@visulima/vis 1.0.0-alpha.43 → 1.0.0-alpha.45

package/CHANGELOG.md

@@ -1,3 +1,81 @@
+## @visulima/vis [1.0.0-alpha.45](https://github.com/visulima/visulima/compare/@visulima/vis@1.0.0-alpha.44...@visulima/vis@1.0.0-alpha.45) (2026-06-30)
+
+### Bug Fixes
+
+* resolve eslint errors in fmt, jsdoc-open-api, vis ([43bf450](https://github.com/visulima/visulima/commit/43bf45081e46b042a08b555c3fcb60391b82d06f))
+* **vis:** disable class-methods-use-this for tui lifecycle ([182c972](https://github.com/visulima/visulima/commit/182c9727dcbef66a8609a864133fb2869bd2d9c4))
+* **vis:** drop pinned packageManager from release test fixtures ([d8c6a35](https://github.com/visulima/visulima/commit/d8c6a35326b12d5785cc8060a5aadb4cdc3d75be))
+* **vis:** stop corepack prompt hanging release pm probes ([ddb5f2d](https://github.com/visulima/visulima/commit/ddb5f2de908ffe187162ad13d3f1cd7024a4b6c8))
+* **vis:** stop Windows test hangs; start fallow dead-code cleanup ([e87ca70](https://github.com/visulima/visulima/commit/e87ca708223560775c2bd9ec7a59e1aa5853b5de))
+
+### Performance Improvements
+
+* **vis:** fast-path local .bin in exec command ([#716](https://github.com/visulima/visulima/issues/716)) ([dec9d37](https://github.com/visulima/visulima/commit/dec9d37829ded30c7be0c0c9d4649f726b8fbe94))
+
+### Styles
+
+* cs fixes ([2a960bb](https://github.com/visulima/visulima/commit/2a960bb1772c9dc70080e2d75d3a0d827034e294))
+
+### Miscellaneous Chores
+
+* add fallow code-intelligence across all packages ([a3b4821](https://github.com/visulima/visulima/commit/a3b48215002e86fed20f2973038b5d4a0aa1ce04))
+* **fallow:** resolve dead-code findings ([c4125d5](https://github.com/visulima/visulima/commit/c4125d53e03ac9d90115399634535991927a96cc))
+
+### Code Refactoring
+
+* address thermos code-quality findings ([392ed96](https://github.com/visulima/visulima/commit/392ed96b489b1c4df30157ad2f33fc9b3fd82fef))
+* **vis:** resolve fallow dead-code findings ([fd0c8ae](https://github.com/visulima/visulima/commit/fd0c8aed0126db0d4bfa6fb0acfcad2780d7f615))
+
+### Tests
+
+* fix failing and flaky package tests ([3f2894e](https://github.com/visulima/visulima/commit/3f2894e816e99f465abb0d3b7d5161af69bbb4ec))
+* **vis:** fix windows timeout/EBUSY in release command suites ([a822cf7](https://github.com/visulima/visulima/commit/a822cf79a719fd0005ff7cda9ba81c9a2c9b7462))
+
+### Continuous Integration
+
+* **fallow:** make fallow:health advisory (--report-only) ([d57148e](https://github.com/visulima/visulima/commit/d57148ea0e3556b4c24d8d336b9fa14987f5dc7d))
+
+
+### Dependencies
+
+* **@visulima/error:** upgraded to 6.0.0-alpha.35
+* **@visulima/tui:** upgraded to 1.0.0-alpha.27
+* **@visulima/ansi:** upgraded to 4.0.0-alpha.18
+* **@visulima/cerebro:** upgraded to 3.0.0-alpha.33
+* **@visulima/colorize:** upgraded to 2.0.0-alpha.15
+* **@visulima/fs:** upgraded to 5.0.0-alpha.33
+* **@visulima/package:** upgraded to 5.0.0-alpha.32
+* **@visulima/pail:** upgraded to 4.0.0-alpha.23
+* **@visulima/string:** upgraded to 3.0.0-alpha.18
+* **@visulima/tsconfig:** upgraded to 3.0.0-alpha.32
+
+## @visulima/vis [1.0.0-alpha.44](https://github.com/visulima/visulima/compare/@visulima/vis@1.0.0-alpha.43...@visulima/vis@1.0.0-alpha.44) (2026-06-23)
+
+### Features
+
+* **vis:** native Rust CLI front-end + nub-parity for x/run ([#697](https://github.com/visulima/visulima/issues/697)) ([88d505b](https://github.com/visulima/visulima/commit/88d505bef74f08a895849e41f26682e684aa67be))
+* **vis:** task-runner feedback fixes + CI hook skip ([#696](https://github.com/visulima/visulima/issues/696)) ([450412c](https://github.com/visulima/visulima/commit/450412cb92eee1397edaa46447128b1487d06369))
+
+### Bug Fixes
+
+* **vis:** group failed tasks in ci log output ([0fb8678](https://github.com/visulima/visulima/commit/0fb8678d9b66c6b587fb113310cfe9abce9aa6d0))
+* **vis:** unbreak full build — exclude variable-import modules from dynamic-import-vars ([#712](https://github.com/visulima/visulima/issues/712)) ([29d46eb](https://github.com/visulima/visulima/commit/29d46eb719de11ab8f09e5303748264607b04fe3)), closes [#697](https://github.com/visulima/visulima/issues/697) [#697](https://github.com/visulima/visulima/issues/697) [#697](https://github.com/visulima/visulima/issues/697) [#697](https://github.com/visulima/visulima/issues/697)
+* **vis:** wrap native crate-type array to satisfy toml lint rule ([9470654](https://github.com/visulima/visulima/commit/94706547342291197afb8babd5d2929ae9e0bb9b))
+
+### Documentation
+
+* **task-runner,vis:** add nub MIT attribution to ported native code ([9305f59](https://github.com/visulima/visulima/commit/9305f592da38dd13a179ef1af75fb0c8f5d84693))
+
+### Tests
+
+* **vis,task-runner:** address review on native benches ([f89dd33](https://github.com/visulima/visulima/commit/f89dd335d103744308a48568e49577d2019aca35))
+* **vis:** add criterion transpile bench + harness docs ([fb34159](https://github.com/visulima/visulima/commit/fb341597b498916afb398bfc1be66944f2967c98)), closes [nubjs/nub#17](https://github.com/nubjs/nub/issues/17)
+
+
+### Dependencies
+
+* **@visulima/task-runner:** upgraded to 1.0.0-alpha.25
+
 ## @visulima/vis [1.0.0-alpha.43](https://github.com/visulima/visulima/compare/@visulima/vis@1.0.0-alpha.42...@visulima/vis@1.0.0-alpha.43) (2026-06-20)
 
