@visulima/vis 1.0.0-alpha.8 → 1.0.0

package/skills/vis/SKILL.md

@@ -0,0 +1,96 @@
+---
+name: vis
+description: Use when the workspace contains a vis.config.ts (or vis.config.js/json) at the repo root, or when the user mentions "vis", "task-runner", or "@visulima/vis". This skill orchestrates the vis MCP server's eight read-only tools to inspect projects, plan task graphs, and diagnose remote-cache rotations.
+---
+
+# Working with the `vis` task runner
+
+`vis` is the Visulima monorepo task runner — a Turborepo/Nx-class tool with a remote cache, REAPI gRPC backend, and project graph. When this skill is active you have the **`@visulima/vis-mcp` server** mounted, exposing eight read-only tools. Use them in preference to running `vis` shell commands yourself: the tools give you structured JSON and run faster.
+
+The MCP server deliberately does NOT execute targets or scaffold templates — Nx-style "agent prepares, human executes". When the user wants to run `<project>:<target>` or `vis generate <template>`, prepare the command (use `list_targets`/`describe_template` to confirm it exists and capture required arguments) and ask the user to run it themselves; afterwards use `get_run_logs` to read the result of any task run.
+
+## Tools available
+
+| Tool                | Purpose                                                                                                                           |
+| ------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
+| `list_projects`     | All projects in the workspace, optionally filtered by a vis query (`tag=frontend`, `type=application`, …)                         |
+| `describe_project`  | Full metadata for one project: language, layer, tags, root path, all targets                                                      |
+| `list_targets`      | Per-target rows across the workspace, optionally narrowed to a single project                                                     |
+| `list_templates`    | Scaffolding templates discovered in `.vis/templates/`, `.moon/templates/`, and `vis.config.ts` `generator.templates`              |
+| `describe_template` | Variable schema, default destination, and description for a single template — required before suggesting a `vis generate` command |
+| `get_run_logs`      | Most recent run summary from `.task-runner/`, or a specific `runId`, optionally filtered to one task                              |
+| `cache_why`         | Diff a task's cache hash against the previous run — pinpoints what changed (command, nodes, runtime, implicit deps)               |
+| `cache_hash`        | Recorded hash and per-input hash details for a task                                                                               |
+
+## Workflow patterns
+
+### Discovery — "what's in this repo?"
+
+Default opening move when the user asks about the workspace:
+
+1. `list_projects` (no filter). Shows everything with categories and target counts.
+2. If they ask about a specific package, `describe_project` for the full picture rather than re-running list with a filter.
+
+### Plan a build
+
+1. `list_targets` (optionally with `project: "@scope/name"`) to see what `build`/`test`/`lint`/etc. targets exist.
+2. Tell the user the exact command (`vis run @scope/name:build`) and let them run it.
+3. Use `get_run_logs` afterwards to inspect status, cache hits, and stderr tails.
+
+### Investigate a cache miss
+
+When a build that should have been cached re-ran:
+
+1. `get_run_logs` (no args → latest summary) — surfaces all task statuses for the last run.
