findings",name:"baseline",type:String},{defaultValue:!1,description:"Scan only files staged for commit",name:"staged",type:Boolean},{description:"Scan only files changed since <ref> (e.g. main, origin/HEAD)",name:"since",type:String},{defaultValue:!1,description:"Scan only projects affected by the current branch",name:"affected",type:Boolean},{description:"Enable an opt-in rule or tag without restricting output — additive (e.g. tag:preset:weak-passwords, tag:preset:password-manager). Repeatable.",multiple:!0,name:"enable-rule",type:String},{description:"Rule id or tag:<name> selector — whitelist, only matching findings are emitted. Implies enablement. Repeatable.",multiple:!0,name:"include-rule",type:String},{description:"Rule id or tag:<name> selector — drop matching findings. Repeatable.",multiple:!0,name:"exclude-rule",type:String},{description:"Gitignore-syntax pattern to exclude from the walk (repeatable)",multiple:!0,name:"exclude",type:String},{description:"Path to a gitignore-shaped file the walker should honor (repeatable)",multiple:!0,name:"exclude-from",type:String},{defaultValue:!1,description:"Mask secret values in output",name:"redact",type:Boolean},{defaultValue:!1,description:"Scan dotfiles",name:"include-hidden",type:Boolean},{defaultValue:!1,description:"Do not respect .gitignore",name:"no-gitignore",type:Boolean},{description:"Skip files larger than this (bytes). Default: 10 MiB",name:"max-size",type:Number},{description:"Rayon worker threads (0 / omit = auto)",name:"concurrency",type:Number},{defaultValue:!1,description:"Merge current findings into the baseline and exit 0",name:"update-baseline",type:Boolean},{defaultValue:!1,description:"With --update-baseline, replace rather than merge",name:"replace-baseline",type:Boolean},{defaultValue:!1,description:"Scaffold a baseline from current findings",name:"init",type:Boolean},{defaultValue:!1,description:"With --init, preview the baseline without writing files",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Print all bundled detection rules and exit",name:"list-rules",type:Boolean},{defaultValue:!1,description:"Print non-HTTP validator types referenced by the current ruleset, with install hints for their optional peer dependencies.",name:"list-validators",type:Boolean},{defaultValue:!1,description:"Suppress all progress output (only emit findings)",name:"quiet",type:Boolean},{defaultValue:!1,description:"Print diagnostic info (skipped rules, etc.)",name:"verbose",type:Boolean}]};var tc=Object.defineProperty,nc=f((e,t)=>tc(e,"name",{value:t,configurable:!0}),"e$9");const oc={description:"Sort package.json files across the workspace using the sort-package-json Rust crate",examples:[["vis sort-package-json","Sort all package.json files in the workspace"],["vis sort-package-json --check","Check if files are already sorted (exit 1 if not)"],["vis sort-package-json --sort-scripts","Also sort the scripts field alphabetically"],["vis sort-package-json --indent 4","Force 4-space indentation (overrides per-file detection)"],["vis sort-package-json --indent tab","Force tab indentation"],["vis sort-package-json --ignore '**/fixtures/**'","Skip files matching one or more glob patterns"],["vis sort-package-json --sort-order name,version,license","Pin a custom prefix order before the default field order"],["vis sort-package-json --unsorted dependencies,devDependencies","Preserve original key order for the listed top-level sections"],["vis sort-package-json --no-final-newline","Do not append a trailing newline"],["vis sort-package-json --line-ending crlf","Force CRLF line endings (default: auto-detect per file)"]],group:"Workspace",loader:nc(()=>import("./handler22.js"),"loader"),name:"sort-package-json",options:[{alias:"c",defaultValue:!1,description:"Check if package.json files are sorted without writing (exits 1 if unsorted)",name:"check",type:Boolean},{defaultValue:!1,description:"Also sort the scripts field alphabetically",name:"sort-scripts",type:Boolean},{description:"Indent override: a number of spaces, the literal `tab`, or a literal whitespace string. When unset, the original file's indent is preserved.",name:"indent",type:String},{description:"Glob pattern of files to skip (basename match, or path-relative when the pattern contains `/`). Repeatable.",multiple:!0,name:"ignore",type:String},{description:"Comma-separated list of top-level keys to place first, before the default field order. Repeatable.",multiple:!0,name:"sort-order",type:String},{description:"Comma-separated list of top-level sections whose key order should be preserved (e.g. dependencies,devDependencies). Repeatable.",multiple:!0,name:"unsorted",type:String},{defaultValue:!1,description:"Do not append a trailing newline to the output (default: append one).",name:"no-final-newline",type:Boolean},{defaultValue:"auto",description:"Line ending to write: auto (per-file detection, default), lf, or crlf.",name:"line-ending",type:String}]};var ac=Object.defineProperty,rc=f((e,t)=>ac(e,"name",{value:t,configurable:!0}),"e$8");const ic={description:"Run linters on staged files using config from vis.config.ts",examples:[["vis staged","Run staged linters"],["vis staged --verbose","Run with verbose output"],["vis staged --no-stash","Run without backup stash"],["vis staged --diff HEAD~1","Run against a specific diff"]],group:"Run & Execute",loader:rc(()=>import("./handler45.js"),"loader"),name:"staged",options:[{defaultValue:!1,description:"Allow empty commits when tasks revert all staged changes",name:"allow-empty",type:Boolean},{defaultValue:!1,description:"Automatically stage new files that tasks create during the run",name:"auto-stage",type:Boolean},{description:"Number of concurrent tasks or false for serial",name:"concurrent",type:String},{defaultValue:!1,description:"Run all tasks to completion even if one fails",name:"continue-on-error",type:Boolean},{description:"Working directory to run all tasks in",name:"cwd",type:String},{defaultValue:!1,description:"Enable debug output",name:"debug",type:Boolean},{description:"Override the default --staged flag of git diff",name:"diff",type:String},{description:"Override the default diff-filter",name:"diff-filter",type:String},{defaultValue:!1,description:"Fail with exit code 1 when tasks modify tracked files",name:"fail-on-changes",type:Boolean},{defaultValue:!1,description:"Kill in-flight tasks with SIGKILL on fast-fail instead of the default SIGTERM",name:"force-kill",type:Boolean},{defaultValue:!1,description:"Hide unstaged changes from partially staged files",name:"hide-partially-staged",type:Boolean},{defaultValue:!1,description:"Hide all unstaged changes before running tasks",name:"hide-unstaged",type:Boolean},{defaultValue:!1,description:"Suppress console output",name:"quiet",type:Boolean},{defaultValue:!1,description:"Pass filepaths relative to cwd to tasks",name:"relative",type:Boolean},{defaultValue:!1,description:"Revert to original state in case of errors",name:"revert",type:Boolean},{defaultValue:!0,description:"Enable backup