@visulima/vis 1.0.0-alpha.37 → 1.0.0-alpha.38

package/dist/packem_shared/dependency-scan-BDTH898x.js

@@ -1 +0,0 @@
-import{v as u,m as l,f as g}from"./index-BDmTbWX1.js";import{D as d,l as D,s as v}from"../packem_chunks/bin.js";const w={bun:{file:"bun.lock",type:"bun"},npm:{aliases:["npm-shrinkwrap.json"],file:"package-lock.json",type:"npm"},pnpm:{file:"pnpm-lock.yaml",type:"pnpm"},yarn:{file:"yarn.lock",type:"yarn"}},j=o=>{const t=w[o];return t?[...t.aliases??[],t.file].map(e=>({file:e,type:t.type})):[]},m=(o,t)=>{const e=j(t);if(e.length!==0)return e.find(r=>g(l(o,r.file)))??e[e.length-1]},k=o=>{try{return JSON.parse(u(o))}catch{return}},y=o=>{const t=[],e=k(l(o,"package.json"));e&&t.push(e);const r=D(o);let c;if(r?c=r:e?.workspaces&&(Array.isArray(e.workspaces)?c=e.workspaces:e.workspaces.packages&&(c=e.workspaces.packages)),!c)return t;const a=v(o,c);for(const s of a){const n=k(l(o,s,"package.json"));n&&t.push(n)}return t},b=(o,t)=>{const e=new Set,r=[],c=new Map;for(const s of t){const n=c.get(s.name);n?n.push(s):c.set(s.name,[s])}const a=s=>{if(s)for(const n of Object.keys(s))e.has(n)||(e.add(n),r.push(n))};for(const s of y(o))a(s.dependencies),a(s.peerDependencies),a(s.optionalDependencies);for(;r.length>0;){const s=r.shift(),n=c.get(s);if(n){for(const i of n)for(const p of[i.dependencies,i.peerDependencies,i.optionalDependencies])if(p)for(const f of Object.keys(p))e.has(f)||(e.add(f),r.push(f))}}return e},O=(o,t,e={})=>{const r=m(o,t);if(!r)return[];let c;try{c=u(l(o,r.file))}catch{return[]}const a=d(c,r.type);if(a.length===0)return[];const s=e.includeDev??!0?void 0:b(o,a),n=new Set,i=[];for(const p of a){if(s&&!s.has(p.name))continue;const f=`${p.name}@${p.version}`;n.has(f)||(n.add(f),i.push({isDev:!1,name:p.name,version:p.version}))}return i},$=(o,t)=>{const e=m(o,t);if(!e)return[];let r;try{r=u(l(o,e.file))}catch{return[]}const c=d(r,e.type);if(c.length===0)return[];const a=new Map;for(const n of c)a.has(n.name)||a.set(n.name,new Set),a.get(n.name).add(n.version);const s=[];for(const[n,i]of a)i.size<=1||s.push({name:n,versions:[...i]});return s.sort((n,i)=>n.name.localeCompare(i.name))},A=(o,t)=>{const e=m(o,t);if(!e)return;let r;try{r=u(l(o,e.file))}catch{return}const c=d(r,e.type);if(c.length===0)return;const a=[],s=new Set;for(const n of y(o))for(const i of[n.dependencies,n.devDependencies,n.peerDependencies,n.optionalDependencies])if(i)for(const[p,f]of Object.entries(i)){const h=`${p}@${f}`;s.has(h)||(s.add(h),a.push({name:p,version:f}))}return{entries:c,roots:a}};export{w as L,A as a,$ as f,O as l,m as r};

package/dist/packem_shared/index-CB4p298r.js

@@ -1 +0,0 @@
-const b=t=>{const e=new Set,n=[t];for(let r=0;r<n.length;r++){const o=n[r];if(e.has(o))continue;e.add(o);const{children:s}=o;if(s?.length)for(let u=0,c=s.length;u<c;u++)n.push(s[u])}return Array.from(e)},tt=t=>{let e="";const n=b(t);for(let r=0,o=n.length;r<o;r++){const s=n[r];if(!s.regex)continue;const u=s.regex.flags;if(e||(e=u),e!==u)throw new Error(`Inconsistent RegExp flags used: "${e}" and "${u}"`)}return e},Z=(t,e,n)=>{const r=n.get(t);if(r!==void 0)return r;const o=t.partial??e;let s="";if(t.regex&&(s+=o?"(?:$|":"",s+=t.regex.source),t.children?.length){const u=nt(t.children.map(c=>Z(c,e,n)).filter(Boolean));if(u?.length){const c=t.children.some(M=>!M.regex||!(M.partial??e)),a=u.length>1||o&&(!s.length||c);s+=a?o?"(?:$|":"(?:":"",s+=u.join("|"),s+=a?")":""}}return t.regex&&(s+=o?")":""),n.set(t,s),s},et=(t,e)=>{const n=new Map,r=b(t);for(let o=r.length-1;o>=0;o--){const s=Z(r[o],e,n);if(!(o>0))return s}return""},nt=t=>Array.from(new Set(t)),j=(t,e,n)=>j.compile(t,n).test(e);j.compile=(t,e)=>{const n=e?.partial??!1,r=et(t,n),o=tt(t);return new RegExp(`^(?:${r})$`,o)};const rt=(t,e)=>{const n=j.compile(t,e),r=`${n.source.slice(0,-1)}[\\\\/]?$`,o=n.flags;return new RegExp(r,o)},ot=t=>{const e=t.map(r=>r.source).join("|")||"$^",n=t[0]?.flags;return new RegExp(e,n)},q=t=>Array.isArray(t),k=t=>typeof t=="function",st=t=>t.length===0,ut=(()=>{const{toString:t}=Function.prototype,e=/(?:^\(\s*(?:[^,.()]|\.(?!\.\.))*\s*\)\s*=>|^\s*[a-zA-Z$_][a-zA-Z0-9$_]*\s*=>)/;return n=>(n.length===0||n.length===1)&&e.test(t.call(n))})(),it=t=>typeof t=="number",ct=t=>typeof t=="object"&&t!==null,lt=t=>t instanceof RegExp,at=(()=>{const t=/\\\(|\((?!\?(?::|=|!|<=|<!))/;return e=>t.test(e.source)})(),ft=(()=>{const t=/^[a-zA-Z0-9_-]+$/;return e=>t.test(e.source)&&!e.flags.includes("i")})(),O=t=>typeof t=="string",h=t=>t===void 0,pt=t=>{const e=new Map;return n=>{const r=e.get(n);if(r!==void 0)return r;const o=t(n);return e.set(n,o),o}},W=(t,e,n={})=>{const r={cache:{},input:t,index:0,indexBacktrackMax:0,options:n,output:[]},o=d(e)(r),s=Math.max(r.index,r.indexBacktrackMax);if(o&&r.index===t.length)return r.output;throw new Error(`Failed to parse at index ${s}`)},i=(t,e)=>q(t)?$t(t,e):O(t)?_(t,e):ht(t,e),$t=(t,e)=>{const n={};for(const r of t){if(r.length!==1)throw new Error(`Invalid character: "${r}"`);const o=r.charCodeAt(0);n[o]=!0}return r=>{const o=r.input;let s=r.index,u=s;for(;u<o.length&&o.charCodeAt(u)in n;)u+=1;if(u>s){if(!h(e)&&!r.options.silent){const c=o.slice(s,u),a=k(e)?e(c,o,`${s}`):e;h(a)||r.output.push(a)}r.index=u}return!0}},ht=(t,e)=>{if(ft(t))return _(t.source,e);{const n=t.source,r=t.flags.replace(/y|$/,"y"),o=new RegExp(n,r);return at(t)&&k(e)&&!ut(e)?dt(o,e):gt(o,e)}},dt=(t,e)=>n=>{const r=n.index,o=n.input;t.lastIndex=r;const s=t.exec(o);if(s){const u=t.lastIndex;if(!n.options.silent){const c=e(...s,o,`${r}`);h(c)||n.output.push(c)}return n.index=u,!0}else return!1},gt=(t,e)=>n=>{const r=n.index,o=n.input;if(t.lastIndex=r,t.test(o)){const s=t.lastIndex;if(!h(e)&&!n.options.silent){const u=k(e)?e(o.slice(r,s),o,`${r}`):e;h(u)||n.output.push(u)}return n.index=s,!0}else return!1},_=(t,e)=>n=>{const r=n.index,o=n.input;if(o.startsWith(t,r)){if(!h(e)&&!n.options.silent){const s=k(e)?e(t,o,`${r}`):e;h(s)||n.output.push(s)}return n.index+=t.length,!0}else return!1},v=(t,e,n,r)=>{const o=d(t),s=e>1;return R(z(L(u=>{let c=0;for(;c<n;){const a=u.index;if(!o(u)||(c+=1,u.index===a))break}return c>=e},s),r))},F=(t,e)=>v(t,0,1,e),E=(t,e)=>v(t,0,1/0,e),xt=(t,e)=>v(t,1,1/0,e),m=(t,e)=>{const n=t.map(d);return R(z(L(r=>{for(let o=0,s=n.length;o<s;o++)if(!n[o](r))return!1;return!0}),e))},p=(t,e)=>{const n=t.map(d);return R(z(r=>{for(let o=0,s=n.length;o<s;o++)if(n[o](r))return!0;return!1},e))},L=(t,e=!0,n=!1)=>{const r=d(t);return e?o=>{const s=o.index,u=o.output.length,c=r(o);return!c&&!n&&(o.indexBacktrackMax=Math.max(o.indexBacktrackMax,o.index)),(!c||n)&&(o.index=s,o.output.length!==u&&(o.output.length=u)),c}:r},z=(t,e)=>{const n=d(t);return e?r=>{if(r.options.silent)return n(r);const o=r.output.length;if(n(r)){const s=r.output.splice(o,1/0),u=e(s);return h(u)||r.output.push(u),!0}else return!1}:n},R=(()=>{let t=0;return e=>{const n=d(e),r=t+=1;return o=>{var s;if(o.options.memoization===!1)return n(o);const u=o.index,c=(s=o.cache)[r]||(s[r]={indexMax:-1,queue:[]}),a=c.queue;if(u<=c.indexMax){const y=c.store||(c.store=new Map);if(a.length){for(let x=0,P=a.length;x<P;x+=2){const Q=a[x*2],N=a[x*2+1];y.set(Q,N)}a.length=0}const f=y.get(u);if(f===!1)return!1;if(it(f))return o.index=f,!0;if(f)return o.index=f.index,f.output?.length&&o.output.push(...f.output),!0}const M=o.output.length,K=n(o);if(c.indexMax=Math.max(c.indexMax,u),K){const y=o.index,f=o.output.length;if(f>M){const x=o.output.slice(M,f);a.push(u,{index:y,output:x})}else a.push(u,y);return!0}else return a.push(u,!1),!1}}})(),U=t=>{let e;return n=>(e||(e=d(t())),e(n))},d=pt(t=>{if(k(t))return st(t)?U(t):t;if(O(t)||lt(t))return i(t);if(q(t))return m(t);if(ct(t))return p(Object.values(t));throw new Error("Invalid rule")}),g=t=>t,mt=t=>typeof t=="string",wt=t=>{const e=new WeakMap,n=new WeakMap;return(r,o)=>{const s=o?.partial?n:e,u=s.get(r);if(u!==void 0)return u;const c=t(r,o);return s.set(r,c),c}},Mt=t=>{const e={},n={};return(r,o)=>{const s=o?.partial?n:e;return s[r]??(s[r]=t(r,o))}},yt=i(/\\./,g),kt=i(/./,g),At=i(/\*\*\*+/,"*"),Et=i(/([^/{[(!])\*\*/,(t,e)=>`${e}*`),jt=i(/(^|.)\*\*(?=[^*/)\]}])/,(t,e)=>`${e}*`),vt=E(p([yt,At,Et,jt,kt])),zt=t=>W(t,vt,{memoization:!1}).join(""),J="abcdefghijklmnopqrstuvwxyz",Rt=t=>{let e="";for(;t>0;){const n=(t-1)%26;e=J[n]+e,t=Math.floor((t-1)/26)}return e},B=t=>{let e=0;for(let n=0,r=t.length;n<r;n++)e=e*26+J.indexOf(t[n])+1;return e},I=(t,e)=>{if(e<t)return I(e,t);const n=[];for(;t<=e;)n.push(t++);return n},It=(t,e,n)=>I(t,e).map(r=>String(r).padStart(n,"0")),T=(t,e)=>I(B(t),B(e)).map(Rt),l=t=>({partial:!1,regex:new RegExp(t,"s"),children:[]}),A=t=>({children:t}),w=(()=>{const t=(e,n,r)=>{if(r.has(e))return;r.add(e);const{children:o}=e;if(!o.length)o.push(n);else for(let s=0,u=o.length;s<u;s++)t(o[s],n,r)};return e=>{if(!e.length)return A([]);for(let n=e.length-1;n>=1;n--){const r=new Set,o=e[n-1],s=e[n];t(o,s,r)}return e[0]}})(),$=()=>({regex:new RegExp("[\\\\/]","s"),children:[]}),St=i(/\\./,l),Bt=i(/[$.*+?^(){}[\]\|]/,t=>l(`\\${t}`)),Ct=i(/[\\\/]/,$),bt=i(/[^$.*+?^(){}[\]\|\\\/]+/,l),Zt=i(/^(?:!!)*!(.*)$/,(t,e)=>l(`(?!^${S.compile(e).source}$).*?`)),qt=i(/^(!!)+/),Ot=p([Zt,qt]),Wt=i(/\/(\*\*\/)+/,()=>A([w([$(),l(".+?"),$()]),$()])),_t=i(/^(\*\*\/)+/,()=>A([l("^"),w([l(".*?"),$()])])),Ft=i(/\/(\*\*)$/,()=>A([w([$(),l(".*?")]),l("$")])),Lt=i(/\*\*/,()=>l(".*?")),V=p([Wt,_t,Ft,Lt]),Ut=i(/\*\/(?!\*\*\/|\*$)/,()=>w([l("[^\\\\/]*?"),$()])),Jt=i(/\*/,()=>l("[^\\\\/]*")),X=p([Ut,Jt]),Y=i("?",()=>l("[^\\\\/]")),Tt=i("[",g),Vt=i("]",g),Xt=i(/[!^]/,"^\\\\/"),Yt=i(/[a-z]-[a-z]|[0-9]-[0-9]/i,g),Dt=i(/\\./,g),Gt=i(/[$.*+?^(){}[\|]/,t=>`\\${t}`),Ht=i(/[\\\/]/,"\\\\/"),Kt=i(/[^$.*+?^(){}[\]\|\\\/]+/,g),Pt=p([Dt,Gt,Ht,Yt,Kt]),D=m([Tt,F(Xt),E(Pt),Vt],t=>l(t.join(""))),Qt=i("{","(?:"),Nt=i("}",")"),te=i(/(\d+)\.\.(\d+)/,(t,e,n)=>It(+e,+n,Math.min(e.length,n.length)).join("|")),ee=i(/([a-z]+)\.\.([a-z]+)/,(t,e,n)=>T(e,n).join("|")),ne=i(/([A-Z]+)\.\.([A-Z]+)/,(t,e,n)=>T(e.toLowerCase(),n.toLowerCase()).join("|").toUpperCase()),re=p([te,ee,ne]),G=m([Qt,re,Nt],t=>l(t.join(""))),oe=i("{"),se=i("}"),ue=i(","),ie=i(/\\./,l),ce=i(/[$.*+?^(){[\]\|]/,t=>l(`\\${t}`)),le=i(/[\\\/]/,$),ae=i(/[^$.*+?^(){}[\]\|\\\/,]+/,l),fe=U(()=>H),pe=i("",()=>l("(?:)")),$e=xt(p([V,X,Y,D,G,fe,ie,ce,le,ae]),w),C=p([$e,pe]),H=m([oe,F(m([C,E(m([ue,C]))])),se],A),he=E(p([Ot,V,X,Y,D,G,H,St,Bt,Ct,bt]),w),de=t=>W(t,he,{memoization:!1})[0],S=(t,e,n)=>S.compile(t,n).test(e);S.compile=(()=>{const t=Mt((n,r)=>rt(de(zt(n)),r)),e=wt((n,r)=>ot(n.map(o=>t(o,r))));return(n,r)=>mt(n)?t(n,r):e(n,r)})();export{S as o};

