@visulima/vis 1.0.0-alpha.24 → 1.0.0-alpha.26

package/dist/packem_chunks/handler41.js

@@ -1,286 +1,25 @@
-var Rt=Object.defineProperty;var E=(e,t)=>Rt(e,"name",{value:t,configurable:!0});import{createRequire as Et}from"node:module";import{E as O,e as xe,q as dt,P as gt,T as ke}from"../packem_shared/index.server-B7ETiT4C.js";import{M as z,i as Y,$ as $e,C as Mt}from"../packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js";import{am as Wt,al as Tt,a2 as zt,a3 as Vt,a4 as Ft,o as _e,E as Ht,A as _t,aN as Ut,J as Gt,N as Bt,p as d,i as Qe,b as Kt,T as qt,f as Jt,L as et,C as Yt,O as Xt,Y as Zt,s as ze}from"./bin.js";import{whichBin as Qt}from"#native";import{w as ta,r as aa,b as ra}from"../packem_shared/ai-analysis-B8pDCOuT.js";import{B as tt,n as ft}from"./config.js";import{b as G,A as ia,P as na}from"../packem_shared/pm-runner-Dnj9J3KF.js";import{c as ut,s as be,g as oa,p as sa,e as ca}from"../packem_shared/index-D_tAc2nS.js";import{d as la}from"../packem_shared/anolilab-text-CAM_E6uK.js";import{t as pa,b as da}from"../packem_shared/cyclonedx-DPEW0nwS.js";import{s as ua}from"../packem_shared/scan-progress-EbvmIh4i.js";import{r as ma,A as at,q as rt}from"../packem_shared/advisories-U1QKY_tg.js";import{l as ha,f as va}from"../packem_shared/dependency-scan-BbtivycX.js";import{r as wa}from"../packem_shared/manifests-Z3spBpxv.js";import{l as ba,p as ya,O as xa}from"../packem_shared/osv-bloom-CyCDpXBl.js";const jt=Et(import.meta.url),te=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,oe=E(e=>{if(typeof te<"u"&&te.versions&&te.versions.node){const[t,a]=te.versions.node.split(".").map(Number);if(t>22||t===22&&a>=3||t===20&&a>=16)return te.getBuiltinModule(e)}return jt(e)},"__cjs_getBuiltinModule"),{spawnSync:Ot}=oe("node:child_process"),{existsSync:ct,readFileSync:lt,writeFileSync:pt,renameSync:Pt,unlinkSync:Lt}=oe("node:fs"),{createInterface:Dt}=oe("node:readline"),{stripVTControlCharacters:ea}=oe("node:util"),{relative:ga,join:fa}=oe("node:path");var ka=Object.defineProperty,$a=E((e,t)=>ka(e,"name",{value:t,configurable:!0}),"t"),Sa=Object.defineProperty,Aa=$a((e,t)=>Sa(e,"name",{value:t,configurable:!0}),"s"),Na=Object.defineProperty,Ca=Aa((e,t)=>Na(e,"name",{value:t,configurable:!0}),"n");const it=Ca((e,t={})=>{Array.isArray(t.extensions)||(t.extensions=["js","mjs","cjs","ts"]);const a=[];for(const r of Wt(e,t))a.push(r.path);return a},"collectSync");var Ia=Object.defineProperty,V=E((e,t)=>Ia(e,"name",{value:t,configurable:!0}),"a$1");const ye=V(e=>`${e.packageName}@${e.packageVersion}:${e.vulnerability.id}`,"explainKey"),Ra=V(e=>e==null||e===!0||e===""||e==="true"||e.toString().toLowerCase()==="all","isSelectAll"),Ea=V((e,t)=>{if(Ra(t))return e;const a=String(t).trim();if(/^\d+$/.test(a)){const i=Number.parseInt(a,10)-1,o=e[i];return o?[o]:[]}const r=a.toLowerCase();return e.filter(i=>{const{aliases:o,id:n}=i.vulnerability;return n.toLowerCase()===r||(o??[]).some(l=>l.toLowerCase()===r)})},"selectTargets"),ja=V(e=>{const{packageName:t,packageVersion:a,vulnerability:r}=e,i=(r.aliases??[]).join(", ")||"none",o=(r.fixedVersions??[]).join(", ")||"no fixed version published";return`You are a security engineer. Explain this dependency vulnerability for a developer triaging it.
-
-Package: ${t}@${a}
-Advisory: ${r.id} (aliases: ${i})
-Severity: ${r.severity}
-Fixed in: ${o}
-Summary: ${r.summary}
-
-Respond ONLY with valid JSON in this exact structure, each value 1-3 plain sentences, no markdown:
-{
-  "whatItIs": "what the vulnerability is and how it is exploited",
-  "areYouAtRisk": "what usage pattern makes an app actually exposed; be honest that lockfile presence alone is not exploitation",
-  "whatToDo": "the concrete remediation step"
-}`},"buildExplainPrompt"),we=V(e=>ea(e).replaceAll(/[\u0000-\u0008\u000B-\u001F\u007F]/gu,"").trim(),"sanitize"),Oa=V(e=>`What it is: ${e.whatItIs}
-Are you at risk: ${e.areYouAtRisk}
-What to do: ${e.whatToDo}`,"formatExplanation"),Pa=V(e=>{const t=ta(e);if(t&&typeof t=="object"){const a=t,r=typeof a.whatItIs=="string"?we(a.whatItIs):"",i=typeof a.areYouAtRisk=="string"?we(a.areYouAtRisk):"",o=typeof a.whatToDo=="string"?we(a.whatToDo):"";if(r||i||o)return Oa({areYouAtRisk:i,whatItIs:r,whatToDo:o})}return we(e)},"parseExplanation"),La=V(async(e,t,a)=>{let r=0;const i=Array.from({length:Math.min(t,e.length)},async()=>{for(;r<e.length;){const o=r;r+=1;const n=e[o];n!==void 0&&await a(n)}});await Promise.all(i)},"mapWithConcurrency"),Da=3,Ma={resolveProvider:ra,runWithRetry:aa},Wa=V(async(e,t,a,r=Ma)=>{const i=new Map;if(e.length===0)return i;const o=r.resolveProvider(t);if(!o)return a?.info?.("No AI CLI provider found on PATH — skipping --explain."),i;const n=Tt("security",t?.cacheTtl);return await La(e,Da,async l=>{const g=ye(l),v=zt({id:l.vulnerability.id,kind:"audit-explain",name:l.packageName,provider:o.name,version:l.packageVersion}),h=Vt(v);if(typeof h=="string"){i.set(g,h);return}try{const u=await r.runWithRetry(o,ja(l)),m=Pa(u);m&&(i.set(g,m),Ft(v,m,n))}catch(u){const m=u instanceof Error?u.message:String(u);a?.warn?.(`Explain failed for ${l.vulnerability.id} (${m}).`)}}),i},"explainFindings");var Ta=Object.defineProperty,B=E((e,t)=>Ta(e,"name",{value:t,configurable:!0}),"o$1");const Se=B(e=>Array.isArray(e)?e.filter(t=>typeof t=="string"):[],"toStringArray"),Ve=B((e,t)=>{for(const a of t)if(a===e||a.endsWith("*")&&e.startsWith(a.slice(0,-1)))return!0;return!1},"matchesGlobList"),mt=B(e=>{const t=z(e,"pnpm-workspace.yaml");if(!Y(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const a=_e(t);return{excludedPackages:[],ignoredAdvisories:[...Se(a?.auditConfig?.ignoreCves),...Se(a?.auditConfig?.ignoreGhsas)]}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readPnpmAuditExclusions"),ht=B(e=>{const t=z(e,".yarnrc.yml");if(!Y(t))return{excludedPackages:[],ignoredAdvisories:[]};try{const a=_e(t);return{excludedPackages:Se(a?.npmAuditExcludePackages),ignoredAdvisories:Se(a?.npmAuditIgnoreAdvisories)}}catch{return{excludedPackages:[],ignoredAdvisories:[]}}},"readYarnAuditExclusions"),za=B((e,t)=>{switch(t){case"pnpm":return mt(e);case"yarn":return ht(e);default:return{excludedPackages:[],ignoredAdvisories:[]}}},"readNativeAuditExclusions"),ie=B((e,t,a)=>{if(Ve(e,t.ignoredAdvisories))return!0;if(a){for(const r of a)if(Ve(r,t.ignoredAdvisories))return!0}return!1},"isAdvisoryExcluded"),Va=B((e,t)=>Ve(e,t.excludedPackages),"isPackageExcluded"),Fa=B((e,t,a)=>{if(a.length===0)return["No advisory IDs to sync."];const r=[];switch(e){case"bun":{r.push(`bun has no audit config file. Use CLI flags: bun audit ${a.map(i=>`--ignore ${i}`).join(" ")}`);break}case"npm":{r.push("npm has no native audit exclusion config. vis accepted risks are the only layer.");break}case"pnpm":{const i=z(t,"pnpm-workspace.yaml");if(!Y(i)){r.push("pnpm-workspace.yaml not found. Cannot sync.");break}const o=mt(t),n=new Set(o.ignoredAdvisories.filter(y=>y.startsWith("CVE-"))),l=new Set(o.ignoredAdvisories.filter(y=>y.startsWith("GHSA-"))),g=a.filter(y=>y.startsWith("CVE-")),v=a.filter(y=>y.startsWith("GHSA-")),h=[...new Set([...n,...g])],u=[...new Set([...l,...v])],m=g.filter(y=>!n.has(y)).length,x=v.filter(y=>!l.has(y)).length;if(m===0&&x===0){r.push("All advisory IDs already present in pnpm-workspace.yaml.");break}let b=$e(i);if(h.length>0){const y=`  ignoreCves:
-${h.map($=>`    - ${$}`).join(`
-`)}
-`;/auditConfig:/.test(b)?b=/ignoreCves:/.test(b)?b.replace(/ignoreCves:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,y):b.replace(/auditConfig:\s*\n/,`auditConfig:
-${y}`):b=`${b.trimEnd()}
-
-auditConfig:
-${y}`,m>0&&r.push(`Added ${String(m)} new CVE${m===1?"":"s"} to pnpm-workspace.yaml (${String(h.length)} total)`)}if(u.length>0){const y=`  ignoreGhsas:
-${u.map($=>`    - ${$}`).join(`
-`)}
-`;/auditConfig:/.test(b)&&(b=/ignoreGhsas:/.test(b)?b.replace(/ignoreGhsas:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,y):b.replace(/(auditConfig:[\s\S]*?)(\n\S|\n?$)/m,`$1${y}$2`)),x>0&&r.push(`Added ${String(x)} new GHSA${x===1?"":"s"} to pnpm-workspace.yaml (${String(u.length)} total)`)}tt(i,b);break}case"yarn":{const i=z(t,".yarnrc.yml");if(!Y(i)){r.push(".yarnrc.yml not found. Cannot sync.");break}const o=ht(t),n=new Set(o.ignoredAdvisories),l=[...new Set([...n,...a])],g=a.filter(u=>!n.has(u)).length;if(g===0){r.push("All advisory IDs already present in .yarnrc.yml.");break}let v=$e(i);const h=`npmAuditIgnoreAdvisories:
-${l.map(u=>`  - "${u}"`).join(`
-`)}
-`;v=/npmAuditIgnoreAdvisories:/.test(v)?v.replace(/npmAuditIgnoreAdvisories:\s*\n(?:\s+-\s+(?:\S.*|[\t\v\f \u00A0\u1680\u2000-\u200A\u202F\u205F\u3000\uFEFF])\n)*/,h):`${v.trimEnd()}
-
-${h}`,tt(i,v),r.push(`Synced ${String(g)} advisor${g===1?"y":"ies"} to .yarnrc.yml (${String(l.length)} total)`);break}default:r.push(`Unknown package manager: ${e}`)}return r},"syncAcceptedRisksToNativeConfig");var Ha=`/*! tailwindcss v4.3.0 | MIT License | https://tailwindcss.com */
-@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-shadow:0 0 #0000;--tw-shadow-color:initial;--tw-shadow-alpha:100%;--tw-inset-shadow:0 0 #0000;--tw-inset-shadow-color:initial;--tw-inset-shadow-alpha:100%;--tw-ring-color:initial;--tw-ring-shadow:0 0 #0000;--tw-inset-ring-color:initial;--tw-inset-ring-shadow:0 0 #0000;--tw-ring-inset:initial;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-offset-shadow:0 0 #0000;--tw-outline-style:solid;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial;--tw-backdrop-blur:initial;--tw-backdrop-brightness:initial;--tw-backdrop-contrast:initial;--tw-backdrop-grayscale:initial;--tw-backdrop-hue-rotate:initial;--tw-backdrop-invert:initial;--tw-backdrop-opacity:initial;--tw-backdrop-saturate:initial;--tw-backdrop-sepia:initial;--tw-duration:initial;--tw-content:""}}}@layer theme{:root,:host{--font-sans:ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-white:#fff;--spacing:.25rem;--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--font-weight-light:300;--font-weight-medium:500;--font-weight-semibold:600;--font-weight-bold:700;--tracking-tight:-.025em;--tracking-normal:0em;--leading-tight:1.25;--leading-snug:1.375;--radius-sm:.25rem;--ease-out:cubic-bezier(0, 0, .2, 1);--blur-sm:8px;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono)}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}:root{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d;--mono:ui-monospace, "SF Mono", "JetBrains Mono", "Cascadia Mono", "Roboto Mono", Menlo, Consolas, monospace;--sans:system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", sans-serif}@media (prefers-color-scheme:dark){:root{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}}html[data-theme=light]{--bg:#f5f5f5;--panel:#fff;--panel2:#f0f0f0;--fg:#000;--muted:#555;--faint:#707070;--border:#e0e0e0;--border2:#bdbdbd;--row-hover:#f0f0f0;--accent:#d71921;--accent-soft:#d719210d;--link:#0050c0;--critical:#d71921;--high:#8a5a00;--medium:#555;--low:#707070;--unknown:#707070;--major:#d71921;--minor:#1f7a3d}html[data-theme=dark]{--bg:#141414;--panel:#1c1c1c;--panel2:#242424;--fg:#fff;--muted:#b8b8b8;--faint:#8a8a8a;--border:#2e2e2e;--border2:#3e3e3e;--row-hover:#1f1f1f;--accent:#ff4d54;--accent-soft:#ff4d5414;--link:#7eb0f9;--critical:#ff4d54;--high:#e0b860;--medium:#b8b8b8;--low:#8a8a8a;--unknown:#8a8a8a;--major:#ff4d54;--minor:#6dbf80}*{box-sizing:border-box}html{-webkit-text-size-adjust:100%}body{font-family:var(--sans);background-color:var(--bg);background-image:radial-gradient(circle, var(--border) .5px, transparent .5px);color:var(--fg);-webkit-font-smoothing:antialiased;font-feature-settings:"ss01";background-size:14px 14px;margin:0;padding:24px;line-height:1.5}a{color:var(--link);text-decoration:none}code{font-family:var(--mono);font-size:12px}h2{font-family:var(--mono);letter-spacing:.16em;text-transform:uppercase;color:var(--muted);margin:48px 0 14px;font-size:11px;font-weight:500}input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select{appearance:none;--tw-shadow:0 0 #0000;background-color:#fff;border-width:1px;border-color:oklch(55.1% .027 264.364);border-radius:0;padding:.5rem .75rem;font-size:1rem;line-height:1.5rem}:is(input:where([type=text]),input:where(:not([type])),input:where([type=email]),input:where([type=url]),input:where([type=password]),input:where([type=number]),input:where([type=date]),input:where([type=datetime-local]),input:where([type=month]),input:where([type=search]),input:where([type=tel]),input:where([type=time]),input:where([type=week]),select:where([multiple]),textarea,select):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);border-color:oklch(54.6% .245 262.881);outline:2px solid #0000}input::placeholder,textarea::placeholder{color:oklch(55.1% .027 264.364);opacity:1}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-date-and-time-value{min-height:1.5em}::-webkit-date-and-time-value{text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-year-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-month-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-day-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-hour-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-minute-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-second-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-millisecond-field{padding-top:0;padding-bottom:0}::-webkit-datetime-edit-meridiem-field{padding-top:0;padding-bottom:0}select{-webkit-print-color-adjust:exact;print-color-adjust:exact;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3e%3cpath stroke='oklch(55.1%25 0.027 264.364)' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='M6 8l4 4 4-4'/%3e%3c/svg%3e");background-position:right .5rem center;background-repeat:no-repeat;background-size:1.5em 1.5em;padding-right:2.5rem}select:where([multiple]),select:where([size]:not([size="1"])){background-image:initial;background-position:initial;background-repeat:unset;background-size:initial;print-color-adjust:unset;padding-right:.75rem}input:where([type=checkbox]),input:where([type=radio]){appearance:none;-webkit-print-color-adjust:exact;print-color-adjust:exact;vertical-align:middle;-webkit-user-select:none;user-select:none;color:oklch(54.6% .245 262.881);--tw-shadow:0 0 #0000;background-color:#fff;background-origin:border-box;border-width:1px;border-color:oklch(55.1% .027 264.364);flex-shrink:0;width:1rem;height:1rem;padding:0;display:inline-block}input:where([type=checkbox]){border-radius:0}input:where([type=radio]){border-radius:100%}input:where([type=checkbox]):focus,input:where([type=radio]):focus{outline-offset:2px;--tw-ring-inset:var(--tw-empty, );--tw-ring-offset-width:2px;--tw-ring-offset-color:#fff;--tw-ring-color:oklch(54.6% .245 262.881);--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow);outline:2px solid #0000}input:where([type=checkbox]):checked,input:where([type=radio]):checked{background-color:currentColor;background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}input:where([type=checkbox]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3cpath d='M12.207 4.793a1 1 0 010 1.414l-5 5a1 1 0 01-1.414 0l-2-2a1 1 0 011.414-1.414L6.5 9.086l4.293-4.293a1 1 0 011.414 0z'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=checkbox]):checked{appearance:auto}}input:where([type=radio]):checked{background-image:url("data:image/svg+xml,%3csvg viewBox='0 0 16 16' fill='white' xmlns='http://www.w3.org/2000/svg'%3e%3ccircle cx='8' cy='8' r='3'/%3e%3c/svg%3e")}@media (forced-colors:active){input:where([type=radio]):checked{appearance:auto}}input:where([type=checkbox]):checked:hover,input:where([type=checkbox]):checked:focus,input:where([type=radio]):checked:hover,input:where([type=radio]):checked:focus{background-color:currentColor;border-color:#0000}input:where([type=checkbox]):indeterminate{background-color:currentColor;background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3e%3cpath stroke='white' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3e%3c/svg%3e");background-position:50%;background-repeat:no-repeat;background-size:100% 100%;border-color:#0000}@media (forced-colors:active){input:where([type=checkbox]):indeterminate{appearance:auto}}input:where([type=checkbox]):indeterminate:hover,input:where([type=checkbox]):indeterminate:focus{background-color:currentColor;border-color:#0000}input:where([type=file]){background:unset;border-color:inherit;font-size:unset;line-height:inherit;border-width:0;border-radius:0;padding:0}input:where([type=file]):focus{outline:1px solid buttontext;outline:1px auto -webkit-focus-ring-color}}@layer components{.masthead{border-bottom:1px solid var(--border)}.brand{font-family:var(--sans);color:var(--fg);font-size:clamp(30px,5vw,52px);font-weight:600}.brand .slash{color:var(--accent)}.brand .sub{font-family:var(--mono);letter-spacing:.22em;color:var(--faint)}.chip{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2)}.tbtn{font-family:var(--mono);letter-spacing:.08em;color:var(--muted);border:1px solid var(--border2);transition:border-color .2s,color .2s}.tbtn:hover{color:var(--fg);border-color:var(--fg)}.tbtn-theme{min-width:28px}.tbtn-theme .ticon{line-height:0}.tbtn-theme .ticon-sun{display:none}@media (prefers-color-scheme:dark){.tbtn-theme .ticon-moon{display:none}.tbtn-theme .ticon-sun{display:inline-flex}}html[data-theme=light] .tbtn-theme .ticon-moon{display:inline-flex}html[data-theme=light] .tbtn-theme .ticon-sun,html[data-theme=dark] .tbtn-theme .ticon-moon{display:none}html[data-theme=dark] .tbtn-theme .ticon-sun{display:inline-flex}.verdict{padding:56px 0 36px}.verdict .vnum{font-family:var(--mono);letter-spacing:-.04em;color:var(--fg);font-variant-numeric:tabular-nums;font-size:clamp(64px,14vw,148px);line-height:.85}.verdict .vsub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}.verdict-crit .vnum{color:var(--accent)}.verdict-high .vnum{color:var(--high)}.debugbar{border-bottom:1px solid var(--border)}.dseg+.dseg{border-left:1px solid var(--border);padding-left:1.75rem}.dseg .dk{font-family:var(--mono);letter-spacing:.13em;color:var(--faint)}.dseg .dv{font-family:var(--mono);color:var(--fg);font-variant-numeric:tabular-nums;letter-spacing:-.01em;font-weight:400}.dseg .dvsep{color:var(--faint)}.dseg .dot{background:var(--unknown)}.dseg-critical .dv{color:var(--critical)}.dseg-high .dv{color:var(--high)}.dseg-moderate .dv{color:var(--medium)}.dseg-low .dv{color:var(--low)}.dseg-ok .dot{background:var(--minor)}.dseg-ok .dv{color:var(--minor)}.field{border-bottom:1px solid var(--border2);background:0 0;transition:border-color .2s}.field:focus-within{border-bottom-color:var(--fg)}.field .prompt{font-family:var(--mono);letter-spacing:.12em;color:var(--faint)}.field input,.field select{font-family:var(--mono);color:var(--fg)}.field.sel{margin-left:32px}.field select{text-transform:uppercase;letter-spacing:.06em;font-size:11px}.field select option{background:var(--panel);color:var(--fg);text-transform:none;letter-spacing:0}.field input::placeholder{color:var(--faint);text-transform:uppercase;letter-spacing:.06em;font-size:11px}#findings{border-collapse:collapse}#findings thead th{font-family:var(--mono);letter-spacing:.11em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#findings td,#findings tbody tr:last-child td{border-bottom:1px solid var(--border)}.finding-row:hover td{background:var(--row-hover)}.sev-cell{box-shadow:inset 2px 0 0 var(--border2)}tr[data-severity=CRITICAL] .sev-cell{box-shadow:inset 2px 0 0 var(--critical)}tr[data-severity=HIGH] .sev-cell{box-shadow:inset 2px 0 0 var(--high)}tr[data-severity=MODERATE] .sev-cell{box-shadow:inset 2px 0 0 var(--medium)}tr[data-severity=LOW] .sev-cell{box-shadow:inset 2px 0 0 var(--low)}tr[data-severity=UNKNOWN] .sev-cell{box-shadow:inset 2px 0 0 var(--unknown)}.ack-row td{opacity:.4}.ack-row .summary-cell,.ack-row a{color:var(--muted)}code.pkg{color:var(--fg)}code.ver,code.fix{color:var(--muted)}code.fix{color:var(--minor)}code.copyable{cursor:copy;padding-inline:calc(var(--spacing) * 2);padding-block:calc(var(--spacing) * 1);white-space:nowrap;color:var(--fg);border:1px solid var(--border2);background:0 0;border-radius:3px;font-size:12px;transition:border-color .2s,color .2s;display:inline-block}code.copyable:hover{border-color:var(--fg)}code.copyable.copied{color:var(--minor);border-color:var(--minor)}.adv-cell a{font-family:var(--mono);color:var(--link);border-bottom:1px solid #0000;transition:border-color .2s}.adv-cell a:hover{border-bottom-color:var(--link)}.summary-cell{font-family:var(--sans);color:var(--muted);line-height:1.5}.muted{font-family:var(--mono);letter-spacing:.06em;color:var(--faint)}.ack{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);border:1px solid var(--border2)}.badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.badge:before{content:"";background:currentColor;width:5px;height:5px}.badge-critical{color:var(--critical)}.badge-high{color:var(--high)}.badge-moderate{color:var(--medium)}.badge-low{color:var(--low)}.badge-unknown{color:var(--unknown)}.marker{font-family:var(--mono);letter-spacing:.09em}.marker-major{color:var(--major)}.marker-minor-patch{color:var(--minor)}.marker-unknown{color:var(--unknown)}.empty{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border);border-bottom:1px solid var(--border)}.clean{padding-top:96px;padding-bottom:96px}.clean .big{font-family:var(--mono);letter-spacing:-.03em;color:var(--fg);font-size:clamp(56px,12vw,128px);line-height:1}.clean .sub{font-family:var(--mono);letter-spacing:.16em;color:var(--faint)}#policies{border-collapse:collapse}#policies th{font-family:var(--mono);letter-spacing:.12em;color:var(--faint);background:var(--bg);border-bottom:1px solid var(--border2)}#policies td,#policies tr:last-child td{border-bottom:1px solid var(--border)}#policies code{letter-spacing:.04em;color:var(--muted)}.policy-badge{font-family:var(--mono);letter-spacing:.1em;border:1px solid}.policy-badge:before{content:"";background:currentColor;width:5px;height:5px}.policy-block{color:var(--accent)}.policy-warn{color:var(--high)}.policy-info{color:var(--muted)}.hint{font-family:var(--mono);letter-spacing:.1em;color:var(--faint)}.kbd{font-family:var(--mono);letter-spacing:.06em;color:var(--muted);background:var(--panel2);border:1px solid var(--border2)}.explain-row td{border-top:1px dotted var(--accent);border-bottom:1px solid var(--border);box-shadow:inset 2px 0 0 var(--accent);background:0 0}.finding-row:has(+.explain-row) td{border-bottom:none}.explain-row details{background:0 0}.explain-row summary::-webkit-details-marker{display:none}.intel-tag{font-family:var(--mono);letter-spacing:.16em;color:var(--accent)}.intel-hint{font-family:var(--mono);letter-spacing:.1em;color:var(--muted)}.explain-row details[open] summary .intel-hint:after{content:" [-]"}.explain-row details:not([open]) summary .intel-hint:after{content:" [+]"}.explain-body{animation:.2s both rise}.intel-key{font-family:var(--mono);letter-spacing:.12em;color:var(--accent)}.intel-val{font-family:var(--sans);color:var(--fg);line-height:1.55}.intel-prose{color:var(--muted);grid-template-columns:1fr}.intel-prose .intel-val{color:var(--muted)}.sig{font-family:var(--mono);letter-spacing:.1em;color:var(--faint);border-top:1px solid var(--border)}.sig b{color:var(--muted);font-weight:500}.sig-by{color:var(--muted)}.anolilab-logo{width:auto;height:13px;fill:var(--fg)}.anolilab-accent{fill:#dfff1b}@keyframes rise{0%{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}@media (prefers-reduced-motion:reduce){.explain-body{animation:none}}}@layer utilities{.pointer-events-auto{pointer-events:auto}.pointer-events-none{pointer-events:none}.collapse{visibility:collapse}.invisible{visibility:hidden}.visible{visibility:visible}.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.static{position:static}.sticky{position:sticky}.inset-0{inset:calc(var(--spacing) * 0)}.inset-x-0{inset-inline:calc(var(--spacing) * 0)}.top-0{top:calc(var(--spacing) * 0)}.top-3{top:calc(var(--spacing) * 3)}.top-4{top:calc(var(--spacing) * 4)}.top-full{top:100%}.right-0{right:calc(var(--spacing) * 0)}.right-4{right:calc(var(--spacing) * 4)}.bottom-4{bottom:calc(var(--spacing) * 4)}.bottom-5{bottom:calc(var(--spacing) * 5)}.left-0{left:calc(var(--spacing) * 0)}.left-4{left:calc(var(--spacing) * 4)}.isolate{isolation:isolate}.z-20{z-index:20}.z-30{z-index:30}.z-\\[2\\]{z-index:2}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.mx-1{margin-inline:calc(var(--spacing) * 1)}.mx-12{margin-inline:calc(var(--spacing) * 12)}.mx-\\[0\\.12em\\]{margin-inline:.12em}.mx-auto{margin-inline:auto}.mt-1{margin-top:calc(var(--spacing) * 1)}.mt-2{margin-top:calc(var(--spacing) * 2)}.mt-3{margin-top:calc(var(--spacing) * 3)}.mt-4{margin-top:calc(var(--spacing) * 4)}.mt-6{margin-top:calc(var(--spacing) * 6)}.mt-12{margin-top:calc(var(--spacing) * 12)}.mb-1{margin-bottom:calc(var(--spacing) * 1)}.mb-2{margin-bottom:calc(var(--spacing) * 2)}.mb-3{margin-bottom:calc(var(--spacing) * 3)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.mb-6{margin-bottom:calc(var(--spacing) * 6)}.mb-10{margin-bottom:calc(var(--spacing) * 10)}.ml-2{margin-left:calc(var(--spacing) * 2)}.ml-8{margin-left:calc(var(--spacing) * 8)}.ml-auto{margin-left:auto}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.inline{display:inline}.inline-block{display:inline-block}.inline-flex{display:inline-flex}.table{display:table}.size-\\[7px\\]{width:7px;height:7px}.h-2{height:calc(var(--spacing) * 2)}.h-5{height:calc(var(--spacing) * 5)}.h-7{height:calc(var(--spacing) * 7)}.h-9{height:calc(var(--spacing) * 9)}.h-10{height:calc(var(--spacing) * 10)}.h-11{height:calc(var(--spacing) * 11)}.h-\\[6px\\]{height:6px}.h-\\[7px\\]{height:7px}.h-\\[8px\\]{height:8px}.h-\\[10px\\]{height:10px}.h-\\[18px\\]{height:18px}.h-full{height:100%}.h-px{height:1px}.max-h-72{max-height:calc(var(--spacing) * 72)}.min-h-\\[400px\\]{min-height:400px}.min-h-\\[480px\\]{min-height:480px}.min-h-screen{min-height:100vh}.w-2{width:calc(var(--spacing) * 2)}.w-3{width:calc(var(--spacing) * 3)}.w-4{width:calc(var(--spacing) * 4)}.w-7{width:calc(var(--spacing) * 7)}.w-9{width:calc(var(--spacing) * 9)}.w-\\[7px\\]{width:7px}.w-\\[8px\\]{width:8px}.w-full{width:100%}.w-px{width:1px}.max-w-\\[380px\\]{max-width:380px}.max-w-\\[1080px\\]{max-width:1080px}.min-w-0{min-width:calc(var(--spacing) * 0)}.min-w-5{min-width:calc(var(--spacing) * 5)}.min-w-\\[200px\\]{min-width:200px}.min-w-\\[220px\\]{min-width:220px}.min-w-\\[260px\\]{min-width:260px}.flex-1{flex:1}.flex-\\[1_1_280px\\]{flex:280px}.flex-auto{flex:auto}.flex-none{flex:none}.shrink{flex-shrink:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.caption-bottom{caption-side:bottom}.border-collapse{border-collapse:collapse}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-move{cursor:move}.cursor-pointer{cursor:pointer}.resize{resize:both}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.grid-cols-\\[72px_1fr\\]{grid-template-columns:72px 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-baseline{align-items:baseline}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.items-stretch{align-items:stretch}.justify-between{justify-content:space-between}.justify-center{justify-content:center}.gap-0{gap:calc(var(--spacing) * 0)}.gap-1{gap:calc(var(--spacing) * 1)}.gap-1\\.5{gap:calc(var(--spacing) * 1.5)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}.gap-6{gap:calc(var(--spacing) * 6)}.gap-8{gap:calc(var(--spacing) * 8)}.gap-12{gap:calc(var(--spacing) * 12)}.gap-16{gap:calc(var(--spacing) * 16)}.gap-\\[0\\.65rem\\]{gap:.65rem}.gap-\\[2px\\]{gap:2px}.gap-\\[7px\\]{gap:7px}.gap-px{gap:1px}:where(.space-y-0\\.5>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * .5) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * .5) * calc(1 - var(--tw-space-y-reverse)))}.gap-x-3{column-gap:calc(var(--spacing) * 3)}.gap-x-6{column-gap:calc(var(--spacing) * 6)}.gap-y-1{row-gap:calc(var(--spacing) * 1)}.gap-y-2{row-gap:calc(var(--spacing) * 2)}.gap-y-3{row-gap:calc(var(--spacing) * 3)}.self-center{align-self:center}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-auto{overflow:auto}.overflow-y-auto{overflow-y:auto}.rounded{border-radius:.25rem}.rounded-\\[3px\\]{border-radius:3px}.rounded-\\[4px\\]{border-radius:4px}.rounded-full{border-radius:3.40282e38px}.rounded-sm{border-radius:var(--radius-sm)}.border{border-style:var(--tw-border-style);border-width:1px}.border-0{border-style:var(--tw-border-style);border-width:0}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-l-2{border-left-style:var(--tw-border-style);border-left-width:2px}.border-dashed{--tw-border-style:dashed;border-style:dashed}.bg-transparent{background-color:#0000}.p-0{padding:calc(var(--spacing) * 0)}.p-5{padding:calc(var(--spacing) * 5)}.p-6{padding:calc(var(--spacing) * 6)}.px-0{padding-inline:calc(var(--spacing) * 0)}.px-0\\.5{padding-inline:calc(var(--spacing) * .5)}.px-1{padding-inline:calc(var(--spacing) * 1)}.px-1\\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.px-5{padding-inline:calc(var(--spacing) * 5)}.px-6{padding-inline:calc(var(--spacing) * 6)}.px-8{padding-inline:calc(var(--spacing) * 8)}.px-12{padding-inline:calc(var(--spacing) * 12)}.px-\\[5px\\]{padding-inline:5px}.px-\\[6px\\]{padding-inline:6px}.py-0\\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:calc(var(--spacing) * 1)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-4{padding-block:calc(var(--spacing) * 4)}.py-5{padding-block:calc(var(--spacing) * 5)}.py-6{padding-block:calc(var(--spacing) * 6)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-12{padding-block:calc(var(--spacing) * 12)}.py-16{padding-block:calc(var(--spacing) * 16)}.py-\\[3px\\]{padding-block:3px}.py-px{padding-block:1px}.pt-0\\.5{padding-top:calc(var(--spacing) * .5)}.pt-1{padding-top:calc(var(--spacing) * 1)}.pt-2{padding-top:calc(var(--spacing) * 2)}.pt-5{padding-top:calc(var(--spacing) * 5)}.pt-7{padding-top:calc(var(--spacing) * 7)}.pt-8{padding-top:calc(var(--spacing) * 8)}.pt-12{padding-top:calc(var(--spacing) * 12)}.pr-0{padding-right:calc(var(--spacing) * 0)}.pr-2{padding-right:calc(var(--spacing) * 2)}.pr-3{padding-right:calc(var(--spacing) * 3)}.pr-6{padding-right:calc(var(--spacing) * 6)}.pb-1{padding-bottom:calc(var(--spacing) * 1)}.pb-1\\.5{padding-bottom:calc(var(--spacing) * 1.5)}.pb-4{padding-bottom:calc(var(--spacing) * 4)}.pb-5{padding-bottom:calc(var(--spacing) * 5)}.pb-6{padding-bottom:calc(var(--spacing) * 6)}.pb-8{padding-bottom:calc(var(--spacing) * 8)}.pb-12{padding-bottom:calc(var(--spacing) * 12)}.pl-0{padding-left:calc(var(--spacing) * 0)}.pl-3{padding-left:calc(var(--spacing) * 3)}.pl-4{padding-left:calc(var(--spacing) * 4)}.pl-\\[7px\\]{padding-left:7px}.text-center{text-align:center}.text-left{text-align:left}.text-right{text-align:right}.align-middle{vertical-align:middle}.align-top{vertical-align:top}.font-mono{font-family:var(--font-mono)}.font-sans{font-family:var(--font-sans)}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-\\[9px\\]{font-size:9px}.text-\\[10px\\]{font-size:10px}.text-\\[11px\\]{font-size:11px}.text-\\[12px\\]{font-size:12px}.text-\\[13px\\]{font-size:13px}.text-\\[14px\\]{font-size:14px}.text-\\[15px\\]{font-size:15px}.text-\\[22px\\]{font-size:22px}.text-\\[28px\\]{font-size:28px}.text-\\[44px\\]{font-size:44px}.text-\\[72px\\]{font-size:72px}.text-\\[clamp\\(28px\\,5vw\\,52px\\)\\]{font-size:clamp(28px,5vw,52px)}.leading-\\[0\\.9\\]{--tw-leading:.9;line-height:.9}.leading-none{--tw-leading:1;line-height:1}.leading-snug{--tw-leading:var(--leading-snug);line-height:var(--leading-snug)}.leading-tight{--tw-leading:var(--leading-tight);line-height:var(--leading-tight)}.font-bold{--tw-font-weight:var(--font-weight-bold);font-weight:var(--font-weight-bold)}.font-light{--tw-font-weight:var(--font-weight-light);font-weight:var(--font-weight-light)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-\\[-0\\.02em\\]{--tw-tracking:-.02em;letter-spacing:-.02em}.tracking-\\[0\\.1em\\]{--tw-tracking:.1em;letter-spacing:.1em}.tracking-\\[0\\.05em\\]{--tw-tracking:.05em;letter-spacing:.05em}.tracking-\\[0\\.08em\\]{--tw-tracking:.08em;letter-spacing:.08em}.tracking-\\[0\\.11em\\]{--tw-tracking:.11em;letter-spacing:.11em}.tracking-\\[0\\.12em\\]{--tw-tracking:.12em;letter-spacing:.12em}.tracking-\\[0\\.15em\\]{--tw-tracking:.15em;letter-spacing:.15em}.tracking-\\[0\\.16em\\]{--tw-tracking:.16em;letter-spacing:.16em}.tracking-\\[0\\.22em\\]{--tw-tracking:.22em;letter-spacing:.22em}.tracking-normal{--tw-tracking:var(--tracking-normal);letter-spacing:var(--tracking-normal)}.tracking-tight{--tw-tracking:var(--tracking-tight);letter-spacing:var(--tracking-tight)}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.whitespace-nowrap{white-space:nowrap}.capitalize{text-transform:capitalize}.lowercase{text-transform:lowercase}.normal-case{text-transform:none}.uppercase{text-transform:uppercase}.italic{font-style:italic}.no-underline{text-decoration-line:none}.opacity-40{opacity:.4}.shadow{--tw-shadow:0 1px 3px 0 var(--tw-shadow-color,#0000001a), 0 1px 2px -1px var(--tw-shadow-color,#0000001a);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_4px_12px_rgba\\(0\\,0\\,0\\,0\\.08\\)\\]{--tw-shadow:0 4px 12px var(--tw-shadow-color,#00000014);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.shadow-\\[0_8px_24px_rgba\\(0\\,0\\,0\\,0\\.12\\)\\]{--tw-shadow:0 8px 24px var(--tw-shadow-color,#0000001f);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.ring{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.outline-0{outline-style:var(--tw-outline-style);outline-width:0}.blur{--tw-blur:blur(8px);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.invert{--tw-invert:invert(100%);filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.backdrop-blur-sm{--tw-backdrop-blur:blur(var(--blur-sm));-webkit-backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,);backdrop-filter:var(--tw-backdrop-blur,) var(--tw-backdrop-brightness,) var(--tw-backdrop-contrast,) var(--tw-backdrop-grayscale,) var(--tw-backdrop-hue-rotate,) var(--tw-backdrop-invert,) var(--tw-backdrop-opacity,) var(--tw-backdrop-saturate,) var(--tw-backdrop-sepia,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.transition-colors{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}.duration-150{--tw-duration:.15s;transition-duration:.15s}.select-none{-webkit-user-select:none;user-select:none}.group-data-\\[state\\=off\\]\\:opacity-30:is(:where(.group)[data-state=off] *){opacity:.3}.before\\:absolute:before{content:var(--tw-content);position:absolute}.before\\:left-0:before{content:var(--tw-content);left:calc(var(--spacing) * 0)}.before\\:content-\\[\\'→\\'\\]:before{--tw-content:"→";content:var(--tw-content)}.after\\:ml-auto:after{content:var(--tw-content);margin-left:auto}.after\\:font-mono:after{content:var(--tw-content);font-family:var(--font-mono)}.after\\:text-\\[9px\\]:after{content:var(--tw-content);font-size:9px}.after\\:tracking-\\[0\\.1em\\]:after{content:var(--tw-content);--tw-tracking:.1em;letter-spacing:.1em}.after\\:content-\\[\\'ON\\'\\]:after{--tw-content:"ON";content:var(--tw-content)}.last\\:border-b-0:last-child{border-bottom-style:var(--tw-border-style);border-bottom-width:0}@media (hover:hover){.hover\\:text-white:hover{color:var(--color-white)}.hover\\:opacity-90:hover{opacity:.9}}.focus-visible\\:ring-1:focus-visible{--tw-ring-shadow:var(--tw-ring-inset,) 0 0 0 calc(1px + var(--tw-ring-offset-width)) var(--tw-ring-color,currentcolor);box-shadow:var(--tw-inset-shadow), var(--tw-inset-ring-shadow), var(--tw-ring-offset-shadow), var(--tw-ring-shadow), var(--tw-shadow)}.focus-visible\\:outline-none:focus-visible{--tw-outline-style:none;outline-style:none}.disabled\\:pointer-events-none:disabled{pointer-events:none}.disabled\\:opacity-40:disabled{opacity:.4}.data-\\[open\\=false\\]\\:hidden[data-open=false]{display:none}.data-\\[pinned\\=true\\]\\:pointer-events-auto[data-pinned=true]{pointer-events:auto}.data-\\[state\\=off\\]\\:line-through[data-state=off]{text-decoration-line:line-through}.data-\\[state\\=off\\]\\:after\\:content-\\[\\'OFF\\'\\][data-state=off]:after{--tw-content:"OFF";content:var(--tw-content)}@media (min-width:40rem){.sm\\:min-w-\\[320px\\]{min-width:320px}}@media (min-width:48rem){.md\\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}.md\\:grid-cols-\\[1\\.4fr_1fr\\]{grid-template-columns:1.4fr 1fr}}.