stash",name:"stash",type:Boolean},{defaultValue:!1,description:"Show task output even when tasks succeed",name:"verbose",type:Boolean}]};var sc=Object.defineProperty,lc=f((e,t)=>sc(e,"name",{value:t,configurable:!0}),"t$4");const cc={description:"Show a workspace health dashboard at a glance",examples:[["vis status","Full status overview"],["vis status --json","Machine-readable output"]],group:"Workspace",loader:lc(()=>import("./handler23.js"),"loader"),name:"status",options:[{defaultValue:!1,description:"Emit JSON output",name:"json",type:Boolean}]};var dc=Object.defineProperty,pc=f((e,t)=>dc(e,"name",{value:t,configurable:!0}),"e$7");const uc={argument:{description:"What to sync: codeowners",name:"kind",type:String},description:"Synchronise derived workspace artefacts (codeowners, tsconfig refs, …)",examples:[["vis sync codeowners","Generate CODEOWNERS at the repository root"],["vis sync codeowners --out=.github/CODEOWNERS","Write to .github/CODEOWNERS instead"],["vis sync codeowners --check","Fail if the existing file is stale"]],group:"Workspace",loader:pc(()=>import("./handler32.js"),"loader"),name:"sync",options:[{description:"Output path for the generated file (default: <workspace>/CODEOWNERS)",name:"out",type:String},{defaultValue:!1,description:"Verify the existing file is up to date (exit non-zero if stale)",name:"check",type:Boolean}]};var fc=Object.defineProperty,mc=f((e,t)=>fc(e,"name",{value:t,configurable:!0}),"t$3");const gc={argument:{description:"Task ID to explain (e.g. @my/app:build)",name:"taskId",type:String},description:"Explain why a task is included in the graph by walking its dependency chain to a root",examples:[["vis task-why @myorg/app:build","Show what pulls build in"],["vis task-why lib-a:test","Check the test task's triggers"]],group:"Workspace",loader:mc(()=>import("./handler24.js"),"loader"),name:"task-why"};var hc=Object.defineProperty,yc=f((e,t)=>hc(e,"name",{value:t,configurable:!0}),"e$6");const vc={argument:{description:"Subcommand: status | detect | install | use | which",name:"action",type:String},description:"Inspect and delegate to the workspace version managers (proto, mise, fnm, volta, asdf, nvm, corepack)",examples:[["vis toolchain status","Show every detected manager + expected vs actual tool versions"],["vis toolchain install","Install pinned versions — per-tool delegation"],["vis toolchain use node@22.13.0","Pin node 22.13.0 via the best runtime manager"],["vis toolchain use pnpm@10.32.1","Update the packageManager field; pnpm self-activates"],["vis toolchain which node","Resolve the node binary the manager would launch"],["vis toolchain detect","Print the primary manager's name"]],group:"Workspace",loader:yc(()=>import("./handler25.js"),"loader"),name:"toolchain",options:[{defaultValue:!1,description:"With `status`: exit 1 if any tool mismatches",name:"exit-code",type:Boolean},{defaultValue:!1,description:"Print the command that would run, but don't execute",name:"dry-run",type:Boolean},{defaultValue:!1,description:"Emit JSON (status subcommand only)",name:"json",type:Boolean},{defaultValue:!0,description:"With `use`: also mirror the version into engines.<tool> when that field already exists. --no-engines to skip.",name:"engines",type:Boolean}]};var kc=Object.defineProperty,bc=f((e,t)=>kc(e,"name",{value:t,configurable:!0}),"e$5");const wc={argument:{description:"Packages to unlink (omit for current package)",name:"packages",type:String},description:"Unlink a previously linked package",examples:[["vis unlink","Unlink current package"],["vis unlink react","Unlink specific package"],["vis unlink -r","Unlink in all workspace packages"]],group:"Dependencies",loader:bc(()=>import("./handler26.js"),"loader"),name:"unlink",options:[{alias:"r",defaultValue:!1,description:"Unlink in all workspace packages",name:"recursive",type:Boolean}]};var $c=Object.defineProperty,Sc=f((e,t)=>$c(e,"name",{value:t,configurable:!0}),"e$4");const xc={alias:"up",argument:{description:"Packages to update (updates all if omitted)",name:"packages",type:String},description:"Update packages to their latest versions",examples:[["vis update react","Update react within semver range"],["vis up react -L","Update react to latest"],["vis update -i","Interactive mode"],["vis update --filter app","Update in specific workspace"],["vis update -r","Update in all workspaces"],["vis update --target minor","Only apply minor/patch updates (catalog mode)"],["vis update --dry-run","Preview changes without applying"],["vis update --exclude '@types/*'","Exclude packages by pattern"],["vis update --changelog","Show changelog links after updating"],["vis update --rollback","Restore catalog from last backup"],["vis update --ai","Run AI analysis before applying updates"]],group:"Dependencies",loader:Sc(()=>import("./handler33.js"),"loader"),name:"update",options:[{alias:"L",defaultValue:!1,description:"Update to latest version (ignore semver range)",name:"latest",type:Boolean},{alias:"t",description:"Update target: latest, minor, or patch (default: latest, catalog mode)",name:"target",type:String},{alias:"d",defaultValue:!1,description:"Preview changes without applying",name:"dry-run",type:Boolean},{alias:"g",defaultValue:!1,description:"Update global packages",name:"global",type:Boolean},{alias:"r",defaultValue:!1,description:"Update recursively in all workspace packages",name:"recursive",type:Boolean},{description:"Filter packages in monorepo",name:"filter",type:String},{alias:"w",defaultValue:!1,description:"Include workspace root",name:"workspace-root",type:Boolean},{alias:"D",defaultValue:!1,description:"Update only devDependencies",name:"dev",type:Boolean},{alias:"P",defaultValue:!1,description:"Update only dependencies",name:"prod",type:Boolean},{alias:"i",defaultValue:!1,description:"Interactive mode",name:"interactive",type:Boolean},{defaultValue:!1,description:"Don't update optionalDependencies",name:"no-optional",type:Boolean},{alias:"l",defaultValue:!1,description:"Include packages with pinned/exact versions (no ^ or ~ prefix)",name:"include-locked",type:Boolean},{defaultValue:!1,description:"Update lockfile only",name:"no-save",type:Boolean},{description:"Glob pattern to include packages (repeatable, catalog mode)",lazyMultiple:!0,name:"include",type:String},{description:"Glob pattern to exclude packages (repeatable, catalog mode)",lazyMultiple:!0,name:"exclude",type:String},{defaultValue:!1,description:"Include prerelease versions (catalog mode)",name:"prerelease",type:Boolean},{defaultValue:!1,description:"Check for known security vulnerabilities (via OSV.dev)",name:"security",type:Boolean},{defaultValue:!1,description:"Skip catalog mode, use package manager directly",name:"no-catalog",type:Boolean},{description:"Output format: table, json, or minimal (default: table)",name:"format",type:String},{defaultValue:!1,description:"Show changelog URLs for updated packages",name:"changelog",type:Boolean},{description:"Run install after catalog update, --no-install to skip (default: true)",name:"install",type:Boolean},{defaultValue:!1,description:"Restore catalog file from the last backup",name:"rollback",type:Boolean},{defaultValue:!1,description:"Run AI analysis on outdated packages before updating (catalog mode)",name:"ai",type:Boolean},{description:"AI analysis type: impact, security, compatibility, or recommend (default: impact)",name:"ai-type",type:String},{defaultValue:!1,description:"Skip typosquat name check for package arguments",name:"no-typosquat-check",type:Boolean}]};var jc=Object.defineProperty,Cc=f((e,t)=>jc(e,"name",{value:t,configurable:!0}),"e$3");const Oc={argument:{description:"Target version (defaults to latest)",name:"version",type:String},description:"Update vis itself to the latest version",examples:[["vis self-update","Update to latest"],["vis self-update 2.0.0","Install specific version"],["vis self-update --check","Check for updates without installing"]],group:"System",loader:Cc(()=>import("./handler27.js"),"loader"),name:"self-update",options:[{defaultValue:!1,description:"Check for updates without installing",name:"check",type:Boolean},{defaultValue:!1,description:"Reinstall even if already current",name:"force",type:Boolean},{defaultValue:!1,description:"Suppress output (CI mode)",name:"silent",type:Boolean}]};var Pc=Object.defineProperty,Rc=f((e,t)=>Pc(e,"name",{value:t,configurable:!0}),"e$2");const Ic={alias:"explain",argument:{description:"Package(s) to explain",name:"packages",type:String},description:"Show why a package is installed (dependency chain)",examples:[["vis why react","Show why react is installed"],["vis why react --json","Output as JSON"],["vis why react -r","Check across all workspaces"],["vis explain react","Alias matching npm's command"]],group:"Dependencies",loader:Rc(()=>import("./handler28.js"),"loader"),name:"why",options:[{defaultValue:!1,description:"Output as JSON",name:"json",type:Boolean},{defaultValue:!1,description:"Show extended information (pnpm)",name:"long",type:Boolean},{defaultValue:!1,description:"Machine-readable output (pnpm)",name:"parseable",type:Boolean},{alias:"r",defaultValue:!1,description:"Check across all workspaces",name:"recursive",type:Boolean},{alias:"D",defaultValue:!1,description:"Filter to dev dependencies (pnpm)",name:"dev",type:Boolean},{alias:"P",defaultValue:!1,description:"Filter to production dependencies (pnpm)",name:"prod",type:Boolean},{defaultValue:!1,description:"Exclude optional dependencies (pnpm)",name:"no-optional",type:Boolean},{alias:"g",defaultValue:!1,description:"Check globally installed packages (pnpm)",name:"global",type:Boolean},{description:"Limit dependency tree depth",name:"depth",type:Number},{alias:"F",description:"Filter by workspace package name",multiple:!0,name:"filter",type:String}]};var Bc=Object.defineProperty,qe=f((e,t)=>Bc(e,"name",{value:t,configurable:!0}),"e$1");qe((e,t)=>!process.stderr.isTTY||process.env.TERM==="dumb"?e===t?t:`${e} (${De(t)})`:mo(e,t),"link");const Vc=qe(()=>{if(process.env.VIS_VERSION)return process.env.VIS_VERSION;try{const e=new URL("../../package.json",import.meta.url);return U(e).version}catch{return"0.0.0"}},"getVersion"),Ac=qe(()=>{process.env.VIS_VERSION=Vc()},"injectVersion"),Ec=qe(e=>{!process.stdout.isTTY||ue||process.env.TERM==="dumb"||process.stdout.write(`\x1B]0;${e}\x07`)},"setTerminalTitle");var Tc=Object.defineProperty,Dc=f((e,t)=>Tc(e,"name",{value:t,configurable:!0}),"m$3");const Mc={beforeCommand:Dc(async e=>{try{const t=e.options?.cwd;let n;if(t)n=ho(process.cwd(),t);else{const r=process.env.VIS_MONOREPO_ROOT;n=r&&r.length>0?r:Xt(process.cwd()).path}e.workspaceRoot=n;let o=Ae(n);try{e.visConfig=await jt(n);const r=e.visConfig?.versionConstraint;if(r&&!ko(r)){e.logger.error(""),e.logger.error(Xe(oe("✖ Invalid versionConstraint"))),e.logger.error(`  vis.config.ts has versionConstraint ${oe(JSON.stringify(r))}, which is not a valid semver range.`),e.logger.error(""),process.exitCode=1;return}if(r&&!bo(Ne.version,r)){e.logger.error(""),e.logger.error(Xe(oe("✖ vis version too old"))),e.logger.error(`  vis.config.ts requires vis ${oe(r)}, but the current version is ${oe(Ne.version)}.`),e.logger.error(`  ${Re("→")} Upgrade: ${pe("pnpm add -D @visulima/vis@latest")}`),e.logger.error(""),process.exitCode=1;return}}catch(r){const i=o,s=r instanceof Error?r.message:String(r);e.visConfigError={file:i??void 0,message:s};const l=!!process.stdout.isTTY&&!ue;if(i&&!l){if(e.logger.error(""),e.logger.error(Xe(oe(`✖ Failed to load ${i}`))),e.logger.error(`  ${s}`),e.logger.error(""),s.includes("Cannot find module")){const c=/Cannot find module '([^']+)'/.exec(s)?.[1]??"unknown";e.logger.error(`${Re("→ Hint:")} The module ${oe(c)} could not be resolved.`),c.includes("@visulima/vis")?(e.logger.error("  This usually means the package isn't installed or the export path changed."),e.logger.error(`  Try: ${pe("pnpm add @visulima/vis")}`),e.logger.error(`  Or regenerate: ${pe("vis init --force")}`)):e.logger.error(`  Try: ${pe(`pnpm add ${c}`)}`)}else s.includes("SyntaxError")||s.includes("Unexpected token")?(e.logger.error(`${Re("→ Hint:")} The config file has a syntax error.`),e.logger.error("  Check your config for typos or invalid syntax."),e.logger.error(`  Or regenerate: ${pe("vis init --force")}`)):(e.logger.error(`${Re("→ Hint:")} Delete the broken config and recreate it:`),e.logger.error(`  ${pe(`rm ${i} && vis init`)}`));e.logger.error(""),e.logger.error(`  Continuing with default settings.
+`)}e.visConfig={}}const a=process.argv[2]??"";if(!new Set(["--help","--version","-h","-V","create","help","implode","init"]).has(a)&&!o&&!ue)if(process.stdin.isTTY){const r=vo({input:process.stdin,output:process.stderr}),i=await new Promise(s=>{r.question("\x1B[36;1m?\x1B[0m \x1B[1mNo vis.config.ts found. Create one with best-practice security defaults?\x1B[0m \x1B[90m(\x1B[92mY\x1B[90m/n)\x1B[0m ",s),r.on("SIGINT",()=>{r.close(),s("n")})});if(r.close(),!i.trim()||i.trim().toLowerCase()==="y"||i.trim().toLowerCase()==="yes"){const s=yo(n,"vis.config.ts"),l=['import { defineConfig } from "@visulima/vis/config";',"","// Secure defaults are applied automatically by defineConfig().","// You only need to add allowBuilds for packages with build scripts.","// Run 'vis check --security-config' to see all active settings.","export default defineConfig({","    security: {","        allowBuilds: {",'            // "esbuild": true,',"        },","    },","});",""].join(`
+`);E(s,l),e.logger.info(`✓ Created ${s}
