@visulima/vis 1.0.0-alpha.13 → 1.0.0-alpha.14

package/dist/packem_chunks/handler27.js

@@ -1 +1,7 @@
-var q=Object.defineProperty;var $=(t,r)=>q(t,"name",{value:r,configurable:!0});import{createRequire as A}from"node:module";import{dim as M,red as N,yellow as z,green as T}from"@visulima/colorize";import{readJsonSync as B,writeJsonSync as I}from"@visulima/fs";import{findPackageManagerSync as J}from"@visulima/package";import{join as U}from"@visulima/path";import{B as V,r as b,t as G,p as g,N as j,R as Q,Q as W,w as Y,U as Z,k as H,g as K,z as X,h as ee,V as oe,F as te,m as se,G as ne}from"./bin.js";import{r as re}from"../packem_shared/typosquats-CcZl99B1.js";import{d as C,o as R}from"../packem_shared/utils-DrNg0XTR.js";const O=A(import.meta.url),v=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,L=$(t=>{if(typeof v<"u"&&v.versions&&v.versions.node){const[r,e]=v.versions.node.split(".").map(Number);if(r>22||r===22&&e>=3||r===20&&e>=16)return v.getBuiltinModule(t)}return O(t)},"__cjs_getBuiltinModule"),{createInterface:F}=L("node:readline");var ae=Object.defineProperty,h=$((t,r)=>ae(t,"name",{value:r,configurable:!0}),"c");const P=h(t=>t==="default"?"catalog:":`catalog:${t}`,"buildCatalogRef"),S=h(t=>t==="default"?"default catalog":`catalog "${t}"`,"labelForCatalog"),ie=h((t,r)=>{const e=[];for(const[o,n]of r)o.includes(":")||n.has(t)&&e.push(o);if(e.length===0)return;if(e.length===1){const[o]=e;return{source:S(o),spec:P(o)}}const a=e.find(o=>o==="default")??e[0],i=e.filter(o=>o!==a);return{candidates:[...e],conflict:!0,source:`${S(a)} (also in: ${i.map(o=>S(o)).join(", ")})`,spec:P(a)}},"resolveFromCatalogs"),ce=h((t,r)=>{const e=new Map;for(const[l,p]of r){if(!l.includes(":"))continue;const f=p.get(t);f!==void 0&&e.set(f,(e.get(f)??0)+1)}if(e.size===0)return;const a=[...e.entries()],i=a.reduce((l,[,p])=>l+p,0);if(a.length===1){const[[l]]=a;return{source:`siblings (${String(i)} pkg${i===1?"":"s"} on ${l})`,spec:l}}const o=[...a].sort((l,p)=>p[1]-l[1]),[n,s]=o[0],c=o.slice(1).map(([l,p])=>`${l} (×${String(p)})`);return{candidates:o.map(([l])=>l),conflict:!0,source:`siblings (most common: ${n} ×${String(s)}; conflicts: ${c.join(", ")})`,spec:n}},"resolveFromSiblings"),le=h((t,r)=>ie(t,r)||ce(t,r),"conformToCatalog");var pe=Object.defineProperty,d=$((t,r)=>pe(t,"name",{value:r,configurable:!0}),"m");const _=d(async(t,r=1e4)=>{const e=new Map,a=new AbortController,i=setTimeout(()=>{a.abort()},r);try{const o=t.map(async n=>{try{const s=await fetch(`https://registry.npmjs.org/${n}/latest`,{headers:{Accept:"application/json"},signal:a.signal});if(s.ok){const c=await s.json();c.version&&e.set(n,c.version)}}catch{}});await Promise.all(o)}finally{clearTimeout(i)}return e},"resolveLatestVersions"),fe=d((t,r,e)=>{const a=[];for(const i of t.values()){const{overall:o}=i.score,n=V(o),s=`${String(Math.round(o*100))}%`,c=i.alerts.length,l=b(i),p=G(l,i.version,e),f=n==="red"?N:n==="yellow"?z:T;if(p?g.info(`  ${f(s)} ${j(i)} ${M(`[accepted: ${p.reason}]`)}`):g.info(`  ${f(s)} ${j(i)}`),c>0){const u=i.alerts.filter(m=>m.severity==="critical"||m.severity==="high").length;u>0&&g.warn(`    ${String(u)} critical/high alert${u===1?"":"s"}`)}o<r&&!p&&a.push(i)}return a},"displaySecurityReports"),ge=d(async(t,r)=>{const e=F({input:process.stdin,output:process.stdout}),a=d(s=>new Promise(c=>{e.question(s,l=>{c(l.trim())})}),"ask"),i=String(Math.round(r*100));g.warn(""),g.warn(`${String(t.length)} package${t.length===1?"":"s"} scored below the minimum threshold (${i}%):`);for(const s of t){const c=b(s),l=`${String(Math.round(s.score.overall*100))}%`;g.warn(`  • ${c}@${s.version} — score: ${l} (${Q(s.score.overall)})`)}g.warn("");const o=await a("Continue adding these packages? [y/N] ");if(o.toLowerCase()!=="y"&&o.toLowerCase()!=="yes")return e.close(),!1;const n=await a("Remember this decision? (prints config snippet) [y/N] ");if(e.close(),n.toLowerCase()==="y"||n.toLowerCase()==="yes"){g.notice(""),g.notice("Add the following to security.socket.acceptedRisks in vis.config.ts:"),g.notice("");for(const s of t){const c=b(s),l=W(c,s.version,s.score.overall,"Reviewed and accepted");g.notice(l)}g.notice("")}return!0},"confirmLowScorePackages"),ue=d(async(t,r,e,a)=>{const i=t.map(f=>C(f)),o=new Map;for(const f of i)if(f.versionSpec){const u=Y.coerce(f.versionSpec);u&&o.set(f.name,u.version)}const n=i.filter(f=>!o.has(f.name)).map(f=>f.name),s=n.length>0?await _(n):new Map,c=[];for(const f of i){const u=o.get(f.name)??s.get(f.name);u&&c.push({name:f.name,version:u})}if(c.length===0)return!0;g.info(""),g.info("Socket.dev security check:");const l=await Z(c,r);if(l.size===0)return g.info("  Could not fetch security data. Proceeding."),!0;const p=fe(l,e,a);return p.length===0?(g.info(""),!0):process.stdin.isTTY?ge(p,e):(g.warn(`Aborting: ${String(p.length)} package${p.length===1?"":"s"} below minimum score. Use --no-socket-check to skip.`),!1)},"runSocketPreCheck"),de=["dependencies","devDependencies","peerDependencies","optionalDependencies"],me=d(t=>t.savePeer?"peerDependencies":t.saveOptional?"optionalDependencies":t.saveDev?"devDependencies":"dependencies","pickDepSection"),D=d((t,r)=>t.startsWith("catalog:")||!r?t:t.replace(/^[\^~]/,""),"applyExactPrefix"),ke=d(async(t,r)=>{const e=[];for(const o of t){const{name:n,versionSpec:s}=C(o);if(!n)continue;if(s!==void 0){e.push({explicit:s,name:n});continue}const c=le(n,r);if(c){c.conflict&&g.warn(`${n}: ambiguous constraint — picking ${c.spec} (${c.source}). Pass ${n}@<version> to override.`),e.push({entry:{name:n,source:c.source,spec:c.spec},kind:"resolved",name:n});continue}e.push({kind:"missing",name:n})}const a=e.filter(o=>"kind"in o&&o.kind==="missing").map(o=>o.name),i=a.length>0?await _(a):new Map;return e.map(o=>{if("explicit"in o)return{name:o.name,source:"explicit",spec:o.explicit};if(o.kind==="resolved")return o.entry;const n=i.get(o.name);if(n===void 0)throw new Error(`--to: cannot resolve a version for "${o.name}" (not in any catalog or sibling, and registry lookup failed). Pass ${o.name}@<version> explicitly.`);const s=`^${n}`;return g.info(`${o.name}: no existing constraint — using registry latest (${s}). Add to a catalog to share this version across workspace packages.`),{name:o.name,source:"registry latest",spec:s}})},"planConformedSpecs"),we=d((t,r,e,a)=>{for(const{name:i,spec:o}of r){const n=D(o,a);for(const c of de){if(c===e)continue;const l=t[c];l?.[i]!==void 0&&(delete l[i],Object.keys(l).length===0&&delete t[c])}let s=t[e];s===void 0&&(s={},t[e]=s),s[i]=n}},"applyPlannedSpecsToPackageJson"),ve=d(async({ignoreScripts:t,logger:r,options:e,packages:a,pm:i,target:o,visConfig:n,workspaceRoot:s})=>{const{workspace:c}=H(s,n??{}),l=c.projects[o];if(!l){const k=Object.keys(c.projects).sort();throw new Error(`--to: workspace package "${o}" not found. Available: ${k.length>0?k.slice(0,10).join(", "):"(none)"}${k.length>10?`, ... (${String(k.length-10)} more)`:""}.`)}const p=U(s,l.root,"package.json"),{packageManager:f}=J(s),u=K(s,f),m=me(e),w=e.exact??!1,y=await ke(a,u);if(y.length===0)return 0;const x=B(p);we(x,y,m,w),I(p,x,{indent:X(p,{useEditorconfig:n?.editorconfig??!0}),overwrite:!0});for(const k of y){const E=D(k.spec,w);g.info(`${T("+")} ${k.name}@${E} → ${o}/${m} (${M(k.source)})`)}return ee(i,{dev:!1,filter:[],force:!1,frozenLockfile:!1,ignoreScripts:t,lockfileOnly:!1,noOptional:!1,offline:!1,prod:!1,recursive:!1,silent:!1,workspaceRoot:!1},s,r)},"applyConformedAdd"),Pe=d(async({argument:t,logger:r,options:e,visConfig:a,workspaceRoot:i})=>{let o=t;if(!o||o.length===0)throw new Error("No packages specified. Usage: vis add <packages...>");if(!e.noTyposquatCheck){const p=o.map(u=>C(u)),f=await re(p.map(u=>u.name),a?.security?.typosquatAllowlist);if(!f.ok){process.exitCode=1;return}o=p.map((u,m)=>{const w=f.packages[m];return w!==u.name?u.versionSpec?`${w}@${u.versionSpec}`:w??"":o[m]??""})}if(!e.noSocketCheck){const p=oe(a?.security?.socket);if(p){const f=p.minimumScore??te;if(!await ue(o,p,f,a?.security?.socket?.acceptedRisks)){process.exitCode=1;return}}}const n=process.cwd(),s=se(i??n,{configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),c=!e.runScripts;if(e.to){if(e.global||e.workspaceRoot)throw new Error("--to is incompatible with --global / --workspace-root.");if(e.filter&&R(e.filter).length>0)throw new Error("--to and --filter are mutually exclusive — --to already targets one package.");if(!i)throw new Error("--to requires a monorepo workspace. Run from inside a pnpm/bun/yarn/npm workspace.");const p=await ve({ignoreScripts:c,logger:r,options:e,packages:o,pm:s,target:e.to,visConfig:a,workspaceRoot:i});p!==0&&(process.exitCode=p);return}const l=ne(s,{exact:e.exact||!1,filter:R(e.filter),global:e.global||!1,optional:e.saveOptional||!1,packages:o,peer:e.savePeer||!1,saveDev:e.saveDev||!1,workspace:e.workspace||!1,workspaceRoot:e.workspaceRoot||!1},n,r,{autoInstallPeers:e.autoInstallPeers||!1,ignoreScripts:c});l!==0&&(process.exitCode=l)},"execute");export{Pe as default};
+var x=Object.defineProperty;var l=(e,o)=>x(e,"name",{value:o,configurable:!0});import{b as g,O as E,_ as S,R as f}from"../packem_shared/ai-analysis-Dzs_nUwM.js";import{renderToString as w,Table as D}from"@visulima/tui";import P from"react";import{j as I,E as d,q as O,c as j,e as N}from"./bin.js";var T=Object.defineProperty,u=l((e,o)=>T(e,"name",{value:o,configurable:!0}),"s");const v={command:"ai",description:"AI-assisted commands: provider detection, cache management, and failure-fix proposals."},R=u(e=>{if(typeof e!="function")return String(e);const{name:o}=e;return o==="Boolean"?"boolean":o==="Number"?"number":o==="String"?"string":o??"unknown"},"typeName"),A=u(e=>{const o=[...e.commandPath??[],e.name].join(" "),i=(e.examples??[]).map(([t,s])=>({command:t??"",description:s??""})),a=(e.options??[]).map(t=>({defaultValue:t.defaultValue,description:t.description,name:t.name,type:R(t.type)}));return{argument:e.argument?{description:e.argument.description,name:e.argument.name}:void 0,description:e.description??"",examples:i,name:e.name,options:a,path:o}},"buildSubcommand"),h=u((e,o=v)=>({command:o.command,description:o.description,subcommands:e.map(i=>A(i))}),"buildDiscoveryPayload"),C=u((e,o=v)=>`${JSON.stringify(h(e,o),void 0,2)}
+`,"renderDiscoveryJson"),J=u((e,o=v)=>{const i=h(e,o),a=[I(`vis ${i.command} — ${i.description}`),"",d("Subcommands:")];for(const t of i.subcommands){const s=t.argument?` ${O(`<${t.argument.name}>`)}`:"";if(a.push(""),a.push(`  ${j(`vis ${t.path}`)}${s}`),t.description&&a.push(`    ${t.description}`),t.options.length>0){const n=t.options.map(c=>`--${c.name}${c.type==="boolean"?"":`=<${c.type}>`}`).join(", ");a.push(d(`    options: ${n}`))}if(t.examples.length>0){a.push(d("    examples:"));for(const n of t.examples){const c=n.description?d(` — ${n.description}`):"";a.push(`      ${N(n.command)}${c}`)}}}return a.push(""),a.push(d(`Run \`vis ${i.command} discover-help\` for the machine-readable JSON catalogue (designed for AI agents).`)),a.push(d(`Run \`vis ${i.command} <subcommand> --help\` for full usage of a specific subcommand.`)),`${a.join(`
+`)}
+`},"renderDiscoveryText");var F=Object.defineProperty,p=l((e,o)=>F(e,"name",{value:o,configurable:!0}),"r");const b=p(async()=>{const{default:e}=await import("./bin.js").then(o=>o.b6);return e.filter(o=>o.name!=="ai")},"loadDiscoverableSubcommands"),B=p(async()=>{const e=await b();process.stderr.write(J(e))},"aiRootExecute"),K=p(async()=>{const e=await b();process.stdout.write(C(e))},"aiDiscoverHelpExecute"),L=p(async({logger:e,visConfig:o})=>{const i=o?.ai,a=g(i);if(!a){e.error("No AI provider available to test."),process.exitCode=1;return}e.info(`Testing ${a.name}...`);try{const t=await E(a,"Reply with exactly: OK",{timeoutMs:3e4});e.info(`Provider ${a.name} responded: ${t.stdout.trim().slice(0,200)}`)}catch(t){const s=t instanceof Error?t.message:String(t);e.error(`Provider ${a.name} failed: ${s}`),process.exitCode=1}},"aiTestExecute"),_=p(({logger:e,options:o,visConfig:i})=>{const a=o.format??"table",t=i?.ai,s=S(),n=g(t);if(a==="json"){const r=s.map(m=>({available:m.available,method:m.detectionMethod,name:m.name,path:m.path,priority:f[m.name]??0,selected:m.name===n?.name,version:m.version}));process.stdout.write(`${JSON.stringify(r,void 0,2)}
+`);return}const c=s.map(r=>({method:r.detectionMethod??"-",path:r.path??"-",priority:String(f[r.name]??0),provider:r.name,selected:r.name===n?.name?">>>":"",status:r.available?"available":"not found",version:r.version??"-"})),y=process.stdout.columns||80,$=w(P.createElement(D,{data:c}),{columns:y});e.info($),n?e.info(`
+Selected provider: ${n.name} (priority ${String(f[n.name]??0)})`):e.info(`
+No AI provider available. Install one of the supported AI CLI tools.`)},"aiProvidersExecute"),z=p(async e=>{const{aiFix:o}=await import("./fix.js");await o(e)},"aiFixExecute");export{K as aiDiscoverHelpExecute,z as aiFixExecute,_ as aiProvidersExecute,B as aiRootExecute,L as aiTestExecute};

