@visulima/vis 1.0.0-alpha.10 → 1.0.0-alpha.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visulima/vis",
-  "version": "1.0.0-alpha.10",
+  "version": "1.0.0-alpha.11",
   "description": "A CLI task runner for monorepo workspaces, powered by @visulima/task-runner",
   "keywords": [
     "build",
@@ -45,8 +45,8 @@
   },
   "exports": {
     "./config": {
-      "types": "./dist/config.d.ts",
-      "default": "./dist/config.js"
+      "types": "./dist/config/index.d.ts",
+      "default": "./dist/config/index.js"
     },
     "./generate": {
       "types": "./dist/generate/index.d.ts",
@@ -67,6 +67,8 @@
   "files": [
     "dist/**",
     "schemas/**",
+    "skills/**",
+    "templates/**",
     "index.js",
     "index.d.ts",
     "README.md",
@@ -77,22 +79,22 @@
     "@bomb.sh/tab": "^0.0.15",
     "@socketsecurity/registry": "^2.0.2",
     "@visulima/ansi": "4.0.0-alpha.13",
-    "@visulima/cerebro": "3.0.0-alpha.13",
+    "@visulima/cerebro": "3.0.0-alpha.14",
     "@visulima/colorize": "2.0.0-alpha.10",
     "@visulima/find-ai-runner": "1.0.0-alpha.5",
     "@visulima/find-cache-dir": "3.0.0-alpha.9",
-    "@visulima/fs": "5.0.0-alpha.12",
+    "@visulima/fs": "5.0.0-alpha.13",
     "@visulima/humanizer": "3.0.0-alpha.11",
     "@visulima/interactive-manager": "1.0.0-alpha.2",
-    "@visulima/package": "5.0.0-alpha.11",
+    "@visulima/package": "5.0.0-alpha.12",
     "@visulima/pail": "4.0.0-alpha.12",
     "@visulima/path": "3.0.0-alpha.10",
     "@visulima/redact": "3.0.0-alpha.10",
     "@visulima/secret-scanner": "1.0.0-alpha.1",
     "@visulima/spinner": "1.0.0-alpha.1",
     "@visulima/string": "3.0.0-alpha.11",
-    "@visulima/task-runner": "1.0.0-alpha.8",
-    "@visulima/tui": "1.0.0-alpha.5",
+    "@visulima/task-runner": "1.0.0-alpha.9",
+    "@visulima/tui": "1.0.0-alpha.6",
     "execa": "^9.6.1",
     "giget": "^3.2.0",
     "hookable": "^6.1.1",
@@ -104,18 +106,34 @@
     "react-reconciler": ">=0.33.0",
     "semver": "^7.7.4",
     "smol-toml": "^1.6.1",
-    "yaml": "2.8.3",
+    "yaml": "2.8.4",
     "zeptomatch": "^2.1.0"
   },
+  "peerDependencies": {
+    "@gitbeaker/rest": ">=42.0.0",
+    "@octokit/rest": ">=21.0.0",
+    "@opentelemetry/api": "1.9.1"
+  },
+  "peerDependenciesMeta": {
+    "@gitbeaker/rest": {
+      "optional": true
+    },
+    "@octokit/rest": {
+      "optional": true
+    },
+    "@opentelemetry/api": {
+      "optional": true
+    }
+  },
   "optionalDependencies": {
-    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.10",
-    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.10",
-    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.10",
-    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.10",
-    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.10",
-    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.10",
-    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.10",
-    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.10"
+    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.11",
+    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.11",
+    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.11",
+    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.11",
+    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.11",
+    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.11",
+    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.11",
+    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.11"
   },
   "engines": {
     "node": "^22.14.0 || >=24.10.0"