+`),e.visConfig=await jt(n),o=s}}else e.logger.warn("No vis.config.ts found. Run 'vis init' to create one with best-practice security defaults.")}catch(t){t instanceof Error&&!t.message.includes("monorepo root")&&e.logger.warn(`Failed to detect workspace: ${t.message}`),e.visConfig={}}},"beforeCommand"),name:"config-loader"};var Nc=Object.defineProperty,x=f((e,t)=>Nc(e,"name",{value:t,configurable:!0}),"e");const Ut=300*1e3,at=d(Le(),".vis",".tip-state.json"),Wc=x(()=>{try{if(u(at))return U(at)}catch{}return{lastGlobal:0,perTip:{}}},"readState"),Fc=x(e=>{try{Ve(d(Le(),".vis")),A(at,JSON.stringify(e))}catch{}},"writeState"),Lc=[{cooldownMs:1800*1e3,id:"short-aliases",matches:x(e=>["install","link","remove","uninstall","update"].includes(e.command),"matches"),message:x(e=>{const t={install:"i",link:"ln",remove:"rm",uninstall:"rm",update:"up"}[e.command];return t?`You can use 'vis ${t}' as a shorthand for 'vis ${e.command}'`:""},"message"),probability:.5},{id:"use-exec",matches:x(e=>e.command==="dlx"&&e.success,"matches"),message:x(()=>"Use 'vis exec' to run locally installed binaries without downloading.","message")},{id:"security-check",matches:x(e=>(e.command==="check"||e.command==="update")&&e.success&&!e.args.includes("--security"),"matches"),message:x(()=>"Add --security to check for known vulnerabilities via OSV.dev","message"),probability:.3},{cooldownMs:3600*1e3,id:"ai-analysis",matches:x(e=>(e.command==="check"||e.command==="update")&&e.success&&!e.args.includes("--ai"),"matches"),message:x(()=>"Add --ai to run AI analysis on outdated packages before updating.","message"),probability:.2},{cooldownMs:1440*60*1e3,id:"socket-security",matches:x(e=>(e.command==="install"||e.command==="update"||e.command==="check")&&e.success,"matches"),message:x(()=>"Enable Socket.dev in vis.config.ts for security scores and supply chain alerts: security.socket.enabled = true","message"),probability:.15},{id:"dedupe-after-install",matches:x(e=>e.command==="install"&&e.success,"matches"),message:x(()=>"Run 'vis dedupe' periodically to remove duplicate dependencies.","message"),probability:.15},{cooldownMs:720*60*1e3,id:"doctor-checkup",matches:x(e=>(e.command==="install"||e.command==="add"||e.command==="update")&&e.success,"matches"),message:x(()=>"Run 'vis doctor' for a full project health check — outdated, security, duplicates, and optimizations in one view.","message"),probability:.25},{cooldownMs:10080*60*1e3,id:"init-config",matches:x(e=>(e.command==="install"||e.command==="run")&&e.success&&!e.hasVisConfig,"matches"),message:x(()=>"Run 'vis init' to create a vis.config.ts with secure defaults — supply chain protection enabled automatically.","message"),probability:.4},{id:"why-command",matches:x(e=>e.command==="outdated"&&e.success,"matches"),message:x(()=>"Use 'vis why <package>' to understand why a dependency is installed.","message"),probability:.3},{id:"graph-command",matches:x(e=>e.command==="run"&&e.success,"matches"),message:x(()=>"Use 'vis graph' to visualize your project dependency graph.","message"),probability:.1},{id:"affected-command",matches:x(e=>e.command==="run"&&e.success&&!e.args.includes("--projects"),"matches"),message:x(()=>"Use 'vis affected <target>' to run tasks only on changed projects.","message"),probability:.2},{id:"pm-cache",matches:x(e=>e.command==="install"&&e.success,"matches"),message:x(()=>"Use 'vis pm cache dir' to find your package manager's cache location.","message"),probability:.1},{id:"create-editor",matches:x(e=>e.command==="create"&&e.success,"matches"),message:x(()=>"Add --editor vscode to generate VS Code configuration during project creation.","message"),probability:.5},{id:"env-pin",matches:x(e=>e.command==="env"&&e.args.includes("install")&&e.success,"matches"),message:x(()=>"Use 'vis env pin <version>' to pin the Node.js version for your project.","message"),probability:.5},{id:"upgrade-check",matches:x(e=>e.command!=="self-update"&&e.success,"matches"),message:x(()=>"Run 'vis self-update --check' to see if a newer version of vis is available.","message"),probability:.05}],_c=x(e=>{if(process.env.VIS_CLI_TEST||ue)return;const t=Date.now(),n=Wc();if(t-n.lastGlobal<Ut)return;const o=Lc.filter(i=>{if(!i.matches(e))return!1;const s=n.perTip[i.id]??0,l=i.cooldownMs??Ut;return t-s>=l});if(o.length===0)return;const a=o.find(i=>{const s=i.probability??1;return Math.random()<s});if(!a)return;const r=a.message(e);r&&(process.stderr.write(`
+\x1B[2mtip: ${r}\x1B[0m
+`),n.lastGlobal=t,n.perTip[a.id]=t,Fc(n))},"showTip");var zc=Object.defineProperty,Jt=f((e,t)=>zc(e,"name",{value:t,configurable:!0}),"o$3");const Uc=Jt(e=>({afterCommand:Jt(async t=>{const n=process.argv.slice(2),o=n[0]??"";e&&e(),_c({args:n,command:o,hasVisConfig:t.visConfig!==void 0&&Object.keys(t.visConfig).length>0,success:process.exitCode===void 0||process.exitCode===0})},"afterCommand"),name:"post-command"}),"postCommandPlugin"),k=xo();var Jc=Object.defineProperty,L=f((e,t)=>Jc(e,"name",{value:t,configurable:!0}),"n$2");const he=L((e,t,n,o)=>{for(const a of t)e.push("--filter",a);n&&e.push("--recursive"),o&&e.push("--workspace-root")},"pushFilterGlobals"),Gc=L(e=>{const t=[],n=[];return he(t,e.filter,e.recursive,e.workspaceRoot),e.silent&&t.push("--silent"),e.frozenLockfile&&t.push("--frozen-lockfile"),t.push("install"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.force&&t.push("--force"),e.ignoreScripts&&t.push("--ignore-scripts"),e.lockfileOnly&&t.push("--lockfile-only"),e.noOptional&&t.push("--no-optional"),e.offline&&t.push("--offline"),{args:t,bin:"aube",warnings:n}},"resolveAubeInstall"),Hc=L(e=>{const t=[],n=[];return he(t,e.filter,!1,!1),t.push("add"),e.saveDev&&t.push("--save-dev"),e.exact&&t.push("--save-exact"),e.global&&t.push("--global"),e.optional&&t.push("--save-optional"),e.peer&&t.push("--save-peer"),e.workspace&&n.push("aube has no flag for the `workspace:` protocol; it auto-detects local workspace members during add. Ignoring --workspace."),e.workspaceRoot&&t.push("--workspace"),t.push(...e.packages),{args:t,bin:"aube",warnings:n}},"resolveAubeAdd"),qc=L(e=>{const t=[];return he(t,e.filter,e.recursive,!1),t.push("remove"),e.saveDev&&t.push("--save-dev"),e.global&&t.push("--global"),e.workspaceRoot&&t.push("--workspace"),t.push(...e.packages),{args:t,bin:"aube",warnings:[]}},"resolveAubeRemove"),Kc=L(e=>{const t=["dedupe"];return e&&t.push("--check"),{args:t,bin:"aube",warnings:[]}},"resolveAubeDedupe"),Yc=L(e=>{const t=[],n=[];he(t,e.filter,e.recursive,!1),t.push("why"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.json&&t.push("--json"),e.long&&t.push("--long"),e.parseable&&t.push("--parseable"),e.depth!==void 0&&n.push("aube why does not accept --depth; ignoring."),e.noOptional&&n.push("aube why does not accept --no-optional; ignoring."),e.global&&n.push("aube why does not accept --global; ignoring.");const[o,...a]=e.packages;return o===void 0?n.push("aube why requires a package name; none provided."):(a.length>0&&n.push("aube why takes a single package; using the first."),t.push(o)),{args:t,bin:"aube",warnings:n}},"resolveAubeWhy"),Qc=L(e=>{const t=[],n=[];e.workspaceRoot&&n.push("aube outdated has no `--include-workspace-root` equivalent. Run `vis outdated` separately at the workspace root if you need its outdated list."),he(t,e.filter,e.recursive,!1),t.push("outdated"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.long&&t.push("--long"),e.format==="json"?t.push("--json"):e.format&&e.format!=="table"&&n.push(`aube outdated does not support format "${e.format}"; falling back to default table output.