 ### Features

package/LICENSE.md

@@ -8722,6 +8722,173 @@ Repository: git+https://github.com/visulima/visulima.git
 
 ---------------------------------------
 
+## @visulima/tsconfig
+License: MIT
+By: Daniel Bannert
+Repository: git+https://github.com/visulima/visulima.git
+
+> MIT License
+>
+> Copyright (c) 2026 visulima
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all
+> copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> SOFTWARE.
+>
+>
+>
+>
+>
+>
+> # Licenses of bundled types
+>
+> The published @visulima/tsconfig artifact additionally contains code with the following licenses:
+> (MIT OR CC0-1.0)
+>
+> # Bundled types:
+>
+> ## type-fest
+>
+> License: (MIT OR CC0-1.0)
+> By: Sindre Sorhus
+> Repository: sindresorhus/type-fest
+>
+> > Creative Commons Legal Code
+> >
+> > CC0 1.0 Universal
+> >
+> >     CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+> >     LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+> >     ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+> >     INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+> >     REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+> >     PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+> >     THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+> >     HEREUNDER.
+> >
+> > Statement of Purpose
+> >
+> > The laws of most jurisdictions throughout the world automatically confer
+> > exclusive Copyright and Related Rights (defined below) upon the creator
+> > and subsequent owner(s) (each and all, an "owner") of an original work of
+> > authorship and/or a database (each, a "Work").
+> >
+> > Certain owners wish to permanently relinquish those rights to a Work for
+> > the purpose of contributing to a commons of creative, cultural and
+> > scientific works ("Commons") that the public can reliably and without fear
+> > of later claims of infringement build upon, modify, incorporate in other
+> > works, reuse and redistribute as freely as possible in any form whatsoever
+> > and for any purposes, including without limitation commercial purposes.
+> > These owners may contribute to the Commons to promote the ideal of a free
+> > culture and the further production of creative, cultural and scientific
+> > works, or to gain reputation or greater distribution for their Work in
+> > part through the use and efforts of others.
+> >
+> > For these and/or other purposes and motivations, and without any
+> > expectation of additional consideration or compensation, the person
+> > associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+> > is an owner of Copyright and Related Rights in the Work, voluntarily
+> > elects to apply CC0 to the Work and publicly distribute the Work under its
+> > terms, with knowledge of his or her Copyright and Related Rights in the
+> > Work and the meaning and intended legal effect of CC0 on those rights.
+> >
+> > 1. Copyright and Related Rights. A Work made available under CC0 may be
+> >    protected by copyright and related or neighboring rights ("Copyright and
+> >    Related Rights"). Copyright and Related Rights include, but are not
+> >    limited to, the following:
+> >
+> > i. the right to reproduce, adapt, distribute, perform, display,
+> > communicate, and translate a Work;
+> > ii. moral rights retained by the original author(s) and/or performer(s);
+> > iii. publicity and privacy rights pertaining to a person's image or
+> > likeness depicted in a Work;
+> > iv. rights protecting against unfair competition in regards to a Work,
+> > subject to the limitations in paragraph 4(a), below;
+> > v. rights protecting the extraction, dissemination, use and reuse of data
+> > in a Work;
+> > vi. database rights (such as those arising under Directive 96/9/EC of the
+> > European Parliament and of the Council of 11 March 1996 on the legal
+> > protection of databases, and under any national implementation
+> > thereof, including any amended or successor version of such
+> > directive); and
+> > vii. other similar, equivalent or corresponding rights throughout the
+> > world based on applicable law or treaty, and any national
+> > implementations thereof.
+> >
+> > 2. Waiver. To the greatest extent permitted by, but not in contravention
