@visulima/vis 1.0.0-alpha.21 → 1.0.0-alpha.23

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@visulima/vis",
-  "version": "1.0.0-alpha.21",
+  "version": "1.0.0-alpha.23",
   "description": "A monorepo dev toolkit — task runner, remote caching, security scanning, git hooks, and AI agent integrations — powered by @visulima/task-runner",
   "keywords": [
     "build",
@@ -63,10 +63,13 @@
   },
   "bin": {
     "v": "./dist/bin.js",
-    "vis": "./dist/bin.js"
+    "vis": "./dist/bin.js",
+    "visx": "./dist/binx.js",
+    "vx": "./dist/binx.js"
   },
   "files": [
     "dist/**",
+    "dashboard/dist/**",
     "schemas/**",
     "skills/**",
     "templates/**",
@@ -77,19 +80,31 @@
     "LICENSE.md"
   ],
   "dependencies": {
+    "@floating-ui/core": "1.7.5",
+    "@floating-ui/dom": "1.7.6",
+    "@hono/node-server": "^2.0.2",
+    "@visulima/error": "6.0.0-alpha.27",
     "@visulima/secret-scanner": "1.0.0-alpha.3",
-    "@visulima/task-runner": "1.0.0-alpha.14",
-    "@visulima/tui": "1.0.0-alpha.16",
+    "@visulima/source-map": "3.0.0-alpha.9",
+    "@visulima/task-runner": "1.0.0-alpha.15",
+    "@visulima/tui": "1.0.0-alpha.18",
+    "graphology": "0.26.0",
+    "graphology-layout-forceatlas2": "0.10.1",
+    "graphology-types": "0.24.8",
+    "hono": "4.12.19",
     "jiti": "^2.7.0",
     "module-replacements": "^2.11.0",
     "module-replacements-codemods": "^1.2.1",
     "react": "19.2.6",
     "react-reconciler": ">=0.33.0",
+    "sigma": "3.0.3",
     "tinyexec": "^1.1.2"
   },
   "peerDependencies": {
     "@gitbeaker/rest": ">=43.8.0",
-    "@octokit/rest": ">=22.0.1"
+    "@octokit/rest": ">=22.0.1",
+    "fb-watchman": ">=2.0.0",
+    "sigstore": ">=3.0.0"
   },
   "peerDependenciesMeta": {
     "@gitbeaker/rest": {
@@ -97,17 +112,23 @@
     },
     "@octokit/rest": {
       "optional": true
+    },
+    "fb-watchman": {
+      "optional": true
+    },
+    "sigstore": {
+      "optional": true
     }
   },
   "optionalDependencies": {
-    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.21",
-    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.21",
-    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.21",
-    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.21",
-    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.21",
-    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.21",
-    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.21",
-    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.21"
+    "@visulima/vis-binding-linux-arm64-gnu": "1.0.0-alpha.23",
+    "@visulima/vis-binding-darwin-x64": "1.0.0-alpha.23",
+    "@visulima/vis-binding-darwin-arm64": "1.0.0-alpha.23",
+    "@visulima/vis-binding-linux-arm64-musl": "1.0.0-alpha.23",
+    "@visulima/vis-binding-linux-x64-gnu": "1.0.0-alpha.23",
+    "@visulima/vis-binding-linux-x64-musl": "1.0.0-alpha.23",
+    "@visulima/vis-binding-win32-x64-msvc": "1.0.0-alpha.23",
+    "@visulima/vis-binding-win32-arm64-msvc": "1.0.0-alpha.23"
   },
   "engines": {
     "node": "^22.14.0 || >=24.10.0"

