@visulima/vis 1.0.0-alpha.10 → 1.0.0-alpha.11

package/dist/packem_chunks/handler41.js

@@ -1,10 +1,1088 @@
-var Tt=Object.defineProperty;var N=(e,t)=>Tt(e,"name",{value:t,configurable:!0});import{createRequire as At}from"node:module";import{green as ke,yellow as Fe,dim as S,red as Re,bold as se,cyan as Te}from"@visulima/colorize";import{findPackageManagerSync as st}from"@visulima/package";import{join as le,resolve as Pt}from"@visulima/path";import{Box as h,Text as n,ScrollView as Dt,Spinner as lt,Tabs as Ot,Tab as Nt,ScrollBar as Mt,useApp as Ft,useWindowSize as zt,useInput as jt,Dialog as Et,render as Bt}from"@visulima/tui";import{B as Ke,M as Je,b as Be,c as at,V as ct,U as Lt,p as u,j,d as _t,g as Vt}from"./bin.js";import Ut,{useSyncExternalStore as Ht,useState as xe,useEffect as Ee,useRef as qe,useMemo as Pe,useCallback as Xe}from"react";import{X as qt}from"../packem_shared/xxh3-DrAUNq4n.js";import{isAccessibleSync as Xt,readJsonSync as Wt,ensureDirSync as Qt}from"@visulima/fs";import{findVisConfigFile as Zt}from"./config.js";import{x as Qe,A as dt,a as ei,F as ti,T as ii,B as ri,b as ni,I as oi}from"./handler39.js";import{c as si}from"../packem_shared/runtime-check-CGHal8SO.js";import{f as li,l as ai,s as ci}from"../packem_shared/dependency-scan-Du0tBu64.js";import{jsxs as a,jsx as r,Fragment as di}from"react/jsx-runtime";import{u as ui}from"../packem_shared/use-measured-height-DjYgUOKk.js";import{o as hi,a as ht,w as pi,m as gi}from"../packem_shared/catalog-BVPerCwG.js";const It=At(import.meta.url),Ce=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_e=N(e=>{if(typeof Ce<"u"&&Ce.versions&&Ce.versions.node){const[t,i]=Ce.versions.node.split(".").map(Number);if(t>22||t===22&&i>=3||t===20&&i>=16)return Ce.getBuiltinModule(e)}return It(e)},"__cjs_getBuiltinModule"),{statSync:Gt,rmSync:We,writeFileSync:Yt,readFileSync:Kt}=_e("node:fs"),{homedir:Jt}=_e("node:os"),{spawnSync:ut}=_e("node:child_process");var fi=Object.defineProperty,Ae=N((e,t)=>fi(e,"name",{value:t,configurable:!0}),"r$2");const Le=Ae(()=>le(Jt(),".vis","cache","doctor"),"getCacheDirectory"),mi=1800*1e3,Ze=Ae(e=>{if(!e)return"";try{return String(Gt(e).mtimeMs)}catch{return""}},"safeMtime"),yi=2,ki=Ae(e=>{const t=JSON.stringify({configMtime:Ze(e.configPath),lockfileMtime:Ze(e.lockfilePath),schema:yi,sections:[...e.sections].toSorted(),socketEnabled:e.socketEnabled,workspaceRoot:e.workspaceRoot});return qt(Buffer.from(t))},"buildDoctorCacheKey"),wi=Ae(e=>{const t=le(Le(),`${e}.json`);if(Xt(t))try{const i=Wt(t);if(Date.now()-i.createdAt>i.ttlMs){We(t,{force:!0});return}return{...i.results,sections:new Set(i.results.sections)}}catch{We(t,{force:!0});return}},"readDoctorCache"),vi=Ae((e,t,i=mi)=>{Qt(Le());const s={createdAt:Date.now(),results:{...t,sections:[...t.sections]},ttlMs:i};Yt(le(Le(),`${e}.json`),JSON.stringify(s,void 0,2),"utf8")},"writeDoctorCache");var bi=Object.defineProperty,_=N((e,t)=>bi(e,"name",{value:t,configurable:!0}),"i$2");const Oe="orphans",Si=_(()=>{if(process.platform!=="linux")return{id:"inotify",message:"inotify capacity check skipped (not Linux).",status:"skip"};let e;try{const t=Kt("/proc/sys/fs/inotify/max_user_watches","utf8").trim(),i=Number.parseInt(t,10);Number.isFinite(i)&&i>0&&(e=i)}catch{return{id:"inotify",message:"Could not read /proc/sys/fs/inotify/max_user_watches.",status:"warn"}}return e===void 0?{id:"inotify",message:"inotify max_user_watches reported a non-numeric value.",status:"warn"}:e<65536?{detail:{maxWatches:e},id:"inotify",message:`inotify watcher limit is ${String(e)} — large monorepos can exhaust this. Bump now with \`sudo sysctl fs.inotify.max_user_watches=524288\` and persist via \`/etc/sysctl.d/99-vis.conf\` so it survives reboot.`,status:"warn"}:{detail:{maxWatches:e},id:"inotify",message:`inotify capacity OK (${String(e)} watches).`,status:"ok"}},"checkInotifyCapacity"),$i=_(()=>{const e=!!process.stdin.isTTY,t=!!process.stdout.isTTY;return e&&t?{id:"tty",message:"Interactive TTY available — watch keybinds enabled.",status:"ok"}:!e&&!t?{id:"tty",message:"No TTY on stdin/stdout — running in CI / piped mode (keybinds disabled).",status:"skip"}:{detail:{stdin:String(e),stdout:String(t)},id:"tty",message:e?"stdin is a TTY but stdout is not — output is being captured; keybinds still work.":"stdout is a TTY but stdin is not — keybinds disabled (input is piped).",status:"skip"}},"checkTtyAvailability"),Ci=_(()=>{const e=process.pid;try{return process.platform==="win32"?ft(e):gt(e)}catch{return[]}},"listOrphanPids"),xi=_(()=>{const e=process.pid;let t;try{t=process.platform==="win32"?ft(e):gt(e)}catch{return{id:Oe,message:"Could not enumerate processes (ps/tasklist failed).",status:"warn"}}if(t.length===0)return{id:Oe,message:"No orphaned vis/task-runner processes detected.",status:"ok"};if(t.length<=2)return{detail:{count:t.length,pids:t.join(",")},id:Oe,message:`${String(t.length)} possibly orphaned process(es) detected (PIDs: ${t.join(", ")}). Likely benign.`,status:"skip"};const i=process.platform==="win32"?t.map(s=>`taskkill /F /PID ${String(s)}`).join(" & "):`kill ${t.join(" ")}`;return{detail:{count:t.length,pids:t.join(",")},id:"orphans",message:`${String(t.length)} possibly orphaned vis/task-runner processes — run \`vis doctor --fix\` to clean them up, or kill them manually: ${i}`,status:"warn"}},"checkOrphanedRunners"),Ri=_((e={})=>{const t=e.enumerate??Ci,i=e.force===!0?"SIGKILL":"SIGTERM",s=e.kill??Di,o=t(),l=[],d=[];for(const p of o)try{s(p,i),l.push(p)}catch(c){const $=c.code??c.message;if($==="ESRCH"){l.push(p);continue}d.push({pid:p,reason:$})}return{failed:d,killed:l}},"killOrphanedRunners"),Ti=_(e=>ut("taskkill",e,{encoding:"utf8"}),"defaultTaskkillRunner"),Ai=_((e,t)=>{process.kill(e,t)},"defaultProcessKill"),Ii=_((e,t,i=Ti)=>{const s=t==="SIGKILL"?["/F","/PID",String(e)]:["/PID",String(e)],o=i(s);if(o.error)throw o.error;if(typeof o.status=="number"&&o.status!==0){const l=o.status===128?"ESRCH":`taskkill exited with code ${String(o.status)}`,d=new Error(l);throw d.code=l,d}},"killViaTaskkill"),Pi=_((e,t,i=Ai)=>{i(e,t)},"killViaSignal"),Di=_((e,t)=>{if(process.platform==="win32"){Ii(e,t);return}Pi(e,t)},"defaultKill"),pt=_((e,t)=>{const i=ut(e,t,{encoding:"utf8"});if(i.error)throw i.error;if(typeof i.status=="number"&&i.status!==0)throw new Error(`${e} exited with code ${String(i.status)}`);return typeof i.stdout=="string"?i.stdout:""},"runProcessListing"),gt=_(e=>{const t=pt("ps",["-Ao","pid=,command="]),i=[];for(const s of t.split(`
-`)){if(s.length===0)continue;const o=/^\s*(\d+)\s+(.+)$/.exec(s);if(!o)continue;const l=Number.parseInt(o[1]??"",10),d=(o[2]??"").toLowerCase();!Number.isFinite(l)||l===e||(/(?:^|[ /])vis-native(?:\s|$|[-.])/.test(d)||/(?:^|[ /])vis\s+run\b/.test(d)||/(?:^|[ /])task-runner(?:\s|$|[-.])/.test(d))&&i.push(l)}return i},"listOrphansUnix"),ft=_(e=>{const t=pt("tasklist",["/FO","CSV","/NH"]),i=[];for(const s of t.split(/\r?\n/)){if(s.length===0)continue;const o=s.split(/","/).map(p=>p.replaceAll(/^"|"$/g,"")),l=(o[0]??"").toLowerCase(),d=Number.parseInt(o[1]??"",10);!Number.isFinite(d)||d===e||(l==="vis.exe"||l.startsWith("vis-native")||l.includes("task-runner"))&&i.push(d)}return i},"listOrphansWindows"),Oi=_(()=>[Si(),$i(),xi()],"runRuntimeDiagnostics");var Ni=Object.defineProperty,ye=N((e,t)=>Ni(e,"name",{value:t,configurable:!0}),"s$2");const me=[{id:"dependencies",label:"Deps"},{id:"security",label:"Security"},{id:"optimization",label:"Optimize"},{id:"runtime",label:"Runtime"}],Me=["dependencies","security","optimization","runtime"],ge=ye(e=>{const t=new Map;for(const i of Me)t.set(i,[]);for(const i of e)t.get(i.section).push(i);for(const[i,s]of t)s.length===0&&t.delete(i);return t},"groupBySection"),fe=ye((e,t,i,s)=>{let o=e.filter(l=>l.section===t);if(s&&(o=o.filter(l=>l.severity===s)),i){const l=i.toLowerCase();o=o.filter(d=>d.title.toLowerCase().includes(l))}return[...o]},"filterFindings"),Mi=ye(e=>{const t={dependencies:"idle",optimization:"idle",runtime:"idle",security:"idle"};for(const i of Me)e.has(i)&&(t[i]="idle");return t},"initialStatus");class et{static{N(this,"DoctorStore")}static{ye(this,"DoctorStore")}#e;#i=new Set;constructor(t=[]){const i=Array.isArray(t)?{findings:t}:t,s=i.findings??[],o=i.activeSections??new Set(Me),l=Me.find(c=>o.has(c))??"dependencies",d=fe(s,l,"",void 0),p=Mi(o);if(s.length>0)for(const c of s)p[c.section]="done";this.#e={all:s,entries:d,filterActive:!1,filterText:"",filterType:l,focusedPanel:"list",grouped:ge(d),pendingAction:void 0,sectionError:{},sectionMessage:{},sectionStatus:p,selectedIndex:0,severityFilter:void 0}}getSnapshot=ye(()=>this.#e,"getSnapshot");subscribe=ye(t=>(this.#i.add(t),()=>{this.#i.delete(t)}),"subscribe");setSelectedIndex(t){const i=Math.max(0,Math.min(t,this.#e.entries.length-1));i!==this.#e.selectedIndex&&this.#t({...this.#e,selectedIndex:i})}setFocusedPanel(t){t!==this.#e.focusedPanel&&this.#t({...this.#e,focusedPanel:t})}setFilterType(t){if(t===this.#e.filterType)return;const i=fe(this.#e.all,t,this.#e.filterText,this.#e.severityFilter);this.#t({...this.#e,entries:i,filterType:t,grouped:ge(i),selectedIndex:0})}setFilter(t){const i=fe(this.#e.all,this.#e.filterType,t,this.#e.severityFilter);this.#t({...this.#e,entries:i,filterText:t,grouped:ge(i),selectedIndex:0})}setFilterActive(t){if(t===this.#e.filterActive)return;if(t){this.#t({...this.#e,filterActive:!0});return}const i=fe(this.#e.all,this.#e.filterType,"",this.#e.severityFilter);this.#t({...this.#e,entries:i,filterActive:!1,filterText:"",grouped:ge(i),selectedIndex:0})}setPendingAction(t){this.#t({...this.#e,pendingAction:t})}setSeverityFilter(t){if(t===this.#e.severityFilter)return;const i=fe(this.#e.all,this.#e.filterType,this.#e.filterText,t);this.#t({...this.#e,entries:i,grouped:ge(i),selectedIndex:0,severityFilter:t})}startSection(t,i){this.#t({...this.#e,sectionMessage:{...this.#e.sectionMessage,[t]:i},sectionStatus:{...this.#e.sectionStatus,[t]:"running"}})}completeSection(t,i){const s=[...this.#e.all,...i],o=fe(s,this.#e.filterType,this.#e.filterText,this.#e.severityFilter),l={...this.#e.sectionMessage};delete l[t],this.#t({...this.#e,all:s,entries:o,grouped:ge(o),sectionMessage:l,sectionStatus:{...this.#e.sectionStatus,[t]:"done"}})}failSection(t,i){this.#t({...this.#e,sectionError:{...this.#e.sectionError,[t]:i},sectionStatus:{...this.#e.sectionStatus,[t]:"error"}})}#t(t){this.#e=t;for(const i of this.#i)try{i()}catch{}}}var Fi=Object.defineProperty,mt=N((e,t)=>Fi(e,"name",{value:t,configurable:!0}),"r$1");const tt={error:0,warn:1},zi=mt(e=>!!e.acceptedRisk,"isAcknowledged"),yt=mt(e=>{const t=[];if(e.sections.has("dependencies")){for(const i of e.outdated)t.push({entry:i,id:`outdated:${i.packageName}`,kind:"outdated",section:"dependencies",severity:"warn",subtitle:`${i.currentRange} → ${i.newRange} (${i.updateType})`,title:i.packageName});for(const i of e.duplicates)t.push({id:`duplicate:${i.name}`,kind:"duplicate",pkg:i,section:"dependencies",severity:"warn",subtitle:`${String(i.versions.length)} versions installed`,title:i.name})}if(e.sections.has("security"))for(const i of e.outdated){if(i.vulnerabilities&&i.vulnerabilities.length>0){const s=i.vulnerabilities[0],o=zi(i)?"warn":"error",l=i.vulnerabilities.length;t.push({entry:i,id:`vuln:${i.packageName}`,kind:"vulnerability",packageName:i.packageName,section:"security",severity:o,subtitle:l===1?