\\[\\&_svg\\]\\:size-\\[14px\\] svg{width:14px;height:14px}.\\[\\&_svg\\]\\:shrink-0 svg{flex-shrink:0}.\\[\\&_tr\\]\\:border-b-0 tr{border-bottom-style:var(--tw-border-style);border-bottom-width:0}.\\[\\&\\>\\*\\+\\*\\]\\:ml-6>*+*{margin-left:calc(var(--spacing) * 6)}.\\[\\&\\>\\*\\+\\*\\]\\:border-l>*+*{border-left-style:var(--tw-border-style);border-left-width:1px}.\\[\\&\\>\\*\\+\\*\\]\\:pl-6>*+*{padding-left:calc(var(--spacing) * 6)}.\\[\\&\\>td\\]\\:border-b>td{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-shadow-color{syntax:"*";inherits:false}@property --tw-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-inset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-shadow-color{syntax:"*";inherits:false}@property --tw-inset-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-ring-color{syntax:"*";inherits:false}@property --tw-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-inset-ring-color{syntax:"*";inherits:false}@property --tw-inset-ring-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-ring-inset{syntax:"*";inherits:false}@property --tw-ring-offset-width{syntax:"<length>";inherits:false;initial-value:0}@property --tw-ring-offset-color{syntax:"*";inherits:false;initial-value:#fff}@property --tw-ring-offset-shadow{syntax:"*";inherits:false;initial-value:0 0 #0000}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}@property --tw-backdrop-blur{syntax:"*";inherits:false}@property --tw-backdrop-brightness{syntax:"*";inherits:false}@property --tw-backdrop-contrast{syntax:"*";inherits:false}@property --tw-backdrop-grayscale{syntax:"*";inherits:false}@property --tw-backdrop-hue-rotate{syntax:"*";inherits:false}@property --tw-backdrop-invert{syntax:"*";inherits:false}@property --tw-backdrop-opacity{syntax:"*";inherits:false}@property --tw-backdrop-saturate{syntax:"*";inherits:false}@property --tw-backdrop-sepia{syntax:"*";inherits:false}@property --tw-duration{syntax:"*";inherits:false}@property --tw-content{syntax:"*";inherits:false;initial-value:""}`,_a=Object.defineProperty,q=E((e,t)=>_a(e,"name",{value:t,configurable:!0}),"d");const Ua=Ha,Ga=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],k=q(e=>e.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;"),"escapeHtml"),Ba=q(e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,"advisoryUri"),Ka={major:"major bump","minor-patch":"safe",unknown:"no fix"},qa=q((e,t)=>{if(t.length===0)return{kind:"unknown",label:"no fix"};const a=G.coerce(e);if(!a)return{kind:"unknown",label:"non-semver"};let r,i;for(const o of t){const n=G.coerce(o);if(!n)continue;const l=G.diff(a,n);l==="major"||l==="premajor"?r||(r=o):(l==="minor"||l==="patch"||l==="preminor"||l==="prepatch")&&!i&&(i=o)}return i?{kind:"minor-patch",label:`safe to ${i}`}:r?{kind:"major",label:`requires major bump to ${r}`}:{kind:"unknown",label:"no usable fix"}},"breakingMarker"),Ja=new Map([["are you at risk","RISK"],["what it is","VECTOR"],["what to do","ACTION"]]),Ya=q(e=>e.split(`
-`).map(t=>{const a=t.trim();if(!a)return"";const r=a.match(/^([^:]{2,40}):\s*(.+)$/u);if(r?.[1]&&r[2]){const i=Ja.get(r[1].trim().toLowerCase())??r[1].trim().toUpperCase();return`<div class="intel-line grid grid-cols-[72px_1fr] items-start gap-4"><span class="intel-key pt-0.5 text-[9px] font-bold uppercase">${k(i)}</span><span class="intel-val text-[13px]">${k(r[2].trim())}</span></div>`}return`<div class="intel-line intel-prose grid items-start gap-4"><span class="intel-val text-[13px]">${k(a)}</span></div>`}).join(""),"renderExplanation"),Xa='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><path d="M21 12.79A9 9 0 1 1 11.21 3 7 7 0 0 0 21 12.79z"/></svg>',Za='<svg class="ticon-svg" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false"><circle cx="12" cy="12" r="4"/><path d="M12 2v2m0 16v2M4.93 4.93l1.41 1.41m11.32 11.32 1.41 1.41M2 12h2m16 0h2M4.93 19.07l1.41-1.41m11.32-11.32 1.41-1.41"/></svg>',_="px-3 py-3 text-left align-middle",U="sticky top-0 z-[2] px-3 py-3 text-left text-[10px] font-medium uppercase whitespace-nowrap select-none",ae="px-3 py-3 text-left text-[10px] font-medium uppercase",Qa=q(e=>{const{acknowledged:t,explanation:a,packageName:r,packageVersion:i,remediation:o,vulnerability:n}=e,{severity:l}=n,g=qa(i,n.fixedVersions),v=n.fixedVersions.length>0?n.fixedVersions.join(", "):"—",h=o?`<code class="copyable" data-cmd="${k(o)}" title="Click to copy">${k(o)}</code>`:'<span class="muted">advisory only</span>',u=`data-severity="${l}" data-package="${k(r)}" data-advisory="${k(n.id)}"`,m=`<tr class="${t?"finding-row ack-row":"finding-row"}" ${u}>
-  <td class="sev-cell whitespace-nowrap ${_}"><span class="badge badge-${l.toLowerCase()} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[9px] font-bold uppercase">${l}</span></td>
-  <td class="${_}"><span class="marker marker-${g.kind} inline-block whitespace-nowrap align-middle text-[9px] font-bold uppercase" title="${k(g.label)}">${Ka[g.kind]}</span></td>
-  <td class="${_}"><code class="pkg font-medium">${k(r)}</code></td>
-  <td class="${_}"><code class="ver whitespace-nowrap">${k(i)}</code></td>
-  <td class="adv-cell whitespace-nowrap ${_}"><a href="${k(Ba(n.id))}" class="text-[12px] no-underline" rel="noreferrer noopener" target="_blank">${k(n.id)}</a>${t?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">acknowledged</span>':""}</td>
-  <td class="summary-cell ${_} min-w-[220px] text-[13px]">${k(n.summary)}</td>
-  <td class="${_}"><code class="fix whitespace-nowrap">${k(v)}</code></td>
-  <td class="${_}">${h}</td>
-</tr>`;return a?`${m}
-<tr class="explain-row" ${u}>
-  <td colspan="8" class="p-0"><details><summary class="flex cursor-pointer items-center gap-3 px-3 py-2 select-none"><span class="intel-tag text-[9px] font-bold uppercase">[ AI INTEL ]</span><span class="intel-hint text-[9px] uppercase">threat analysis · click to expand</span></summary><div class="explain-body grid gap-3 px-3 pt-1 pb-4">${Ya(a)}</div></details></td>
-</tr>`:m},"renderRow"),er=q(e=>{const t=e.now??new Date,a=[...e.findings].sort(ut),r={CRITICAL:0,HIGH:0,LOW:0,MODERATE:0,UNKNOWN:0};for(const u of a)r[u.vulnerability.severity??"UNKNOWN"]+=1;const i=a.map(u=>Qa(u)).join(`
-`),o=a.length===0,n=Ga.filter(u=>r[u]>0).map(u=>`<div class="dseg dseg-sev dseg-${u.toLowerCase()}"><span class="dk text-[10px] font-medium uppercase">${u}</span><span class="dv text-[22px]">${String(r[u])}</span></div>`),l=[`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">scanned</span><span class="dv text-[22px]">${String(e.packagesScanned)}</span></div>`,`<div class="dseg"><span class="dk text-[10px] font-medium uppercase">findings</span><span class="dv text-[22px]"><span id="shown">${String(a.length)}</span>${o?"":`<span class="dvsep mx-1 font-light">/</span>${String(a.length)}`}</span></div>`,n.length>0?'<span class="flex-auto"></span>':"",...n,o?'<div class="dseg dseg-ok"><span class="dot inline-block size-[7px] self-center"></span><span class="dk text-[10px] font-medium uppercase">status</span><span class="dv text-[22px]">CLEAN</span></div>':""].join(""),g=o?"ok":r.CRITICAL>0?"crit":r.HIGH>0?"high":"warn",v=(e.policyDecisions??[]).filter(u=>u.policy!=="vulnerability"),h=[...v].sort((u,m)=>{const x=q(b=>b==="block"?0:b==="warn"?1:2,"rank");return x(u.severity)-x(m.severity)||u.policy.localeCompare(m.policy)||u.packageName.localeCompare(m.packageName)}).map(u=>{const m=u.acceptedRisk?' <span class="ack ml-2 inline-block px-[5px] py-px text-[9px] uppercase">[acknowledged]</span>':"";return`<tr>
-  <td class="px-3 py-3 align-top"><span class="policy-badge policy-${u.severity} inline-flex items-center gap-[7px] rounded-[3px] py-1 pr-2 pl-[7px] text-[10px] font-bold uppercase">${u.severity.toUpperCase()}</span></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${k(u.policy)}</code></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${k(u.packageName)}</code></td>
-  <td class="px-3 py-3 align-top"><code class="uppercase">${k(u.version)}</code></td>
-  <td class="px-3 py-3 align-top">${k(u.reason)}${m}</td>
-</tr>`}).join(`
-`);return`<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>vis audit · ${k(t.toISOString().slice(0,10))}</title>
-<style>${Ua}</style>
-</head>
-<body>
-<main class="mx-auto max-w-[1080px]">
-<header class="masthead flex flex-wrap items-end gap-4 px-0 pt-8 pb-5">
-  <div class="brand leading-none tracking-tight">${(()=>{const[u,...m]=e.tool.name.split("-");return m.length>0?`${k(u??e.tool.name)}<span class="slash mx-[0.12em] font-light">/</span>${k(m.join("-"))}`:k(e.tool.name)})()}<span class="sub mt-3 block text-[11px] font-medium uppercase">dependency security report</span></div>
-  <span class="flex-auto"></span>
-  <span class="chip inline-flex h-7 items-center justify-center rounded-[4px] px-3 text-[11px] font-medium uppercase">v${k(e.tool.version)}</span>
-  <button id="theme" class="tbtn tbtn-theme inline-flex h-7 cursor-pointer items-center justify-center rounded-[4px] bg-transparent px-3 text-[11px] font-medium uppercase" type="button" aria-label="Toggle color theme" title="Toggle color theme"><span class="ticon ticon-moon inline-flex items-center justify-center">${Xa}</span><span class="ticon ticon-sun inline-flex items-center justify-center">${Za}</span></button>
-</header>
-${o?"":`<section class="verdict verdict-${g} flex flex-wrap items-baseline gap-x-6 gap-y-1"><span class="vnum font-light">${String(a.length)}</span><span class="vsub text-[12px] uppercase">${a.length===1?"vulnerability detected":"vulnerabilities detected"}</span></section>`}
-<div class="debugbar flex flex-wrap items-stretch gap-0 pt-7 pb-1">${l}</div>
-<div class="pt-8">
-${o?'<div class="clean px-6 text-center"><div class="big font-light">CLEAN</div><div class="sub mt-6 text-[12px] uppercase">No security issues found.</div></div>':`
-<div class="mb-6 flex flex-wrap items-center gap-0">
-  <label class="field flex flex-[1_1_280px] items-center"><span class="prompt pr-3 text-[10px] uppercase select-none">filter:</span><input id="filter" type="search" class="w-full border-0 bg-transparent py-2.5 pr-0 pl-0 text-[13px] outline-0" placeholder="package or advisory id…" aria-label="Filter findings" /></label>
-  <label class="field sel flex flex-none items-center"><span class="prompt pr-3 text-[10px] uppercase select-none">sev</span><select id="severity" class="w-full cursor-pointer border-0 bg-transparent py-2.5 pr-6 pl-0 text-[13px] outline-0" aria-label="Filter by severity">
-    <option value="">all severities</option>
-    <option value="CRITICAL">critical only</option>
-    <option value="HIGH">high and above</option>
-    <option value="MODERATE">moderate and above</option>
-    <option value="LOW">low and above</option>
-  </select></label>
-  <span class="hint ml-8 text-[10px] uppercase"><span class="kbd rounded-[3px] px-[6px] py-px text-[10px] font-medium uppercase">/</span> to search · <span class="kbd rounded-[3px] px-[6px] py-px text-[10px] font-medium uppercase">esc</span> to clear</span>
-</div>
-<table id="findings" class="w-full text-[13px]">
-<thead>
-<tr>
-  <th class="${U}">Severity</th>
-  <th class="${U}">Upgrade</th>
-  <th class="${U}">Package</th>
-  <th class="${U}">Version</th>
-  <th class="${U}">Advisory</th>
-  <th class="${U}">Summary</th>
-  <th class="${U}">Fix</th>
-  <th class="${U}">Remediation</th>
-</tr>
-</thead>
-<tbody>
-${i}
-</tbody>
-</table>
-<div id="empty" class="empty hidden px-5 py-12 text-center text-[12px] uppercase">No findings match the current filter.</div>`}
-${v.length>0?`
-<h2>Policy Decisions (${v.length})</h2>
-<table id="policies" class="w-full text-[13px]">
-<thead>
-<tr>
-  <th class="${ae}">Severity</th>
-  <th class="${ae}">Policy</th>
-  <th class="${ae}">Package</th>
-  <th class="${ae}">Version</th>
-  <th class="${ae}">Reason</th>
-</tr>
-</thead>
-<tbody>
-${h}
-</tbody>
-</table>`:""}
-<footer class="sig mt-12 flex flex-wrap items-center justify-between gap-x-6 gap-y-3 pt-5 text-[10px] uppercase"><span class="sig-meta"><b>${k(e.tool.name)}</b> ${k(e.tool.version)} · generated ${k(t.toISOString())} · powered by OSV.dev</span><span class="sig-by inline-flex items-center gap-2"><span class="sig-by-label">built by</span><a class="sig-by-link inline-flex items-center" href="https://anolilab.com" rel="noreferrer noopener" target="_blank" aria-label="Anolilab">${la}</a></span></footer>
-</div>
-</main>
-<script>
-(() => {
-  const root = document.documentElement;
-  const themeBtn = document.getElementById('theme');
-  const mql = window.matchMedia('(prefers-color-scheme: dark)');
-
-  // Theme: persisted choice wins, else follow OS. JS only flips data-theme;
-  // CSS handles the colors and the moon/sun icon swap.
-  try {
-    const stored = localStorage.getItem('vis-audit-theme');
-    if (stored === 'light' || stored === 'dark') {
-      root.dataset.theme = stored;
-    }
-  } catch {}
-
-  themeBtn?.addEventListener('click', () => {
-    const isDark = root.dataset.theme ? root.dataset.theme === 'dark' : mql.matches;
-    const next = isDark ? 'light' : 'dark';
-    root.dataset.theme = next;
-    try {
-      localStorage.setItem('vis-audit-theme', next);
-    } catch {}
-  });
-
-  // Filter index: read each row's data-* once, lowercase strings ahead of
-  // time, and pre-rank severity. Subsequent keystrokes only compare cached
-  // primitives — no per-row getAttribute / toLowerCase in the hot loop.
-  const RANK = { CRITICAL: 0, HIGH: 1, MODERATE: 2, LOW: 3, UNKNOWN: 4 };
-  const UNKNOWN = RANK.UNKNOWN;
-  const filterInput = document.getElementById('filter');
-  const sevSelect = document.getElementById('severity');
-  const shown = document.getElementById('shown');
-  const empty = document.getElementById('empty');
-  const index = [];
-  for (const el of document.querySelectorAll('#findings tbody tr')) {
-    const d = el.dataset;
-    index.push({
-      el,
-      pkg: (d.package || '').toLowerCase(),
-      adv: (d.advisory || '').toLowerCase(),
-      rank: RANK[d.severity] ?? UNKNOWN,
-      finding: el.classList.contains('finding-row'),
-      hidden: false,
-    });
-  }
-  let emptyShown = false;
-
-  const apply = () => {
-    const q = (filterInput?.value || '').toLowerCase().trim();
-    const sevValue = sevSelect?.value || '';
-    const cap = sevValue ? (RANK[sevValue] ?? UNKNOWN) : UNKNOWN;
-    let visible = 0;
-    for (const row of index) {
-      const queryHit = !q || row.pkg.includes(q) || row.adv.includes(q);
-      const sevHit = !sevValue || row.rank <= cap;
-      const visibleNow = queryHit && sevHit;
-      if (visibleNow && row.finding) {
-        visible += 1;
-      }
-      // Only touch the DOM when this row's state actually changes — keeps
-      // continued typing from re-laying out every row on every keystroke.
-      if (visibleNow === !row.hidden) {
-        continue;
-      }
-      row.el.style.display = visibleNow ? '' : 'none';
-      row.hidden = !visibleNow;
-    }
-    if (shown) {
-      shown.textContent = String(visible);
-    }
-    const showEmpty = visible === 0;
-    if (empty && showEmpty !== emptyShown) {
-      empty.style.display = showEmpty ? 'block' : 'none';
-      emptyShown = showEmpty;
-    }
-  };
-
-  // Coalesce typing-driven updates to one pass per frame; rapid keystrokes
-  // (paste, IME) collapse into a single filter sweep.
-  let pending = 0;
-  const scheduleApply = () => {
-    if (pending) {
-      return;
-    }
-    pending = requestAnimationFrame(() => {
-      pending = 0;
-      apply();
-    });
-  };
-
-  filterInput?.addEventListener('input', scheduleApply);
-  sevSelect?.addEventListener('change', apply);
-
-  // Keyboard: "/" focuses the filter, Esc clears every active filter.
-  document.addEventListener('keydown', (event) => {
-    if (event.key === '/' && document.activeElement !== filterInput) {
-      event.preventDefault();
-      filterInput?.focus();
-      return;
-    }
-    if (event.key === 'Escape') {
-      if (filterInput) {
-        filterInput.value = '';
-      }
-      if (sevSelect) {
-        sevSelect.value = '';
-      }
-      apply();
-      filterInput?.blur();
-    }
-  });
-
-  // Click-to-copy on remediation command bars (event-delegated).