package/dist/packem_shared/index-DMefdF51.js

@@ -1 +0,0 @@
-import{m as h,g as k,D as $,f as S}from"./provenance-DMuEftgc.js";import{Z as d,D as N}from"../packem_chunks/bin.js";import{W as R}from"./build-scripts-CCCi8U66.js";import{n as v}from"./license-t5KnNX6v.js";import{A as L,B as D,v as A}from"./index-BDmTbWX1.js";import{L as w}from"./dependency-scan-BDTH898x.js";const m={CRITICAL:0,HIGH:1,LOW:3,MODERATE:2,UNKNOWN:4},ne=(t,e)=>{const n=m[(t.vulnerability.severity??"UNKNOWN").toUpperCase()]??4,s=m[(e.vulnerability.severity??"UNKNOWN").toUpperCase()]??4;return n-s||t.packageName.localeCompare(e.packageName)||t.packageVersion.localeCompare(e.packageVersion)},P=(t,e)=>{const n=m[e.toUpperCase()]??2;return(m[t.toUpperCase()]??4)<=n},b=["firstSeen","installScripts","license","malware","publisherChange","score","unexpectedDeps","vulnerability"],g=6e4,W=(t,e,n)=>{for(const s of n)if(s===t||s===`${t}@${e}`||s.endsWith("*")&&t.startsWith(s.slice(0,-1)))return!0;return!1},x=async(t,e)=>{const n=e.security?.policies?.firstSeen;if(n?.minutes===void 0||n.minutes<=0)return[];const{minutes:s}=n,a=n.exclude??[],r=e.security?.acceptedRisks,c=s*g,i=Date.now();return(await h(t.packages,$,async o=>{if(W(o.name,o.version,a))return;const l=await k(o.name,{workspaceRoot:t.workspaceRoot});if(l===void 0)return;const p=l.time?.[o.version];if(p===void 0)return;const u=Date.parse(p);if(Number.isNaN(u))return;const f=i-u;if(f>=c)return;const y=Math.max(0,Math.floor(f/g));return{acceptedRisk:d(o.name,o.version,r,"firstSeen"),data:{ageMinutes:y,minimumMinutes:s,publishedAt:p},packageName:o.name,policy:"firstSeen",reason:`${o.name}@${o.version} was published ${String(y)} min ago — below the ${String(s)} min firstSeen cooldown.`,severity:"block",version:o.version}})).filter(o=>o!==void 0)},O=(t,e)=>{const n=e.security?.policies?.installScripts;if(!n)return[];const s=n.allow??{},a=n.strict===!0;if(!a&&Object.keys(s).length===0)return[];const r=R(t.workspaceRoot,s,{pinVersions:e.security?.pinVersions===!0});if(r.unapproved.length===0)return[];const c=e.security?.acceptedRisks,i=a?"block":"warn";return r.unapproved.map(o=>({acceptedRisk:d(o.name,o.version??"*",c,"installScripts"),data:{hooks:o.hooks},packageName:o.name,policy:"installScripts",reason:`${o.name}${o.version?`@${o.version}`:""} declares unapproved build script(s): ${o.hooks.join(", ")}`,severity:i,version:o.version??"*"}))},U=new Set(["AND","OR"]),E=t=>{const e=t.replaceAll("("," ").replaceAll(")"," ").split(/\s+/).map(a=>a.trim()).filter(a=>a.length>0),n=[];let s=!1;for(const a of e){const r=a.toUpperCase();if(s){s=!1;continue}if(r==="WITH"){s=!0;continue}if(U.has(r))continue;const c=a.endsWith("+"),i=c?a.slice(0,-1):a,o=v(i)??i;n.push(o),c&&n.push(`${o}-or-later`)}return n},F=t=>{if(typeof t.license=="string"){const e=t.license.trim();return e.length>0?e:void 0}if(t.license&&typeof t.license=="object"&&typeof t.license.type=="string"){const e=t.license.type.trim();if(e.length>0)return e}if(Array.isArray(t.licenses)&&t.licenses.length>0){const e=t.licenses.map(n=>n&&typeof n.type=="string"?n.type.trim():"").filter(n=>n.length>0);if(e.length>0)return e.length===1?e[0]:`(${e.join(" OR ")})`}},I=(t,e)=>{if(e.length===0)return;const n=new Set(e.map(s=>v(s)??s).map(s=>s.toLowerCase()));for(const s of t)if(n.has(s.toLowerCase()))return s},M=(t,e)=>{if(e.length===0)return;const n=new Set(e.map(s=>v(s)??s).map(s=>s.toLowerCase()));for(const s of t)if(!n.has(s.toLowerCase()))return s},V=(t,e)=>{const n=e.security?.policies?.license;if(!n)return[];const s=n.allow??[],a=n.deny??[];if(s.length===0&&a.length===0)return[];const r=e.security?.acceptedRisks,c=[];for(const i of t.packages){const o=t.manifestData?.get(`${i.name}@${i.version}`),l=o?F(o):void 0;if(!l){s.length>0&&c.push({acceptedRisk:d(i.name,i.version,r,"license"),data:{declaredLicense:null},packageName:i.name,policy:"license",reason:`${i.name}@${i.version} declares no license; allow-list mode requires one of: ${s.join(", ")}`,severity:"block",version:i.version});continue}const p=E(l),u=I(p,a);if(u){c.push({acceptedRisk:d(i.name,i.version,r,"license"),data:{declaredLicense:l,deniedLicense:u},packageName:i.name,policy:"license",reason:`${i.name}@${i.version} uses denied license '${u}' (declared: ${l})`,severity:"block",version:i.version});continue}const f=M(p,s);f&&c.push({acceptedRisk:d(i.name,i.version,r,"license"),data:{allowList:s,declaredLicense:l,unallowedLicense:f},packageName:i.name,policy:"license",reason:`${i.name}@${i.version} uses license '${f}' which is not on the allow-list (declared: ${l})`,severity:"block",version:i.version})}return c},j=6e4,_=(t,e,n)=>{for(const s of n)if(s===t||s===`${t}@${e}`||s.endsWith("*")&&t.startsWith(s.slice(0,-1)))return!0;return!1},H=async(t,e)=>{const n=e.security?.policies?.publisherChange;if(n?.mode!=="no-downgrade")return[];const s=n.exclude??[],a=typeof n.ignoreAfter=="number"?n.ignoreAfter*j:void 0,r=e.security?.acceptedRisks,c=Date.now();return(await h(t.packages,$,async i=>{if(_(i.name,i.version,s))return;const o=await k(i.name,{workspaceRoot:t.workspaceRoot});if(o===void 0)return;if(a!==void 0){const p=o.time?.[i.version],u=p===void 0?Number.NaN:Date.parse(p);if(!Number.isNaN(u)&&c-u>a)return}if(o.versions[i.version]?.dist?.attestations?.provenance!==void 0)return;const l=S(o,i.version);if(l!==void 0)return{acceptedRisk:d(i.name,i.version,r,"publisherChange"),data:{priorVersionWithProvenance:l},packageName:i.name,policy:"publisherChange",reason:`${i.name}@${i.version} dropped the provenance attestation that ${i.name}@${l} carried — publisher trust downgrade.`,severity:"block",version:i.version}})).filter(i=>i!==void 0)},T=t=>{for(const e of Object.values(w))for(const n of[e.file,...e.aliases??[]])if(t===n||t.endsWith(`/${n}`)||t.endsWith(`.${n}`))return e.type},K=(t,e,n)=>{const s=L(e)?e:D(t,e);let a;try{a=A(s)}catch{return}const r=T(s)??w[n]?.type;if(!r)return;const c=N(a,r);if(c.length===0)return;const i=new Set;for(const o of c)i.add(`${o.name}@${o.version}`);return i},z=(t,e)=>{for(const n of e)if(n===t||n.endsWith("*")&&t.startsWith(n.slice(0,-1)))return!0;return!1},Y=(t,e)=>{const n=e.security?.policies?.unexpectedDeps;if(!n)return[];const s=n.allow??[],a=n.baselineLockfile;if(s.length===0&&!a)return[];const r=a?K(t.workspaceRoot,a,t.packageManager):void 0,c=e.security?.acceptedRisks,i=[];for(const o of t.packages){const l=s.length===0||z(o.name,s),p=r?r.has(`${o.name}@${o.version}`):!0;if(l&&p)continue;const u=[],f={};l||(u.push(`not on allow-list (${s.length} entr${s.length===1?"y":"ies"})`),f.allowList=s),!p&&r&&(u.push(`not present in baseline lockfile (${a})`),f.baselineLockfile=a),i.push({acceptedRisk:d(o.name,o.version,c,"unexpectedDeps"),data:f,packageName:o.name,policy:"unexpectedDeps",reason:`${o.name}@${o.version} is unexpected: ${u.join("; ")}`,severity:"block",version:o.version})}return i},q=(t,e)=>{if(!t.osvFindings||t.osvFindings.size===0)return[];const n=e.security?.policies?.vulnerability?.failOn,s=e.security?.acceptedRisks,a=[];for(const r of t.packages){const c=t.osvFindings.get(r.name);if(!(!c||c.length===0))for(const i of c){const o=n?P(i.severity,n)?"block":"warn":"info";a.push({acceptedRisk:d(r.name,r.version,s,"vulnerability"),data:{advisoryId:i.id,aliases:i.aliases??[],cvssScore:i.cvssScore,fixedVersions:i.fixedVersions,severity:i.severity,summary:i.summary},packageName:r.name,policy:"vulnerability",reason:`${i.severity} ${i.id} affects ${r.name}@${r.version}: ${i.summary}`,severity:o,version:r.version})}}return a},C=[{evaluate:q,isConfigured:t=>t.security?.policies?.vulnerability!==void 0,name:"vulnerability",offlineSupported:!0,surfaces:["audit","doctor"]},{evaluate:V,isConfigured:t=>{const e=t.security?.policies?.license;return!!(e&&(e.allow&&e.allow.length>0||e.deny&&e.deny.length>0))},name:"license",offlineSupported:!0,surfaces:["audit","doctor","install"]},{evaluate:O,isConfigured:t=>{const e=t.security?.policies?.installScripts;return!!(e&&(e.allow&&Object.keys(e.allow).length>0||e.strict===!0))},name:"installScripts",offlineSupported:!0,surfaces:["audit","doctor","install"]},{evaluate:Y,isConfigured:t=>{const e=t.security?.policies?.unexpectedDeps;return!!(e&&(e.allow&&e.allow.length>0||typeof e.baselineLockfile=="string"))},name:"unexpectedDeps",offlineSupported:!0,surfaces:["audit","doctor","install"]},{evaluate:x,isConfigured:t=>{const e=t.security?.policies?.firstSeen?.minutes;return typeof e=="number"&&e>0},name:"firstSeen",offlineSupported:!1,surfaces:["audit","doctor","install"]},{evaluate:H,isConfigured:t=>t.security?.policies?.publisherChange?.mode==="no-downgrade",name:"publisherChange",offlineSupported:!1,surfaces:["audit","doctor","install"]}],B=(t,e,n)=>C.filter(s=>s.surfaces.includes(t)?n!==void 0?n.has(s.name):s.isConfigured(e):!1),se=async(t,e,n)=>{const s=B(e,n.visConfig,n.enabledPolicies),a=[];for(const r of s){if(t.offline&&!r.offlineSupported){a.push({packageName:"*",policy:r.name,reason:`policy.${r.name} skipped: requires network (--offline)`,severity:"info",version:"*"});continue}try{const c=await r.evaluate(t,n.visConfig);a.push(...c)}catch(c){const i=c instanceof Error?c.message:String(c);a.push({packageName:"*",policy:r.name,reason:`policy.${r.name} failed: ${i}`,severity:"info",version:"*"})}}return a},G=(()=>{const t=new Map;for(const e of b)t.set(e.toLowerCase(),e);return t})(),ie=()=>C.map(t=>t.name),oe=(t,e)=>{if(t===void 0)return;const n=t.trim().toLowerCase();if(n===""||n==="none")return new Set;if(n==="all")return new Set(b);const s=new Set;for(const a of t.split(",").map(r=>r.trim()).filter(r=>r.length>0)){const r=a.replace(/^_+/,"").replaceAll(/_+([a-z])/g,(i,o)=>o.toUpperCase()),c=G.get(r.toLowerCase());c===void 0?e?.(a):s.add(c)}return s};export{ne as c,se as e,ie as g,oe as p,P as s};