`${s.severity} · ${s.id}`:`${String(l)} advisories · top: ${s.severity} ${s.id}`,title:i.packageName})}if(i.socketReport&&i.socketReport.alerts.length>0){const s=Math.round(i.socketReport.score.overall*100);t.push({entry:i,id:`socket:${i.packageName}`,kind:"socket",packageName:i.packageName,section:"security",severity:"warn",subtitle:`${String(i.socketReport.alerts.length)} alert${i.socketReport.alerts.length===1?"":"s"} · score ${String(s)}%`,title:i.packageName})}}if(e.sections.has("optimization"))for(const i of e.optimizations)t.push({entry:i,id:`opt:${i.packageName}`,kind:"optimization",section:"optimization",severity:"warn",subtitle:`${i.category} → ${i.replacement}`,title:i.packageName});if(e.sections.has("runtime"))for(const i of e.runtime)i.status==="warn"&&t.push({diagnostic:i,id:`runtime:${i.id}`,kind:"runtime",section:"runtime",severity:"warn",title:i.message});return t.sort((i,s)=>{if(i.section!==s.section){const o=["dependencies","security","optimization","runtime"];return o.indexOf(i.section)-o.indexOf(s.section)}return tt[i.severity]-tt[s.severity]}),t},"flattenFindings"),kt={dependencies:"Dependencies",optimization:"Optimization",runtime:"Runtime",security:"Security"};var ji=Object.defineProperty,Ei=N((e,t)=>ji(e,"name",{value:t,configurable:!0}),"i$1");const Bi={error:"red",warn:"yellow"},Li={error:"✖",warn:"⚠"},_i={error:" ERROR ",warn:" WARN "},Vi=Ei(({children:e,hint:t,message:i,severity:s,title:o})=>{const l=Bi[s];return a(h,{borderColor:l,borderStyle:"single",flexDirection:"column",flexShrink:0,paddingX:1,children:[a(h,{gap:1,children:[r(n,{backgroundColor:l,bold:!0,color:"black",children:_i[s]}),r(n,{bold:!0,color:l,children:Li[s]}),r(n,{bold:!0,wrap:"truncate-end",children:o})]}),r(n,{wrap:"truncate-end",children:i}),t?r(n,{dimColor:!0,wrap:"truncate-end",children:t}):null,e]})},"ConfigBanner");var Ui=Object.defineProperty,te=N((e,t)=>Ui(e,"name",{value:t,configurable:!0}),"d");const Hi={CRITICAL:"red",HIGH:"red",LOW:"gray",MODERATE:"yellow",UNKNOWN:"gray"},Gi={critical:"red",high:"red",low:"gray",medium:"yellow"},Yi={major:"red",minor:"yellow",patch:"green"},T=te(({children:e,label:t,width:i=14})=>a(h,{children:[r(h,{width:i,children:a(n,{dimColor:!0,children:[t,":"]})}),typeof e=="string"?r(n,{children:e}):e]}),"FieldRow"),oe=te(({children:e})=>r(h,{marginTop:1,children:r(n,{bold:!0,color:"white",children:e})}),"SectionTitle"),Ki=te(({finding:e})=>{const{entry:t}=e,i=Yi[t.updateType]??"white";return a(h,{flexDirection:"column",children:[r(T,{label:"Current",children:t.currentRange}),a(T,{label:"Target",children:[r(n,{children:t.newRange}),a(n,{bold:!0,color:i,children:[" (",t.updateType,")"]})]}),r(T,{label:"Catalog",children:t.catalogName}),t.acceptedRisk?r(T,{label:"Risk ack",children:r(n,{dimColor:!0,children:t.acceptedRisk.reason??"(no reason recorded)"})}):null,r(oe,{children:"Action"}),a(n,{dimColor:!0,children:["Run"," ",r(n,{bold:!0,color:"white",children:"vis update"})," ","to apply this change."]})]})},"OutdatedDetail"),Ji=te(({finding:e})=>a(h,{flexDirection:"column",children:[r(T,{label:"Versions",children:r(n,{children:String(e.pkg.versions.length)})}),r(oe,{children:"Installed versions"}),e.pkg.versions.map(t=>a(n,{children:["  · ",t]},t)),r(oe,{children:"Action"}),a(n,{dimColor:!0,children:["Run"," ",r(n,{bold:!0,color:"white",children:"vis dedupe"})," ","to consolidate to a single resolution."]})]}),"DuplicateDetail"),qi=te(({finding:e})=>{const t=e.entry.vulnerabilities??[];return a(h,{flexDirection:"column",children:[r(T,{label:"Package",children:e.packageName}),r(T,{label:"Current",children:e.entry.currentRange}),r(T,{label:"Advisories",children:String(t.length)}),e.entry.acceptedRisk?r(T,{label:"Risk ack",children:r(n,{dimColor:!0,children:e.entry.acceptedRisk.reason??"(no reason recorded)"})}):null,t.map(i=>{const s=Hi[i.severity]??"gray";return a(h,{flexDirection:"column",marginTop:1,children:[a(h,{children:[r(n,{bold:!0,color:s,children:i.severity}),r(n,{children:" "}),r(n,{children:i.id}),typeof i.cvssScore=="number"?a(n,{dimColor:!0,children:[" · CVSS ",i.cvssScore.toFixed(1)]}):null]}),r(n,{wrap:"wrap",children:i.summary}),i.fixedVersions.length>0?a(n,{dimColor:!0,children:["Fixed in: ",i.fixedVersions.join(", ")]}):null,i.aliases&&i.aliases.length>0?a(n,{dimColor:!0,children:["Aliases: ",i.aliases.join(", ")]}):null]},i.id)})]})},"VulnerabilityDetail"),Xi=te(({finding:e})=>{const t=e.entry.socketReport;if(!t)return r(n,{dimColor:!0,children:"No Socket report attached."});const i=Math.round(t.score.overall*100),s=Ke(t.score.overall);return a(h,{flexDirection:"column",children:[r(T,{label:"Package",children:e.packageName}),r(T,{label:"Overall",children:a(n,{color:s,children:[String(i),"%"]})}),r(T,{label:"Alerts",children:String(t.alerts.length)}),e.entry.acceptedRisk?r(T,{label:"Risk ack",children:r(n,{dimColor:!0,children:e.entry.acceptedRisk.reason??"(no reason recorded)"})}):null,r(oe,{children:"Score breakdown"}),Object.entries(t.score).map(([o,l])=>{if(o==="overall")return null;const d=typeof l=="number"?l:0,p=Math.round(d*100),c=Ke(d);return a(h,{children:[r(h,{width:14,children:a(n,{dimColor:!0,children:[o,":"]})}),a(n,{color:c,children:[String(p),"%"]})]},o)}),r(oe,{children:"Alerts"}),t.alerts.map((o,l)=>{const d=Gi[o.severity]??"gray";return a(h,{flexDirection:"column",marginBottom:1,children:[a(h,{children:[r(n,{bold:!0,color:d,children:o.severity}),r(n,{children:" "}),r(n,{children:o.type})]}),o.props?r(n,{dimColor:!0,wrap:"wrap",children:JSON.stringify(o.props)}):null]},`${o.type}-${String(l)}`)})]})},"SocketDetail"),Wi=te(({finding:e})=>{const{entry:t}=e;return a(h,{flexDirection:"column",children:[r(T,{label:"Package",children:t.packageName}),r(T,{label:"Category",children:t.category}),r(T,{label:"Replacement",children:t.replacement}),t.overrideSpec?r(T,{label:"Override",children:t.overrideSpec}):null,r(T,{label:"Codemod",children:r(n,{color:t.hasCodemod?"green":"gray",children:t.hasCodemod?"available":"not available"})}),t.docUrl?r(T,{label:"Guide",children:r(n,{color:"cyan",underline:!0,children:t.docUrl})}):null,r(oe,{children:"Action"}),t.hasCodemod?a(n,{dimColor:!0,children:["Run"," ",r(n,{bold:!0,color:"white",children:"vis optimize"})," ","to apply the codemod interactively."]}):t.overrideSpec?a(n,{dimColor:!0,children:["Run"," ",r(n,{bold:!0,color:"white",children:"vis optimize"})," ","to install the package override."]}):t.docUrl?r(n,{dimColor:!0,children:"No automated codemod. Open the migration guide above for the recommended alternative and steps."}):r(n,{dimColor:!0,children:"No automated codemod. Consult the package's docs or the e18e module-replacements guide for an alternative."})]})},"OptimizationDetail"),Qi=te(({finding:e})=>{const{diagnostic:t}=e,i=t.status==="warn"?"yellow":t.status==="ok"?"green":"gray";return a(h,{flexDirection:"column",children:[r(T,{label:"Check",children:t.id}),r(T,{label:"Status",children:r(n,{color:i,children:t.status})}),r(oe,{children:"Message"}),r(n,{wrap:"wrap",children:t.message}),t.detail&&Object.keys(t.detail).length>0?a(di,{children:[r(oe,{children:"Details"}),Object.entries(t.detail).map(([s,o])=>a(h,{children:[r(h,{width:20,children:a(n,{dimColor:!0,children:[s,":"]})}),r(n,{children:String(o)})]},s))]}):null]})},"RuntimeDetail"),Zi=te(({finding:e,focused:t,scrollRef:i})=>{const s=t?"white":"gray";if(!e)return r(h,{alignItems:"center",borderColor:"gray",borderStyle:"single",flexDirection:"column",flexGrow:1,justifyContent:"center",children:r(n,{dimColor:!0,children:"No finding selected"})});let o;switch(e.kind){case"duplicate":{o=r(Ji,{finding:e});break}case"optimization":{o=r(Wi,{finding:e});break}case"outdated":{o=r(Ki,{finding:e});break}case"runtime":{o=r(Qi,{finding:e});break}case"socket":{o=r(Xi,{finding:e});break}case"vulnerability":{o=r(qi,{finding:e});break}default:{o=r(n,{dimColor:!0,children:"Unknown finding kind."});break}}return a(h,{borderColor:s,borderStyle:"single",flexDirection:"column",flexGrow:1,children:[a(h,{flexShrink:0,paddingTop:1,paddingX:2,children:[r(n,{bold:!0,color:"white",children:e.title}),a(n,{dimColor:!0,children:["  ",kt[e.section]]})]}),a(Dt,{flexGrow:1,flexShrink:1,paddingX:2,ref:i,scrollbar:!0,scrollbarColor:"gray",scrollbarStyle:"block",children:[r(n,{}),o]})]})},"DoctorDetailPanel");var er=Object.defineProperty,Ie=N((e,t)=>er(e,"name",{value:t,configurable:!0}),"c$1");const wt={error:"red",warn:"yellow"},tr={error:"✖",warn:"⚠"},ir=Ie(e=>e.kind==="outdated"||e.kind==="vulnerability"||e.kind==="socket"?!!e.entry.acceptedRisk:!1,"hasAcceptedRisk"),rr=Ie(({finding:e,isSelected:t})=>{const i=wt[e.severity],s=ir(e);return a(h,{flexShrink:0,height:1,children:[r(n,{children:t?">":" "}),a(n,{color:i,children:[" ",tr[e.severity]," "]}),r(h,{flexGrow:1,children:r(n,{bold:t,inverse:t,wrap:"truncate",children:e.title})}),s?r(n,{color:"cyan",children:" ack"}):null,e.subtitle?a(n,{dimColor:!0,wrap:"truncate",children:[" ",e.subtitle]}):null]})},"FindingRow"),nr=Ie(({count:e,section:t})=>a(h,{flexShrink:0,height:1,marginTop:1,children:[a(n,{dimColor:!0,children:["▼"," "]}),r(n,{bold:!0,color:"white",children:kt[t].toUpperCase()}),a(n,{dimColor:!0,children:[" (",e,")"]})]}),"SectionHeader"),or=Ie(({count:e,label:t,status:i})=>a(n,{children:[t,i==="running"?a(n,{children:[" ",r(lt,{type:"dots"})]}):null,i==="error"?r(n,{bold:!0,color:"red",children:" ✖"}):a(n,{dimColor:!0,children:[" (",String(e),")"]})]}),"TabLabel"),sr=Ie(({elapsedMs:e,entries:t,filterActive:i,filterText:s,filterType:o,focused:l,fromCache:d=!1,grouped:p,onViewportHeightChange:c,scrollOffset:$,sectionCounts:x,sectionMessage:b,sectionStatus:I,selectedIndex:f,severityFilter:w,totalAll:E,viewportHeight:Z})=>{const q=l?"white":"gray",{measuredHeight:B,ref:M}=ui(Z,c);let P=0,L=0;for(const v of t)v.severity==="error"?P+=1:v.severity==="warn"&&(L+=1);const X=[];P>0&&X.push(`${String(P)} error${P===1?"":"s"}`),L>0&&X.push(`${String(L)} warn${L===1?"":"s"}`);const ie=X.length>0?` (${X.join(", ")})`:"",G=(e/1e3).toFixed(1),D=[];for(const[v,A]of p){D.push(r(nr,{count:A.length,section:v},`hdr-${v}`));for(const R of A){const U=t.indexOf(R);D.push(r(rr,{finding:R,isSelected:U===f},R.id))}}let V=0;for(const[,v]of p)V+=2+v.length;const Y=V>B&&B>0;return a(h,{borderColor:q,borderStyle:"single",flexDirection:"column",flexGrow:1,children:[a(h,{flexShrink:0,gap:1,paddingX:1,children:[r(n,{bold:!0,inverse:!0,children:" DOCTOR "}),a(n,{wrap:"truncate",children:[t.length,t.length===E?"":`/${String(E)}`," finding",t.length===1?"":"s",ie]}),w?r(n,{bold:!0,color:wt[w],inverse:!0,children:` ${w.toUpperCase()} ONLY `}):null,d?r(n,{bold:!0,color:"cyan",inverse:!0,children:" CACHED "}):null,a(n,{dimColor:!0,children:[" · ",G,"s"]})]}),r(h,{flexShrink:0,paddingX:1,paddingY:1,children:r(Ot,{isFocused:l,keyMap:{next:[],previous:[],useNumbers:!1,useTab:!1},onChange:N(()=>{},"onChange"),showIndex:!1,value:o,children:me.map(({id:v,label:A})=>r(Nt,{name:v,children:r(or,{count:x[v],label:A,status:I[v]})},v))})}),(()=>{const v=Object.keys(I).filter(A=>I[A]==="running"&&b[A]).map(A=>b[A]);return v.length===0?null:r(h,{flexShrink:0,paddingX:1,children:a(n,{dimColor:!0,wrap:"truncate",children:[r(lt,{type:"dots"})," ",v.join(" · ")]})})})(),i&&a(h,{flexShrink:0,paddingX:1,children:[r(n,{bold:!0,color:"white",children:"/ "}),r(n,{children:s}),r(n,{inverse:!0,children:" "})]}),a(h,{flexDirection:"row",flexGrow:1,overflow:"hidden",ref:M,children:[r(h,{flexDirection:"column",flexGrow:1,overflow:"hidden",paddingLeft:1,children:r(h,{flexDirection:"column",marginTop:-$,children:D.length>0?D:r(h,{marginTop:1,children:r(n,{dimColor:!0,children:"No findings match the current filter."})})})}),Y&&r(h,{flexShrink:0,marginLeft:1,marginRight:1,children:r(Mt,{contentHeight:V,placement:"inset",scrollOffset:$,style:"block",viewportHeight:B})})]},`list-${o}-${s}`)]})},"DoctorListPanel");var lr=Object.defineProperty,ze=N((e,t)=>lr(e,"name",{value:t,configurable:!0}),"g$1");const ar=ze(e=>{if(e.kind==="outdated")return{command:`vis update ${e.entry.packageName}`,description:`Update ${e.entry.packageName} to ${e.entry.newRange}`};if(e.kind==="duplicate")return{command:`vis dedupe ${e.pkg.name}`,description:`Dedupe ${e.pkg.name} (${String(e.pkg.versions.length)} versions)`}},"buildUpdateAction"),cr=ze(e=>{if(e.kind==="optimization")return{command:`vis optimize ${e.entry.packageName}`,description:`Replace ${e.entry.packageName} with ${e.entry.replacement}`}},"buildOptimizeAction"),dr=ze(e=>{if(e.kind!=="outdated"&&e.kind!=="vulnerability"&&e.kind!=="socket")return;const t=e.kind==="outdated"?e.entry.packageName:e.packageName,i=["// Add to vis.config.ts:","security: {","    acceptedRisks: {",`        "${t}": {`,'            reason: "explain why this risk is acceptable",','            expiresAt: "YYYY-MM-DD",',"        },","    },","},"].join(`