-  document.addEventListener('click', (event) => {
-    const target = event.target?.closest?.('.copyable');
-    // Guard re-entry during the 1s revert: a second click would otherwise
-    // capture "✓ copied to clipboard" as the original and never restore it.
-    if (!target || target.classList.contains('copied')) {
-      return;
-    }
-    const cmd = target.dataset.cmd ?? target.textContent ?? '';
-    navigator.clipboard?.writeText(cmd).then(() => {
-      const orig = target.textContent;
-      target.classList.add('copied');
-      target.textContent = '✓ copied to clipboard';
-      setTimeout(() => {
-        target.textContent = orig;
-        target.classList.remove('copied');
-      }, 1000);
-    }).catch(() => {});
-  });
-
-  apply();
-})();
-<\/script>
-</body>
-</html>
-`},"emitAuditHtml");var tr=Object.defineProperty,Ae=E((e,t)=>tr(e,"name",{value:t,configurable:!0}),"u");const ar={CRITICAL:"CRITICAL",HIGH:"HIGH",LOW:"LOW",MODERATE:"MEDIUM",UNKNOWN:"NONE"},rr={CRITICAL:9.5,HIGH:8,LOW:2.5,MODERATE:5.5,UNKNOWN:0},De=Ae((e,t)=>`pkg:npm/${e}@${t}`,"productId"),ir=Ae(e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,"advisoryUri"),nt=Ae((e,t)=>{const a=new Map;for(const r of e){const i=t(r),o=a.get(i);o?o.push(r):a.set(i,[r])}return a},"groupBy"),nr=Ae(e=>{const t=e.now??new Date,a=t.toISOString(),r=e.trackingId??`vis-audit-${t.toISOString().slice(0,10)}`,i=[...nt(e.findings,n=>n.packageName).entries()].sort(([n],[l])=>n.localeCompare(l)).map(([n,l])=>({branches:[...new Set(l.map(g=>g.packageVersion))].sort().map(g=>{const v=De(n,g);return{category:"product_version",name:g,product:{name:`${n}@${g}`,product_id:v,product_identification_helper:{purl:v}}}}),category:"product_name",name:n})),o=[...nt(e.findings,n=>n.vulnerability.id).entries()].sort(([n],[l])=>n.localeCompare(l)).map(([n,l])=>{const g=l[0].vulnerability,v=[...new Set(l.map($=>De($.packageName,$.packageVersion)))].sort(),h=n.startsWith("CVE-"),u=[n,...g.aliases??[]],m=h?n:u.find($=>$.startsWith("CVE-")),x=u.filter($=>$!==m).map($=>({system_name:$.startsWith("GHSA-")?"GitHub Security Advisory":"OSV",text:$})),b=typeof g.cvssScore=="number"&&Number.isFinite(g.cvssScore)?g.cvssScore:rr[g.severity]??0,y=l.filter($=>$.acknowledged).map($=>De($.packageName,$.packageVersion));return{...m?{cve:m}:{},...x.length>0?{ids:x}:{},notes:[{category:"description",text:g.summary||`Advisory ${n}`,title:"Advisory description"}],product_status:{known_affected:v},references:[{category:"external",summary:`${n} advisory record`,url:ir(n)}],scores:[{cvss_v3:{baseScore:b,baseSeverity:ar[g.severity]??"NONE",vectorString:"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",version:"3.1"},products:v}],title:g.summary.split(`
-`)[0]?.slice(0,200)||n,...y.length>0?{flags:[{label:"inline_mitigations_already_exist",product_ids:y}]}:{}}});return{document:{category:"csaf_vex",csaf_version:"2.0",distribution:{tlp:{label:"WHITE"}},publisher:{category:"vendor",name:e.tool.name,namespace:e.tool.informationUri},title:`vis audit · ${r}`,tracking:{current_release_date:a,id:r,initial_release_date:a,revision_history:[{date:a,number:"1",summary:"Initial audit emission"}],status:"final",version:"1"}},...i.length>0?{product_tree:{branches:i}}:{},...o.length>0?{vulnerabilities:o}:{}}},"emitCsaf");var or=Object.defineProperty,se=E((e,t)=>or(e,"name",{value:t,configurable:!0}),"c$2");const sr={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"unknown"},cr={CRITICAL:9.5,HIGH:8,LOW:2.5,MODERATE:5.5,UNKNOWN:0},Me=se(e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,"advisoryUri"),We=se(e=>e.startsWith("CVE-")?"NVD":e.startsWith("GHSA-")?"GitHub Advisory Database":"OSV","advisorySourceName"),ot=se((e,t)=>{const a=new Map;for(const r of e){const i=t(r),o=a.get(i);o?o.push(r):a.set(i,[r])}return a},"groupBy"),lr=se((e,t=new Date)=>{const a=ot(e,i=>i.vulnerability.id),r=t.toISOString();return[...a.entries()].sort(([i],[o])=>i.localeCompare(o)).map(([i,o])=>{const n=o[0].vulnerability,l=sr[n.severity]??"unknown",g=typeof n.cvssScore=="number"&&Number.isFinite(n.cvssScore)?n.cvssScore:cr[n.severity]??0,v=[...ot(o,b=>b.packageName).entries()].sort(([b],[y])=>b.localeCompare(y)).map(([b,y])=>{const $=[...new Set(y.map(M=>M.packageVersion))].sort();return{ref:pa(b,$[0]),versions:$.map(M=>({status:"affected",version:M}))}}),h=(n.aliases??[]).filter(b=>b!==i).map(b=>({id:b,source:{name:We(b),url:Me(b)}})),u=o.some(b=>b.acknowledged),m=o.every(b=>b.acknowledged)?{justification:"code_not_reachable",response:["will_not_fix"],state:"not_affected"}:u?{state:"in_triage"}:void 0,x=n.fixedVersions??[];return{"bom-ref":`vuln:${i}`,id:i,source:{name:We(i),url:Me(i)},...h.length>0?{references:h}:{},description:n.summary||`Advisory ${i}`,ratings:[{method:"CVSSv31",score:g,severity:l,source:{name:We(i),url:Me(i)}}],...x.length>0?{recommendation:`Upgrade to one of: ${x.join(", ")}`}:{},affects:v,created:r,published:r,...m?{analysis:m}:{}}})},"buildCycloneDxVulnerabilities"),pr=se(e=>{const t=lr(e.findings,e.now);return{...e.bom,vulnerabilities:t}},"emitCycloneDxVex");var dr=Object.defineProperty,Ue=E((e,t)=>dr(e,"name",{value:t,configurable:!0}),"a");const gr={CRITICAL:"error",HIGH:"error",LOW:"note",MODERATE:"warning",UNKNOWN:"none"},fr={CRITICAL:"9.5",HIGH:"8.0",LOW:"2.5",MODERATE:"5.5",UNKNOWN:"0.0"},ur={CRITICAL:"critical",HIGH:"high",LOW:"low",MODERATE:"medium",UNKNOWN:"none"},mr=Ue(e=>e.startsWith("CVE-")?`https://nvd.nist.gov/vuln/detail/${e}`:e.startsWith("GHSA-")?`https://github.com/advisories/${e}`:`https://osv.dev/vulnerability/${e}`,"advisoryUri"),hr=Ue(e=>typeof e.cvssScore=="number"&&Number.isFinite(e.cvssScore)?e.cvssScore.toFixed(1):fr[e.severity]??"0.0","securitySeverity"),vr=Ue(e=>{const t=new Map,a=[],r=e.artifactUri??(ga(e.workspaceRoot,fa(e.workspaceRoot,"package.json"))||"package.json");for(const n of e.findings){const{acknowledged:l,packageName:g,packageVersion:v,vulnerability:h}=n,u=gr[h.severity]??"none",m=ur[h.severity]??"none";t.has(h.id)||t.set(h.id,{defaultConfiguration:{level:u},fullDescription:{text:h.summary||`Advisory ${h.id}`},helpUri:mr(h.id),id:h.id,name:h.id,properties:{precision:"very-high","security-severity":hr(h),"severity-label":m,tags:["security","vulnerability","supply-chain",`severity:${m}`]},shortDescription:{text:(h.summary.split(`
-`)[0]??h.id).slice(0,200)}}),a.push({level:u,locations:[{logicalLocations:[{kind:"package",name:`${g}@${v}`}],physicalLocation:{artifactLocation:{uri:r}}}],message:{text:`${h.id}: ${g}@${v} — ${h.summary||"no summary"}${h.fixedVersions.length>0?` (fix: ${h.fixedVersions.join(", ")})`:""}`},partialFingerprints:{advisoryId:h.id,package:g,version:v},properties:{...l?{acknowledged:!0}:{},...h.aliases&&h.aliases.length>0?{aliases:h.aliases}:{},...typeof h.cvssScore=="number"?{cvssScore:h.cvssScore}:{},...h.fixedVersions.length>0?{fixedVersions:h.fixedVersions}:{},packageName:g,packageVersion:v,severityLabel:m},ruleId:h.id})}const i={block:"error",info:"note",warn:"warning"},o={block:"high",info:"none",warn:"medium"};for(const n of e.policyDecisions??[]){if(n.policy==="vulnerability")continue;const l=`vis.policy.${n.policy}`,g=i[n.severity],v=o[n.severity];t.has(l)||t.set(l,{defaultConfiguration:{level:g},fullDescription:{text:`vis policy '${n.policy}' (Socket.dev-style supply-chain gate)`},helpUri:`https://visulima.com/packages/vis/commands/audit#policy-${n.policy}`,id:l,name:l,properties:{precision:"high","security-severity":n.severity==="block"?"8.0":n.severity==="warn"?"5.5":"0.0","severity-label":v,tags:["security","supply-chain","policy",`policy:${n.policy}`]},shortDescription:{text:`vis policy: ${n.policy}`}}),a.push({level:g,locations:[{logicalLocations:[{kind:"package",name:`${n.packageName}@${n.version}`}],physicalLocation:{artifactLocation:{uri:r}}}],message:{text:n.reason},partialFingerprints:{package:n.packageName,policy:n.policy,version:n.version},properties:{...n.acceptedRisk?{acknowledged:!0}:{},packageName:n.packageName,packageVersion:n.version,severityLabel:v},ruleId:l})}return{$schema:"https://json.schemastore.org/sarif-2.1.0.json",runs:[{results:a,tool:{driver:{informationUri:e.tool.informationUri,name:e.tool.name,rules:[...t.values()],version:e.tool.version}}}],version:"2.1.0"}},"emitSarif");var wr=Object.defineProperty,X=E((e,t)=>wr(e,"name",{value:t,configurable:!0}),"c$1");const br=["dependencies","devDependencies","optionalDependencies","peerDependencies"],st=X(e=>{try{return{path:e,pkg:ft(e)}}catch{return}},"readPackageJsonSafe"),yr=X(e=>{const t=[],a=st(z(e,"package.json"));a&&t.push({path:a.path,pkg:a.pkg,workspaceName:a.pkg.name});const r=Ht(e);let i;if(r?i=r:a?.pkg.workspaces&&(Array.isArray(a.pkg.workspaces)?i=a.pkg.workspaces:a.pkg.workspaces.packages&&(i=a.pkg.workspaces.packages)),!i)return t;for(const o of _t(e,i)){const n=st(z(e,o,"package.json"));n&&t.push({path:n.path,pkg:n.pkg,workspaceName:n.pkg.name})}return t},"collectWorkspaceManifests"),xr=X((e,t)=>{const a=[];for(const r of e)for(const i of br){const o=r.pkg[i]?.[t];typeof o=="string"&&a.push({field:i,manifest:r,range:o})}return a},"findDeclarations"),vt=X(e=>{const t=yr(e.workspaceRoot),a=[],r=[],i=[],o=new Set;for(const n of e.findings){const l=n.vulnerability.fixedVersions[0];if(!l){i.push({packageName:n.packageName,reason:"no-fixed-version"});continue}const g=xr(t,n.packageName);if(g.length===0){i.push({packageName:n.packageName,reason:"transitive-only"});continue}const v=G.coerce(l),h=v?`^${v.version}`:l,u=v?v.version:l;for(const m of g){const x=`${m.manifest.path}::${m.field}::${n.packageName}::${u}`;if(o.has(x))continue;o.add(x);const b=$r(u,m.range),y={currentRange:m.range,field:m.field,inRange:b,manifestPath:m.manifest.path,packageName:n.packageName,targetSpec:h,targetVersion:u,workspaceName:m.manifest.workspaceName};b||e.allowMajor===!0?a.push(y):r.push(y)}}return{apply:a,skippedMajor:r,unmatched:i}},"buildDirectApplyPlan"),kr=/^(?:workspace|file|link|portal|patch|git\+|git:|github:|npm:|catalog|jsr|http|https):/i,$r=X((e,t)=>{if(kr.test(t))return!0;const a=G.coerce(e)?.version??e;try{return G.satisfies(a,t)}catch{return!0}},"satisfiesRange"),Sr=X(e=>{const t=[];if(e.apply.length>0){t.push(`Apply (${String(e.apply.length)}):`);for(const a of e.apply){const r=a.workspaceName?` [${a.workspaceName}]`:"";t.push(`  + ${a.packageName}: ${a.currentRange} → ${a.targetSpec}${r}`)}}if(e.skippedMajor.length>0){t.push(`Skipped — major bump (${String(e.skippedMajor.length)}, requires --allow-major):`);for(const a of e.skippedMajor){const r=a.workspaceName?` [${a.workspaceName}]`:"";t.push(`  ! ${a.packageName}: ${a.currentRange} → ${a.targetSpec}${r}`)}}if(e.unmatched.length>0){const a=e.unmatched.filter(i=>i.reason==="transitive-only"),r=e.unmatched.filter(i=>i.reason==="no-fixed-version");if(a.length>0){t.push(`Transitive only (${String(a.length)}, requires --fix-transitive):`);for(const i of a)t.push(`  · ${i.packageName}`)}if(r.length>0){t.push(`No fixed version available (${String(r.length)}):`);for(const i of r)t.push(`  · ${i.packageName}`)}}return t.length===0?"No direct-dep fixes to apply.":t.join(`
-`)},"formatDirectApplyPlan");var Ar=Object.defineProperty,L=E((e,t)=>Ar(e,"name",{value:t,configurable:!0}),"i");const Nr={"crates.io":["Cargo.lock"],Go:["go.sum"],Maven:["gradle.lockfile","pom.xml"],PyPI:["uv.lock","poetry.lock","Pipfile.lock"],RubyGems:["Gemfile.lock"]},Cr={cargo:"crates.io","crates.io":"crates.io",go:"Go",maven:"Maven",npm:"npm",pypi:"PyPI",rubygems:"RubyGems"},wt=L(e=>Cr[e.toLowerCase()]??e,"canonicalEcosystem"),Ir=L((e,t)=>{const a=wt(t),r=Nr[a]??[];for(const i of r){const o=z(e,i);if(ct(o))return o}},"findEcosystemLockfile"),Rr=L(e=>{const t=new Set,a=[];for(const r of e){const i=`${r.name}@${r.version}`;t.has(i)||(t.add(i),a.push(r))}return a},"dedupe"),Er=/\[\[package\]\]([\s\S]*?)(?=\[\[|$)/g,jr=/^\s*name\s*=\s*"([^"]+)"\s*$/m,Or=/^\s*version\s*=\s*"([^"]+)"\s*$/m,Pr=L(e=>{const t=[];for(const a of e.matchAll(Er)){const r=a[1]??"",i=jr.exec(r)?.[1],o=Or.exec(r)?.[1];i&&o&&t.push({isDev:!1,name:i,version:o})}return t},"parseTomlPackages"),Lr=L(e=>{let t;try{t=JSON.parse(e)}catch{return[]}if(typeof t!="object"||t===null)return[];const a=[];for(const r of["default","develop"]){const i=t[r];if(!(typeof i!="object"||i===null))for(const[o,n]of Object.entries(i)){if(typeof n!="object"||n===null)continue;const l=n.version;if(typeof l!="string")continue;const g=l.replace(/^==/,"").trim();g.length>0&&a.push({isDev:!1,name:o,version:g})}}return a},"parsePipfileLock"),Dr=/<dependency>([\s\S]*?)<\/dependency>/g,Mr=/<groupId>\s*([^<\s]+)\s*<\/groupId>/,Wr=/<artifactId>\s*([^<\s]+)\s*<\/artifactId>/,Tr=/<version>\s*([^<\s]+)\s*<\/version>/,zr=L(e=>{const t=[];for(const a of e.matchAll(Dr)){const r=a[1]??"",i=Mr.exec(r)?.[1],o=Wr.exec(r)?.[1],n=Tr.exec(r)?.[1];!i||!o||!n||n.startsWith("${")||t.push({isDev:!1,name:`${i}:${o}`,version:n})}return t},"parsePomXml"),Vr=L(e=>{const t=[];for(const a of e.split(/\r?\n/)){const r=a.trim();if(r.length===0||r.startsWith("#"))continue;const i=r.indexOf("="),o=(i===-1?r:r.slice(0,i)).split(":");if(o.length<3)continue;const[n,l,g]=o;!n||!l||!g||t.push({isDev:!1,name:`${n}:${l}`,version:g})}return t},"parseGradleLockfile"),Fr=L(e=>{const t=[];for(const a of e.split(/\r?\n/)){const r=a.trim();if(r.length===0)continue;const i=r.split(/\s+/);if(i.length<3)continue;const[o,n]=i;if(!o||!n?.endsWith("/go.mod"))continue;const l=n.slice(0,-7);l.length!==0&&t.push({isDev:!1,name:o,version:l})}return t},"parseGoSum"),Hr=/^ {4}([^ ()]+) \(([^()]+)\)\s*$/,_r=L(e=>{const t=[];let a=!1,r=!1;for(const i of e.split(/\r?\n/)){if(i.startsWith("GEM")){a=!0,r=!1;continue}if(a&&/^[A-Z]/.test(i)){a=!1,r=!1;continue}if(a&&i.trim()==="specs:"){r=!0;continue}if(r){const o=Hr.exec(i);if(o){const[,n,l]=o;n&&l&&t.push({isDev:!1,name:n,version:l})}}}return t},"parseGemfileLock"),Ur=L((e,t)=>{const a=Ir(e,t);if(!a)return[];let r;try{r=lt(a,"utf8")}catch{return[]}const i=a.split(/[/\\]/).pop()??"";let o;switch(i){case"Cargo.lock":case"poetry.lock":case"uv.lock":{o=Pr(r);break}case"Gemfile.lock":{o=_r(r);break}case"go.sum":{o=Fr(r);break}case"gradle.lockfile":{o=Vr(r);break}case"Pipfile.lock":{o=Lr(r);break}case"pom.xml":{o=zr(r);break}default:return[]}return Rr(o)},"lockedPackagesForEcosystem");var Gr=Object.defineProperty,ne=E((e,t)=>Gr(e,"name",{value:t,configurable:!0}),"c");const Br=["ts","tsx","js","jsx","mjs","cjs","mts","cts"],Kr=[/node_modules/,/\.git/,/\.next/,/\.cache/,/dist/,/build/,/coverage/,/\.turbo/,/\.nx/,/\.parcel-cache/],qr=["dependencies","devDependencies","peerDependencies","optionalDependencies"],Jr=/(?:import|export)\s+(?:[\s\S]*?from\s+)?["']([^"'\n]+)["']/g,Yr=/(?:^|[^.\w$])require\s*\(\s*["']([^"'\n]+)["']\s*\)/g,Xr=/\bimport\s*\(\s*["']([^"'\n]+)["']\s*\)/g,Zr=ne(e=>{if(e.startsWith(".")||e.startsWith("/")||/^[a-z][a-z0-9+.-]*:/i.test(e))return;const t=e.trim();if(t.length!==0){if(t.startsWith("@")){const a=t.split("/");return a.length<2?void 0:`${a[0]}/${a[1]}`}return t.split("/")[0]}},"normalizePackageName"),Qr=ne(e=>{const t=new Set,a=e.replaceAll(/\/\*[\s\S]*?\*\//g,"").replaceAll(/(^|[^:])\/\/.*$/gm,"$1"),r=ne(i=>{i.lastIndex=0;let o;for(;(o=i.exec(a))!==null;){const n=Zr(o[1]);n&&t.add(n)}},"collect");return r(Jr),r(Yr),r(Xr),t},"extractImportedNames"),ei=ne(e=>{const t=new Set;try{const a=ft(e);for(const r of qr){const i=a[r];if(i&&typeof i=="object"&&!Array.isArray(i))for(const o of Object.keys(i))t.add(o)}}catch{}return t},"extractPackageJsonNames"),ti=ne(e=>{const t=e.skip??Kr,a=e.extensions??Br,r=new Set;let i=0;const o=it(e.workspaceRoot,{extensions:a,includeDirs:!1,skip:t});for(const g of o){i+=1;try{const v=lt(g,"utf8");for(const h of Qr(v))r.add(h)}catch{}}const n=it(e.workspaceRoot,{extensions:["json"],includeDirs:!1,skip:t}).filter(g=>g.endsWith("/package.json")||g.endsWith(String.raw`\package.json`)||g.endsWith("package.json"));for(const g of n)for(const v of ei(g))r.add(v);if(e.alwaysAssumeUsed)for(const g of e.alwaysAssumeUsed)r.add(g);const l=new Set;for(const g of e.vulnerablePackages)r.has(g)&&l.add(g);return{filesScanned:i,importedTotal:r,reachable:l}},"computeReachableVulnerablePackages");var ai=Object.defineProperty,D=E((e,t)=>ai(e,"name",{value:t,configurable:!0}),"o");const ri=D(e=>{const t=G.coerce(e)?.major;return t!==void 0&&t>=10},"PNPM_V10_PLUS"),ii=D(e=>Object.fromEntries(Object.entries(e).sort(([t],[a])=>t.localeCompare(a))),"sortByKey"),ni=D((e,t)=>`${JSON.stringify(e,void 0,t)}