package/dist/packem_shared/pm-runner-pVihAfxV.js

@@ -1 +0,0 @@
-import{createRequire as vt}from"node:module";import{f as ar,m as ee,H as ir,j as or,v as It}from"./index-BDmTbWX1.js";import{g as Lt}from"./_commonjsHelpers-B5Y90VFO.js";import{detectPackageManager as kt,resolveAdd as St,resolveRemove as Ot,resolveDlx as Nt,whichBin as yt,resolveInstall as At,execPmCommandInteractive as Tt,resolveDedupe as Ct,resolveWhy as Pt,resolveLink as qt,resolveUnlink as jt,resolveExec as _t,resolvePmCommand as Dt}from"#native";const Rt=vt(import.meta.url),H=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,wt=e=>{if(typeof H<"u"&&H.versions&&H.versions.node){const[r,t]=H.versions.node.split(".").map(Number);if(r>22||r===22&&t>=3||r===20&&t>=16)return H.getBuiltinModule(e)}return Rt(e)},{spawn:$t,spawnSync:bt}=wt("node:child_process");var Q={exports:{}},he,gr;function Z(){return gr||(gr=1,he={MAX_LENGTH:256,MAX_SAFE_COMPONENT_LENGTH:16,MAX_SAFE_BUILD_LENGTH:250,MAX_SAFE_INTEGER:Number.MAX_SAFE_INTEGER||9007199254740991,RELEASE_TYPES:["major","premajor","minor","preminor","patch","prepatch","prerelease"],SEMVER_SPEC_VERSION:"2.0.0",FLAG_INCLUDE_PRERELEASE:1,FLAG_LOOSE:2}),he}var fe,Er;function re(){return Er||(Er=1,fe=process.env&&process.env.NODE_DEBUG&&/\bsemver\b/i.test(process.env.NODE_DEBUG)?(...r)=>console.error("SEMVER",...r):()=>{}),fe}var vr;function K(){return vr||(vr=1,(function(e,r){const{MAX_SAFE_COMPONENT_LENGTH:t,MAX_SAFE_BUILD_LENGTH:n,MAX_LENGTH:a}=Z(),o=re();r=e.exports={};const u=r.re=[],l=r.safeRe=[],i=r.src=[],d=r.safeSrc=[],s=r.t={};let p=0;const c="[a-zA-Z0-9-]",m=[["\\s",1],["\\d",a],[c,n]],$=L=>{for(const[N,P]of m)L=L.split(`${N}*`).join(`${N}{0,${P}}`).split(`${N}+`).join(`${N}{1,${P}}`);return L},f=(L,N,P)=>{const _=$(N),q=p++;o(L,q,N),s[L]=q,i[q]=N,d[q]=_,u[q]=new RegExp(N,P?"g":void 0),l[q]=new RegExp(_,P?"g":void 0)};f("NUMERICIDENTIFIER","0|[1-9]\\d*"),f("NUMERICIDENTIFIERLOOSE","\\d+"),f("NONNUMERICIDENTIFIER",`\\d*[a-zA-Z-]${c}*`),f("MAINVERSION",`(${i[s.NUMERICIDENTIFIER]})\\.(${i[s.NUMERICIDENTIFIER]})\\.(${i[s.NUMERICIDENTIFIER]})`),f("MAINVERSIONLOOSE",`(${i[s.NUMERICIDENTIFIERLOOSE]})\\.(${i[s.NUMERICIDENTIFIERLOOSE]})\\.(${i[s.NUMERICIDENTIFIERLOOSE]})`),f("PRERELEASEIDENTIFIER",`(?:${i[s.NONNUMERICIDENTIFIER]}|${i[s.NUMERICIDENTIFIER]})`),f("PRERELEASEIDENTIFIERLOOSE",`(?:${i[s.NONNUMERICIDENTIFIER]}|${i[s.NUMERICIDENTIFIERLOOSE]})`),f("PRERELEASE",`(?:-(${i[s.PRERELEASEIDENTIFIER]}(?:\\.${i[s.PRERELEASEIDENTIFIER]})*))`),f("PRERELEASELOOSE",`(?:-?(${i[s.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${i[s.PRERELEASEIDENTIFIERLOOSE]})*))`),f("BUILDIDENTIFIER",`${c}+`),f("BUILD",`(?:\\+(${i[s.BUILDIDENTIFIER]}(?:\\.${i[s.BUILDIDENTIFIER]})*))`),f("FULLPLAIN",`v?${i[s.MAINVERSION]}${i[s.PRERELEASE]}?${i[s.BUILD]}?`),f("FULL",`^${i[s.FULLPLAIN]}$`),f("LOOSEPLAIN",`[v=\\s]*${i[s.MAINVERSIONLOOSE]}${i[s.PRERELEASELOOSE]}?${i[s.BUILD]}?`),f("LOOSE",`^${i[s.LOOSEPLAIN]}$`),f("GTLT","((?:<|>)?=?)"),f("XRANGEIDENTIFIERLOOSE",`${i[s.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`),f("XRANGEIDENTIFIER",`${i[s.NUMERICIDENTIFIER]}|x|X|\\*`),f("XRANGEPLAIN",`[v=\\s]*(${i[s.XRANGEIDENTIFIER]})(?:\\.(${i[s.XRANGEIDENTIFIER]})(?:\\.(${i[s.XRANGEIDENTIFIER]})(?:${i[s.PRERELEASE]})?${i[s.BUILD]}?)?)?`),f("XRANGEPLAINLOOSE",`[v=\\s]*(${i[s.XRANGEIDENTIFIERLOOSE]})(?:\\.(${i[s.XRANGEIDENTIFIERLOOSE]})(?:\\.(${i[s.XRANGEIDENTIFIERLOOSE]})(?:${i[s.PRERELEASELOOSE]})?${i[s.BUILD]}?)?)?`),f("XRANGE",`^${i[s.GTLT]}\\s*${i[s.XRANGEPLAIN]}$`),f("XRANGELOOSE",`^${i[s.GTLT]}\\s*${i[s.XRANGEPLAINLOOSE]}$`),f("COERCEPLAIN",`(^|[^\\d])(\\d{1,${t}})(?:\\.(\\d{1,${t}}))?(?:\\.(\\d{1,${t}}))?`),f("COERCE",`${i[s.COERCEPLAIN]}(?:$|[^\\d])`),f("COERCEFULL",i[s.COERCEPLAIN]+`(?:${i[s.PRERELEASE]})?(?:${i[s.BUILD]})?(?:$|[^\\d])`),f("COERCERTL",i[s.COERCE],!0),f("COERCERTLFULL",i[s.COERCEFULL],!0),f("LONETILDE","(?:~>?)"),f("TILDETRIM",`(\\s*)${i[s.LONETILDE]}\\s+`,!0),r.tildeTrimReplace="$1~",f("TILDE",`^${i[s.LONETILDE]}${i[s.XRANGEPLAIN]}$`),f("TILDELOOSE",`^${i[s.LONETILDE]}${i[s.XRANGEPLAINLOOSE]}$`),f("LONECARET","(?:\\^)"),f("CARETTRIM",`(\\s*)${i[s.LONECARET]}\\s+`,!0),r.caretTrimReplace="$1^",f("CARET",`^${i[s.LONECARET]}${i[s.XRANGEPLAIN]}$`),f("CARETLOOSE",`^${i[s.LONECARET]}${i[s.XRANGEPLAINLOOSE]}$`),f("COMPARATORLOOSE",`^${i[s.GTLT]}\\s*(${i[s.LOOSEPLAIN]})$|^$`),f("COMPARATOR",`^${i[s.GTLT]}\\s*(${i[s.FULLPLAIN]})$|^$`),f("COMPARATORTRIM",`(\\s*)${i[s.GTLT]}\\s*(${i[s.LOOSEPLAIN]}|${i[s.XRANGEPLAIN]})`,!0),r.comparatorTrimReplace="$1$2$3",f("HYPHENRANGE",`^\\s*(${i[s.XRANGEPLAIN]})\\s+-\\s+(${i[s.XRANGEPLAIN]})\\s*$`),f("HYPHENRANGELOOSE",`^\\s*(${i[s.XRANGEPLAINLOOSE]})\\s+-\\s+(${i[s.XRANGEPLAINLOOSE]})\\s*$`),f("STAR","(<|>)?=?\\s*\\*"),f("GTE0","^\\s*>=\\s*0\\.0\\.0\\s*$"),f("GTE0PRE","^\\s*>=\\s*0\\.0\\.0-0\\s*$")})(Q,Q.exports)),Q.exports}var me,Rr;function ur(){if(Rr)return me;Rr=1;const e=Object.freeze({loose:!0}),r=Object.freeze({});return me=n=>n?typeof n!="object"?e:n:r,me}var de,wr;function ct(){if(wr)return de;wr=1;const e=/^[0-9]+$/,r=(n,a)=>{if(typeof n=="number"&&typeof a=="number")return n===a?0:n<a?-1:1;const o=e.test(n),u=e.test(a);return o&&u&&(n=+n,a=+a),n===a?0:o&&!u?-1:u&&!o?1:n<a?-1:1};return de={compareIdentifiers:r,rcompareIdentifiers:(n,a)=>r(a,n)},de}var ge,$r;function j(){if($r)return ge;$r=1;const e=re(),{MAX_LENGTH:r,MAX_SAFE_INTEGER:t}=Z(),{safeRe:n,t:a}=K(),o=ur(),{compareIdentifiers:u}=ct(),l=(d,s)=>{const p=s.split(".");if(p.length>d.length)return!1;for(let c=0;c<p.length;c++)if(u(d[c],p[c])!==0)return!1;return!0};class i{constructor(s,p){if(p=o(p),s instanceof i){if(s.loose===!!p.loose&&s.includePrerelease===!!p.includePrerelease)return s;s=s.version}else if(typeof s!="string")throw new TypeError(`Invalid version. Must be a string. Got type "${typeof s}".`);if(s.length>r)throw new TypeError(`version is longer than ${r} characters`);e("SemVer",s,p),this.options=p,this.loose=!!p.loose,this.includePrerelease=!!p.includePrerelease;const c=s.trim().match(p.loose?n[a.LOOSE]:n[a.FULL]);if(!c)throw new TypeError(`Invalid Version: ${s}`);if(this.raw=s,this.major=+c[1],this.minor=+c[2],this.patch=+c[3],this.major>t||this.major<0)throw new TypeError("Invalid major version");if(this.minor>t||this.minor<0)throw new TypeError("Invalid minor version");if(this.patch>t||this.patch<0)throw new TypeError("Invalid patch version");c[4]?this.prerelease=c[4].split(".").map(m=>{if(/^[0-9]+$/.test(m)){const $=+m;if($>=0&&$<t)return $}return m}):this.prerelease=[],this.build=c[5]?c[5].split("."):[],this.format()}format(){return this.version=`${this.major}.${this.minor}.${this.patch}`,this.prerelease.length&&(this.version+=`-${this.prerelease.join(".")}`),this.version}toString(){return this.version}compare(s){if(e("SemVer.compare",this.version,this.options,s),!(s instanceof i)){if(typeof s=="string"&&s===this.version)return 0;s=new i(s,this.options)}return s.version===this.version?0:this.compareMain(s)||this.comparePre(s)}compareMain(s){return s instanceof i||(s=new i(s,this.options)),this.major<s.major?-1:this.major>s.major?1:this.minor<s.minor?-1:this.minor>s.minor?1:this.patch<s.patch?-1:this.patch>s.patch?1:0}comparePre(s){if(s instanceof i||(s=new i(s,this.options)),this.prerelease.length&&!s.prerelease.length)return-1;if(!this.prerelease.length&&s.prerelease.length)return 1;if(!this.prerelease.length&&!s.prerelease.length)return 0;let p=0;do{const c=this.prerelease[p],m=s.prerelease[p];if(e("prerelease compare",p,c,m),c===void 0&&m===void 0)return 0;if(m===void 0)return 1;if(c===void 0)return-1;if(c!==m)return u(c,m)}while(++p)}compareBuild(s){s instanceof i||(s=new i(s,this.options));let p=0;do{const c=this.build[p],m=s.build[p];if(e("build compare",p,c,m),c===void 0&&m===void 0)return 0;if(m===void 0)return 1;if(c===void 0)return-1;if(c!==m)return u(c,m)}while(++p)}inc(s,p,c){if(s.startsWith("pre")){if(!p&&c===!1)throw new Error("invalid increment argument: identifier is empty");if(p){const m=`-${p}`.match(this.options.loose?n[a.PRERELEASELOOSE]:n[a.PRERELEASE]);if(!m||m[1]!==p)throw new Error(`invalid identifier: ${p}`)}}switch(s){case"premajor":this.prerelease.length=0,this.patch=0,this.minor=0,this.major++,this.inc("pre",p,c);break;case"preminor":this.prerelease.length=0,this.patch=0,this.minor++,this.inc("pre",p,c);break;case"prepatch":this.prerelease.length=0,this.inc("patch",p,c),this.inc("pre",p,c);break;case"prerelease":this.prerelease.length===0&&this.inc("patch",p,c),this.inc("pre",p,c);break;case"release":if(this.prerelease.length===0)throw new Error(`version ${this.raw} is not a prerelease`);this.prerelease.length=0;break;case"major":(this.minor!==0||this.patch!==0||this.prerelease.length===0)&&this.major++,this.minor=0,this.patch=0,this.prerelease=[];break;case"minor":(this.patch!==0||this.prerelease.length===0)&&this.minor++,this.patch=0,this.prerelease=[];break;case"patch":this.prerelease.length===0&&this.patch++,this.prerelease=[];break;case"pre":{const m=Number(c)?1:0;if(this.prerelease.length===0)this.prerelease=[m];else{let $=this.prerelease.length;for(;--$>=0;)typeof this.prerelease[$]=="number"&&(this.prerelease[$]++,$=-2);if($===-1){if(p===this.prerelease.join(".")&&c===!1)throw new Error("invalid increment argument: identifier already exists");this.prerelease.push(m)}}if(p){let $=[p,m];if(c===!1&&($=[p]),l(this.prerelease,p)){const f=this.prerelease[p.split(".").length];isNaN(f)&&(this.prerelease=$)}else this.prerelease=$}break}default:throw new Error(`invalid increment argument: ${s}`)}return this.raw=this.format(),this.build.length&&(this.raw+=`+${this.build.join(".")}`),this}}return ge=i,ge}var Ee,br;function U(){if(br)return Ee;br=1;const e=j();return Ee=(t,n,a=!1)=>{if(t instanceof e)return t;try{return new e(t,n)}catch(o){if(!a)return null;throw o}},Ee}var ve,Ir;function Mt(){if(Ir)return ve;Ir=1;const e=U();return ve=(t,n)=>{const a=e(t,n);return a?a.version:null},ve}var Re,Lr;function Gt(){if(Lr)return Re;Lr=1;const e=U();return Re=(t,n)=>{const a=e(t.trim().replace(/^[=v]+/,""),n);return a?a.version:null},Re}var we,kr;function Ft(){if(kr)return we;kr=1;const e=j();return we=(t,n,a,o,u)=>{typeof a=="string"&&(u=o,o=a,a=void 0);try{return new e(t instanceof e?t.version:t,a).inc(n,o,u).version}catch{return null}},we}var $e,Sr;function Ut(){if(Sr)return $e;Sr=1;const e=U();return $e=(t,n)=>{const a=e(t,null,!0),o=e(n,null,!0),u=a.compare(o);if(u===0)return null;const l=u>0,i=l?a:o,d=l?o:a,s=!!i.prerelease.length;if(d.prerelease.length&&!s){if(!d.patch&&!d.minor)return"major";if(d.compareMain(i)===0)return d.minor&&!d.patch?"minor":"patch"}const p=s?"pre":"";return a.major!==o.major?p+"major":a.minor!==o.minor?p+"minor":a.patch!==o.patch?p+"patch":"prerelease"},$e}var be,Or;function xt(){if(Or)return be;Or=1;const e=j();return be=(t,n)=>new e(t,n).major,be}var Ie,Nr;function Xt(){if(Nr)return Ie;Nr=1;const e=j();return Ie=(t,n)=>new e(t,n).minor,Ie}var Le,yr;function Vt(){if(yr)return Le;yr=1;const e=j();return Le=(t,n)=>new e(t,n).patch,Le}var ke,Ar;function Bt(){if(Ar)return ke;Ar=1;const e=U();return ke=(t,n)=>{const a=e(t,n);return a&&a.prerelease.length?a.prerelease:null},ke}var Se,Tr;function M(){if(Tr)return Se;Tr=1;const e=j();return Se=(t,n,a)=>new e(t,a).compare(new e(n,a)),Se}var Oe,Cr;function Wt(){if(Cr)return Oe;Cr=1;const e=M();return Oe=(t,n,a)=>e(n,t,a),Oe}var Ne,Pr;function Ht(){if(Pr)return Ne;Pr=1;const e=M();return Ne=(t,n)=>e(t,n,!0),Ne}var ye,qr;function pr(){if(qr)return ye;qr=1;const e=j();return ye=(t,n,a)=>{const o=new e(t,a),u=new e(n,a);return o.compare(u)||o.compareBuild(u)},ye}var Ae,jr;function Yt(){if(jr)return Ae;jr=1;const e=pr();return Ae=(t,n)=>t.sort((a,o)=>e(a,o,n)),Ae}var Te,_r;function zt(){if(_r)return Te;_r=1;const e=pr();return Te=(t,n)=>t.sort((a,o)=>e(o,a,n)),Te}var Ce,Dr;function te(){if(Dr)return Ce;Dr=1;const e=M();return Ce=(t,n,a)=>e(t,n,a)>0,Ce}var Pe,Mr;function cr(){if(Mr)return Pe;Mr=1;const e=M();return Pe=(t,n,a)=>e(t,n,a)<0,Pe}var qe,Gr;function lt(){if(Gr)return qe;Gr=1;const e=M();return qe=(t,n,a)=>e(t,n,a)===0,qe}var je,Fr;function ht(){if(Fr)return je;Fr=1;const e=M();return je=(t,n,a)=>e(t,n,a)!==0,je}var _e,Ur;function lr(){if(Ur)return _e;Ur=1;const e=M();return _e=(t,n,a)=>e(t,n,a)>=0,_e}var De,xr;function hr(){if(xr)return De;xr=1;const e=M();return De=(t,n,a)=>e(t,n,a)<=0,De}var Me,Xr;function ft(){if(Xr)return Me;Xr=1;const e=lt(),r=ht(),t=te(),n=lr(),a=cr(),o=hr();return Me=(l,i,d,s)=>{switch(i){case"===":return typeof l=="object"&&(l=l.version),typeof d=="object"&&(d=d.version),l===d;case"!==":return typeof l=="object"&&(l=l.version),typeof d=="object"&&(d=d.version),l!==d;case"":case"=":case"==":return e(l,d,s);case"!=":return r(l,d,s);case">":return t(l,d,s);case">=":return n(l,d,s);case"<":return a(l,d,s);case"<=":return o(l,d,s);default:throw new TypeError(`Invalid operator: ${i}`)}},Me}var Ge,Vr;function Jt(){if(Vr)return Ge;Vr=1;const e=j(),r=U(),{safeRe:t,t:n}=K();return Ge=(o,u)=>{if(o instanceof e)return o;if(typeof o=="number"&&(o=String(o)),typeof o!="string")return null;u=u||{};let l=null;if(!u.rtl)l=o.match(u.includePrerelease?t[n.COERCEFULL]:t[n.COERCE]);else{const m=u.includePrerelease?t[n.COERCERTLFULL]:t[n.COERCERTL];let $;for(;($=m.exec(o))&&(!l||l.index+l[0].length!==o.length);)(!l||$.index+$[0].length!==l.index+l[0].length)&&(l=$),m.lastIndex=$.index+$[1].length+$[2].length;m.lastIndex=-1}if(l===null)return null;const i=l[2],d=l[3]||"0",s=l[4]||"0",p=u.includePrerelease&&l[5]?`-${l[5]}`:"",c=u.includePrerelease&&l[6]?`+${l[6]}`:"";return r(`${i}.${d}.${s}${p}${c}`,u)},Ge}var Fe,Br;function Zt(){if(Br)return Fe;Br=1;const e=U(),r=Z(),t=j(),n=(l,i,d)=>{if(!r.RELEASE_TYPES.includes(i))return null;const s=a(l,d);return s&&o(s,i)},a=(l,i)=>{const d=l instanceof t?l.version:l;return e(d,i)},o=(l,i)=>{if(u(i))return l.version;switch(l.prerelease=[],i){case"major":l.minor=0,l.patch=0;break;case"minor":l.patch=0;break}return l.format()},u=l=>l.startsWith("pre");return Fe=n,Fe}var Ue,Wr;function Kt(){if(Wr)return Ue;Wr=1;class e{constructor(){this.max=1e3,this.map=new Map}get(t){const n=this.map.get(t);if(n!==void 0)return this.map.delete(t),this.map.set(t,n),n}delete(t){return this.map.delete(t)}set(t,n){if(!this.delete(t)&&n!