@visulima/vis 1.0.0-alpha.42 → 1.0.0-alpha.43

package/CHANGELOG.md

@@ -1,3 +1,30 @@
+## @visulima/vis [1.0.0-alpha.43](https://github.com/visulima/visulima/compare/@visulima/vis@1.0.0-alpha.42...@visulima/vis@1.0.0-alpha.43) (2026-06-20)
+
+### Features
+
+* **vis:** first-run info gate for visx/dlx ([53dd31e](https://github.com/visulima/visulima/commit/53dd31e39659d1281d8e94e174475e209bcb8b11))
+
+### Bug Fixes
+
+* **vis,secret-scanner:** windows absolute-path handling ([b1a3d67](https://github.com/visulima/visulima/commit/b1a3d673b3fe4f918c44b1cd33b62bf15d3687fc))
+* **vis:** address dlx first-run gate review comments ([6b833d1](https://github.com/visulima/visulima/commit/6b833d105f0827a3a41140e646d3b548509ccd2d))
+* **vis:** align native binding version check with package version ([4075bae](https://github.com/visulima/visulima/commit/4075bae7c37a4e34fc1416cba7bad1436e3f8090))
+* **vis:** expand windows 8.3 short names in workspace containment ([dbfe9b1](https://github.com/visulima/visulima/commit/dbfe9b152154b1f7526d7e0cbfd48cd0d94e6cc0))
+* **vis:** fix Windows-only release test failures ([158a6a3](https://github.com/visulima/visulima/commit/158a6a39a69d3a59bba9503c1fbcde19048378fc))
+* **vis:** harden dlx first-run gate per review ([a370a57](https://github.com/visulima/visulima/commit/a370a579c4df1f6852bd9591701ce85ff674401c))
+
+### Code Refactoring
+
+* **vis:** humanizer formatBytes + remaining dlx gate review nits ([7e1495b](https://github.com/visulima/visulima/commit/7e1495b9ca962d2e4b4adbabf2f150830a1d3bda))
+
+### Tests
+
+* **vis:** cover dlx gatherPackageInfo ([f998e0b](https://github.com/visulima/visulima/commit/f998e0b3bb66042aac60eff312e948ab6604b837))
+* **vis:** make 8.3 containment mock separator-agnostic ([c2cf820](https://github.com/visulima/visulima/commit/c2cf8208e43ad38f526b16f0546e5c45fddc94d6))
+* **vis:** make release path/shell-quote assertions OS-aware ([8280b28](https://github.com/visulima/visulima/commit/8280b288ccf63fe7181ace194c22390501d5e7b1))
+* **vis:** skip flaky windows-only release/staged suites with TODO ([c568088](https://github.com/visulima/visulima/commit/c5680882df82341ce2cca220972a09e1b030f2de))
+* **vis:** skip windows-deadlock release/commands suites ([1d48a62](https://github.com/visulima/visulima/commit/1d48a6272228629d95ec9620c6b7d0860a184cd3))
+
 ## @visulima/vis [1.0.0-alpha.42](https://github.com/visulima/visulima/compare/@visulima/vis@1.0.0-alpha.41...@visulima/vis@1.0.0-alpha.42) (2026-06-19)
 
 ### Features

package/dist/bin.js

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-CnDBuLh3.js";
+import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-DDq2oszw.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{c as r,V as o,h as c,e as i,r as a}from"./packem_shared/index-CPhv-r4c.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r.version}
+import{c as r,V as o,h as c,e as i,r as a}from"./packem_shared/index-DJAnbLEh.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r.version}
 `),process.exit(0));process.argv.splice(2,0,"dlx");n();const e=o("visx",{packageName:"visx",packageVersion:r.version}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(c({detailed:p,exitOnError:!1}));e.addCommand(i);a(e);

package/dist/config/index.js

@@ -1 +1 @@
-import{k as a,d as f,m as o,y as e,i as n,n as l,N as C,A as d,B as g,e as F}from"../packem_chunks/config.js";import{definePlugin as T}from"../packem_shared/definePlugin-DoUcoYSy.js";import{otelPlugin as t}from"../packem_shared/otelPlugin-DmKDBaPo.js";export{a as CONFIG_FILES,f as SECURITY_DEFAULTS,o as TASK_CONFIG_FILES,e as applyDefaults,n as defineConfig,T as definePlugin,l as defineTaskConfig,C as findVisConfigFile,d as findVisTaskConfigFile,g as loadVisConfig,F as loadVisTaskConfig,t as otelPlugin};
+import{CONFIG_FILES as o,SECURITY_DEFAULTS as e,TASK_CONFIG_FILES as n,applyDefaults as l,defineConfig as C,defineTaskConfig as g,findVisConfigFile as s,findVisTaskConfigFile as a,loadVisConfig as d,loadVisTaskConfig as F}from"../packem_chunks/CONFIG_FILES.js";import{definePlugin as T}from"../packem_shared/definePlugin-DoUcoYSy.js";import{otelPlugin as t}from"../packem_shared/otelPlugin-DmKDBaPo.js";export{o as CONFIG_FILES,e as SECURITY_DEFAULTS,n as TASK_CONFIG_FILES,l as applyDefaults,C as defineConfig,T as definePlugin,g as defineTaskConfig,s as findVisConfigFile,a as findVisTaskConfigFile,d as loadVisConfig,F as loadVisTaskConfig,t as otelPlugin};