-`);return{command:i,configSnippet:i,description:`Acknowledge risk for ${t}`}},"buildAckAction"),ur=100,hr=40,pr=10,gr=ze(({autoExitSeconds:e=0,banner:t,fromCache:i=!1,startedAt:s,store:o})=>{const{exit:l}=Ft(),{columns:d,rows:p}=zt(),c=Ht(o.subscribe,o.getSnapshot),[$,x]=xe(!1),[b,I]=xe(!1),[f,w]=xe(0),[E,Z]=xe(()=>Date.now());Ee(()=>{const y=setInterval(()=>{Z(Date.now())},1e3);return()=>{clearInterval(y)}},[]);const q=E-s,B=qe(null),M=qe(null),P=c.entries[c.selectedIndex]??null,L=Pe(()=>{const y={dependencies:0,optimization:0,runtime:0,security:0};for(const m of c.all)y[m.section]+=1;return y},[c.all]),X=t?t.hint?5:4:0,ie=Pe(()=>{for(const y of Object.keys(c.sectionStatus))if(c.sectionStatus[y]==="running"&&c.sectionMessage[y])return 1;return 0},[c.sectionStatus,c.sectionMessage]),G=d>=ur,D=G?Math.max(1,p-X-2):Math.floor(p*.55),V=Pe(()=>Math.max(1,D-6-ie-(c.filterActive?1:0)),[D,ie,c.filterActive]),[Y,v]=xe(V),A=Y>0?Y:V,R=Pe(()=>{let y=0;for(const[,m]of c.grouped)y+=2+m.length;return y},[c.grouped]),U=Math.max(0,R-A);Ee(()=>{w(y=>Math.min(y,U))},[U]);const ce=Xe(y=>{let m=0,k=0;for(const[,Se]of c.grouped){m+=2;for(const $e of Se){if(k===y)return m;m+=1,k+=1}}return m},[c.grouped]),O=Xe(y=>{const m=ce(y);w(k=>m>k+A-2?Math.min(U,Math.max(0,m-A+2)):m<k+1?Math.max(0,m-1):k)},[ce,A,U]);if(Ee(()=>{M.current?.scrollToTop()},[P?.id]),jt((y,m)=>{if(y==="c"&&m.ctrl){l();return}if(!b){if($){m.escape||y==="?"?x(!1):y==="q"?(x(!1),I(!0)):m.downArrow||y==="j"?B.current?.scrollBy(1):(m.upArrow||y==="k")&&B.current?.scrollBy(-1);return}if(y==="?"){x(!0);return}if(y==="q"){I(!0);return}if(m.tab){o.setFocusedPanel(c.focusedPanel==="list"?"detail":"list");return}if(c.filterActive){if(m.escape||m.return){o.setFilterActive(!1);return}if(m.backspace){w(0),o.setFilter(c.filterText.slice(0,-1));return}y&&!m.ctrl&&!m.meta&&(w(0),o.setFilter(c.filterText+y));return}if(c.focusedPanel==="list"&&(m.leftArrow||m.rightArrow)){const k=me.findIndex($e=>$e.id===c.filterType),Se=m.rightArrow?(k+1)%me.length:(k-1+me.length)%me.length;w(0),M.current?.scrollToTop(),o.setFilterType(me[Se].id);return}if(c.focusedPanel==="list"){if(m.downArrow||y==="j"){const k=Math.min(c.selectedIndex+1,c.entries.length-1);o.setSelectedIndex(k),O(k);return}if(m.upArrow||y==="k"){const k=Math.max(c.selectedIndex-1,0);o.setSelectedIndex(k),O(k);return}if(m.pageDown){const k=Math.min(c.selectedIndex+10,c.entries.length-1);o.setSelectedIndex(k),O(k);return}if(m.pageUp){const k=Math.max(c.selectedIndex-10,0);o.setSelectedIndex(k),O(k);return}if(m.home){o.setSelectedIndex(0),w(0);return}if(m.end){const k=c.entries.length-1;o.setSelectedIndex(k),O(k);return}if(y==="/"){o.setFilterActive(!0);return}if(y==="e"){o.setSeverityFilter(c.severityFilter==="error"?void 0:"error"),w(0);return}if(y==="w"){o.setSeverityFilter(c.severityFilter==="warn"?void 0:"warn"),w(0);return}if(y==="u"&&P){const k=ar(P);k&&(o.setPendingAction(k),l());return}if(y==="o"&&P){const k=cr(P);k&&(o.setPendingAction(k),l());return}if(y==="a"&&P){const k=dr(P);k&&(o.setPendingAction(k),l());return}if(y==="d"){o.setFocusedPanel("detail");return}return}if(m.escape||m.leftArrow){o.setFocusedPanel("list");return}if(m.downArrow||y==="j"){M.current?.scrollBy(1);return}if(m.upArrow||y==="k"){M.current?.scrollBy(-1);return}if(m.pageDown){M.current?.scrollBy(10);return}if(m.pageUp){M.current?.scrollBy(-10);return}if(m.home){M.current?.scrollToTop();return}m.end&&M.current?.scrollToBottom()}},{isActive:!0}),d<hr||p<pr)return r(h,{alignItems:"center",height:p,justifyContent:"center",width:d,children:a(n,{color:"yellow",children:["Terminal too small (",d,"x",p,")"]})});const W=c.focusedPanel==="detail",ee=[a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"q"}),r(n,{dimColor:!0,children:"QUIT"})]},"q"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"?"}),r(n,{dimColor:!0,children:"HELP"})]},"?"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"↑↓"}),r(n,{dimColor:!0,children:W?"SCROLL":"NAV"})]},"nav"),W?a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"←/Esc"}),r(n,{dimColor:!0,children:"LIST"})]},"lr"):a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"←→"}),r(n,{dimColor:!0,children:"SECTION"})]},"lr"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"/"}),r(n,{dimColor:!0,children:"SEARCH"})]},"search"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"e/w"}),r(n,{dimColor:!0,children:"SEVERITY"})]},"sev"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"u/o/a"}),r(n,{dimColor:!0,children:"ACTION"})]},"actions"),a(h,{gap:1,children:[r(n,{bold:!0,color:"white",children:"Tab"}),r(n,{dimColor:!0,children:"PANEL"})]},"tab")],de=r(h,{borderBottom:!1,borderColor:"gray",borderLeft:!1,borderRight:!1,borderStyle:"single",flexShrink:0,children:r(h,{gap:2,overflow:"hidden",paddingX:1,children:ee})}),ue=a(Et,{footer:a(n,{dimColor:!0,children:[r(n,{bold:!0,color:"white",children:"↑↓"})," scroll  ",r(n,{bold:!0,color:"white",children:"?"}),"/",r(n,{bold:!0,color:"white",children:"Esc"})," close"]}),scrollRef:B,title:"DOCTOR — KEYBOARD SHORTCUTS",visible:$,width:56,children:[a(h,{flexDirection:"column",marginBottom:1,children:[a(h,{marginBottom:1,children:[r(n,{dimColor:!0,children:"── "}),r(n,{bold:!0,color:"white",children:"NAVIGATION"})]}),a(h,{children:[r(h,{width:26,children:a(n,{children:[r(n,{bold:!0,color:"white",children:" ↑/k  "}),r(n,{dimColor:!0,children:"Move up"})]})}),a(n,{children:[r(n,{bold:!0,color:"white",children:" ↓/j  "}),r(n,{dimColor:!0,children:"Move down"})]})]}),a(h,{children:[r(h,{width:26,children:a(n,{children:[r(n,{bold:!0,color:"white",children:" PgUp"}),r(n,{dimColor:!0,children:"  Jump up 10"})]})}),a(n,{children:[r(n,{bold:!0,color:"white",children:" PgDn"}),r(n,{dimColor:!0,children:"  Jump down 10"})]})]}),a(h,{children:[r(h,{width:26,children:a(n,{children:[r(n,{bold:!0,color:"white",children:" Home"}),r(n,{dimColor:!0,children:"  Jump to top"})]})}),a(n,{children:[r(n,{bold:!0,color:"white",children:" End"}),r(n,{dimColor:!0,children:"   Jump to bottom"})]})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" Tab"}),r(n,{dimColor:!0,children:"     Switch panel"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" →/←"}),r(n,{dimColor:!0,children:"     Section tabs (list) / Focus list (detail)"})]})]}),a(h,{flexDirection:"column",marginBottom:1,children:[a(h,{marginBottom:1,children:[r(n,{dimColor:!0,children:"── "}),r(n,{bold:!0,color:"white",children:"FILTER"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" /"}),r(n,{dimColor:!0,children:"       Open text filter (Esc/Enter to close)"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" e"}),r(n,{dimColor:!0,children:"       Toggle errors-only filter"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" w"}),r(n,{dimColor:!0,children:"       Toggle warns-only filter"})]})]}),a(h,{flexDirection:"column",marginBottom:1,children:[a(h,{marginBottom:1,children:[r(n,{dimColor:!0,children:"── "}),r(n,{bold:!0,color:"white",children:"ACTIONS"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" u"}),r(n,{dimColor:!0,children:"       Exit + suggest update / dedupe command"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" o"}),r(n,{dimColor:!0,children:"       Exit + suggest optimize command"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" a"}),r(n,{dimColor:!0,children:"       Exit + print risk-ack snippet"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" d"}),r(n,{dimColor:!0,children:"       Focus detail panel"})]})]}),a(h,{flexDirection:"column",children:[a(h,{marginBottom:1,children:[r(n,{dimColor:!0,children:"── "}),r(n,{bold:!0,color:"white",children:"EXIT"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" q"}),r(n,{dimColor:!0,children:"       Quit (with countdown)"})]}),a(n,{children:[r(n,{bold:!0,color:"white",children:" Ctrl+C"}),r(n,{dimColor:!0,children:"  Quit immediately"})]})]})]}),he=r(sr,{elapsedMs:q,entries:c.entries,filterActive:c.filterActive,filterText:c.filterText,filterType:c.filterType,focused:c.focusedPanel==="list",fromCache:i,grouped:c.grouped,onViewportHeightChange:v,scrollOffset:f,sectionCounts:L,sectionMessage:c.sectionMessage,sectionStatus:c.sectionStatus,selectedIndex:c.selectedIndex,severityFilter:c.severityFilter,totalAll:c.all.length,viewportHeight:A}),pe=t?r(Vi,{hint:t.hint,message:t.message,severity:t.severity,title:t.title}):null,be=r(Zi,{finding:P,focused:c.focusedPanel==="detail",scrollRef:M});if(G){const y=Math.floor(d*.4);return a(h,{flexDirection:"column",height:p,width:d,children:[pe,a(h,{flexDirection:"row",flexGrow:1,children:[r(h,{flexGrow:1,children:he}),r(h,{width:y,children:be})]}),de,r(Je,{autoExitSeconds:e||3,onCancel:N(()=>{I(!1)},"onCancel"),visible:b}),ue]})}return a(h,{flexDirection:"column",height:p,width:d,children:[pe,r(h,{height:D,children:he}),r(h,{flexGrow:1,children:be}),de,r(Je,{autoExitSeconds:e||3,onCancel:N(()=>{I(!1)},"onCancel"),visible:b}),ue]})},"VisDoctorApp");var fr=Object.defineProperty,we=N((e,t)=>fr(e,"name",{value:t,configurable:!0}),"n$1");const mr=we(e=>e.replaceAll(/[$()+.?[\\\]^{|}]/g,String.raw`\$&`),"escapeRegex"),yr=we(e=>{const t=e.split("*").map(mr);return new RegExp(`^${t.join(".*")}$`,"i")},"compilePattern"),kr=we(e=>e?e.split(",").map(t=>t.trim()).filter(t=>t.length>0).map(yr):[],"parseFilterPatterns"),Ne=we((e,t)=>{for(const i of t)if(i.test(e))return!0;return!1},"matchesAny"),wr=we((e,t)=>{if(t.length===0)return e;const i=e.outdated.filter(c=>Ne(c.packageName,t)),s=e.duplicates.filter(c=>Ne(c.name,t)),o=e.optimizations.filter(c=>Ne(c.packageName,t));let l=0,d=0,p=0;for(const c of i)c.vulnerabilities&&(l+=c.vulnerabilities.length),c.socketReport&&(d+=c.socketReport.alerts.length,c.socketReport.score.overall<Be&&(p+=1));return{...e,duplicates:s,optimizations:o,outdated:i,socketIssues:{alerts:d,lowScore:p},vulnCount:l}},"applyFilter"),vt=we((e,t)=>t.length===0?[...e]:e.filter(i=>{if(i.kind==="runtime")return!0;const s=i.kind==="duplicate"?i.pkg.name:i.kind==="outdated"||i.kind==="optimization"?i.entry.packageName:i.packageName;return Ne(s,t)}),"filterFindingsByPattern");var vr=Object.defineProperty,ve=N((e,t)=>vr(e,"name",{value:t,configurable:!0}),"r");const bt=["dependencies","security","optimization","runtime"],it=ve(e=>{const t=new Set;if(!e)return t;for(const i of e.split(",")){const s=i.trim().toLowerCase();bt.includes(s)&&t.add(s)}return t},"parseSectionList"),br=ve((e,t)=>{if(e!