package/schemas/project.schema.json

@@ -70,6 +70,10 @@
             ],
             "description": "Project type — `library`, `application`, `service`, or `tool`.\n\n- `library` — reusable code consumed by other workspace projects.\n- `application` — end-user-facing build target (web app, mobile app).\n- `service` — long-running HTTP / worker process deployed independently.\n- `tool` — CLI or developer tooling shipped as an executable."
         },
+        "restricted": {
+            "type": "boolean",
+            "description": "Marks the project as write-restricted. Consumed by `vis sync codeowners --write-guard` to scope the generated Write Guard workflow to this project's paths."
+        },
         "sourceRoot": {
             "type": "string",
             "description": "Source root, used for display and language inference."
@@ -166,6 +170,10 @@
                     "type": "string",
                     "description": "The command to run (alternative to executor)"
                 },
+                "concurrencyGroup": {
+                    "type": "string",
+                    "description": "Workspace-level concurrency group this target opts into. The scheduler caps the *combined* in-flight count of every task whose target carries the same group name to the value declared in  {@link  TaskRunnerOptions.concurrencyGroups } . Use this when several targets share an external resource (a single Postgres, a developer's Docker daemon, an account-wide deploy lock) so the cap follows the resource, not any single target name.\n\nTargets that name a group not declared in `concurrencyGroups` run uncapped — a typo shouldn't deadlock the graph. Caps don't apply to tasks marked `always: true`; those run in a separate finalisation phase outside the scheduler."
+                },
                 "configurations": {
                     "type": "object",
                     "additionalProperties": {
@@ -174,10 +182,6 @@
                     },
                     "description": "Named configurations (e.g., \"production\", \"development\")"
                 },
-                "concurrencyGroup": {
-                    "type": "string",
-                    "description": "Workspace-level concurrency group this target opts into. The scheduler caps the *combined* in-flight count of every task whose target carries the same group name to the value declared in  {@link  TaskRunnerOptions.concurrencyGroups } . Use this when several targets share an external resource (a single Postgres, a developer's Docker daemon, an account-wide deploy lock) so the cap follows the resource, not any single target name.\n\nTargets that name a group not declared in `concurrencyGroups` run uncapped — a typo shouldn't deadlock the graph. Caps don't apply to tasks marked `always: true`; those run in a separate finalisation phase outside the scheduler."
-                },
                 "dependsOn": {
                     "type": "array",
                     "items": {
@@ -233,6 +237,14 @@
                     "type": "string",
                     "description": "The executor/command to run"
                 },
+                "hashMode": {
+                    "type": "string",
+                    "enum": [
+                        "declared",
+                        "trace"
+                    ],
+                    "description": "How this target's cache key is derived.\n\n- `\"declared\"` (default): the Nx-style path — the hash is built   up-front from explicitly declared `inputs` (plus named/global   inputs and the lockfile). Deterministic and portable across   machines: two runners with the same workspace state produce the   same key regardless of OS or syscall surface.\n- `\"trace\"`: the task is run under the file-access tracker   (strace on Linux, an fs preload shim elsewhere) and the cache   key is derived from the files it actually *read* during   execution — no `inputs` declaration required. Mirrors the   shipped `{ auto: true }` output capture, but for the input   side. Use for compound or opaque commands whose real input set   is impractical to enumerate.\n\nOpt-in per target precisely because trace mode trades reproducibility for convenience: the observed read set can differ across runners with different syscall surfaces (a static binary on a host without strace records nothing), so a trace key is **not** guaranteed portable between machines. Leave targets on `\"declared\"` whenever the input set can reasonably be listed.\n\nEquivalent to flipping  {@link  TaskRunnerOptions.autoFingerprint }  on for this one target while every other target stays declared."
+                },
                 "inputs": {
                     "type": "array",
                     "items": {
@@ -333,14 +345,32 @@
                 },
                 "maxConcurrent": {
                     "type": "number",
-                    "description": "Maximum number of in-flight instances of this target across the whole graph. When set, the scheduler refuses to start an additional task whose `target.target` equals this target's name once the running count reaches `maxConcurrent`. Independent of `--parallel`: the global cap still bounds total in-flight tasks, and `maxConcurrent` further bounds the per-target subset.\n\nUse for tests/deploys that share an external resource (DB, port, mock server). Set to `1` to serialize. Values `<= 0` are ignored.\n\nIf multiple projects declare different values for the same target name, the runner uses the smallest declared cap. Caps don't apply to tasks marked `always: true`; those run in a separate finalisation phase outside the scheduler."
+                    "description": "Maximum number of in-flight instances of this target across the whole graph. When set, the scheduler refuses to start an additional task whose `target.target` equals this target's name once the running count reaches `maxConcurrent`. Independent of `--parallel`: the global cap still bounds total in-flight tasks, and `maxConcurrent` further bounds the per-target subset.\n\nUse for tests/deploys that share an external resource (DB, port, mock server). Set to `1` to serialize. Values `&lt;= 0` are ignored.\n\nIf multiple projects declare different values for the same target name, the runner uses the smallest declared cap. Caps don't apply to tasks marked `always: true`; those run in a separate finalisation phase outside the scheduler."
                 },
                 "outputs": {
                     "type": "array",
                     "items": {
-                        "type": "string"
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "object",
+                                "properties": {
+                                    "auto": {
+                                        "type": "boolean",
+                                        "const": true
+                                    }
+                                },
+                                "required": [
+                                    "auto"
+                                ],
+                                "additionalProperties": false
+                            }
+                        ],
+                        "description": "A single entry in a task's `outputs` list.\n\n- `string` — a literal path *or* a glob pattern relative to the   workspace root. Prefix with `!` to exclude files the positive   patterns would otherwise include (e.g. `\"!dist/cache/**\"`).\n- `{ auto: true }` — use whatever files the task actually wrote   during execution (resolved from the file-access tracker). Lets   authors who don't know their exact output layout cache results   without listing every path. Silently behaves as \"no outputs\" when   tracking isn't active for this task."
                     },
-                    "description": "Output patterns produced by this target"
+                    "description": "Output patterns produced by this target. Each entry is a literal path, a glob (`\"dist/**\"`), a negative glob (`\"!dist/cache/**\"`), or `{ auto: true }` to cache whatever files the task actually wrote during execution (resolved from the file-access tracker). `{ auto: true }` lets a build script cache zero-config without the author enumerating its output layout; it contributes nothing — and the runner declines to seed the cache — when write tracking isn't available for the task, so a hit can never restore a missing artifact."
                 },
                 "parallelism": {
                     "type": "boolean",