`),e.compatible&&n.push("aube outdated does not accept --compatible; ignoring."),e.noOptional&&n.push("aube outdated does not accept --no-optional; ignoring."),e.global&&n.push("aube outdated does not accept --global; ignoring.");const[o,...a]=e.packages;return o!==void 0&&(a.length>0&&n.push("aube outdated takes a single pattern argument; using the first."),t.push(o)),{args:t,bin:"aube",warnings:n}},"resolveAubeOutdated"),Xc=L(e=>{const t=[];e.silent&&t.push("--silent"),t.push("dlx");for(const n of e.additionalPackages)t.push("--package",n);return e.shellMode&&t.push("--shell-mode"),t.push(e.package),t.push(...e.args),{args:t,bin:"aube",warnings:[]}},"resolveAubeDlx"),Zc=L(e=>{const t=[];return he(t,e.filter,e.recursive,e.workspaceRoot),t.push("exec"),e.parallel&&t.push("--parallel"),e.reverse&&t.push("--reverse"),e.shellMode&&t.push("--shell-mode"),t.push(e.command),t.push(...e.args),{args:t,bin:"aube",warnings:[]}},"resolveAubeExec"),ed=L(e=>{const t=["link"];return e!==null&&t.push(e),{args:t,bin:"aube",warnings:[]}},"resolveAubeLink"),td=L((e,t)=>{const n=[],o=[];return t&&n.push("--recursive"),n.push("unlink"),e.length>1&&o.push("aube unlink takes a single package; using the first."),e.length>0&&n.push(e[0]),{args:n,bin:"aube",warnings:o}},"resolveAubeUnlink"),nd=L(e=>{const t=["view","--",e.package],n=[],[o,...a]=e.fields;return o!==void 0?(a.length>0&&n.push("aube view only supports a single field; using the first."),e.json&&n.push("aube view does not support --json with a field selector; printing the field without --json."),t.push(o)):e.json&&t.push("--json"),{args:t,bin:"aube",warnings:n}},"resolveAubeInfo"),Rp=L(e=>{const t=[],n=[];return he(t,e.filters,e.recursive,e.workspaceRoot),t.push("update"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.global&&t.push("--global"),e.interactive&&t.push("--interactive"),e.latest&&t.push("--latest"),e.noOptional&&t.push("--no-optional"),e.noSave&&t.push("--no-save"),t.push(...e.packages),{args:t,bin:"aube",warnings:n}},"resolveAubeUpdate"),od=new Set(["fund","ping","search","token"]),ad=L((e,t)=>od.has(e)?{args:[e,...t],bin:"npm",warnings:[`'${e}' is not natively supported by aube. Delegating to npm.`]}:{args:[e,...t],bin:"aube",warnings:[]},"resolveAubePmCommand");var rd=Object.defineProperty,I=f((e,t)=>rd(e,"name",{value:t,configurable:!0}),"t");const Gt=I(e=>Co(e)!==null,"hasBinaryOnPath"),id=I(e=>{const t=[["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"],["package-lock.json","npm"],["npm-shrinkwrap.json","npm"],["bun.lock","bun"],["bun.lockb","bun"]];let n=e;for(;;){for(const[a,r]of t)if(u(d(n,a)))return r;const o=eo(n);if(o===n||to(n).root===n)return;n=o}},"findNonAubeLockfile"),Ip=I((e,t)=>{if(t.name!=="aube")return;const n=id(e);if(n!==void 0)return`Resolved installer is aube but the workspace has a ${n} lockfile. Aube reads and writes ${n}'s lockfile format in place, but its byte output may differ subtly — expect a one-time churn diff on the first install, and ongoing drift if your team mixes tools on the same lockfile. To pin the choice across the team, set \`install.backend\` in vis.config; to bypass aube for this run, pass --no-aube.`},"detectLockfileDrift"),Bp=I((e,t)=>{const n=t.backend,o=process.env.VIS_INSTALLER,a=n??o??t.configBackend;if(a&&a!=="auto"){if(a==="aube"&&!Gt("aube"))throw new Error('install.backend is set to "aube" but the `aube` binary is not on PATH. Install it via `npm i -g @endevco/aube`, `mise use -g aube`, or `brew install endevco/tap/aube`.');return{name:a,version:"latest"}}return Gt("aube")?{name:"aube",version:"latest"}:Nn(e)},"resolveInstaller"),Nn=I(e=>{if(!u(e))throw new Error(`Could not detect package manager in ${e}. Directory does not exist.`);const t=Mo(e);return{name:t.name,version:t.version||"latest"}},"detectPm"),z=I((e,t,n)=>{for(const o of e.warnings)n.warn(`warning: ${o}`);return Oo(e.bin,e.args,t)},"runResolved"),ne=I((e,t,n)=>z(e(),t,n),"resolveAndRun"),sd=I((e,t)=>t==="aube"?e:{...e,args:[...e.args,"--prefer-offline"]},"applyPreferOffline"),Vp=I((e,t,n,o,a={})=>{let r=e.name==="aube"?Gc(t):Po(e.name,e.version,t);return a.preferOffline&&(r=sd(r,e.name)),z(r,n,o)},"runInstall"),ld=I((e,t)=>t==="aube"?{...e,args:[...e.args,"--ignore-scripts"]}:{...e,args:[...e.args,"--ignore-scripts"]},"applyIgnoreScripts"),Ap=I((e,t,n,o,a={})=>{let r=e.name==="aube"?Hc(t):jo(e.name,e.version,t);return a.ignoreScripts&&(r=ld(r,e.name)),z(r,n,o)},"runAdd"),Ep=I((e,t,n,o)=>e.name==="aube"?z(qc(t),n,o):ne(()=>Eo(e.name,e.version,t),n,o),"runRemove"),Tp=I((e,t,n,o)=>e.name==="aube"?z(Kc(t),n,o):ne(()=>Ro(e.name,e.version,t),n,o),"runDedupe"),Dp=I((e,t,n,o)=>e.name==="aube"?z(Yc(t),n,o):ne(()=>Do(e.name,e.version,t),n,o),"runWhy");I((e,t,n,o)=>e.name==="aube"?z(Qc(t),n,o):ne(()=>No(e.name,e.version,t),n,o),"runOutdated");const cd=I((e,t)=>{if(e.name==="aube")return nd(t);const n=[],o=[],a=e.name;switch(e.name){case"bun":{const r=wo(e.version);r&&$o(r,"1.3.0")&&o.push(`bun ${e.version} does not support \`bun pm view\` (added in bun 1.3). Upgrade bun, or run \`npm view ${t.package}\` instead.`),n.push("pm","view","--",t.package,...t.fields),t.json&&n.push("--json");break}case"npm":case"pnpm":{n.push("view","--",t.package,...t.fields),t.json&&n.push("--json");break}case"yarn":{if(e.version.startsWith("1.")){n.push("info","--",t.package);const[r,...i]=t.fields;r!==void 0&&(i.length>0&&o.push("yarn v1 only supports querying one field at a time; using the first."),n.push(r)),t.json&&n.push("--json")}else n.push("npm","info","--",t.package),t.fields.length>0&&o.push("yarn berry does not support field arguments to 'npm info'; ignoring."),t.json&&n.push("--json");break}default:{const r=e.name;throw new Error(`Unsupported package manager: ${r}`)}}return{args:n,bin:a,warnings:o}},"resolveInfo"),Mp=I((e,t,n,o)=>z(cd(e,t),n,o),"runInfo"),Np=I((e,t,n,o)=>e.name==="aube"?z(ed(t),n,o):ne(()=>Vo(e.name,e.version,t),n,o),"runLink"),Wp=I((e,t,n,o,a)=>e.name==="aube"?z(td(t,n),o,a):ne(()=>To(e.name,e.version,t,n),o,a),"runUnlink"),Fp=I((e,t,n,o)=>e.name==="aube"?z(Xc(t),n,o):ne(()=>Io(e.name,e.version,t),n,o),"runDlx"),Lp=I((e,t,n,o)=>e.name==="aube"?z(Zc(t),n,o):ne(()=>Bo(e.name,e.version,t),n,o),"runExec"),_p=I((e,t,n,o,a)=>e.name==="aube"?z(ad(t,n),o,a):ne(()=>Ao(e.name,e.version,t,n),o,a),"runPmSubcommand");var dd=Object.defineProperty,_=f((e,t)=>dd(e,"name",{value:t,configurable:!0}),"d$1");const Wn=_((e,t)=>{const n={errors:[],warnings:[]},{security:o}=e;if(!o)return n.warnings.push("No security settings configured. Use defineConfig() from '@visulima/vis/config' to get secure defaults automatically."),n;if((!o.allowBuilds||Object.keys(o.allowBuilds).length===0)&&n.warnings.push(t==="pnpm"?"security.allowBuilds is not configured. pnpm blocks build scripts by default since v10. Run 'vis approve-builds' to review.":"security.allowBuilds is not configured. Consider listing which packages are allowed to run install/postinstall scripts."),o.minimumReleaseAge===0&&n.warnings.push("security.minimumReleaseAge is explicitly set to 0. New packages can be installed immediately after publishing."),o.trustPolicy==="off"&&n.warnings.push("security.trustPolicy is explicitly set to 'off'. Packages whose trust level has decreased will not be blocked."),o.blockExoticSubdeps===!1&&n.warnings.push("security.blockExoticSubdeps is explicitly disabled. Transitive dependencies can pull code from git repos or tarball URLs."),o.strictDepBuilds===!1&&n.warnings.push("security.strictDepBuilds is explicitly disabled. Unapproved build scripts will only produce warnings, not errors."),o.strictDepBuilds&&(!o.allowBuilds||Object.keys(o.allowBuilds).length===0)&&n.errors.push("security.strictDepBuilds is enabled but security.allowBuilds is empty. All dependencies with build scripts will be blocked. Run 'vis approve-builds' to review and add packages."),o.socket?.acceptedRisks){const a=Date.now();for(const[r,i]of Object.entries(o.socket.acceptedRisks)){const s=new Date(i.acceptedAt).getTime();a-s>7776e6&&n.warnings.push(`Accepted risk for "${r}" is over 90 days old (accepted ${i.acceptedAt}). Consider re-evaluating with 'vis audit'.