==void 0&&e!=="")return it(e);const i=it(t);return new Set(bt.filter(s=>!i.has(s)))},"resolveSections"),St=ve(e=>{const t={micro:0,native:0,preferred:0,socket:0,total:e.length};for(const i of e)switch(i.category){case"micro-utility":{t.micro+=1;break}case"native":{t.native+=1;break}case"preferred":{t.preferred+=1;break}case"socket":{t.socket+=1;break}}return t},"summarizeOptimizations"),ne=ve((e,t)=>{if(!e.sections.has(t))return"skip";switch(t){case"dependencies":return e.outdated.length>0||e.duplicates.length>0?"warn":"ok";case"optimization":return e.optimizations.length>0?"warn":"ok";case"runtime":return e.runtime.some(i=>i.status==="warn")?"warn":"ok";case"security":return e.vulnCount>0||e.socketIssues.alerts>0?"error":e.socketIssues.lowScore>0?"warn":"ok";default:return"ok"}},"sectionStatus"),Sr=ve((e,t)=>{const i=St(e.optimizations),s={dependencies:ne(e,"dependencies"),optimization:ne(e,"optimization"),runtime:ne(e,"runtime"),security:ne(e,"security")},o=new Set([...Object.values(s),e.supplyChain.status]),l=o.has("error")?"error":o.has("warn")?"warn":"ok";return{dependencies:{duplicates:e.duplicates.length,installed:e.installedCount,outdated:e.outdated.length,status:s.dependencies},elapsedMs:e.elapsedMs,optimizations:{microUtilities:i.micro,native:i.native,preferred:i.preferred,socket:i.socket,status:s.optimization,total:i.total},packageManager:t,runtime:e.runtime.map(d=>({detail:d.detail,id:d.id,message:d.message,status:d.status})),runtimeStatus:s.runtime,security:{alerts:e.socketIssues.alerts,lowScorePackages:e.socketIssues.lowScore,status:s.security,vulnerabilities:e.vulnCount},status:l,supplyChain:{findings:e.supplyChain.findings.map(d=>({detail:d.detail,label:d.label,severity:d.severity})),status:e.supplyChain.status},workspaces:e.workspaceCount}},"buildJsonPayload"),rt=ve((e,t)=>{const i=e.runtime.some(o=>o.status==="warn"),s=e.vulnCount>0||e.socketIssues.alerts>0;return t?s||e.outdated.length>0||e.duplicates.length>0||i:s},"shouldFail");var $r=Object.defineProperty,$t=N((e,t)=>$r(e,"name",{value:t,configurable:!0}),"l");const nt=$t(e=>e.some(t=>t.severity==="error")?"error":e.some(t=>t.severity==="warn")?"warn":"ok","rollUpStatus"),Cr=$t(e=>{const t=[],i=e?.security;if(!i)return t.push({detail:"Use defineConfig() from '@visulima/vis/config' to apply secure defaults.",label:"No security config — running with the PM's native defaults",severity:"warn"}),{findings:t,status:nt(t)};i.minimumReleaseAge===void 0?t.push({detail:"Set security.minimumReleaseAge to block packages published in the last N minutes (mitigates supply-chain attacks).",label:"minimumReleaseAge is not set",severity:"warn"}):i.minimumReleaseAge===0?t.push({detail:"New packages can be installed immediately after publishing. Consider setting a non-zero cooldown.",label:"minimumReleaseAge is explicitly 0",severity:"warn"}):t.push({label:`minimumReleaseAge: ${String(i.minimumReleaseAge)} minutes`,severity:"ok"}),i.trustPolicy===void 0||i.trustPolicy==="off"?t.push({detail:"Packages whose trust level has decreased will not be blocked. Consider 'no-downgrade'.",label:`trustPolicy: ${i.trustPolicy??"not set"}`,severity:"warn"}):t.push({label:`trustPolicy: ${i.trustPolicy}`,severity:"ok"}),i.blockExoticSubdeps===void 0||!i.blockExoticSubdeps?t.push({detail:"Transitive dependencies can pull code from git repos or tarball URLs. Set to true to block.",label:`blockExoticSubdeps: ${String(i.blockExoticSubdeps??!1)}`,severity:"warn"}):t.push({label:"blockExoticSubdeps: true",severity:"ok"});const s=i.allowBuilds?Object.keys(i.allowBuilds).length:0;return s===0?t.push({detail:"Lifecycle scripts are blocked by default. List trusted packages here to opt them back in (e.g. esbuild, @prisma/client).",label:"allowBuilds: not configured",severity:"warn"}):t.push({label:`allowBuilds: ${String(s)} ${s===1?"entry":"entries"}`,severity:"ok"}),i.strictDepBuilds&&s===0&&t.push({detail:"All dependencies with build scripts will be blocked. Run 'vis approve-builds' to populate allowBuilds.",label:"strictDepBuilds is on but allowBuilds is empty",severity:"error"}),{findings:t,status:nt(t)}},"buildSupplyChainPosture");var xr=Object.defineProperty,C=N((e,t)=>xr(e,"name",{value:t,configurable:!0}),"u");const H=C(e=>e>=1e3?`${(e/1e3).toFixed(1)}s`:`${String(Math.round(e))}ms`,"fmtDuration"),De=C(async(e,t,i,s)=>{if(!e)return i();e.start(t);const o=Date.now();try{const l=await i(),d=Date.now()-o,{status:p,summary:c}=s(l,d);return e.finish(t,p,c),l}catch(l){const d=Date.now()-o,p=l instanceof Error?l.message:String(l);throw e.finish(t,"error",`${p} (${H(d)})`),l}},"tracked"),Rr=C((e,t)=>{const i={duplicates:t.duplicates,elapsedMs:0,installedCount:0,optimizations:t.optimizations,outdated:t.outdated,runtime:t.runtime,sections:new Set([e]),socketIssues:{alerts:0,lowScore:0},supplyChain:{findings:[],status:"ok"},vulnCount:0,workspaceCount:0};return yt(i)},"buildSectionFindings"),ot=C(async e=>{const{filterPatterns:t,installed:i,progress:s,resolveCodemods:o,sections:l,store:d,visConfig:p,workspaceRoot:c}=e,$=l.has("dependencies"),x=l.has("security"),b=l.has("optimization"),I=l.has("runtime"),f=C((g,F)=>vt(Rr(g,F),t),"sectionFindings"),w=at(c),{packageManager:E}=st(c),Z=Qe(le(c,"package.json"),!1),q=dt(c),B=new Set(Z);for(const g of q){const F=Qe(le(Pt(c,g),"package.json"),!1);for(const z of F)B.add(z)}const M=hi(c),P=ht(c,E),L=ct(p?.security?.socket),X=p?.security?.socket?.acceptedRisks,ie=ei(c,w.name),G={exclude:[],ignore:[],include:[],includeLocked:!1,includePrerelease:!1,security:!0,target:"latest"},D=$?li(c,w.name):[],V=b?ti(B):[],Y=b?ii(B,ie,w,!1):[],v=new Set(V.map(g=>g.packageName)),A=Y.filter(g=>!v.has(g.packageName)),R=[...V,...A],U=I?Oi():[];d&&($&&d.startSection("dependencies",P.size>0?"checking outdated catalog dependencies":"scanning duplicates"),x&&d.startSection("security",i.length>0?`scanning ${String(i.length)} packages for advisories`:"no installed packages to scan"),b&&d.startSection("optimization","matching e18e + socket overrides"),I&&d.startSection("runtime","running runtime diagnostics")),d&&I&&d.completeSection("runtime",f("runtime",{duplicates:[],optimizations:[],outdated:[],runtime:U}));const ce=($||x)&&P.size>0?De(s,"outdated",()=>pi(P,G,M,void 0,c,L,X),(g,F)=>{const z=g.outdated.length;return{status:z>0?"warn":"ok",summary:z>0?`${String(z)} outdated · ${H(F)}`:`up to date · ${H(F)}`}}):Promise.resolve({failed:[],ignored:[],outdated:[]}),O=x&&i.length>0?De(s,"vulnerabilities",()=>gi(i.map(g=>({name:g.name,version:g.version}))),(g,F)=>{let z=0;for(const re of g.values())z+=re.length;return{status:z>0?"error":"ok",summary:z>0?`${String(z)} found · ${H(F)}`:`none found · ${H(F)}`}}):Promise.resolve(new Map),W=x&&L&&i.length>0?De(s,"socket",()=>Lt(i.map(g=>({name:g.name,version:g.version})),L),(g,F)=>{let z=0,re=0;for(const Ye of g.values())z+=Ye.alerts.length,Ye.score.overall<Be&&(re+=1);const Ge=z+re;return{status:Ge>0?"warn":"ok",summary:Ge>0?`${String(z)} alert${z===1?"":"s"}, ${String(re)} low-score · ${H(F)}`:`clean · ${H(F)}`}}):Promise.resolve(new Map);let ee,de,ue,he;const pe=ce.catch(g=>(ee=g instanceof Error?g.message:String(g),d||u.warn(`Outdated scan failed: ${ee}`),{failed:[],ignored:[],outdated:[]})),be=O.catch(g=>(de=g instanceof Error?g.message:String(g),d||u.warn(`Vulnerability scan failed: ${de}`),new Map)),y=W.catch(g=>(ue=g instanceof Error?g.message:String(g),d||u.warn(`Socket scan failed: ${ue}`),new Map)),m=d&&$?pe.then(g=>{if(ee){d.failSection("dependencies",ee);return}d.completeSection("dependencies",f("dependencies",{duplicates:D,optimizations:[],outdated:g.outdated,runtime:[]}))}):void 0,k=d&&x?Promise.all([pe,be,y]).then(([g])=>{const F=ee??de??ue;if(F){d.failSection("security",F);return}d.completeSection("security",f("security",{duplicates:[],optimizations:[],outdated:g.outdated,runtime:[]}))}):void 0,Se=(async()=>{if(o&&b&&R.length>0&&await De(s,"codemods",async()=>(await ri(R),R),(g,F)=>{const z=g.filter(re=>re.hasCodemod||re.category==="socket").length;return{status:"ok",summary:`${String(z)} auto-fixable · ${H(F)}`}}).catch(g=>{he=g instanceof Error?g.message:String(g)}),d&&b){if(he){d.failSection("optimization",he);return}d.completeSection("optimization",f("optimization",{duplicates:[],optimizations:R,outdated:[],runtime:[]}))}})(),[$e,xt,Rt]=await Promise.all([pe,be,y]);await Promise.all([m,k,Se]);let Ue=0,He=0;if(x&&L)for(const g of Rt.values())Ue+=g.alerts.length,g.score.overall<Be&&(He+=1);let je=0;if(x){for(const g of $e.outdated)g.vulnerabilities&&g.vulnerabilities.length>0&&(je+=g.vulnerabilities.length);for(const g of xt.values())je+=g.length}return{duplicates:D,installedCount:i.length,optimizations:b?R:[],outdated:$?$e.outdated:[],runtime:U,sections:l,socketIssues:{alerts:Ue,lowScore:He},supplyChain:Cr(p),vulnCount:je,workspaceCount:q.length}},"streamScans"),Tr=C(e=>{switch(e){case"error":return Re(j.failure);case"skip":return S(j.dash);case"warn":return Fe(j.warning);default:return ke(j.success)}},"sectionIcon"),ae=C((e,t)=>{const i=process.stderr.columns??80,s=Math.max(20,Math.min(i-2,60)),o=j.dash.repeat(2),l=`${Tr(t)} ${se(e)}`,d=l.replaceAll(/\[[0-9;]*m/g,"").length,p=Math.max(0,s-d-o.length-2);return`${o} ${l} ${S(j.dash.repeat(p))}`},"heading"),J=C(e=>`  ${ke(j.success)} ${e}`,"itemOk"),Q=C(e=>`  ${Fe(j.warning)} ${e}`,"itemWarn"),Ve=C(e=>`  ${Re(j.failure)} ${e}`,"itemError"),Ct=C(e=>`  ${S(j.dash)} ${S(e)}`,"itemSkip"),K=C((e,t,i)=>{const s=`${se(String(e))} ${S(t)}`;return i?`${s} ${S(`(${i})`)}`:s},"countLine"),Ar=C(e=>{if(e.sections.has("dependencies")){if(u.log(""),u.log(ae("Dependencies",ne(e,"dependencies"))),u.log(J(K(e.installedCount,"packages installed"))),e.outdated.length>0){const t=e.outdated.filter(l=>l.updateType==="major").length,i=e.outdated.filter(l=>l.updateType==="minor").length,s=e.outdated.filter(l=>l.updateType==="patch").length,o=[];t>0&&o.push(`${String(t)} major`),i>0&&o.push(`${String(i)} minor`),s>0&&o.push(`${String(s)} patch`),u.log(Q(K(e.outdated.length,"outdated",o.join(", "))))}else u.log(J("All dependencies up to date"));e.duplicates.length>0?u.log(Q(K(e.duplicates.length,"packages with duplicate versions"))):u.log(J("No duplicate dependencies"))}},"displayDependencies"),Ir=C(e=>{e.sections.has("security")&&(u.log(""),u.log(ae("Security",ne(e,"security"))),e.vulnCount>0?u.log(Ve(K(e.vulnCount,`vulnerabilit${e.vulnCount===1?"y":"ies"} found`))):u.log(J("No known vulnerabilities")),e.socketIssues.alerts>0&&u.log(Q(K(e.socketIssues.alerts,`Socket.dev security alert${e.socketIssues.alerts===1?"":"s"}`))),e.socketIssues.lowScore>0&&u.log(Q(K(e.socketIssues.lowScore,`package${e.socketIssues.lowScore===1?"":"s"} with low security score`))),e.socketIssues.alerts===0&&e.socketIssues.lowScore===0&&e.vulnCount===0&&u.log(J("No security issues detected")))},"displaySecurity"),Pr=C(e=>{if(!e.sections.has("optimization"))return;u.log(""),u.log(ae("Optimization",ne(e,"optimization")));const t=St(e.optimizations);if(t.total===0){u.log(J("No optimizations available"));return}t.native>0&&u.log(Q(K(t.native,"replaceable with native APIs"))),t.preferred>0&&u.log(Q(K(t.preferred,"with lighter alternatives"))),t.micro>0&&u.log(Q(K(t.micro,"trivial micro-utilities"))),t.socket>0&&u.log(Q(K(t.socket,"@socketregistry overrides available")))},"displayOptimization"),Dr=C(e=>{u.log(""),u.log(ae("Supply Chain",e.supplyChain.status));for(const t of e.supplyChain.findings){const i=t.severity==="ok"?J(t.label):t.severity==="error"?Ve(t.label):Q(t.label);u.log(i),t.detail&&u.log(`  ${S(j.arrow)} ${S(t.detail)}`)}e.supplyChain.status!