@visulima/vis 1.0.0-alpha.10 → 1.0.0-alpha.11

package/dist/packem_chunks/handler4.js

@@ -1,4 +1,90 @@
-var x=Object.defineProperty;var h=(n,t)=>x(n,"name",{value:t,configurable:!0});import{findPackageManagerSync as N}from"@visulima/package";import{z as P,e as U,Z as j}from"../packem_shared/ai-analysis-CGuy7dfE.js";import{V as z,U as M}from"./bin.js";import{a as O,f as T,b,n as S,_ as V,m as q}from"../packem_shared/catalog-BVPerCwG.js";var A=Object.defineProperty,F=h((n,t)=>A(n,"name",{value:t,configurable:!0}),"x");const J=/^[\^~>=<]+/,G=F(async({argument:n,logger:t,options:f,visConfig:u,workspaceRoot:g})=>{if(!g)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const m=n,e=m[0];if(!e)throw new Error("Package name is required. Usage: vis analyze <package> [version]");const p=m[1],{packageManager:E}=N(g);let a,w="default";const C=O(g,E);for(const[o,s]of C){const i=s.get(e);if(i){a=i,w=o;break}}if(!a)throw new Error(`Package "${e}" not found in any catalog or package.json. Make sure it exists in your workspace dependencies.`);let r;if(p)r=p;else{t.info(`Fetching latest version for ${e}...
-`);const o=await T(e);if(!o.latest)throw new Error(`Could not determine latest version for "${e}".`);r=o.latest}const d=b(a),k=b(r);if(!d||!k)throw new Error(`Could not parse versions: current="${a}", target="${r}".`);const v=S(d,k);if(v==="none"){t.info(`${e} is already at ${r}. Nothing to analyze.`);return}const R=V(a),l={catalogName:w,currentRange:a,newRange:`${R}${r}`,packageName:e,targetVersion:r,updateType:v},y=P(f.aiType??"impact");if(y==="security"||f.security){t.info(`Checking for known vulnerabilities...
-`);const o=a.replace(J,""),s=(await q([{name:e,version:o}])).get(e);s&&s.length>0&&(l.vulnerabilities=s);const i=z(u?.security?.socket);if(i){const c=(await M([{name:e,version:o}],i)).get(`${e}@${o}`);c&&(l.socketReport={alerts:c.alerts,license:c.license,score:c.score})}}const $=await U([l],t,u?.ai,y);(f.format??"table")==="json"?process.stdout.write(`${JSON.stringify($,void 0,2)}
-`):t.info(j($))},"execute");export{G as default};
+import { createRequire as __cjs_createRequire } from "node:module";
+
+const __cjs_require = __cjs_createRequire(import.meta.url);
+
+const __cjs_getProcess = typeof globalThis !== "undefined" && typeof globalThis.process !== "undefined" ? globalThis.process : process;
+
+const __cjs_getBuiltinModule = (module) => {
+    // Check if we're in Node.js and version supports getBuiltinModule
+    if (typeof __cjs_getProcess !== "undefined" && __cjs_getProcess.versions && __cjs_getProcess.versions.node) {
+        const [major, minor] = __cjs_getProcess.versions.node.split(".").map(Number);
+        // Node.js 20.16.0+ and 22.3.0+
+        if (major > 22 || (major === 22 && minor >= 3) || (major === 20 && minor >= 16)) {
+            return __cjs_getProcess.getBuiltinModule(module);
+        }
+    }
+    // Fallback to createRequire
+    return __cjs_require(module);
+};
+
+const {
+  spawnSync
+} = __cjs_getBuiltinModule("node:child_process");
+import { c as detectPm, p as pail, s as scanUnapprovedBuildScripts, e as syncAllowBuildsToNativeConfig } from './bin.js';
+
+const execute = async ({ options, visConfig, workspaceRoot: wsRoot }) => {
+  const cwd = wsRoot ?? process.cwd();
+  const pm = detectPm(cwd);
+  if (pm.name === "pnpm" && !options.scan) {
+    pail.info("Delegating to pnpm approve-builds...");
+    const pnpmArgs = ["approve-builds"];
+    if (options.all) {
+      pnpmArgs.push("--all");
+    }
+    const result = spawnSync("pnpm", pnpmArgs, { cwd, stdio: "inherit" });
+    if (result.error) {
+      throw new Error(`Failed to run pnpm approve-builds: ${result.error.message}`);
+    }
+    if (result.status !== 0 && result.status !== null) {
+      pail.error(`pnpm approve-builds exited with code ${result.status}`);
+      process.exitCode = result.status;
+    }
+    if (!options.syncNative) {
+      pail.notice("");
+      pail.notice("Tip: vis.config.ts security.allowBuilds may now be out of sync with pnpm-workspace.yaml.");
+      pail.notice("Run 'vis check --security-config' to compare, or copy the new entries into vis.config.ts.");
+      return;
+    }
+  } else {
+    const allowBuilds = visConfig?.security?.allowBuilds ?? {};
+    const unapproved = scanUnapprovedBuildScripts(cwd, allowBuilds);
+    if (unapproved.length === 0) {
+      pail.success("No unapproved build scripts found.");
+    } else {
+      pail.warn(`Found ${unapproved.length} package${unapproved.length === 1 ? "" : "s"} with unapproved build scripts:
+`);
+      for (const pkg of unapproved) {
+        pail.info(`  ${pkg}`);
+      }
+      pail.notice("");
+      pail.notice("To approve these packages, add them to vis.config.ts:");
+      pail.notice("");
+      pail.notice("  security: {");
+      pail.notice("    allowBuilds: {");
+      for (const pkg of unapproved) {
+        const name = pkg.split(" (")[0];
+        pail.notice(`      "${name}": true,`);
+      }
+      pail.notice("    },");
+      pail.notice("  },");
+      if (pm.name === "pnpm") {
+        pail.notice("");
+        pail.notice("Or run 'pnpm approve-builds' to update pnpm-workspace.yaml directly.");
+      }
+    }
+  }
+  if (options.syncNative) {
+    const allowBuilds = visConfig?.security?.allowBuilds ?? {};
+    if (Object.keys(allowBuilds).length === 0) {
+      pail.warn("No security.allowBuilds configured in vis.config.ts. Nothing to sync.");
+    } else {
+      const actions = syncAllowBuildsToNativeConfig(pm.name, cwd, allowBuilds);
+      pail.info("");
+      for (const action of actions) {
+        pail.success(action);
+      }
+    }
+  }
+};
+
+export { execute as default };