`)}}return n},"checkSecurityConfig"),pd=_((e,t)=>{if(ue&&!process.env.VIS_SECURITY_WARNINGS)return;const n=Wn(e,t);for(const o of n.errors)k.error(o);n.warnings.length>0&&k.warn(`${n.warnings.length} security recommendation${n.warnings.length===1?"":"s"} found. Run 'vis check --security-config' for details.`)},"emitSecurityWarnings"),zp=_((e,t)=>{const n=Wn(e,t),{security:o}=e;if(o){if(k.info("Active security settings:"),k.info(`  minimumReleaseAge:      ${o.minimumReleaseAge??"not set"} minutes`),k.info(`  trustPolicy:            ${o.trustPolicy??"not set"}`),k.info(`  trustPolicyIgnoreAfter: ${o.trustPolicyIgnoreAfter??"not set"} minutes`),k.info(`  blockExoticSubdeps:     ${o.blockExoticSubdeps??!1}`),k.info(`  strictDepBuilds:        ${o.strictDepBuilds??!1}`),k.info(`  allowBuilds:            ${o.allowBuilds?`${Object.keys(o.allowBuilds).length} entries`:"not configured"}`),k.info(""),k.info("Socket.dev integration:"),k.info(`  socket.enabled:         ${o.socket?.enabled??!1}`),k.info(`  socket.apiToken:        ${o.socket?.apiToken||process.env.VIS_SOCKET_TOKEN?"configured":"using public token"}`),k.info(`  socket.minimumScore:    ${o.socket?.minimumScore??"default (0.4)"}`),k.info(`  socket.cacheTtlMs:      ${o.socket?.cacheTtlMs??"default (1 hour)"}`),k.info(`  socket.timeoutMs:       ${o.socket?.timeoutMs??"default (15s)"}`),o.socket?.acceptedRisks){const a=Object.entries(o.socket.acceptedRisks);k.info(`  socket.acceptedRisks:   ${String(a.length)} entr${a.length===1?"y":"ies"}`);for(const[r,i]of a)k.info(`    ${r}: ${i.reason} (accepted ${i.acceptedAt.slice(0,10)})`)}else k.info("  socket.acceptedRisks:   none");k.info("")}if(n.errors.length===0&&n.warnings.length===0){k.info("All recommended security settings are configured.");return}for(const a of n.errors)k.error(a);for(const a of n.warnings)k.warn(a);k.notice(""),k.notice("Secure defaults are applied by defineConfig(). You only need to add allowBuilds:"),k.notice(""),k.notice("  import { defineConfig } from '@visulima/vis/config';"),k.notice(""),k.notice("  export default defineConfig({"),k.notice("    security: {"),k.notice("      allowBuilds: {"),k.notice("        esbuild: true,"),k.notice("        '@prisma/client': true,"),k.notice("      },"),k.notice("    },"),k.notice("  });")},"printSecurityReport"),Up=_(e=>{const{security:t}=e;if(!t)return[];const n=[];return t.minimumReleaseAge!==void 0&&n.push(`minimumReleaseAge: ${t.minimumReleaseAge}`),t.trustPolicy&&t.trustPolicy!=="off"&&n.push(`trustPolicy: ${t.trustPolicy}`),t.blockExoticSubdeps&&n.push("blockExoticSubdeps: true"),t.allowBuilds&&n.push(`allowBuilds: ${Object.keys(t.allowBuilds).length} entries`),t.strictDepBuilds&&n.push("strictDepBuilds: true"),t.trustPolicyIgnoreAfter!==void 0&&n.push(`trustPolicyIgnoreAfter: ${t.trustPolicyIgnoreAfter}`),n},"previewPnpmSync"),Jp=_((e,t)=>{const n=d(e,"node_modules");if(!u(n))return[];const o=[],a=_((r,i="")=>{let s;try{s=ae(r)}catch{return}for(const l of s){const c=d(r,l);if(l.startsWith("@")){a(c,`${l}/`);continue}if(l.startsWith("."))continue;const p=i+l,h=d(c,"package.json");try{if(!we(c).isDirectory()||!u(h))continue;const v=U(h).scripts??{};if(!v.preinstall&&!v.install&&!v.postinstall&&!v.prepare)continue;if(!Object.entries(t).some(([$,P])=>P?$===p?!0:$.endsWith("*")?p.startsWith($.slice(0,-1)):!1:!1)){const $=["preinstall","install","postinstall","prepare"].filter(P=>v[P]);o.push(`${p} (${$.join(", ")})`)}}catch{}}},"scanDir");return a(n),o},"scanUnapprovedBuildScripts"),Fn=_(e=>u(d(e,".yarnrc.yml")),"isYarnBerry"),ud=_((e,t,n)=>{const o={extraArgs:[],postInstallPackages:[],scriptsBlockedByDefault:!1,warnings:[]},a=n.security?.allowBuilds??{},r=Object.keys(a).length>0;switch(e){case"bun":{if(o.scriptsBlockedByDefault=!0,r){const i=d(t,"package.json");try{(u(i)?U(i):{}).trustedDependencies?.length||o.warnings.push("vis security.allowBuilds is configured but trustedDependencies is empty. Run 'vis approve-builds --sync-native'.")}catch{}}break}case"npm":{o.scriptsBlockedByDefault=!1;const i=d(t,".npmrc"),s=u(i)&&/^\s*ignore-scripts\s*=\s*true\s*$/m.test(j(i));if(!s&&r?(o.warnings.push("npm does not block lifecycle scripts. vis will add --ignore-scripts automatically."),o.extraArgs.push("--ignore-scripts")):!s&&!r&&o.warnings.push("npm does not block lifecycle scripts. Add 'ignore-scripts=true' to .npmrc and configure security.allowBuilds."),r)for(const[l,c]of Object.entries(a))c&&o.postInstallPackages.push(l);break}case"pnpm":{o.scriptsBlockedByDefault=!0,r||o.warnings.push("pnpm blocks build scripts by default. Run 'vis approve-builds' to review packages that need scripts.");break}case"yarn":{if(o.scriptsBlockedByDefault=!1,Fn(t)){const i=j(d(t,".yarnrc.yml"));/^\s*enableScripts\s*:\s*false\s*$/m.test(i)?o.scriptsBlockedByDefault=!0:o.warnings.push("yarn berry supports enableScripts. Add 'enableScripts: false' to .yarnrc.yml.")}else if(o.warnings.push("yarn classic does not support blocking lifecycle scripts. Consider upgrading to yarn berry."),r){o.extraArgs.push("--ignore-scripts");for(const[i,s]of Object.entries(a))s&&o.postInstallPackages.push(i)}break}}return o},"enforceScriptSecurity"),Gp=_((e,t,n)=>{const o=[],a=Object.entries(n).filter(([,r])=>r).map(([r])=>r);switch(e){case"bun":{const r=d(t,"package.json");if(u(r))try{const i=U(r);i.trustedDependencies=a,A(r,`${JSON.stringify(i,null,2)}
+`),o.push(`Updated package.json trustedDependencies with ${a.length} packages`)}catch(i){o.push(`Failed to update package.json: ${i instanceof Error?i.message:String(i)}`)}break}case"npm":{const r=d(t,".npmrc");let i=u(r)?j(r):"";/^\s*ignore-scripts\s*=\s*true\s*$/m.test(i)?o.push(".npmrc already has ignore-scripts=true"):(i=`${i.trimEnd()}
+ignore-scripts=true