package/schemas/project.schema.json

@@ -125,10 +125,10 @@
                 },
                 "inputs": {
                     "type": "array",
-                    "description": "Input patterns for cache invalidation. Supports file globs, @filegroup:<name> references, and structured input definitions.",
+                    "description": "Input patterns for cache invalidation. Strings may be bare globs (\"src/**/*.ts\"), @filegroup:<name> references, named-input refs, or URI form: file://path, glob://pattern, env://NAME, func://command, dep://pkg-a,pkg-b. Object form is also accepted for explicit fileset/env/runtime/externalDependencies.",
                     "items": {
                         "oneOf": [
-                            { "type": "string" },
+                            { "$ref": "#/$defs/inputString" },
                             { "$ref": "#/$defs/fileSetInput" },
                             { "$ref": "#/$defs/environmentInput" },
                             { "$ref": "#/$defs/runtimeInput" },
@@ -294,6 +294,10 @@
                 }
             }
         },
+        "inputString": {
+            "type": "string",
+            "description": "Input pattern. Bare globs (\"src/**/*.ts\"), @filegroup:<name>/named-input refs, or URI form: file://path | glob://pattern | env://NAME | func://command | dep://pkg-a,pkg-b. Negation (\"!\") works for fileset forms (file://, glob://, bare globs)."
+        },
         "fileSetInput": {
             "type": "object",
             "required": ["fileset"],
@@ -358,10 +362,7 @@
             ]
         },
         "envMatcherList": {
-            "oneOf": [
-                { "$ref": "#/$defs/envMatcher" },
-                { "type": "array", "items": { "$ref": "#/$defs/envMatcher" } }
-            ]
+            "oneOf": [{ "$ref": "#/$defs/envMatcher" }, { "type": "array", "items": { "$ref": "#/$defs/envMatcher" } }]
         },
         "platformList": {
             "oneOf": [
@@ -379,10 +380,7 @@
             ]
         },
         "branchList": {
-            "oneOf": [
-                { "type": "string" },
-                { "type": "array", "items": { "type": "string" } }
-            ]
+            "oneOf": [{ "type": "string" }, { "type": "array", "items": { "type": "string" } }]
         },
         "whenCondition": {
             "type": "object",