+> >    of, applicable law, Affirmer hereby overtly, fully, permanently,
+> >    irrevocably and unconditionally waives, abandons, and surrenders all of
+> >    Affirmer's Copyright and Related Rights and associated claims and causes
+> >    of action, whether now known or unknown (including existing as well as
+> >    future claims and causes of action), in the Work (i) in all territories
+> >    worldwide, (ii) for the maximum duration provided by applicable law or
+> >    treaty (including future time extensions), (iii) in any current or future
+> >    medium and for any number of copies, and (iv) for any purpose whatsoever,
+> >    including without limitation commercial, advertising or promotional
+> >    purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+> >    member of the public at large and to the detriment of Affirmer's heirs and
+> >    successors, fully intending that such Waiver shall not be subject to
+> >    revocation, rescission, cancellation, termination, or any other legal or
+> >    equitable action to disrupt the quiet enjoyment of the Work by the public
+> >    as contemplated by Affirmer's express Statement of Purpose.
+> > 3. Public License Fallback. Should any part of the Waiver for any reason
+> >    be judged legally invalid or ineffective under applicable law, then the
+> >    Waiver shall be preserved to the maximum extent permitted taking into
+> >    account Affirmer's express Statement of Purpose. In addition, to the
+> >    extent the Waiver is so judged Affirmer hereby grants to each affected
+> >    person a royalty-free, non transferable, non sublicensable, non exclusive,
+> >    irrevocable and unconditional license to exercise Affirmer's Copyright and
+> >    Related Rights in the Work (i) in all territories worldwide, (ii) for the
+> >    maximum duration provided by applicable law or treaty (including future
+> >    time extensions), (iii) in any current or future medium and for any number
+> >    of copies, and (iv) for any purpose whatsoever, including without
+> >    limitation commercial, advertising or promotional purposes (the
+> >    "License"). The License shall be deemed effective as of the date CC0 was
+> >    applied by Affirmer to the Work. Should any part of the License for any
+> >    reason be judged legally invalid or ineffective under applicable law, such
+> >    partial invalidity or ineffectiveness shall not invalidate the remainder
+> >    of the License, and in such case Affirmer hereby affirms that he or she
+> >    will not (i) exercise any of his or her remaining Copyright and Related
+> >    Rights in the Work or (ii) assert any associated claims and causes of
+> >    action with respect to the Work, in either case contrary to Affirmer's
+> >    express Statement of Purpose.
+> > 4. Limitations and Disclaimers.
+> >
+> > a. No trademark or patent rights held by Affirmer are waived, abandoned,
+> > surrendered, licensed or otherwise affected by this document.
+> > b. Affirmer offers the Work as-is and makes no representations or
+> > warranties of any kind concerning the Work, express, implied,
+> > statutory or otherwise, including without limitation warranties of
+> > title, merchantability, fitness for a particular purpose, non
+> > infringement, or the absence of latent or other defects, accuracy, or
+> > the present or absence of errors, whether or not discoverable, all to
+> > the greatest extent permissible under applicable law.
+> > c. Affirmer disclaims responsibility for clearing rights of other persons
+> > that may apply to the Work or any use thereof, including without
+> > limitation any person's Copyright and Related Rights in the Work.
+> > Further, Affirmer disclaims responsibility for obtaining any necessary
+> > consents, permissions or other rights required for any use of the
+> > Work.
+> > d. Affirmer understands and acknowledges that Creative Commons is not a
+> > party to this document and has no duty or obligation with respect to
+> > this CC0 or use of the Work.
+
+---------------------------------------
+
 ## @visulima/tui
 License: MIT
 By: Daniel Bannert
@@ -12165,6 +12332,66 @@ Repository: nodeca/js-yaml
 