-`,"stringifyJson"),bt=D((e,t)=>{if(t.name==="pnpm"&&ri(t.version))return{filePath:z(e,"pnpm-workspace.yaml"),surface:"pnpm-workspace.yaml"};const a=z(e,"package.json");return t.name==="pnpm"?{filePath:a,surface:"package.json#pnpm.overrides"}:t.name==="yarn"?{filePath:a,surface:"package.json#resolutions"}:{filePath:a,surface:"package.json#overrides"}},"resolveOverrideSurface"),oi=D((e,t)=>{const{filePath:a,surface:r}=bt(e,t);if(!Y(a))return{};if(r==="pnpm-workspace.yaml")try{return _e(a)?.overrides??{}}catch{return{}}try{const i=JSON.parse($e(a));return r==="package.json#pnpm.overrides"?(i.pnpm??{}).overrides??{}:r==="package.json#resolutions"?i.resolutions??{}:i.overrides??{}}catch{return{}}},"readExistingOverrides"),si=D((e,t)=>{const a=Object.keys(t).sort();if(a.length===0&&!/^overrides\s*:/m.test(e))return e;const r=`overrides:
-${a.map(i=>`  '${i}': '${t[i]}'`).join(`
-`)}
-`;if(e.length===0)return r;if(/^overrides\s*:/m.test(e)){const i=e.replace(/^overrides\s*:[^\n]*\n(?:[ \t][^\n]*\n)*/m,r);return i.endsWith(`
-`)?i:`${i}
-`}return`${e.endsWith(`
-`)?e:`${e}
-`}
-${r}`},"renderPnpmWorkspaceOverrides"),ci=D((e,t,a,r)=>{const i=Ut(e,t.length>0?t:void 0),o=t.length>0?JSON.parse(t):{};if(a==="package.json#pnpm.overrides"){const n=o.pnpm??{};n.overrides=r,o.pnpm=n}else a==="package.json#resolutions"?o.resolutions=r:o.overrides=r;return ni(o,i)},"renderPackageJsonWithOverrides"),li=D((e,t,a)=>{const{filePath:r,surface:i}=bt(e,a),o=oi(e,a),n=Y(r)?$e(r):"",l=[],g={...o};for(const m of t.entries){const x=o[m.packageName];if(x===m.spec){l.push({...m,previousSpec:x,status:"unchanged"});continue}x===void 0?l.push({...m,status:"added"}):l.push({...m,previousSpec:x,status:"updated"}),g[m.packageName]=m.spec}const v=ii(g),h=l.some(m=>m.status!=="unchanged"),u=i==="pnpm-workspace.yaml"?si(n,v):ci(r,n,i,v);return{changed:h,entries:l,filePath:r,nextContent:u,previousContent:n,surface:i}},"planOverrideWrite"),pi=D(e=>{if(!e.changed)return e;if(e.surface==="pnpm-workspace.yaml"&&e.previousContent.length===0)throw new Error(`${e.filePath} not found. Run \`pnpm init\` or create pnpm-workspace.yaml before applying overrides for pnpm v10+.`);const t=`${e.filePath}.tmp`;try{pt(t,e.nextContent),Pt(t,e.filePath)}catch(a){try{Lt(t)}catch{}throw a}return e},"applyOverridePlan"),di=D(e=>{const t=new Map;for(const a of e){const r=a.vulnerability.fixedVersions[0];if(!r)continue;const i=G.coerce(r),o=i?`^${i.version}`:r;t.set(a.packageName,o)}return{entries:[...t.entries()].sort(([a],[r])=>a.localeCompare(r)).map(([a,r])=>({packageName:a,spec:r}))}},"buildOverridePlanFromFindings");var gi=Object.defineProperty,A=E((e,t)=>gi(e,"name",{value:t,configurable:!0}),"m");const fi={critical:ke,high:gt,low:dt,medium:xe},Fe=new Set(["cargo","crates.io","go","maven","npm","pypi","rubygems"]),ui=A(e=>{const t=(e??"npm").split(",").map(i=>i.trim()).filter(i=>i.length>0),a=t.length>0?t:["npm"],r=a.filter(i=>!Fe.has(i.toLowerCase()));return{all:a,unsupported:r}},"parseEcosystems"),mi={CRITICAL:ke,HIGH:gt,LOW:dt,MODERATE:xe,UNKNOWN:O},hi=A((e,t,a,r)=>{const i=mi[a.severity]??O,o=r?` ${O("[acknowledged]")}`:"",n=a.fixedVersions??[],l=n.length>0?` (fix: ${n.join(", ")})`:"";return`  ${i(a.severity)} ${a.id} — ${e}@${t}${o}
-    ${a.summary}${l}`},"formatVulnLine"),vi=A((e,t)=>{const a=Gt(e),r=`${String(Math.round(e.score.overall*100))}%`,i=t?` ${O("[acknowledged]")}`:"",o=e.alerts.length>0?`, ${String(e.alerts.length)} alert${e.alerts.length===1?"":"s"}`:"";return`  ${r} ${a}@${e.version} (${Bt(e.score.overall)}${o})${i}`},"formatSocketLine"),wi=new Set(["aube","auto","vis"]),re=A(e=>e!==void 0&&wi.has(e),"isAuditBackend"),bi=A((e,t,a)=>{if(e!==void 0&&!re(e))throw new Error(`Invalid --backend value '${e}'. Expected one of: aube, auto, vis.`);const r=process.env.VIS_AUDIT_BACKEND;if(r!==void 0&&r!==""&&!re(r))throw new Error(`Invalid VIS_AUDIT_BACKEND value '${r}'. Expected one of: aube, auto, vis.`);const i=re(r)?r:void 0,o=re(t)?t:void 0,n=(re(e)?e:void 0)??i??o??"auto";return n==="aube"?"aube":n==="vis"?"vis":(a?.install?.backend??process.env.VIS_INSTALLER)==="aube"&&Qt("aube")!==null?"aube":"vis"},"resolveAuditBackend"),yi=A(e=>{if(e!==void 0)switch(e){case"critical":return"critical";case"high":return"high";case"low":return"low";case"medium":return"moderate";default:return e}},"mapSeverityToAube"),xi=A((e,t,a)=>{const r=["audit"],i=yi(t.severity);i!==void 0&&r.push("--audit-level",i),(t.prodOnly===!0||t.prod===!0)&&r.push("--prod"),(t.json===!0||t.format==="json")&&r.push("--json");const o=t.fix===!0;t["fix-transitive"]===!0||t.fixTransitive===!0?r.push("--fix=override"):o&&r.push("--fix=update");const n=[];t.offline===!0&&n.push("--offline (aube has its own offline cache)"),(t.format==="sarif"||t.format==="csaf"||t.format==="cyclonedx"||t.format==="cyclonedx-vex")&&n.push(`--format=${String(t.format)} (only json/text is forwarded to aube)`),n.length>0&&d.warn(`Delegating to 'aube audit'. Skipping vis-only flags: ${n.join(", ")}`);const l=Ot("aube",r,{cwd:e,stdio:"inherit"});if(l.error){const{code:g}=l.error;return g==="ENOENT"?d.error("Backend 'aube' selected but the 'aube' binary was not found on PATH. Install aube or run with --backend vis."):d.error(`Failed to spawn aube: ${l.error.message}`),1}return l.status??1},"runAubeAudit"),ki=A(async(e,t,a,r)=>{if(bi(t.backend,a?.security?.audit?.backend,a)==="aube"){process.exitCode=xi(e,t,a);return}const i=t.severity??"low",o=t.format??"table",n=o==="sarif",l=o==="csaf",g=o==="cyclonedx-vex"||o==="cyclonedx",v=o==="json"||!!t.json,h=t.report,u=a?.security?.audit,m=a?.security?.policies,x=t.offline===void 0?!!u?.offlineByDefault:!!t.offline,b=t.db,y=ui(t.ecosystem),$=!!t.prodOnly,M=t.failOn??m?.vulnerability?.failOn,kt=!!t.showFixes,ce=!!t.showAccepted,Ne=a?.security?.acceptedRisks,Ge=m?.vulnerability?.usage,$t=t.noUsage?!1:t.usage===void 0?!!Ge?.enabled:!!t.usage,I=v||n||l||g,Be=t.explain,Ce=Be!==void 0,Ke=Ce&&!n&&!l&&!g;if(Ce&&x){d.error("`--explain` needs network access and cannot run in offline mode (--offline or security.audit.offlineByDefault)."),process.exitCode=1;return}Ce&&!Ke&&d.warn(`\`--explain\` has no effect with --format=${o}; explanations are only rendered in table, json, and HTML output.`);const P=ia(e),N=za(e,P.name);if(x){const c=b??ma(e);if(!ct(c)){const s=new at(c);I?process.stderr.write(`${s.message}
-`):d.error(s.message),process.exitCode=1;return}}!I&&(N.ignoredAdvisories.length>0||N.excludedPackages.length>0)&&d.info(`Loaded ${String(N.ignoredAdvisories.length)} ignored advisor${N.ignoredAdvisories.length===1?"y":"ies"} and ${String(N.excludedPackages.length)} excluded package${N.excludedPackages.length===1?"":"s"} from ${P.name} config.`),!I&&y.unsupported.length>0&&d.warn(`Ecosystems ${y.unsupported.map(c=>`'${c}'`).join(", ")} are not yet supported by the audit matcher. Supported: npm, pypi, crates.io, cargo, maven, go, rubygems.`);const W=ha(e,P.name,{includeDev:!$});if(W.length===0){d.info(`No ${P.name} lockfile entries found. Run ${P.name} install first.`);return}if(!I){const c=$?"production-only packages":"installed packages";d.info(`Scanning ${String(W.length)} ${c}${x?" (offline)":""}…`)}const le=W.map(c=>({name:c.name,version:c.version})),pe=a?.security?.audit?.advisories?.bloom?.mode??"off";let F=[];if(pe!=="off")try{const c=await ba(e,{softFail:pe==="on"});if(c){if(F=ya(c,le).map(s=>({name:s.name,version:s.version})),!I&&F.length>0){d.warn(`osv-bloom prefilter flagged ${String(F.length)} package${F.length===1?"":"s"} as possibly malicious (MAL-*). Confirming via the advisory query path…`);const s=10;for(const p of F.slice(0,s))d.warn(`  ${ke("[bloom]")} ${p.name}@${p.version}`);F.length>s&&d.warn(`  …and ${String(F.length-s)} more (full list in --format json output)`)}}else I||d.info(O("osv-bloom cache absent — skipping prefilter (run `vis advisories bloom sync` to enable)."))}catch(c){if(c instanceof xa&&pe==="required"){const p=`${c.message} (security.audit.advisories.bloom.mode = "required")`;I?process.stderr.write(`${p}
-`):d.error(p),process.exitCode=1;return}const s=c instanceof Error?c.message:String(c);if(pe==="required"){I?process.stderr.write(`osv-bloom prefilter failed: ${s}
-`):d.error(`osv-bloom prefilter failed: ${s}`),process.exitCode=1;return}I||d.warn(`osv-bloom prefilter failed (continuing): ${s}`)}const de=new Set;x?de.add("socket").add("deps-dev"):(Qe("socket")&&de.add("socket"),Qe("depsDev")&&de.add("deps-dev"));const Ie=Kt(a?.security,{disabled:de,minimumScore:m?.score?.minimum}),Re=Ie.length>0,St=Ie.map(c=>c.displayName).join(" + "),ge=m?.score?.minimum??Zt,H=va(e,P.name),At=[{id:"vulnerabilities",label:x?"Known vulnerabilities (offline OSV cache)":"Known vulnerabilities (OSV)"},...Re?[{id:"security",label:`Supply-chain reports (${St})`}]:[]],T=ua(At,{live:!I}),Nt=Date.now(),K=A(c=>{const s=Date.now()-c;return s>=1e3?`${(s/1e3).toFixed(1)}s`:`${String(Math.round(s))}ms`},"fmtElapsed");let Ee,je;try{const c=Date.now(),s=Date.now();T.start("vulnerabilities"),Re&&T.start("security");const p=x?Promise.resolve().then(()=>rt(le,{dbPath:b,ecosystem:y.all.find(f=>Fe.has(f.toLowerCase()))??"npm",workspaceRoot:e})).then(f=>{let w=0;for(const S of f.values())w+=S.length;return T.finish("vulnerabilities",w>0?"warn":"ok",w>0?`${String(w)} found · ${K(c)}`:`none found · ${K(c)}`),f}).catch(f=>{const w=f instanceof Error?f.message:String(f);if(T.finish("vulnerabilities","error",w),f instanceof at)throw f;return new Map}):qt(le).then(f=>{let w=0;for(const S of f.values())w+=S.length;return T.finish("vulnerabilities",w>0?"warn":"ok",w>0?`${String(w)} found · ${K(c)}`:`none found · ${K(c)}`),f}).catch(f=>{const w=f instanceof Error?f.message:String(f);return T.finish("vulnerabilities","error",w),new Map});[Ee,je]=await Promise.all([p,Re?Jt(Ie,le).then(f=>{let w=0,S=0;for(const ee of f.values())w+=ee.alerts.length,ee.score.overall<ge&&(S+=1);const R=w+S;return T.finish("security",R>0?"warn":"ok",R>0?`${String(w)} alert${w===1?"":"s"}, ${String(S)} low-score · ${K(s)}`:`clean · ${K(s)}`),f}).catch(f=>{const w=f instanceof Error?f.message:String(f);return T.finish("security","error",w),new Map}):Promise.resolve(new Map)])}finally{T.stop()}v||d.info(O(`Scan completed in ${K(Nt)}`));const fe=[];for(const c of W){if(Va(c.name,N))continue;const s=Ee.get(c.name)??[],p=je.get(`${c.name}@${c.version}`),f=et(c.name,c.version,Ne),w=s.length>0,S=p?p.score.overall<ge:!1,R=p?p.alerts.length>0:!1;(w||S||R)&&fe.push({acceptedRisk:f,name:c.name,socketReport:p,version:c.version,vulnerabilities:s})}if(x){const c=y.all.filter(s=>Fe.has(s.toLowerCase())&&s.toLowerCase()!=="npm");for(const s of c){const p=wt(s),f=Ur(e,p);if(f.length!==0){I||d.info(O(`Scanning ${String(f.length)} ${p} packages…`));try{const w=rt(f.map(S=>({name:S.name,version:S.version})),{dbPath:b,ecosystem:p,workspaceRoot:e});for(const S of f){const R=w.get(S.name)??[];R.length!==0&&fe.push({acceptedRisk:et(S.name,S.version,Ne),name:S.name,version:S.version,vulnerabilities:R})}}catch(w){const S=w instanceof Error?w.message:String(w);d.warn(`Failed to scan ${p}: ${S}`)}}}}let C=fe.filter(c=>{const s=c.vulnerabilities.some(w=>be(w.severity,i)),p=c.socketReport?.alerts.some(w=>be(w.severity==="medium"?"MODERATE":w.severity.toUpperCase(),i)),f=c.socketReport&&c.socketReport.score.overall<ge;return s||p||f});const Ct=t.policies,Oe=[],j=await(async()=>{const c=oa().map(R=>`'${R}'`).join(", "),s=sa(Ct,R=>{Oe.push(R);const ee=`Unknown policy '${R}' — ignoring. Available: ${c}.`;I?process.stderr.write(`vis audit: ${ee}
-`):d.warn(ee)});if(s?.size===0)return[];const p=a?.security?.policies?.license,f=!!(p&&((p.allow?.length??0)>0||(p.deny?.length??0)>0)),w=s===void 0||s.has("license"),S=f&&w?wa(e):void 0;return ca({manifestData:S,offline:x,osvFindings:Ee,packageManager:P.name,packages:W,socketReports:je,workspaceRoot:e},"audit",{enabledPolicies:s,visConfig:a??{}})})();if($t){const c=new Set(C.filter(p=>p.vulnerabilities.length>0).map(p=>p.name)),s=ti({alwaysAssumeUsed:Ge?.alwaysAssumeUsed,vulnerablePackages:c,workspaceRoot:e});C=C.filter(p=>p.vulnerabilities.length===0?!0:s.reachable.has(p.name)),I||d.info(O(`Reachability filter: ${String(s.reachable.size)}/${String(c.size)} vulnerable packages reachable (${String(s.filesScanned)} files scanned).`))}const J=A(()=>C.flatMap(c=>c.vulnerabilities.map(s=>({acknowledged:!!c.acceptedRisk||ie(s.id,N,s.aliases),packageName:c.name,packageVersion:c.version,vulnerability:s}))),"findingsForReport"),qe=!!t.fix,Je=!!t.fixTransitive,Ye=!!t.yes,It=!!t.allowMajor;if(qe||Je){const c=J().filter(s=>!s.acknowledged);if(qe){const s=await Si({actionableFindings:c,allowMajor:It,pm:P,visConfig:a,workspaceRoot:e,yes:Ye});if(s!==void 0){process.exitCode=s;return}}if(Je){const s=await Ai({actionableFindings:c,pm:P,visConfig:a,workspaceRoot:e,yes:Ye});if(s!==void 0){process.exitCode=s;return}}}const ue=new Map;if(Ke){const c=Ea(J().filter(p=>!p.acknowledged).map(p=>({packageName:p.packageName,packageVersion:p.packageVersion,vulnerability:p.vulnerability})).sort(ut),Be),s=await Wa(c,a?.ai,{info:A(p=>{d.info(p)},"info"),warn:A(p=>{d.warn(p)},"warn")});for(const[p,f]of s)ue.set(p,f)}if(n){const c=vr({findings:J(),policyDecisions:j,tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:e});process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),Te(C,N,t.exitCode,M,j);return}if(l){const c=nr({findings:J(),tool:{informationUri:"https://github.com/visulima/visulima",name:"vis-audit",version:"alpha"},workspaceRoot:e});process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),Te(C,N,t.exitCode,M,j);return}if(g){const{packageJsons:c,workspace:s}=Yt(e,a),p=Xt(e,s,c),f=da({includeDev:!$,projectGraph:p,workspace:s,workspaceRoot:e}),w=pr({bom:f,findings:J()});process.stdout.write(`${JSON.stringify(w,void 0,2)}