=="ok"&&u.log(`  ${S(j.arrow)} ${S("Configure with security.* in vis.config.ts. See `vis check --security-config` for details.")}`)},"displaySupplyChain"),Or=C(e=>{if(e.sections.has("runtime")){u.log(""),u.log(ae("Runtime",ne(e,"runtime")));for(const t of e.runtime)t.status==="ok"?u.log(J(t.message)):t.status==="skip"?u.log(Ct(t.message)):u.log(Q(t.message))}},"displayRuntime"),Nr=C((e,t)=>{const i=e.vulnCount,s=e.runtime.filter(l=>l.status==="warn").length,o=e.outdated.length+e.duplicates.length+e.optimizations.length+s;if(t){if(i===0&&o===0)u.success(`Everything looks good! ${S(`(${H(e.elapsedMs)})`)}`);else{const l=[];i>0&&l.push(Re(`${String(i)} security`)),o>0&&l.push(Fe(`${String(o)} improvement${o===1?"":"s"}`)),u.log(`${Re(j.failure)} ${l.join(", ")} ${S(`(${H(e.elapsedMs)})`)}`)}return}u.log(""),u.log(ae("Summary","ok")),i===0&&o===0?u.success(`Everything looks good! ${S(`(${H(e.elapsedMs)})`)}`):(i>0&&u.error(`${String(i)} security issue${i===1?"":"s"}`),o>0&&u.log(`  ${Te(j.arrow)} ${se(String(o))} ${S(`improvement${o===1?"":"s"} available`)} ${S(`(${H(e.elapsedMs)})`)}`))},"displaySummary"),Mr=C(e=>{const t=[];if(e.outdated.length>0&&t.push("vis update     — update outdated dependencies"),(e.vulnCount>0||e.socketIssues.alerts>0)&&t.push("vis audit      — detailed security analysis"),e.optimizations.length>0&&t.push("vis optimize   — apply optimizations interactively"),e.duplicates.length>0&&t.push("vis dedupe     — reduce duplicate versions"),t.length>0){u.log(""),u.log(se("Next steps:"));for(const i of t)u.log(`  ${S(j.arrow)} ${i}`)}u.log("")},"displayActions"),Fr=C((e,t)=>{t||(Ar(e),Ir(e),Pr(e),Or(e),Dr(e)),Nr(e,t)},"displayResults"),zr=C((e,t,i,s,o)=>{const l=[],d=e.has("dependencies"),p=e.has("security"),c=e.has("optimization");return(d||p)&&t>0&&l.push({id:"outdated",label:"Outdated catalog dependencies"}),p&&s>0&&l.push({id:"vulnerabilities",label:"Known vulnerabilities (OSV)"}),p&&i&&s>0&&l.push({id:"socket",label:"Socket.dev supply-chain reports"}),c&&o&&l.push({id:"codemods",label:"Codemod availability"}),l},"planScanTasks"),jr=C(e=>{if(u.log(""),u.log(`${se(Te("vis doctor"))} ${S("— project health check")}`),u.log(J(`Detected ${e.packageManagerName} v${e.packageManagerVersion}`)),e.workspaceCount!==void 0&&e.workspaceCount>0&&u.log(J(K(e.workspaceCount,`workspace package${e.workspaceCount===1?"":"s"}`))),e.runtimeFindings.length===0)u.log(J(`Node.js ${e.nodeVersion}`));else{for(const t of e.runtimeFindings){const i=t.severity==="error"?Re:Fe;u.log(Ve(`Runtime: ${i(t.message)}`))}u.log(`  ${S(j.arrow)} Run ${ke("vis toolchain install")} to install pinned versions, or ${ke("vis toolchain status")} for the per-tool breakdown.`)}u.log("")},"printBanner"),rn=C(async({logger:e,options:t,visConfig:i,visConfigError:s,workspaceRoot:o})=>{if(!o)throw new Error("Could not determine workspace root.");const l=t.format==="json"||t.json===!0,d=br(t.only,t.skip),p=!!t.quiet,c=!!t.noProgress,$=kr(t.filter);if(d.size===0){u.error("No sections selected. Check your --only / --skip values."),process.exitCode=2;return}const x=Date.now(),b=at(o),I=si(o),f=!!process.stdout.isTTY,w=!l&&f&&!_t&&!p&&!c;!l&&!w&&jr({nodeVersion:process.versions.node,packageManagerName:b.name,packageManagerVersion:b.version,runtimeFindings:I,workspaceCount:void 0});const E=ht(o,st(o).packageManager),Z=ai(o,b.name),q=Z.length,B=!!ct(i?.security?.socket),M=dt(o);if(!l&&!p&&!w){const O=M.length>0?S(` · ${String(M.length)} workspace package${M.length===1?"":"s"}`):"";u.log(`${S("·")} ${S("Found")} ${se(String(q))} ${S(`installed package${q===1?"":"s"}`)}${O}`)}const P=s?{hint:s.file?`Continuing with default settings — fix or regenerate ${s.file} (vis init --force).`:"Continuing with default settings.",message:s.message,severity:"error",title:s.file?`Failed to load ${s.file}`:"Failed to load vis.config"}:void 0,L={bun:"bun.lock",npm:"package-lock.json",pnpm:"pnpm-lock.yaml",yarn:"yarn.lock"}[b.name],X=L?le(o,L):void 0,ie=Zt(o),G=!t.noCache&&!t.fix?ki({configPath:ie,lockfilePath:X,sections:d,socketEnabled:B,workspaceRoot:o}):void 0,D=G?wi(G):void 0,V=D!==void 0;let Y,v;if(w){const O=D?new et({activeSections:d,findings:vt(yt(D),$)}):new et({activeSections:d}),W=Bt(Ut.createElement(gr,{banner:P,fromCache:V,startedAt:x,store:O}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0});try{Y=D??await ot({filterPatterns:$,installed:Z,resolveCodemods:!!t.fix,sections:d,store:O,visConfig:i,workspaceRoot:o})}catch(ee){throw W.unmount(),ee}await W.waitUntilExit(),v=O.getSnapshot().pendingAction}else if(D)Y=D;else{const O=zr(d,E.size,B,q,!!t.fix),W=ci(O,{live:!l&&!p&&!c});try{Y=await ot({filterPatterns:$,installed:Z,progress:W,resolveCodemods:!!t.fix,sections:d,visConfig:i,workspaceRoot:o})}finally{W.stop()}}const A={...Y,elapsedMs:Date.now()-x};if(G&&!V)try{vi(G,A)}catch{}const R=wr(A,$);if(l){process.stdout.write(`${JSON.stringify(Sr(R,b.name),void 0,2)}
-`),t.exitCode&&rt(R,!!t.strict)&&(process.exitCode=1);return}V&&!p&&u.log(`${S("·")} Cached results (use --no-cache to refresh)`),$.length>0&&!p&&u.log(`${S("·")} Filter active: ${Te(t.filter??"")}`),Fr(R,p);const U=R.runtime.some(O=>O.id===Oe&&O.status==="warn"),ce=R.sections.has("optimization")&&R.optimizations.length>0;t.fix&&(ce||U)?await Er({force:!!t.fixForce,logger:e,pm:b,recoverOrphans:U,results:R,workspaceRoot:o}):p||Mr(R),v&&(process.stdout.write(`
-`),process.stdout.write(`${se("→ ")}${v.description}
-`),v.configSnippet?(process.stdout.write(`
-`),process.stdout.write(`${S(v.configSnippet)}
-`)):process.stdout.write(`  ${Te(v.command)}
-`),process.stdout.write(`
-`)),t.exitCode&&rt(R,!!t.strict)&&(process.exitCode=1)},"execute"),Er=C(async e=>{const{force:t,logger:i,pm:s,recoverOrphans:o,results:l,workspaceRoot:d}=e;u.log(""),u.log(ae("Applying fixes","ok"));const p=l.optimizations.filter(f=>f.category==="socket"&&f.overrideSpec).map(f=>({original:f.packageName,spec:f.overrideSpec})),c=l.optimizations.filter(f=>f.category!=="socket"&&f.hasCodemod),$=l.optimizations.filter(f=>f.category!=="socket"&&!f.hasCodemod);let x=!1,b=0;const I=[];if(o){const f=Ri({force:t});if(f.killed.length>0&&(u.success(`Cleaned up ${String(f.killed.length)} orphaned process${f.killed.length===1?"":"es"} (PIDs: ${f.killed.join(", ")}).`),x=!0),f.failed.length>0){const w=t?"":" Re-run with `--fix --fix-force` to escalate to SIGKILL.";u.warn(`Could not signal ${String(f.failed.length)} orphan${f.failed.length===1?"":"s"}: ${f.failed.map(E=>`${String(E.pid)} (${E.reason})`).join(", ")}.${w}`)}}if(p.length>0){const f=ni(d,le(d,"package.json"),p,s);f.added.length>0&&(u.success(`Added ${String(f.added.length)} security override${f.added.length===1?"":"s"}.`),x=!0),f.updated.length>0&&(u.success(`Updated ${String(f.updated.length)} override${f.updated.length===1?"":"s"}.`),x=!0)}for(const f of c)try{const w=await oi(d,f.packageName);w.filesChanged>0&&(u.success(`${f.packageName}: ${String(w.filesChanged)} file${w.filesChanged===1?"":"s"} updated`),b+=1,x=!0)}catch(w){const E=w instanceof Error?w.message:String(w);I.push({error:E,package:f.packageName}),u.warn(`${f.packageName}: codemod failed — ${E}`)}p.length>0&&(u.log(`${Te(j.arrow)} Running ${s.name} install to update lockfile…`),Vt(s,{dev:!1,filter:[],force:!1,frozenLockfile:!1,ignoreScripts:!1,lockfileOnly:!1,noOptional:!1,offline:!1,prod:!1,recursive:!1,silent:!1,workspaceRoot:!1},d,i),x=!0),u.log(""),x?u.success(`Fixes applied. ${b>0?`${String(b)} codemod${b===1?"":"s"} applied.`:""}`.trim()):u.log(Ct("No auto-fixable items in the current run.")),I.length>0&&u.warn(`${String(I.length)} codemod${I.length===1?"":"s"} failed (run ${ke("vis optimize")} for the interactive picker).`),$.length>0&&u.notice(`${String($.length)} optimization${$.length===1?"":"s"} need manual review (no codemod). Run ${ke("vis optimize")} to inspect them.`)},"runFixes");export{rn as default};
+import { createRequire as __cjs_createRequire } from "node:module";
+
+const __cjs_require = __cjs_createRequire(import.meta.url);
+
+const __cjs_getProcess = typeof globalThis !== "undefined" && typeof globalThis.process !== "undefined" ? globalThis.process : process;
+
+const __cjs_getBuiltinModule = (module) => {
+    // Check if we're in Node.js and version supports getBuiltinModule
+    if (typeof __cjs_getProcess !== "undefined" && __cjs_getProcess.versions && __cjs_getProcess.versions.node) {
+        const [major, minor] = __cjs_getProcess.versions.node.split(".").map(Number);
+        // Node.js 20.16.0+ and 22.3.0+
+        if (major > 22 || (major === 22 && minor >= 3) || (major === 20 && minor >= 16)) {
+            return __cjs_getProcess.getBuiltinModule(module);
+        }
+    }
+    // Fallback to createRequire
+    return __cjs_require(module);
+};
+
+const {
+  writeFileSync: writeFileSync$1
+} = __cjs_getBuiltinModule("node:fs");
+import { getManifestData } from '@socketsecurity/registry';
+import { readFileSync, isAccessibleSync, writeFileSync, readJsonSync, glob } from '@visulima/fs';
+import { join, resolve } from '@visulima/path';
+import { Box, Text, ScrollView, ScrollBar, useApp, useWindowSize, useInput, render } from '@visulima/tui';
+import { _ as QuitDialog, c as detectPm, p as pail, x as runInstall, q as readPnpmWorkspacePatterns, o as resolveWorkspacePatterns, i as isInCi } from './bin.js';
+import microUtilitiesManifest from 'module-replacements/manifests/micro-utilities.json' with { type: 'json' };
+import nativeManifest from 'module-replacements/manifests/native.json' with { type: 'json' };
+import preferredManifest from 'module-replacements/manifests/preferred.json' with { type: 'json' };
+import React, { useSyncExternalStore, useRef, useState, useCallback } from 'react';
+import { coerce } from 'semver';
+import { readYamlSync } from '@visulima/fs/yaml';
+import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
+
+const DEP_FIELDS = ["dependencies", "devDependencies", "peerDependencies", "peerDependenciesMeta", "optionalDependencies", "bundleDependencies"];
+const OVERRIDE_FIELDS = ["overrides", "pnpm", "resolutions"];
+const AFTER_FIELDS = ["engines", "files"];
+const isPnpmV10Plus = (version) => {
+  const major = coerce(version)?.major;
+  return major !== void 0 && major >= 10;
+};
+const readPnpmWorkspaceOverrides = (workspaceRoot) => {
+  const filePath = join(workspaceRoot, "pnpm-workspace.yaml");
+  if (!isAccessibleSync(filePath)) {
+    return { overrides: {}, source: "pnpm-workspace.yaml" };
+  }
+  try {
+    const data = readYamlSync(filePath);
+    return { overrides: data?.overrides ?? {}, source: "pnpm-workspace.yaml" };
+  } catch {
+    return { overrides: {}, source: "pnpm-workspace.yaml" };
+  }
+};
+const readPkgJsonOverrides = (pkgJson, pm) => {
+  let overrides = {};
+  if (pm === "pnpm") {
+    overrides = pkgJson.pnpm?.overrides ?? {};
+  } else if (pm === "yarn" || pm === "bun") {
+    overrides = pkgJson.resolutions ?? {};
+  } else {
+    overrides = pkgJson.overrides ?? {};
+  }
+  return { overrides, source: "package.json" };
+};
+const readOverrides = (workspaceRoot, pkgJson, pm) => {
+  if (pm.name === "pnpm" && isPnpmV10Plus(pm.version)) {
+    return readPnpmWorkspaceOverrides(workspaceRoot);
+  }
+  return readPkgJsonOverrides(pkgJson, pm.name);
+};
+const findInsertIndex = (keys, field) => {
+  const simpleField = field;
+  for (const f of OVERRIDE_FIELDS) {
+    const index = keys.indexOf(f);
+    if (index !== -1 && f !== simpleField) {