+`,A(r,i),o.push("Added ignore-scripts=true to .npmrc"));break}case"pnpm":{const r=d(t,"pnpm-workspace.yaml");if(!u(r)){o.push("pnpm-workspace.yaml not found. Cannot sync allowBuilds.");break}let i={};try{i=nn(r)?.allowBuilds??{}}catch{}const s={...i,...n},l=Object.keys(n).filter(R=>i[R]!==n[R]).length;if(l===0){o.push(`All ${String(Object.keys(n).length)} allowBuilds entries already present in pnpm-workspace.yaml.`);break}const c=Object.keys(s).sort(),p=_(R=>R.startsWith("@")||R.includes("/")||/[:#\s]/.test(R),"needsQuote"),h=_(R=>p(R)?`'${R.replaceAll("'","''")}'`:R,"renderKey"),v=`allowBuilds:
+${c.map(R=>`  ${h(R)}: ${String(s[R])}`).join(`
+`)}
+`;let $=j(r);$.endsWith(`
+`)||($+=`
+`);const P=/^allowBuilds:[ \t]*\n(?:[ \t]{2}[^\n]*\n)*/m;$=P.test($)?$.replace(P,v):`${$.trimEnd()}
+
+${v}`,A(r,$),o.push(`Updated pnpm-workspace.yaml allowBuilds (${String(l)} new, ${String(c.length)} total)`);break}case"yarn":{if(Fn(t)){const r=d(t,".yarnrc.yml");let i=j(r);const s=/^\s*enableScripts\s*:/m.test(i),l=/^\s*enableScripts\s*:\s*false\s*$/m.test(i);s?l?o.push(".yarnrc.yml already has enableScripts: false"):(i=i.replace(/^\s*enableScripts\s*:.+$/m,"enableScripts: false"),A(r,i),o.push("Changed enableScripts to false in .yarnrc.yml")):(i=`${i.trimEnd()}
+enableScripts: false
+`,A(r,i),o.push("Added enableScripts: false to .yarnrc.yml"))}else{const r=d(t,".npmrc");let i=u(r)?j(r):"";/^\s*ignore-scripts\s*=\s*true\s*$/m.test(i)?o.push(".npmrc already has ignore-scripts=true"):(i=`${i.trimEnd()}
+ignore-scripts=true
+`,A(r,i),o.push("Added ignore-scripts=true to .npmrc (yarn classic lacks enableScripts)"))}break}}return o},"syncAllowBuildsToNativeConfig"),fd=_((e,t)=>{const n=d(e,"node_modules"),o=[];for(const a of t){if(!a.endsWith("*")){o.push(a);continue}const r=a.slice(0,-1);try{if(r.startsWith("@")&&r.endsWith("/")){const i=d(n,r.slice(0,-1));for(const s of ae(i))!s.startsWith(".")&&we(d(i,s)).isDirectory()&&o.push(`${r.slice(0,-1)}/${s}`)}else for(const i of ae(n))i.startsWith(r)&&we(d(n,i)).isDirectory()&&o.push(i)}catch{}}return o},"expandPatterns"),md=_((e,t)=>{if(t.length===0)return;const n=fd(e,t);if(n.length===0)return;const o=d(e,"node_modules");let a=!1;for(const r of n){if(r.includes("..")||r.startsWith("/")||r.startsWith("\\")){k.warn(`Skipping invalid package name: ${r}`);continue}const i=(r.match(/\//g)||[]).length;if(i>1||i===1&&!r.startsWith("@")){k.warn(`Skipping invalid package name: ${r}`);continue}const s=d(o,r),l=d(s,"package.json");if(u(l))try{const c=U(l).scripts??{};for(const p of["preinstall","install","postinstall"])if(c[p]){k.info(`Running ${p} for ${r}...`);try{lo(c[p],{cwd:s,env:{...process.env},stdio:"inherit"})}catch{k.error(`${p} script failed for ${r}`),a=!0}}}catch{}}a&&(process.exitCode=1)},"runApprovedScripts");var gd=Object.defineProperty,V=f((e,t)=>gd(e,"name",{value:t,configurable:!0}),"o$1");const hd="https://api.socket.dev/v0/purl?alerts=true",Ee=V(()=>d(Le(),".vis","cache","socket-security"),"getCacheDirectory"),yd=3600*1e3,vd=.4,Ht=100,kd=V(e=>typeof e=="object"&&e!=null&&"id"in e&&"type"in e&&"name"in e&&"version"in e&&"alerts"in e&&"score"in e&&e.type==="npm","isPackageReportData"),bd=V(()=>{Ve(Ee())},"ensureCacheDirectory"),Ln=V((e,t)=>`${encodeURIComponent(e)}@${encodeURIComponent(t)}`,"buildCacheKey"),wd=V((e,t)=>{const n=Ln(e,t),o=d(Ee(),`${n}.json`);try{const a=U(o);if(Date.now()-a.createdAt>a.ttlMs){lt(o,{force:!0});return}return a.report}catch{return}},"getCachedReport"),$d=V((e,t,n,o)=>{const a=Ln(e,t),r={createdAt:Date.now(),report:n,ttlMs:o};E(d(Ee(),`${a}.json`),JSON.stringify(r),"utf8")},"setCachedReport"),Sd=V(e=>{const t=[e.license,e.maintenance,e.quality,e.supplyChain,e.vulnerability];return Number((t.reduce((n,o)=>n+o,0)/t.length).toFixed(2))},"calculateOverallScore"),xd=V(async(e,t={})=>{const{apiToken:n,cacheTtlMs:o=yd,timeoutMs:a=15e3}=t,r=new Map;if(e.length===0||!n)return r;const i=[];for(const c of e){const p=wd(c.name,c.version);p?r.set(`${c.name}@${c.version}`,p):i.push(c)}if(i.length===0)return r;const s=`Basic ${Buffer.from(`${n}:`).toString("base64")}`;bd();const l=[];for(let c=0;c<i.length;c+=Ht)l.push(i.slice(c,c+Ht));for(const c of l){const p=c.map($=>({purl:`pkg:npm/${$.name}@${$.version}`})),h=new AbortController,v=setTimeout(()=>{h.abort()},a);try{const $=await fetch(hd,{body:JSON.stringify({components:p}),headers:{Authorization:s,"Content-Type":"application/json","User-Agent":"@visulima/vis"},method:"POST",signal:h.signal});if(!$.ok)continue;const P=await $.text();jd(P,c,r,o)}catch{}finally{clearTimeout(v)}}return r},"fetchSocketReports"),jd=V((e,t,n,o)=>{const a=new Map;for(const i of t)a.set(`${i.name}@${i.version}`,i);const r=e.split(`}
+`);for(const i of r){const s=i.trim();if(s)try{const l=JSON.parse(s.endsWith("}")?s:`${s}}`),c=`${l.namespace?`${l.namespace}/`:""}${l.name}`,p=`${c}@${l.version}`;if(!a.has(p))continue;const h=l.score.overall??Sd(l.score),v={alerts:l.alerts,author:l.author,id:l.id,license:l.license,name:l.name,score:{...l.score,overall:h},size:l.size,type:"npm",version:l.version};l.namespace&&(v.namespace=l.namespace),kd(v)&&(n.set(p,v),$d(c,l.version,v,o))}catch{}}},"parseNdjsonResponse"),_n=V(e=>e.namespace?`${e.namespace}/${e.name}`:e.name,"getFullPackageName"),Cd=V(e=>e>=.8?"excellent":e>=.6?"good":e>=.4?"fair":e>=.2?"poor":"critical","scoreLabel"),Hp=V(e=>e>=.6?"green":e>=.4?"yellow":"red","scoreColor"),qp=V(e=>{const t=_n(e),n=`score: ${String(Math.round(e.score.overall*100))}%`,o=e.alerts.length,a=o>0?`${String(o)} alert${o===1?"":"s"}`:"no alerts";return`${t}@${e.version} (${n}, ${a})`},"formatReportSummary");V(e=>{const t=[`${_n(e)}@${e.version}`,`  License: ${e.license||"unknown"}`];if(t.push(`  Overall Score: ${String(Math.round(e.score.overall*100))}% (${Cd(e.score.overall)})`),t.push(`    Supply Chain: ${String(Math.round(e.score.supplyChain*100))}%`),t.push(`    Quality:      ${String(Math.round(e.score.quality*100))}%`),t.push(`    Maintenance:  ${String(Math.round(e.score.maintenance*100))}%`),t.push(`    Vulnerability: ${String(Math.round(e.score.vulnerability*100))}%`),t.push(`    License:      ${String(Math.round(e.score.license*100))}%`),e.alerts.length>0){t.push(`  Alerts (${String(e.alerts.length)}):`);for(const n of e.alerts){const o=n.props?.cveId?` (${n.props.cveId})`:"";t.push(`    [${n.severity.toUpperCase()}] ${n.type}${o} — ${n.category}`)}}return t.join(`
+`)},"formatReportDetailed");const Od=V(e=>{if(e.size===0)return"";let t=0,n=0,o=0,a=0,r=0,i=0;for(const l of e.values()){for(const c of l.alerts)switch(t++,c.severity){case"critical":{n++;break}case"high":{o++;break}case"medium":{a++;break}default:r++}l.score.overall<vd&&i++}const s=[];if(s.push(`Socket.dev: scanned ${String(e.size)} package${e.size===1?"":"s"}`),t>0){const l=[];n>0&&l.push(`${String(n)} critical`),o>0&&l.push(`${String(o)} high`),a>0&&l.push(`${String(a)} medium`),r>0&&l.push(`${String(r)} low`),s.push(`  Alerts: ${String(t)} total (${l.join(", ")})`)}else s.push("  No security alerts found.");return i>0&&s.push(`  ${String(i)} package${i===1?"":"s"} with low security score (<40%)`),s.join(`