package/dist/packem_chunks/handler28.js

@@ -1,7 +1,23 @@
-var x=Object.defineProperty;var l=(e,o)=>x(e,"name",{value:o,configurable:!0});import{runProvider as S,detectAllProviders as w}from"@visulima/find-ai-runner";import{renderToString as E,Table as P}from"@visulima/tui";import D from"react";import{b as g,R as v}from"../packem_shared/ai-analysis-hm8d2W7z.js";import{bold as I,dim as d,cyan as N,green as O,yellow as T}from"@visulima/colorize";var j=Object.defineProperty,u=l((e,o)=>j(e,"name",{value:o,configurable:!0}),"s");const f={command:"ai",description:"AI-assisted commands: provider detection, cache management, and failure-fix proposals."},A=u(e=>{if(typeof e!="function")return String(e);const{name:o}=e;return o==="Boolean"?"boolean":o==="Number"?"number":o==="String"?"string":o??"unknown"},"typeName"),R=u(e=>{const o=[...e.commandPath??[],e.name].join(" "),a=(e.examples??[]).map(([t,s])=>({command:t??"",description:s??""})),i=(e.options??[]).map(t=>({defaultValue:t.defaultValue,description:t.description,name:t.name,type:A(t.type)}));return{argument:e.argument?{description:e.argument.description,name:e.argument.name}:void 0,description:e.description??"",examples:a,name:e.name,options:i,path:o}},"buildSubcommand"),y=u((e,o=f)=>({command:o.command,description:o.description,subcommands:e.map(a=>R(a))}),"buildDiscoveryPayload"),C=u((e,o=f)=>`${JSON.stringify(y(e,o),void 0,2)}
-`,"renderDiscoveryJson"),J=u((e,o=f)=>{const a=y(e,o),i=[I(`vis ${a.command} — ${a.description}`),"",d("Subcommands:")];for(const t of a.subcommands){const s=t.argument?` ${N(`<${t.argument.name}>`)}`:"";if(i.push(""),i.push(`  ${O(`vis ${t.path}`)}${s}`),t.description&&i.push(`    ${t.description}`),t.options.length>0){const n=t.options.map(c=>`--${c.name}${c.type==="boolean"?"":`=<${c.type}>`}`).join(", ");i.push(d(`    options: ${n}`))}if(t.examples.length>0){i.push(d("    examples:"));for(const n of t.examples){const c=n.description?d(` — ${n.description}`):"";i.push(`      ${T(n.command)}${c}`)}}}return i.push(""),i.push(d(`Run \`vis ${a.command} discover-help\` for the machine-readable JSON catalogue (designed for AI agents).`)),i.push(d(`Run \`vis ${a.command} <subcommand> --help\` for full usage of a specific subcommand.`)),`${i.join(`
+var re=Object.defineProperty;var U=(t,n)=>re(t,"name",{value:n,configurable:!0});import{E,e as q,q as Z,a1 as _,d as ee,w as oe,Q as ae,A as ce,p as a,J as le,N as de,a as ue,K as ge,$ as W}from"./bin.js";import{isAccessibleSync as G,readFileSync as z,writeFileSync as B}from"@visulima/fs";import{readYamlSync as se}from"@visulima/fs/yaml";import{M as H}from"../packem_shared/index-OlP7U_t5.js";import{l as fe,f as pe,s as he}from"../packem_shared/dependency-scan-DmwPKwLy.js";var ve=Object.defineProperty,S=U((t,n)=>ve(t,"name",{value:n,configurable:!0}),"o");const L=S(t=>Array.isArray(t)?t.filter(n=>typeof n=="string"):[],"toStringArray"),K=S((t,n)=>{for(const r of n)if(r===t||r.endsWith("*")&&t.startsWith(r.slice(0,-1)))return!0;return!1},"matchesGlobList"),te=S(t=>{const n=H(t,"pnpm-workspace.yaml");if(!G(n))return{excludedPackages:[],ignoredAdvisories:[]};try{const r=se(n);return{excludedPackages:[],ignoredAdvisories:[...L(r?.auditConfig?.ignoreCves),...L(r?.auditConfig?.ignoreGhsas)]}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readPnpmAuditExclusions"),ne=S(t=>{const n=H(t,".yarnrc.yml");if(!G(n))return{excludedPackages:[],ignoredAdvisories:[]};try{const r=se(n);return{excludedPackages:L(r?.npmAuditExcludePackages),ignoredAdvisories:L(r?.npmAuditIgnoreAdvisories)}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readYarnAuditExclusions"),$e=S((t,n)=>{switch(n){case"pnpm":return te(t);case"yarn":return ne(t);default:return{excludedPackages:[],ignoredAdvisories:[]}}},"readNativeAuditExclusions"),X=S((t,n,r)=>{if(K(t,n.ignoredAdvisories))return!0;if(r){for(const l of r)if(K(l,n.ignoredAdvisories))return!0}return!1},"isAdvisoryExcluded"),me=S((t,n)=>K(t,n.excludedPackages),"isPackageExcluded"),ke=S((t,n,r)=>{if(r.length===0)return["No advisory IDs to sync."];const l=[];switch(t){case"bun":{l.push(`bun has no audit config file. Use CLI flags: bun audit ${r.map(f=>`--ignore ${f}`).join(" ")}`);break}case"npm":{l.push("npm has no native audit exclusion config. vis accepted risks are the only layer.");break}case"pnpm":{const f=H(n,"pnpm-workspace.yaml");if(!G(f)){l.push("pnpm-workspace.yaml not found. Cannot sync.");break}const h=te(n),k=new Set(h.ignoredAdvisories.filter(c=>c.startsWith("CVE-"))),$=new Set(h.ignoredAdvisories.filter(c=>c.startsWith("GHSA-"))),y=r.filter(c=>c.startsWith("CVE-")),m=r.filter(c=>c.startsWith("GHSA-")),p=[...new Set([...k,...y])],d=[...new Set([...$,...m])],v=y.filter(c=>!k.has(c)).length,w=m.filter(c=>!$.has(c)).length;if(v===0&&w===0){l.push("All advisory IDs already present in pnpm-workspace.yaml.");break}let g=z(f);if(p.length>0){const c=`  ignoreCves:
+${p.map(x=>`    - ${x}`).join(`
 `)}
-`},"renderDiscoveryText");var F=Object.defineProperty,p=l((e,o)=>F(e,"name",{value:o,configurable:!0}),"r");const h=p(async()=>{const{default:e}=await import("./bin.js").then(o=>o.aO);return e.filter(o=>o.name!=="ai")},"loadDiscoverableSubcommands"),L=p(async()=>{const e=await h();process.stderr.write(J(e))},"aiRootExecute"),q=p(async()=>{const e=await h();process.stdout.write(C(e))},"aiDiscoverHelpExecute"),z=p(async({logger:e,visConfig:o})=>{const a=o?.ai,i=g(a);if(!i){e.error("No AI provider available to test."),process.exitCode=1;return}e.info(`Testing ${i.name}...`);try{const t=await S(i,"Reply with exactly: OK",{timeoutMs:3e4});e.info(`Provider ${i.name} responded: ${t.stdout.trim().slice(0,200)}`)}catch(t){const s=t instanceof Error?t.message:String(t);e.error(`Provider ${i.name} failed: ${s}`),process.exitCode=1}},"aiTestExecute"),G=p(({logger:e,options:o,visConfig:a})=>{const i=o.format??"table",t=a?.ai,s=w(),n=g(t);if(i==="json"){const r=s.map(m=>({available:m.available,method:m.detectionMethod,name:m.name,path:m.path,priority:v[m.name]??0,selected:m.name===n?.name,version:m.version}));process.stdout.write(`${JSON.stringify(r,void 0,2)}
-`);return}const c=s.map(r=>({method:r.detectionMethod??"-",path:r.path??"-",priority:String(v[r.name]??0),provider:r.name,selected:r.name===n?.name?">>>":"",status:r.available?"available":"not found",version:r.version??"-"})),b=process.stdout.columns||80,$=E(D.createElement(P,{data:c}),{columns:b});e.info($),n?e.info(`
-Selected provider: ${n.name} (priority ${String(v[n.name]??0)})`):e.info(`
-No AI provider available. Install one of the supported AI CLI tools.`)},"aiProvidersExecute"),Q=p(async e=>{const{aiFix:o}=await import("./fix.js");await o(e)},"aiFixExecute");export{q as aiDiscoverHelpExecute,Q as aiFixExecute,G as aiProvidersExecute,L as aiRootExecute,z as aiTestExecute};
+`;/auditConfig:/.test(g)?g=/ignoreCves:/.test(g)?g.replace(/ignoreCves:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,c):g.replace(/auditConfig:\s*\n/,`auditConfig:
+${c}`):g=`${g.trimEnd()}
+
+auditConfig:
+${c}`,v>0&&l.push(`Added ${String(v)} new CVE${v===1?"":"s"} to pnpm-workspace.yaml (${String(p.length)} total)`)}if(d.length>0){const c=`  ignoreGhsas:
+${d.map(x=>`    - ${x}`).join(`
+`)}
+`;/auditConfig:/.test(g)&&(g=/ignoreGhsas:/.test(g)?g.replace(/ignoreGhsas:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,c):g.replace(/(auditConfig:[\s\S]*?)(\n\S|\n?$)/m,`$1${c}$2`)),w>0&&l.push(`Added ${String(w)} new GHSA${w===1?"":"s"} to pnpm-workspace.yaml (${String(d.length)} total)`)}B(f,g);break}case"yarn":{const f=H(n,".yarnrc.yml");if(!G(f)){l.push(".yarnrc.yml not found. Cannot sync.");break}const h=ne(n),k=new Set(h.ignoredAdvisories),$=[...new Set([...k,...r])],y=r.filter(d=>!k.has(d)).length;if(y===0){l.push("All advisory IDs already present in .yarnrc.yml.");break}let m=z(f);const p=`npmAuditIgnoreAdvisories:
+${$.map(d=>`  - "${d}"`).join(`
+`)}
+`;m=/npmAuditIgnoreAdvisories:/.test(m)?m.replace(/npmAuditIgnoreAdvisories:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,p):`${m.trimEnd()}
+
+${p}`,B(f,m),l.push(`Synced ${String(y)} advisor${y===1?"y":"ies"} to .yarnrc.yml (${String($.length)} total)`);break}default:l.push(`Unknown package manager: ${t}`)}return l},"syncAcceptedRisksToNativeConfig");var ye=Object.defineProperty,R=U((t,n)=>ye(t,"name",{value:n,configurable:!0}),"m");const V={CRITICAL:0,HIGH:1,LOW:3,MODERATE:2,UNKNOWN:4},Ae={critical:ee,high:_,low:Z,medium:q},j=R((t,n)=>{const r=V[n.toUpperCase()]??V.MODERATE??2;return(V[t.toUpperCase()]??4)<=r},"severityPassesFilter"),Se={CRITICAL:ee,HIGH:_,LOW:Z,MODERATE:q,UNKNOWN:E},we=R((t,n,r,l)=>{const f=Se[r.severity]??E,h=l?` ${E("[acknowledged]")}`:"",k=r.fixedVersions??[],$=k.length>0?` (fix: ${k.join(", ")})`:"";return`  ${f(r.severity)} ${r.id} — ${t}@${n}${h}
+    ${r.summary}${$}`},"formatVulnLine"),Ce=R((t,n)=>{const r=oe(t),l=`${String(Math.round(t.score.overall*100))}%`,f=n?` ${E("[acknowledged]")}`:"",h=t.alerts.length>0?`, ${String(t.alerts.length)} alert${t.alerts.length===1?"":"s"}`:"";return`  ${l} ${r}@${t.version} (${ae(t.score.overall)}${h})${f}`},"formatSocketLine"),Re=R(async(t,n,r,l)=>{const f=n.severity??"low",h=n.format==="json"||!!n.json,k=!!n.fix,$=!!n.showAccepted,y=r?.security?.socket,m=y?.acceptedRisks,p=ce(t),d=$e(t,p.name);(d.ignoredAdvisories.length>0||d.excludedPackages.length>0)&&a.info(`Loaded ${String(d.ignoredAdvisories.length)} ignored advisor${d.ignoredAdvisories.length===1?"y":"ies"} and ${String(d.excludedPackages.length)} excluded package${d.excludedPackages.length===1?"":"s"} from ${p.name} config.`);const v=fe(t,p.name);if(v.length===0){a.info(`No ${p.name} lockfile entries found. Run ${p.name} install first.`);return}h||a.info(`Scanning ${String(v.length)} installed packages…`);const w=v.map(e=>({name:e.name,version:e.version})),g=le(y),c=pe(t,p.name),x=[{id:"vulnerabilities",label:"Known vulnerabilities (OSV)"},...g?[{id:"socket",label:"Socket.dev supply-chain reports"}]:[]],C=he(x,{live:!h}),ie=Date.now(),b=R(e=>{const s=Date.now()-e;return s>=1e3?`${(s/1e3).toFixed(1)}s`:`${String(Math.round(s))}ms`},"fmtElapsed");let J,Y;try{const e=Date.now(),s=Date.now();C.start("vulnerabilities"),g&&C.start("socket"),[J,Y]=await Promise.all([de(w).then(i=>{let o=0;for(const u of i.values())o+=u.length;return C.finish("vulnerabilities",o>0?"warn":"ok",o>0?`${String(o)} found · ${b(e)}`:`none found · ${b(e)}`),i}).catch(i=>{const o=i instanceof Error?i.message:String(i);return C.finish("vulnerabilities","error",o),new Map}),g?ue(w,g).then(i=>{let o=0,u=0;for(const D of i.values())o+=D.alerts.length,D.score.overall<W&&(u+=1);const O=o+u;return C.finish("socket",O>0?"warn":"ok",O>0?`${String(o)} alert${o===1?"":"s"}, ${String(u)} low-score · ${b(s)}`:`clean · ${b(s)}`),i}).catch(i=>{const o=i instanceof Error?i.message:String(i);return C.finish("socket","error",o),new Map}):Promise.resolve(new Map)])}finally{C.stop()}h||a.info(E(`Scan completed in ${b(ie)}`));const M=[];for(const e of v){if(me(e.name,d))continue;const s=J.get(e.name)??[],i=Y.get(`${e.name}@${e.version}`),o=ge(e.name,e.version,m),u=s.length>0,O=i?i.score.overall<W:!1,D=i?i.alerts.length>0:!1;(u||O||D)&&M.push({acceptedRisk:o,name:e.name,socketReport:i,version:e.version,vulnerabilities:s})}const A=M.filter(e=>{const s=e.vulnerabilities.some(u=>j(u.severity,f)),i=e.socketReport?.alerts.some(u=>j(u.severity==="medium"?"MODERATE":u.severity.toUpperCase(),f)),o=e.socketReport&&e.socketReport.score.overall<W;return s||i||o});if(h){const e={duplicates:c.map(s=>({name:s.name,versionCount:s.versions.length,versions:s.versions})),packages:v.length,results:A.map(s=>({acceptedRisk:s.acceptedRisk??null,name:s.name,socketAlerts:s.socketReport?.alerts??[],socketScore:s.socketReport?.score.overall??null,version:s.version,vulnerabilities:s.vulnerabilities})),summary:{accepted:A.filter(s=>s.acceptedRisk).length,duplicatePackages:c.length,issues:A.filter(s=>!s.acceptedRisk).length,total:A.length}};process.stdout.write(`${JSON.stringify(e,void 0,2)}
+`),n.exitCode&&e.summary.issues>0&&(process.exitCode=1);return}if(A.length===0){a.success(`No security issues found across ${String(v.length)} packages.`);return}const I={CRITICAL:[],HIGH:[],LOW:[],MODERATE:[]};for(const e of A)for(const s of e.vulnerabilities)if(j(s.severity,f)){const i=s.severity==="UNKNOWN"?"LOW":s.severity;I[i]?.push({entry:e,vuln:s})}let F=0,T=0;for(const e of["CRITICAL","HIGH","MODERATE","LOW"]){const s=I[e];if(!(!s||s.length===0)){a.info(`
+── ${e} (${String(s.length)}) ──`);for(const{entry:i,vuln:o}of s){const u=!!i.acceptedRisk||X(o.id,d,o.aliases);u&&(T++,!$)||(F++,a.info(we(i.name,i.version,o,u)),k&&(o.fixedVersions??[]).length>0&&a.notice(`    Fix: update to ${o.fixedVersions.at(-1)}`))}}}const P=A.filter(e=>e.socketReport&&(e.socketReport.score.overall<W||e.socketReport.alerts.length>0));if(P.length>0){a.info(`
+── Socket.dev Supply Chain (${String(P.length)}) ──`);for(const e of P){if(!e.socketReport)continue;const s=!!e.acceptedRisk;if(!(s&&!$)){a.info(Ce(e.socketReport,s));for(const i of e.socketReport.alerts){const o=Ae[i.severity]??E;a.info(`    ${o(`[${i.severity.toUpperCase()}]`)} ${i.type} — ${i.category}`)}}}}if(c.length>0){a.info(`
+── Duplicate Dependencies (${String(c.length)}) ──`);for(const e of c){const s=e.versions.join(", ");a.info(`  ${e.name} — ${String(e.versions.length)} versions: ${q(s)}`)}}const N=R(e=>!!e.acceptedRisk||e.vulnerabilities.length>0&&e.vulnerabilities.every(s=>X(s.id,d,s.aliases)),"isEntryExcluded"),Q=A.filter(e=>!N(e)).length;if(a.info(""),a.info("─ Audit Summary"),a.info(`  ${String(v.length)} packages scanned`),d.ignoredAdvisories.length>0&&a.info(`  ${String(d.ignoredAdvisories.length)} ${p.name} audit exclusion${d.ignoredAdvisories.length===1?"":"s"} applied`),F>0){const e=I.CRITICAL?.filter(i=>!N(i.entry)).length??0,s=I.HIGH?.filter(i=>!N(i.entry)).length??0;a.error(`  ${String(F)} vulnerabilit${F===1?"y":"ies"} found`),e>0&&a.error(`    ${String(e)} critical`),s>0&&a.warn(`    ${String(s)} high`)}else a.success("  No vulnerabilities found");if(P.length>0){const e=P.filter(s=>!N(s)).length;a.warn(`  ${String(e)} package${e===1?"":"s"} with Socket.dev supply chain issues`)}if(c.length>0&&(a.warn(`  ${String(c.length)} package${c.length===1?"":"s"} with duplicate versions`),a.notice("  Run 'vis dedupe' or your package manager's dedupe command to reduce duplicates.")),T>0&&(a.info(`  ${String(T)} acknowledged (accepted risks)`),$||a.notice("  Use --show-accepted to see acknowledged issues.")),Q===0&&a.success(`
+  All issues are acknowledged. No action required.`),n.sync&&m){const e=new Set;for(const i of M)if(i.acceptedRisk){for(const o of i.vulnerabilities)if((o.id.startsWith("CVE-")||o.id.startsWith("GHSA-"))&&e.add(o.id),o.aliases)for(const u of o.aliases)(u.startsWith("CVE-")||u.startsWith("GHSA-"))&&e.add(u)}const s=[...e];if(s.length>0){a.info("");const i=ke(p.name,t,s);for(const o of i)a.success(`  ${o}`)}else a.info(`
+No advisory IDs to sync to native PM config.`)}n.exitCode&&Q>0&&(process.exitCode=1)},"executeAudit"),Ne=R(async({logger:t,options:n,visConfig:r,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");await Re(l,n,r,t)},"execute");export{Ne as default};