+2. For any task with status `success` but `cacheStatus: "miss"`, call `cache_why` with that `taskId`. It diffs hashDetails against the previous run and tells you which input rotated (command string, file content, `implicitDependency`, runtime version, …).
+3. If `cache_why` shows the change but the user wants to see the raw hash inputs, `cache_hash` returns the full per-input breakdown.
+
+### Scaffold a new package or component
+
+When the user asks for "a new X" / "scaffold Y":
+
+1. `list_templates` — pick the template whose `name` or `description` matches the user's request.
+2. `describe_template` with that name — read the `variables[]` schema. Identify which variables are `required` and which have sensible `default` values.
+3. Construct the command: `vis generate <name> -- --var1=value1 --var2=value2`. For interactive prompts, drop the `--` overrides and let the user step through. For `--defaults`-friendly templates, add `--defaults` to skip prompts.
+4. Hand the command to the user to execute. Don't fabricate variable values — if the user hasn't told you what to pass for a required variable, ask.
+
+#### Worked example
+
+User: _"Scaffold a new React button component called PrimaryButton."_
+
+1. Call `list_templates` → response contains an entry `{ "name": "component", "source": "native", "description": "Scaffold a React component" }`. That's the closest match.
+2. Call `describe_template` with `{ "name": "component" }` → response shows `variables`:
+    ```json
+    [
+        { "name": "name", "type": "string", "required": true, "prompt": "Component name?" },
+        { "name": "withTest", "type": "boolean", "required": false, "default": true },
+        { "name": "style", "type": "enum", "required": false, "default": "primary", "values": ["primary", "secondary"] }
+    ]
+    ```
+3. The user supplied `name` (`PrimaryButton`) and implied `style=primary` (default already matches). `withTest` is unspecified — the default is fine, no need to override.
+4. Suggested command for the user to run:
+    ```sh
+    vis generate component -- --name=PrimaryButton --style=primary
+    ```
+    Do **not** invent values for required variables the user never mentioned — ask first.
+
+### Diagnose a failed run
+
+1. `get_run_logs` to see which task(s) failed.
+2. `get_run_logs` with `taskId` set to the failing task — returns just that entry, including the captured stderr tail.
+3. Decide: is it a code bug (read the project's source), a cache poisoning issue (`cache_why`), or environmental (look at the run summary's `runtime` block)?
+
+## Safety rules
+
+- **All tools are read-only.** The server does not execute targets. If the user wants something built/tested/linted, give them the command and let them run it.
+- **All tools run in the directory where `vis-mcp` was launched.** Override at server startup by setting `VIS_MCP_WORKSPACE_ROOT`. You can read that path from the server's stderr boot line: `[vis-mcp] ready (workspace: …)`.
+
+## When NOT to use this skill
+
+- The user wants to write a `vis.config.ts` — that's editing source, not running the CLI. Use Read/Edit/Write on the config file directly.
+- The user is asking about Turborepo, Nx, or Bazel specifically (not vis). The tools won't help with those.
+- The repo has no `vis.config.*` and no mention of vis. Don't volunteer the tools.
+
+## Tool-result conventions
+
+All tools return JSON-encoded text in the standard MCP `content[].text` slot. On error, `isError: true` is set and the text payload is `{"error": "<message>"}`. Parse the JSON before reasoning about it — the text field is structured data, not prose.