+`)},"formatSecurityOverview"),Kp=V(()=>{const e=Ee();if(!u(e))return 0;const t=ae(e).filter(n=>n.endsWith(".json"));for(const n of t)lt(d(e,n),{force:!0});return t.length},"clearSocketCache"),Yp=V(()=>{const e=Ee();if(!u(e))return{entries:0,newestEntry:void 0,oldestEntry:void 0,totalSizeBytes:0};const t=ae(e).filter(r=>r.endsWith(".json"));let n=0,o,a;for(const r of t){const i=we(d(e,r));n+=i.size;const{mtimeMs:s}=i;(o===void 0||s<o)&&(o=s),(a===void 0||s>a)&&(a=s)}return{entries:t.length,newestEntry:a,oldestEntry:o,totalSizeBytes:n}},"getSocketCacheStats"),Pd=V(e=>e?.enabled?{apiToken:e.apiToken??process.env.VIS_SOCKET_TOKEN,cacheTtlMs:e.cacheTtlMs,minimumScore:e.minimumScore,timeoutMs:e.timeoutMs}:void 0,"buildSocketOptions"),Qp=V((e,t,n)=>{if(!n)return;const o=`${e}@${t}`;if(n[o])return n[o];if(n[e])return n[e];for(const[a,r]of Object.entries(n))if(a.endsWith("*")&&e.startsWith(a.slice(0,-1)))return r},"findAcceptedRisk"),Xp=V((e,t,n,o)=>["    // Add to security.socket.acceptedRisks in vis.config.ts:",`    ${`"${e}"`}: {`,`      reason: "${o}",`,`      acceptedAt: "${new Date().toISOString()}",`,`      acceptedScore: ${String(n)},`,"    },"].join(`
+`),"formatAcceptedRiskSnippet");var Rd=Object.defineProperty,rt=f((e,t)=>Rd(e,"name",{value:t,configurable:!0}),"f$1");const qt=new Set(["add","install","update"]),Id=new Set(["add","dedupe","install","remove","update"]),Bd=/(\d+\.\d+\.\d+)/,Vd=rt(e=>{const t=d(e,"package.json");if(!u(t))return[];const n=[];try{const o=U(t),a={...o.dependencies,...o.devDependencies};for(const[r,i]of Object.entries(a)){const s=d(e,"node_modules",r,"package.json");if(u(s))try{const c=U(s);if(c.version){n.push({name:r,version:c.version});continue}}catch{}const l=Bd.exec(i);l?.[1]&&n.push({name:r,version:l[1]})}}catch{}return n},"resolveInstalledPackages"),Ad={afterCommand:rt(async e=>{if(process.exitCode&&process.exitCode!==0)return;const t=e.scriptEnforcement;t?.postInstallPackages.length&&e.workspaceRoot&&md(e.workspaceRoot,t.postInstallPackages);const n=process.argv[2]??"",o=Pd(e.visConfig?.security?.socket);if(qt.has(n)&&o&&e.workspaceRoot)try{const a=Vd(e.workspaceRoot);if(a.length>0){const r=await xd(a,o);if(r.size>0){const i=Od(r);if(i){k.info(""),k.info(i);let s=0;for(const l of r.values())for(const c of l.alerts)(c.severity==="critical"||c.severity==="high")&&s++;s>0&&k.warn(`${String(s)} critical/high severity alert${s===1?"":"s"} detected. Run 'vis check --security' for details.`)}}}}catch{}},"afterCommand"),beforeCommand:rt(async e=>{const t=process.argv[2]??"";if(Id.has(t)&&e.visConfig&&e.workspaceRoot){const n=Nn(e.workspaceRoot);if(pd(e.visConfig,n.name),qt.has(t)){const o=ud(n.name,e.workspaceRoot,e.visConfig);for(const a of o.warnings)e.logger.warn(`security: ${a}`);e.scriptEnforcement=o}}},"beforeCommand"),name:"security-enforcement"};var Ed=Object.defineProperty,Td=f((e,t)=>Ed(e,"name",{value:t,configurable:!0}),"n$1");const Dd=Td(()=>process.platform==="win32"?!!process.env.WT_SESSION||process.env.TERM_PROGRAM==="vscode"||process.env.TERM==="xterm-256color":process.env.TERM!=="linux","isUnicodeSupported"),Oe=Dd(),Md={arrow:Oe?"→":"->",dash:Oe?"—":"-",failure:Oe?"✗":"x",success:Oe?"✓":"v",warning:Oe?"⚠":"!"};var Nd=Object.defineProperty,Se=f((e,t)=>Nd(e,"name",{value:t,configurable:!0}),"s");const zn=d(Le(),".vis"),it=d(zn,".upgrade-check.json"),Wd=1440*60*1e3,Fd=1440*60*1e3,Ld=500,_d=new Set(["--help","--version","-h","-V","help","implode","self-update","upgrade"]),zd=Se(()=>{try{if(u(it))return U(it)}catch{}},"readCache"),Un=Se(e=>{try{Ve(zn),A(it,JSON.stringify(e))}catch{}},"writeCache"),Ud=Se(async e=>{try{const t=new AbortController,n=setTimeout(()=>{t.abort()},Ld),o=await fetch(`https://registry.npmjs.org/${e}/latest`,{headers:{accept:"application/json"},signal:t.signal});return clearTimeout(n),o.ok?(await o.json()).version:void 0}catch{return}},"fetchLatestVersion"),Kt=Se((e,t)=>{let n=!1;try{n=So(t.latestVersion,e,{loose:!0})}catch{return}if(!n)return;const o=Date.now();o-t.lastNoticeAt<Fd||(process.stderr.write(`
+${De("vis update available:")} ${Re(e)} ${De(Md.arrow)} ${go(oe(t.latestVersion))}${De(", run")} ${pe("vis upgrade")}
+`),t.lastNoticeAt=o,Un(t))},"showUpgradeNotice"),Jd=Se(e=>{if(ue||process.env.VIS_CLI_TEST||process.env.VIS_NO_UPDATE_CHECK==="1"||!process.stderr.isTTY||_d.has(e))return!1;const t=new Set(process.argv.slice(2));return!(t.has("--silent")||t.has("-s")||t.has("--json"))},"shouldCheck"),Gd=Se((e,t)=>{if(!Jd(t))return;const n=zd(),o=Date.now();if(n&&o-n.lastQueryAt<Wd)return()=>{Kt(e,n)};let a=n;return Ud("@visulima/vis").then(r=>{r&&(a={lastNoticeAt:n?.lastNoticeAt??0,lastQueryAt:o,latestVersion:r},Un(a))}).catch(()=>{}),()=>{a&&Kt(e,a)}},"startUpgradeCheck");var Hd=Object.defineProperty,Yt=f((e,t)=>Hd(e,"name",{value:t,configurable:!0}),"n");Xn();Ac();try{const e=Xt(process.cwd()).path;process.env.VIS_MONOREPO_ROOT=e;const t=U(d(e,"package.json"));t.name&&Ec(t.name)}catch{}const qd=Gd(Ne.version,process.argv[2]??"");Qn();const y=Kn("vis",{packageName:"vis",packageVersion:Ne.version}),Kd=process.argv.includes("--debug")||!!process.env.DEBUG;y.addPlugin(Zn({detailed:Kd,exitOnError:!1}));y.addGlobalOption({description:"Override workspace root directory",name:"cwd",type:String});y.addPlugin(Mc);y.addPlugin(Ad);y.addCommand(ql);y.addCommand(ba);y.addCommand(Ya);y.addCommand(_o);y.addCommand(qo);y.addCommand(gc);y.addCommand(lr);y.addCommand(xc);y.addCommand(ya);y.addCommand(ta);y.addCommand(oc);y.addCommand(ic);y.addCommand(cc);y.addCommand(uc);y.addCommand(Na);y.addCommand(Cr);y.addCommand(vc);y.addCommand(Yn);y.addCommand(br);y.addCommand(Jo);y.addCommand(Jl);y.addCommand(Ra);y.addCommand(Ic);y.addCommand(mr);y.addCommand(Sr);y.addCommand(wc);y.addCommand(Ta);y.addCommand(Ua);y.addCommand(_l);y.addCommand(yr);y.addCommand(Sa);y.addCommand(Ca);y.addCommand(Ha);y.addCommand(Va);y.addCommand(Oc);y.addCommand(pr);y.addCommand(aa);y.addCommand(sa);y.addCommand(La);y.addCommand(Wl);y.addCommand(Ql);y.addCommand(ec);for(const e of rr)y.addCommand(e);for(const e of Nr)y.addCommand(e);for(const e of ma)y.addCommand(e);for(const e of on)y.addCommand(e);y.addPlugin(Uc(qd));if(zr(process.argv.slice(2))){const{loadVisConfig:e}=await import("./config.js"),t=process.env.VIS_MONOREPO_ROOT||process.cwd();let n;try{n=await e(t)}catch{n=void 0}try{await Dl({logger:{info:Yt(o=>{process.stdout.write(`${o}
+`)},"info"),warn:Yt(o=>{process.stderr.write(`${o}
+`)},"warn")},visConfig:n,workspaceRoot:t})}catch(o){process.stderr.write(`${o.message}
+`),process.exitCode=1}}else(async()=>{try{await y.run({shouldExitProcess:!1})}catch{process.exitCode=process.exitCode||1}})();export{vn as $,zt as A,Hp as B,Lt as C,Sn as D,Mt as E,Bt as F,Ip as G,Kp as H,Jp as I,Bp as J,At as K,_t as L,Ot as M,qp as N,zp as O,ln as P,Xp as Q,Cd as R,_n as S,Gp as T,xd as U,Pd as V,Up as W,vp as X,Ap as Y,Ep as Z,kp as _,Yp as a,wp as a0,$p as a1,bp as a2,wi as a3,cn as a4,ji as a5,Sp as a6,jp as a7,Cp as a8,Pp as a9,Ei as aa,xp as ab,yp as ac,vd as b,Nn as c,ue as d,Mp as e,wn as f,Vp as g,Wp as h,Dp as i,Md as j,Rp as k,Lp as l,Ne as m,Tp as n,Fp as o,k as p,Qp as q,Xi as r,Op as s,Np as t,_p as u,H as v,It as w,Al as x,Dt as y,Ft as z};