package/dist/packem_chunks/CONFIG_FILES.js

@@ -0,0 +1,8 @@
+import{createRequire as G}from"node:module";import{E as O,m as P}from"../packem_shared/target-merge-DOm6h6tW.js";import{m as c,A as b,f as p,a as h,H as y,O as C}from"../packem_shared/index-OQZQyN5R.js";import{importTs as I}from"./ts-loader.js";import{otelPlugin as jt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as Tt}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as _}from"../packem_shared/readJsonSync-CvkZyKmL-CY7PZob_.js";const F=G(import.meta.url),d=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof d<"u"&&d.versions&&d.versions.node){const[e,s]=d.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return d.getBuiltinModule(t)}return F(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:V}=k("node:fs"),{createRequire:N}=k("node:module");class l extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class K extends l{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class E extends l{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
+`),s),this.filePath=e,this.removedKeys=o}}class j extends l{constructor(e,s,o){const r=o instanceof Error?o.message:String(o),n=s.length>0?`
+Chain: ${s.join(" → ")}`:"";super(`Failed to load ${e}: ${r}${n}`,s,{cause:o})}}const L=t=>t.join(" → ");class g extends l{constructor(e,s,o){const r=s.length>0?s[s.length-1]:"<unknown>",n=o.length>0?`
+Tried:
+  ${o.join(`
+  `)}`:"";super(`Cannot resolve "${e}" extended from ${r}.${n}
+Chain: ${L(s)}`,s)}}const q=t=>{const e=[];if(Object.hasOwn(t,"targetDefaults")&&e.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(t,"taskRunnerOptions")&&e.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(t,"taskDefaults")){const{taskDefaults:s}=t,o=[];if(Array.isArray(s))for(const[r,n]of s.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));e.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(t.scopedTasks))for(const[s,o]of t.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&e.push({location:`scopedTasks[${s}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&e.push({location:`scopedTasks[${s}].targets`,name:"targets",renamedTo:"tasks"}));return e},M=t=>Object.hasOwn(t,"targets")&&!Object.hasOwn(t,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],U=(t,e,s)=>{if(!s||typeof s!="object")return;const o=q(s);if(o.length>0)throw new E(t,e,o)},H=(t,e,s)=>{if(!s||typeof s!="object")return;const o=M(s);if(o.length>0)throw new E(t,e,o)},x=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],W=new Set(x),S=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],B=new Set(S),ht=2880,m={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},Y=t=>{if(!t)return{...m};const e=m.policies??{},s=t.policies??{},o={...e,...s};for(const r of Object.keys(e)){const n=e[r],a=s[r];n!==void 0&&a!==void 0&&(o[r]={...n,...a})}return{...m,...t,policies:o}},v=t=>({...t,security:Y(t.security),update:{security:!0,target:"minor",...t.update}}),z=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>W.has(o)));for(const o of x)if(s.has(o))return c(t,o)},J=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>B.has(o)));for(const o of S)if(s.has(o))return c(t,o)},A=t=>T("sha256").update(V(t)).digest("hex"),Q=t=>{const e=T("sha256"),s=[...t].sort();for(const o of s)e.update(o),e.update(":"),e.update(A(o)),e.update(`
+`);return e.digest("hex")},X=t=>{const e=c(t,"node_modules");if(p(e)){const o=c(e,".cache","vis");return h(o),c(o,"vis-config-cache.json")}const s=O("vis",{create:!0,cwd:t});return s?c(s,"vis-config-cache.json"):void 0},Z=(t,e)=>{if(p(t))try{const s=_(t);if(s.hash===e)return s.config}catch{}},tt=(t,e,s)=>{try{h(y(t)),C(t,{config:s,hash:e})}catch{}},et=t=>t===void 0?[]:Array.isArray(t)?t:[t],st=(t,e,s)=>{if(b(t))throw new g(t,[...s,e],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(t.startsWith("./")||t.startsWith("../")){const r=y(e),n=c(r,t);if(o.push(n),p(n))return n;throw new g(t,[...s,e],o)}try{return N(e).resolve(t)}catch{throw o.push(`require.resolve("${t}") from ${e}`),new g(t,[...s,e],o)}},R=async(t,e)=>{let s;try{s=(await I(t)).default??