package/dist/packem_chunks/handler29.js

@@ -1,23 +1,3 @@
-var re=Object.defineProperty;var V=(t,n)=>re(t,"name",{value:n,configurable:!0});import{dim as b,yellow as Y,cyan as Z,magenta as _,red as ee}from"@visulima/colorize";import{isAccessibleSync as G,readFileSync as B,writeFileSync as Q}from"@visulima/fs";import{readYamlSync as se}from"@visulima/fs/yaml";import{join as H}from"@visulima/path";import{r as oe,R as ae,A as ce,p as a,V as le,b as de,U as ue,t as ge,F as W}from"./bin.js";import{l as fe,f as pe,s as he}from"../packem_shared/dependency-scan-COr5n63B.js";var ve=Object.defineProperty,S=V((t,n)=>ve(t,"name",{value:n,configurable:!0}),"o");const L=S(t=>Array.isArray(t)?t.filter(n=>typeof n=="string"):[],"toStringArray"),K=S((t,n)=>{for(const r of n)if(r===t||r.endsWith("*")&&t.startsWith(r.slice(0,-1)))return!0;return!1},"matchesGlobList"),te=S(t=>{const n=H(t,"pnpm-workspace.yaml");if(!G(n))return{excludedPackages:[],ignoredAdvisories:[]};try{const r=se(n);return{excludedPackages:[],ignoredAdvisories:[...L(r?.auditConfig?.ignoreCves),...L(r?.auditConfig?.ignoreGhsas)]}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readPnpmAuditExclusions"),ne=S(t=>{const n=H(t,".yarnrc.yml");if(!G(n))return{excludedPackages:[],ignoredAdvisories:[]};try{const r=se(n);return{excludedPackages:L(r?.npmAuditExcludePackages),ignoredAdvisories:L(r?.npmAuditIgnoreAdvisories)}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readYarnAuditExclusions"),me=S((t,n)=>{switch(n){case"pnpm":return te(t);case"yarn":return ne(t);default:return{excludedPackages:[],ignoredAdvisories:[]}}},"readNativeAuditExclusions"),X=S((t,n,r)=>{if(K(t,n.ignoredAdvisories))return!0;if(r){for(const l of r)if(K(l,n.ignoredAdvisories))return!0}return!1},"isAdvisoryExcluded"),$e=S((t,n)=>K(t,n.excludedPackages),"isPackageExcluded"),ke=S((t,n,r)=>{if(r.length===0)return["No advisory IDs to sync."];const l=[];switch(t){case"bun":{l.push(`bun has no audit config file. Use CLI flags: bun audit ${r.map(f=>`--ignore ${f}`).join(" ")}`);break}case"npm":{l.push("npm has no native audit exclusion config. vis accepted risks are the only layer.");break}case"pnpm":{const f=H(n,"pnpm-workspace.yaml");if(!G(f)){l.push("pnpm-workspace.yaml not found. Cannot sync.");break}const h=te(n),k=new Set(h.ignoredAdvisories.filter(c=>c.startsWith("CVE-"))),m=new Set(h.ignoredAdvisories.filter(c=>c.startsWith("GHSA-"))),y=r.filter(c=>c.startsWith("CVE-")),$=r.filter(c=>c.startsWith("GHSA-")),p=[...new Set([...k,...y])],d=[...new Set([...m,...$])],v=y.filter(c=>!k.has(c)).length,w=$.filter(c=>!m.has(c)).length;if(v===0&&w===0){l.push("All advisory IDs already present in pnpm-workspace.yaml.");break}let g=B(f);if(p.length>0){const c=`  ignoreCves:
-${p.map(x=>`    - ${x}`).join(`
-`)}
-`;/auditConfig:/.test(g)?g=/ignoreCves:/.test(g)?g.replace(/ignoreCves:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,c):g.replace(/auditConfig:\s*\n/,`auditConfig:
-${c}`):g=`${g.trimEnd()}
-
-auditConfig:
-${c}`,v>0&&l.push(`Added ${String(v)} new CVE${v===1?"":"s"} to pnpm-workspace.yaml (${String(p.length)} total)`)}if(d.length>0){const c=`  ignoreGhsas:
-${d.map(x=>`    - ${x}`).join(`
-`)}
-`;/auditConfig:/.test(g)&&(g=/ignoreGhsas:/.test(g)?g.replace(/ignoreGhsas:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,c):g.replace(/(auditConfig:[\s\S]*?)(\n\S|\n?$)/m,`$1${c}$2`)),w>0&&l.push(`Added ${String(w)} new GHSA${w===1?"":"s"} to pnpm-workspace.yaml (${String(d.length)} total)`)}Q(f,g);break}case"yarn":{const f=H(n,".yarnrc.yml");if(!G(f)){l.push(".yarnrc.yml not found. Cannot sync.");break}const h=ne(n),k=new Set(h.ignoredAdvisories),m=[...new Set([...k,...r])],y=r.filter(d=>!k.has(d)).length;if(y===0){l.push("All advisory IDs already present in .yarnrc.yml.");break}let $=B(f);const p=`npmAuditIgnoreAdvisories:
-${m.map(d=>`  - "${d}"`).join(`
-`)}
-`;$=/npmAuditIgnoreAdvisories:/.test($)?$.replace(/npmAuditIgnoreAdvisories:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,p):`${$.trimEnd()}
-
-${p}`,Q(f,$),l.push(`Synced ${String(y)} advisor${y===1?"y":"ies"} to .yarnrc.yml (${String(m.length)} total)`);break}default:l.push(`Unknown package manager: ${t}`)}return l},"syncAcceptedRisksToNativeConfig");var ye=Object.defineProperty,R=V((t,n)=>ye(t,"name",{value:n,configurable:!0}),"m");const U={CRITICAL:0,HIGH:1,LOW:3,MODERATE:2,UNKNOWN:4},Ae={critical:ee,high:_,low:Z,medium:Y},j=R((t,n)=>{const r=U[n.toUpperCase()]??U.MODERATE??2;return(U[t.toUpperCase()]??4)<=r},"severityPassesFilter"),Se={CRITICAL:ee,HIGH:_,LOW:Z,MODERATE:Y,UNKNOWN:b},we=R((t,n,r,l)=>{const f=Se[r.severity]??b,h=l?` ${b("[acknowledged]")}`:"",k=r.fixedVersions??[],m=k.length>0?` (fix: ${k.join(", ")})`:"";return`  ${f(r.severity)} ${r.id} — ${t}@${n}${h}
-    ${r.summary}${m}`},"formatVulnLine"),Ce=R((t,n)=>{const r=oe(t),l=`${String(Math.round(t.score.overall*100))}%`,f=n?` ${b("[acknowledged]")}`:"",h=t.alerts.length>0?`, ${String(t.alerts.length)} alert${t.alerts.length===1?"":"s"}`:"";return`  ${l} ${r}@${t.version} (${ae(t.score.overall)}${h})${f}`},"formatSocketLine"),Re=R(async(t,n,r,l)=>{const f=n.severity??"low",h=n.format==="json"||!!n.json,k=!!n.fix,m=!!n.showAccepted,y=r?.security?.socket,$=y?.acceptedRisks,p=ce(t),d=me(t,p.name);(d.ignoredAdvisories.length>0||d.excludedPackages.length>0)&&a.info(`Loaded ${String(d.ignoredAdvisories.length)} ignored advisor${d.ignoredAdvisories.length===1?"y":"ies"} and ${String(d.excludedPackages.length)} excluded package${d.excludedPackages.length===1?"":"s"} from ${p.name} config.`);const v=fe(t,p.name);if(v.length===0){a.info(`No ${p.name} lockfile entries found. Run ${p.name} install first.`);return}h||a.info(`Scanning ${String(v.length)} installed packages…`);const w=v.map(e=>({name:e.name,version:e.version})),g=le(y),c=pe(t,p.name),x=[{id:"vulnerabilities",label:"Known vulnerabilities (OSV)"},...g?[{id:"socket",label:"Socket.dev supply-chain reports"}]:[]],C=he(x,{live:!h}),ie=Date.now(),E=R(e=>{const s=Date.now()-e;return s>=1e3?`${(s/1e3).toFixed(1)}s`:`${String(Math.round(s))}ms`},"fmtElapsed");let q,J;try{const e=Date.now(),s=Date.now();C.start("vulnerabilities"),g&&C.start("socket"),[q,J]=await Promise.all([de(w).then(i=>{let o=0;for(const u of i.values())o+=u.length;return C.finish("vulnerabilities",o>0?"warn":"ok",o>0?`${String(o)} found · ${E(e)}`:`none found · ${E(e)}`),i}).catch(i=>{const o=i instanceof Error?i.message:String(i);return C.finish("vulnerabilities","error",o),new Map}),g?ue(w,g).then(i=>{let o=0,u=0;for(const D of i.values())o+=D.alerts.length,D.score.overall<W&&(u+=1);const O=o+u;return C.finish("socket",O>0?"warn":"ok",O>0?`${String(o)} alert${o===1?"":"s"}, ${String(u)} low-score · ${E(s)}`:`clean · ${E(s)}`),i}).catch(i=>{const o=i instanceof Error?i.message:String(i);return C.finish("socket","error",o),new Map}):Promise.resolve(new Map)])}finally{C.stop()}h||a.info(b(`Scan completed in ${E(ie)}`));const M=[];for(const e of v){if($e(e.name,d))continue;const s=q.get(e.name)??[],i=J.get(`${e.name}@${e.version}`),o=ge(e.name,e.version,$),u=s.length>0,O=i?i.score.overall<W:!1,D=i?i.alerts.length>0:!1;(u||O||D)&&M.push({acceptedRisk:o,name:e.name,socketReport:i,version:e.version,vulnerabilities:s})}const A=M.filter(e=>{const s=e.vulnerabilities.some(u=>j(u.severity,f)),i=e.socketReport?.alerts.some(u=>j(u.severity==="medium"?"MODERATE":u.severity.toUpperCase(),f)),o=e.socketReport&&e.socketReport.score.overall<W;return s||i||o});if(h){const e={duplicates:c.map(s=>({name:s.name,versionCount:s.versions.length,versions:s.versions})),packages:v.length,results:A.map(s=>({acceptedRisk:s.acceptedRisk??null,name:s.name,socketAlerts:s.socketReport?.alerts??[],socketScore:s.socketReport?.score.overall??null,version:s.version,vulnerabilities:s.vulnerabilities})),summary:{accepted:A.filter(s=>s.acceptedRisk).length,duplicatePackages:c.length,issues:A.filter(s=>!s.acceptedRisk).length,total:A.length}};process.stdout.write(`${JSON.stringify(e,void 0,2)}
-`),n.exitCode&&e.summary.issues>0&&(process.exitCode=1);return}if(A.length===0){a.success(`No security issues found across ${String(v.length)} packages.`);return}const I={CRITICAL:[],HIGH:[],LOW:[],MODERATE:[]};for(const e of A)for(const s of e.vulnerabilities)if(j(s.severity,f)){const i=s.severity==="UNKNOWN"?"LOW":s.severity;I[i]?.push({entry:e,vuln:s})}let F=0,T=0;for(const e of["CRITICAL","HIGH","MODERATE","LOW"]){const s=I[e];if(!(!s||s.length===0)){a.info(`
-── ${e} (${String(s.length)}) ──`);for(const{entry:i,vuln:o}of s){const u=!!i.acceptedRisk||X(o.id,d,o.aliases);u&&(T++,!m)||(F++,a.info(we(i.name,i.version,o,u)),k&&(o.fixedVersions??[]).length>0&&a.notice(`    Fix: update to ${o.fixedVersions.at(-1)}`))}}}const P=A.filter(e=>e.socketReport&&(e.socketReport.score.overall<W||e.socketReport.alerts.length>0));if(P.length>0){a.info(`
-── Socket.dev Supply Chain (${String(P.length)}) ──`);for(const e of P){if(!e.socketReport)continue;const s=!!e.acceptedRisk;if(!(s&&!m)){a.info(Ce(e.socketReport,s));for(const i of e.socketReport.alerts){const o=Ae[i.severity]??b;a.info(`    ${o(`[${i.severity.toUpperCase()}]`)} ${i.type} — ${i.category}`)}}}}if(c.length>0){a.info(`
-── Duplicate Dependencies (${String(c.length)}) ──`);for(const e of c){const s=e.versions.join(", ");a.info(`  ${e.name} — ${String(e.versions.length)} versions: ${Y(s)}`)}}const N=R(e=>!!e.acceptedRisk||e.vulnerabilities.length>0&&e.vulnerabilities.every(s=>X(s.id,d,s.aliases)),"isEntryExcluded"),z=A.filter(e=>!N(e)).length;if(a.info(""),a.info("─ Audit Summary"),a.info(`  ${String(v.length)} packages scanned`),d.ignoredAdvisories.length>0&&a.info(`  ${String(d.ignoredAdvisories.length)} ${p.name} audit exclusion${d.ignoredAdvisories.length===1?"":"s"} applied`),F>0){const e=I.CRITICAL?.filter(i=>!N(i.entry)).length??0,s=I.HIGH?.filter(i=>!N(i.entry)).length??0;a.error(`  ${String(F)} vulnerabilit${F===1?"y":"ies"} found`),e>0&&a.error(`    ${String(e)} critical`),s>0&&a.warn(`    ${String(s)} high`)}else a.success("  No vulnerabilities found");if(P.length>0){const e=P.filter(s=>!N(s)).length;a.warn(`  ${String(e)} package${e===1?"":"s"} with Socket.dev supply chain issues`)}if(c.length>0&&(a.warn(`  ${String(c.length)} package${c.length===1?"":"s"} with duplicate versions`),a.notice("  Run 'vis dedupe' or your package manager's dedupe command to reduce duplicates.")),T>0&&(a.info(`  ${String(T)} acknowledged (accepted risks)`),m||a.notice("  Use --show-accepted to see acknowledged issues.")),z===0&&a.success(`
-  All issues are acknowledged. No action required.`),n.sync&&$){const e=new Set;for(const i of M)if(i.acceptedRisk){for(const o of i.vulnerabilities)if((o.id.startsWith("CVE-")||o.id.startsWith("GHSA-"))&&e.add(o.id),o.aliases)for(const u of o.aliases)(u.startsWith("CVE-")||u.startsWith("GHSA-"))&&e.add(u)}const s=[...e];if(s.length>0){a.info("");const i=ke(p.name,t,s);for(const o of i)a.success(`  ${o}`)}else a.info(`
-No advisory IDs to sync to native PM config.`)}n.exitCode&&z>0&&(process.exitCode=1)},"executeAudit"),Oe=R(async({logger:t,options:n,visConfig:r,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");await Re(l,n,r,t)},"execute");export{Oe as default};
+var I=Object.defineProperty;var y=(e,t)=>I(e,"name",{value:t,configurable:!0});import{createRequire as D}from"node:module";import{getAffectedProjects as G}from"@visulima/task-runner";import{y as q,m as L}from"./bin.js";const T=D(import.meta.url),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,A=y(e=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[t,r]=h.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return h.getBuiltinModule(e)}return T(e)},"__cjs_getBuiltinModule"),{execFile:N}=A("node:child_process"),{promisify:U}=A("node:util");var V=Object.defineProperty,i=y((e,t)=>V(e,"name",{value:t,configurable:!0}),"t");const M=U(N),J=["[skip ci]","[ci skip]","[no ci]","[vis skip]","[nx skip]"],z=["[vis deploy]","[nx deploy]"],W=["vis","nx"],Z=["CACHED_COMMIT_REF","VERCEL_GIT_PREVIOUS_SHA","GITHUB_BASE_REF","CI_COMMIT_BEFORE_SHA"],K=/^[\w./~^@{}][\w.\-/~^@{}]*$/,Q=i((e=process.env)=>{for(const t of Z){const r=e[t];if(r&&r.trim().length>0)return r.trim()}},"resolveCiBaseSha"),R=i(e=>{if(!K.test(e))throw new Error(`Invalid git ref: "${e}". Refs must start with an alphanumeric character or one of _ . / ~ ^ @ { } and may only contain letters, digits, dots, dashes, underscores, slashes, tildes, carets, @, and braces.`)},"validateGitRef"),X=i(async(e,t)=>{try{return await M("git",["rev-parse","--verify",`${t}^{commit}`],{cwd:e}),!0}catch{return!1}},"isRefReachable"),Y=i(async e=>{try{const{stdout:t}=await M("git",["log","-1","--pretty=%B"],{cwd:e});return t}catch{return""}},"readLastCommitMessage"),B=i((e,t,r)=>W.some(a=>e.includes(`[${a} ${t} ${r}]`)),"matchesPerProjectToken"),ee=i((e,t)=>J.some(r=>e.includes(r))||B(e,"skip",t),"commitHasSkipMessage"),te=i((e,t)=>z.some(r=>e.includes(r))||B(e,"deploy",t),"commitHasForceDeployMessage"),l=i((e,t,r,a)=>({action:"build",message:r,project:e,reason:t,...a}),"decideBuild"),k=i((e,t,r,a)=>({action:"skip",message:r,project:e,reason:t,...a}),"decideSkip"),re=i(e=>`${e.action==="skip"?"🛑":"✅"} ${e.message}`,"formatDecisionLine"),oe=i((e,t)=>e.action==="skip"||t?0:1,"exitCodeFor");var se=Object.defineProperty,_=y((e,t)=>se(e,"name",{value:t,configurable:!0}),"u");const S=new Set(["deep","direct","none"]),de=_(async({argument:e,logger:t,options:r,visConfig:a,workspaceRoot:p})=>{const o=e[0]??"",E=!!r.json,C=!!r.verbose,O=!!(r["exit-zero-on-build"]??r.exitZeroOnBuild),u=_(s=>{C&&!E&&t.info(`❱ ${s}`)},"debug"),n=_(s=>{E?process.stdout.write(`${JSON.stringify(s)}
+`):t.info(re(s)),process.exit(oe(s,O))},"emit");if(!o)return n(l("","missing-project-argument","Missing project argument. Usage: vis ignore <project>"));if(!p)return n(l(o,"workspace-error","Could not determine workspace root — building defensively"));const g=await Y(p),w=g.trim().split(`
+`)[0]??"";if(u(`commit: ${w}`),g&&te(g,o))return n(l(o,"commit-force-deploy",`Force-deploy keyword in commit: "${w}"`));if(g&&ee(g,o))return n(k(o,"commit-skip",`Skip keyword in commit: "${w}"`));let $,P;try{({packageJsons:P,workspace:$}=q(p,a))}catch(s){const d=s instanceof Error?s.message:String(s);return n(l(o,"workspace-error",`Workspace discovery failed (${d}) — building defensively`))}if(!Object.hasOwn($.projects,o))return n(l(o,"project-unknown",`Project "${o}" not found in workspace — building defensively`));try{const s=r.base?.trim(),d=Q();let c=s||d||"HEAD~1";const m=r.head?.trim()||"HEAD";R(c),R(m),u(`resolved base ref: ${c} (source: ${s?"flag":d?"ci-env":"default"})`);const x=X(p,c),F=L(p,$,P);await x||(u(`base ref ${c} not reachable — falling back to HEAD~1`),c="HEAD~1"),u(`comparing ${c}...${m}`);const j=r.downstream??"deep",b=r.upstream??"none";if(!S.has(j))throw new Error(`Invalid --downstream value: "${j}". Must be "none", "direct", or "deep".`);if(!S.has(b))throw new Error(`Invalid --upstream value: "${b}". Must be "none", "direct", or "deep".`);const H={base:c,downstream:j,head:m,projectGraph:F,projects:$.projects,upstream:b,workspaceRoot:p},f=await G(H);u(`changed files: ${f.changedFiles.length}`),u(`affected projects: ${f.affectedProjects.join(", ")||"(none)"}`);const v={base:c,head:m};return f.changedFiles.length===0?n(k(o,"no-changes",`No files changed between ${c}...${m}`,{...v,affectedProjects:[]})):f.affectedProjects.includes(o)?n(l(o,"project-affected",`Build ${o}: affected by ${f.changedFiles.length} changed file(s)`,{...v,affectedProjects:f.affectedProjects})):n(k(o,"project-not-affected",`Skip ${o}: not affected by changes between ${c}...${m}`,{...v,affectedProjects:f.affectedProjects}))}catch(s){const d=s instanceof Error?s.message:String(s);return t.error(`Affected detection failed: ${d}`),n(l(o,"workspace-error",`Affected detection failed (${d}) — building defensively`))}},"execute");export{de as default};