+      return simpleField === "overrides" ? index : index + 1;
+    }
+  }
+  let highest = -1;
+  for (const f of DEP_FIELDS) {
+    const index = keys.indexOf(f);
+    if (index > highest) {
+      highest = index;
+    }
+  }
+  if (highest !== -1) {
+    return highest + 1;
+  }
+  for (const f of AFTER_FIELDS) {
+    const index = keys.indexOf(f);
+    if (index !== -1) {
+      return index;
+    }
+  }
+  return keys.length;
+};
+const detectIndent = (content) => {
+  const match = /\n(\s+)/.exec(content);
+  return match?.[1] ?? "  ";
+};
+const writePnpmWorkspaceOverrides = (workspaceRoot, sorted) => {
+  const filePath = join(workspaceRoot, "pnpm-workspace.yaml");
+  if (!isAccessibleSync(filePath)) {
+    throw new Error(`pnpm-workspace.yaml not found at ${filePath}. Cannot write overrides for pnpm v10+.`);
+  }
+  let content = readFileSync(filePath);
+  const overrideLines = Object.entries(sorted).map(([key, value]) => `  '${key}': '${value}'`).join("\n");
+  const overridesBlock = `overrides:
+${overrideLines}
+`;
+  content = /^overrides:\s*$/m.test(content) || /^overrides:\s*\n/m.test(content) ? content.replace(/^overrides:\s*\n(?:(?:[ \t].*)?\n)*/m, overridesBlock) : `${content.trimEnd()}
+
+${overridesBlock}`;
+  writeFileSync(filePath, content);
+};
+const writePkgJsonOverrides = (pkgJsonPath, pkgJson, sorted, pm) => {
+  const raw = readFileSync(pkgJsonPath);
+  const indent = detectIndent(raw);
+  if (pm === "pnpm") {
+    const pnpmObject = pkgJson.pnpm ?? {};
+    pnpmObject.overrides = sorted;
+    if (pkgJson.pnpm) {
+      pkgJson.pnpm = pnpmObject;
+      writeFileSync(pkgJsonPath, `${JSON.stringify(pkgJson, null, indent)}
+`);
+    } else {
+      const keys = Object.keys(pkgJson);
+      const index = findInsertIndex(keys, "pnpm");
+      const jsonEntries = Object.entries(pkgJson);
+      jsonEntries.splice(index, 0, ["pnpm", pnpmObject]);
+      writeFileSync(pkgJsonPath, `${JSON.stringify(Object.fromEntries(jsonEntries), null, indent)}
+`);
+    }
+  } else {
+    const field = pm === "yarn" || pm === "bun" ? "resolutions" : "overrides";
+    if (pkgJson[field]) {
+      pkgJson[field] = sorted;
+      writeFileSync(pkgJsonPath, `${JSON.stringify(pkgJson, null, indent)}
+`);
+    } else {
+      const keys = Object.keys(pkgJson);
+      const index = findInsertIndex(keys, field);
+      const jsonEntries = Object.entries(pkgJson);
+      jsonEntries.splice(index, 0, [field, sorted]);
+      writeFileSync(pkgJsonPath, `${JSON.stringify(Object.fromEntries(jsonEntries), null, indent)}
+`);
+    }
+  }
+};
+const applyOverrides = (workspaceRoot, pkgJsonPath, entries, pm) => {
+  const raw = readFileSync(pkgJsonPath);
+  const pkgJson = JSON.parse(raw);
+  const { overrides: existing, source } = readOverrides(workspaceRoot, pkgJson, pm);
+  const added = [];
+  const updated = [];
+  const directDeps = /* @__PURE__ */ new Set();
+  if (pm.name === "npm") {
+    for (const field of ["dependencies", "devDependencies"]) {
+      const deps = pkgJson[field];
+      if (deps) {
+        for (const name of Object.keys(deps)) {
+          directDeps.add(name);
+        }
+      }
+    }
+  }
+  for (const entry of entries) {
+    const oldSpec = existing[entry.original];
+    if (typeof oldSpec === "object") {
+      continue;
+    }
+    let newSpec = entry.spec;
+    if (pm.name === "npm" && directDeps.has(entry.original)) {
+      newSpec = `$${entry.original}`;
+    }
+    if (oldSpec === newSpec) {
+      continue;
+    }
+    if (oldSpec) {
+      updated.push(entry.original);
+    } else {
+      added.push(entry.original);
+    }
+    existing[entry.original] = newSpec;
+  }
+  if (added.length === 0 && updated.length === 0) {
+    return { added, updated };
+  }
+  const sorted = Object.fromEntries(Object.entries(existing).sort(([a], [b]) => a.localeCompare(b)));
+  if (source === "pnpm-workspace.yaml") {
+    writePnpmWorkspaceOverrides(workspaceRoot, sorted);
+  } else {
+    writePkgJsonOverrides(pkgJsonPath, pkgJson, sorted, pm.name);
+  }
+  return { added, updated };
+};
+const readLockfileText = (workspaceRoot, pm) => {
+  const lockfileNames = {
+    bun: ["bun.lock"],
+    npm: ["npm-shrinkwrap.json", "package-lock.json"],
+    pnpm: ["pnpm-lock.yaml"],
+    yarn: ["yarn.lock"]
+  };
+  for (const name of lockfileNames[pm] ?? []) {
+    const filePath = join(workspaceRoot, name);
+    try {
+      return readFileSync(filePath);
+    } catch {
+      continue;
+    }
+  }
+  return "";
+};
+const lockfileContainsPackage = (lockText, packageName, pm) => {
+  if (!lockText) {
+    return false;
+  }
+  const escaped = packageName.replaceAll(/[.*+?^${}()|[\]\\]/g, String.raw`\$&`);
+  switch (pm) {
+    case "bun": {
+      return lockText.includes(`"${packageName}":`) || new RegExp(String.raw`(^|\s|[",])${escaped}@`, "m").test(lockText);
+    }
+    case "npm": {
+      return lockText.includes(`"${packageName}":`) || lockText.includes(`"node_modules/${packageName}":`);
+    }
+    case "pnpm": {
+      return new RegExp(String.raw`(^|\s|['"/])${escaped}(@|['"]?:)`, "m").test(lockText);
+    }
+    case "yarn": {
+      return new RegExp(String.raw`(^|\s|[",])${escaped}@`, "m").test(lockText);
+    }
+    default: {
+      return false;
+    }
+  }
+};
+
+const filterEntries = (entries, filterType, filterText) => {
+  let filtered = entries;
+  if (filterType !== "all") {
+    filtered = filtered.filter((e) => e.category === filterType);
+  }
+  if (filterText) {
+    const lower = filterText.toLowerCase();
+    filtered = filtered.filter((e) => e.packageName.toLowerCase().includes(lower));
+  }
+  return filtered;
+};
+class OptimizeStore {
+  #state;
+  #listeners = /* @__PURE__ */ new Set();
+  constructor(entries) {
+    this.#state = {
+      applyProgress: null,
+      checkedEntries: /* @__PURE__ */ new Set(),
+      entries,
+      error: null,
+      filterActive: false,
+      filterText: "",
+      filterType: "all",
+      focusedPanel: "list",
+      phase: "browsing",
+      selectedIndex: 0
+    };
+  }
+  getSnapshot = () => this.#state;
+  subscribe = (listener) => {
+    this.#listeners.add(listener);
+    return () => {
+      this.#listeners.delete(listener);
+    };
+  };
+  getFilteredEntries = () => filterEntries(this.#state.entries, this.#state.filterType, this.#state.filterText);
+  #notify() {
+    this.#state = { ...this.#state };
+    for (const listener of this.#listeners) {
+      listener();
+    }
+  }
+  select(index) {
+    const filtered = this.getFilteredEntries();
+    this.#state.selectedIndex = filtered.length === 0 ? -1 : Math.max(0, Math.min(index, filtered.length - 1));
+    this.#notify();
+  }
+  toggleCheck(packageName) {
+    const checked = new Set(this.#state.checkedEntries);
+    if (checked.has(packageName)) {
+      checked.delete(packageName);
+    } else {
+      checked.add(packageName);
+    }
+    this.#state.checkedEntries = checked;
+    this.#notify();
+  }
+  toggleAll() {
+    const filtered = this.getFilteredEntries();
+    const checked = new Set(this.#state.checkedEntries);
+    const allChecked = filtered.every((e) => checked.has(e.packageName));
+    if (allChecked) {
+      for (const e of filtered) {
+        checked.delete(e.packageName);
+      }
+    } else {
+      for (const e of filtered) {
+        checked.add(e.packageName);
+      }
+    }
+    this.#state.checkedEntries = checked;
+    this.#notify();
+  }
+  setFilter(type) {
+    this.#state.filterType = type;
+    this.#state.selectedIndex = 0;
+    this.#notify();
+  }
+  setFilterText(text) {
+    this.#state.filterText = text;
+    this.#state.selectedIndex = 0;
+    this.#notify();
+  }
+  setFilterActive(active) {
+    this.#state.filterActive = active;
+    this.#notify();
+  }
+  setFocusedPanel(panel) {
+    this.#state.focusedPanel = panel;
+    this.#notify();
+  }
+  setPhase(phase) {
+    this.#state.phase = phase;
+    this.#notify();
+  }
+  setProgress(current, total) {
+    this.#state.applyProgress = { current, total };
+    this.#notify();
+  }
+  setError(error) {
+    this.#state.error = error;
+    this.#state.phase = "error";
+    this.#notify();
+  }
+  getCheckedEntries() {
+    return this.#state.entries.filter((e) => this.#state.checkedEntries.has(e.packageName));
+  }
+}
+
+const CATEGORY_COLORS = {
+  "micro-utility": "gray",
+  native: "green",
+  preferred: "yellow",
+  socket: "cyan"
+};
+const CATEGORY_LABELS = {
+  "micro-utility": "MICRO",
+  native: "NATIVE",
+  preferred: "PREF",
+  socket: "SOCKET"
+};
+const CATEGORY_DESCRIPTIONS = {
+  "micro-utility": "Trivial utility package that can be replaced with inline code.",
+  native: "Polyfill for a native JS/Node.js API. Use the built-in instead.",
+  preferred: "A lighter or faster alternative package exists.",
+  socket: "Security-hardened replacement from Socket.dev's @socketregistry."
+};
+
+const OptimizeDetailPanel = ({ entry, focused, scrollRef }) => {
+  const borderColor = focused ? "white" : "gray";
+  if (!entry) {
+    return jsx(Box, { alignItems: "center", borderColor: "gray", borderStyle: "single", flexDirection: "column", flexGrow: 1, justifyContent: "center", children: jsx(Text, { dimColor: true, children: "No entry selected" }) });
+  }
+  const categoryColor = CATEGORY_COLORS[entry.category] ?? "gray";
+  return jsxs(Box, { borderColor, borderStyle: "single", flexDirection: "column", flexGrow: 1, children: [
+    jsx(Box, { flexShrink: 0, paddingTop: 1, paddingX: 2, children: jsx(Text, { bold: true, color: "white", children: entry.packageName }) }),
+    jsxs(ScrollView, { flexGrow: 1, flexShrink: 1, paddingX: 2, ref: scrollRef, scrollbar: true, scrollbarColor: "gray", children: [
+      jsx(Text, {}),
+      jsxs(Box, { children: [
+        jsx(Box, { width: 14, children: jsx(Text, { dimColor: true, children: "Category:" }) }),
+        jsx(Text, { bold: true, color: categoryColor, children: entry.category })
+      ] }),
+      jsxs(Box, { children: [
+        jsx(Box, { width: 14, children: jsx(Text, { dimColor: true, children: "Replace with:" }) }),
+        jsx(Text, { children: entry.replacement })
+      ] }),
+      entry.overrideSpec && jsxs(Box, { children: [
+        jsx(Box, { width: 14, children: jsx(Text, { dimColor: true, children: "Override:" }) }),
+        jsx(Text, { color: "cyan", children: entry.overrideSpec })
+      ] }),
+      jsxs(Box, { children: [
+        jsx(Box, { width: 14, children: jsx(Text, { dimColor: true, children: "Codemod:" }) }),
+        jsx(Text, { color: entry.hasCodemod ? "green" : "gray", children: entry.hasCodemod ? "available ⚙" : "not available" })
+      ] }),
+      jsxs(Box, { flexDirection: "column", marginTop: 1, children: [
+        jsx(Text, { dimColor: true, children: "── " }),
+        jsx(Text, { bold: true, color: "white", children: "DESCRIPTION" }),
+        jsx(Box, { marginTop: 1, paddingLeft: 2, children: jsx(Text, { children: CATEGORY_DESCRIPTIONS[entry.category] ?? "" }) })
+      ] }),
+      entry.category === "native" && jsxs(Box, { flexDirection: "column", marginTop: 1, children: [
+        jsx(Text, { dimColor: true, children: "── " }),
+        jsx(Text, { bold: true, color: "green", children: "ACTION" }),
+        jsx(Box, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: entry.hasCodemod ? jsxs(Fragment, { children: [
+          jsxs(Text, { color: "green", children: [
+            "✓",
+            " Codemod will rewrite imports to use native API."