-`),Te(C,N,t.exitCode,M,j);return}if(h){const c=er({findings:J().map(p=>{const f=ue.get(ye({packageName:p.packageName,packageVersion:p.packageVersion,vulnerability:p.vulnerability}));return f?{...p,explanation:f}:p}),packagesScanned:W.length,policyDecisions:j,tool:{name:"vis-audit",version:"alpha"},workspaceRoot:e}),s=Mt(e,h);pt(s,c,"utf8"),I||d.success(`HTML report written to ${s}`)}if(v){const c={bloomHits:F,duplicates:H.map(s=>({name:s.name,versionCount:s.versions.length,versions:s.versions})),packages:W.length,policies:j.map(s=>({acceptedRisk:s.acceptedRisk??null,data:s.data??null,packageName:s.packageName,policy:s.policy,reason:s.reason,severity:s.severity,version:s.version})),results:C.map(s=>({acceptedRisk:s.acceptedRisk??null,name:s.name,socketAlerts:s.socketReport?.alerts??[],socketScore:s.socketReport?.score.overall??null,version:s.version,vulnerabilities:s.vulnerabilities.map(p=>{const f=ue.get(ye({packageName:s.name,packageVersion:s.version,vulnerability:p}));return f?{...p,explanation:f}:p})})),summary:{accepted:C.filter(s=>s.acceptedRisk).length,duplicatePackages:H.length,issues:C.filter(s=>!s.acceptedRisk).length,policyBlocks:j.filter(s=>s.severity==="block"&&!s.acceptedRisk).length,policyDecisions:j.length,total:C.length},warnings:Oe.length>0?Oe.map(s=>({kind:"unknown-policy",token:s})):[]};process.stdout.write(`${JSON.stringify(c,void 0,2)}
-`),t.exitCode&&(c.summary.issues>0||c.summary.policyBlocks>0)&&(process.exitCode=1),He(C,N,M,j);return}if(C.length===0){d.success(`No security issues found across ${String(W.length)} packages.`);return}const Z={CRITICAL:[],HIGH:[],LOW:[],MODERATE:[]};for(const c of C)for(const s of c.vulnerabilities)if(be(s.severity,i)){const p=s.severity==="UNKNOWN"?"LOW":s.severity;Z[p]?.push({entry:c,vuln:s})}let me=0,Pe=0;for(const c of["CRITICAL","HIGH","MODERATE","LOW"]){const s=Z[c];if(!(!s||s.length===0)){d.info(`
-── ${c} (${String(s.length)}) ──`);for(const{entry:p,vuln:f}of s){const w=!!p.acceptedRisk||ie(f.id,N,f.aliases);if(w&&(Pe++,!ce))continue;me++,d.info(hi(p.name,p.version,f,w)),kt&&(f.fixedVersions??[]).length>0&&d.notice(`    Fix: update to ${f.fixedVersions.at(-1)}`);const S=ue.get(ye({packageName:p.name,packageVersion:p.version,vulnerability:f}));if(S)for(const R of S.split(`
-`))d.info(`    ${R}`)}}}const Q=C.filter(c=>c.socketReport&&(c.socketReport.score.overall<ge||c.socketReport.alerts.length>0));if(Q.length>0){d.info(`
-── Socket.dev Supply Chain (${String(Q.length)}) ──`);for(const c of Q){if(!c.socketReport)continue;const s=!!c.acceptedRisk;if(!(s&&!ce)){d.info(vi(c.socketReport,s));for(const p of c.socketReport.alerts){const f=fi[p.severity]??O;d.info(`    ${f(`[${p.severity.toUpperCase()}]`)} ${p.type} — ${p.category}`)}}}}if(H.length>0){d.info(`
-── Duplicate Dependencies (${String(H.length)}) ──`);for(const c of H){const s=c.versions.join(", ");d.info(`  ${c.name} — ${String(c.versions.length)} versions: ${xe(s)}`)}}const Xe=new Set;for(const c of["CRITICAL","HIGH","MODERATE","LOW"]){const s=Z[c];if(s)for(const{vuln:p}of s)Xe.add(p.id)}const Le=j.filter(c=>{if(c.policy!=="vulnerability")return!0;const s=typeof c.data?.advisoryId=="string"?c.data.advisoryId:void 0;return c.severity==="block"&&s!==void 0&&!Xe.has(s)});if(Le.length>0){d.info(`
-── Policy Decisions (${String(Le.length)}) ──`);for(const c of Le){const s=!!c.acceptedRisk;if(s&&!ce)continue;const p=c.severity==="block"?ke:c.severity==="warn"?xe:O,f=s?` ${O("[acknowledged]")}`:"";d.info(`  ${p(`[${c.severity}]`)} ${c.policy} — ${c.reason}${f}`)}}const he=A(c=>!!c.acceptedRisk||c.vulnerabilities.length>0&&c.vulnerabilities.every(s=>ie(s.id,N,s.aliases)),"isEntryExcluded"),Ze=C.filter(c=>!he(c)).length;if(d.info(""),d.info("─ Audit Summary"),d.info(`  ${String(W.length)} packages scanned`),N.ignoredAdvisories.length>0&&d.info(`  ${String(N.ignoredAdvisories.length)} ${P.name} audit exclusion${N.ignoredAdvisories.length===1?"":"s"} applied`),me>0){const c=Z.CRITICAL?.filter(p=>!he(p.entry)).length??0,s=Z.HIGH?.filter(p=>!he(p.entry)).length??0;d.error(`  ${String(me)} vulnerabilit${me===1?"y":"ies"} found`),c>0&&d.error(`    ${String(c)} critical`),s>0&&d.warn(`    ${String(s)} high`)}else d.success("  No vulnerabilities found");if(Q.length>0){const c=Q.filter(s=>!he(s)).length;d.warn(`  ${String(c)} package${c===1?"":"s"} with Socket.dev supply chain issues`)}H.length>0&&(d.warn(`  ${String(H.length)} package${H.length===1?"":"s"} with duplicate versions`),d.notice("  Run 'vis dedupe' or your package manager's dedupe command to reduce duplicates."));const ve=j.filter(c=>c.severity==="block"&&!c.acceptedRisk);if(ve.length>0&&d.error(`  ${String(ve.length)} policy block${ve.length===1?"":"s"}`),Pe>0&&(d.info(`  ${String(Pe)} acknowledged (accepted risks)`),ce||d.notice("  Use --show-accepted to see acknowledged issues.")),Ze===0&&d.success(`
-  All issues are acknowledged. No action required.`),t.sync&&Ne){const c=new Set;for(const p of fe)if(p.acceptedRisk){for(const f of p.vulnerabilities)if((f.id.startsWith("CVE-")||f.id.startsWith("GHSA-"))&&c.add(f.id),f.aliases)for(const w of f.aliases)(w.startsWith("CVE-")||w.startsWith("GHSA-"))&&c.add(w)}const s=[...c];if(s.length>0){d.info("");const p=Fa(P.name,e,s);for(const f of p)d.success(`  ${f}`)}else d.info(`
-No advisory IDs to sync to native PM config.`)}t.exitCode&&(Ze>0||ve.length>0)&&(process.exitCode=1),He(C,N,M,j)},"executeAudit"),yt=A(e=>!e||e.length===0?!1:e.some(t=>t.severity==="block"&&!t.acceptedRisk),"hasBlockingPolicy"),He=A((e,t,a,r)=>{yt(r)&&(process.exitCode=1),a&&e.some(i=>i.vulnerabilities.some(o=>i.acceptedRisk||ie(o.id,t,o.aliases)?!1:be(o.severity,a)))&&(process.exitCode=1)},"applyFailOnGate"),Te=A((e,t,a,r,i)=>{a&&(e.filter(o=>!o.acceptedRisk&&o.vulnerabilities.some(n=>!ie(n.id,t,n.aliases))).length>0||yt(i))&&(process.exitCode=1),He(e,t,r,i)},"applyExitGate"),xt=A(async(e,t)=>{if(!process.stdin.isTTY)return t;const a=Dt({input:process.stdin,output:process.stderr});try{const r=t?"[Y/n]":"[y/N]",i=await new Promise(o=>{a.question(`${e} ${O(r)} `,n=>{o(n.trim())})});return i.length===0?t:i.toLowerCase().startsWith("y")}finally{a.close()}},"promptYesNo"),$i=A(e=>e==="pnpm"||e==="npm"||e==="yarn"||e==="bun","isTransitiveOnlyPm"),Si=A(async e=>{const t=vt({allowMajor:e.allowMajor,findings:e.actionableFindings,workspaceRoot:e.workspaceRoot});if(d.info(""),d.info("─ Apply (direct deps)"),d.info(Sr(t)),t.apply.length===0){d.info("Nothing to apply for direct deps.");return}if(ze&&!e.yes)return d.error("Refusing to run --fix in CI without --yes. Re-run with --yes once the plan above looks right."),1;if(!e.yes&&!await xt("Apply these direct-dep upgrades?",!1))return d.info("Aborted — no changes made."),0;const a=new Map;for(const r of t.apply){const i=r.workspaceName??"",o=a.get(i);o?o.push(r):a.set(i,[r])}for(const[r,i]of a){const o=i.map(g=>`${g.packageName}@${g.targetSpec}`),n=r.length>0?[r]:[];d.info(`Running ${e.pm.name} add ${o.join(" ")}${r.length>0?` --filter ${r}`:""}`);const l=na(e.pm,{exact:!1,filter:n,global:!1,optional:!1,packages:o,peer:!1,saveDev:!1,workspace:!1,workspaceRoot:!1},e.workspaceRoot,console);if(l!==0)return d.error(`${e.pm.name} add exited ${String(l)} — aborting before rescan.`),l}return d.success("Direct-dep upgrades applied. Re-run `vis audit` to confirm the fixes landed."),0},"runApplyDirect"),Ai=A(async e=>{if(!$i(e.pm.name))return d.error(`--fix-transitive is not supported for package manager "${e.pm.name}". Use pnpm, npm, yarn, or bun.`),1;const t=!!e.visConfig?.security?.audit?.apply?.transitive?.enabled;if(ze&&(!e.yes||!t))return d.error("Refusing to run --fix-transitive in CI without both --yes and security.audit.apply.transitive.enabled = true. Overrides have a higher blast radius than direct bumps — gate on config."),1;const a=new Set(vt({findings:e.actionableFindings,workspaceRoot:e.workspaceRoot}).apply.map(n=>n.packageName)),r=e.actionableFindings.filter(n=>!a.has(n.packageName)),i=di(r);if(i.entries.length===0){d.info(""),d.info("─ Apply transitive (overrides)"),d.info("Nothing to override — all vulnerable packages are direct deps or have no fixed version.");return}const o=li(e.workspaceRoot,i,{name:e.pm.name,version:e.pm.version});d.info(""),d.info("─ Apply transitive (overrides)"),d.info(`Target: ${o.filePath} (${o.surface})`);for(const n of o.entries){const l=n.status==="added"?"+":n.status==="updated"?"~":"·",g=n.previousSpec?` (was ${n.previousSpec})`:"";d.info(`  ${l} ${n.packageName}: ${n.spec}${g}`)}if(!o.changed){d.info("No changes — overrides already match the plan.");return}if(!e.yes){if(ze)return 1;if(!await xt("Write these overrides?",!1))return d.info("Aborted — no changes made."),0}try{pi(o)}catch(n){const l=n instanceof Error?n.message:String(n);return d.error(`Failed to write overrides: ${l}`),1}return d.success(`Wrote ${String(o.entries.filter(n=>n.status!=="unchanged").length)} override${o.entries.length===1?"":"s"}. Run \`${e.pm.name} install\` then re-run \`vis audit\` to confirm the fixes landed.`),0},"runApplyTransitive"),_i=A(async({logger:e,options:t,visConfig:a,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");await ki(r,t,a,e)},"execute");export{_i as default,yi as mapSeverityToAube,bi as resolveAuditBackend};
+var he=Object.defineProperty;var D=(e,s)=>he(e,"name",{value:s,configurable:!0});import{createRequire as ke}from"node:module";import{I as w,j as v,E as u,q as R,e as x,T as b}from"../packem_shared/index.server-B7ETiT4C.js";import{M as W,i as I,$ as Pe,C as G,z as P}from"../packem_shared/readFileSync-CGmzMUF2-D6rUjGDn.js";import{n as j,B as ve,w as E}from"./config.js";import{o as re}from"../packem_shared/index-DH-5hsrC.js";import{h as pe,J as te,X as C,aw as we,av as L,ac as K,ax as De,a as oe,aG as se,a5 as be,R as xe,aH as Ne,aI as Je,aJ as Te,aK as Se}from"./bin.js";const ye=ke(import.meta.url),z=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,$e=D(e=>{if(typeof z<"u"&&z.versions&&z.versions.node){const[s,o]=z.versions.node.split(".").map(Number);if(s>22||s===22&&o>=3||s===20&&o>=16)return z.getBuiltinModule(e)}return ye(e)},"__cjs_getBuiltinModule"),{readFileSync:ie,writeFileSync:ee}=$e("node:fs");var Re=Object.defineProperty,O=D((e,s)=>Re(e,"name",{value:s,configurable:!0}),"r$3");const We=O(e=>/[*?[\]{}!]/.test(e),"isGlob"),je=O(e=>typeof e=="string"?e:e.reason,"ruleReason"),Me=O(e=>typeof e=="string"?void 0:e.replacement,"ruleReplacement"),ae=O((e,s)=>e.some(o=>re(o,s)),"matchesAnyGlob"),ne=O((e,s)=>{if(typeof e=="string")return!0;const o=Array.isArray(e.packages)&&e.packages.length>0,t=Array.isArray(e.paths)&&e.paths.length>0;return!!(!o&&!t||o&&s.packageName!==void 0&&ae(e.packages,s.packageName)||t&&ae(e.paths,s.packageDir))},"ruleAppliesToInstance"),Fe=O((e,s)=>{const o=s[e.depName];if(o!==void 0&&ne(o,e))return{pattern:e.depName,rule:o};for(const[t,r]of Object.entries(s))if(We(t)&&re(t,e.depName)&&ne(r,e))return{pattern:t,rule:r}},"findMatchingRule"),Ie=O((e,s)=>{if(Object.keys(s).length===0)return[];const o=[];for(const t of e){if(t.isInternal)continue;const r=Fe(t,s);r&&o.push({depName:t.depName,depType:t.depType,matchedPattern:r.pattern,packageDir:t.packageDir,packageJsonPath:t.packageJsonPath,packageName:t.packageName,reason:je(r.rule),replacement:Me(r.rule),specifier:t.specifier})}return o},"lintBannedDeps");var Ee=Object.defineProperty,_=D((e,s)=>Ee(e,"name",{value:s,configurable:!0}),"m");const Ce=new Set(["dependencies","devDependencies","peerDependencies"]),Ve=_(e=>e.startsWith("catalog:"),"isCatalogReference"),Ae=_(e=>e.startsWith("workspace:"),"isWorkspaceReference"),Oe=_((e,s)=>{if(!e)return!1;for(const o of e.values())if(o.has(s))return!0;return!1},"isPinnedInAnyCatalog"),He=_((e,s={})=>{const o=s.min??3,t=new Set(s.ignoreDeps),r=e.filter(i=>i.isInternal||!Ce.has(i.depType)||Ae(i.specifier)||s.dep!==void 0&&i.depName!==s.dep?!1:!t.has(i.depName)),n=new Map;for(const i of r){const p=n.get(i.depName);p?p.push(i):n.set(i.depName,[i])}const a=[];for(const[i,p]of n){if(Oe(s.catalogs,i)||p.some(m=>Ve(m.specifier)))continue;const c=new Map;for(const m of p){let d=c.get(m.specifier);d||(d=new Set,c.set(m.specifier,d)),d.add(m.packageJsonPath)}const f=[...c.entries()].sort((m,d)=>m[1].size!==d[1].size?d[1].size-m[1].size:m[0].localeCompare(d[0]))[0];!f||f[1].size<o||a.push({catalogName:"default",depName:i,instanceCount:f[1].size,specifier:f[0]})}return a.sort((i,p)=>i.depName.localeCompare(p.depName))},"proposeCatalogAdditions"),_e=_((e,s)=>{if(s.length===0)return;const o=W(e,"pnpm-workspace.yaml"),t=I(o)?ie(o,"utf8"):"",r=t.includes(`\r
+`)?`\r
+`:`
+`,n=s.filter(d=>d.catalogName==="default").sort((d,g)=>d.depName.localeCompare(g.depName));if(n.length===0)return;const a=t.length>0?t.split(r):[],i=a.findIndex(d=>/^catalog\s*:\s*$/.test(d));if(i===-1){const d=["catalog:"];for(const $ of n)d.push(`  ${$.depName}: "${$.specifier}"`);let g=0;for(;g<a.length&&(a[g]??"").trim().length===0;)g+=1;const h=[...a.slice(0,g),...d,"",...a.slice(g)].join(r);return ee(o,h.endsWith(r)?h:`${h}${r}`),o}let p=a.length;const c=new Set;for(let d=i+1;d<a.length;d+=1){const g=a[d]??"",h=g.trimStart();if(g.length===0)continue;if(g.length-h.length===0&&h.length>0&&!h.startsWith("#")){p=d;break}const $=/^([\w./@-]+)\s*:/.exec(h);$?.[1]&&c.add($[1])}const f=[];for(const d of n)c.has(d.depName)||f.push(`  ${d.depName}: "${d.specifier}"`);if(f.length===0)return;const m=[...a.slice(0,p),...f,...a.slice(p)].join(r);return ee(o,m.endsWith(r)?m:`${m}${r}`),o},"applyCatalogProposals"),ze=_((e,s)=>{if(s.length===0)return"";const o=W(e,"pnpm-workspace.yaml"),t=I(o)?ie(o,"utf8"):"",r=[...s].sort((i,p)=>i.depName.localeCompare(p.depName)),n=["--- pnpm-workspace.yaml","+++ pnpm-workspace.yaml"],a=t.includes(`\r
+`)?`\r
+`:`
+`;if((t.length>0?t.split(a):[]).findIndex(i=>/^catalog\s*:\s*$/.test(i))===-1){n.push("@@ +1 @@","+catalog:");for(const i of r)n.push(`+  ${i.depName}: "${i.specifier}"`)}else{n.push("@@ catalog: @@");for(const i of r)n.push(`+  ${i.depName}: "${i.specifier}"`)}return n.join(a)},"renderCatalogProposalsDiff");var Be=Object.defineProperty,ce=D((e,s)=>Be(e,"name",{value:s,configurable:!0}),"l");const Le=ce(e=>{const s=[],o=pe(e);if(o){const r=W(e,"pnpm-workspace.yaml");for(const n of o)n.startsWith("!")||te(e,[n]).length===0&&s.push({pattern:n,source:"pnpm-workspace.yaml",sourcePath:r})}const t=W(e,"package.json");if(I(t)){const r=j(t).workspaces,n=Array.isArray(r)?r:r?.packages;if(n)for(const a of n)typeof a!="string"||a.startsWith("!")||te(e,[a]).length===0&&s.push({pattern:a,source:"package.json",sourcePath:t})}return s},"lintDeadWorkspacePatterns"),qe=ce((e,s={})=>{const{useEditorconfig:o}=s,t=new Map;for(const n of e){const a=t.get(n.sourcePath);a?a.push(n):t.set(n.sourcePath,[n])}const r=[];for(const[n,a]of t){const i=new Set(a.map(f=>f.pattern));if(n.endsWith(".yaml")||n.endsWith(".yml")){const f=Pe(n).split(`
+`).filter(m=>{const d=m.trim();if(!d.startsWith("- "))return!0;const g=d.slice(2).replaceAll(/^['"]|['"]$/g,"");return!i.has(g)}).join(`