==void 0){if(this.map.size>=this.max){const a=this.map.keys().next().value;this.delete(a)}this.map.set(t,n)}return this}}return Ue=e,Ue}var xe,Hr;function G(){if(Hr)return xe;Hr=1;const e=/\s+/g;class r{constructor(h,v){if(v=a(v),h instanceof r)return h.loose===!!v.loose&&h.includePrerelease===!!v.includePrerelease?h:new r(h.raw,v);if(h instanceof o)return this.raw=h.value,this.set=[[h]],this.formatted=void 0,this;if(this.options=v,this.loose=!!v.loose,this.includePrerelease=!!v.includePrerelease,this.raw=h.trim().replace(e," "),this.set=this.raw.split("||").map(R=>this.parseRange(R.trim())).filter(R=>R.length),!this.set.length)throw new TypeError(`Invalid SemVer Range: ${this.raw}`);if(this.set.length>1){const R=this.set[0];if(this.set=this.set.filter(w=>!N(w[0])),this.set.length===0)this.set=[R];else if(this.set.length>1){for(const w of this.set)if(w.length===1&&P(w[0])){this.set=[w];break}}}this.formatted=void 0}get range(){if(this.formatted===void 0){this.formatted="";for(let h=0;h<this.set.length;h++){h>0&&(this.formatted+="||");const v=this.set[h];for(let R=0;R<v.length;R++)R>0&&(this.formatted+=" "),this.formatted+=v[R].toString().trim()}}return this.formatted}format(){return this.range}toString(){return this.range}parseRange(h){h=h.replace(L,"");const v=((this.options.includePrerelease&&$)|(this.options.loose&&f))+":"+h,R=n.get(v);if(R)return R;const w=this.options.loose,E=w?i[s.HYPHENRANGELOOSE]:i[s.HYPHENRANGE];h=h.replace(E,ce(this.options.includePrerelease)),u("hyphen replace",h),h=h.replace(i[s.COMPARATORTRIM],p),u("comparator trim",h),h=h.replace(i[s.TILDETRIM],c),u("tilde trim",h),h=h.replace(i[s.CARETTRIM],m),u("caret trim",h);let b=h.split(" ").map(T=>q(T,this.options)).join(" ").split(/\s+/).map(T=>pe(T,this.options));w&&(b=b.filter(T=>(u("loose invalid filter",T,this.options),!!T.match(i[s.COMPARATORLOOSE])))),u("range list",b);const O=new Map,k=b.map(T=>new o(T,this.options));for(const T of k){if(N(T))return[T];O.set(T.value,T)}O.size>1&&O.has("")&&O.delete("");const A=[...O.values()];return n.set(v,A),A}intersects(h,v){if(!(h instanceof r))throw new TypeError("a Range is required");return this.set.some(R=>_(R,v)&&h.set.some(w=>_(w,v)&&R.every(E=>w.every(b=>E.intersects(b,v)))))}test(h){if(!h)return!1;if(typeof h=="string")try{h=new l(h,this.options)}catch{return!1}for(let v=0;v<this.set.length;v++)if(le(this.set[v],h,this.options))return!0;return!1}}xe=r;const t=Kt(),n=new t,a=ur(),o=ne(),u=re(),l=j(),{safeRe:i,src:d,t:s,comparatorTrimReplace:p,tildeTrimReplace:c,caretTrimReplace:m}=K(),{FLAG_INCLUDE_PRERELEASE:$,FLAG_LOOSE:f}=Z(),L=new RegExp(d[s.BUILD],"g"),N=g=>g.value==="<0.0.0-0",P=g=>g.value==="",_=(g,h)=>{let v=!0;const R=g.slice();let w=R.pop();for(;v&&R.length;)v=R.every(E=>w.intersects(E,h)),w=R.pop();return v},q=(g,h)=>(g=g.replace(i[s.BUILD],""),u("comp",g,h),g=B(g,h),u("caret",g),g=C(g,h),u("tildes",g),g=ie(g,h),u("xrange",g),g=ue(g,h),u("stars",g),g),S=g=>!g||g.toLowerCase()==="x"||g==="*",y=(g,h,v)=>S(g)&&!S(h)||S(h)&&v&&!S(v),C=(g,h)=>g.trim().split(/\s+/).map(v=>I(v,h)).join(" "),I=(g,h)=>{const v=h.loose?i[s.TILDELOOSE]:i[s.TILDE];return g.replace(v,(R,w,E,b,O)=>{u("tilde",g,R,w,E,b,O);let k;return S(w)?k="":S(E)?k=`>=${w}.0.0 <${+w+1}.0.0-0`:S(b)?k=`>=${w}.${E}.0 <${w}.${+E+1}.0-0`:O?(u("replaceTilde pr",O),k=`>=${w}.${E}.${b}-${O} <${w}.${+E+1}.0-0`):k=`>=${w}.${E}.${b} <${w}.${+E+1}.0-0`,u("tilde return",k),k})},B=(g,h)=>g.trim().split(/\s+/).map(v=>ae(v,h)).join(" "),ae=(g,h)=>{u("caret",g,h);const v=h.loose?i[s.CARETLOOSE]:i[s.CARET],R=h.includePrerelease?"-0":"";return g.replace(v,(w,E,b,O,k)=>{u("caret",g,w,E,b,O,k);let A;return S(E)?A="":S(b)?A=`>=${E}.0.0${R} <${+E+1}.0.0-0`:S(O)?E==="0"?A=`>=${E}.${b}.0${R} <${E}.${+b+1}.0-0`:A=`>=${E}.${b}.0${R} <${+E+1}.0.0-0`:k?(u("replaceCaret pr",k),E==="0"?b==="0"?A=`>=${E}.${b}.${O}-${k} <${E}.${b}.${+O+1}-0`:A=`>=${E}.${b}.${O}-${k} <${E}.${+b+1}.0-0`:A=`>=${E}.${b}.${O}-${k} <${+E+1}.0.0-0`):(u("no pr"),E==="0"?b==="0"?A=`>=${E}.${b}.${O} <${E}.${b}.${+O+1}-0`:A=`>=${E}.${b}.${O} <${E}.${+b+1}.0-0`:A=`>=${E}.${b}.${O} <${+E+1}.0.0-0`),u("caret return",A),A})},ie=(g,h)=>(u("replaceXRanges",g,h),g.split(/\s+/).map(v=>oe(v,h)).join(" ")),oe=(g,h)=>{g=g.trim();const v=h.loose?i[s.XRANGELOOSE]:i[s.XRANGE];return g.replace(v,(R,w,E,b,O,k)=>{if(u("xRange",g,R,w,E,b,O,k),y(E,b,O))return g;const A=S(E),T=A||S(b),x=T||S(O),W=x;return w==="="&&W&&(w=""),k=h.includePrerelease?"-0":"",A?w===">"||w==="<"?R="<0.0.0-0":R="*":w&&W?(T&&(b=0),O=0,w===">"?(w=">=",T?(E=+E+1,b=0,O=0):(b=+b+1,O=0)):w==="<="&&(w="<",T?E=+E+1:b=+b+1),w==="<"&&(k="-0"),R=`${w+E}.${b}.${O}${k}`):T?R=`>=${E}.0.0${k} <${+E+1}.0.0-0`:x&&(R=`>=${E}.${b}.0${k} <${E}.${+b+1}.0-0`),u("xRange return",R),R})},ue=(g,h)=>(u("replaceStars",g,h),g.trim().replace(i[s.STAR],"")),pe=(g,h)=>(u("replaceGTE0",g,h),g.trim().replace(i[h.includePrerelease?s.GTE0PRE:s.GTE0],"")),ce=g=>(h,v,R,w,E,b,O,k,A,T,x,W)=>(S(R)?v="":S(w)?v=`>=${R}.0.0${g?"-0":""}`:S(E)?v=`>=${R}.${w}.0${g?"-0":""}`:b?v=`>=${v}`:v=`>=${v}${g?"-0":""}`,S(A)?k="":S(T)?k=`<${+A+1}.0.0-0`:S(x)?k=`<${A}.${+T+1}.0-0`:W?k=`<=${A}.${T}.${x}-${W}`:g?k=`<${A}.${T}.${+x+1}-0`:k=`<=${k}`,`${v} ${k}`.trim()),le=(g,h,v)=>{for(let R=0;R<g.length;R++)if(!g[R].test(h))return!1;if(h.prerelease.length&&!v.includePrerelease){for(let R=0;R<g.length;R++)if(u(g[R].semver),g[R].semver!==o.ANY&&g[R].semver.prerelease.length>0){const w=g[R].semver;if(w.major===h.major&&w.minor===h.minor&&w.patch===h.patch)return!0}return!1}return!0};return xe}var Xe,Yr;function ne(){if(Yr)return Xe;Yr=1;const e=Symbol("SemVer ANY");class r{static get ANY(){return e}constructor(s,p){if(p=t(p),s instanceof r){if(s.loose===!!p.loose)return s;s=s.value}s=s.trim().split(/\s+/).join(" "),u("comparator",s,p),this.options=p,this.loose=!!p.loose,this.parse(s),this.semver===e?this.value="":this.value=this.operator+this.semver.version,u("comp",this)}parse(s){const p=this.options.loose?n[a.COMPARATORLOOSE]:n[a.COMPARATOR],c=s.match(p);if(!c)throw new TypeError(`Invalid comparator: ${s}`);this.operator=c[1]!==void 0?c[1]:"",this.operator==="="&&(this.operator=""),c[2]?this.semver=new l(c[2],this.options.loose):this.semver=e}toString(){return this.value}test(s){if(u("Comparator.test",s,this.options.loose),this.semver===e||s===e)return!0;if(typeof s=="string")try{s=new l(s,this.options)}catch{return!1}return o(s,this.operator,this.semver,this.options)}intersects(s,p){if(!(s instanceof r))throw new TypeError("a Comparator is required");return this.operator===""?this.value===""?!0:new i(s.value,p).test(this.value):s.operator===""?s.value===""?!0:new i(this.value,p).test(s.semver):(p=t(p),p.includePrerelease&&(this.value==="<0.0.0-0"||s.value==="<0.0.0-0")||!p.includePrerelease&&(this.value.startsWith("<0.0.0")||s.value.startsWith("<0.0.0"))?!1:!!(this.operator.startsWith(">")&&s.operator.startsWith(">")||this.operator.startsWith("<")&&s.operator.startsWith("<")||this.semver.version===s.semver.version&&this.operator.includes("=")&&s.operator.includes("=")||o(this.semver,"<",s.semver,p)&&this.operator.startsWith(">")&&s.operator.startsWith("<")||o(this.semver,">",s.semver,p)&&this.operator.startsWith("<")&&s.operator.startsWith(">")))}}Xe=r;const t=ur(),{safeRe:n,t:a}=K(),o=ft(),u=re(),l=j(),i=G();return Xe}var Ve,zr;function se(){if(zr)return Ve;zr=1;const e=G();return Ve=(t,n,a)=>{try{n=new e(n,a)}catch{return!1}return n.test(t)},Ve}var Be,Jr;function Qt(){if(Jr)return Be;Jr=1;const e=G();return Be=(t,n)=>new e(t,n).set.map(a=>a.map(o=>o.value).join(" ").trim().split(" ")),Be}var We,Zr;function en(){if(Zr)return We;Zr=1;const e=j(),r=G();return We=(n,a,o)=>{let u=null,l=null,i=null;try{i=new r(a,o)}catch{return null}return n.forEach(d=>{i.test(d)&&(!u||l.compare(d)===-1)&&(u=d,l=new e(u,o))}),u},We}var He,Kr;function rn(){if(Kr)return He;Kr=1;const e=j(),r=G();return He=(n,a,o)=>{let u=null,l=null,i=null;try{i=new r(a,o)}catch{return null}return n.forEach(d=>{i.test(d)&&(!u||l.compare(d)===1)&&(u=d,l=new e(u,o))}),u},He}var Ye,Qr;function tn(){if(Qr)return Ye;Qr=1;const e=j(),r=G(),t=te();return Ye=(a,o)=>{a=new r(a,o);let u=new e("0.0.0");if(a.test(u)||(u=new e("0.0.0-0"),a.test(u)))return u;u=null;for(let l=0;l<a.set.length;++l){const i=a.set[l];let d=null;i.forEach(s=>{const p=new e(s.semver.version);switch(s.operator){case">":p.prerelease.length===0?p.patch++:p.prerelease.push(0),p.raw=p.format();case"":case">=":(!d||t(p,d))&&(d=p);break;case"<":case"<=":break;default:throw new Error(`Unexpected operation: ${s.operator}`)}}),d&&(!u||t(u,d))&&(u=d)}return u&&a.test(u)?u:null},Ye}var ze,et;function nn(){if(et)return ze;et=1;const e=G();return ze=(t,n)=>{try{return new e(t,n).range||"*"}catch{return null}},ze}var Je,rt;function fr(){if(rt)return Je;rt=1;const e=j(),r=ne(),{ANY:t}=r,n=G(),a=se(),o=te(),u=cr(),l=hr(),i=lr();return Je=(s,p,c,m)=>{s=new e(s,m),p=new n(p,m);let $,f,L,N,P;switch(c){case">":$=o,f=l,L=u,N=">",P=">=";break;case"<":$=u,f=i,L=o,N="<",P="<=";break;default:throw new TypeError('Must provide a hilo val of "<" or ">"')}if(a(s,p,m))return!1;for(let _=0;_<p.set.length;++_){const q=p.set[_];let S=null,y=null;if(q.forEach(C=>{C.semver===t&&(C=new r(">=0.0.0")),S=S||C,y=y||C,$(C.semver,S.semver,m)?S=C:L(C.semver,y.semver,m)&&(y=C)}),S.operator===N||S.operator===P||(!y.operator||y.operator===N)&&f(s,y.semver)||y.operator===P&&L(s,y.semver))return!1}return!0},Je}var Ze,tt;function sn(){if(tt)return Ze;tt=1;const e=fr();return Ze=(t,n,a)=>e(t,n,">",a),Ze}var Ke,nt;function an(){if(nt)return Ke;nt=1;const e=fr();return Ke=(t,n,a)=>e(t,n,"<",a),Ke}var Qe,st;function on(){if(st)return Qe;st=1;const e=G();return Qe=(t,n,a)=>(t=new e(t,a),n=new e(n,a),t.intersects(n,a)),Qe}var er,at;function un(){if(at)return er;at=1;const e=se(),r=M();return er=(t,n,a)=>{const o=[];let u=null,l=null;const i=t.sort((c,m)=>r(c,m,a));for(const c of i)e(c,n,a)?(l=c,u||(u=c)):(l&&o.push([u,l]),l=null,u=null);u&&o.push([u,null]);const d=[];for(const[c,m]of o)c===m?d.push(c):!m&&c===i[0]?d.push("*"):m?c===i[0]?d.push(`<=${m}`):d.push(`${c} - ${m}`):d.push(`>=${c}`);const s=d.join(" || "),p=typeof n.raw=="string"?n.raw:String(n);return s.length<p.length?s:n},er}var rr,it;function pn(){if(it)return rr;it=1;const e=G(),r=ne(),{ANY:t}=r,n=se(),a=M(),o=(p,c,m={})=>{if(p===c)return!0;p=new e(p,m),c=new e(c,m);let $=!1;e:for(const f of p.set){for(const L of c.set){const N=i(f,L,m);if($=$||N!==null,N)continue e}if($)return!1}return!0},u=[new r(">=0.0.0-0")],l=[new r(">=0.0.0")],i=(p,c,m)=>{if(p===c)return!0;if(p.length===1&&p[0].semver===t){if(c.length===1&&c[0].semver===t)return!0;m.includePrerelease?p=u:p=l}if(c.length===1&&c[0].semver===t){if(m.includePrerelease)return!0;c=l}const $=new Set;let f,L;for(const I of p)I.operator===">"||I.operator===">="?f=d(f,I,m):I.operator==="<"||I.operator==="<="?L=s(L,I,m):$.add(I.semver);if($.size>1)return null;let N;if(f&&L&&(N=a(f.semver,L.semver,m),N>0||N===0&&(f.operator!==">="||L.operator!=="<=")))return null;for(const I of $){if(f&&!n(I,String(f),m)||L&&!n(I,String(L),m))return null;for(const B of c)if(!n(I,String(B),m))return!1;return!0}let P,_,q,S,y=L&&!m.includePrerelease&&L.semver.prerelease.length?L.semver:!1,C=f&&!m.includePrerelease&&f.semver.prerelease.length?f.semver:!1;y&&y.prerelease.length===1&&L.operator==="<"&&y.prerelease[0]===0&&(y=!1);for(const I of c){if(S=S||I.operator===">"||I.operator===">=",q=q||I.operator==="<"||I.operator==="<=",f){if(C&&I.semver.prerelease&&I.semver.prerelease.length&&I.semver.major===C.major&&I.semver.minor===C.minor&&I.semver.patch===C.patch&&(C=!1),I.operator===">"||I.operator===">="){if(P=d(f,I,m),P===I&&P!==f)return!1}else if(f.operator===">="&&!I.test(f.semver))return!1}if(L){if(y&&I.semver.prerelease&&I.semver.prerelease.length&&I.semver.major===y.major&&I.semver.minor===y.minor&&I.semver.patch===y.patch&&(y=!1),I.operator==="<"||I.operator==="<="){if(_=s(L,I,m),_===I&&_!==L)return!1}else if(L.operator==="<="&&!I.test(L.semver))return!1}if(!I.operator&&(L||f)&&N!==0)return!1}return!(f&&q&&!L&&N!==0||L&&S&&!f&&N!==0||C||y)},d=(p,c,m)=>{if(!p)return c;const $=a(p.semver,c.semver,m);return $>0?p:$<0||c.operator===">"&&p.operator===">="?c:p},s=(p,c,m)=>{if(!p)return c;const $=a(p.semver,c.semver,m);return $<0?p:$>0||c.operator==="<"&&p.operator==="<="?c:p};return rr=o,rr}var tr,ot;function cn(){if(ot)return tr;ot=1;const e=K(),r=Z(),t=j(),n=ct(),a=U(),o=Mt(),u=Gt(),l=Ft(),i=Ut(),d=xt(),s=Xt(),p=Vt(),c=Bt(),m=M(),$=Wt(),f=Ht(),L=pr(),N=Yt(),P=zt(),_=te(),q=cr(),S=lt(),y=ht(),C=lr(),I=hr(),B=ft(),ae=Jt(),ie=Zt(),oe=ne(),ue=G(),pe=se(),ce=Qt(),le=en(),g=rn(),h=tn(),v=nn(),R=fr(),w=sn(),E=an(),b=on(),O=un(),k=pn();return tr={parse:a,valid:o,clean:u,inc:l,diff:i,major:d,minor:s,patch:p,prerelease:c,compare:m,rcompare:$,compareLoose:f,compareBuild:L,sort:N,rsort:P,gt:_,lt:q,eq:S,neq:y,gte:C,lte:I,cmp:B,coerce:ae,truncate:ie,Comparator:oe,Range:ue,satisfies:pe,toComparators:ce,maxSatisfying:le,minSatisfying:g,minVersion:h,validRange:v,outside:R,gtr:w,ltr:E,intersects:b,simplifyRange:O,subset:k,SemVer:t,re:e.re,src:e.src,tokens:e.t,SEMVER_SPEC_VERSION:r.SEMVER_SPEC_VERSION,RELEASE_TYPES:r.RELEASE_TYPES,compareIdentifiers:n.compareIdentifiers,rcompareIdentifiers:n.rcompareIdentifiers},tr}var J=cn();const Wn=Lt(J),X=(e,r,t,n)=>{for(const a of r)e.push("--filter",a);t&&e.push("--recursive"),n&&e.push("--workspace-root")},ln=e=>{const r=[],t=[];return X(r,e.filter,e.recursive,e.workspaceRoot),e.silent&&r.push("--silent"),e.frozenLockfile&&r.push("--frozen-lockfile"),r.push("install"),e.dev&&r.push("--dev"),e.prod&&r.push("--prod"),e.force&&r.push("--force"),e.ignoreScripts&&r.push("--ignore-scripts"),e.lockfileOnly&&r.push("--lockfile-only"),e.noOptional&&r.push("--no-optional"),e.offline&&r.push("--offline"),{args:r,bin:"aube",warnings:t}},hn=e=>{const r=[],t=[];return X(r,e.filter,!1,!1),r.push("add"),e.saveDev&&r.push("--save-dev"),e.exact&&r.push("--save-exact"),e.global&&r.push("--global"),e.optional&&r.push("--save-optional"),e.peer&&r.push("--save-peer"),e.workspace&&t.push("aube has no flag for the `workspace:` protocol; it auto-detects local workspace members during add. Ignoring --workspace."),e.workspaceRoot&&r.push("--workspace"),r.push(...e.packages),{args:r,bin:"aube",warnings:t}},fn=e=>{const r=[];return X(r,e.filter,e.recursive,!1),r.push("remove"),e.saveDev&&r.push("--save-dev"),e.global&&r.push("--global"),e.workspaceRoot&&r.push("--workspace"),r.push(...e.packages),{args:r,bin:"aube",warnings:[]}},mn=e=>{const r=["dedupe"];return e&&r.push("--check"),{args:r,bin:"aube",warnings:[]}},dn=e=>{const r=[],t=[];X(r,e.filter,e.recursive,!1),r.push("why"),e.dev&&r.push("--dev"),e.prod&&r.push("--prod"),e.json&&r.push("--json"),e.long&&r.push("--long"),e.parseable&&r.push("--parseable"),e.depth!