{}}catch(o){throw new j(t,e,o)}try{return(typeof s=="function"?await s()??{}:s)??{}}catch(o){throw new j(t,e,o)}},ot=(t,e)=>{const s={...t,...e};if(t.tasks||e.tasks){const o=new Set([...Object.keys(t.tasks??{}),...Object.keys(e.tasks??{})]),r={};for(const n of o)r[n]=P(t.tasks?.[n],e.tasks?.[n]);s.tasks=r}if((t.scopedTasks||e.scopedTasks)&&(s.scopedTasks=[...t.scopedTasks??[],...e.scopedTasks??[]]),(t.fileGroups||e.fileGroups)&&(s.fileGroups={...t.fileGroups,...e.fileGroups}),(t.taskGroups||e.taskGroups)&&(s.taskGroups={...t.taskGroups,...e.taskGroups}),t.security||e.security){const o=t.security?.policies??{},r=e.security?.policies??{},n={...o,...r};for(const a of Object.keys(o)){const i=o[a],f=r[a];i!==void 0&&f!==void 0&&(n[a]={...i,...f})}s.security={...t.security,...e.security,acceptedRisks:{...t.security?.acceptedRisks,...e.security?.acceptedRisks},policies:n}}return(t.update||e.update)&&(s.update={...t.update,...e.update}),(t.taskRunner||e.taskRunner)&&(s.taskRunner={...t.taskRunner,...e.taskRunner}),delete s.extends,s},D=async(t,e,s,o,r)=>{if(s.has(t))throw new K(t,e);if(!o.has(t)){s.add(t);try{const n=await R(t,e);U(t,e,n);const a=et(n.extends);for(const i of a){const f=st(i,t,e);await D(f,[...e,t],s,o,r)}o.set(t,n),r.push(t)}finally{s.delete(t)}}},lt=async(t,e)=>{let s;if(e?.explicitConfigPath){const u=b(e.explicitConfigPath)?e.explicitConfigPath:c(t,e.explicitConfigPath);if(!p(u))throw new Error(`Cannot find config file at ${u}`);s=u}else s=z(t);if(!s)return v({});const o=new Set,r=new Map,n=[];await D(s,[],o,r,n);const a=Q(n),i=X(t);if(i){const u=Z(i,a);if(u)return u}let f={};for(const u of n)f=ot(f,r.get(u));const w=v(f);return i&&tt(i,a,w),w},nt=t=>t.replaceAll(/[^\w.-]+/g,"_"),rt=(t,e)=>{const s=c(t,"node_modules"),o=nt(e);if(p(s)){const n=c(s,".cache","vis","task-configs");return h(n),c(n,`${o}.json`)}const r=O("vis",{create:!0,cwd:t});return r?c(r,"task-configs",`${o}.json`):void 0},at=(t,e)=>{if(p(t))try{const s=_(t);if(s.hash===e)return s.config}catch{}},it=(t,e,s)=>{try{h(y(t)),C(t,{config:s,hash:e})}catch{}},gt=async(t,e,s)=>{const o=J(e);if(!o)return;const r=A(o),n=rt(t,s);if(n){const f=at(n,r);if(f)return f}const a=await R(o,[]);H(o,[],a);const i=a;return n&&it(n,r,i),i},mt=t=>t,kt=t=>t;export{x as CONFIG_FILES,ht as DEFAULT_MIN_RELEASE_AGE_MINUTES,m as SECURITY_DEFAULTS,S as TASK_CONFIG_FILES,v as applyDefaults,kt as defineConfig,Tt as definePlugin,mt as defineTaskConfig,z as findVisConfigFile,J as findVisTaskConfigFile,lt as loadVisConfig,gt as loadVisTaskConfig,jt as otelPlugin};

package/dist/packem_chunks/bloom-status.js

@@ -1,2 +1,2 @@
-import{s as c,E as n,I as f}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-OuTfu_LE.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+import{s as c,E as n,I as f}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-BsQ-aFiM.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
 `);return}if(i.info(`Cache: ${e.cacheDir}`),!e.present){i.warn(`No osv-bloom filter yet. Run ${c("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;i.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),i.info(`Fetch:  ${e.fetchedAtIso??n("—")} (${a(e.fetchedAtIso)})`),i.info(`Filter: ${f(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),i.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),i.info(n(`Digest: ${o.setDigestSha256}`))}else i.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},h=u;export{h as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -1,2 +1,2 @@
-import{E as m}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-CN9ONR0y.js";import{s as d,D}from"../packem_shared/osv-bloom-OuTfu_LE.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+import{E as m}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-RTMsE3Z4.js";import{s as d,D}from"../packem_shared/osv-bloom-BsQ-aFiM.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
 `):e&&(i.info(m(`Cache: ${e.cacheDir}`)),i.info(m(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},O=h;export{O as advisoriesBloomSyncExecute};