+`);ve(n,f,{overwrite:!0}),r.push(n);continue}const p=j(n),c=p.workspaces;Array.isArray(c)?p.workspaces=c.filter(f=>typeof f!="string"||!i.has(f)):c&&Array.isArray(c.packages)&&(c.packages=c.packages.filter(f=>typeof f!="string"||!i.has(f))),E(n,p,{indent:C(n,{useEditorconfig:o}),overwrite:!0}),r.push(n)}return r},"applyDeadWorkspacePatternFixes");var Ue=Object.defineProperty,fe=D((e,s)=>Ue(e,"name",{value:s,configurable:!0}),"f$2");const Ge=["dependencies","devDependencies","peerDependencies","optionalDependencies"],Ke=fe((e,s={})=>{const o=new Set(s.ignoreBlocks),t=we(e),r=[];for(const n of t){const a=W(e,n,"package.json"),i=L(a);if(!i)continue;const p=typeof i.name=="string"?i.name:void 0;for(const c of Ge){if(o.has(c))continue;const f=i[c];typeof f=="object"&&f!==null&&!Array.isArray(f)&&Object.keys(f).length===0&&r.push({depType:c,packageDir:n,packageJsonPath:a,packageName:p})}}return r},"lintEmptyDeps"),Xe=fe((e,s={})=>{const{useEditorconfig:o}=s,t=new Map;for(const n of e){const a=t.get(n.packageJsonPath);a?a.push(n):t.set(n.packageJsonPath,[n])}const r=[];for(const[n,a]of t){const i=j(n);for(const p of a){const c=i[p.depType];typeof c=="object"&&c!==null&&!Array.isArray(c)&&Object.keys(c).length===0&&Reflect.deleteProperty(i,p.depType)}E(n,i,{indent:C(n,{useEditorconfig:o}),overwrite:!0}),r.push(n)}return r},"applyEmptyDepsFixes");var Qe=Object.defineProperty,le=D((e,s)=>Qe(e,"name",{value:s,configurable:!0}),"o");const Ye=/\/+$/,X=/node_modules/,Q=/\.git/,Ze=/[$()+.?[\\\]^{|}]/g,et=/\/\*\*$|\/\*\/\*$/,tt=le((e,s)=>{const o=s.replace(Ye,"");if(o.startsWith("!"))return[];const t=[];if(o.endsWith("/*")){const n=o.slice(0,-2),a=G(e,n);if(!I(a))return[];for(const i of K(a,{includeFiles:!1,includeSymlinks:!1,maxDepth:1,skip:[X,Q]}))i.path===a||i.name.startsWith(".")||t.push(W(n,i.name));return t}if(o.endsWith("/**")||o.endsWith("/*/*")){const n=o.replace(et,""),a=G(e,n);if(!I(a))return[];for(const i of K(a,{includeFiles:!1,includeSymlinks:!1,skip:[X,Q]})){if(i.path===a)continue;const p=i.path.slice(a.length+1);t.push(`${n}/${p}`)}return t}if(!o.includes("/")&&o.includes("*")){const n=o.replaceAll(Ze,String.raw`\$&`).replaceAll("*",".*"),a=new RegExp(`^${n}$`);for(const i of K(e,{includeFiles:!1,includeSymlinks:!1,maxDepth:1,skip:[X,Q]}))i.path!==e&&a.test(i.name)&&t.push(i.name);return t}const r=G(e,o);return I(r)&&t.push(o),t},"collectPatternMatches"),ot=le(e=>{const s=pe(e)??De(e)??[],o=new Set,t=[];for(const r of s)for(const n of tt(e,r))n==="."||o.has(n)||(o.add(n),I(W(e,n,"package.json"))||t.push({packageDir:n}));return t},"lintMissingPackageJson");var st=Object.defineProperty,at=D((e,s)=>st(e,"name",{value:s,configurable:!0}),"r$2");const nt=["dependencies","devDependencies","optionalDependencies","peerDependencies"],rt=at((e,s={})=>{const o=new Set(s.depTypes??nt),t=new Set(s.ignoreDeps),r=new Map;for(const a of e)a.packageDir!=="."||!o.has(a.depType)||r.set(a.depName,{depType:a.depType,specifier:a.specifier});if(r.size===0)return[];const n=[];for(const a of e){if(a.packageDir==="."||!o.has(a.depType)||t.has(a.depName))continue;const i=r.get(a.depName);i&&n.push({childSpecifier:a.specifier,depName:a.depName,depType:a.depType,packageDir:a.packageDir,packageJsonPath:a.packageJsonPath,packageName:a.packageName,rootDepType:i.depType,rootSpecifier:i.specifier})}return n},"lintRedefineRoot");var it=Object.defineProperty,ge=D((e,s)=>it(e,"name",{value:s,configurable:!0}),"a$1");const pt=ge((e,s)=>{if(!s)return[];const o=W(e,"package.json"),t=L(o);if(!t)return[];if(t.private!==!0)return[];const r=t.dependencies;if(typeof r!="object"||r===null||Array.isArray(r))return[];const n=Object.keys(r);return n.length===0?[]:[{depNames:n,packageJsonPath:o}]},"lintRootDeps"),ct=ge((e,s={})=>{const{useEditorconfig:o}=s,t=[];for(const r of e){const n=j(r.packageJsonPath),a=n.dependencies;if(typeof a!="object"||a===null)continue;const i=a;n.devDependencies??={};const p=n.devDependencies;for(const c of r.depNames){const f=i[c];typeof f=="string"&&(c in p||(p[c]=f),Reflect.deleteProperty(i,c))}Object.keys(i).length===0&&Reflect.deleteProperty(n,"dependencies"),E(r.packageJsonPath,n,{indent:C(r.packageJsonPath,{useEditorconfig:o}),overwrite:!0}),t.push(r.packageJsonPath)}return t},"applyRootDepsFixes");var ft=Object.defineProperty,de=D((e,s)=>ft(e,"name",{value:s,configurable:!0}),"r$1");const lt=/^[a-z][\w-]*@\S+$/i,gt=de((e,s,o={})=>{if(!s)return[];const t=W(e,"package.json"),r=L(t);if(!r)return[];const n=r.packageManager;return typeof n=="string"&&lt.test(n)?[]:[{packageJsonPath:t,suggested:o.suggested}]},"lintRootPackageManager"),dt=de((e,s={})=>{const{useEditorconfig:o}=s,t=[];for(const r of e){if(!r.suggested)continue;const n=j(r.packageJsonPath);n.packageManager=r.suggested,E(r.packageJsonPath,n,{indent:C(r.packageJsonPath,{useEditorconfig:o}),overwrite:!0}),t.push(r.packageJsonPath)}return t},"applyRootPackageManagerFixes");var ut=Object.defineProperty,ue=D((e,s)=>ut(e,"name",{value:s,configurable:!0}),"a");const mt=ue((e,s)=>{if(!s)return[];const o=W(e,"package.json"),t=L(o);return t?t.private===!0?[]:[{packageJsonPath:o,rawValue:t.private}]:[]},"lintRootPrivate"),ht=ue((e,s={})=>{const{useEditorconfig:o}=s,t=[];for(const r of e){const n=j(r.packageJsonPath);let a=n;if("private"in n)n.private=!0;else{const{name:i,version:p,...c}=n,f={};i!==void 0&&(f.name=i),p!==void 0&&(f.version=p),f.private=!0;for(const[m,d]of Object.entries(c))f[m]=d;a=f}E(r.packageJsonPath,a,{indent:C(r.packageJsonPath,{useEditorconfig:o}),overwrite:!0}),t.push(r.packageJsonPath)}return t},"applyRootPrivateFixes");var kt=Object.defineProperty,Z=D((e,s)=>kt(e,"name",{value:s,configurable:!0}),"p$1");const yt=[{id:"react",label:"React",members:["react","react-dom","react-test-renderer"]},{id:"next",label:"Next.js",members:["next","@next/font","@next/bundle-analyzer","@next/mdx","@next/third-parties","@next/eslint-plugin-next","eslint-config-next"]},{id:"babel",label:"Babel",prefixes:["@babel/"]},{id:"storybook",label:"Storybook",members:["storybook","sb"],prefixes:["@storybook/"]},{id:"vitest",label:"Vitest",members:["vitest"],prefixes:["@vitest/"]},{id:"playwright",label:"Playwright",members:["playwright","@playwright/test"]},{id:"trpc",label:"tRPC",prefixes:["@trpc/"]},{id:"prisma",label:"Prisma",members:["prisma"],prefixes:["@prisma/"]},{id:"turborepo",label:"Turborepo",members:["turbo","turbo-ignore","@turbo/gen","eslint-config-turbo","eslint-plugin-turbo"]},{id:"typescript-eslint",label:"typescript-eslint",members:["typescript-eslint"],prefixes:["@typescript-eslint/"]},{id:"eslint-stylistic",label:"ESLint Stylistic",prefixes:["@stylistic/"]},{id:"lexical",label:"Lexical",members:["lexical"],prefixes:["@lexical/"]},{id:"nx",label:"Nx",prefixes:["@nx/","@nrwl/"]}],$t=new Set(["dependencies","devDependencies","peerDependencies"]),Pt=Z((e,s)=>{for(const o of e)if(o.members?.includes(s)||o.prefixes?.some(t=>s.startsWith(t)))return o},"familyForDep"),vt=Z(e=>e.startsWith("workspace:")||e.startsWith("catalog:"),"isWorkspaceOrCatalogReference"),wt=Z((e,s={})=>{const o=new Set(s.ignoreFamilies),t=new Map;for(const i of yt)t.set(i.id,i);for(const i of s.extraFamilies??[])t.set(i.id,i);const r=[...t.values()],n=new Map;for(const i of e){if(i.isInternal||!$t.has(i.depType)||vt(i.specifier))continue;const p=Pt(r,i.depName);if(!p||o.has(p.id))continue;const c=n.get(p.id),f={depName:i.depName,depType:i.depType,packageDir:i.packageDir,packageJsonPath:i.packageJsonPath,packageName:i.packageName,specifier:i.specifier};c?c.push(f):n.set(p.id,[f])}const a=[];for(const[i,p]of n){const c=[...new Set(p.map(m=>m.specifier))];if(c.length<2)continue;const f=t.get(i);f&&a.push({family:i,familyLabel:f.label??i,members:p,specifiers:c})}return a},"lintSimilarDeps");var Dt=Object.defineProperty,B=D((e,s)=>Dt(e,"name",{value:s,configurable:!0}),"r");const bt=B(e=>e.startsWith("@types/"),"isTypesPackage"),xt=B((e,s={})=>{const o=new Set(s.ignoreDeps),t=new Map,r=B(a=>{const i=t.get(a);if(i!==void 0)return i;try{const p=j(a).private===!0;return t.set(a,p),p}catch{return t.set(a,!1),!1}},"isPrivate"),n=[];for(const a of e)a.depType==="dependencies"&&bt(a.depName)&&(o.has(a.depName)||r(a.packageJsonPath)&&n.push({childSpecifier:a.specifier,depName:a.depName,packageDir:a.packageDir,packageJsonPath:a.packageJsonPath,packageName:a.packageName}));return n},"lintTypesInDeps"),Nt=B((e,s={})=>{const{useEditorconfig:o}=s,t=new Map;for(const n of e){const a=t.get(n.packageJsonPath);a?a.push(n):t.set(n.packageJsonPath,[n])}const r=[];for(const[n,a]of t){const i=j(n),p=i.dependencies;if(typeof p!="object"||p===null)continue;const c=p;i.devDependencies??={};const f=i.devDependencies;for(const m of a){const d=c[m.depName];typeof d=="string"&&(m.depName in f||(f[m.depName]=d),Reflect.deleteProperty(c,m.depName))}Object.keys(c).length===0&&Reflect.deleteProperty(i,"dependencies"),E(n,i,{indent:C(n,{useEditorconfig:o}),overwrite:!0}),r.push(n)}return r},"applyTypesInDepsFixes");var Jt=Object.defineProperty,q=D((e,s)=>Jt(e,"name",{value:s,configurable:!0}),"f");const Tt=q(e=>e.startsWith("workspace:"),"isWorkspaceSpecifier"),St=q((e,s={})=>{const o=s.fixSpecifier??"workspace:*",t=[];for(const r of e)r.isInternal&&(Tt(r.specifier)||t.push({depName:r.depName,depType:r.depType,fix:o,packageDir:r.packageDir,packageJsonPath:r.packageJsonPath,packageName:r.packageName,specifier:r.specifier}));return t},"lintWorkspaceProtocol"),Rt=q((e,s,o,t)=>{const r=s.split(".");let n=e;for(let p=0;p<r.length-1;p+=1){const c=r[p],f=n[c];(typeof f!="object"||f===null)&&(n[c]={}),n=n[c]}const a=r.at(-1);let i=n[a];(typeof i!="object"||i===null)&&(i={},n[a]=i),i[o]=t},"setNestedField"),Wt=q((e,s={})=>{const{useEditorconfig:o}=s,t=new Map;for(const n of e){const a=t.get(n.packageJsonPath);a?a.push(n):t.set(n.packageJsonPath,[n])}const r=[];for(const[n,a]of t){const i=j(n);for(const p of a)if(p.depType.includes("."))Rt(i,p.depType,p.depName,p.fix);else{const c=i[p.depType];typeof c=="object"&&c!==null&&(c[p.depName]=p.fix)}E(n,i,{indent:C(n,{useEditorconfig:o}),overwrite:!0}),r.push(n)}return r},"applyWorkspaceProtocolFixes");var jt=Object.defineProperty,V=D((e,s)=>jt(e,"name",{value:s,configurable:!0}),"p");const Mt=new Set(["dependencies","devDependencies","peerDependencies"]),Ft=V(e=>e.startsWith("catalog:"),"isCatalogReference"),It=V(e=>e.startsWith("workspace:"),"isWorkspaceReference"),Et=V(e=>{if(!e.startsWith("catalog:"))return;const s=e.slice(8);return s===""?"default":s},"catalogNameOf"),Ct=V((e,s)=>{if(e.get("default")?.has(s))return"default";const o=[...e.keys()].filter(t=>t!=="default").sort();for(const t of o)if(e.get(t)?.has(s))return t},"findCatalogPinning"),Vt=V(e=>e==="default"?"catalog:":`catalog:${e}`,"buildCatalogSpecifier"),At=V((e,s)=>{const o=[...e].sort((r,n)=>(r.packageName??r.packageDir).localeCompare(n.packageName??n.packageDir));let t;for(const r of o){const n=oe(r.specifier);if(!n)continue;if(!t){t=r;continue}const a=oe(t.specifier);if(!a){t=r;continue}const i=se(a,n),p=se(n,a);(s==="highest"&&i||s==="lowest"&&p)&&(t=r)}if(t)return{canonical:t,canonicalSource:t.packageName??t.packageDir}},"pickCanonicalBySemver"),Ot=V((e,s={})=>{const o=s.resolve??"highest",t=new Set(s.ignoreDeps),r=[],n=e.filter(i=>i.isInternal||!Mt.has(i.depType)||It(i.specifier)||s.dep!==void 0&&i.depName!==s.dep?!1:!t.has(i.depName)),a=new Map;for(const i of n){const p=a.get(i.depName);p?p.push(i):a.set(i.depName,[i])}for(const[i,p]of a){const c=s.pinned?.get(i);if(c!==void 0){for(const g of p)g.specifier!==c&&r.push({canonicalSource:"cli:--pin",depName:i,depType:g.depType,fix:c,packageDir:g.packageDir,packageJsonPath:g.packageJsonPath,packageName:g.packageName,specifier:g.specifier});continue}if(o==="catalog"){const{catalogs:g}=s;if(!g)continue;const h=Ct(g,i);if(!h)continue;const $=Vt(h);for(const T of p)Et(T.specifier)!==h&&r.push({canonicalSource:`catalog:${h}`,depName:i,depType:T.depType,fix:$,packageDir:T.packageDir,packageJsonPath:T.packageJsonPath,packageName:T.packageName,specifier:T.specifier});continue}const f=p.filter(g=>!Ft(g.specifier));if(f.length<2||new Set(f.map(g=>g.specifier)).size<=1)continue;const m=At(f,o);if(!m)continue;const d=m.canonical.specifier;for(const g of f)g.specifier!==d&&r.push({canonicalSource:m.canonicalSource,depName:i,depType:g.depType,fix:d,packageDir:g.packageDir,packageJsonPath:g.packageJsonPath,packageName:g.packageName,specifier:g.specifier})}return r},"lintWorkspaceVersions"),Ht=V((e,s={})=>{const{useEditorconfig:o}=s,t=new Map;for(const n of e){const a=t.get(n.packageJsonPath);a?a.push(n):t.set(n.packageJsonPath,[n])}const r=[];for(const[n,a]of t){const i=j(n);for(const p of a){const c=i[p.depType];typeof c=="object"&&c!==null&&(c[p.depName]=p.fix)}E(n,i,{indent:C(n,{useEditorconfig:o}),overwrite:!0}),r.push(n)}return r},"applyWorkspaceVersionsFixes");var _t=Object.defineProperty,y=D((e,s)=>_t(e,"name",{value:s,configurable:!0}),"u");const zt=y(e=>{if(I(W(e,"pnpm-workspace.yaml")))return!0;const s=W(e,"package.json");if(!I(s))return!1;try{return j(s).workspaces!==void 0}catch{return!1}},"detectWorkspaceConfig"),A=y((e,s)=>{const o=new Map;for(const t of e){const r=s(t),n=o.get(r);n?n.push(t):o.set(r,[t])}return o},"groupBy"),Bt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ workspace-protocol: no violations"));return}const r=o?"Fixed":"Found",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} workspace-protocol violation${e.length===1?"":"s"}`)));for(const[a,i]of A(e,p=>p.packageName??p.packageJsonPath)){const p=P(s,i[0].packageJsonPath);t.info(`  ${v(a)} ${u(`(${p})`)}`);for(const c of i){const f=o?R("→"):x("→");t.info(`    ${u(c.depType)} ${c.depName}: ${b(c.specifier)} ${f} ${w(c.fix)}`)}}o||t.info(u("  Run with --fix to rewrite specifiers in place."))},"printWorkspaceProtocolHuman"),Lt=y((e,s,o)=>{if(e.length===0){o.info(w("✓ redefine-root: no violations"));return}o.info(x(v(`Found ${String(e.length)} dep${e.length===1?"":"s"} re-declared from root`)));for(const[t,r]of A(e,n=>n.packageName??n.packageJsonPath)){const n=P(s,r[0].packageJsonPath);o.info(`  ${v(t)} ${u(`(${n})`)}`);for(const a of r)o.info(`    ${u(a.depType)} ${a.depName}: ${b(a.childSpecifier)} ${u(`(root ${a.rootDepType}: ${a.rootSpecifier})`)}`)}o.info(u("  Remove these from child package.json files — root pin will resolve."))},"printRedefineRootHuman"),qt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ workspace-versions: no drift"));return}const r=o?"Fixed":"Found",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} workspace-version drift${e.length===1?"":"s"}`)));for(const[a,i]of A(e,p=>p.depName)){const p=i[0].fix,c=i[0].canonicalSource;t.info(`  ${v(a)} ${u(`canonical: ${p} (from ${c})`)}`);for(const f of i){const m=P(s,f.packageJsonPath),d=f.packageName??m,g=o?R("→"):x("→");t.info(`    ${d} ${u(`(${m})`)} ${u(f.depType)}: ${b(f.specifier)} ${g} ${w(f.fix)}`)}}o||t.info(u("  Run with --fix to align drifting specifiers."))},"printWorkspaceVersionsHuman"),Ut=y((e,s,o)=>{if(e.length===0){o.info(w("✓ banned-deps: no violations"));return}o.info(b(v(`Found ${String(e.length)} banned dep${e.length===1?"":"s"}`)));for(const[t,r]of A(e,n=>n.packageName??n.packageJsonPath)){const n=P(s,r[0].packageJsonPath);o.info(`  ${v(t)} ${u(`(${n})`)}`);for(const a of r){const i=a.replacement?` ${u("→")} ${w(a.replacement)}`:"";o.info(`    ${u(a.depType)} ${b(a.depName)}${i}`),o.info(`      ${u(a.reason)}`)}}},"printBannedDepsHuman"),Gt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ catalog-proposals: nothing worth promoting"));return}const r=o?"Added":"Would add",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} catalog entr${e.length===1?"y":"ies"}`)));for(const a of e)t.info(`  ${v(a.depName)}: ${w(a.specifier)} ${u(`(${String(a.instanceCount)} packages agree)`)}`);if(!o){const a=ze(s,e);if(a){t.info(""),t.info(u("Proposed pnpm-workspace.yaml changes:"));for(const i of a.split(`