package/dist/packem_chunks/handler3.js

@@ -1,4 +1,4 @@
-var x=Object.defineProperty;var h=(n,t)=>x(n,"name",{value:t,configurable:!0});import{findPackageManagerSync as N}from"@visulima/package";import{H as P,e as U,Z as j}from"../packem_shared/ai-analysis-hm8d2W7z.js";import{g as M,a as O,E as b,i as T,L as z,b as S,V,U as q}from"./bin.js";var A=Object.defineProperty,F=h((n,t)=>A(n,"name",{value:t,configurable:!0}),"x");const H=/^[\^~>=<]+/,B=F(async({argument:n,logger:t,options:f,visConfig:u,workspaceRoot:g})=>{if(!g)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const p=n,e=p[0];if(!e)throw new Error("Package name is required. Usage: vis analyze <package> [version]");const m=p[1],{packageManager:E}=N(g);let o,w="default";const C=M(g,E);for(const[a,i]of C){const s=i.get(e);if(s){o=s,w=a;break}}if(!o)throw new Error(`Package "${e}" not found in any catalog or package.json. Make sure it exists in your workspace dependencies.`);let r;if(m)r=m;else{t.info(`Fetching latest version for ${e}...
-`);const a=await O(e);if(!a.latest)throw new Error(`Could not determine latest version for "${e}".`);r=a.latest}const d=b(o),k=b(r);if(!d||!k)throw new Error(`Could not parse versions: current="${o}", target="${r}".`);const y=T(d,k);if(y==="none"){t.info(`${e} is already at ${r}. Nothing to analyze.`);return}const R=z(o),l={catalogName:w,currentRange:o,newRange:`${R}${r}`,packageName:e,targetVersion:r,updateType:y},v=P(f.aiType??"impact");if(v==="security"||f.security){t.info(`Checking for known vulnerabilities...
-`);const a=o.replace(H,""),i=(await S([{name:e,version:a}])).get(e);i&&i.length>0&&(l.vulnerabilities=i);const s=V(u?.security?.socket);if(s){const c=(await q([{name:e,version:a}],s)).get(`${e}@${a}`);c&&(l.socketReport={alerts:c.alerts,license:c.license,score:c.score})}}const $=await U([l],t,u?.ai,v);(f.format??"table")==="json"?process.stdout.write(`${JSON.stringify($,void 0,2)}
-`):t.info(j($))},"execute");export{B as default};
+var C=Object.defineProperty;var h=(n,t)=>C(n,"name",{value:t,configurable:!0});import{U as T,R as U,T as x,S as b,z as j,_ as z,N as O,J as P,a as J}from"./bin.js";import{H as M,e as S,Z as q}from"../packem_shared/ai-analysis-Dzs_nUwM.js";var A=Object.defineProperty,F=h((n,t)=>A(n,"name",{value:t,configurable:!0}),"x");const H=/^[\^~>=<]+/,_=F(async({argument:n,logger:t,options:f,visConfig:u,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const p=n,e=p[0];if(!e)throw new Error("Package name is required. Usage: vis analyze <package> [version]");const w=p[1],{packageManager:R}=T(l);let o,d="default";const E=U(l,R);for(const[a,s]of E){const i=s.get(e);if(i){o=i,d=a;break}}if(!o)throw new Error(`Package "${e}" not found in any catalog or package.json. Make sure it exists in your workspace dependencies.`);let r;if(w)r=w;else{t.info(`Fetching latest version for ${e}...
+`);const a=await x(e);if(!a.latest)throw new Error(`Could not determine latest version for "${e}".`);r=a.latest}const m=b(o),k=b(r);if(!m||!k)throw new Error(`Could not parse versions: current="${o}", target="${r}".`);const v=j(m,k);if(v==="none"){t.info(`${e} is already at ${r}. Nothing to analyze.`);return}const N=z(o),g={catalogName:d,currentRange:o,newRange:`${N}${r}`,packageName:e,targetVersion:r,updateType:v},y=M(f.aiType??"impact");if(y==="security"||f.security){t.info(`Checking for known vulnerabilities...
+`);const a=o.replace(H,""),s=(await O([{name:e,version:a}])).get(e);s&&s.length>0&&(g.vulnerabilities=s);const i=P(u?.security?.socket);if(i){const c=(await J([{name:e,version:a}],i)).get(`${e}@${a}`);c&&(g.socketReport={alerts:c.alerts,license:c.license,score:c.score})}}const $=await S([g],t,u?.ai,y);(f.format??"table")==="json"?process.stdout.write(`${JSON.stringify($,void 0,2)}
+`):t.info(q($))},"execute");export{_ as default};