package/schemas/vis-config.schema.json

@@ -105,6 +105,58 @@
                 }
             }
         },
+        "inferTargets": {
+            "default": false,
+            "oneOf": [
+                { "type": "boolean" },
+                {
+                    "type": "object",
+                    "description": "Per-detector opt-out map. Keys must be one of the 36 built-in detector names; set a key to `false` to disable that detector. Detectors omitted from the object stay enabled. Unknown keys log a warning at config-load time.",
+                    "additionalProperties": { "type": "boolean" },
+                    "propertyNames": {
+                        "enum": [
+                            "nuxt",
+                            "next",
+                            "remix",
+                            "astro",
+                            "gatsby",
+                            "docusaurus",
+                            "vite",
+                            "vitepress",
+                            "nest",
+                            "rolldown",
+                            "tsdown",
+                            "tsup",
+                            "packem",
+                            "rollup",
+                            "webpack",
+                            "vitest",
+                            "jest",
+                            "bun",
+                            "playwright",
+                            "cypress",
+                            "storybook",
+                            "typescript",
+                            "typedoc",
+                            "eslint",
+                            "prettier",
+                            "biome",
+                            "oxlint",
+                            "oxfmt",
+                            "stylelint",
+                            "knip",
+                            "deno",
+                            "prisma",
+                            "drizzle",
+                            "graphql-codegen",
+                            "api-extractor",
+                            "changeset"
+                        ]
+                    }
+                }
+            ],
+            "description": "Project Crystal-style inference. Synthesizes default targets (`build`, `test`, `dev`, `lint`, `format`, `typecheck`, `docs`, `db:*`, …) for each project by sniffing config files and `package.json` dependencies. Ships with 36 detectors covering app frameworks (nuxt, next, remix, astro, gatsby, docusaurus), bundlers (vite, rolldown, tsdown, tsup, packem, rollup, webpack), test runners (vitest, jest, bun, deno, playwright, cypress), lint/format tools (eslint, prettier, biome, oxlint, oxfmt, stylelint, knip), docs (typedoc, vitepress), DB tooling (prisma, drizzle), and release plumbing (graphql-codegen, api-extractor, changeset). Inferred targets are the lowest-priority layer — package.json scripts, project.json, and vis.task.ts always win on a per-target-name basis. Boolean `true` enables every detector; the object form opts individual detectors in or out by name. See `vis list --inferred` to inspect what each project resolves to."
+        },
         "create": {
             "type": "object",
             "description": "Configuration for vis create scaffolding command.",
@@ -132,6 +184,18 @@
             "description": "Package override mappings applied during migration.",
             "additionalProperties": { "type": "string" }
         },
+        "preflight": {
+            "type": "object",
+            "description": "Preflight checks gating `vis run` / `vis ci`. Each check can be opted out individually; the CLI flag `--no-preflight` disables them all.",
+            "additionalProperties": false,
+            "properties": {
+                "lockfile": {
+                    "type": "boolean",
+                    "default": true,
+                    "description": "Detect lockfile drift by comparing the lockfile mtime against the package manager's install marker (e.g. `node_modules/.modules.yaml` for pnpm). When the lockfile is newer than the marker, the run fails with the right reinstall command for CI vs TTY."
+                }
+            }
+        },
         "security": {
             "type": "object",
             "description": "Supply-chain security settings.",
@@ -239,10 +303,10 @@
         },
         "fileGroups": {
             "type": "object",
-            "description": "Named file-group patterns, reusable via @filegroup:<name> in target inputs.",
+            "description": "Named file-group patterns, reusable via @filegroup:<name> in target inputs. Strings may be bare globs or URI form (file://, glob://, env://, func://, dep://).",
             "additionalProperties": {
                 "type": "array",
-                "items": { "type": "string" }
+                "items": { "$ref": "project.schema.json#/$defs/inputString" }
             }
         },
         "namedInputs": {
@@ -252,7 +316,7 @@
                 "type": "array",
                 "items": {
                     "oneOf": [
-                        { "type": "string" },
+                        { "$ref": "project.schema.json#/$defs/inputString" },
                         { "$ref": "project.schema.json#/$defs/fileSetInput" },
                         { "$ref": "project.schema.json#/$defs/environmentInput" },
                         { "$ref": "project.schema.json#/$defs/runtimeInput" },
@@ -326,11 +390,71 @@
                     "required": ["url"],
                     "additionalProperties": false,
                     "properties": {
-                        "url": { "type": "string" },
-                        "token": { "type": "string" },
-                        "teamId": { "type": "string" },
-                        "read": { "type": "boolean", "default": true },
-                        "write": { "type": "boolean", "default": true }
+                        "url": {
+                            "type": "string",
+                            "description": "Cache server URL. HTTP: 'https://cache.example.com'. REAPI: 'grpcs://host:port' (TLS) or 'grpc://host:port' (cleartext)."
+                        },
+                        "backend": {
+                            "type": "string",
+                            "enum": ["http", "reapi"],
+                            "default": "http",
+                            "description": "Wire-protocol selector. 'http' is Turborepo-compatible; 'reapi' speaks the Bazel Remote Execution API over gRPC (bazel-remote, BuildBuddy, BuildBarn, EngFlow)."
+                        },
+                        "mode": {
+                            "type": "string",
+                            "enum": ["read", "readwrite", "write"],
+                            "default": "readwrite",
+                            "description": "Cache mode. 'read' pulls only, 'write' pushes only, 'readwrite' does both."
+                        },
+                        "token": {
+                            "type": "string",
+                            "description": "HTTP backend bearer token sent as 'Authorization: Bearer …'. For REAPI, use 'bearerToken' instead."
+                        },
+                        "teamId": { "type": "string", "description": "Team / namespace for cache isolation." },
+                        "timeout": { "type": "number", "default": 30000, "description": "Per-call request timeout in milliseconds." },
+                        "compression": {
+                            "type": "string",
+                            "enum": ["gzip", "brotli"],
+                            "default": "gzip",
+                            "description": "HTTP-only: tarball compression on the wire."
+                        },
+                        "signing": {
+                            "type": "object",
+                            "additionalProperties": false,
+                            "required": ["secret"],
+                            "description": "HTTP-only HMAC-SHA256 signing for upload integrity.",
+                            "properties": {
+                                "secret": { "type": "string", "minLength": 16, "description": "Shared secret. Must be at least 16 characters." },
+                                "verifyOnDownload": { "type": "boolean", "default": false, "description": "Reject downloads whose signature doesn't match." }
+                            }
+                        },
+                        "localCasRoot": {
+                            "type": "string",
+                            "description": "Local CAS root used by per-blob backend methods. The HTTP bridge extracts retrieved tarballs into this root so follow-up fetchBlob calls hit local disk."
+                        },
+                        "bearerToken": {
+                            "type": "string",
+                            "description": "REAPI-only: bearer token sent in gRPC 'authorization: Bearer …' metadata."
+                        },
+                        "instanceName": {
+                            "type": "string",
+                            "description": "REAPI-only: 'instance_name' for multi-tenant servers (single gRPC endpoint hosting multiple logical caches)."
+                        },
+                        "allowInsecureBearer": {
+                            "type": "boolean",
+                            "default": false,
+                            "description": "REAPI-only: opt out of the safety check that refuses bearer tokens over cleartext gRPC. Only set when the connection terminates inside a trusted boundary (loopback, mTLS sidecar)."
+                        },
+                        "read": {
+                            "type": "boolean",
+                            "deprecated": true,
+                            "description": "Deprecated. Use 'mode' instead. Setting both still works but emits a one-time warning."
+                        },
+                        "write": {
+                            "type": "boolean",
+                            "deprecated": true,
+                            "description": "Deprecated. Use 'mode' instead. Setting both still works but emits a one-time warning."
+                        }
                     }
                 }
             }