+`))i.startsWith("+")?t.info(w(i)):i.startsWith("-")?t.info(b(i)):t.info(u(i))}t.info(u("  Run with --fix to write these entries to pnpm-workspace.yaml."))}},"printCatalogProposalsHuman"),Kt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ custom-types: no engines / packageManager / volta drift"));return}const r=o?"Fixed":"Found",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} custom-type drift${e.length===1?"":"s"}`)));for(const[a,i]of A(e,p=>`${p.customType} ${p.depName}`)){const p=i[0].fix,c=i[0].canonicalSource;t.info(`  ${v(a)} ${u(`canonical: ${p} (from ${c})`)}`);for(const f of i){const m=P(s,f.packageJsonPath),d=f.packageName??m,g=o?R("→"):x("→");t.info(`    ${d} ${u(`(${m})`)}: ${b(f.specifier)} ${g} ${w(f.fix)}`)}}o||t.info(u("  Run with --fix to align engines/packageManager/volta versions."))},"printCustomTypesHuman"),Xt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ empty-deps: no empty dependency blocks"));return}const r=o?"Removed":"Found",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} empty dependency block${e.length===1?"":"s"}`)));for(const[a,i]of A(e,p=>p.packageName??p.packageJsonPath)){const p=P(s,i[0].packageJsonPath);t.info(`  ${v(a)} ${u(`(${p})`)}`);for(const c of i)t.info(`    ${u(c.depType)}: ${b("{}")}`)}o||t.info(u("  Run with --fix to drop empty blocks."))},"printEmptyDepsHuman"),Qt=y((e,s,o,t)=>{if(e.length===0){t.info(w('✓ root-private: root package.json is "private": true'));return}const r=o?"Set":"Missing",n=o?R:b;for(const a of e){const i=P(s,a.packageJsonPath);if(t.info(n(v(`${r} "private": true on root ${u(`(${i})`)}`))),!o){const p=a.rawValue===void 0?"absent":JSON.stringify(a.rawValue);t.info(`    ${u("current:")} ${b(p)}`)}}o||t.info(u('  Run with --fix to set "private": true.'))},"printRootPrivateHuman"),Yt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ root-package-manager: packageManager field present"));return}const r=o?"Set":"Missing",n=o?R:b;for(const a of e){const i=P(s,a.packageJsonPath);t.info(n(v(`${r} packageManager on root ${u(`(${i})`)}`))),!o&&!a.suggested&&t.info(u("    no canonical specifier configured (set policy.rootPackageManager.suggested to enable --fix)"))}o||t.info(u('  e.g. "packageManager": "pnpm@10.32.1"'))},"printRootPackageManagerHuman"),Zt=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ root-deps: no runtime dependencies on private root"));return}const r=o?"Moved":"Found",n=o?R:x;for(const a of e){const i=P(s,a.packageJsonPath);t.info(n(v(`${r} ${String(a.depNames.length)} runtime dep${a.depNames.length===1?"":"s"} on private root ${u(`(${i})`)}`)));for(const p of a.depNames)t.info(`    ${b(p)}`)}o||t.info(u("  Run with --fix to move them to devDependencies."))},"printRootDepsHuman"),eo=y((e,s)=>{if(e.length===0){s.info(w("✓ missing-package-json: every workspace dir has a package.json"));return}s.info(x(v(`Found ${String(e.length)} workspace dir${e.length===1?"":"s"} without a package.json`)));for(const o of e)s.info(`    ${b(o.packageDir)}`);s.info(u("  Either delete the directory or scaffold a package.json (vis create)."))},"printMissingPackageJsonHuman"),to=y((e,s,o)=>{if(e.length===0){o.info(w("✓ dead-workspace-pattern: every workspace pattern matches at least one package"));return}const t=s?"Removed":"Found",r=s?R:x;o.info(r(v(`${t} ${String(e.length)} unmatched workspace pattern${e.length===1?"":"s"}`)));for(const[n,a]of A(e,i=>i.source)){o.info(`  ${v(n)}`);for(const i of a)o.info(`    ${b(i.pattern)}`)}s||o.info(u("  Run with --fix to drop dead patterns."))},"printDeadWorkspacePatternsHuman"),oo=y((e,s,o,t)=>{if(e.length===0){t.info(w("✓ types-in-deps: no @types/* in dependencies of private packages"));return}const r=o?"Moved":"Found",n=o?R:x;t.info(n(v(`${r} ${String(e.length)} @types/* dep${e.length===1?"":"s"} in dependencies`)));for(const[a,i]of A(e,p=>p.packageName??p.packageJsonPath)){const p=P(s,i[0].packageJsonPath);t.info(`  ${v(a)} ${u(`(${p})`)}`);for(const c of i)t.info(`    ${b(c.depName)} ${u(c.childSpecifier)}`)}o||t.info(u("  Run with --fix to move them to devDependencies."))},"printTypesInDepsHuman"),so=y((e,s,o)=>{if(e.length===0){o.info(w("✓ similar-deps: every related dep family is in sync"));return}o.info(x(v(`Found ${String(e.length)} family${e.length===1?"":" families"} with version drift`)));for(const t of e){o.info(`  ${v(t.familyLabel)} ${u(`(${t.specifiers.join(", ")})`)}`);for(const r of t.members){const n=P(s,r.packageJsonPath),a=r.packageName??n;o.info(`    ${a} ${u(`(${n})`)} ${u(r.depType)}: ${b(r.depName)}@${x(r.specifier)}`)}}o.info(u("  Pick a single specifier per family and align by hand — auto-fix is unsafe across name boundaries."))},"printSimilarDepsHuman"),ao=y((e,s,o,t,r)=>{let n=!0;const a=y(i=>{n||r.info(""),n=!1,i()},"section");t.workspaceProtocol&&a(()=>{Bt(e.workspaceProtocol??[],s,o.workspaceProtocol,r)}),t.redefineRoot&&a(()=>{Lt(e.redefineRoot??[],s,r)}),t.workspaceVersions&&a(()=>{qt(e.workspaceVersions??[],s,o.workspaceVersions,r)}),t.customTypes&&a(()=>{Kt(e.customTypes??[],s,o.customTypes,r)}),e.catalogProposals!==void 0&&a(()=>{Gt(e.catalogProposals??[],s,o.catalogProposals,r)}),t.bannedDeps&&a(()=>{Ut(e.bannedDeps??[],s,r)}),t.emptyDeps&&a(()=>{Xt(e.emptyDeps??[],s,o.emptyDeps,r)}),t.rootPrivate&&a(()=>{Qt(e.rootPrivate??[],s,o.rootPrivate,r)}),t.rootPackageManager&&a(()=>{Yt(e.rootPackageManager??[],s,o.rootPackageManager,r)}),t.rootDeps&&a(()=>{Zt(e.rootDeps??[],s,o.rootDeps,r)}),t.missingPackageJson&&a(()=>{eo(e.missingPackageJson??[],r)}),t.deadWorkspacePatterns&&a(()=>{to(e.deadWorkspacePatterns??[],o.deadWorkspacePatterns,r)}),t.typesInDeps&&a(()=>{oo(e.typesInDeps??[],s,o.typesInDeps,r)}),t.similarDeps&&a(()=>{so(e.similarDeps??[],s,r)})},"printHuman"),no=y((e,s)=>{for(const o of e.workspaceProtocol??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`workspace-protocol	${t}	${o.depType}	${o.depName}	${o.specifier} → ${o.fix}
+`)}for(const o of e.redefineRoot??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`redefine-root	${t}	${o.depType}	${o.depName}	${o.childSpecifier}
+`)}for(const o of e.workspaceVersions??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`workspace-versions	${t}	${o.depType}	${o.depName}	${o.specifier} → ${o.fix}
+`)}for(const o of e.customTypes??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`custom-types	${t}	${o.customType}	${o.depName}	${o.specifier} → ${o.fix}
+`)}for(const o of e.bannedDeps??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`banned-deps	${t}	${o.depType}	${o.depName}	${o.reason}
+`)}for(const o of e.catalogProposals??[])process.stdout.write(`catalog-proposal	${o.catalogName}	${o.depName}	${o.specifier}	${String(o.instanceCount)}
+`);for(const o of e.emptyDeps??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`empty-deps	${t}	${o.depType}
+`)}for(const o of e.rootPrivate??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`root-private	${t}
+`)}for(const o of e.rootPackageManager??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`root-package-manager	${t}	${o.suggested??""}
+`)}for(const o of e.rootDeps??[]){const t=P(s,o.packageJsonPath);for(const r of o.depNames)process.stdout.write(`root-deps	${t}	${r}
+`)}for(const o of e.missingPackageJson??[])process.stdout.write(`missing-package-json	${o.packageDir}
+`);for(const o of e.deadWorkspacePatterns??[])process.stdout.write(`dead-workspace-pattern	${o.source}	${o.pattern}
+`);for(const o of e.typesInDeps??[]){const t=P(s,o.packageJsonPath);process.stdout.write(`types-in-deps	${t}	${o.depName}	${o.childSpecifier}
+`)}for(const o of e.similarDeps??[])for(const t of o.members){const r=P(s,t.packageJsonPath);process.stdout.write(`similar-deps	${o.family}	${r}	${t.depType}	${t.depName}	${t.specifier}
+`)}},"printMinimal"),ro=y((e,s,o,t)=>{const r=y(a=>({...a,packageJsonPath:P(s,a.packageJsonPath)}),"relativize"),n={fixed:o};if(t.workspaceProtocol){const a=(e.workspaceProtocol??[]).map(i=>r(i));n.workspaceProtocol={issues:a,total:a.length}}if(t.redefineRoot){const a=(e.redefineRoot??[]).map(i=>r(i));n.redefineRoot={issues:a,total:a.length}}if(t.workspaceVersions){const a=(e.workspaceVersions??[]).map(i=>r(i));n.workspaceVersions={issues:a,total:a.length}}if(t.customTypes){const a=(e.customTypes??[]).map(i=>r(i));n.customTypes={issues:a,total:a.length}}if(t.bannedDeps){const a=(e.bannedDeps??[]).map(i=>r(i));n.bannedDeps={issues:a,total:a.length}}if(e.catalogProposals!==void 0){const a=e.catalogProposals;n.catalogProposals={proposals:a,total:a.length}}if(t.emptyDeps){const a=(e.emptyDeps??[]).map(i=>r(i));n.emptyDeps={issues:a,total:a.length}}if(t.rootPrivate){const a=(e.rootPrivate??[]).map(i=>r(i));n.rootPrivate={issues:a,total:a.length}}if(t.rootPackageManager){const a=(e.rootPackageManager??[]).map(i=>r(i));n.rootPackageManager={issues:a,total:a.length}}if(t.rootDeps){const a=(e.rootDeps??[]).map(i=>r(i));n.rootDeps={issues:a,total:a.length}}if(t.missingPackageJson){const a=e.missingPackageJson??[];n.missingPackageJson={issues:a,total:a.length}}if(t.deadWorkspacePatterns){const a=e.deadWorkspacePatterns??[];n.deadWorkspacePatterns={issues:a,total:a.length}}if(t.typesInDeps){const a=(e.typesInDeps??[]).map(i=>r(i));n.typesInDeps={issues:a,total:a.length}}if(t.similarDeps){const a=(e.similarDeps??[]).map(i=>({...i,members:i.members.map(p=>({...p,packageJsonPath:P(s,p.packageJsonPath)}))}));n.similarDeps={issues:a,total:a.length}}process.stdout.write(`${JSON.stringify(n,void 0,2)}
+`)},"printJson"),S=y((e,s,o)=>{const t=e[s];return typeof t=="boolean"?t:e[o]===!0},"flag"),io=y(e=>{const s=e,o=(e.ban?.length??0)>0,t=(e.pin?.length??0)>0,r=S(s,"workspaceProtocol","workspace-protocol"),n=S(s,"redefineRoot","redefine-root"),a=S(s,"bannedDeps","banned-deps"),i=S(s,"workspaceVersions","workspace-versions"),p=S(s,"customTypes","custom-types"),c=S(s,"emptyDeps","empty-deps"),f=S(s,"rootPrivate","root-private"),m=S(s,"rootPackageManager","root-package-manager"),d=S(s,"rootDeps","root-deps"),g=S(s,"missingPackageJson","missing-package-json"),h=S(s,"deadWorkspacePatterns","dead-workspace-patterns"),$=S(s,"typesInDeps","types-in-deps"),T=S(s,"similarDeps","similar-deps");return r||n||a||i||p||c||f||m||d||g||h||$||T||o||t?{bannedDeps:a||o,customTypes:p,deadWorkspacePatterns:h,emptyDeps:c,missingPackageJson:g,redefineRoot:n,rootDeps:d,rootPackageManager:m,rootPrivate:f,similarDeps:T,typesInDeps:$,workspaceProtocol:r,workspaceVersions:i||t}:{bannedDeps:!0,customTypes:!0,deadWorkspacePatterns:!0,emptyDeps:!0,missingPackageJson:!0,redefineRoot:!0,rootDeps:!0,rootPackageManager:!0,rootPrivate:!0,similarDeps:!0,typesInDeps:!0,workspaceProtocol:!0,workspaceVersions:!0}},"resolveSelection"),po=y(e=>{const s=new Map;for(const o of e??[]){const t=o.lastIndexOf("@");if(t<=0||t===o.length-1)throw new Error(`Invalid --pin "${o}". Use: name@<specifier> (e.g. react@^18.2.0).`);const r=o.slice(0,t),n=o.slice(t+1);s.set(r,n)}return s},"parsePinFlags"),co=new Set(["catalog","highest","lowest"]),fo=y(e=>{if(e===void 0)return"highest";if(!co.has(e))throw new Error(`Invalid --resolve "${e}". Use: highest, lowest, or catalog.`);return e},"parseResolveStrategy"),F=y((e,s)=>e?s===void 0||s===!0:!1,"isAutofixAllowed"),lo={"custom-types":"policy.customTypes.autofix","workspace-protocol":"policy.workspaceProtocol.autofix","workspace-versions":"policy.workspaceVersions.autofix"},Y=y((e,s,o,t)=>{const r=lo[s],n=o==="prompt"?`${r} = "prompt" (interactive mode not yet implemented; report-only)`:`${r} = false`,a=`Set "${r}": true (or remove it) to enable rewrites.`;e.warn(`${s}: ${String(t)} issue${t===1?"":"s"} not rewritten — ${n}. ${a}`)},"warnAutofixDenied"),Po=y(async({logger:e,options:s,visConfig:o,workspaceRoot:t})=>{if(!t)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const r=t,n=s.fix??!1,a=s.format??"human",i=s.quiet??!1;if(!["human","json","minimal"].includes(a))throw new Error(`Invalid --format "${a}". Use: human, json, or minimal.`);const p=io(s),c=o?.policy??{},f=o?.editorconfig??!0,m=po(s.pin),d=s.ban??[];(s.dep!==void 0||s.resolve!==void 0)&&!p.workspaceVersions&&!i&&e.warn("--dep / --resolve only apply to --workspace-versions; ignored.");const g=be(r),h={},$={catalogProposals:!1,customTypes:!1,deadWorkspacePatterns:!1,emptyDeps:!1,rootDeps:!1,rootPackageManager:!1,rootPrivate:!1,typesInDeps:!1,workspaceProtocol:!1,workspaceVersions:!1},T=zt(r);let N=0;if(p.workspaceProtocol){const l=St(g,{fixSpecifier:s.fixSpecifier}),k=F(n,c.workspaceProtocol?.autofix);k&&l.length>0&&(Wt(l,{useEditorconfig:f}),$.workspaceProtocol=!0),h.workspaceProtocol=l,k||(N+=l.length),n&&!k&&l.length>0&&!i&&Y(e,"workspace-protocol",c.workspaceProtocol?.autofix,l.length)}if(p.redefineRoot){const l=rt(g,{ignoreDeps:c.redefineRoot?.ignore});h.redefineRoot=l,N+=l.length}if(p.workspaceVersions){const l=fo(s.resolve??c.workspaceVersions?.resolve),k=l==="catalog"?xe(r):void 0;l==="catalog"&&(!k||k.size===0)&&!i&&e.warn("--resolve catalog: no catalog found in pnpm-workspace.yaml or root package.json — nothing to align.");const J=Ot(g,{catalogs:k,dep:s.dep,ignoreDeps:c.workspaceVersions?.ignore,pinned:m.size>0?m:void 0,resolve:l}),H=F(n,c.workspaceVersions?.autofix);if(H&&J.length>0&&(Ht(J,{useEditorconfig:f}),$.workspaceVersions=!0),h.workspaceVersions=J,H||(N+=J.length),n&&!H&&J.length>0&&!i&&Y(e,"workspace-versions",c.workspaceVersions?.autofix,J.length),s.proposeMin!==void 0){if(l!=="catalog"&&!i)e.warn("--propose-min only runs under --resolve catalog; ignored.");else if(l==="catalog"){const M=He(g,{catalogs:k,ignoreDeps:c.workspaceVersions?.ignore,min:s.proposeMin});H&&M.length>0&&(_e(r,M),$.catalogProposals=!0),h.catalogProposals=M}}}if(p.customTypes){const l=c.customTypes?.extraTypes,k=Ne(l);if(k.length>0){for(const me of k)e.error(`policy.customTypes.${me}`);process.exitCode=1;return}const J=Je(r,l),H=(s.resolve??c.customTypes?.resolve)==="lowest"?"lowest":"highest",M=Te(J,{dep:s.dep,ignoreDeps:c.customTypes?.ignore,resolve:H}),U=F(n,c.customTypes?.autofix);U&&M.length>0&&(Se(M,{useEditorconfig:f}),$.customTypes=!0),h.customTypes=M,U||(N+=M.length),n&&!U&&M.length>0&&!i&&Y(e,"custom-types",c.customTypes?.autofix,M.length)}if(p.bannedDeps){const l={...c.bannedDeps};for(const J of d)l[J]={reason:"banned via --ban CLI flag"};Object.keys(l).length===0&&s.bannedDeps&&!i&&e.warn("--banned-deps: no policy.bannedDeps in vis config, nothing to check.");const k=Ie(g,l);h.bannedDeps=k,N+=k.length}if(p.emptyDeps){const l=Ke(r,{ignoreBlocks:c.emptyDeps?.ignoreBlocks}),k=F(n,c.emptyDeps?.autofix);k&&l.length>0&&(Xe(l,{useEditorconfig:f}),$.emptyDeps=!0),h.emptyDeps=l,k||(N+=l.length)}if(p.rootPrivate){const l=mt(r,T),k=F(n,c.rootPrivate?.autofix);k&&l.length>0&&(ht(l,{useEditorconfig:f}),$.rootPrivate=!0),h.rootPrivate=l,k||(N+=l.length)}if(p.rootPackageManager){const l=gt(r,T,{suggested:c.rootPackageManager?.suggested}),k=F(n,c.rootPackageManager?.autofix);k&&l.some(J=>J.suggested!==void 0)&&(dt(l,{useEditorconfig:f}),$.rootPackageManager=!0),h.rootPackageManager=l,(!k||!$.rootPackageManager)&&(N+=l.filter(J=>J.suggested===void 0||!$.rootPackageManager).length)}if(p.rootDeps){const l=pt(r,T),k=F(n,c.rootDeps?.autofix);k&&l.length>0&&(ct(l,{useEditorconfig:f}),$.rootDeps=!0),h.rootDeps=l,k||(N+=l.length)}if(p.missingPackageJson){const l=ot(r);h.missingPackageJson=l,N+=l.length}if(p.deadWorkspacePatterns){const l=Le(r),k=F(n,c.deadWorkspacePatterns?.autofix);k&&l.length>0&&(qe(l,{useEditorconfig:f}),$.deadWorkspacePatterns=!0),h.deadWorkspacePatterns=l,k||(N+=l.length)}if(p.typesInDeps){const l=xt(g,{ignoreDeps:c.typesInDeps?.ignore}),k=F(n,c.typesInDeps?.autofix);k&&l.length>0&&(Nt(l,{useEditorconfig:f}),$.typesInDeps=!0),h.typesInDeps=l,k||(N+=l.length)}if(p.similarDeps){const l=wt(g,{extraFamilies:c.similarDeps?.extraFamilies,ignoreFamilies:c.similarDeps?.ignoreFamilies});h.similarDeps=l,N+=l.length}i||(a==="json"?ro(h,r,$,p):a==="minimal"?no(h,r):ao(h,r,$,p,e)),N>0&&(process.exitCode=1)},"execute");export{Po as default};