package/dist/packem_chunks/handler30.js

@@ -1,3 +1,18 @@
-var I=Object.defineProperty;var y=(e,t)=>I(e,"name",{value:t,configurable:!0});import{createRequire as D}from"node:module";import{getAffectedProjects as G}from"@visulima/task-runner";import{k as q,y as L}from"./bin.js";const T=D(import.meta.url),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,A=y(e=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[t,r]=h.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return h.getBuiltinModule(e)}return T(e)},"__cjs_getBuiltinModule"),{execFile:N}=A("node:child_process"),{promisify:U}=A("node:util");var V=Object.defineProperty,i=y((e,t)=>V(e,"name",{value:t,configurable:!0}),"t");const M=U(N),J=["[skip ci]","[ci skip]","[no ci]","[vis skip]","[nx skip]"],z=["[vis deploy]","[nx deploy]"],W=["vis","nx"],Z=["CACHED_COMMIT_REF","VERCEL_GIT_PREVIOUS_SHA","GITHUB_BASE_REF","CI_COMMIT_BEFORE_SHA"],K=/^[\w./~^@{}][\w.\-/~^@{}]*$/,Q=i((e=process.env)=>{for(const t of Z){const r=e[t];if(r&&r.trim().length>0)return r.trim()}},"resolveCiBaseSha"),R=i(e=>{if(!K.test(e))throw new Error(`Invalid git ref: "${e}". Refs must start with an alphanumeric character or one of _ . / ~ ^ @ { } and may only contain letters, digits, dots, dashes, underscores, slashes, tildes, carets, @, and braces.`)},"validateGitRef"),X=i(async(e,t)=>{try{return await M("git",["rev-parse","--verify",`${t}^{commit}`],{cwd:e}),!0}catch{return!1}},"isRefReachable"),Y=i(async e=>{try{const{stdout:t}=await M("git",["log","-1","--pretty=%B"],{cwd:e});return t}catch{return""}},"readLastCommitMessage"),B=i((e,t,r)=>W.some(a=>e.includes(`[${a} ${t} ${r}]`)),"matchesPerProjectToken"),ee=i((e,t)=>J.some(r=>e.includes(r))||B(e,"skip",t),"commitHasSkipMessage"),te=i((e,t)=>z.some(r=>e.includes(r))||B(e,"deploy",t),"commitHasForceDeployMessage"),l=i((e,t,r,a)=>({action:"build",message:r,project:e,reason:t,...a}),"decideBuild"),v=i((e,t,r,a)=>({action:"skip",message:r,project:e,reason:t,...a}),"decideSkip"),re=i(e=>`${e.action==="skip"?"🛑":"✅"} ${e.message}`,"formatDecisionLine"),oe=i((e,t)=>e.action==="skip"||t?0:1,"exitCodeFor");var se=Object.defineProperty,_=y((e,t)=>se(e,"name",{value:t,configurable:!0}),"u");const S=new Set(["deep","direct","none"]),de=_(async({argument:e,logger:t,options:r,visConfig:a,workspaceRoot:p})=>{const o=e[0]??"",E=!!r.json,C=!!r.verbose,O=!!(r["exit-zero-on-build"]??r.exitZeroOnBuild),u=_(s=>{C&&!E&&t.info(`❱ ${s}`)},"debug"),n=_(s=>{E?process.stdout.write(`${JSON.stringify(s)}
-`):t.info(re(s)),process.exit(oe(s,O))},"emit");if(!o)return n(l("","missing-project-argument","Missing project argument. Usage: vis ignore <project>"));if(!p)return n(l(o,"workspace-error","Could not determine workspace root — building defensively"));const g=await Y(p),w=g.trim().split(`
-`)[0]??"";if(u(`commit: ${w}`),g&&te(g,o))return n(l(o,"commit-force-deploy",`Force-deploy keyword in commit: "${w}"`));if(g&&ee(g,o))return n(v(o,"commit-skip",`Skip keyword in commit: "${w}"`));let $,P;try{({packageJsons:P,workspace:$}=q(p,a))}catch(s){const d=s instanceof Error?s.message:String(s);return n(l(o,"workspace-error",`Workspace discovery failed (${d}) — building defensively`))}if(!Object.hasOwn($.projects,o))return n(l(o,"project-unknown",`Project "${o}" not found in workspace — building defensively`));try{const s=r.base?.trim(),d=Q();let c=s||d||"HEAD~1";const m=r.head?.trim()||"HEAD";R(c),R(m),u(`resolved base ref: ${c} (source: ${s?"flag":d?"ci-env":"default"})`);const x=X(p,c),F=L(p,$,P);await x||(u(`base ref ${c} not reachable — falling back to HEAD~1`),c="HEAD~1"),u(`comparing ${c}...${m}`);const j=r.downstream??"deep",b=r.upstream??"none";if(!S.has(j))throw new Error(`Invalid --downstream value: "${j}". Must be "none", "direct", or "deep".`);if(!S.has(b))throw new Error(`Invalid --upstream value: "${b}". Must be "none", "direct", or "deep".`);const H={base:c,downstream:j,head:m,projectGraph:F,projects:$.projects,upstream:b,workspaceRoot:p},f=await G(H);u(`changed files: ${f.changedFiles.length}`),u(`affected projects: ${f.affectedProjects.join(", ")||"(none)"}`);const k={base:c,head:m};return f.changedFiles.length===0?n(v(o,"no-changes",`No files changed between ${c}...${m}`,{...k,affectedProjects:[]})):f.affectedProjects.includes(o)?n(l(o,"project-affected",`Build ${o}: affected by ${f.changedFiles.length} changed file(s)`,{...k,affectedProjects:f.affectedProjects})):n(v(o,"project-not-affected",`Skip ${o}: not affected by changes between ${c}...${m}`,{...k,affectedProjects:f.affectedProjects}))}catch(s){const d=s instanceof Error?s.message:String(s);return t.error(`Affected detection failed: ${d}`),n(l(o,"workspace-error",`Affected detection failed (${d}) — building defensively`))}},"execute");export{de as default};
+var ee=Object.defineProperty;var E=(e,o)=>ee(e,"name",{value:o,configurable:!0});import{createRequire as te}from"node:module";import{isAccessibleSync as x}from"@visulima/fs";import{M as b,z as ie}from"../packem_shared/index-OlP7U_t5.js";import{Cache as I,parseCacheSize as ne,readLastRunSummary as U,getLastRunSummaryPath as ce,digestFile as W}from"@visulima/task-runner";import{B as he,J as z}from"../packem_shared/ai-cache-Dtvmbsru.js";import{m as le,E as J}from"../packem_shared/cache-directory-xASJia6M.js";import{p as n,a2 as ue,a3 as T}from"./bin.js";import{r as H,f as A,a as de,d as fe}from"../packem_shared/run-summary-utils-D39XBHWW.js";const oe=te(import.meta.url),S=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,O=E(e=>{if(typeof S<"u"&&S.versions&&S.versions.node){const[o,t]=S.versions.node.split(".").map(Number);if(o>22||o===22&&t>=3||o===20&&t>=16)return S.getBuiltinModule(e)}return oe(e)},"__cjs_getBuiltinModule"),{readdir:P,stat:D,realpath:F,rm:j,mkdtemp:se}=O("node:fs/promises"),{tmpdir:re}=O("node:os"),{createInterface:ae}=O("node:readline");var me=Object.defineProperty,pe=E((e,o)=>me(e,"name",{value:o,configurable:!0}),"y"),ge=Object.defineProperty,ye=pe((e,o)=>ge(e,"name",{value:o,configurable:!0}),"y"),we=Object.defineProperty,B=ye((e,o)=>we(e,"name",{value:o,configurable:!0}),"i");const $e=/^(?<value>-?\d+(?:[.,]\d+)*) *(?<type>[a-z]+)?$/i,ke=/^KIBI/,ve=/^MIBI/,Se=/^GIBI/,xe=/^TEBI/,be=/^PEBI/,Ce=/^EXBI/,Ee=/^ZEBI/,Ie=/^YIBI/,De=/^(.)IB$/,Z={iec:[{long:"Bytes",short:"B"},{long:"Kibibytes",short:"KiB"},{long:"Mebibytes",short:"MiB"},{long:"Gibibytes",short:"GiB"},{long:"Tebibytes",short:"TiB"},{long:"Pebibytes",short:"PiB"},{long:"Exbibytes",short:"EiB"},{long:"Zebibytes",short:"ZiB"},{long:"Yobibytes",short:"YiB"}],iec_octet:[{long:"Octets",short:"o"},{long:"Kibioctets",short:"Kio"},{long:"Mebioctets",short:"Mio"},{long:"Gibioctets",short:"Gio"},{long:"Tebioctets",short:"Tio"},{long:"Pebioctets",short:"Pio"},{long:"Exbioctets",short:"Eio"},{long:"Zebioctets",short:"Zio"},{long:"Yobioctets",short:"Yio"}],metric:[{long:"Bytes",short:"Bytes"},{long:"Kilobytes",short:"KB"},{long:"Megabytes",short:"MB"},{long:"Gigabytes",short:"GB"},{long:"Terabytes",short:"TB"},{long:"Petabytes",short:"PB"},{long:"Exabytes",short:"EB"},{long:"Zettabytes",short:"ZB"},{long:"Yottabytes",short:"YB"}],metric_octet:[{long:"Octets",short:"o"},{long:"Kilo-octets",short:"ko"},{long:"Mega-octets",short:"Mo"},{long:"Giga-octets",short:"Go"},{long:"Tera-octets",short:"To"},{long:"Peta-octets",short:"Po"},{long:"Exa-octets",short:"Eo"},{long:"Zetta-octets",short:"Zo"},{long:"Yotta-octets",short:"Yo"}]},Be=B((e,o)=>{const t=new Intl.NumberFormat(o).format(11111).replaceAll(new RegExp("\\p{Number}","gu"),""),r=new Intl.NumberFormat(o).format(1.1).replaceAll(new RegExp("\\p{Number}","gu"),"");return Number.parseFloat(e.replaceAll(new RegExp(`\\${t}`,"g"),"").replace(new RegExp(`\\${r}`),"."))},"parseLocalizedNumber"),K=B(e=>{switch(e){case 2:return 1024;case 10:return 1e3;default:throw new Error("Unsupported base.")}},"fromBase");B((e,o)=>{const t={base:2,locale:"en-US",units:"metric",...o};if(typeof e!="string"||e.length===0)throw new TypeError("Value is not a string or is empty.");if(e.length>100)throw new TypeError("Value exceeds the maximum length of 100 characters.");const r=$e.exec(e)?.groups;if(!r)return Number.NaN;const s=Be(r.value,t.locale),a=(r.type??"Bytes").toUpperCase().replace(ke,"KILO").replace(ve,"MEGA").replace(Se,"GIGA").replace(xe,"TERA").replace(be,"PETA").replace(Ce,"EXA").replace(Ee,"ZETTA").replace(Ie,"YOTTA").replace(De,"$1B"),i=Z[t.units].findIndex(m=>m.short[0].toUpperCase()===a[0]),h=K(t.base);return s*h**i},"parseBytes");const w=B((e,o)=>{if(typeof e!="number"||!Number.isFinite(e))throw new TypeError("Bytesize is not a number.");const{base:t,decimals:r,locale:s,long:a,unit:i,units:h,...m}={base:2,decimals:0,locale:"en-US",long:!1,units:"metric",...o},d=K(t),c=Math.abs(e),l=o?.space??!0?" ":"",u=Z[h],p=u.findIndex(N=>N.short===i);if(e===0){const N=Math.min(0,Math.max(p,u.length-1));return"0"+l+u[N][a?"long":"short"]}const C=p===-1?Math.min(Math.floor(Math.log(c)/Math.log(d)),u.length-1):p,v=u[C][a?"long":"short"],M=e/d**C,L=r<0?void 0:r;return new Intl.NumberFormat(s,{maximumFractionDigits:L,minimumFractionDigits:L,...m}).format(M)+l+v},"formatBytes");var Me=Object.defineProperty,f=E((e,o)=>Me(e,"name",{value:o,configurable:!0}),"f");const V=f(async e=>{let o=0;try{const t=await P(e,{withFileTypes:!0});for(const r of t){const s=b(e,r.name);if(r.isDirectory())o+=await V(s);else if(r.isFile()){const a=await D(s);o+=a.size}}}catch{}return o},"sumDirectorySize"),$=f(async e=>{const o=[];let t;try{t=await P(e)}catch{return[]}for(const r of t){if(r.startsWith("."))continue;const s=b(e,r);try{const a=await D(s);if(!a.isDirectory())continue;const i=await V(s);o.push({hash:r,mtimeMs:a.mtimeMs,path:s,sizeBytes:i})}catch{}}return o.sort((r,s)=>s.mtimeMs-r.mtimeMs),o},"collectCacheEntries"),Ne=f((e,o=Date.now())=>{const t=Math.max(0,Math.floor((o-e)/1e3));return t<60?`${String(t)}s`:t<3600?`${String(Math.floor(t/60))}m`:t<86400?`${String(Math.floor(t/3600))}h`:`${String(Math.floor(t/86400))}d`},"formatAge"),Re=f(e=>new Promise(o=>{const t=ae({input:process.stdin,output:process.stderr});t.question(`${e} (y/N) `,r=>{t.close();const s=r.trim().toLowerCase();o(s==="y"||s==="yes")})}),"confirmPrompt"),ze=f(async(e,o,t)=>{if(!x(e)){if(o==="json"){process.stdout.write(`${JSON.stringify({directory:e,entries:[],totalBytes:0,totalCount:0},void 0,2)}
+`);return}n.info(`No cache directory found at ${e}`);return}const r=await $(e);if(r.length===0){if(o==="json"){process.stdout.write(`${JSON.stringify({directory:e,entries:[],totalBytes:0,totalCount:0},void 0,2)}
+`);return}n.info(`Cache directory is empty: ${e}`);return}const s=r.reduce((c,l)=>c+l.sizeBytes,0);if(o==="json"){const c=Date.now();process.stdout.write(`${JSON.stringify({directory:e,entries:r.map(l=>({ageMs:c-l.mtimeMs,hash:l.hash,mtimeIso:new Date(l.mtimeMs).toISOString(),sizeBytes:l.sizeBytes})),totalBytes:s,totalCount:r.length},void 0,2)}
+`);return}n.info(`Cache directory: ${e}`),n.info(`Entries: ${String(r.length)} (${w(s,{decimals:1,space:!1})})`),t.info("");const a=Date.now(),i=r.map(c=>({age:Ne(c.mtimeMs,a),hash:c.hash.slice(0,12),size:w(c.sizeBytes,{decimals:1,space:!1})})),h=Math.max(4,...i.map(c=>c.hash.length)),m=Math.max(4,...i.map(c=>c.size.length)),d=Math.max(3,...i.map(c=>c.age.length));t.info(`  ${"hash".padEnd(h)}  ${"size".padEnd(m)}  ${"age".padEnd(d)}`),t.info(`  ${"-".repeat(h)}  ${"-".repeat(m)}  ${"-".repeat(d)}`);for(const c of i)t.info(`  ${c.hash.padEnd(h)}  ${c.size.padEnd(m)}  ${c.age.padEnd(d)}`)},"runList"),Te=f(()=>{try{const e=he();e>0&&n.info(`Cleared ${String(e)} cached AI response${e===1?"":"s"}.`)}catch(e){n.warn(`Failed to clear AI response cache: ${e instanceof Error?e.message:String(e)}`)}},"clearAiCacheSafe"),Ae=f(()=>{try{const e=ue();e>0&&n.info(`Cleared ${String(e)} cached Socket.dev report${e===1?"":"s"}.`)}catch(e){n.warn(`Failed to clear Socket.dev cache: ${e instanceof Error?e.message:String(e)}`)}},"clearSocketCacheSafe"),Oe=f(async(e,o,t)=>{if(!x(e)){n.info(`No cache directory to clean at ${e}`);return}if(t.dryRun){const s=await $(e),a=s.reduce((i,h)=>i+h.sizeBytes,0);n.info(`Would remove ${String(s.length)} cache entr${s.length===1?"y":"ies"} (${w(a,{decimals:1,space:!1})}) from ${e}`);return}const r=le(e,o);try{const s=await F(e),a=await F(o);if(s===a){n.error("Refusing to delete the workspace root. The cache directory resolved to the same path as the workspace."),process.exitCode=1;return}}catch{}if(!r&&!t.force){if(n.warn(`Cache directory is outside the workspace root: ${e}`),n.warn("This will recursively delete the entire directory, including anything stored there by other tools."),!process.stdin.isTTY){n.error("Refusing to clean an out-of-workspace cache without --force (stdin is not a TTY)."),process.exitCode=1;return}if(!await Re("  Continue?")){n.info("Aborted.");return}}r?await new I({cacheDirectory:e,workspaceRoot:o}).clear():await j(e,{force:!0,recursive:!0}),n.success(`Cleared cache: ${e}`)},"runClean"),Pe=f(async(e,o,t)=>{if(!x(e)){n.info(`No cache directory to prune at ${e}`);return}if(t.maxCacheAgeDays!==void 0&&(!Number.isFinite(t.maxCacheAgeDays)||t.maxCacheAgeDays<0)){n.error(`Invalid --max-age-days value: expected a finite number >= 0, got ${String(t.maxCacheAgeDays)}`),process.exitCode=1;return}if(t.keepLast!==void 0&&(!Number.isFinite(t.keepLast)||t.keepLast<0||!Number.isInteger(t.keepLast))){n.error(`Invalid --keep-last value: expected a non-negative integer, got ${String(t.keepLast)}`),process.exitCode=1;return}if(t.maxCacheSize!==void 0){let c;try{c=ne(t.maxCacheSize)}catch(l){n.error(`Invalid --max-size value: ${l instanceof Error?l.message:String(l)}`),process.exitCode=1;return}if(!Number.isFinite(c)||c<=0){n.error(`Invalid --max-size value: expected a positive size, got "${t.maxCacheSize}" (${String(c)} bytes)`),process.exitCode=1;return}}const r=t.maxCacheAgeDays===void 0?void 0:t.maxCacheAgeDays*24*60*60*1e3,s=await $(e),a=s.reduce((c,l)=>c+l.sizeBytes,0);if(t.keepLast!==void 0&&s.length>t.keepLast){const c=s.slice(t.keepLast);await Promise.all(c.map(l=>j(l.path,{force:!0,recursive:!0})))}await new I({cacheDirectory:e,maxCacheAge:r,maxCacheSize:t.maxCacheSize,workspaceRoot:o}).removeOldEntries();const i=await $(e),h=i.reduce((c,l)=>c+l.sizeBytes,0),m=s.length-i.length,d=a-h;if(m<=0){n.info("Nothing to prune — all entries are within the configured limits.");return}n.success(`Pruned ${String(m)} entr${m===1?"y":"ies"}, freed ${w(d,{decimals:1,space:!1})}.`)},"runPrune"),_=16,q=f(e=>e.length>_?`${e.slice(0,_)}…`:e,"truncateHash"),R=f((e,o,t)=>{const r=Object.entries(o??{});if(r.length!==0){t.info(`  ${e}:`),r.sort(([s],[a])=>s.localeCompare(a));for(const[s,a]of r)t.info(`    ${s.padEnd(40)}  ${q(a)}`)}},"renderHashDetailsBucket"),je=f(async(e,o,t)=>{const{format:r,runId:s,workspaceRoot:a}=o,i=s===void 0?await U(a):await H(a,s);if(!i){if(r==="json"){process.stdout.write(`${JSON.stringify({error:"no-summary",runId:s??null,taskId:e},void 0,2)}