==void 0&&t.push("aube why does not accept --depth; ignoring."),e.noOptional&&t.push("aube why does not accept --no-optional; ignoring."),e.global&&t.push("aube why does not accept --global; ignoring.");const[n,...a]=e.packages;return n===void 0?t.push("aube why requires a package name; none provided."):(a.length>0&&t.push("aube why takes a single package; using the first."),r.push(n)),{args:r,bin:"aube",warnings:t}},gn=e=>{const r=[];e.silent&&r.push("--silent"),r.push("dlx");for(const t of e.additionalPackages)r.push("--package",t);return e.shellMode&&r.push("--shell-mode"),r.push(e.package),r.push(...e.args),{args:r,bin:"aube",warnings:[]}},En=e=>{const r=[];return X(r,e.filter,e.recursive,e.workspaceRoot),r.push("exec"),e.parallel&&r.push("--parallel"),e.reverse&&r.push("--reverse"),e.shellMode&&r.push("--shell-mode"),r.push(e.command),r.push(...e.args),{args:r,bin:"aube",warnings:[]}},vn=e=>{const r=["link"];return e!==null&&r.push(e),{args:r,bin:"aube",warnings:[]}},Rn=(e,r)=>{const t=[],n=[];return r&&t.push("--recursive"),t.push("unlink"),e.length>1&&n.push("aube unlink takes a single package; using the first."),e.length>0&&t.push(e[0]),{args:t,bin:"aube",warnings:n}},wn=e=>{const r=["view","--",e.package],t=[],[n,...a]=e.fields;return n!==void 0?(a.length>0&&t.push("aube view only supports a single field; using the first."),e.json&&t.push("aube view does not support --json with a field selector; printing the field without --json."),r.push(n)):e.json&&r.push("--json"),{args:r,bin:"aube",warnings:t}},Hn=e=>{const r=[],t=[];return X(r,e.filters,e.recursive,e.workspaceRoot),r.push("update"),e.dev&&r.push("--dev"),e.prod&&r.push("--prod"),e.global&&r.push("--global"),e.interactive&&r.push("--interactive"),e.latest&&r.push("--latest"),e.noOptional&&r.push("--no-optional"),e.noSave&&r.push("--no-save"),r.push(...e.packages),{args:r,bin:"aube",warnings:t}},$n=new Set(["fund","ping","search","token"]),bn=(e,r)=>$n.has(e)?{args:[e,...r],bin:"npm",warnings:[`'${e}' is not natively supported by aube. Delegating to npm.`]}:{args:[e,...r],bin:"aube",warnings:[]},Y=256*1024,In=e=>{const r=e?{...process.env,...e}:{...process.env};return process.stderr.isTTY&&r.FORCE_COLOR===void 0&&r.NO_COLOR===void 0&&(r.FORCE_COLOR="1"),r},ut=e=>e!==""&&!/[\s"&()<>^|%!]/u.test(e)?e:`"${e.replaceAll(/(\\*)"/gu,String.raw`$1$1\"`).replace(/(\\+)$/u,"$1$1").replaceAll(/[&()<>^|%!]/gu,String.raw`^$&`)}"`,Ln=async(e,r,t)=>new Promise((n,a)=>{const o=process.platform==="win32",u=$t(o?ut(e):e,o?r.map(p=>ut(p)):[...r],{cwd:t.cwd,env:In(t.env),shell:o,stdio:["inherit","pipe","pipe"],windowsHide:!0});let l=[],i=0;const d=p=>{if(l.push(p),i+=p.length,!(i<=Y)){for(;l.length>1&&i-l[0].length>Y;)i-=l.shift().length;if(l.length===1&&i>Y){const c=l[0];l[0]=c.subarray(c.length-Y),i=Y}}},s=()=>Buffer.concat(l).toString("utf8");u.stdout?.on("data",p=>{process.stdout.write(p),d(p)}),u.stderr?.on("data",p=>{process.stderr.write(p),d(p)}),u.on("error",a),u.on("close",p=>{const c=s();l=[],n({code:p??1,output:c})})}),z=e=>{const r=J.coerce(e);return r?J.gte(r,"11.0.0"):!1},F=e=>e.name==="yarn"&&!e.version.startsWith("1."),nr=e=>e.name==="yarn"&&e.version.startsWith("1."),kn=e=>e[0]==="rm"?["remove",...e.slice(1)]:e,Sn=(e,r,t)=>{switch(r){case"audit":return F(e)?{args:["npm","audit",...t],bin:"yarn",kind:"rewrite"}:{kind:"passthrough"};case"config":{if(F(e)){const[n,...a]=t;return n==="delete"?{args:["config","unset",...a],bin:"yarn",kind:"rewrite",warning:"yarn berry uses `config unset`, not `config delete`."}:{kind:"passthrough"}}return e.name==="bun"?{kind:"skip",warning:"bun has no `config` CLI. Edit bunfig.toml or .npmrc directly."}:e.name==="deno"?{kind:"skip",warning:"deno has no registry-config CLI. Edit deno.json directly."}:{kind:"passthrough"}}case"dist-tag":return nr(e)?{args:["tag",...t],bin:"yarn",kind:"rewrite",warning:"yarn 1 has no `dist-tag`; using `yarn tag`."}:F(e)?{args:["npm","tag",...kn(t)],bin:"yarn",kind:"rewrite"}:e.name==="bun"||e.name==="deno"?{kind:"skip",warning:`${e.name} has no \`dist-tag\`. Use \`npm dist-tag\` instead.`}:{kind:"passthrough"};case"login":case"logout":return F(e)?{args:["npm",r,...t],bin:"yarn",kind:"rewrite"}:e.name==="bun"?{args:[r,...t],bin:"npm",kind:"rewrite",warning:`bun has no \`${r}\`; falling back to \`npm ${r}\` (writes ~/.npmrc, which bun reads).`}:e.name==="deno"?{kind:"skip",warning:`deno has no \`${r}\`. JSR uses browser OAuth via \`deno publish\`.`}:{kind:"passthrough"};case"owner":return e.name==="pnpm"&&z(e.version)?{args:["owner",...t],bin:"npm",kind:"rewrite",warning:"pnpm 11 removed `owner`; falling back to `npm owner`."}:F(e)?{args:["owner",...t],bin:"npm",kind:"rewrite",warning:"yarn berry has no `owner` (not in `yarn npm`); falling back to `npm owner`."}:e.name==="bun"?{args:["owner",...t],bin:"npm",kind:"rewrite",warning:"bun has no `owner`; falling back to `npm owner`."}:e.name==="deno"?{kind:"skip",warning:"deno has no `owner`. JSR uses scope-member roles via the web UI."}:{kind:"passthrough"};case"ping":return e.name==="pnpm"&&z(e.version)?{args:["ping",...t],bin:"npm",kind:"rewrite",warning:"pnpm 11 removed `ping`; falling back to `npm ping`."}:{kind:"passthrough"};case"plugin":return F(e)?{kind:"passthrough"}:{kind:"skip",warning:`${e.name} does not support yarn-style plugins. Skipping (no-op).`};case"prune":return nr(e)?{kind:"skip",warning:"yarn 1 has no `prune`. Use `yarn install --production` for a prod-only tree."}:F(e)?{kind:"skip",warning:"yarn berry has no `prune`. Use `yarn workspaces focus --production` instead."}:e.name==="bun"||e.name==="deno"?{kind:"skip",warning:`${e.name} has no \`prune\`. Pruning happens automatically on install.`}:{kind:"passthrough"};case"publish":return F(e)?{args:["npm","publish",...t],bin:"yarn",kind:"rewrite"}:{kind:"passthrough"};case"rebuild":return nr(e)?{kind:"skip",warning:"yarn 1 has no `rebuild`. Re-install instead."}:e.name==="bun"?{kind:"skip",warning:"bun has no `rebuild`. Use `bun install --force` instead."}:e.name==="deno"?{kind:"skip",warning:"deno has no `rebuild`."}:{kind:"passthrough"};case"search":return e.name==="pnpm"&&z(e.version)?{args:["search",...t],bin:"npm",kind:"rewrite",warning:"pnpm 11 removed `search`; falling back to `npm search`."}:{kind:"passthrough"};case"token":return e.name==="pnpm"&&z(e.version)?{args:["token",...t],bin:"npm",kind:"rewrite",warning:"pnpm 11 removed `token`; falling back to `npm token`."}:{kind:"passthrough"};case"whoami":return e.name==="pnpm"&&z(e.version)?{args:["whoami",...t],bin:"npm",kind:"rewrite",warning:"pnpm 11 removed `whoami`; falling back to `npm whoami`."}:F(e)?{args:["npm","whoami",...t],bin:"yarn",kind:"rewrite"}:e.name==="bun"?{args:["pm","whoami",...t],bin:"bun",kind:"rewrite"}:e.name==="deno"?{kind:"skip",warning:"deno has no `whoami`. JSR uses browser auth."}:{kind:"passthrough"};default:return{kind:"passthrough"}}},sr=e=>yt(e)!==null,On=e=>{const r=[["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"],["package-lock.json","npm"],["npm-shrinkwrap.json","npm"],["bun.lock","bun"],["bun.lockb","bun"],["deno.lock","deno"]];let t=e;for(;;){for(const[a,o]of r)if(ar(ee(t,a)))return o;const n=ir(t);if(n===t||or(t).root===t)return;t=n}},Yn=(e,r)=>{if(r.name!=="aube")return;const t=On(e);if(t!==void 0)return`Resolved installer is aube but the workspace has a ${t} lockfile. Aube reads and writes ${t}'s lockfile format in place, but its byte output may differ subtly — expect a one-time churn diff on the first install, and ongoing drift if your team mixes tools on the same lockfile. To pin the choice across the team, set \`install.backend\` in vis.config; to bypass aube for this run, pass --no-aube.`},mr=e=>{if(ar(e))try{return JSON.parse(It(e,{buffer:!1}))}catch{return}},Nn=e=>{let r=e;for(;;){const t=ee(r,"package.json"),n=mr(t);if(n&&typeof n.packageManager=="string"&&n.packageManager.length>0)return n.packageManager;const a=ir(r);if(a===r||or(r).root===r)return;r=a}},mt=new Set(["npm","pnpm","yarn"]),pt=(e,r,t)=>t===!1||!mt.has(r)||!sr("corepack")?!1:t===!0?!0:Nn(e)!==void 0,zn=(e,r)=>{const t=r.backend,n=process.env.VIS_INSTALLER,a=t??n??r.configBackend,o=r.configCorepack??"auto";if(a&&a!=="auto"){if(a==="aube"&&!sr("aube"))throw new Error('install.backend is set to "aube" but the `aube` binary is not on PATH. Install it via `npm i -g @endevco/aube`, `mise use -g aube`, or `brew install endevco/tap/aube`.');return{name:a,useCorepack:pt(e,a,o),version:"latest"}}if(sr("aube"))return{name:"aube",useCorepack:!1,version:"latest"};const u=yn(e);return{...u,useCorepack:pt(e,u.name,o)}},yn=e=>{if(!ar(e))throw new Error(`Could not detect package manager in ${e}. Directory does not exist.`);const r=kt(e);return{name:r.name,version:r.version||"latest"}},dt=(e,r)=>r.useCorepack!==!0||!mt.has(r.name)||e.bin==="corepack"||e.bin!==r.name?e:{...e,args:[r.name,...e.args],bin:"corepack"},An=(e,r,t)=>{if(t===void 0)return Tt(e.bin,e.args,r);const n=bt(e.bin,e.args,{cwd:r,env:{...process.env,...t},stdio:"inherit"});if(n.error)throw n.error;return n.status??1},D=(e,r,t,n,a={})=>{const o=dt(r,e);for(const u of o.warnings)n.warn(`warning: ${u}`);return a.dry?(n.log(`[dry-run] ${o.bin} ${o.args.join(" ")}`),0):An(o,t,a.env)},V=(e,r,t,n,a={})=>D(e,r(),t,n,a),Tn=(e,r)=>r==="aube"||r==="deno"?e:{...e,args:[...e.args,"--prefer-offline"]},Cn=(e,r,t)=>r!=="yarn"||t.startsWith("1.")||!e.args.includes("--immutable")||e.args.includes("--immutable-cache")?e:{...e,args:[...e.args,"--immutable-cache"]},gt=(e,r,t)=>{let n=e.name==="aube"?ln(r):At(e.name,e.version,{...r,silent:r.silent||t.silent===!0});return t.preferOffline&&(n=Tn(n,e.name)),t.ciMode&&(n=Cn(n,e.name,e.version)),n},Jn=(e,r,t,n,a={})=>{const o=gt(e,r,a);return dr(e,o,t,n,{dry:a.dry,env:a.env})},Zn=async(e,r,t,n,a={})=>{const o=dt(gt(e,r,a),e);for(const u of o.warnings)n.warn(`warning: ${u}`);return a.dry?(n.log(`[dry-run] ${o.bin} ${o.args.join(" ")}`),{code:0,output:""}):Ln(o.bin,o.args,{cwd:t,env:a.env?{...process.env,...a.env}:process.env})},Et=(e,r)=>{const t=r==="deno"?"--quiet":"--silent";return{...e,args:[...e.args,t]}},Pn=(e,r)=>r==="yarn"||r==="aube"?null:{...e,args:[...e.args,"--dry-run"]},dr=(e,r,t,n,a)=>{if(a.dry!==!0)return D(e,r,t,n,a);const o=Pn(r,e.name);return o===null?D(e,r,t,n,a):D(e,o,t,n,{env:a.env})},qn=(e,r)=>r==="aube"?{...e,args:[...e.args,"--ignore-scripts"]}:r==="deno"?e:{...e,args:[...e.args,"--ignore-scripts"]},jn=(e,r,t,n,a={})=>{let o=e.name==="aube"?hn(r):St(e.name,e.version,r);a.ignoreScripts&&(o=qn(o,e.name)),a.silent&&(o=Et(o,e.name));const u=dr(e,o,t,n,{dry:a.dry,env:a.env});return u===0&&a.autoInstallPeers&&Gn(e,r,t,n,a),u},_n=e=>{if(e.startsWith("@")){const t=e.indexOf("/");if(t===-1)return e;const n=e.indexOf("@",t);return n===-1?e:e.slice(0,n)}const r=e.indexOf("@");return r===-1?e:e.slice(0,r)},Dn=(e,r)=>{let t=e;for(;;){const n=ee(t,"node_modules",r,"package.json"),a=mr(n);if(a)return a;const o=ir(t);if(o===t||or(t).root===t)return;t=o}},Mn=e=>{const r=mr(ee(e,"package.json")),t=new Set;if(!r)return t;for(const n of["dependencies","devDependencies","peerDependencies","optionalDependencies"]){const a=r[n];if(a)for(const o of Object.keys(a))t.add(o)}return t},Gn=(e,r,t,n,a)=>{if(e.name==="deno")return;const o=Mn(t),u=new Map;for(const d of r.packages){const s=_n(d),p=Dn(t,s);if(!p?.peerDependencies)continue;const c=p.peerDependenciesMeta??{};for(const[m,$]of Object.entries(p.peerDependencies))c[m]?.optional||o.has(m)||u.has(m)||u.set(m,$)}if(u.size===0)return;const l=[...u.entries()].map(([d,s])=>`${d}@${s}`);n.log(`auto-installing peer dependencies: ${l.join(", ")}`);const i={exact:!1,filter:r.filter,global:!1,optional:!1,packages:l,peer:!1,saveDev:r.saveDev,workspace:!1,workspaceRoot:r.workspaceRoot};jn(e,i,t,n,{ignoreScripts:a.ignoreScripts})},Kn=(e,r,t,n,a={})=>{let o=e.name==="aube"?fn(r):Ot(e.name,e.version,r);return a.silent&&(o=Et(o,e.name)),dr(e,o,t,n,{dry:a.dry,env:a.env})},Qn=(e,r,t,n,a={})=>e.name==="aube"?D(e,mn(r),t,n,a):V(e,()=>Ct(e.name,e.version,r),t,n,a),es=(e,r,t,n,a={})=>e.name==="aube"?D(e,dn(r),t,n,a):V(e,()=>Pt(e.name,e.version,r),t,n,a),Fn=(e,r)=>{if(e.name==="aube")return wn(r);const t=[],n=[],a=e.name;switch(e.name){case"bun":{const o=J.coerce(e.version);o&&J.lt(o,"1.3.0")&&n.push(`bun ${e.version} does not support \`bun pm view\` (added in bun 1.3). Upgrade bun, or run \`npm view ${r.package}\` instead.`),t.push("pm","view","--",r.package,...r.fields),r.json&&t.push("--json");break}case"deno":{const o=r.package.startsWith("npm:")||r.package.startsWith("jsr:")||r.package.startsWith("https://")||r.package.startsWith("http://")||r.package.startsWith("file:")?r.package:`npm:${r.package}`;t.push("info","--",o),r.json&&t.push("--json"),r.fields.length>0&&n.push("deno info does not accept field selectors; ignoring.");break}case"npm":case"pnpm":{t.push("view","--",r.package,...r.fields),r.json&&t.push("--json");break}case"yarn":{if(e.version.startsWith("1.")){t.push("info","--",r.package);const[o,...u]=r.fields;o!==void 0&&(u.length>0&&n.push("yarn v1 only supports querying one field at a time; using the first."),t.push(o)),r.json&&t.push("--json")}else t.push("npm","info","--",r.package),r.fields.length>0&&n.push("yarn berry does not support field arguments to 'npm info'; ignoring."),r.json&&t.push("--json");break}default:{const o=e.name;throw new Error(`Unsupported package manager: ${o}`)}}return{args:t,bin:a,warnings:n}},rs=(e,r,t,n,a={})=>D(e,Fn(e,r),t,n,a),ts=(e,r,t,n,a={})=>e.name==="aube"?D(e,vn(r),t,n,a):V(e,()=>qt(e.name,e.version,r),t,n,a),ns=(e,r,t,n,a,o={})=>e.name==="aube"?D(e,Rn(r,t),n,a,o):V(e,()=>jt(e.name,e.version,r,t),n,a,o),Un=(e,r,t)=>{if(e.args.includes("--offline")||e.args.includes("--cached-only"))return e;const n=(a,o)=>{const u=[...e.args];return u.splice(o,0,a),{...e,args:u}};switch(r){case"aube":case"pnpm":return n("--offline",1);case"bun":return{...e,warnings:[...e.warnings,"bun x does not support --offline. Pre-install the package via `vis install` so bun x resolves from the local cache."]};case"deno":return n("--cached-only",1);case"npm":return n("--offline",1);case"yarn":return t.startsWith("1.")?n("--offline",0):{...e,warnings:[...e.warnings,"yarn berry has no --offline flag for dlx. Configure `enableNetwork: false` in .yarnrc.yml or set `enableMirror: true` for offline-first behavior."]};default:{const a=r;return{...e,warnings:[...e.warnings,`applyDlxOffline: unsupported pm ${String(a)}`]}}}},ss=(e,r,t,n,a={})=>{let o=e.name==="aube"?gn(r):Nt(e.name,e.version,r);return a.offline&&(o=Un(o,e.name,e.version)),D(e,o,t,n,{dry:a.dry,env:a.env})},as=(e,r,t,n,a={})=>e.name==="aube"?D(e,En(r),t,n,a):V(e,()=>_t(e.name,e.version,r),t,n,a),is=(e,r,t,n,a,o={})=>{if(e.name==="aube")return D(e,bn(r,t),n,a,o);const u=Sn(e,r,t);return u.kind==="skip"?(a.warn(`warning: ${u.warning}`),0):u.kind==="rewrite"?D(e,{args:u.args,bin:u.bin,warnings:u.warning?[u.warning]:[]},n,a,o):V(e,()=>Dt(e.name,e.version,r,t),n,a,o)};export{ss as $,is as B,Kn as D,es as E,zn as I,jn as M,rs as P,Jn as R,ns as S,as as W,Ln as a,Zn as h,ts as j,Yn as p,J as s,Wn as u,Hn as v,yn as w,Qn as x};