package/templates/buildkite-ci/.buildkite/pipeline.yml.tera

@@ -0,0 +1,85 @@
+---
+to: ".buildkite/pipeline.yml"
+---
+# Generated by `vis generate buildkite-ci`.
+# Run `vis ci` against affected packages on every build.{% if withHeal %}
+# Heal block: on failure, `vis ai heal` posts a Buildkite annotation; an
+# allow-listed maintainer manually unblocks the block step to apply +
+# commit the patch via `vis ai heal accept`. The unblocker email
+# (BUILDKITE_UNBLOCKER_EMAIL) must be listed in `ai.heal.allowedActors`
+# in vis.config.ts or the accept step refuses to commit.{% endif %}
+
+steps:
+    - label: ":hammer: vis ci"
+      key: ci
+      timeout_in_minutes: 30
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ci {{ targets }}
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ci {{ targets }}
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ci {{ targets }}
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ci {{ targets }}
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+{% if withHeal %}
+    - label: ":sparkles: vis ai heal"
+      key: heal-propose
+      depends_on: ci
+      timeout_in_minutes: 30
+      # Only run when CI failed and the build is for a PR — heal-accept
+      # has nowhere to commit on push-event builds.
+      if: build.failed_jobs > 0 && build.pull_request.id != null
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ai heal
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ai heal
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ai heal
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ai heal
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+      # Buildkite has no commit API of its own — `vis ai heal accept`
+      # derives the upstream provider from BUILDKITE_REPO and commits
+      # through GitHub or GitLab. Set GITHUB_TOKEN or GITLAB_TOKEN on
+      # the agent (matching your remote) so heal accept can land the patch.
+
+    - block: ":white_check_mark: Apply AI heal patch?"
+      key: heal-gate
+      depends_on: heal-propose
+      if: build.failed_jobs > 0 && build.pull_request.id != null
+      prompt: |
+          Unblocking applies and commits the patch from the heal annotation.
+          The unblocker email (BUILDKITE_UNBLOCKER_EMAIL) must be listed in
+          `ai.heal.allowedActors` in vis.config.ts, otherwise the accept
+          step will refuse to commit.
+
+    - label: ":robot_face: vis ai heal accept"
+      key: heal-accept
+      depends_on: heal-gate
+      timeout_in_minutes: 30
+      # Defense in depth — heal-accept can't push to a fork and has no
+      # commit target on push-event builds. Refuse early.
+      if: build.pull_request.id != null
+      command: |
+{% if packageManager == "pnpm" %}          corepack enable
+          pnpm install --frozen-lockfile
+          pnpm vis ai heal accept
+{% endif %}{% if packageManager == "npm" %}          npm ci
+          npx vis ai heal accept
+{% endif %}{% if packageManager == "yarn" %}          corepack enable
+          yarn install --immutable
+          yarn vis ai heal accept
+{% endif %}{% if packageManager == "bun" %}          bun install --frozen-lockfile
+          bunx vis ai heal accept
+{% endif %}      agents:
+          queue: {{ agentQueue }}
+{% endif %}

package/templates/buildkite-ci/template.yml

@@ -0,0 +1,20 @@
+"title": "Buildkite CI"
+"description": "A Buildkite pipeline.yml that runs `vis ci` against affected packages, with an optional `vis ai heal` block-step flow."
+"variables":
+    "targets":
+        "type": "string"
+        "default": "lint,test,build"
+        "prompt": "Comma-separated list of `vis ci` targets to run"
+    "packageManager":
+        "type": "enum"
+        "values": ["pnpm", "npm", "yarn", "bun"]
+        "default": "pnpm"
+        "prompt": "Package manager (used in the install line)"
+    "withHeal":
+        "type": "boolean"
+        "default": false
+        "prompt": "Include the `vis ai heal` propose + block-step accept flow?"
+    "agentQueue":
+        "type": "string"
+        "default": "default"
+        "prompt": "Buildkite agent queue to schedule on"

package/dist/ai-analysis.d.ts

@@ -1,26 +0,0 @@
-import type { AiProviderInfo } from "@visulima/find-ai-runner";
-import type { AiAnalysisResult, AiRecommendation, AnalysisType } from "./ai-types.d.ts";
-import type { OutdatedEntry } from "./catalog.d.ts";
-interface AiConfig {
-    /** Cache TTL in milliseconds. Overrides default (1h / 30min for security). */
-    cacheTtl?: number;
-    /** Override default provider priority. Higher = preferred. */
-    priority?: Record<string, number>;
-    /** Use a specific provider, skip auto-detection. */
-    provider?: string;
-}
-declare const DEFAULT_PRIORITY: Record<string, number>;
-/** Resolve which AI provider to use based on config and availability. */
-declare const resolveProvider: (config?: AiConfig) => AiProviderInfo | undefined;
-declare const validateAnalysisType: (type: string) => AnalysisType;
-declare const buildAnalysisPrompt: (outdated: OutdatedEntry[], analysisType?: AnalysisType) => string;
-declare const extractJson: (text: string) => unknown | undefined;
-declare const normalizeRecommendation: (raw: Record<string, unknown>) => AiRecommendation;
-declare const parseAiResponse: (text: string, provider: string, analysisType: AnalysisType) => AiAnalysisResult;
-declare const ruleBasedAnalysis: (outdated: OutdatedEntry[], analysisType: AnalysisType) => AiAnalysisResult;
-declare const formatAiAnalysis: (result: AiAnalysisResult) => string;
-declare const formatAiAnalysisJson: (result: AiAnalysisResult) => string;
-declare const runAiAnalysis: (outdated: OutdatedEntry[], logger: Console, config?: AiConfig, analysisType?: AnalysisType) => Promise<AiAnalysisResult>;
-export type { AiConfig };
-export { buildAnalysisPrompt, DEFAULT_PRIORITY, extractJson, formatAiAnalysis, formatAiAnalysisJson, normalizeRecommendation, parseAiResponse, resolveProvider, ruleBasedAnalysis, runAiAnalysis, validateAnalysisType, };
-export { type AiAnalysisResult, type AiRecommendation, type AnalysisType } from "./ai-types.d.ts";