 ---------------------------------------
 
+## json5
+License: MIT
+By: Aseem Kishore, Max Nanasy, Andrew Eisenberg, Jordan Tucker
+Repository: git+https://github.com/json5/json5.git
+
+> MIT License
+>
+> Copyright (c) 2012-2018 Aseem Kishore, and [others].
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all
+> copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> SOFTWARE.
+>
+> [others]: https://github.com/json5/json5/contributors
+
+---------------------------------------
+
+## jsonc-parser
+License: MIT
+By: Microsoft Corporation
+Repository: https://github.com/microsoft/node-jsonc-parser
+
+> The MIT License (MIT)
+>
+> Copyright (c) Microsoft
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all
+> copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> SOFTWARE.
+
+---------------------------------------
+
 ## jstoxml
 License: MIT
 By: David Calhoun
@@ -12353,6 +12580,35 @@ Repository: https://github.com/facebook/react.git
 
 ---------------------------------------
 
+## resolve-pkg-maps
+License: MIT
+By: Hiroki Osame
+Repository: privatenumber/resolve-pkg-maps
+
+> MIT License
+>
+> Copyright (c) Hiroki Osame <hiroki.osame@gmail.com>
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all
+> copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> SOFTWARE.
+
+---------------------------------------
+
 ## scheduler
 License: MIT
 Repository: https://github.com/facebook/react.git

package/bin/resolve-binary.mjs

@@ -0,0 +1,85 @@
+// Platform resolution for the native `vis` CLI binary. Shared by the launcher
+// (`bin/vis.mjs`) and the integration tests so there is a single source of truth
+// for where the binary lives and how the platform -> binding-package target slug
+// is computed (mirroring the NAPI loader matrix in `index.js`).
+
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import { join } from "node:path";
+
+const require = createRequire(import.meta.url);
+
+// Best-effort musl detection for Linux. Defaults to glibc on any uncertainty.
+const isMusl = () => {
+    const report = typeof process.report?.getReport === "function" ? process.report.getReport() : undefined;
+
+    if (report && Array.isArray(report.sharedObjects)) {
+        return report.sharedObjects.some((object) => object.includes("libc.musl-") || object.includes("ld-musl-"));
+    }
+
+    // Default to glibc on uncertainty (no report). musl is identified by the
+    // absence of glibcVersionRuntime; matches handler.ts's copy.
+    return report ? !report.header?.glibcVersionRuntime : false;
+};
+
+// Static platform+arch -> target slug table for the non-Linux targets (Linux is
+// libc-dependent, so it is resolved separately).
+const STATIC_TARGETS = {
+    "darwin:arm64": "darwin-arm64",
+    "darwin:x64": "darwin-x64",
+    "win32:arm64": "win32-arm64-msvc",
+    "win32:x64": "win32-x64-msvc",
+};
+
+// Compute the binding-package target slug for the current platform, or undefined
+// for platforms with no published binary.
+const nativeTarget = () => {
+    const { arch, platform } = process;
+
+    if (platform === "linux") {
+        const libc = isMusl() ? "musl" : "gnu";
+
+        if (arch === "arm64" || arch === "x64") {
+            return `linux-${arch}-${libc}`;
+        }
+
+        return undefined;
+    }
+
+    return STATIC_TARGETS[`${platform}:${arch}`];
+};
+
+// Resolve the platform-specific `vis` binary, or undefined if none is available
+// (e.g. the optional binding package was not installed for this platform).
+// Resolution order, most specific first:
+//   1. VIS_NATIVE_BIN env override (dev / CI / tests).
+//   2. A binary placed next to the package (local `build:native:cli` output).
+//   3. The matching `@visulima/vis-binding-<target>` optional dependency.
+const resolveNativeBinary = (packageRoot) => {
+    const override = process.env.VIS_NATIVE_BIN;
+
+    if (override && existsSync(override)) {
+        return override;
+    }
+
+    const exe = process.platform === "win32" ? "vis-native-cli.exe" : "vis-native-cli";
+    const local = join(packageRoot, exe);
+
+    if (existsSync(local)) {
+        return local;
+    }
+
+    const target = nativeTarget();
+
+    if (target === undefined) {
+        return undefined;
+    }
+
+    try {
+        return require.resolve(`@visulima/vis-binding-${target}/${exe}`);
+    } catch {
+        return undefined;
+    }
+};
+
+export { nativeTarget, resolveNativeBinary };