package/dist/packem_shared/provenance-DMuEftgc.js

@@ -1 +0,0 @@
-import{createRequire as w}from"node:module";import{s as l}from"./pm-runner-pVihAfxV.js";import{f as T,a as R,m as p}from"./index-BDmTbWX1.js";import{n as A,i as M}from"../packem_chunks/bin.js";import{a as P}from"../packem_chunks/config.js";const k=w(import.meta.url),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=t=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[e,s]=u.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return u.getBuiltinModule(t)}return k(t)},{rmSync:f,writeFileSync:j}=_("node:fs"),U=8,$=async(t,e,s)=>{if(t.length===0)return[];const o=Math.max(1,Math.min(e,t.length)),a=Array.from({length:t.length});let r=0;const i=async()=>{for(;r<t.length;){const n=r;r+=1;const c=t[n];a[n]=await s(c,n)}};return await Promise.all(Array.from({length:o},()=>i())),a},g=2,C=1800*1e3,D=15e3,v=()=>p(A(),"packuments"),y=t=>p(v(),`${encodeURIComponent(t)}.json`),S=t=>{const e=y(t);if(T(e))try{const s=P(e);if(s.cacheVersion!==g){f(e,{force:!0});return}if(Date.now()-s.createdAt>s.ttlMs){f(e,{force:!0});return}return s.packument}catch{f(e,{force:!0});return}},N=(t,e,s)=>{R(v());const o={cacheVersion:g,createdAt:Date.now(),packument:e,ttlMs:s};j(y(t),JSON.stringify(o),"utf8")},O=t=>{const e={},s=t.versions??{};for(const[a,r]of Object.entries(s)){const i=r.dist,n={version:a};if(r._npmUser!==void 0&&(n._npmUser=r._npmUser),r.maintainers!==void 0&&(n.maintainers=r.maintainers),r.bin!==void 0&&(n.bin=r.bin),i!==void 0){const c={};i.signatures!==void 0&&(c.signatures=i.signatures),i.attestations!==void 0&&(c.attestations=i.attestations),typeof i.integrity=="string"&&(c.integrity=i.integrity),typeof i.tarball=="string"&&(c.tarball=i.tarball),n.dist=c}r.repository!==void 0&&(n.repository=r.repository),r.license!==void 0&&(n.license=r.license),typeof r.readme=="string"&&(n.readme=r.readme),typeof r.readmeFilename=="string"&&(n.readmeFilename=r.readmeFilename),typeof r.private=="boolean"&&(n.private=r.private),typeof r.deprecated=="string"&&(n.deprecated=r.deprecated),r.scripts!==void 0&&typeof r.scripts=="object"&&(n.scripts=r.scripts),e[a]=n}const o={name:typeof t.name=="string"?t.name:"",versions:e};return t["dist-tags"]!==void 0&&(o["dist-tags"]=t["dist-tags"]),t.time!==void 0&&(o.time=t.time),typeof t.readme=="string"&&(o.readme=t.readme),o},E=t=>{const e={Accept:"application/json"};return t!==void 0&&t!==""&&(e.Authorization=`Bearer ${t}`),e},F=async(t,e)=>{if(e.registryUrl!==void 0)return{authToken:e.authToken,url:e.registryUrl};if(e.workspaceRoot!==void 0){const{getRegistryForPackage:s,loadNpmrc:o}=await import("../packem_chunks/bin.js").then(n=>n.bD),a=o(e.workspaceRoot),{token:r,url:i}=s(t,a);return{authToken:e.authToken??r,url:i}}return{authToken:e.authToken,url:"https://registry.npmjs.org"}},V=async(t,e={})=>{const s=e.cacheTtlMs??C,o=S(t);if(o!==void 0)return o;const a=await F(t,e),r=`${a.url.endsWith("/")?a.url.slice(0,-1):a.url}/${t.replace("/","%2f")}`,i=new AbortController,n=setTimeout(()=>{i.abort()},D),c=()=>{i.abort()};e.signal?.addEventListener("abort",c,{once:!0});try{const d=await fetch(r,{headers:E(a.authToken),signal:i.signal});if(d.status===404)return;if(!d.ok)throw new Error(`Registry returned ${String(d.status)} for ${t}`);const b=await d.json(),m=O(b);return N(t,m,s),m}finally{clearTimeout(n),e.signal?.removeEventListener("abort",c)}},H=(t,e)=>{const s=Object.keys(t.versions);if(s.length===0)return;if(e===void 0||e===""||e==="latest")return t["dist-tags"]?.latest??s.at(-1);const o=t["dist-tags"]?.[e];return o!==void 0?o:Object.hasOwn(t.versions,e)?e:l.maxSatisfying(s,e)??void 0},h=(t,e)=>t.versions[e]?.dist?.attestations?.provenance!==void 0,L=(t,e)=>l.valid(e)?Object.keys(t.versions).filter(s=>l.valid(s)!==null&&l.lt(s,e)).filter(s=>l.satisfies(s,"*",{includePrerelease:!1})).filter(s=>h(t,s)).sort((s,o)=>l.lt(s,o)?1:-1)[0]:void 0,I=async(t,e={})=>{if(M("provenance"))return[];const s=new Set(e.allowlist),o=e.concurrency??U;return(await $(t,o,async({name:a,version:r})=>{if(s.has(a))return;const i=await V(a,{workspaceRoot:e.workspaceRoot});if(i===void 0||h(i,r))return;const n=L(i,r);if(n!==void 0)return{packageName:a,priorVersionWithProvenance:n,version:r}})).filter(a=>a!==void 0)};export{U as D,H as a,L as f,V as g,$ as m,I as r};