package/dist/ai-cache.d.ts

@@ -1,21 +0,0 @@
-import type { AiAnalysisResult, AnalysisType } from "./ai-types.d.ts";
-import type { OutdatedEntry } from "./catalog.d.ts";
-interface CacheEntry {
-    createdAt: number;
-    result: AiAnalysisResult;
-    ttlMs: number;
-}
-interface CacheStats {
-    entries: number;
-    newestEntry: number | undefined;
-    oldestEntry: number | undefined;
-    totalSizeBytes: number;
-}
-declare const buildCacheKey: (provider: string, analysisType: string, outdated: Pick<OutdatedEntry, "currentRange" | "packageName" | "targetVersion">[]) => string;
-declare const getCachedAnalysis: (cacheKey: string) => AiAnalysisResult | undefined;
-declare const setCachedAnalysis: (cacheKey: string, result: AiAnalysisResult, ttlMs: number) => void;
-declare const getTtlForAnalysisType: (analysisType: AnalysisType | string, configTtl?: number) => number;
-declare const getCacheStats: () => CacheStats;
-declare const clearCache: () => number;
-export type { CacheEntry, CacheStats };
-export { buildCacheKey, clearCache, getCachedAnalysis, getCacheStats, getTtlForAnalysisType, setCachedAnalysis };

package/dist/ai-types.d.ts

@@ -1,16 +0,0 @@
-export type AnalysisType = "compatibility" | "impact" | "recommend" | "security";
-export interface AiRecommendation {
-    action: "defer" | "review" | "skip" | "update";
-    breakingChanges: string[];
-    effort: "high" | "low" | "medium";
-    package: string;
-    reason: string;
-    riskLevel: "critical" | "high" | "low" | "medium";
-}
-export interface AiAnalysisResult {
-    analysisType: AnalysisType;
-    provider: string;
-    recommendations: AiRecommendation[];
-    summary: string;
-    warnings: string[];
-}

package/dist/audit-config.d.ts

@@ -1,24 +0,0 @@
-/**
- * Read and sync native package manager audit exclusion configs.
- *
- * Supports:
- * - pnpm: auditConfig.ignoreCves / ignoreGhsas in pnpm-workspace.yaml
- * - yarn berry: npmAuditIgnoreAdvisories / npmAuditExcludePackages in .yarnrc.yml
- * - npm: no native mechanism (vis provides the only exclusion layer)
- * - bun: CLI-only --ignore (no config file), vis provides the config layer
- */
-interface NativeAuditExclusions {
-    /** Package names to exclude from audit (yarn berry only). */
-    excludedPackages: string[];
-    /** Advisory IDs to ignore (CVE-*, GHSA-*, or numeric IDs). */
-    ignoredAdvisories: string[];
-}
-/** Checks if a value matches any pattern in a list (exact or trailing glob). */
-declare const matchesGlobList: (value: string, patterns: string[]) => boolean;
-declare const readNativeAuditExclusions: (workspaceRoot: string, pm: string) => NativeAuditExclusions;
-/** Checks if any of the given IDs (primary + aliases) match the exclusion list. */
-declare const isAdvisoryExcluded: (vulnId: string, exclusions: NativeAuditExclusions, aliases?: string[]) => boolean;
-declare const isPackageExcluded: (packageName: string, exclusions: NativeAuditExclusions) => boolean;
-declare const syncAcceptedRisksToNativeConfig: (pm: string, workspaceRoot: string, advisoryIds: string[]) => string[];
-export type { NativeAuditExclusions };
-export { isAdvisoryExcluded, isPackageExcluded, matchesGlobList, readNativeAuditExclusions, syncAcceptedRisksToNativeConfig };