package/bin/vis.mjs

@@ -0,0 +1,76 @@
+#!/usr/bin/env node
+// Native front-end launcher for `vis`.
+//
+// This is the npm `bin` entry. Its only jobs are to (1) route the small set of
+// natively-implemented commands to the platform Rust binary, and (2) fall
+// through to the existing in-process Node CLI for everything else. The
+// fall-through path is byte-identical to running `dist/bin.js` directly, so the
+// launcher adds no extra Node boot for delegated commands — it `import()`s the
+// same entry in the same process.
+//
+// As commands are ported off Node, their names are added to NATIVE_COMMANDS and
+// the binary grows to handle them; the binary itself delegates anything it does
+// not implement back to `dist/bin.js` via the VIS_* contract.
+
+import { spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { constants } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+
+import { resolveNativeBinary } from "./resolve-binary.mjs";
+
+const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+
+// VIS_FALLBACK_ENTRY lets tests (and the native binary's own delegation) point
+// the Node entry elsewhere; production resolves it next to the package.
+const fallbackEntry = process.env.VIS_FALLBACK_ENTRY ?? join(packageRoot, "dist", "bin.js");
+
+// Commands answered by the native binary. Every entry here MUST be handled by
+// the binary (natively or via its own Node delegation), with VERIFIED parity to
+// the Node behavior. Unknown commands never reach the binary — they take the
+// in-process path below, unchanged. NOTE: `-v` is cerebro's verbose flag (not
+// version), so it is deliberately absent.
+//
+// `exec` parity was verified empirically against cerebro: tool flags after the
+// command are forwarded to the tool on both the native path and the Node handler
+// (src/commands/exec/handler.ts), which was fixed to stop dropping them.
+const NATIVE_COMMANDS = new Set(["--version", "-V", "__native-info", "__pm-shim", "dedupe", "exec", "link", "outdated", "pm", "remove", "unlink", "why", "x"]);
+
+const command = process.argv[2] ?? "";
+
+if (NATIVE_COMMANDS.has(command)) {
+    const binary = resolveNativeBinary(packageRoot);
+
+    if (binary !== undefined) {
+        const { version } = JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8"));
+
+        const { error, signal, status } = spawnSync(binary, process.argv.slice(2), {
+            env: {
+                ...process.env,
+                VIS_FALLBACK_ENTRY: fallbackEntry,
+                VIS_NODE: process.execPath,
+                VIS_VERSION: version,
+            },
+            stdio: "inherit",
+        });
+
+        if (error) {
+            // Binary unusable (e.g. corrupt install) — fall through to Node.
+            process.env.VIS_NATIVE_BIN_FAILED = "1";
+        } else if (signal) {
+            // Signal-terminated: follow the shell convention (128 + signal number)
+            // so the exit code matches the binary's own delegation path.
+            process.exit(128 + (constants.signals[signal] ?? 1));
+        } else {
+            process.exit(status ?? 1);
+        }
+    }
+    // No binary for this platform: fall through to the Node CLI below.
+}
+
+// In-process Node CLI. Same module graph and behaviour as invoking dist/bin.js
+// directly — no extra process boot. fallbackEntry is an internally-resolved path
+// (never user input); pathToFileURL keeps the dynamic import valid on Windows.
+// eslint-disable-next-line no-unsanitized/method -- fallbackEntry is resolved internally, not from user input
+await import(pathToFileURL(fallbackEntry).href);