+`),process.exitCode=1;return}s===void 0?n.error("No previous run summary found. Run a task first to populate `.task-runner/last-summary.json`."):n.error(`Run summary "${s}" not found in .task-runner/runs/.`),process.exitCode=1;return}const h=A(i,e);if(!h){if(r==="json"){process.stdout.write(`${JSON.stringify({error:"task-not-in-summary",runId:i.id,taskId:e},void 0,2)}
+`),process.exitCode=1;return}n.error(`Task "${e}" was not part of run ${i.id}.`),n.info(`Tasks in this run: ${i.tasks.map(l=>l.taskId).join(", ")||"(none)"}`),process.exitCode=1;return}const m=await de(a,i.id),d=m?A(m,e):void 0,c=fe(h.hashDetails,d?.hashDetails);if(r==="json"){process.stdout.write(`${JSON.stringify({diff:c,previousRunId:m?.id??null,previousTask:d?{cacheStatus:d.cacheStatus,hash:d.hash??null,hashDetails:d.hashDetails??null}:null,runId:i.id,task:{cacheStatus:h.cacheStatus,hash:h.hash??null,hashDetails:h.hashDetails??null,taskId:h.taskId}},void 0,2)}
+`);return}if(n.info(`Why ${e}? (run ${i.id})`),t.info(""),t.info(`  status:  ${h.cacheStatus}`),t.info(`  hash:    ${h.hash??"(none)"}`),d?t.info(`  prev:    ${d.hash??"(none)"}  [run ${m?.id??"?"}]`):t.info("  prev:    (no prior run found)"),t.info(""),!d){n.info("No previous run to diff against — first time this task was recorded.");return}if(!c.commandChanged&&c.nodes.added.length===0&&c.nodes.changed.length===0&&c.nodes.removed.length===0&&c.runtime.added.length===0&&c.runtime.changed.length===0&&c.runtime.removed.length===0&&c.implicitDeps.added.length===0&&c.implicitDeps.changed.length===0&&c.implicitDeps.removed.length===0){n.success("No hash inputs changed since the previous run.");return}t.info("Hash inputs that changed since the previous run:"),t.info(""),c.commandChanged&&t.info("  command:  changed");for(const l of["nodes","runtime","implicitDeps"]){const u=c[l];if(!(u.added.length===0&&u.changed.length===0&&u.removed.length===0)){t.info(`  ${l}:`);for(const p of u.added)t.info(`    + ${p}`);for(const p of u.changed)t.info(`    ~ ${p}`);for(const p of u.removed)t.info(`    - ${p}`)}}t.info(""),n.info(`Last summary file: ${ce(a)}`)},"runWhy"),Le=f(async(e,o,t)=>{const{format:r,runId:s,workspaceRoot:a}=o,i=s===void 0?await U(a):await H(a,s);if(!i){if(r==="json"){process.stdout.write(`${JSON.stringify({error:"no-summary",runId:s??null,taskId:e},void 0,2)}
+`),process.exitCode=1;return}s===void 0?n.error("No previous run summary found. Run a task first to populate `.task-runner/last-summary.json`."):n.error(`Run summary "${s}" not found in .task-runner/runs/.`),process.exitCode=1;return}const h=A(i,e);if(!h){if(r==="json"){process.stdout.write(`${JSON.stringify({error:"task-not-in-summary",runId:i.id,taskId:e},void 0,2)}
+`),process.exitCode=1;return}n.error(`Task "${e}" was not part of run ${i.id}.`),process.exitCode=1;return}if(r==="json"){process.stdout.write(`${JSON.stringify({cacheStatus:h.cacheStatus,hash:h.hash??null,hashDetails:h.hashDetails??null,runId:i.id,taskId:h.taskId},void 0,2)}
+`);return}n.info(`Hash for ${e} (run ${i.id})`),t.info(""),t.info(`  status:  ${h.cacheStatus}`),t.info(`  hash:    ${h.hash??"(none)"}`),h.hashDetails?(t.info(""),t.info(`  command: ${q(h.hashDetails.command)}`),R("nodes",h.hashDetails.nodes,t),R("runtime",h.hashDetails.runtime,t),R("implicitDeps",h.hashDetails.implicitDeps,t)):(t.info(""),n.info("No hash details recorded for this task."))},"runHash"),Fe=f(async(e,o)=>{if(!x(e)){if(o==="json"){process.stdout.write(`${JSON.stringify({directory:e,exists:!1,totalBytes:0,totalCount:0})}
+`);return}n.info(`No cache directory at ${e}`);return}const t=await $(e),r=t.reduce((s,a)=>s+a.sizeBytes,0);if(o==="json"){process.stdout.write(`${JSON.stringify({directory:e,exists:!0,totalBytes:r,totalCount:t.length})}
+`);return}n.info(`Cache directory: ${e}`),n.info(`Entries:         ${String(t.length)}`),n.info(`Total size:      ${w(r,{decimals:1,space:!1})}`)},"runSize"),Je=f(async e=>{const o=[],t=f(async r=>{const s=(await P(r,{withFileTypes:!0})).toSorted((a,i)=>a.name.localeCompare(i.name));for(const a of s){const i=b(r,a.name);if(a.isDirectory()){await t(i);continue}if(!a.isFile())continue;const[h,m]=await Promise.all([D(i),W(i)]);o.push({hash:m?.hash??"",mode:h.mode&4095,mtimeMs:h.mtimeMs,relativePath:ie(e,i).replaceAll("\\","/"),sizeBytes:h.size})}},"walk");return await t(e),o},"walkAndDigest"),_e=f((e,o)=>Math.floor(e/1e3)===Math.floor(o/1e3),"compareSecondsTruncated"),G=16,Ge=f(async(e,o)=>{const t=b(o,e.relativePath),r=await D(t).catch(()=>{});if(!r)return{expected:{hash:e.hash,mode:e.mode,mtimeMs:e.mtimeMs},issues:["missing"],relativePath:e.relativePath};const s=await W(t),a=[];(s?.hash??"")!==e.hash&&a.push("content");const i=r.mode&4095;if(process.platform!=="win32"&&i!==e.mode&&a.push("mode"),_e(r.mtimeMs,e.mtimeMs)||a.push("mtime"),a.length!==0)return{actual:{hash:s?.hash,mode:i,mtimeMs:r.mtimeMs},expected:{hash:e.hash,mode:e.mode,mtimeMs:e.mtimeMs},issues:a,relativePath:e.relativePath}},"computeFileDiff"),Ye=f(async(e,o,t)=>{const{cacheDirectories:r,format:s,workspaceRoot:a}=o;if(r.length===0){s==="json"?process.stdout.write(`${JSON.stringify({error:"no-cache-directory",taskId:e},void 0,2)}
+`):n.error("No cache directory resolved — pass --cache-dir or run inside a workspace."),process.exitCode=1;return}let i,h;for(const d of r){const c=await new I({cacheDirectory:d,workspaceRoot:a}).getByTaskId(e);if(c){i=d,h=c;break}}if(!h||!i){s==="json"?process.stdout.write(`${JSON.stringify({error:"no-cached-entry",searchedCaches:r,taskId:e},void 0,2)}
+`):n.error(`No cached entry found for task "${e}". Run it once before verifying.`),process.exitCode=1;return}const m=await se(b(re(),"vis-cache-verify-"));try{if(!await new I({cacheDirectory:i,workspaceRoot:m}).restoreOutputs(h.hash)){s==="json"?process.stdout.write(`${JSON.stringify({error:"restore-failed",hash:h.hash,taskId:e},void 0,2)}
+`):n.error(`Cache restore failed for ${e} (hash ${h.hash}).`),process.exitCode=1;return}const d=await Je(m);if(d.length===0){s==="json"?process.stdout.write(`${JSON.stringify({diffs:[],hash:h.hash,status:"no-outputs",taskId:e},void 0,2)}
+`):n.info(`Cached entry for ${e} has no recorded outputs — nothing to verify.`);return}const c=Array.from({length:d.length});for(let u=0;u<d.length;u+=G){const p=d.slice(u,u+G),C=await Promise.all(p.map(async v=>Ge(v,a)));for(const[v,M]of C.entries())c[u+v]=M}const l=c.filter(u=>u!==void 0);if(s==="json"){process.stdout.write(`${JSON.stringify({cachedFileCount:d.length,cacheDirectory:i,diffs:l,hash:h.hash,status:l.length===0?"ok":"drift",taskId:e},void 0,2)}
+`),l.length>0&&(process.exitCode=1);return}if(n.info(`Verify ${e}  (hash ${h.hash})`),t.info(""),t.info(`  cache:      ${i}`),t.info(`  files:      ${String(d.length)}`),l.length===0){t.info(""),n.success("Cache restore is faithful — all files match content, mode, and mtime.");return}t.info(`  drift:      ${String(l.length)} file(s)`),t.info("");for(const u of l){const p=u.issues.includes("missing")?"MISSING":u.issues.join(",").toUpperCase();t.info(`  [${p}] ${u.relativePath}`),!u.issues.includes("missing")&&u.expected&&u.actual&&(u.issues.includes("content")&&(t.info(`    expected hash: ${u.expected.hash||"(none)"}`),t.info(`    actual   hash: ${u.actual.hash??"(unreadable)"}`)),u.issues.includes("mode")&&(t.info(`    expected mode: ${u.expected.mode.toString(8)}`),t.info(`    actual   mode: ${(u.actual.mode??0).toString(8)}`)),u.issues.includes("mtime")&&(t.info(`    expected mtime: ${new Date(u.expected.mtimeMs).toISOString()}`),t.info(`    actual   mtime: ${u.actual.mtimeMs===void 0?"(unreadable)":new Date(u.actual.mtimeMs).toISOString()}`)))}process.exitCode=1}finally{await j(m,{force:!0,recursive:!0}).catch(()=>{})}},"runVerify"),X=f(e=>e==="task"||e==="ai"||e==="socket"||e==="all"?e:(e&&e.length>0&&n.warn(`Unknown --type value '${e}'; falling back to 'all'.`),"all"),"parseCacheTarget"),g=f((e,o)=>e==="all"||e===o,"includesTarget"),y=f(e=>e===void 0?null:new Date(e).toISOString(),"isoOrNull"),Y=f((e,o)=>{n.info(`${e}:`),n.info(`  Entries:    ${String(o.entries)}`),n.info(`  Total size: ${w(o.totalSizeBytes,{decimals:1,space:!1})}`),n.info(`  Oldest:     ${o.oldestEntry?new Date(o.oldestEntry).toISOString():"N/A"}`),n.info(`  Newest:     ${o.newestEntry?new Date(o.newestEntry).toISOString():"N/A"}`)},"printAuxStatsBlock"),Ue=f(e=>e==="worktree"||e==="shared"||e==="all"?e:(e&&e.length>0&&n.warn(`Unknown --scope value '${e}'; falling back to 'shared'.`),"shared"),"parseScope"),k=f((e,o,t)=>{const r=e??process.cwd(),s=t??{},a=s.taskRunnerOptions??{},i=Ue(o.scope),h=o.cacheDir,m=J(r,h,a.cacheDirectory,!1),d=J(r,h,a.cacheDirectory,s.sharedWorktreeCache);let c,l;switch(i){case"all":{c=d,l=d===m?[d]:[d,m];break}case"worktree":{c=m,l=[m];break}default:c=d,l=[d]}return{cacheDirectories:l,cacheDirectory:c,scope:i,sharedWorktreeCache:s.sharedWorktreeCache,workspaceRoot:r}},"resolveCacheDirectoryFromContext"),tt=f(async({logger:e,options:o,visConfig:t,workspaceRoot:r})=>{const{cacheDirectories:s}=k(r,o,t),a=o.format??"table";for(const i of s)s.length>1&&n.info(`# ${i}`),await ze(i,a,e)},"cacheListExecute"),ot=f(async({options:e,visConfig:o,workspaceRoot:t})=>{const r=X(e.type),s=!!e.dryRun;if(g(r,"task")){const{cacheDirectory:a,workspaceRoot:i}=k(t,e,o);await Oe(a,i,{dryRun:s,force:!!e.force})}if(g(r,"ai"))if(s){const a=z();n.info(`Would clear ${String(a.entries)} cached AI response${a.entries===1?"":"s"}.`)}else Te();if(g(r,"socket"))if(s){const a=T();n.info(`Would clear ${String(a.entries)} cached Socket.dev report${a.entries===1?"":"s"}.`)}else Ae()},"cacheCleanExecute"),st=f(async({options:e,visConfig:o,workspaceRoot:t})=>{const{cacheDirectories:r,workspaceRoot:s}=k(t,e,o);for(const a of r)r.length>1&&n.info(`# ${a}`),await Pe(a,s,{keepLast:typeof e.keepLast=="number"?e.keepLast:void 0,maxCacheAgeDays:typeof e.maxAgeDays=="number"?e.maxAgeDays:void 0,maxCacheSize:e.maxSize})},"cachePruneExecute"),Q=f(e=>e??process.cwd(),"resolveWorkspaceRoot"),rt=f(async({argument:e,logger:o,options:t,workspaceRoot:r})=>{const s=e[0];if(!s){n.error("No task ID specified. Usage: vis cache why <project>:<target>"),process.exitCode=1;return}await je(s,{format:t.format??"table",runId:t.run,workspaceRoot:Q(r)},o)},"cacheWhyExecute"),at=f(async({argument:e,logger:o,options:t,workspaceRoot:r})=>{const s=e[0];if(!s){n.error("No task ID specified. Usage: vis cache hash <project>:<target>"),process.exitCode=1;return}await Le(s,{format:t.format??"table",runId:t.run,workspaceRoot:Q(r)},o)},"cacheHashExecute"),it=f(async({options:e,visConfig:o,workspaceRoot:t})=>{const r=X(e.type);if((e.format??"table")==="json"){const s={};if(g(r,"task")){const{cacheDirectories:a}=k(t,e,o);s.task=await Promise.all(a.map(async i=>{const h=x(i),m=h?await $(i):[],d=m.reduce((c,l)=>c+l.sizeBytes,0);return{directory:i,entries:m.length,exists:h,newestEntry:y(m[0]?.mtimeMs),oldestEntry:y(m.at(-1)?.mtimeMs),totalBytes:d}}))}if(g(r,"ai")){const a=z();s.ai={entries:a.entries,newestEntry:y(a.newestEntry),oldestEntry:y(a.oldestEntry),totalBytes:a.totalSizeBytes}}if(g(r,"socket")){const a=T();s.socket={entries:a.entries,newestEntry:y(a.newestEntry),oldestEntry:y(a.oldestEntry),totalBytes:a.totalSizeBytes}}process.stdout.write(`${JSON.stringify(s,void 0,2)}
+`);return}if(g(r,"task")){const{cacheDirectories:s}=k(t,e,o);for(const a of s)s.length>1&&n.info(`# ${a}`),await Fe(a,"table")}g(r,"ai")&&Y("AI response cache",z()),g(r,"socket")&&Y("Socket.dev report cache",T())},"cacheSizeExecute"),nt=f(async({argument:e,logger:o,options:t,visConfig:r,workspaceRoot:s})=>{const a=e[0];if(!a){n.error("No task ID specified. Usage: vis cache verify <project>:<target>"),process.exitCode=1;return}const{cacheDirectories:i,workspaceRoot:h}=k(s,t,r);await Ye(a,{cacheDirectories:i,format:t.format??"table",workspaceRoot:h},o)},"cacheVerifyExecute");export{ot as cacheCleanExecute,at as cacheHashExecute,tt as cacheListExecute,st as cachePruneExecute,it as cacheSizeExecute,nt as cacheVerifyExecute,rt as cacheWhyExecute,Te as clearAiCacheSafe,Ae as clearSocketCacheSafe,$ as collectCacheEntries,Ne as formatAge,Oe as runClean,Le as runHash,ze as runList,Pe as runPrune,Fe as runSize,Ye as runVerify,je as runWhy};