package/skills/vis/SKILL.md

@@ -0,0 +1,96 @@
+---
+name: vis
+description: Use when the workspace contains a vis.config.ts (or vis.config.js/json) at the repo root, or when the user mentions "vis", "task-runner", or "@visulima/vis". This skill orchestrates the vis MCP server's eight read-only tools to inspect projects, plan task graphs, and diagnose remote-cache rotations.
+---
+
+# Working with the `vis` task runner
+
+`vis` is the Visulima monorepo task runner — a Turborepo/Nx-class tool with a remote cache, REAPI gRPC backend, and project graph. When this skill is active you have the **`@visulima/vis-mcp` server** mounted, exposing eight read-only tools. Use them in preference to running `vis` shell commands yourself: the tools give you structured JSON and run faster.
+
+The MCP server deliberately does NOT execute targets or scaffold templates — Nx-style "agent prepares, human executes". When the user wants to run `<project>:<target>` or `vis generate <template>`, prepare the command (use `list_targets`/`describe_template` to confirm it exists and capture required arguments) and ask the user to run it themselves; afterwards use `get_run_logs` to read the result of any task run.
+
+## Tools available
+
+| Tool                | Purpose                                                                                                                           |
+| ------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| `list_projects`     | All projects in the workspace, optionally filtered by a vis query (`tag=frontend`, `type=application`, …)                         |
+| `describe_project`  | Full metadata for one project: language, layer, tags, root path, all targets                                                      |
+| `list_targets`      | Per-target rows across the workspace, optionally narrowed to a single project                                                     |
+| `list_templates`    | Scaffolding templates discovered in `.vis/templates/`, `.moon/templates/`, and `vis.config.ts` `generator.templates`              |
+| `describe_template` | Variable schema, default destination, and description for a single template — required before suggesting a `vis generate` command |
+| `get_run_logs`      | Most recent run summary from `.task-runner/`, or a specific `runId`, optionally filtered to one task                              |
+| `cache_why`         | Diff a task's cache hash against the previous run — pinpoints what changed (command, nodes, runtime, implicit deps)               |
+| `cache_hash`        | Recorded hash and per-input hash details for a task                                                                               |
+
+## Workflow patterns
+
+### Discovery — "what's in this repo?"
+
+Default opening move when the user asks about the workspace:
+
+1. `list_projects` (no filter). Shows everything with categories and target counts.
+2. If they ask about a specific package, `describe_project` for the full picture rather than re-running list with a filter.
+
+### Plan a build
+
+1. `list_targets` (optionally with `project: "@scope/name"`) to see what `build`/`test`/`lint`/etc. targets exist.
+2. Tell the user the exact command (`vis run @scope/name:build`) and let them run it.
+3. Use `get_run_logs` afterwards to inspect status, cache hits, and stderr tails.
+
+### Investigate a cache miss
+
+When a build that should have been cached re-ran:
+
+1. `get_run_logs` (no args → latest summary) — surfaces all task statuses for the last run.
+2. For any task with status `success` but `cacheStatus: "miss"`, call `cache_why` with that `taskId`. It diffs hashDetails against the previous run and tells you which input rotated (command string, file content, `implicitDependency`, runtime version, …).
+3. If `cache_why` shows the change but the user wants to see the raw hash inputs, `cache_hash` returns the full per-input breakdown.
+
+### Scaffold a new package or component
+
+When the user asks for "a new X" / "scaffold Y":
+
+1. `list_templates` — pick the template whose `name` or `description` matches the user's request.
+2. `describe_template` with that name — read the `variables[]` schema. Identify which variables are `required` and which have sensible `default` values.
+3. Construct the command: `vis generate <name> -- --var1=value1 --var2=value2`. For interactive prompts, drop the `--` overrides and let the user step through. For `--defaults`-friendly templates, add `--defaults` to skip prompts.
+4. Hand the command to the user to execute. Don't fabricate variable values — if the user hasn't told you what to pass for a required variable, ask.
+
+#### Worked example
+
+User: _"Scaffold a new React button component called PrimaryButton."_
+
+1. Call `list_templates` → response contains an entry `{ "name": "component", "source": "native", "description": "Scaffold a React component" }`. That's the closest match.
+2. Call `describe_template` with `{ "name": "component" }` → response shows `variables`:
+    ```json
+    [
+        { "name": "name", "type": "string", "required": true, "prompt": "Component name?" },
+        { "name": "withTest", "type": "boolean", "required": false, "default": true },
+        { "name": "style", "type": "enum", "required": false, "default": "primary", "values": ["primary", "secondary"] }
+    ]
+    ```
+3. The user supplied `name` (`PrimaryButton`) and implied `style=primary` (default already matches). `withTest` is unspecified — the default is fine, no need to override.
+4. Suggested command for the user to run:
+    ```sh
+    vis generate component -- --name=PrimaryButton --style=primary
+    ```
+    Do **not** invent values for required variables the user never mentioned — ask first.
+
+### Diagnose a failed run
+
+1. `get_run_logs` to see which task(s) failed.
+2. `get_run_logs` with `taskId` set to the failing task — returns just that entry, including the captured stderr tail.
+3. Decide: is it a code bug (read the project's source), a cache poisoning issue (`cache_why`), or environmental (look at the run summary's `runtime` block)?
+
+## Safety rules
+
+- **All tools are read-only.** The server does not execute targets. If the user wants something built/tested/linted, give them the command and let them run it.
+- **All tools run in the directory where `vis-mcp` was launched.** Override at server startup by setting `VIS_MCP_WORKSPACE_ROOT`. You can read that path from the server's stderr boot line: `[vis-mcp] ready (workspace: …)`.
+
+## When NOT to use this skill
+
+- The user wants to write a `vis.config.ts` — that's editing source, not running the CLI. Use Read/Edit/Write on the config file directly.
+- The user is asking about Turborepo, Nx, or Bazel specifically (not vis). The tools won't help with those.
+- The repo has no `vis.config.*` and no mention of vis. Don't volunteer the tools.
+
+## Tool-result conventions
+
+All tools return JSON-encoded text in the standard MCP `content[].text` slot. On error, `isError: true` is set and the text payload is `{"error": "<message>"}`. Parse the JSON before reasoning about it — the text field is structured data, not prose.