package/dist/cache-directory.d.ts

@@ -1,73 +0,0 @@
-/**
- * Shared helpers for resolving the task runner's cache directory.
- *
- * Used by `vis run` (to configure the runner) and `vis cache` (to manage the
- * cache from the outside) so both commands agree on:
- *
- * - the resolution order: `--cache-dir` flag > vis.config.ts
- *   `taskRunnerOptions.cacheDirectory` > `{workspaceRoot}/.task-runner-cache`
- * - relative-path normalization against `workspaceRoot`
- * - containment checks (used to decide whether a destructive operation is
- *   safe to perform without confirmation)
- */
-/**
- * Resolves the cache directory from CLI options and vis.config.ts.
- *
- * All paths returned from this helper are absolute — relative values are
- * resolved against `workspaceRoot` so they refer to the same directory no
- * matter what `process.cwd()` happens to be when the command runs.
- *
- * Precedence: `optionsCacheDir` > `configCacheDir` > `{workspaceRoot}/{@link DEFAULT_CACHE_DIRECTORY_NAME}`.
- * @param workspaceRoot Absolute path to the workspace root directory.
- * @param optionsCacheDir CLI `--cache-dir` value (may be relative or absolute). Takes highest priority.
- * @param configCacheDir `taskRunnerOptions.cacheDirectory` from vis.config.ts (may be relative or absolute).
- * @returns The resolved absolute path to the cache directory.
- */
-declare const resolveCacheDirectory: (workspaceRoot: string, optionsCacheDir: string | undefined, configCacheDir: string | undefined) => string;
-/**
- * Converts an arbitrary branch name into a filesystem-safe segment.
- * Strips characters outside `[A-Za-z0-9_.-]`, collapses runs of
- * disallowed characters into a single `-`, and trims leading/trailing
- * dashes. Truncated to 64 chars so deep-nested branch names (`user/long/feat`)
- * stay bounded.
- */
-export declare const sanitizeBranchSegment: (branch: string) => string;
-/**
- * Detects the current git branch by shelling out to `git rev-parse`.
- * Returns `undefined` on detached HEAD, non-git workspaces, or when
- * git is unavailable — callers fall back to the unscoped cache.
- */
-export declare const detectGitBranch: (cwd: string) => string | undefined;
-/**
- * Appends a branch-specific subdirectory to `cacheDirectory` when
- * `enabled` is true and a branch can be detected. Keeps `main` and
- * feature branches from thrashing each other's caches — different
- * generated artefacts (schemas, `.d.ts` snapshots) cause oscillating
- * invalidations when the same hash resolves to different contents.
- *
- * When `enabled === false` or the branch can't be detected, returns
- * `cacheDirectory` unchanged. On detached HEAD or CI checkouts where
- * `git rev-parse` resolves `HEAD`, the original path is used — this
- * matches the behaviour of a non-git clone.
- * @param cacheDirectory Resolved base cache directory.
- * @param workspaceRoot Absolute path used to probe the branch.
- * @param enabled When undefined, branch scoping is off. Set to `true`
- * (or omit to keep current behaviour) to enable.
- */
-export declare const applyBranchScope: (cacheDirectory: string, workspaceRoot: string, enabled: boolean | undefined) => string;
-/**
- * Returns `true` when `cacheDirectory` sits inside `workspaceRoot`. Uses
- * `relative()` instead of `startsWith()` so paths with a common string
- * prefix but different parents (e.g. `/work` vs `/workspace`) are correctly
- * distinguished.
- *
- * Callers use this to decide whether a `rm -rf` on the cache directory is
- * safe without an extra confirmation prompt.
- * @param cacheDirectory Absolute path to the cache directory.
- * @param workspaceRoot Absolute path to the workspace root directory.
- * @returns `true` when `cacheDirectory` is a proper descendant of `workspaceRoot`; `false` otherwise
- * (including when the two paths are identical).
- */
-declare const isCacheDirectoryInsideWorkspace: (cacheDirectory: string, workspaceRoot: string) => boolean;
-export { isCacheDirectoryInsideWorkspace, resolveCacheDirectory };
-export { DEFAULT_CACHE_DIRECTORY_NAME } from "@visulima/task-runner";