+          ] }),
+          jsx(Text, { dimColor: true, children: " The package can then be removed from dependencies." })
+        ] }) : jsxs(Fragment, { children: [
+          jsxs(Text, { color: "yellow", children: [
+            "ℹ",
+            " No automated codemod available."
+          ] }),
+          jsx(Text, { dimColor: true, children: " Manual migration required — replace usage with native equivalent." })
+        ] }) })
+      ] }),
+      entry.category === "socket" && jsxs(Box, { flexDirection: "column", marginTop: 1, children: [
+        jsx(Text, { dimColor: true, children: "── " }),
+        jsx(Text, { bold: true, color: "cyan", children: "ACTION" }),
+        jsxs(Box, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: [
+          jsxs(Text, { color: "cyan", children: [
+            "✓",
+            " Override will redirect resolution to the hardened package."
+          ] }),
+          jsx(Text, { dimColor: true, children: " No source code changes needed — drop-in replacement." })
+        ] })
+      ] }),
+      (entry.category === "preferred" || entry.category === "micro-utility") && jsxs(Box, { flexDirection: "column", marginTop: 1, children: [
+        jsx(Text, { dimColor: true, children: "── " }),
+        jsx(Text, { bold: true, color: "yellow", children: "ACTION" }),
+        jsx(Box, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: entry.hasCodemod ? jsxs(Fragment, { children: [
+          jsxs(Text, { color: "green", children: [
+            "✓",
+            " Codemod will rewrite imports to the recommended alternative."
+          ] }),
+          jsx(Text, { dimColor: true, children: " The original package can then be removed from dependencies." })
+        ] }) : jsxs(Fragment, { children: [
+          jsxs(Text, { color: "yellow", children: [
+            "ℹ",
+            " Manual migration required."
+          ] }),
+          entry.docUrl ? jsx(Text, { dimColor: true, children: " Open the migration guide below for the recommended alternative and steps." }) : jsx(Text, { dimColor: true, children: " Consult the package's docs or the e18e module-replacements guide for an alternative." })
+        ] }) })
+      ] }),
+      jsxs(Box, { flexDirection: "column", marginTop: 1, children: [
+        jsx(Text, { dimColor: true, children: "── " }),
+        jsx(Text, { bold: true, color: "white", children: "LINKS" }),
+        jsxs(Box, { flexDirection: "column", marginTop: 1, paddingLeft: 2, children: [
+          jsxs(Text, { color: "cyan", underline: true, children: [
+            "https://npmx.dev/",
+            entry.packageName
+          ] }),
+          entry.docUrl && jsx(Text, { color: "cyan", underline: true, children: entry.docUrl })
+        ] })
+      ] })
+    ] })
+  ] });
+};
+
+const FILTER_LABELS = [
+  { key: "all", label: "All", shortcut: "1" },
+  { key: "native", label: "Native", shortcut: "2" },
+  { key: "preferred", label: "Preferred", shortcut: "3" },
+  { key: "micro-utility", label: "Micro", shortcut: "4" },
+  { key: "socket", label: "Socket", shortcut: "5" }
+];
+const EntryRow = ({ checked, entry, isSelected }) => {
+  const catColor = CATEGORY_COLORS[entry.category] ?? "white";
+  const catLabel = CATEGORY_LABELS[entry.category] ?? entry.category;
+  const checkbox = checked ? "☑" : "☐";
+  const codemodBadge = entry.hasCodemod ? "⚙" : " ";
+  return jsxs(Box, { flexShrink: 0, height: 1, children: [
+    jsx(Text, { children: isSelected ? ">" : " " }),
+    jsxs(Text, { color: checked ? "white" : "gray", children: [
+      " ",
+      checkbox,
+      " "
+    ] }),
+    jsx(Text, { bold: true, color: catColor, children: `[${catLabel}]`.padEnd(9) }),
+    jsxs(Text, { children: [
+      " ",
+      codemodBadge,
+      " "
+    ] }),
+    jsx(Box, { flexGrow: 1, children: jsx(Text, { bold: isSelected, inverse: isSelected, wrap: "truncate", children: entry.packageName }) }),
+    jsx(Text, { dimColor: true, children: " → " }),
+    jsx(Text, { wrap: "truncate", children: entry.replacement })
+  ] });
+};
+const OptimizeListPanel = ({
+  checkedEntries,
+  entries,
+  filterActive,
+  filterText,
+  filterType,
+  focused,
+  isDryRun,
+  scrollOffset,
+  selectedIndex,
+  totalEntries,
+  viewportHeight
+}) => {
+  const borderColor = focused ? "white" : "gray";
+  let nativeCount = 0;
+  let preferredCount = 0;
+  let microCount = 0;
+  let socketCount = 0;
+  for (const e of entries) {
+    switch (e.category) {
+      case "micro-utility": {
+        microCount++;
+        break;
+      }
+      case "native": {
+        nativeCount++;
+        break;
+      }
+      case "preferred": {
+        preferredCount++;
+        break;
+      }
+      case "socket": {
+        {
+          socketCount++;
+        }
+        break;
+      }
+    }
+  }
+  const summaryParts = [];
+  if (nativeCount > 0) {
+    summaryParts.push(`${nativeCount} native`);
+  }
+  if (preferredCount > 0) {
+    summaryParts.push(`${preferredCount} preferred`);
+  }
+  if (microCount > 0) {
+    summaryParts.push(`${microCount} micro`);
+  }
+  if (socketCount > 0) {
+    summaryParts.push(`${socketCount} socket`);
+  }
+  const summaryText = summaryParts.length > 0 ? ` (${summaryParts.join(", ")})` : "";
+  const checkedCount = checkedEntries.size;
+  const rows = [];
+  for (const [index, entry] of entries.entries()) {
+    rows.push(jsx(EntryRow, { checked: checkedEntries.has(entry.packageName), entry, isSelected: index === selectedIndex }, entry.packageName));
+  }
+  const contentHeight = entries.length;
+  const showScrollbar = contentHeight > viewportHeight && viewportHeight > 0;
+  return jsxs(Box, { borderColor, borderStyle: "single", flexDirection: "column", flexGrow: 1, children: [
+    jsxs(Box, { flexShrink: 0, gap: 1, paddingX: 1, children: [
+      jsx(Text, { bold: true, inverse: true, children: " VIS OPTIMIZE " }),
+      jsxs(Text, { wrap: "truncate", children: [
+        totalEntries,
+        " optimizations",
+        summaryText
+      ] }),
+      !isDryRun && checkedCount > 0 && jsxs(Text, { dimColor: true, children: [
+        " —",
+        checkedCount,
+        " selected"
+      ] })
+    ] }),
+    jsx(Box, { flexShrink: 0, gap: 1, paddingX: 1, paddingY: 1, children: FILTER_LABELS.map((f) => {
+      const isActive = filterType === f.key;
+      return jsxs(Box, { children: [
+        jsx(Text, { dimColor: !isActive, children: "[" }),
+        jsx(Text, { bold: isActive, color: isActive ? "cyan" : "gray", children: f.shortcut }),
+        jsx(Text, { dimColor: !isActive, children: "]" }),
+        jsxs(Text, { color: isActive ? "white" : "gray", children: [
+          " ",
+          f.label
+        ] })
+      ] }, f.key);
+    }) }),
+    filterActive && jsxs(Box, { flexShrink: 0, paddingX: 1, children: [
+      jsx(Text, { bold: true, color: "white", children: "/ " }),
+      jsx(Text, { children: filterText }),
+      jsx(Text, { inverse: true, children: " " })
+    ] }),
+    jsxs(Box, { flexDirection: "row", flexGrow: 1, overflow: "hidden", children: [
+      jsx(Box, { flexDirection: "column", flexGrow: 1, overflow: "hidden", paddingLeft: 1, children: jsx(Box, { flexDirection: "column", marginTop: -scrollOffset, children: rows }) }),
+      showScrollbar && jsx(Box, { flexShrink: 0, marginLeft: 1, marginRight: 1, children: jsx(ScrollBar, { contentHeight, placement: "inset", scrollOffset, style: "block", viewportHeight }) })
+    ] })
+  ] });
+};
+
+const MIN_HORIZONTAL_WIDTH = 100;
+const MIN_VIEWPORT_HEIGHT = 10;
+const FILTER_KEYS = {
+  1: "all",
+  2: "native",
+  3: "preferred",
+  4: "micro-utility",
+  5: "socket"
+};
+const VisOptimizeApp = ({ isDryRun, store }) => {
+  const { exit } = useApp();
+  const { columns, rows } = useWindowSize();
+  const state = useSyncExternalStore(store.subscribe, store.getSnapshot);
+  const detailScrollRef = useRef(null);
+  const [listScrollOffset, setListScrollOffset] = useState(0);
+  const [quitDialogVisible, setQuitDialogVisible] = useState(false);
+  const filteredEntries = store.getFilteredEntries();
+  const selectedEntry = filteredEntries[state.selectedIndex] ?? null;
+  const isHorizontal = columns >= MIN_HORIZONTAL_WIDTH;
+  const headerHeight = 5;
+  const viewportHeight = Math.max(0, rows - headerHeight);
+  const handleExit = useCallback(
+    (result) => {
+      exit(result);
+    },
+    [exit]
+  );
+  useInput(
+    (input, key) => {
+      if (quitDialogVisible) {
+        if (input === "y" || input === "Y") {
+          handleExit();
+        } else {
+          setQuitDialogVisible(false);
+        }
+        return;
+      }
+      if (state.filterActive) {
+        if (key.escape) {
+          store.setFilterActive(false);
+          store.setFilterText("");
+        } else if (key.return) {
+          store.setFilterActive(false);
+        } else if (key.backspace || key.delete) {
+          store.setFilterText(state.filterText.slice(0, -1));
+        } else if (input && !key.ctrl && !key.meta) {
+          store.setFilterText(state.filterText + input);
+        }
+        return;
+      }
+      if (input === "q") {
+        if (!isDryRun && state.checkedEntries.size > 0) {
+          setQuitDialogVisible(true);
+        } else {
+          handleExit();
+        }
+        return;
+      }
+      if (input === "/") {
+        store.setFilterActive(true);
+        return;
+      }
+      if (FILTER_KEYS[input]) {
+        store.setFilter(FILTER_KEYS[input]);
+        return;
+      }
+      if (key.tab) {
+        store.setFocusedPanel(state.focusedPanel === "list" ? "detail" : "list");
+        return;
+      }
+      if (state.focusedPanel === "list") {
+        if (key.upArrow || input === "k") {
+          const newIndex = Math.max(0, state.selectedIndex - 1);
+          store.select(newIndex);
+          if (newIndex < listScrollOffset) {
+            setListScrollOffset(newIndex);
+          }
+        } else if (key.downArrow || input === "j") {
+          const newIndex = Math.min(filteredEntries.length - 1, state.selectedIndex + 1);
+          store.select(newIndex);
+          if (newIndex >= listScrollOffset + viewportHeight) {
+            setListScrollOffset(newIndex - viewportHeight + 1);
+          }
+        } else if (input === " ") {
+          if (selectedEntry) {
+            store.toggleCheck(selectedEntry.packageName);
+          }
+        } else if (input === "a") {
+          store.toggleAll();
+        } else if (key.return && !isDryRun && state.checkedEntries.size > 0) {
+          handleExit(store.getCheckedEntries());
+        }
+      } else if (state.focusedPanel === "detail") {
+        if (key.upArrow || input === "k") {
+          detailScrollRef.current?.scrollBy(-1);
+        } else if (key.downArrow || input === "j") {
+          detailScrollRef.current?.scrollBy(1);
+        }
+      }
+    },
+    { isActive: state.phase === "browsing" }
+  );
+  if (rows < MIN_VIEWPORT_HEIGHT) {
+    return jsx(Box, { alignItems: "center", justifyContent: "center", children: jsxs(Text, { color: "yellow", children: [
+      "Terminal too small. Resize to at least",
+      MIN_VIEWPORT_HEIGHT,
+      " rows."