package/templates/buildkite-ci/.buildkite/pipeline.yml.tera

@@ -0,0 +1,85 @@
+---
+to: ".buildkite/pipeline.yml"
+---
+# Generated by `vis generate buildkite-ci`.
+# Run `vis ci` against affected packages on every build.{% if withHeal %}
+# Heal block: on failure, `vis ai heal` posts a Buildkite annotation; an
+# allow-listed maintainer manually unblocks the block step to apply +
+# commit the patch via `vis ai heal accept`. The unblocker email
+# (BUILDKITE_UNBLOCKER_EMAIL) must be listed in `ai.heal.allowedActors`
+# in vis.config.ts or the accept step refuses to commit.{% endif %}
+
+steps:
+    - label: ":hammer: vis ci"
+      key: ci
+      timeout_in_minutes: 30
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ci {{ targets }}
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ci {{ targets }}
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ci {{ targets }}
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ci {{ targets }}
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+{% if withHeal %}
+    - label: ":sparkles: vis ai heal"
+      key: heal-propose
+      depends_on: ci
+      timeout_in_minutes: 30
+      # Only run when CI failed and the build is for a PR — heal-accept
+      # has nowhere to commit on push-event builds.
+      if: build.failed_jobs > 0 && build.pull_request.id != null
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ai heal
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ai heal
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ai heal
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ai heal
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+      # Buildkite has no commit API of its own — `vis ai heal accept`
+      # derives the upstream provider from BUILDKITE_REPO and commits
+      # through GitHub or GitLab. Set GITHUB_TOKEN or GITLAB_TOKEN on
+      # the agent (matching your remote) so heal accept can land the patch.
+
+    - block: ":white_check_mark: Apply AI heal patch?"
+      key: heal-gate
+      depends_on: heal-propose
+      if: build.failed_jobs > 0 && build.pull_request.id != null
+      prompt: |
+          Unblocking applies and commits the patch from the heal annotation.
+          The unblocker email (BUILDKITE_UNBLOCKER_EMAIL) must be listed in
+          `ai.heal.allowedActors` in vis.config.ts, otherwise the accept
+          step will refuse to commit.
+
+    - label: ":robot_face: vis ai heal accept"
+      key: heal-accept
+      depends_on: heal-gate
+      timeout_in_minutes: 30
+      # Defense in depth — heal-accept can't push to a fork and has no
+      # commit target on push-event builds. Refuse early.
+      if: build.pull_request.id != null
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ai heal accept
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ai heal accept
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ai heal accept
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ai heal accept
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+{% endif %}