package/dist/catalog.d.ts

@@ -1,136 +0,0 @@
-import type { AcceptedRisk, PackageReportData, SocketSecurityOptions } from "./socket-security.d.ts";
-type UpdateTarget = "latest" | "minor" | "patch";
-interface SecurityVulnerability {
-    /** Alternate identifiers (CVE-*, GHSA-*, etc.) from the OSV database. */
-    aliases?: string[];
-    cvssScore?: number;
-    fixedVersions: string[];
-    id: string;
-    severity: "CRITICAL" | "HIGH" | "LOW" | "MODERATE" | "UNKNOWN";
-    summary: string;
-}
-type SocketReport = Pick<PackageReportData, "alerts" | "license" | "score">;
-interface OutdatedEntry {
-    acceptedRisk?: AcceptedRisk;
-    catalogName: string;
-    currentRange: string;
-    newRange: string;
-    packageName: string;
-    socketReport?: SocketReport;
-    targetVersion: string;
-    updateType: "major" | "minor" | "patch";
-    vulnerabilities?: SecurityVulnerability[];
-}
-interface CatalogCheckOptions {
-    exclude: string[];
-    ignore: string[];
-    include: string[];
-    includeLocked: boolean;
-    includePrerelease: boolean;
-    minimumReleaseAge?: number;
-    minimumReleaseAgeExclude?: string[];
-    packageMode?: Record<string, UpdateTarget>;
-    security?: boolean;
-    target: UpdateTarget;
-}
-interface ReadCatalogOptions {
-    depFields?: string[];
-    dev?: boolean;
-    prod?: boolean;
-}
-interface ParsedVersion {
-    major: number;
-    minor: number;
-    patch: number;
-    prerelease: string;
-}
-declare const parseVersion: (input: string) => ParsedVersion | undefined;
-declare const extractPrefix: (range: string) => string;
-declare const getUpdateType: (current: ParsedVersion, target: ParsedVersion) => "major" | "minor" | "none" | "patch";
-declare const isNewer: (current: ParsedVersion, target: ParsedVersion) => boolean;
-declare const matchesPattern: (name: string, pattern: string) => boolean;
-declare const matchesFilters: (name: string, include: string[], exclude: string[]) => boolean;
-declare const parseCatalogsFromYaml: (content: string) => Map<string, Map<string, string>>;
-interface BunPackageJson {
-    workspaces?: {
-        catalog?: Record<string, string>;
-        catalogs?: Record<string, Record<string, string>>;
-        packages?: string[];
-    };
-}
-declare const parseBunCatalogs: (pkg: BunPackageJson) => Map<string, Map<string, string>>;
-declare const parseCompositeCatalogName: (name: string) => {
-    depType: string;
-    relativePath: string;
-} | undefined;
-declare const readPackageJsonDeps: (workspaceRoot: string, options?: ReadCatalogOptions) => Map<string, Map<string, string>>;
-declare const hasPackageJsonDeps: (workspaceRoot: string) => boolean;
-declare const applyPackageJsonUpdates: (workspaceRoot: string, updates: OutdatedEntry[]) => void;
-type CatalogProvider = "bun" | "pnpm";
-declare const hasCatalogs: (workspaceRoot: string, packageManager?: string) => boolean;
-declare const readCatalogs: (workspaceRoot: string, packageManager?: string, options?: ReadCatalogOptions) => Map<string, Map<string, string>>;
-interface NpmrcConfig {
-    authTokens: Map<string, string>;
-    defaultRegistry: string;
-    registries: Map<string, string>;
-}
-declare const parseNpmrc: (content: string) => NpmrcConfig;
-declare const loadNpmrc: (workspaceRoot: string) => NpmrcConfig;