package/dist/packem_shared/s1ngularity-BkfgC6NO.js

@@ -1 +0,0 @@
-import{createRequire as K}from"node:module";import{V,s as A}from"./Table-CcVkyULl-B_ef6zfS.js";import{f as _,a as j,m as $}from"./index-BDmTbWX1.js";import{i as p,n as x}from"../packem_chunks/bin.js";import{m as g,g as b,D as w}from"./provenance-DMuEftgc.js";import{a as O}from"../packem_chunks/config.js";import{s as v}from"./pm-runner-pVihAfxV.js";const X=K(import.meta.url),M=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,T=r=>{if(typeof M<"u"&&M.versions&&M.versions.node){const[e,t]=M.versions.node.split(".").map(Number);if(e>22||e===22&&t>=3||e===20&&t>=16)return M.getBuiltinModule(r)}return X(r)},{rmSync:k,writeFileSync:E}=T("node:fs"),{createHash:Y}=T("node:crypto"),{Resolver:Q}=T("node:dns/promises");class Ke{entries=[];add(e){this.entries.push(e)}addMany(e){for(const t of e)this.entries.push(t)}all(){return this.entries}errors(){return this.entries.filter(e=>e.severity==="error")}warnings(){return this.entries.filter(e=>e.severity==="warning")}hasErrors(){return this.entries.some(e=>e.severity==="error")}hasWarnings(){return this.entries.some(e=>e.severity==="warning")}isEmpty(){return this.entries.length===0}size(){return this.entries.length}}const Xe=r=>{if(r.length===0)return[];const e=[],t=r.filter(s=>s.severity==="error"),n=r.filter(s=>s.severity==="warning");if(t.length>0){e.push(V(`${String(t.length)} error${t.length===1?"":"s"}:`));for(const s of t)e.push(`  ${V("✗")} [${s.marshall}] ${s.packageName}: ${s.message}`),s.suggestedAction!==void 0&&e.push(`     ${A("→")} ${s.suggestedAction}`)}if(n.length>0){t.length>0&&e.push(""),e.push(A(`${String(n.length)} warning${n.length===1?"":"s"}:`));for(const s of n)e.push(`  ${A("⚠")} [${s.marshall}] ${s.packageName}: ${s.message}`),s.suggestedAction!==void 0&&e.push(`     ${A("→")} ${s.suggestedAction}`)}return e},Ye=r=>({errors:r.filter(e=>e.severity==="error"),findings:[...r],summary:{errorCount:r.filter(e=>e.severity==="error").length,warningCount:r.filter(e=>e.severity==="warning").length},warnings:r.filter(e=>e.severity==="warning")}),Z=1440*60*1e3,ee=15e3,re="https://api.github.com/repos",B=()=>$(x(),"archived-repo"),H=(r,e)=>$(B(),`${encodeURIComponent(r)}__${encodeURIComponent(e)}.json`),te=(r,e)=>{const t=H(r,e);if(_(t))try{const n=O(t);if(Date.now()-n.createdAt>n.ttlMs){k(t,{force:!0});return}return n}catch{k(t,{force:!0});return}},W=(r,e,t,n)=>{j(B());const s={createdAt:Date.now(),ttlMs:n,...t};E(H(r,e),JSON.stringify(s),"utf8")},ne=r=>{if(typeof r!="string"||r.trim()==="")return;const e=r.trim().replace(/^git\+/,""),t=/^git@github\.com:([^/]+)\/(.+?)(?:\.git)?\/?$/i.exec(e);if(t)return{owner:t[1],repo:t[2]};const n=/^ssh:\/\/git@github\.com\/([^/]+)\/(.+?)(?:\.git)?\/?$/i.exec(e);if(n)return{owner:n[1],repo:n[2]};const s=/^https?:\/\/(?:www\.)?github\.com\/([^/]+)\/([^/?#]+?)(?:\.git)?\/?$/i.exec(e);if(s)return{owner:s[1],repo:s[2]}},se=async(r,e,t,n)=>{const s=`${re}/${encodeURIComponent(r)}/${encodeURIComponent(e)}`,c=new AbortController,o=setTimeout(()=>{c.abort()},ee),i=()=>{c.abort()};n?.addEventListener("abort",i,{once:!0});const a={Accept:"application/vnd.github+json","User-Agent":"visulima-vis-marshall"};t!==void 0&&t!==""&&(a.Authorization=`Bearer ${t}`);try{const d=await fetch(s,{headers:a,signal:c.signal});if(d.status===404)return{kind:"missing"};if(!d.ok)return{kind:"transient-error"};const l=await d.json(),u=l.archived===!0,f=typeof l.archived_at=="string"?l.archived_at:void 0;return{archived:u,archivedAt:f,kind:"ok"}}catch{return{kind:"transient-error"}}finally{clearTimeout(o),n?.removeEventListener("abort",i)}},ie=(r,e)=>e!==void 0&&r.includes(e)?e:r.at(-1),Qe=async(r,e={})=>{if(p("archivedRepo"))return[];const t=new Set(e.allowlist),n=e.cacheTtlMs??Z,s=e.githubToken??process.env.GITHUB_TOKEN,c=e.concurrency??w,o=new Map,i=async(a,d)=>{const l=`${a}/${d}`;let u=o.get(l);return u===void 0&&(u=(async()=>{const f=te(a,d);if(f!==void 0)return f.missing===!0?{archived:!1,kind:"missing"}:{archived:f.archived,archivedAt:f.archivedAt,kind:"ok"};const m=await se(a,d,s,e.signal);return m.kind==="missing"?W(a,d,{archived:!1,missing:!0},n):m.kind==="ok"&&W(a,d,{archived:m.archived===!0,archivedAt:m.archivedAt},n),m})(),o.set(l,u)),u};return(await g(r,c,async({name:a,version:d})=>{if(t.has(a))return;const l=await b(a,{workspaceRoot:e.workspaceRoot});if(l===void 0)return;const u=l.versions[d]??l.versions[ie(Object.keys(l.versions),l["dist-tags"]?.latest)??""];if(u===void 0)return;const f=ne(u.repository?.url);if(f===void 0)return;const m=await i(f.owner,f.repo);if(m.kind!=="transient-error"){if(m.kind==="missing")return{kind:"missing-repo",owner:f.owner,packageName:a,repo:f.repo};if(m.archived===!0)return{...m.archivedAt===void 0?{}:{archivedAt:m.archivedAt},kind:"archived",owner:f.owner,packageName:a,repo:f.repo}}})).filter(a=>a!==void 0)},oe={dormantErrorDays:274,dormantWarnDays:183,newPublisherWindowDays:21,recentVersionErrorDays:7,recentVersionWarnDays:30},ae=1440*60*1e3,U=(r,e)=>(r-e)/ae,R=r=>{if(r!==void 0)return r.email??r.name},ce=(r,e,t,n,s)=>{const c=r.time?.[t];if(c===void 0)return;const o=new Date(c).getTime();if(!Number.isFinite(o))return;const i=U(n,o);if(i<s.recentVersionErrorDays)return{kind:"recent-version",message:`published ${i.toFixed(1)} days ago (error threshold: ${String(s.recentVersionErrorDays)})`,packageName:e,severity:"error",version:t};if(i<s.recentVersionWarnDays)return{kind:"recent-version",message:`published ${i.toFixed(1)} days ago (warn threshold: ${String(s.recentVersionWarnDays)})`,packageName:e,severity:"warning",version:t}},de=(r,e,t,n,s)=>{const c=r.versions[t],o=R(c?._npmUser);if(o===void 0)return;const i=Object.keys(r.versions).filter(u=>v.valid(u)!==null).filter(u=>v.lt(u,t));if(i.length===0||i.some(u=>R(r.versions[u]?._npmUser)===o))return;const a=r.time?.[i[0]??""];if(a===void 0)return;const d=new Date(a).getTime();if(!Number.isFinite(d))return;const l=U(n,d);if(!(l<=s.newPublisherWindowDays))return{kind:"new-publisher",message:`first publish by ${o} on a ${l.toFixed(0)}-day-old package`,packageName:e,severity:"error",version:t}},le=(r,e,t,n,s)=>{const c=r.versions[t],o=R(c?._npmUser);if(o===void 0)return;const i=[];for(const[l,u]of Object.entries(r.versions)){if(l===t||R(u._npmUser)!==o)continue;const f=r.time?.[l];if(f===void 0)continue;const m=new Date(f).getTime();Number.isFinite(m)&&i.push(m)}if(i.length===0)return;const a=Math.max(...i),d=U(n,a);if(d>=s.dormantErrorDays)return{kind:"dormant-maintainer",message:`previous release by ${o} was ${d.toFixed(0)} days ago (error threshold: ${String(s.dormantErrorDays)})`,packageName:e,severity:"error",version:t};if(d>=s.dormantWarnDays)return{kind:"dormant-maintainer",message:`previous release by ${o} was ${d.toFixed(0)} days ago (warn threshold: ${String(s.dormantWarnDays)})`,packageName:e,severity:"warning",version:t}},Ze=async(r,e={})=>{if(p("author"))return[];const t=new Set(e.allowlist),n={...oe,...e.thresholds},s=e.now??(()=>Date.now()),c=e.concurrency??w;return(await g(r,c,async({name:o,version:i})=>{if(t.has(o))return[];const a=await b(o,{cacheTtlMs:e.cacheTtlMs,signal:e.signal,workspaceRoot:e.workspaceRoot});if(a===void 0)return[];const d=s(),l=[],u=ce(a,o,i,d,n);u!==void 0&&l.push(u);const f=de(a,o,i,d,n);f!==void 0&&l.push(f);const m=le(a,o,i,d,n);return m!==void 0&&l.push(m),l})).flat()},ue=1440*60*1e3,fe=15e3,me=20,he=1e4,ve="https://api.npmjs.org/downloads/point/last-month",J=()=>$(x(),"downloads"),q=r=>$(J(),`${encodeURIComponent(r)}.json`),pe=r=>{const e=q(r);if(_(e))try{const t=O(e);if(Date.now()-t.createdAt>t.ttlMs){k(e,{force:!0});return}return t.downloads}catch{k(e,{force:!0});return}},ge=(r,e,t)=>{j(J());const n={createdAt:Date.now(),downloads:e,observedAt:new Date().toISOString(),ttlMs:t};E(q(r),JSON.stringify(n),"utf8")},we=async(r,e)=>{const t=`${ve}/${encodeURIComponent(r)}`,n=new AbortController,s=setTimeout(()=>{n.abort()},fe),c=()=>{n.abort()};e?.addEventListener("abort",c,{once:!0});try{const o=await fetch(t,{signal:n.signal});if(o.status===404)return{kind:"no-data"};if(!o.ok)return{kind:"error"};const i=await o.json();return typeof i.downloads=="number"?{downloads:i.downloads,kind:"ok"}:{kind:"no-data"}}catch{return{kind:"error"}}finally{clearTimeout(s),e?.removeEventListener("abort",c)}},er=async(r,e={})=>{if(p("downloads"))return[];const t=new Set(e.allowlist),n=e.errorThreshold??me,s=e.warnThreshold??he,c=e.cacheTtlMs??ue,o=e.concurrency??w;return(await g(r,o,async i=>{if(t.has(i))return;let a=pe(i);if(a===void 0){const d=await we(i,e.signal);if(d.kind==="no-data"||d.kind==="error")return{downloadsLastMonth:void 0,kind:"no-data",packageName:i,severity:"warning"};a=d.downloads??0,ge(i,a,c)}if(a<n)return{downloadsLastMonth:a,kind:"below-error",packageName:i,severity:"error"};if(a<s)return{downloadsLastMonth:a,kind:"below-warning",packageName:i,severity:"warning"}})).filter(i=>i!==void 0)},ye=1440*60*1e3,ke=4e3,$e=["1.1.1.1","8.8.8.8"],z=()=>$(x(),"expired-domains"),G=r=>{const e=Y("sha256").update(r).digest("hex").slice(0,12);return $(z(),`${e}.json`)},be=r=>{const e=G(r);if(_(e))try{const t=O(e);if(Date.now()-t.createdAt>t.ttlMs){k(e,{force:!0});return}return t}catch{k(e,{force:!0});return}},Me=(r,e,t)=>{j(z());const n={createdAt:Date.now(),outcome:e,ttlMs:t};E(G(r),JSON.stringify(n),"utf8")},De=r=>{if(typeof r!="string")return;const e=r.lastIndexOf("@");if(e===-1||e===r.length-1)return;const t=r.slice(e+1).trim().toLowerCase();return t===""?void 0:t},Ae=(r,e)=>{const t=[];e!==void 0&&t.push(e);for(const n of r??[])t.push(n);return t},Re=async(r,e)=>{let t;try{return await Promise.race([r,new Promise((n,s)=>{t=setTimeout(()=>{s(new Error("ETIMEDOUT"))},e)})])}finally{t!==void 0&&clearTimeout(t)}},Ne=r=>{if(r===null||typeof r!="object")return!1;const{code:e}=r;return e==="ENOTFOUND"||e==="ENODATA"||e==="NXDOMAIN"},Se=async(r,e,t)=>{try{const n=await Re(r.resolveNs(e),t);return Array.isArray(n)&&n.length>0?{kind:"ok"}:{kind:"expired"}}catch(n){return Ne(n)?{kind:"expired"}:{kind:"transient-error"}}},Te=(r,e)=>e!==void 0&&r.includes(e)?e:r.at(-1),rr=async(r,e={})=>{if(p("expiredDomains"))return[];const t=new Set(e.allowlist),n=new Set((e.allowDomains??[]).map(u=>u.toLowerCase())),s=e.cacheTtlMs??ye,c=e.perDomainTimeoutMs??ke,o=e.dnsServers??$e,i=e.concurrency??w,a=e.createResolver===void 0?new Q:e.createResolver();typeof a.setServers=="function"&&a.setServers(o);const d=new Map,l=async u=>{let f=d.get(u);return f===void 0&&(f=(async()=>{const m=be(u);if(m!==void 0)return{kind:m.outcome==="ok"?"ok":"expired"};const h=await Se(a,u,c);return h.kind!=="transient-error"&&Me(u,h.kind,s),h})(),d.set(u,f)),f};return(await g(r,i,async({name:u,version:f})=>{if(t.has(u))return[];const m=await b(u,{workspaceRoot:e.workspaceRoot});if(m===void 0)return[];const h=m.versions[f]??m.versions[Te(Object.keys(m.versions),m["dist-tags"]?.latest)??""];if(h===void 0)return[];const N=Ae(h.maintainers,h._npmUser),C=new Set,S=[];for(const D of N){const y=De(D.email);if(y===void 0||n.has(y))continue;const F=`${y}:${D.email??""}`;if(C.has(F))continue;C.add(F);const L=await l(y);L.kind==="expired"?S.push({domain:y,kind:"expired",maintainer:D.email??"",packageName:u,severity:"error"}):L.kind==="transient-error"&&S.push({domain:y,kind:"unresolved",maintainer:D.email??"",packageName:u,severity:"warning"})}return S})).flat()},Ee=["readme","license","repo"],_e=["ERROR: No README data found!","# Security holding package"],je=r=>{const e=r.trim();return e===""?!0:_e.some(t=>e.startsWith(t))},xe=(r,e)=>{if(typeof e.readme=="string")return e.readme;if(typeof r.readme=="string")return r.readme},Oe=(r,e)=>{const t=xe(r,e);if(t===void 0)return"missing-readme";if(je(t))return"placeholder-readme"},Ue=r=>{const{license:e}=r;return e===void 0?"missing-license":typeof e=="string"?e.trim()===""?"missing-license":void 0:typeof e.type=="string"&&e.type.trim()!==""?void 0:"missing-license"},Ce=r=>{const{repository:e}=r;if(e===void 0)return"missing-repo";const t=typeof e.url=="string"?e.url.trim():"";if(t==="")return"missing-repo";let n=t.replace(/^git\+/,"");const s=/^git@([^:]+):(.+?)(?:\.git)?$/.exec(n);return s&&(n=`https://${s[1]}/${s[2]}`),URL.canParse(n)?void 0:"invalid-repo-url"},Fe=r=>{const e=r["dist-tags"]?.latest;return e!==void 0&&Object.hasOwn(r.versions,e)?e:Object.keys(r.versions).at(-1)},tr=async(r,e={})=>{if(p("metadata"))return[];const t=new Set(e.allowlist),n=new Set(e.checks??Ee),s=e.concurrency??w;return(await g(r,s,async({name:c,version:o})=>{if(t.has(c))return;const i=await b(c,{workspaceRoot:e.workspaceRoot});if(i===void 0)return;const a=i.versions[o]??i.versions[Fe(i)??""];if(a===void 0||a.private===!0)return;const d=[];if(n.has("readme")){const l=Oe(i,a);l!==void 0&&d.push(l)}if(n.has("license")){const l=Ue(a);l!==void 0&&d.push(l)}if(n.has("repo")){const l=Ce(a);l!==void 0&&d.push(l)}if(d.length!==0)return{issues:d,packageName:c,version:o}})).filter(c=>c!==void 0)},I=(r,e)=>r===void 0?{}:typeof r=="string"?{[e.startsWith("@")?e.split("/").at(1)??e:e]:r}:{...r},Le=(r,e)=>v.valid(e)?Object.keys(r.versions).filter(t=>v.valid(t)!==null&&v.lt(t,e)).sort((t,n)=>v.lt(t,n)?1:-1)[0]:void 0,nr=async(r,e={})=>{if(p("newBin"))return[];const t=new Set(e.allowlist),n=new Set(e.allowBins),s=e.concurrency??w;return(await g(r,s,async({name:c,version:o})=>{if(t.has(c))return;const i=await b(c,{workspaceRoot:e.workspaceRoot});if(i===void 0)return;const a=i.versions[o];if(a===void 0)return;const d=Le(i,o);if(d===void 0)return;const l=i.versions[d];if(l===void 0)return;const u=I(a.bin,c),f=I(l.bin,c),m=Object.entries(u).filter(([h])=>!(h in f)).filter(([h])=>!n.has(h)).map(([h,N])=>({command:N,name:h}));if(m.length!==0)return{fromVersion:d,newBins:m,packageName:c,toVersion:o}})).filter(c=>c!==void 0)},Ve=["preinstall","install","postinstall"],P=(r,e)=>r.versions[e]?.dist?.attestations?.provenance!==void 0,We=(r,e)=>{if(v.valid(e)!==null)return Object.keys(r.versions).filter(t=>v.valid(t)!==null&&v.prerelease(t)===null&&v.lt(t,e)).sort((t,n)=>v.lt(t,n)?1:-1)[0]},Ie=(r,e)=>{const t=r??{},n=e??{},s=[];for(const c of Ve){const o=t[c];if(o===void 0||o==="")continue;const i=n[c];i===void 0||i===""?s.push({command:o,hook:c,kind:"introduced"}):i!==o&&s.push({command:o,hook:c,kind:"changed"})}return s},sr=async(r,e={})=>{if(p("s1ngularity"))return[];const t=new Set(e.allowlist),n=e.concurrency??w;return(await g(r,n,async({name:s,version:c})=>{if(t.has(s))return;const o=await b(s,{workspaceRoot:e.workspaceRoot});if(o?.versions[c]===void 0)return;const i=We(o,c);if(i===void 0||!P(o,i)||P(o,c))return;const a=Ie(o.versions[c]?.scripts,o.versions[i]?.scripts);if(a.length!==0)return{hookChanges:a,packageName:s,priorVersion:i,trustSignal:"provenance-dropped",version:c}})).filter(s=>s!==void 0)};export{Ke as M,sr as a,nr as b,tr as c,er as d,rr as e,Qe as f,Ye as g,Xe as h,Ze as r};