package/templates/buildkite-ci/template.yml

@@ -0,0 +1,20 @@
+title: Buildkite CI
+description: A Buildkite pipeline.yml that runs `vis ci` against affected packages, with an optional `vis ai heal` block-step flow.
+variables:
+    targets:
+        type: string
+        default: "lint,test,build"
+        prompt: Comma-separated list of `vis ci` targets to run
+    packageManager:
+        type: enum
+        values: [pnpm, npm, yarn, bun]
+        default: pnpm
+        prompt: Package manager (used in the install line)
+    withHeal:
+        type: boolean
+        default: false
+        prompt: Include the `vis ai heal` propose + block-step accept flow?
+    agentQueue:
+        type: string
+        default: default
+        prompt: Buildkite agent queue to schedule on

package/dist/errors/index.d.ts

@@ -1,26 +0,0 @@
-/**
-* Base class for all `vis.config.ts` / `vis.task.ts` loader failures.
-* Consumers switch on `instanceof VisConfigError` to distinguish loader
-* failures from arbitrary user-code exceptions thrown inside a config.
-*/
-declare class VisConfigError extends Error {
-  readonly chain: ReadonlyArray<string>;
-  constructor(message: string, chain: ReadonlyArray<string>, options?: ErrorOptions);
-}
-/** An `extends` chain re-enters a path that is still loading. */
-declare class VisConfigCycleError extends VisConfigError {
-  constructor(reentered: string, chain: ReadonlyArray<string>);
-}
-/**
-* Wraps any throw raised by jiti while compiling a `vis.config.ts` /
-* `vis.task.ts`. Without this wrapper a user's syntax error surfaces as
-* "TypeError in workspace.ts" — which sends them debugging the wrong file.
-*/
-declare class VisConfigLoadError extends VisConfigError {
-  constructor(filePath: string, chain: ReadonlyArray<string>, cause: unknown);
-}
-/** An entry in `extends` could not be resolved on disk or via npm. */
-declare class VisConfigNotFoundError extends VisConfigError {
-  constructor(specifier: string, chain: ReadonlyArray<string>, attempted: ReadonlyArray<string>);
-}
-export { VisConfigCycleError, VisConfigError, VisConfigLoadError, VisConfigNotFoundError };

package/dist/errors/index.js

@@ -1 +0,0 @@
-import{VisConfigCycleError as f}from"../packem_shared/VisConfigCycleError-CAYNC7d-.js";import{VisConfigError as e}from"../packem_shared/VisConfigError-B5LP1zRf.js";import{VisConfigLoadError as t}from"../packem_shared/VisConfigLoadError-CeqBSd2Z.js";import{VisConfigNotFoundError as g}from"../packem_shared/VisConfigNotFoundError-DZ9KC527.js";export{f as VisConfigCycleError,e as VisConfigError,t as VisConfigLoadError,g as VisConfigNotFoundError};