package/dist/packem_chunks/handler31.js

@@ -1 +1 @@
-var C=Object.defineProperty;var T=(e,t)=>C(e,"name",{value:t,configurable:!0});import{relative as S}from"@visulima/path";import{K as q,k as b}from"./bin.js";import{f as $}from"../packem_shared/selectors-BylODRiM.js";import{o as L}from"../packem_shared/index-DH-5hsrC.js";var M=Object.defineProperty,I=T((e,t)=>M(e,"name",{value:t,configurable:!0}),"p");const D=I((e,t)=>{for(const f of t)if(L(f,e))return!0;return!1},"matchesAny"),B=I((e,t={})=>{const{depTypes:f,excludePatterns:l,externalOnly:y,includePatterns:d,internalOnly:j}=t;if(j&&y)return[];const u=f&&f.length>0?new Set(f):void 0,N=d&&d.length>0?d:void 0,O=l&&l.length>0?l:void 0,w=[];for(const m of e)j&&!m.isInternal||y&&m.isInternal||u&&!u.has(m.depType)||N&&(!m.packageName||!D(m.packageName,N))||O&&m.packageName&&D(m.packageName,O)||w.push(m);return w},"filterDepInstances");var F=Object.defineProperty,v=T((e,t)=>F(e,"name",{value:t,configurable:!0}),"y");const R=new Set(["json","ndjson","table"]),V=v(e=>{if(e===void 0)return"table";const t=e.toLowerCase();if(!R.has(t))throw new Error(`--format must be one of: table, json, ndjson (got "${e}")`);return t},"resolveFormat"),x=v((e,t)=>({depName:e.depName,depType:e.depType,isInternal:e.isInternal,packageDir:e.packageDir,packageJsonPath:S(t,e.packageJsonPath),packageName:e.packageName,specifier:e.specifier}),"toDepRecord"),P=new Set(["dependencies","devDependencies","optionalDependencies","overrides","peerDependencies","pnpm.overrides","resolutions"]),A=v(e=>{if(!e||e.length===0)return;const t=[],f=[];for(const l of e)for(const y of l.split(",")){const d=y.trim();d&&(P.has(d)?t.push(d):f.push(d))}if(f.length>0)throw new Error(`Unknown --dep-type value(s): ${f.join(", ")}. Valid: ${[...P].join(", ")}`);return t.length>0?t:void 0},"parseDepTypes"),G=v(async({logger:e,options:t,visConfig:f,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root.");const y=V(t.format);if(t.deps===!0){if(t.internalOnly&&t.externalOnly)throw new Error("--internal-only and --external-only are mutually exclusive");const c=A(t.depType),i=q(l);let n=B(i,{depTypes:c,excludePatterns:t.exclude,externalOnly:t.externalOnly,includePatterns:t.include,internalOnly:t.internalOnly});if(t.query){const{workspace:r}=b(l,f),p=new Set($(Object.keys(r.projects),r,t.query));n=n.filter(k=>k.packageName!==void 0&&p.has(k.packageName))}const g=[...n].sort((r,p)=>{const k=`${r.packageName??r.packageDir} ${r.depType} ${r.depName}`,J=`${p.packageName??p.packageDir} ${p.depType} ${p.depName}`;return k.localeCompare(J)});if(y==="ndjson"){for(const r of g)e.info(JSON.stringify(x(r,l)));return}if(y==="json"){const r=g.map(p=>x(p,l));e.info(JSON.stringify(r,null,t.pretty===!0?2:void 0));return}if(g.length===0){e.info("No matching dep-instances.");return}const a=["Package","Block","Dep","Specifier","Internal","Path"],o=g.map(r=>[r.packageName??r.packageDir,r.depType,r.depName,r.specifier,r.isInternal?"yes":"no",S(l,r.packageJsonPath)]),s=a.map((r,p)=>Math.max(r.length,...o.map(k=>(k[p]??"").length))),h=v((r,p)=>r.padEnd(p),"pad");e.info(a.map((r,p)=>h(r,s[p])).join("  ")),e.info(s.map(r=>"─".repeat(r)).join("──"));for(const r of o)e.info(r.map((p,k)=>h(p,s[k])).join("  "));e.info(""),e.info(`${String(g.length)} dep-instance(s)`);return}if(y==="ndjson")throw new Error("--format=ndjson is only supported with --deps");const{projectOptions:d,workspace:j}=b(l,f);let u=Object.keys(j.projects).sort();if(t.query&&(u=$(u,j,t.query)),u.length===0){e.info("No projects found.");return}const N=t.inferred===!0,O=t.targets===!0||N;if(y==="json"){const c=u.map(i=>{const n=j.projects[i],g=d.get(i)??{},a=Object.entries(n.targets??{}).map(([o])=>{const s=g[o],h=s?.inferred===!0;return{aliases:s?.aliases??[],command:s?.command,description:s?.description,...h?{inferred:!0}:{},name:o,type:s?.type}}).filter(o=>!N||o.inferred===!0);return{language:n.language,layer:n.layer,name:i,root:n.root,stack:n.stack,tags:n.tags??[],targets:a,type:n.projectType??"library"}});e.info(JSON.stringify(c,null,2));return}const w=v((c,i)=>{const n=c.map((a,o)=>{let s=0;for(const h of i)s=Math.max(s,(h[o]??"").length);return Math.max(a.length,s)}),g=v((a,o)=>a.padEnd(o),"pad");e.info(c.map((a,o)=>g(a,n[o])).join("  ")),e.info(n.map(a=>"─".repeat(a)).join("──"));for(const a of i)e.info(a.map((o,s)=>g(o,n[s])).join("  "))},"renderTable");if(O){const c=[];for(const i of u){const n=j.projects[i],g=d.get(i)??{};for(const a of Object.keys(n.targets??{}).sort()){const o=g[a],s=o?.inferred===!0;if(N&&!s)continue;const h=n.targets?.[a],r=h?.cache===!1?"no":h?.cache===!0?"yes":"default";c.push([i,a,o?.type??"—",r,s?"yes":"no",o?.description??"—"])}}if(c.length===0){e.info(N?"No inferred targets found.":"No targets found.");return}w(["Project","Target","Type","Cache","Inferred","Description"],c),e.info(""),e.info(`${String(c.length)} target(s) across ${String(u.length)} project(s)`);return}const m=["Project","Type","Layer","Tags","Targets"],E=u.map(c=>{const i=j.projects[c],n=Object.keys(i.targets??{});return[c,i.projectType??"library",i.layer??"—",(i.tags??[]).join(", ")||"—",n.length>4?`${n.slice(0,4).join(", ")}… (${String(n.length)})`:n.join(", ")||"—"]});w(m,E),e.info(""),e.info(`${String(u.length)} project(s)`)},"execute");export{G as default};
+var C=Object.defineProperty;var T=(e,t)=>C(e,"name",{value:t,configurable:!0});import{z as S}from"../packem_shared/index-OlP7U_t5.js";import{a4 as q,y as b}from"./bin.js";import{f as $}from"../packem_shared/selectors-BvtUXWGY.js";import{o as L}from"../packem_shared/index-DH-5hsrC.js";var M=Object.defineProperty,I=T((e,t)=>M(e,"name",{value:t,configurable:!0}),"p");const D=I((e,t)=>{for(const f of t)if(L(f,e))return!0;return!1},"matchesAny"),z=I((e,t={})=>{const{depTypes:f,excludePatterns:l,externalOnly:y,includePatterns:d,internalOnly:j}=t;if(j&&y)return[];const u=f&&f.length>0?new Set(f):void 0,N=d&&d.length>0?d:void 0,O=l&&l.length>0?l:void 0,w=[];for(const m of e)j&&!m.isInternal||y&&m.isInternal||u&&!u.has(m.depType)||N&&(!m.packageName||!D(m.packageName,N))||O&&m.packageName&&D(m.packageName,O)||w.push(m);return w},"filterDepInstances");var B=Object.defineProperty,v=T((e,t)=>B(e,"name",{value:t,configurable:!0}),"y");const F=new Set(["json","ndjson","table"]),R=v(e=>{if(e===void 0)return"table";const t=e.toLowerCase();if(!F.has(t))throw new Error(`--format must be one of: table, json, ndjson (got "${e}")`);return t},"resolveFormat"),x=v((e,t)=>({depName:e.depName,depType:e.depType,isInternal:e.isInternal,packageDir:e.packageDir,packageJsonPath:S(t,e.packageJsonPath),packageName:e.packageName,specifier:e.specifier}),"toDepRecord"),P=new Set(["dependencies","devDependencies","optionalDependencies","overrides","peerDependencies","pnpm.overrides","resolutions"]),V=v(e=>{if(!e||e.length===0)return;const t=[],f=[];for(const l of e)for(const y of l.split(",")){const d=y.trim();d&&(P.has(d)?t.push(d):f.push(d))}if(f.length>0)throw new Error(`Unknown --dep-type value(s): ${f.join(", ")}. Valid: ${[...P].join(", ")}`);return t.length>0?t:void 0},"parseDepTypes"),H=v(async({logger:e,options:t,visConfig:f,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root.");const y=R(t.format);if(t.deps===!0){if(t.internalOnly&&t.externalOnly)throw new Error("--internal-only and --external-only are mutually exclusive");const c=V(t.depType),i=q(l);let n=z(i,{depTypes:c,excludePatterns:t.exclude,externalOnly:t.externalOnly,includePatterns:t.include,internalOnly:t.internalOnly});if(t.query){const{workspace:r}=b(l,f),p=new Set($(Object.keys(r.projects),r,t.query));n=n.filter(k=>k.packageName!==void 0&&p.has(k.packageName))}const g=[...n].sort((r,p)=>{const k=`${r.packageName??r.packageDir} ${r.depType} ${r.depName}`,J=`${p.packageName??p.packageDir} ${p.depType} ${p.depName}`;return k.localeCompare(J)});if(y==="ndjson"){for(const r of g)e.info(JSON.stringify(x(r,l)));return}if(y==="json"){const r=g.map(p=>x(p,l));e.info(JSON.stringify(r,null,t.pretty===!0?2:void 0));return}if(g.length===0){e.info("No matching dep-instances.");return}const a=["Package","Block","Dep","Specifier","Internal","Path"],o=g.map(r=>[r.packageName??r.packageDir,r.depType,r.depName,r.specifier,r.isInternal?"yes":"no",S(l,r.packageJsonPath)]),s=a.map((r,p)=>Math.max(r.length,...o.map(k=>(k[p]??"").length))),h=v((r,p)=>r.padEnd(p),"pad");e.info(a.map((r,p)=>h(r,s[p])).join("  ")),e.info(s.map(r=>"─".repeat(r)).join("──"));for(const r of o)e.info(r.map((p,k)=>h(p,s[k])).join("  "));e.info(""),e.info(`${String(g.length)} dep-instance(s)`);return}if(y==="ndjson")throw new Error("--format=ndjson is only supported with --deps");const{projectOptions:d,workspace:j}=b(l,f);let u=Object.keys(j.projects).sort();if(t.query&&(u=$(u,j,t.query)),u.length===0){e.info("No projects found.");return}const N=t.inferred===!0,O=t.targets===!0||N;if(y==="json"){const c=u.map(i=>{const n=j.projects[i],g=d.get(i)??{},a=Object.entries(n.targets??{}).map(([o])=>{const s=g[o],h=s?.inferred===!0;return{aliases:s?.aliases??[],command:s?.command,description:s?.description,...h?{inferred:!0}:{},name:o,type:s?.type}}).filter(o=>!N||o.inferred===!0);return{language:n.language,layer:n.layer,name:i,root:n.root,stack:n.stack,tags:n.tags??[],targets:a,type:n.projectType??"library"}});e.info(JSON.stringify(c,null,2));return}const w=v((c,i)=>{const n=c.map((a,o)=>{let s=0;for(const h of i)s=Math.max(s,(h[o]??"").length);return Math.max(a.length,s)}),g=v((a,o)=>a.padEnd(o),"pad");e.info(c.map((a,o)=>g(a,n[o])).join("  ")),e.info(n.map(a=>"─".repeat(a)).join("──"));for(const a of i)e.info(a.map((o,s)=>g(o,n[s])).join("  "))},"renderTable");if(O){const c=[];for(const i of u){const n=j.projects[i],g=d.get(i)??{};for(const a of Object.keys(n.targets??{}).sort()){const o=g[a],s=o?.inferred===!0;if(N&&!s)continue;const h=n.targets?.[a],r=h?.cache===!1?"no":h?.cache===!0?"yes":"default";c.push([i,a,o?.type??"—",r,s?"yes":"no",o?.description??"—"])}}if(c.length===0){e.info(N?"No inferred targets found.":"No targets found.");return}w(["Project","Target","Type","Cache","Inferred","Description"],c),e.info(""),e.info(`${String(c.length)} target(s) across ${String(u.length)} project(s)`);return}const m=["Project","Type","Layer","Tags","Targets"],E=u.map(c=>{const i=j.projects[c],n=Object.keys(i.targets??{});return[c,i.projectType??"library",i.layer??"—",(i.tags??[]).join(", ")||"—",n.length>4?`${n.slice(0,4).join(", ")}… (${String(n.length)})`:n.join(", ")||"—"]});w(m,E),e.info(""),e.info(`${String(u.length)} project(s)`)},"execute");export{H as default};

package/dist/packem_chunks/handler32.js

@@ -1,2 +1,2 @@
-var d=Object.defineProperty;var p=(o,r)=>d(o,"name",{value:r,configurable:!0});import{createRequire as l}from"node:module";import{X as R,Y as E,Z as w,_ as s,$ as k,a0 as v,a1 as x,a2 as C,a3 as b,a4 as M,a5 as h,a6 as _,a7 as I,a8 as S}from"./bin.js";import{v as N}from"../packem_shared/verify-Baj5mFJ7.js";const m=l(import.meta.url),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,y=p(o=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[r,t]=u.versions.node.split(".").map(Number);if(r>22||r===22&&t>=3||r===20&&t>=16)return u.getBuiltinModule(o)}return m(o)},"__cjs_getBuiltinModule"),{stdin:f,stdout:T}=u,{createInterface:j}=y("node:readline/promises");var $=Object.defineProperty,q=p((o,r)=>$(o,"name",{value:r,configurable:!0}),"n");const B=q(async o=>{if(!f.isTTY)return!0;const r=j({input:f,output:T});try{const t=(await r.question(`${o} [Y/n] `)).trim().toLowerCase();return t===""||t==="y"||t==="yes"}finally{r.close()}},"confirm");var D=Object.defineProperty,n=p((o,r)=>D(o,"name",{value:r,configurable:!0}),"r");const a=n(o=>{const r=o.workspaceRoot??process.cwd(),t=o.visConfig??{};return{config:t,dryRun:!!o.options.dryRun,logger:o.logger,packageManager:E(r),report:R(),root:r,useEditorconfig:typeof t.editorconfig=="boolean"?t.editorconfig:!0}},"buildContext"),g=n(async(o,r,t)=>{if(r.yes||r.dryRun)return!0;const i=await B(`This will edit files, scripts, and hooks for "${o}". Backups (.bak) will be created. Continue?`);return i||t.info("Aborted."),i},"maybeConfirm"),c=n(o=>{o.dryRun&&o.logger.info(`Running in dry-run mode — no changes will be made.
-`)},"announceDryRun"),K=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("deps",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating dependencies and scripts ──"),w(e.root,e.packageManager,e.config,{dryRun:e.dryRun},o,e.report),o.info(""),s(e.report,o)},"migrateDepsExecuteImpl"),L=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("lint-staged",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating lint-staged ──"),k(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateLintStagedExecuteImpl"),P=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("nano-staged",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating nano-staged ──"),v(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateNanoStagedExecuteImpl"),G=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("turborepo",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating turborepo ──"),x(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateTurborepoExecuteImpl"),O=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("nx",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating nx ──"),C(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateNxExecuteImpl"),Y=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("moon",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating moon ──"),b(e.root,{copyTemplates:!!r.copyTemplates,dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateMoonExecuteImpl"),Q=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("gitleaks",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating gitleaks ──"),M(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateGitleaksExecuteImpl"),V=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("kingfisher",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating Kingfisher ──"),h(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateKingfisherExecuteImpl"),A=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("secretlint",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating secretlint ──"),_(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSecretlintExecuteImpl"),W=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("syncpack",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating syncpack ──"),I(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSyncpackExecuteImpl"),X=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("sherif",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating sherif ──"),S(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSherifExecuteImpl"),Z=n(({logger:o,workspaceRoot:r})=>{const t=r??process.cwd();N(t,o).length>0&&(process.exitCode=1)},"migrateVerifyExecuteImpl"),U=K,oo=L,eo=P,ro=G,to=O,io=Y,no=Q,so=V,ao=A,go=W,co=X,uo=Z;export{U as migrateDepsExecute,no as migrateGitleaksExecute,so as migrateKingfisherExecute,oo as migrateLintStagedExecute,io as migrateMoonExecute,eo as migrateNanoStagedExecute,to as migrateNxExecute,ao as migrateSecretlintExecute,co as migrateSherifExecute,go as migrateSyncpackExecute,ro as migrateTurborepoExecute,uo as migrateVerifyExecute};
+var d=Object.defineProperty;var p=(o,r)=>d(o,"name",{value:r,configurable:!0});import{createRequire as l}from"node:module";import{a5 as R,a6 as E,a7 as w,a8 as s,a9 as k,aa as v,ab as x,ac as C,ad as b,ae as M,af as h,ag as I,ah as _,ai as S}from"./bin.js";import{v as N}from"../packem_shared/verify-BVTcVfoW.js";const m=l(import.meta.url),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,y=p(o=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[r,t]=u.versions.node.split(".").map(Number);if(r>22||r===22&&t>=3||r===20&&t>=16)return u.getBuiltinModule(o)}return m(o)},"__cjs_getBuiltinModule"),{stdin:f,stdout:T}=u,{createInterface:j}=y("node:readline/promises");var $=Object.defineProperty,q=p((o,r)=>$(o,"name",{value:r,configurable:!0}),"n");const B=q(async o=>{if(!f.isTTY)return!0;const r=j({input:f,output:T});try{const t=(await r.question(`${o} [Y/n] `)).trim().toLowerCase();return t===""||t==="y"||t==="yes"}finally{r.close()}},"confirm");var D=Object.defineProperty,n=p((o,r)=>D(o,"name",{value:r,configurable:!0}),"r");const a=n(o=>{const r=o.workspaceRoot??process.cwd(),t=o.visConfig??{};return{config:t,dryRun:!!o.options.dryRun,logger:o.logger,packageManager:E(r),report:R(),root:r,useEditorconfig:typeof t.editorconfig=="boolean"?t.editorconfig:!0}},"buildContext"),g=n(async(o,r,t)=>{if(r.yes||r.dryRun)return!0;const i=await B(`This will edit files, scripts, and hooks for "${o}". Backups (.bak) will be created. Continue?`);return i||t.info("Aborted."),i},"maybeConfirm"),c=n(o=>{o.dryRun&&o.logger.info(`Running in dry-run mode — no changes will be made.
+`)},"announceDryRun"),K=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("deps",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating dependencies and scripts ──"),w(e.root,e.packageManager,e.config,{dryRun:e.dryRun},o,e.report),o.info(""),s(e.report,o)},"migrateDepsExecuteImpl"),L=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("lint-staged",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating lint-staged ──"),k(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateLintStagedExecuteImpl"),P=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("nano-staged",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating nano-staged ──"),v(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateNanoStagedExecuteImpl"),G=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("turborepo",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating turborepo ──"),x(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateTurborepoExecuteImpl"),O=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("nx",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating nx ──"),C(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateNxExecuteImpl"),Q=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("moon",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating moon ──"),b(e.root,{copyTemplates:!!r.copyTemplates,dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateMoonExecuteImpl"),V=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("gitleaks",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating gitleaks ──"),M(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateGitleaksExecuteImpl"),Y=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("kingfisher",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating Kingfisher ──"),h(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateKingfisherExecuteImpl"),A=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("secretlint",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating secretlint ──"),I(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSecretlintExecuteImpl"),W=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("syncpack",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating syncpack ──"),_(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSyncpackExecuteImpl"),z=n(async({logger:o,options:r,visConfig:t,workspaceRoot:i})=>{if(!await g("sherif",r,o))return;const e=a({logger:o,options:r,visConfig:t,workspaceRoot:i});c(e),o.info("── Migrating sherif ──"),S(e.root,{dryRun:e.dryRun,useEditorconfig:e.useEditorconfig},o,e.report),o.info(""),s(e.report,o)},"migrateSherifExecuteImpl"),F=n(({logger:o,workspaceRoot:r})=>{const t=r??process.cwd();N(t,o).length>0&&(process.exitCode=1)},"migrateVerifyExecuteImpl"),Z=K,oo=L,eo=P,ro=G,to=O,io=Q,no=V,so=Y,ao=A,go=W,co=z,uo=F;export{Z as migrateDepsExecute,no as migrateGitleaksExecute,so as migrateKingfisherExecute,oo as migrateLintStagedExecute,io as migrateMoonExecute,eo as migrateNanoStagedExecute,to as migrateNxExecute,ao as migrateSecretlintExecute,co as migrateSherifExecute,go as migrateSyncpackExecute,ro as migrateTurborepoExecute,uo as migrateVerifyExecute};