package/dist/packem_shared/spinner-BXSl864p.js

@@ -1 +0,0 @@
-import{t as r,a7 as C,a4 as S,g as T}from"../packem_chunks/bin.js";import{V as y}from"./MultiSpinner-B9U0-aE3-B-gIXhFk.js";const A=100,g=2147483647,m={delta:0,frame:0,time:0};function j(s){const{interval:i=A,isActive:e=!0}=s??{},t=k(i),{renderThrottleMs:c,subscribe:v}=r.useContext(C),[n,E]=r.useState(0),[I,h]=r.useState(m),o=r.useRef(0),f=r.useRef(0),x=r.useRef({isActive:e,resetKey:n,safeInterval:t}),l=x.current,K=e&&(t!==l.safeInterval||!l.isActive||n!==l.resetKey),b=r.useCallback(()=>{E(u=>u+1)},[]);return r.useLayoutEffect(()=>{if(!e)return;h(m);let u=0;const{startTime:d,unsubscribe:M}=v(a=>{if(c>0&&a<o.current)return;const p=a-u,R=a-f.current;f.current=a,o.current=a+c,h({delta:R,frame:Math.floor(p/t),time:p})},t);return u=d,f.current=d,o.current=u+c,M},[t,e,v,c,n]),r.useLayoutEffect(()=>{x.current={isActive:e,resetKey:n,safeInterval:t}},[e,t,n]),K?{...m,reset:b}:{...I,reset:b}}function k(s){return Number.isFinite(s)?Math.min(g,Math.max(1,s)):A}function D({type:s="dots"}){const i=y(s)??y("dots"),e=i?.frames??[" "],{frame:t}=j({interval:i?.interval??80});return S.jsx(T,{children:e[t%e.length]})}export{D as o};

package/dist/packem_shared/use-measured-height-BBJ9intr.js

@@ -1 +0,0 @@
-import{createRequire as u}from"node:module";import{t,U as c}from"../packem_chunks/bin.js";const f=u(import.meta.url),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process;const _=(o,i)=>{const r=t.useRef(null),[s,n]=t.useState(o);return t.useLayoutEffect(()=>{if(!r.current)return;const{height:e}=c(r.current);e>0&&e!==s&&(n(e),i?.(e))}),{measuredHeight:s,ref:r}};export{_ as u};

package/dist/packem_shared/verify-Du7xZ2BJ.js

@@ -1 +0,0 @@
-import{createRequire as g}from"node:module";import{m as i,f as a,v as d}from"./index-BDmTbWX1.js";import{u as j}from"../packem_chunks/bin.js";const h=g(import.meta.url),p=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,u=c=>{if(typeof p<"u"&&p.versions&&p.versions.node){const[s,o]=p.versions.node.split(".").map(Number);if(s>22||s===22&&o>=3||s===20&&o>=16)return p.getBuiltinModule(c)}return h(c)},{readdirSync:m}=u("node:fs"),b=[".husky/pre-commit",".vis/hooks/pre-commit",".git/hooks/pre-commit"],v=[".secretlintrc",".secretlintrc.json",".secretlintrc.js",".secretlintrc.mjs",".secretlintrc.cjs",".secretlintrc.yml",".secretlintrc.yaml"],$=[".syncpackrc",".syncpackrc.json",".syncpackrc.yaml",".syncpackrc.yml",".syncpackrc.cjs",".syncpackrc.js",".syncpackrc.mjs",".syncpackrc.ts","syncpack.config.cjs","syncpack.config.js","syncpack.config.mjs","syncpack.config.ts"],w=c=>{const s=i(c,"package.json");if(!a(s))return[];let o;try{o=JSON.parse(d(s))}catch{return[]}const e=[];if(o.scripts)for(const[t,n]of Object.entries(o.scripts))typeof n=="string"&&(/\bgitleaks\b/.test(n)&&e.push({detail:`Script "${t}" still invokes gitleaks: ${n}`,kind:"script",location:"package.json",tool:"gitleaks"}),/\bsecretlint\b/.test(n)&&e.push({detail:`Script "${t}" still invokes secretlint: ${n}`,kind:"script",location:"package.json",tool:"secretlint"}),/\bsyncpack\b/.test(n)&&e.push({detail:`Script "${t}" still invokes syncpack: ${n}`,kind:"script",location:"package.json",tool:"syncpack"}),/\bsherif\b/.test(n)&&e.push({detail:`Script "${t}" still invokes sherif: ${n}`,kind:"script",location:"package.json",tool:"sherif"}));if(o.devDependencies)for(const t of Object.keys(o.devDependencies))(t==="gitleaks"||t==="@gitleaks/cli")&&e.push({detail:`devDependency \`${t}\` is still installed`,kind:"devDep",location:"package.json",tool:"gitleaks"}),(t==="secretlint"||t.startsWith("@secretlint/"))&&e.push({detail:`devDependency \`${t}\` is still installed`,kind:"devDep",location:"package.json",tool:"secretlint"}),t==="syncpack"&&e.push({detail:`devDependency \`${t}\` is still installed`,kind:"devDep",location:"package.json",tool:"syncpack"}),t==="sherif"&&e.push({detail:`devDependency \`${t}\` is still installed`,kind:"devDep",location:"package.json",tool:"sherif"});return o.sherif&&e.push({detail:"`sherif` config block still present in package.json",kind:"config",location:"package.json",tool:"sherif"}),e},_=c=>{const s=[];for(const o of b){const e=i(c,o);if(!a(e))continue;const t=d(e);/\bgitleaks\b/.test(t)&&s.push({detail:"gitleaks invocation still present in hook",kind:"hook",location:o,tool:"gitleaks"}),/\bsecretlint\b/.test(t)&&s.push({detail:"secretlint invocation still present in hook",kind:"hook",location:o,tool:"secretlint"}),/\bsyncpack\b/.test(t)&&s.push({detail:"syncpack invocation still present in hook",kind:"hook",location:o,tool:"syncpack"}),/\bsherif\b/.test(t)&&s.push({detail:"sherif invocation still present in hook",kind:"hook",location:o,tool:"sherif"})}return s},D=c=>{const s=[];for(const o of v)a(i(c,o))&&s.push({detail:"secretlint config should be removed after migration",kind:"config",location:o,tool:"secretlint"});for(const o of $)a(i(c,o))&&s.push({detail:"syncpack config should be removed after migration",kind:"config",location:o,tool:"syncpack"});return s},S=[".github/workflows",".gitlab-ci.yml",".circleci/config.yml",".woodpecker.yml",".drone.yml"],O=c=>{const s=[],o=e=>{const t=i(c,e);if(!a(t))return;const n=d(t);/\bsyncpack\b/.test(n)&&s.push({detail:"syncpack invocation still present in CI",kind:"ci",location:e,tool:"syncpack"}),/\bsherif\b/.test(n)&&s.push({detail:"sherif invocation still present in CI",kind:"ci",location:e,tool:"sherif"})};for(const e of S){const t=i(c,e);if(a(t)){if(e===".github/workflows"){try{for(const n of m(t))(n.endsWith(".yml")||n.endsWith(".yaml"))&&o(`.github/workflows/${n}`)}catch{}continue}o(e)}}return s},M=c=>{const s=[],o=i(c,"pnpm-workspace.yaml");if(a(o)){let t;try{t=j(o)}catch{t=void 0}if(t&&typeof t=="object"){const n=t.catalog;n&&typeof n.syncpack=="string"&&s.push({detail:"`syncpack` still listed in pnpm-workspace.yaml#catalog",kind:"catalog",location:"pnpm-workspace.yaml",tool:"syncpack"});const l=t.catalogs;if(l&&typeof l=="object")for(const[k,r]of Object.entries(l))r&&typeof r.syncpack=="string"&&s.push({detail:`\`syncpack\` still listed in pnpm-workspace.yaml#catalogs.${k}`,kind:"catalog",location:"pnpm-workspace.yaml",tool:"syncpack"})}}const e=i(c,"package.json");if(a(e)){let t;try{t=JSON.parse(d(e))}catch{return s}const n=t.workspaces;if(n&&typeof n=="object"&&!Array.isArray(n)){const k=n.catalog;k&&typeof k.syncpack=="string"&&s.push({detail:"`syncpack` still listed in package.json#workspaces.catalog",kind:"catalog",location:"package.json",tool:"syncpack"});const r=n.catalogs;if(r&&typeof r=="object")for(const[y,f]of Object.entries(r))f&&typeof f.syncpack=="string"&&s.push({detail:`\`syncpack\` still listed in package.json#workspaces.catalogs.${y}`,kind:"catalog",location:"package.json",tool:"syncpack"})}const l=t.catalog;l&&typeof l.syncpack=="string"&&s.push({detail:"`syncpack` still listed in package.json#catalog",kind:"catalog",location:"package.json",tool:"syncpack"})}return s},N=c=>[...w(c),..._(c),...D(c),...O(c),...M(c)],W=(c,s)=>{const o=N(c);if(o.length===0)return s.info("✓ No unmigrated gitleaks/secretlint/sherif/syncpack references found."),[];s.warn(`Found ${String(o.length)} unmigrated reference(s):`);for(const e of o)s.warn(`  [${e.kind}] ${e.location} — ${e.detail}`);return o};export{N as s,W as v};