package/dist/packem_chunks/config.js

@@ -1,2 +0,0 @@
-var x=Object.defineProperty;var m=(e,t)=>x(e,"name",{value:t,configurable:!0});import{createRequire as A}from"node:module";import{findCacheDirSync as D}from"@visulima/find-cache-dir";import{isAccessibleSync as d,ensureDirSync as y,readJsonSync as V,writeJsonSync as T}from"@visulima/fs";import{join as f,dirname as v,isAbsolute as B}from"@visulima/path";import{createJiti as b}from"jiti";import{m as J}from"../packem_shared/target-merge-DNa-6eWu.js";import{VisConfigCycleError as L}from"../packem_shared/VisConfigCycleError-CAYNC7d-.js";import{VisConfigLoadError as S}from"../packem_shared/VisConfigLoadError-CeqBSd2Z.js";import{VisConfigNotFoundError as C}from"../packem_shared/VisConfigNotFoundError-DZ9KC527.js";const R=A(import.meta.url),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,g=m(e=>{if(typeof l<"u"&&l.versions&&l.versions.node){const[t,s]=l.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return l.getBuiltinModule(e)}return R(e)},"__cjs_getBuiltinModule"),{createHash:j}=g("node:crypto"),{readdirSync:_,copyFileSync:I,unlinkSync:P,readFileSync:$}=g("node:fs"),{createRequire:q}=g("node:module"),{tmpdir:N}=g("node:os");var M=Object.defineProperty,n=m((e,t)=>M(e,"name",{value:t,configurable:!0}),"r");const F=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],U=new Set(F),G=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],W=new Set(G),z={blockExoticSubdeps:!0,strictDepBuilds:!0,trustPolicy:"no-downgrade",trustPolicyIgnoreAfter:43200},H=n(e=>({...z,...e}),"mergeSecurityDefaults"),k=n(e=>({...e,security:H(e.security),update:{security:!0,target:"minor",...e.update}}),"applyDefaults"),K=n(e=>{let t;try{t=_(e)}catch{return}const s=new Set(t.filter(r=>U.has(r)));for(const r of F)if(s.has(r))return f(e,r)},"findVisConfigFile"),Y=n(e=>{let t;try{t=_(e)}catch{return}const s=new Set(t.filter(r=>W.has(r)));for(const r of G)if(s.has(r))return f(e,r)},"findVisTaskConfigFile"),w=n(e=>j("sha256").update($(e)).digest("hex"),"hashFileContents"),Q=n(e=>{const t=j("sha256"),s=[...e].sort();for(const r of s)t.update(r),t.update(":"),t.update(w(r)),t.update(`
-`);return t.digest("hex")},"hashConfigChain"),X=n(e=>{const t=f(e,"node_modules");if(d(t)){const r=f(t,".cache","vis");return y(r),f(r,"vis-config-cache.json")}const s=D("vis",{create:!0,cwd:e});return s?f(s,"vis-config-cache.json"):void 0},"getConfigCachePath"),Z=n((e,t)=>{if(d(e))try{const s=V(e);if(s.hash===t)return s.config}catch{}},"readConfigCache"),ee=n((e,t,s)=>{try{y(v(e)),T(e,{config:s,hash:t})}catch{}},"writeConfigCache"),te=n(e=>e===void 0?[]:Array.isArray(e)?e:[e],"normalizeExtends"),se=n((e,t,s)=>{if(B(e))throw new C(e,[...s,t],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const r=[];if(e.startsWith("./")||e.startsWith("../")){const o=v(t),i=f(o,e);if(r.push(i),d(i))return i;throw new C(e,[...s,t],r)}try{return q(t).resolve(e)}catch{throw r.push(`require.resolve("${e}") from ${t}`),new C(e,[...s,t],r)}},"resolveExtendsSpecifier"),E=n(async(e,t,s)=>{const r=w(t),o=t.slice(t.lastIndexOf(".")),i=f(N(),`vis-config-${r}${o}`);I(t,i);let c;try{c=await e.import(i,{default:!0,try:!0})??{}}catch(a){throw new S(t,s,a)}finally{try{P(i)}catch{}}try{return(typeof c=="function"?await c()??{}:c)??{}}catch(a){throw new S(t,s,a)}},"loadRawConfig"),re=n((e,t)=>{const s={...e,...t};if(e.targetDefaults||t.targetDefaults){const r=new Set([...Object.keys(e.targetDefaults??{}),...Object.keys(t.targetDefaults??{})]),o={};for(const i of r)o[i]=J(e.targetDefaults?.[i],t.targetDefaults?.[i]);s.targetDefaults=o}return(e.taskDefaults||t.taskDefaults)&&(s.taskDefaults=[...e.taskDefaults??[],...t.taskDefaults??[]]),(e.fileGroups||t.fileGroups)&&(s.fileGroups={...e.fileGroups,...t.fileGroups}),(e.taskGroups||t.taskGroups)&&(s.taskGroups={...e.taskGroups,...t.taskGroups}),(e.security||t.security)&&(s.security={...e.security,...t.security}),(e.update||t.update)&&(s.update={...e.update,...t.update}),(e.taskRunnerOptions||t.taskRunnerOptions)&&(s.taskRunnerOptions={...e.taskRunnerOptions,...t.taskRunnerOptions}),delete s.extends,s},"mergeVisConfigs"),O=n(async(e,t,s,r,o,i)=>{if(r.has(t))throw new L(t,s);if(!o.has(t)){r.add(t);try{const c=await E(e,t,s),a=te(c.extends);for(const u of a){const p=se(u,t,s);await O(e,p,[...s,t],r,o,i)}o.set(t,c),i.push(t)}finally{r.delete(t)}}},"resolveConfigChain"),Ce=n(async e=>{const t=K(e);if(!t)return k({});const s=b(e,{fsCache:!1,moduleCache:!1}),r=new Set,o=new Map,i=[];await O(s,t,[],r,o,i);const c=Q(i),a=X(e);if(a){const h=Z(a,c);if(h)return h}let u={};for(const h of i)u=re(u,o.get(h));const p=k(u);return a&&ee(a,c,p),p},"loadVisConfig"),ie=n(e=>e.replaceAll(/[^\w.-]+/g,"_"),"sanitizeProjectName"),ne=n((e,t)=>{const s=f(e,"node_modules"),r=ie(t);if(d(s)){const i=f(s,".cache","vis","task-configs");return y(i),f(i,`${r}.json`)}const o=D("vis",{create:!0,cwd:e});return o?f(o,"task-configs",`${r}.json`):void 0},"getVisTaskCachePath"),oe=n((e,t)=>{if(d(e))try{const s=V(e);if(s.hash===t)return s.config}catch{}},"readVisTaskCache"),ae=n((e,t,s)=>{try{y(v(e)),T(e,{config:s,hash:t})}catch{}},"writeVisTaskCache"),ke=n(async(e,t,s)=>{const r=Y(t);if(!r)return;const o=w(r),i=ne(e,s);if(i){const u=oe(i,o);if(u)return u}const c=b(t,{fsCache:!1,moduleCache:!1}),a=await E(c,r,[]);return i&&ae(i,o,a),a},"loadVisTaskConfig");n(e=>e,"defineTaskConfig");n(e=>k(e),"defineConfig");n(e=>e,"definePlugin");export{F as CONFIG_FILES,z as SECURITY_DEFAULTS,G as TASK_CONFIG_FILES,k as applyDefaults,K as findVisConfigFile,Y as findVisTaskConfigFile,Ce as loadVisConfig,ke as loadVisTaskConfig};