package/dist/packem_chunks/handler33.js

@@ -1,25 +1,25 @@
-var ge=Object.defineProperty;var _=(e,t)=>ge(e,"name",{value:t,configurable:!0});import{createRequire as me}from"node:module";import{yellow as V,red as ve}from"@visulima/colorize";import{isAccessibleSync as H}from"@visulima/fs";import{readTomlSync as ke}from"@visulima/fs/toml";import{readYamlSync as $e}from"@visulima/fs/yaml";import{findPackageManagerSync as we,getPackageManagerVersion as ye}from"@visulima/package";import{join as Z}from"@visulima/path";import{render as K,renderToString as I,Text as R}from"@visulima/tui";import{a9 as be,M as T,aa as Re,v as Se,j as Ce,c as ae,ab as Ae,ac as re,u as xe,g as Ee,V as Te,S as je,B as Ue,ad as Ne,s as qe,ae as Be,af as Me,ag as Oe,m as _e}from"./bin.js";import k from"react";import{H as Pe,e as Fe,Z as Q}from"../packem_shared/ai-analysis-hm8d2W7z.js";import{r as Le,s as We}from"../packem_shared/typosquats-CcZl99B1.js";import{U as ze,B as De,T as X}from"../packem_shared/vis-update-app-D1jl0UZZ.js";import{d as Ie}from"../packem_shared/utils-DrNg0XTR.js";const fe=me(import.meta.url),B=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,he=_(e=>{if(typeof B<"u"&&B.versions&&B.versions.node){const[t,n]=B.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return B.getBuiltinModule(e)}return fe(e)},"__cjs_getBuiltinModule"),{execFileSync:oe}=he("node:child_process");var Ve=Object.defineProperty,x=_((e,t)=>Ve(e,"name",{value:t,configurable:!0}),"s");const Ye=x(e=>{const t=[];for(const n of e.filters)t.push("--filter",n);return e.workspaceRoot&&t.push("--filter","."),t.push("update"),e.latest&&t.push("--latest"),e.recursive&&t.push("--recursive"),e.interactive&&t.push("--interactive"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.noOptional&&t.push("--no-optional"),e.noSave&&t.push("--no-save"),t.push(...e.packages),{args:t,bin:"pnpm"}},"resolvePnpm"),Ge=x(e=>{const t=[];return e.filters.length>0&&t.push("workspace",e.filters[0]),t.push("upgrade"),e.latest&&t.push("--latest"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnV1"),Je=x(e=>{const t=[];if(e.filters.length>0||e.recursive){t.push("workspaces","foreach","--all");for(const n of e.filters)t.push("--include",n)}return t.push("up"),e.interactive&&t.push("--interactive"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnBerry"),He=x((e,t)=>{const n=["update"];e.latest&&t.push("npm does not support --latest flag. Packages will be updated within their semver range."),e.interactive&&t.push("npm does not support --interactive mode.");for(const o of e.filters)n.push("--workspace",o);return e.recursive&&n.push("--workspaces"),e.workspaceRoot&&n.push("--include-workspace-root"),e.dev&&n.push("--dev"),e.prod&&n.push("--production"),e.noOptional&&n.push("--no-optional"),e.noSave&&n.push("--no-save"),n.push(...e.packages),{args:n,bin:"npm"}},"resolveNpm"),Ze=x(e=>{const t=["update"];e.latest&&t.push("--latest");for(const n of e.filters)t.push("--filter",n);return t.push(...e.packages),{args:t,bin:"bun"}},"resolveBun"),Ke=x((e,t)=>{const n=["outdated","--update"];return e.latest&&n.push("--latest"),e.interactive&&n.push("--interactive"),e.filters.length>0&&t.push("deno outdated has no --filter flag; ignoring."),(e.dev||e.prod)&&t.push("deno outdated has no --dev / --prod flags; dev/prod is governed by deno.json."),e.noOptional&&t.push("deno outdated has no --no-optional flag; ignoring."),e.noSave&&t.push("deno outdated has no --no-save flag; ignoring."),n.push(...e.packages),{args:n,bin:"deno"}},"resolveDeno"),Qe=x((e,t,n)=>{const o=[];if(n.global&&e!=="aube"&&e!=="deno")return{command:{args:["update","--global",...n.packages],bin:"npm"},warnings:o};let i;switch(e){case"aube":{const a=be(n);i={args:a.args,bin:a.bin},o.push(...a.warnings);break}case"bun":{i=Ze(n);break}case"deno":{i=Ke(n,o);break}case"npm":{i=He(n,o);break}case"pnpm":{i=Ye(n);break}case"yarn":{i=t.startsWith("1.")?Ge(n):Je(n);break}default:{const a=e;throw new Error(`Unsupported package manager: ${String(a)}`)}}return{command:i,warnings:o}},"resolveUpdateCommand");var Xe=Object.defineProperty,S=_((e,t)=>Xe(e,"name",{value:t,configurable:!0}),"C");const et=S((e,t)=>{try{if(t==="pnpm"){const n=Z(e,"pnpm-workspace.yaml");if(H(n)){const o=$e(n);return{excludes:Array.isArray(o?.minimumReleaseAgeExclude)?o.minimumReleaseAgeExclude:void 0,minutes:typeof o?.minimumReleaseAge=="number"?o.minimumReleaseAge:void 0}}}else if(t==="bun"){const n=Z(e,"bunfig.toml");if(H(n)){const o=ke(n);return{excludes:Array.isArray(o?.install?.minimumReleaseAgeExcludes)?o.install.minimumReleaseAgeExcludes:void 0,minutes:typeof o?.install?.minimumReleaseAge=="number"?o.install.minimumReleaseAge:void 0}}}}catch{}return{}},"readPmNativeMinimumReleaseAge"),tt=S((e,t,n)=>{const o=e.latest?"latest":e.target??t.target??"latest";if(!["latest","minor","patch"].includes(o))throw new Error(`Invalid target "${o}". Use: latest, minor, or patch.`);const i=e.maxConcurrentRequests,a=typeof i=="number"&&i>0?i:t.maxConcurrentRequests,r=typeof e.releaseChannel=="string"?e.releaseChannel.toLowerCase():void 0;if(r!==void 0&&!["any","same","stable"].includes(r))throw new Error(`Invalid --release-channel "${String(e.releaseChannel)}". Use: any, same, or stable.`);const p=r??t.releaseChannel;return{exclude:[...T(e.exclude),...T(t.exclude)],ignore:T(t.ignore),include:[...T(e.include),...T(t.include),...n],includeLocked:e.includeLocked||t.includeLocked||!1,includePrerelease:e.prerelease||t.prerelease||!1,maxConcurrentRequests:a,minimumReleaseAge:t.minimumReleaseAge,minimumReleaseAgeExclude:t.minimumReleaseAgeExclude,packageMode:t.packageMode,releaseChannel:p,security:e.security||e.ai||t.security||!1,target:o}},"buildCatalogCheckOptions"),ee=S((e,t)=>{if(e.length!==0){t.info(`
-${V("⚠")} ${String(e.length)} package${e.length===1?"":"s"} skipped by target constraint (use --target latest to include):`);for(const n of e)t.info(`    ${n.packageName}  ${n.currentRange} → ${n.newRange}  (${n.updateType})`)}},"logFilteredByTarget"),te=S((e,t,n,o)=>{n==="json"?process.stdout.write(`${Re({checkedCount:0,failed:t,filteredByTarget:[],ignored:[],outdated:e})}
-`):n==="minimal"?process.stdout.write(`${Se(e)}
-`):(Ce(e,o),o.info(ae(e)))},"writeFormattedOutput"),ne=S(async(e,t,n,o,i,a,r)=>{const p=Ae(e,n,t,!0,{useEditorconfig:r}),h=t==="pnpm"?"pnpm-workspace.yaml":"package.json";if(i.info(`
-Updated ${h}`),p&&i.info(`Backup saved to ${p}`),o.changelog){i.info(`
-Fetching changelogs...`);const c=await re(n,void 0,a);for(const u of c){const g=u.releaseUrl??u.repoUrl??u.npmUrl;i.info(`  ${u.packageName}: ${g}`)}}if(o.install??!0){const c=t,u=["install"];i.info(`Running ${c} ${u.join(" ")}...
-`);try{oe(c,u,{cwd:e,env:process.env,stdio:"inherit"})}catch{i.warn(`${c} ${u.join(" ")} failed. You may need to run it manually.`)}}},"applyCatalogAndInstall"),nt=S(async(e,t,n,o,i,a)=>{const r=n.update??{},p=[["global","--global is not supported in catalog mode"],["recursive","--recursive is not needed in catalog mode (catalogs are workspace-level)"],["filter","--filter is not supported in catalog mode (use --include/--exclude instead)"],["no-save","--no-save is not supported in catalog mode"],["workspace-root","--workspace-root is not needed in catalog mode"],["no-optional","--no-optional is not supported in catalog mode"]];for(const[s,v]of p)o[s]&&a.warn(`${V("⚠")} ${v}, ignoring.`);const{excludes:h,minutes:c}=et(e,t),u=r.minimumReleaseAge??c,g=r.minimumReleaseAgeExclude??h;if(r.minimumReleaseAge!==void 0&&c!==void 0&&r.minimumReleaseAge!==c){const s=t==="pnpm"?"pnpm-workspace.yaml":"bunfig.toml";a.warn(`${V("⚠")} minimumReleaseAge mismatch: vis config = ${String(r.minimumReleaseAge)} min, ${s} = ${String(c)} min. Consider keeping them in sync.`)}const C=xe(e),w=Ee(e,t,{depFields:r.depFields,dev:o.dev,prod:o.prod});if(w.size===0){a.info("No catalogs found.");return}const se={...r,minimumReleaseAge:u,minimumReleaseAgeExclude:g},ie=tt(o,se,i);let P=0;for(const s of w.values())P+=s.size;const M=!!process.stdout.isTTY&&!qe;let E;const le=M?(s,v)=>{E?E.rerender(k.createElement(X,{current:s,total:v})):(process.stdout.write(`
-`),E=K(k.createElement(X,{current:s,total:v}),{interactive:!0,patchConsole:!1}))}:(s,v)=>{a.info(`Checking ${String(s)}/${String(v)} dependencies...`)};M||a.info(`Checking ${String(P)} catalog dependencies...
-`);const ce=Te(n.security?.socket),{checkedCount:$,failed:y,filteredByTarget:m,ignored:j,outdated:d}=await je(w,ie,C,le,e,ce,n.security?.socket?.acceptedRisks);E&&(E.clear(),E.unmount());const Y=$-d.length-y.length;if(y.length>0&&a.warn(`Failed to fetch: ${y.join(", ")}`),j.length>0&&a.info(`Skipped ${String(j.length)} ignored package${j.length===1?"":"s"}: ${j.join(", ")}`),!M&&$>d.length){const s=[...w.values()].reduce((q,L)=>q+L.size,0),v=s>$?` (${String(s)} catalog entries, ${String(s-$)} duplicates)`:"";a.info(`Checked ${String($)} unique packages${v}: ${String(d.length)} outdated, ${String(Y)} up-to-date${y.length>0?`, ${String(y.length)} failed`:""}${m.length>0?`, ${String(m.length)} skipped by target`:""}`)}if(d.length===0){m.length>0?a.info(`All catalog dependencies are up to date within the current target.
-${String(m.length)} package${m.length===1?" has":"s have"} newer versions available with --target latest:
-${m.map(s=>`  ${s.packageName}  ${s.currentRange} → ${s.newRange}  (${s.updateType})`).join(`
-`)}`):a.info("All catalog dependencies are up to date.");return}const U=o.format??r.format??"table";let b;if(o.ai){const s=Pe(o.aiType??"impact");b=await Fe(d,a,n.ai,s)}const F=!!o.dryRun;if(M&&U==="table"){const s=new ze(d,b??null);let v;if(o.changelog){a.info("Fetching changelogs...");const l=await re(d,void 0,C);v=new Map;for(const f of l){const A=f.releaseUrl??f.repoUrl??f.npmUrl;A&&v.set(f.packageName,A)}}const q=n.tui?.autoExit??!1,L=q===!0?3:typeof q=="number"?q:0,G=await K(k.createElement(De,{autoExitSeconds:L,changelogUrls:v,checkedCount:$,filteredOutEntries:m,isDryRun:F,store:s,totalCatalogEntries:P}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0}).waitUntilExit(),W=process.stdout.columns||80;process.stdout.write(`
-`);for(const l of d){const f=l.vulnerabilities?.length||l.socketReport&&l.socketReport.alerts.length>0,A=!!l.acceptedRisk,D=f?A?"✓":"⚠":"✓",pe=A?"gray":l.updateType==="major"?"red":l.updateType==="minor"?"yellow":"green",O=l.socketReport?.score.overall,de=O===void 0?"":` [${String(Math.round(O*100))}%]`,J=O===void 0?void 0:Ue(O);process.stdout.write(`${I(k.createElement(R,null,"   ",k.createElement(R,{color:pe},D),`  ${l.packageName}  ${l.currentRange} → ${l.newRange}`,k.createElement(R,{dimColor:!0},`  ${l.updateType}`),J?k.createElement(R,{color:J},de):null),{columns:W})}
+var he=Object.defineProperty;var W=(e,t)=>he(e,"name",{value:t,configurable:!0});import{createRequire as ve}from"node:module";import{ak as ye,F as j,e as G,al as we,g as be,G as Re,H as le,am as Se,an as ce,f as Ce,R as Ae,J as xe,V as Ee,ao as Te,B as Ue,ap as je,s as Ne,d as qe,U as Fe,aq as Be,ar as Me,as as _e,h as Oe,at as Pe}from"./bin.js";import{isAccessibleSync as X}from"@visulima/fs";import{readTomlSync as We}from"@visulima/fs/toml";import{readYamlSync as Ye}from"@visulima/fs/yaml";import{M as ee}from"../packem_shared/index-OlP7U_t5.js";import{render as te,renderToString as V,Text as b}from"@visulima/tui";import k from"react";import{H as Le,e as ze,Z as ne}from"../packem_shared/ai-analysis-Dzs_nUwM.js";import{r as Ie,s as De}from"../packem_shared/typosquats-XkC1CnOa.js";import{U as He,B as Ve,T as ae}from"../packem_shared/vis-update-app-DR8c4OfG.js";import{d as Ge}from"../packem_shared/utils-DrNg0XTR.js";const ke=ve(import.meta.url),M=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,$e=W(e=>{if(typeof M<"u"&&M.versions&&M.versions.node){const[t,n]=M.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return M.getBuiltinModule(e)}return ke(e)},"__cjs_getBuiltinModule"),{execFileSync:ie}=$e("node:child_process");var Je=Object.defineProperty,x=W((e,t)=>Je(e,"name",{value:t,configurable:!0}),"s");const Ze=x(e=>{const t=[];for(const n of e.filters)t.push("--filter",n);return e.workspaceRoot&&t.push("--filter","."),t.push("update"),e.latest&&t.push("--latest"),e.recursive&&t.push("--recursive"),e.interactive&&t.push("--interactive"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.noOptional&&t.push("--no-optional"),e.noSave&&t.push("--no-save"),t.push(...e.packages),{args:t,bin:"pnpm"}},"resolvePnpm"),Ke=x(e=>{const t=[];return e.filters.length>0&&t.push("workspace",e.filters[0]),t.push("upgrade"),e.latest&&t.push("--latest"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnV1"),Qe=x(e=>{const t=[];if(e.filters.length>0||e.recursive){t.push("workspaces","foreach","--all");for(const n of e.filters)t.push("--include",n)}return t.push("up"),e.interactive&&t.push("--interactive"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnBerry"),Xe=x((e,t)=>{const n=["update"];e.latest&&t.push("npm does not support --latest flag. Packages will be updated within their semver range."),e.interactive&&t.push("npm does not support --interactive mode.");for(const a of e.filters)n.push("--workspace",a);return e.recursive&&n.push("--workspaces"),e.workspaceRoot&&n.push("--include-workspace-root"),e.dev&&n.push("--dev"),e.prod&&n.push("--production"),e.noOptional&&n.push("--no-optional"),e.noSave&&n.push("--no-save"),n.push(...e.packages),{args:n,bin:"npm"}},"resolveNpm"),et=x(e=>{const t=["update"];e.latest&&t.push("--latest");for(const n of e.filters)t.push("--filter",n);return t.push(...e.packages),{args:t,bin:"bun"}},"resolveBun"),tt=x((e,t)=>{const n=["outdated","--update"];return e.latest&&n.push("--latest"),e.interactive&&n.push("--interactive"),e.filters.length>0&&t.push("deno outdated has no --filter flag; ignoring."),(e.dev||e.prod)&&t.push("deno outdated has no --dev / --prod flags; dev/prod is governed by deno.json."),e.noOptional&&t.push("deno outdated has no --no-optional flag; ignoring."),e.noSave&&t.push("deno outdated has no --no-save flag; ignoring."),n.push(...e.packages),{args:n,bin:"deno"}},"resolveDeno"),nt=x((e,t,n)=>{const a=[];if(n.global&&e!=="aube"&&e!=="deno")return{command:{args:["update","--global",...n.packages],bin:"npm"},warnings:a};let i;switch(e){case"aube":{const o=ye(n);i={args:o.args,bin:o.bin},a.push(...o.warnings);break}case"bun":{i=et(n);break}case"deno":{i=tt(n,a);break}case"npm":{i=Xe(n,a);break}case"pnpm":{i=Ze(n);break}case"yarn":{i=t.startsWith("1.")?Ke(n):Qe(n);break}default:{const o=e;throw new Error(`Unsupported package manager: ${String(o)}`)}}return{command:i,warnings:a}},"resolveUpdateCommand");var at=Object.defineProperty,R=W((e,t)=>at(e,"name",{value:t,configurable:!0}),"C");const ot=R((e,t)=>{try{if(t==="pnpm"){const n=ee(e,"pnpm-workspace.yaml");if(X(n)){const a=Ye(n);return{excludes:Array.isArray(a?.minimumReleaseAgeExclude)?a.minimumReleaseAgeExclude:void 0,minutes:typeof a?.minimumReleaseAge=="number"?a.minimumReleaseAge:void 0}}}else if(t==="bun"){const n=ee(e,"bunfig.toml");if(X(n)){const a=We(n);return{excludes:Array.isArray(a?.install?.minimumReleaseAgeExcludes)?a.install.minimumReleaseAgeExcludes:void 0,minutes:typeof a?.install?.minimumReleaseAge=="number"?a.install.minimumReleaseAge:void 0}}}}catch{}return{}},"readPmNativeMinimumReleaseAge"),rt=R((e,t,n)=>{const a=e.latest?"latest":e.target??t.target??"latest";if(!["latest","minor","patch"].includes(a))throw new Error(`Invalid target "${a}". Use: latest, minor, or patch.`);const i=e.maxConcurrentRequests,o=typeof i=="number"&&i>0?i:t.maxConcurrentRequests,s=typeof e.releaseChannel=="string"?e.releaseChannel.toLowerCase():void 0;if(s!==void 0&&!["any","same","stable"].includes(s))throw new Error(`Invalid --release-channel "${String(e.releaseChannel)}". Use: any, same, or stable.`);const g=s??t.releaseChannel;return{exclude:[...j(e.exclude),...j(t.exclude)],ignore:j(t.ignore),include:[...j(e.include),...j(t.include),...n],includeLocked:e.includeLocked||t.includeLocked||!1,includePrerelease:e.prerelease||t.prerelease||!1,maxConcurrentRequests:o,minimumReleaseAge:t.minimumReleaseAge,minimumReleaseAgeExclude:t.minimumReleaseAgeExclude,packageMode:t.packageMode,releaseChannel:g,security:e.security||e.ai||t.security||!1,target:a}},"buildCatalogCheckOptions"),oe=R((e,t)=>{if(e.length!==0){t.info(`
+${G("⚠")} ${String(e.length)} package${e.length===1?"":"s"} skipped by target constraint (use --target latest to include):`);for(const n of e)t.info(`    ${n.packageName}  ${n.currentRange} → ${n.newRange}  (${n.updateType})`)}},"logFilteredByTarget"),re=R((e,t,n,a)=>{n==="json"?process.stdout.write(`${we({checkedCount:0,failed:t,filteredByTarget:[],ignored:[],outdated:e})}
+`):n==="minimal"?process.stdout.write(`${be(e)}
+`):(Re(e,a),a.info(le(e)))},"writeFormattedOutput"),se=R(async(e,t,n,a,i,o,s)=>{const g=Se(e,n,t,!0,{useEditorconfig:s}),v=t==="pnpm"?"pnpm-workspace.yaml":"package.json";if(i.info(`
+Updated ${v}`),g&&i.info(`Backup saved to ${g}`),a.changelog){i.info(`
+Fetching changelogs...`);const u=await ce(n,void 0,o);for(const p of u){const m=p.releaseUrl??p.repoUrl??p.npmUrl;i.info(`  ${p.packageName}: ${m}`)}}if(a.install??!0){const u=t,p=["install"];i.info(`Running ${u} ${p.join(" ")}...
+`);try{ie(u,p,{cwd:e,env:process.env,stdio:"inherit"})}catch{i.warn(`${u} ${p.join(" ")} failed. You may need to run it manually.`)}}},"applyCatalogAndInstall"),st=R(async(e,t,n,a,i,o)=>{const s=n.update??{},g=[["global","--global is not supported in catalog mode"],["recursive","--recursive is not needed in catalog mode (catalogs are workspace-level)"],["filter","--filter is not supported in catalog mode (use --include/--exclude instead)"],["no-save","--no-save is not supported in catalog mode"],["workspace-root","--workspace-root is not needed in catalog mode"],["no-optional","--no-optional is not supported in catalog mode"]];for(const[r,c]of g)a[r]&&o.warn(`${G("⚠")} ${c}, ignoring.`);const{excludes:v,minutes:u}=ot(e,t),p=s.minimumReleaseAge??u,m=s.minimumReleaseAgeExclude??v;if(s.minimumReleaseAge!==void 0&&u!==void 0&&s.minimumReleaseAge!==u){const r=t==="pnpm"?"pnpm-workspace.yaml":"bunfig.toml";o.warn(`${G("⚠")} minimumReleaseAge mismatch: vis config = ${String(s.minimumReleaseAge)} min, ${r} = ${String(u)} min. Consider keeping them in sync.`)}const S=Ce(e),E=a["include-internal"],J=a.peer,N=Ae(e,t,{depFields:s.depFields,dev:a.dev,includeInternal:E,peer:J,prod:a.prod});if(N.size===0){o.info("No catalogs found.");return}const ue={...s,minimumReleaseAge:p,minimumReleaseAgeExclude:m},T=rt(a,ue,i);let Y=0;for(const r of N.values())Y+=r.size;const _=!!process.stdout.isTTY&&!Ne;let U;const pe=_?(r,c)=>{U?U.rerender(k.createElement(ae,{current:r,total:c})):(process.stdout.write(`
+`),U=te(k.createElement(ae,{current:r,total:c}),{interactive:!0,patchConsole:!1}))}:(r,c)=>{o.info(`Checking ${String(r)}/${String(c)} dependencies...`)};_||o.info(`Checking ${String(Y)} catalog dependencies...
+`);const de=xe(n.security?.socket),{checkedCount:$,failed:y,filteredByTarget:f,ignored:C,outdated:d}=await Ee(N,T,S,pe,e,de,n.security?.socket?.acceptedRisks);U&&(U.clear(),U.unmount());const O=E?{ignored:[],outdated:[]}:Te(e,{depFields:s.depFields,dev:a.dev,exclude:T.exclude,ignore:T.ignore,include:T.include,packageMode:T.packageMode,peer:J,prod:a.prod,target:T.target});if(O.outdated.length>0){const r=new Set(d.map(c=>`${c.catalogName}|${c.packageName}`));for(const c of O.outdated)r.has(`${c.catalogName}|${c.packageName}`)||d.push(c)}if(O.ignored.length>0)for(const r of O.ignored)C.includes(r)||C.push(r);const Z=$-d.length-y.length;if(y.length>0&&o.warn(`Failed to fetch: ${y.join(", ")}`),C.length>0&&o.info(`Skipped ${String(C.length)} ignored package${C.length===1?"":"s"}: ${C.join(", ")}`),!_&&$>d.length){const r=[...N.values()].reduce((B,z)=>B+z.size,0),c=r>$?` (${String(r)} catalog entries, ${String(r-$)} duplicates)`:"";o.info(`Checked ${String($)} unique packages${c}: ${String(d.length)} outdated, ${String(Z)} up-to-date${y.length>0?`, ${String(y.length)} failed`:""}${f.length>0?`, ${String(f.length)} skipped by target`:""}`)}if(d.length===0){f.length>0?o.info(`All catalog dependencies are up to date within the current target.
+${String(f.length)} package${f.length===1?" has":"s have"} newer versions available with --target latest:
+${f.map(r=>`  ${r.packageName}  ${r.currentRange} → ${r.newRange}  (${r.updateType})`).join(`
+`)}`):o.info("All catalog dependencies are up to date.");return}const q=a.format??s.format??"table";let w;if(a.ai){const r=Le(a.aiType??"impact");w=await ze(d,o,n.ai,r)}const L=!!a.dryRun;if(_&&q==="table"){const r=new He(d,w??null);let c;if(a.changelog){o.info("Fetching changelogs...");const l=await ce(d,void 0,S);c=new Map;for(const h of l){const A=h.releaseUrl??h.repoUrl??h.npmUrl;A&&c.set(h.packageName,A)}}const B=n.tui?.autoExit??!1,z=B===!0?3:typeof B=="number"?B:0,K=await te(k.createElement(Ve,{autoExitSeconds:z,changelogUrls:c,checkedCount:$,filteredOutEntries:f,isDryRun:L,store:r,totalCatalogEntries:Y}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0}).waitUntilExit(),I=process.stdout.columns||80;process.stdout.write(`
+`);for(const l of d){const h=l.vulnerabilities?.length||l.socketReport&&l.socketReport.alerts.length>0,A=!!l.acceptedRisk,H=h?A?"✓":"⚠":"✓",me=A?"gray":l.updateType==="major"?"red":l.updateType==="minor"?"yellow":"green",P=l.socketReport?.score.overall,fe=P===void 0?"":` [${String(Math.round(P*100))}%]`,Q=P===void 0?void 0:Ue(P);process.stdout.write(`${V(k.createElement(b,null,"   ",k.createElement(b,{color:me},H),`  ${l.packageName}  ${l.currentRange} → ${l.newRange}`,k.createElement(b,{dimColor:!0},`  ${l.updateType}`),Q?k.createElement(b,{color:Q},fe):null),{columns:I})}
 `)}if(process.stdout.write(`
-`),a.info(ae(d)),$>d.length){const l=[...w.values()].reduce((A,D)=>A+D.size,0),f=l>$?` (${String(l)} catalog entries, ${String(l-$)} duplicates)`:"";a.info(`  Checked ${String($)} unique packages${f}: ${String(Y)} up-to-date${y.length>0?`, ${String(y.length)} failed`:""}`)}if(m.length>0){process.stdout.write(`
-`);const l=`${String(m.length)} package${m.length===1?"":"s"} skipped by target constraint (use --target latest to include):`;process.stdout.write(`${I(k.createElement(R,{color:"yellow"},`  ${l}`),{columns:W})}
-`);for(const f of m)process.stdout.write(`${I(k.createElement(R,null,"     ",k.createElement(R,{dimColor:!0},f.packageName),`  ${f.currentRange} → ${f.newRange}`,k.createElement(R,{dimColor:!0},`  ${f.updateType}`)),{columns:W})}
-`)}const z=Array.isArray(G)?G:[];if(z.length>0&&!F){a.info(`
-Applying ${String(z.length)} updates...
-`);const l={...o,install:o.install??r.install};await ne(e,t,z,l,a,C,n.editorconfig??!0)}return}if(F){if(U==="json"){const s={failed:y,filteredByTarget:m,ignored:j,outdated:d};b&&(s.aiAnalysis=b),process.stdout.write(`${JSON.stringify(s,void 0,2)}
-`)}else a.info(`Would update ${String(d.length)} dependencies:
-`),te(d,y,U,a),b&&(a.info(""),a.info(Q(b))),ee(m,a);return}b&&U!=="json"&&(a.info(Q(b)),a.info(""));let N=d;if(o.interactive&&(N=await Ne(d),N.length===0)){a.info("No updates selected.");return}a.info(`Updating ${String(N.length)} catalog dependencies...
-`),te(N,[],U,a),ee(m,a);const ue={...o,install:o.install??r.install};await ne(e,t,N,ue,a,C)},"executeCatalogUpdate"),ot=S((e,t,n,o,i,a)=>{const r={dev:o.dev,filters:T(o.filter),global:o.global,interactive:o.interactive,latest:o.latest||o.target==="latest",noOptional:o.noOptional,noSave:o.noSave,packages:i,prod:o.prod,recursive:o.recursive,workspaceRoot:o.workspaceRoot},{command:p,warnings:h}=Qe(t,n,r);for(const u of h)a.warn(u);const c=`${p.bin} ${p.args.join(" ")}`.trim();if(o.dryRun){a.info(`Would run: ${c}`);return}a.info(`Running: ${c}`);try{oe(p.bin,p.args,{cwd:e,env:process.env,stdio:"inherit"})}catch(u){const g=u.status??1;a.error(`
-${ve("✖")} Update failed (exit code ${String(g)})`),a.error(`  Command: ${c}`),a.error(`  Directory: ${e}
-`),process.exitCode=g}},"executePmWrapper"),$t=S(async({argument:e,logger:t,options:n,visConfig:o,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");let a=e;const r=i,{packageManager:p}=we(r);if(!n.noTyposquatCheck){if(a.length>0){const h=a.map(g=>Ie(g)),c=o?.security?.typosquatAllowlist,u=await Le(h.map(g=>g.name),c);if(!u.ok){process.exitCode=1;return}a=h.map((g,C)=>{const w=u.packages[C];return w!==g.name?g.versionSpec?`${w}@${g.versionSpec}`:w??"":a[C]??""})}else if(!await We(r,o?.security?.typosquatAllowlist)){process.exitCode=1;return}}if(n.rollback){if(!Be(r,p)){t.info("No backup found. Run 'vis update' first to create a backup.");return}if(Me(r,p))t.info("Restored from backup.");else throw new Error("Failed to restore from backup.");return}if(!n.noCatalog&&Oe(r,p))await nt(r,p,o??{},n,a,t);else{const h=_e(r,{configBackend:o?.install?.backend,configCorepack:o?.install?.corepack}),c=h.name==="aube"?"":ye(h.name);ot(r,h.name,c,n,a,t)}},"execute");export{$t as default,et as readPmNativeMinimumReleaseAge};
+`),o.info(le(d)),$>d.length){const l=[...N.values()].reduce((A,H)=>A+H.size,0),h=l>$?` (${String(l)} catalog entries, ${String(l-$)} duplicates)`:"";o.info(`  Checked ${String($)} unique packages${h}: ${String(Z)} up-to-date${y.length>0?`, ${String(y.length)} failed`:""}`)}if(f.length>0){process.stdout.write(`
+`);const l=`${String(f.length)} package${f.length===1?"":"s"} skipped by target constraint (use --target latest to include):`;process.stdout.write(`${V(k.createElement(b,{color:"yellow"},`  ${l}`),{columns:I})}
+`);for(const h of f)process.stdout.write(`${V(k.createElement(b,null,"     ",k.createElement(b,{dimColor:!0},h.packageName),`  ${h.currentRange} → ${h.newRange}`,k.createElement(b,{dimColor:!0},`  ${h.updateType}`)),{columns:I})}
+`)}const D=Array.isArray(K)?K:[];if(D.length>0&&!L){o.info(`
+Applying ${String(D.length)} updates...
+`);const l={...a,install:a.install??s.install};await se(e,t,D,l,o,S,n.editorconfig??!0)}return}if(L){if(q==="json"){const r={failed:y,filteredByTarget:f,ignored:C,outdated:d};w&&(r.aiAnalysis=w),process.stdout.write(`${JSON.stringify(r,void 0,2)}
+`)}else o.info(`Would update ${String(d.length)} dependencies:
+`),re(d,y,q,o),w&&(o.info(""),o.info(ne(w))),oe(f,o);return}w&&q!=="json"&&(o.info(ne(w)),o.info(""));let F=d;if(a.interactive&&(F=await je(d),F.length===0)){o.info("No updates selected.");return}o.info(`Updating ${String(F.length)} catalog dependencies...
+`),re(F,[],q,o),oe(f,o);const ge={...a,install:a.install??s.install};await se(e,t,F,ge,o,S)},"executeCatalogUpdate"),it=R((e,t,n,a,i,o)=>{const s={dev:a.dev,filters:j(a.filter),global:a.global,interactive:a.interactive,latest:a.latest||a.target==="latest",noOptional:a.optional===!1,noSave:a.save===!1,packages:i,prod:a.prod,recursive:a.recursive,workspaceRoot:a.workspaceRoot},{command:g,warnings:v}=nt(t,n,s);for(const p of v)o.warn(p);const u=`${g.bin} ${g.args.join(" ")}`.trim();if(a.dryRun){o.info(`Would run: ${u}`);return}o.info(`Running: ${u}`);try{ie(g.bin,g.args,{cwd:e,env:process.env,stdio:"inherit"})}catch(p){const m=p.status??1;o.error(`
+${qe("✖")} Update failed (exit code ${String(m)})`),o.error(`  Command: ${u}`),o.error(`  Directory: ${e}
+`),process.exitCode=m}},"executePmWrapper"),wt=R(async({argument:e,logger:t,options:n,visConfig:a,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");let o=e;const s=i,{packageManager:g}=Fe(s);if(n.typosquatCheck!==!1){if(o.length>0){const v=o.map(m=>Ge(m)),u=a?.security?.typosquatAllowlist,p=await Ie(v.map(m=>m.name),u);if(!p.ok){process.exitCode=1;return}o=v.map((m,S)=>{const E=p.packages[S];return E!==m.name?m.versionSpec?`${E}@${m.versionSpec}`:E??"":o[S]??""})}else if(!await De(s,a?.security?.typosquatAllowlist)){process.exitCode=1;return}}if(n.rollback){if(!Be(s,g)){t.info("No backup found. Run 'vis update' first to create a backup.");return}if(Me(s,g))t.info("Restored from backup.");else throw new Error("Failed to restore from backup.");return}if(n.catalog!==!1&&_e(s,g))await st(s,g,a??{},n,o,t);else{const v=Oe(s,{configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),u=v.name==="aube"?"":Pe(v.name);it(s,v.name,u,n,o,t)}},"execute");export{wt as default,ot as readPmNativeMinimumReleaseAge};