package/dist/bin.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/bin.js

@@ -1,2 +1 @@
-#!/usr/bin/env node
-import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-DDq2oszw.js";
+import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-CPMo34SM.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{c as r,V as o,h as c,e as i,r as a}from"./packem_shared/index-DJAnbLEh.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r.version}
+import{c as r,V as o,h as c,e as i,r as a}from"./packem_shared/index-XAb0QGqA.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r.version}
 `),process.exit(0));process.argv.splice(2,0,"dlx");n();const e=o("visx",{packageName:"visx",packageVersion:r.version}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(c({detailed:p,exitOnError:!1}));e.addCommand(i);a(e);

package/dist/packem_chunks/CONFIG_FILES.js

@@ -1,4 +1,4 @@
-import{createRequire as G}from"node:module";import{E as O,m as P}from"../packem_shared/target-merge-DOm6h6tW.js";import{m as c,A as b,f as p,a as h,H as y,O as C}from"../packem_shared/index-OQZQyN5R.js";import{importTs as I}from"./ts-loader.js";import{otelPlugin as jt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as Tt}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as _}from"../packem_shared/readJsonSync-CvkZyKmL-CY7PZob_.js";const F=G(import.meta.url),d=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof d<"u"&&d.versions&&d.versions.node){const[e,s]=d.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return d.getBuiltinModule(t)}return F(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:V}=k("node:fs"),{createRequire:N}=k("node:module");class l extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class K extends l{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class E extends l{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
+import{createRequire as G}from"node:module";import{E as O,m as P}from"../packem_shared/target-merge-DOm6h6tW.js";import{m as c,A as b,f as p,a as h,H as y,O as C}from"../packem_shared/index-CE6MsgcV.js";import{i as I}from"./ts-loader.js";import{otelPlugin as jt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as Tt}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as _}from"../packem_shared/readJsonSync-CvkZyKmL-ihoybKvs.js";const F=G(import.meta.url),d=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof d<"u"&&d.versions&&d.versions.node){const[e,s]=d.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return d.getBuiltinModule(t)}return F(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:V}=k("node:fs"),{createRequire:N}=k("node:module");class l extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class K extends l{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class E extends l{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
 `),s),this.filePath=e,this.removedKeys=o}}class j extends l{constructor(e,s,o){const r=o instanceof Error?o.message:String(o),n=s.length>0?`
 Chain: ${s.join(" → ")}`:"";super(`Failed to load ${e}: ${r}${n}`,s,{cause:o})}}const L=t=>t.join(" → ");class g extends l{constructor(e,s,o){const r=s.length>0?s[s.length-1]:"<unknown>",n=o.length>0?`
 Tried:

package/dist/packem_chunks/bloom-status.js

@@ -1,2 +1,2 @@
-import{s as c,E as n,I as f}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-BsQ-aFiM.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+import{s as c,E as n,I as f}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-DVMlkcAO.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
 `);return}if(i.info(`Cache: ${e.cacheDir}`),!e.present){i.warn(`No osv-bloom filter yet. Run ${c("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;i.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),i.info(`Fetch:  ${e.fetchedAtIso??n("—")} (${a(e.fetchedAtIso)})`),i.info(`Filter: ${f(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),i.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),i.info(n(`Digest: ${o.setDigestSha256}`))}else i.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},h=u;export{h as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -1,2 +1,2 @@
-import{E as m}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-RTMsE3Z4.js";import{s as d,D}from"../packem_shared/osv-bloom-BsQ-aFiM.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+import{E as m}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-YRpDs90j.js";import{s as d,D}from"../packem_shared/osv-bloom-DVMlkcAO.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
 `):e&&(i.info(m(`Cache: ${e.cacheDir}`)),i.info(m(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},O=h;export{O as advisoriesBloomSyncExecute};