package/dist/packem_shared/VisConfigCycleError-CAYNC7d-.js

@@ -1 +0,0 @@
-var t=Object.defineProperty;var o=(e,r)=>t(e,"name",{value:r,configurable:!0});import{VisConfigError as c}from"./VisConfigError-B5LP1zRf.js";var s=Object.defineProperty,a=o((e,r)=>s(e,"name",{value:r,configurable:!0}),"e");class C extends c{static{o(this,"VisConfigCycleError")}static{a(this,"VisConfigCycleError")}constructor(r,i){const n=[...i,`${r} (re-enters)`].join(" → ");super(`Config cycle: ${n}`,i)}}export{C as VisConfigCycleError};

package/dist/packem_shared/VisConfigError-B5LP1zRf.js

@@ -1 +0,0 @@
-var n=Object.defineProperty;var e=(t,r)=>n(t,"name",{value:r,configurable:!0});var o=Object.defineProperty,a=e((t,r)=>o(t,"name",{value:r,configurable:!0}),"s");class h extends Error{static{e(this,"VisConfigError")}static{a(this,"VisConfigError")}chain;constructor(r,s,i){super(r,i),this.name=this.constructor.name,this.chain=s}}export{h as VisConfigError};

package/dist/packem_shared/VisConfigLoadError-CeqBSd2Z.js

@@ -1,2 +0,0 @@
-var n=Object.defineProperty;var t=(o,r)=>n(o,"name",{value:r,configurable:!0});import{VisConfigError as c}from"./VisConfigError-B5LP1zRf.js";var g=Object.defineProperty,f=t((o,r)=>g(o,"name",{value:r,configurable:!0}),"t");class u extends c{static{t(this,"VisConfigLoadError")}static{f(this,"VisConfigLoadError")}constructor(r,i,e){const a=e instanceof Error?e.message:String(e),s=i.length>0?`
-Chain: ${i.join(" → ")}`:"";super(`Failed to load ${r}: ${a}${s}`,i,{cause:e})}}export{u as VisConfigLoadError};

package/dist/packem_shared/VisConfigNotFoundError-DZ9KC527.js

@@ -1,5 +0,0 @@
-var c=Object.defineProperty;var n=(o,r)=>c(o,"name",{value:r,configurable:!0});import{VisConfigError as f}from"./VisConfigError-B5LP1zRf.js";var g=Object.defineProperty,i=n((o,r)=>g(o,"name",{value:r,configurable:!0}),"t");const l=i(o=>o.join(" → "),"formatChain");class h extends f{static{n(this,"VisConfigNotFoundError")}static{i(this,"VisConfigNotFoundError")}constructor(r,t,e){const s=t.length>0?t[t.length-1]:"<unknown>",a=e.length>0?`
-Tried:
-  ${e.join(`
-  `)}`:"";super(`Cannot resolve "${r}" extended from ${s}.${a}
-Chain: ${l(t)}`,t)}}export{h as VisConfigNotFoundError};