+    ] }) });
+  }
+  return jsxs(Box, { flexDirection: "column", height: rows, width: columns, children: [
+    jsxs(Box, { flexDirection: isHorizontal ? "row" : "column", flexGrow: 1, children: [
+      jsx(Box, { flexBasis: isHorizontal ? "50%" : void 0, flexGrow: 1, children: jsx(
+        OptimizeListPanel,
+        {
+          checkedEntries: state.checkedEntries,
+          entries: filteredEntries,
+          filterActive: state.filterActive,
+          filterText: state.filterText,
+          filterType: state.filterType,
+          focused: state.focusedPanel === "list",
+          isDryRun,
+          scrollOffset: listScrollOffset,
+          selectedIndex: state.selectedIndex,
+          totalEntries: state.entries.length,
+          viewportHeight
+        }
+      ) }),
+      jsx(Box, { flexBasis: isHorizontal ? "50%" : void 0, flexGrow: 1, children: jsx(OptimizeDetailPanel, { entry: selectedEntry, focused: state.focusedPanel === "detail", scrollRef: detailScrollRef }) })
+    ] }),
+    jsx(Box, { flexShrink: 0, paddingX: 1, children: jsxs(Text, { dimColor: true, children: [
+      isDryRun ? "Preview mode" : "space:toggle a:all enter:apply",
+      " | tab:switch panel /: filter q:quit |",
+      "⚙",
+      "=codemod available"
+    ] }) }),
+    jsx(
+      QuitDialog,
+      {
+        autoExitSeconds: 3,
+        onCancel: () => {
+          setQuitDialogVisible(false);
+        },
+        visible: quitDialogVisible
+      }
+    )
+  ] });
+};
+
+const collectDepsFromPkgJson = (pkgJsonPath, productionOnly) => {
+  const deps = /* @__PURE__ */ new Set();
+  try {
+    const pkg = readJsonSync(pkgJsonPath);
+    const maps = productionOnly ? [pkg.dependencies, pkg.optionalDependencies] : [pkg.dependencies, pkg.devDependencies, pkg.peerDependencies, pkg.optionalDependencies];
+    for (const depMap of maps) {
+      if (depMap) {
+        for (const name of Object.keys(depMap)) {
+          deps.add(name);
+        }
+      }
+    }
+  } catch {
+  }
+  return deps;
+};
+const discoverWorkspacePackages = (workspaceRoot) => {
+  const pnpmPatterns = readPnpmWorkspacePatterns(workspaceRoot);
+  if (pnpmPatterns) {
+    return resolveWorkspacePatterns(workspaceRoot, pnpmPatterns);
+  }
+  const rootPkgPath = join(workspaceRoot, "package.json");
+  if (!isAccessibleSync(rootPkgPath)) {
+    return [];
+  }
+  try {
+    const pkg = readJsonSync(rootPkgPath);
+    const patterns = Array.isArray(pkg.workspaces) ? pkg.workspaces : pkg.workspaces?.packages;
+    return patterns ? resolveWorkspacePatterns(workspaceRoot, patterns) : [];
+  } catch {
+    return [];
+  }
+};
+const E18E_DOC_BASE_URL = "https://github.com/es-tooling/module-replacements/blob/main/docs/modules";
+const buildE18eDocUrl = (docPath) => `${E18E_DOC_BASE_URL}/${docPath}.md`;
+const e18eReplacementHint = (entry) => {
+  if (entry.type === "simple" && entry.replacement) {
+    return entry.replacement;
+  }
+  if (entry.type === "native") {
+    const minNode = entry.nodeVersion ? ` (Node ${entry.nodeVersion}+)` : "";
+    return entry.replacement ? `${entry.replacement}${minNode}` : `Native API${minNode}`;
+  }
+  if (entry.type === "documented" && entry.docPath) {
+    return "see migration guide";
+  }
+  return "";
+};
+const buildE18eEntries = (allDeps) => {
+  const entries = [];
+  const scanManifest = (manifest, category) => {
+    const list = manifest.moduleReplacements;
+    if (!Array.isArray(list)) {
+      return;
+    }
+    for (const entry of list) {
+      if (!allDeps.has(entry.moduleName)) {
+        continue;
+      }
+      entries.push({
+        category,
+        docUrl: entry.type === "documented" && entry.docPath ? buildE18eDocUrl(entry.docPath) : void 0,
+        hasCodemod: false,
+        // filled in below
+        overrideSpec: void 0,
+        packageName: entry.moduleName,
+        replacement: e18eReplacementHint(entry)
+      });
+    }
+  };
+  scanManifest(nativeManifest, "native");
+  scanManifest(preferredManifest, "preferred");
+  scanManifest(microUtilitiesManifest, "micro-utility");
+  return entries;
+};
+const buildSocketEntries = (allDeps, lockText, pm, pin) => {
+  const manifest = getManifestData("npm") ?? [];
+  const entries = [];
+  for (const [, data] of manifest) {
+    if (data.deprecated) {
+      continue;
+    }
+    const inDeps = allDeps.has(data.package);
+    const inLockfile = lockText ? lockfileContainsPackage(lockText, data.package, pm.name) : false;
+    if (!inDeps && !inLockfile) {
+      continue;
+    }
+    const major = coerce(data.version)?.major;
+    if (major === void 0) {
+      continue;
+    }
+    const spec = pin ? `npm:${data.name}@${data.version}` : `npm:${data.name}@^${String(major)}`;
+    entries.push({
+      category: "socket",
+      hasCodemod: false,
+      overrideSpec: spec,
+      packageName: data.package,
+      replacement: data.name
+    });
+  }
+  return entries;
+};
+let cachedCodemods;
+const loadCodemods = async () => {
+  if (cachedCodemods) {
+    return cachedCodemods;
+  }
+  try {
+    const module_ = await import('module-replacements-codemods');
+    cachedCodemods = module_.codemods;
+    return cachedCodemods;
+  } catch {
+    return {};
+  }
+};
+const markCodemodAvailability = async (entries) => {
+  try {
+    const codemods = await loadCodemods();
+    for (const entry of entries) {
+      if (entry.category !== "socket" && codemods[entry.packageName]) {
+        entry.hasCodemod = true;
+      }
+    }
+  } catch {
+  }
+};
+const runCodemod = async (workspaceRoot, packageName) => {
+  let filesChanged = 0;
+  try {
+    const codemods = await loadCodemods();
+    const factory = codemods[packageName];
+    if (!factory) {
+      return { filesChanged: 0, packageName };
+    }
+    const codemod = factory({});
+    const sourceFiles = await collectSourceFiles(workspaceRoot);
+    for (const filePath of sourceFiles) {
+      const source = readFileSync(filePath);
+      if (!source.includes(packageName)) {
+        continue;
+      }
+      try {
+        const result = await codemod.transform({ file: { filename: filePath, source } });
+        if (result !== source) {
+          writeFileSync$1(filePath, result, "utf8");
+          filesChanged++;
+        }
+      } catch (error) {
+        process.stderr.write(`warn: codemod transform failed for ${filePath}: ${error instanceof Error ? error.message : String(error)}
+`);
+      }
+    }
+  } catch {
+  }
+  return { filesChanged, packageName };
+};
+const collectSourceFiles = async (dir) => glob("**/*.{cjs,cts,js,jsx,mjs,mts,ts,tsx}", {
+  absolute: true,
+  cwd: dir,
+  // Matches the hand-rolled walker's SKIP set + "skip dotted
+  // entries" policy. `tinyglobby` (the engine) applies these as
+  // negative patterns during the walk so skipped subtrees are
+  // never descended into.
+  ignore: ["**/.*/**", "**/.*", "**/node_modules/**", "**/dist/**", "**/coverage/**", "**/.git/**", "**/.next/**", "**/.nuxt/**"]
+});
+const execute = async ({ logger, options, workspaceRoot: wsRoot }) => {
+  if (!wsRoot) {
+    throw new Error("Could not determine workspace root. Run this command inside a monorepo.");
+  }
+  const pm = detectPm(wsRoot);
+  const isDryRun = Boolean(options.dryRun);
+  const isProduction = Boolean(options.prod);
+  const isPin = Boolean(options.pin);
+  pail.info(`Detected ${pm.name} v${pm.version}.`);
+  const rootDeps = collectDepsFromPkgJson(join(wsRoot, "package.json"), isProduction);
+  const workspaceDirectories = discoverWorkspacePackages(wsRoot);
+  const allDeps = new Set(rootDeps);
+  for (const wsDir of workspaceDirectories) {
+    const wsDeps = collectDepsFromPkgJson(join(resolve(wsRoot, wsDir), "package.json"), isProduction);
+    for (const dep of wsDeps) {
+      allDeps.add(dep);
+    }
+  }
+  if (workspaceDirectories.length > 0) {
+    pail.info(`Scanned ${String(workspaceDirectories.length)} workspace package${workspaceDirectories.length === 1 ? "" : "s"}.`);
+  }
+  pail.info("Scanning dependencies...\n");
+  const lockText = readLockfileText(wsRoot, pm.name);
+  const e18eEntries = buildE18eEntries(allDeps);
+  const socketEntries = buildSocketEntries(allDeps, lockText, pm, isPin);
+  const e18ePackages = new Set(e18eEntries.map((e) => e.packageName));
+  const dedupedSocketEntries = socketEntries.filter((e) => !e18ePackages.has(e.packageName));
+  const allEntries = [...e18eEntries, ...dedupedSocketEntries];
+  await markCodemodAvailability(allEntries);
+  if (allEntries.length === 0) {
+    pail.info("No optimizations found for your dependencies.");
+    return;
+  }
+  const isTTY = Boolean(process.stdout.isTTY) && !isInCi;
+  const isJson = options.format === "json" || Boolean(options.json);
+  if (isTTY && !isDryRun && !isJson) {
+    const store = new OptimizeStore(allEntries);
+    const instance = render(React.createElement(VisOptimizeApp, { isDryRun: false, store }), {
+      alternateScreen: true,
+      exitOnCtrlC: false,
+      interactive: true,
+      patchConsole: true
+    });
+    const exitResult = await instance.waitUntilExit();
+    const selected = Array.isArray(exitResult) ? exitResult : [];
+    if (selected.length === 0) {
+      pail.info("No optimizations selected.");
+      return;
+    }
+    const selectedE18eWithCodemod = selected.filter((e) => e.category !== "socket" && e.hasCodemod);
+    const selectedE18eManual = selected.filter((e) => e.category !== "socket" && !e.hasCodemod);
+    const selectedSocket = selected.filter((e) => e.category === "socket");
+    if (selectedE18eWithCodemod.length > 0) {
+      pail.info(`
+Running ${String(selectedE18eWithCodemod.length)} codemod${selectedE18eWithCodemod.length === 1 ? "" : "s"}...
+`);
+      for (const entry of selectedE18eWithCodemod) {
+        const result = await runCodemod(wsRoot, entry.packageName);
+        if (result.filesChanged > 0) {
+          pail.success(`  ${entry.packageName}: ${String(result.filesChanged)} file${result.filesChanged === 1 ? "" : "s"} updated`);
+        } else {
+          pail.info(`  ${entry.packageName}: no files changed`);
+        }
+      }
+    }
+    if (selectedE18eManual.length > 0) {
+      pail.warn(
+        `
+${String(selectedE18eManual.length)} selected replacement${selectedE18eManual.length === 1 ? "" : "s"} require manual migration (no codemod available):`
+      );
+      for (const entry of selectedE18eManual) {
+        pail.info(`  ${entry.packageName} → ${entry.replacement}`);
+      }
+      pail.notice("  Replace usage in your source code, then remove from dependencies.");
+    }
+    if (selectedSocket.length > 0) {
+      const overrideEntries = selectedSocket.filter((e) => e.overrideSpec).map((e) => {
+        return { original: e.packageName, spec: e.overrideSpec };
+      });
+      const result = applyOverrides(wsRoot, join(wsRoot, "package.json"), overrideEntries, pm);
+      if (result.added.length > 0) {
+        pail.success(`
+Added ${String(result.added.length)} override${result.added.length === 1 ? "" : "s"}.`);
+      }
+      if (result.updated.length > 0) {
+        pail.success(`Updated ${String(result.updated.length)} override${result.updated.length === 1 ? "" : "s"}.`);
+      }
+    }
+    if (selectedSocket.length > 0 && !options.noInstall) {
+      pail.info(`
+Running ${pm.name} install to update lockfile...`);
+      const installOptions = {
+        dev: false,
+        filter: [],
+        force: false,
+        frozenLockfile: false,
+        ignoreScripts: false,
+        lockfileOnly: false,
+        noOptional: false,
+        offline: false,
+        prod: false,
+        recursive: false,
+        silent: false,
+        workspaceRoot: false
+      };
+      const code = runInstall(pm, installOptions, wsRoot, logger);
+      if (code !== 0) {
+        pail.warn(`${pm.name} install exited with code ${String(code)}. Run it manually.`);
+      }
+    }
+    pail.info("");
+    pail.success("Optimization complete.");
+    return;
+  }
+  if (isJson) {
+    process.stdout.write(
+      `${JSON.stringify(
+        {
+          e18e: e18eEntries.map((e) => {
+            return {
+              category: e.category,
+              hasCodemod: e.hasCodemod,
+              packageName: e.packageName,
+              replacement: e.replacement
+            };
+          }),
+          packageManager: pm.name,
+          socket: dedupedSocketEntries.map((e) => {
+            return { overrideSpec: e.overrideSpec, packageName: e.packageName, replacement: e.replacement };
+          }),
+          total: allEntries.length,
+          workspaces: workspaceDirectories.length
+        },
+        void 0,
+        2
+      )}
+`
+    );
+    return;
+  }
+  const natives = e18eEntries.filter((e) => e.category === "native");
+  const preferred = e18eEntries.filter((e) => e.category === "preferred");
+  const micros = e18eEntries.filter((e) => e.category === "micro-utility");
+  if (natives.length > 0) {
+    pail.info(`Native replacements (${String(natives.length)}):`);
+    for (const s of natives) {
+      pail.info(`  ${s.hasCodemod ? "⚙" : " "} ${s.packageName} → ${s.replacement}`);
+    }
+  }
+  if (preferred.length > 0) {
+    pail.info(`
+Preferred alternatives (${String(preferred.length)}):`);
+    for (const s of preferred) {
+      pail.info(`  ${s.hasCodemod ? "⚙" : " "} ${s.packageName} → ${s.replacement}`);
+    }
+  }
+  if (micros.length > 0) {
+    pail.info(`
+Micro-utilities (${String(micros.length)}):`);
+    for (const s of micros) {
+      pail.info(`  ${s.hasCodemod ? "⚙" : " "} ${s.packageName} → ${s.replacement}`);
+    }
+  }
+  if (dedupedSocketEntries.length > 0) {
+    pail.info(`
+Socket.dev overrides (${String(dedupedSocketEntries.length)}):`);
+    for (const s of dedupedSocketEntries) {
+      pail.info(`  ${s.packageName} → ${s.overrideSpec}`);
+    }
+  }
+  pail.info(`
+Total: ${String(allEntries.length)} optimizations available (⚙ = codemod available).`);
+  if (isDryRun) {
+    pail.notice("Run without --dry-run for interactive selection.");
+  }
+};
+
+const handler = /*#__PURE__*/Object.defineProperty({
+    __proto__: null,
+    buildE18eEntries,
+    buildSocketEntries,
+    collectDepsFromPkgJson,
+    default: execute,
+    discoverWorkspacePackages,
+    markCodemodAvailability,
+    runCodemod
+}, Symbol.toStringTag, { value: 'Module' });
+
+export { buildSocketEntries as a, buildE18eEntries as b, collectDepsFromPkgJson as c, discoverWorkspacePackages as d, applyOverrides as e, runCodemod as f, handler as h, markCodemodAvailability as m, readLockfileText as r };