-declare const getRegistryForPackage: (packageName: string, config: NpmrcConfig) => {
-    token?: string;
-    url: string;
-};
-interface RegistryVersionInfo {
-    latest: string;
-    /** Map of version string to ISO publish time (populated when minimumReleaseAge is set). */
-    publishTimes?: Map<string, string>;
-    versions: string[];
-}
-declare const fetchPackageVersions: (packageName: string, registryConfig?: {
-    authToken?: string;
-    url: string;
-}, timeoutMs?: number, fetchPublishTimes?: boolean) => Promise<RegistryVersionInfo>;
-declare const fetchVulnerabilities: (packages: {
-    name: string;
-    version: string;
-}[], timeoutMs?: number) => Promise<Map<string, SecurityVulnerability[]>>;
-declare const resolvePackageTarget: (packageName: string, globalTarget: UpdateTarget, packageMode?: Record<string, UpdateTarget>) => UpdateTarget;
-interface MaturityOptions {
-    minimumReleaseAge?: number;
-    minimumReleaseAgeExclude?: string[];
-    packageName?: string;
-    publishTimes?: Map<string, string>;
-}
-declare const findTargetVersion: (versions: string[], latest: string, currentRange: string, target: UpdateTarget, includePrerelease: boolean, maturity?: MaturityOptions) => string | undefined;
-interface CheckOutdatedResult {
-    /** Total number of unique packages checked (after filtering). */
-    checkedCount: number;
-    failed: string[];
-    /** Packages that have newer versions on "latest" but were excluded by the target constraint. */
-    filteredByTarget: OutdatedEntry[];
-    ignored: string[];
-    outdated: OutdatedEntry[];
-}
-declare const checkOutdated: (catalogs: Map<string, Map<string, string>>, options: CatalogCheckOptions, npmrcConfig?: NpmrcConfig, onProgress?: (current: number, total: number) => void, workspaceRoot?: string, socketOptions?: SocketSecurityOptions, acceptedRisks?: Record<string, AcceptedRisk>) => Promise<CheckOutdatedResult>;
-declare const createBackup: (workspaceRoot: string, packageManager?: string, updates?: OutdatedEntry[]) => string | undefined;
-declare const restoreFromBackup: (workspaceRoot: string, packageManager?: string) => boolean;
-declare const hasBackup: (workspaceRoot: string, packageManager?: string) => boolean;
-type OutputFormat = "json" | "minimal" | "table";
-declare const formatOutdatedJson: (result: CheckOutdatedResult) => string;
-declare const formatOutdatedMinimal: (outdated: OutdatedEntry[]) => string;
-declare const toFilterArray: (value: string | string[] | undefined) => string[];
-declare const groupByCatalog: (entries: OutdatedEntry[]) => Map<string, OutdatedEntry[]>;
-declare const formatOutdatedTable: (outdated: OutdatedEntry[], logger: Console) => void;
-declare const formatSummary: (outdated: OutdatedEntry[]) => string;
-declare const detectJsonIndent: (content: string) => number | string;
-declare const applyCatalogUpdates: (workspaceRoot: string, updates: OutdatedEntry[], packageManager?: string, backup?: boolean) => string | undefined;
-declare const promptPackageSelection: (outdated: OutdatedEntry[]) => Promise<OutdatedEntry[]>;
-interface ChangelogInfo {
-    npmUrl: string;
-    packageName: string;
-    releaseUrl?: string;
-    repoUrl?: string;
-}
-declare const fetchChangelogInfo: (packages: OutdatedEntry[], timeoutMs?: number) => Promise<ChangelogInfo[]>;
-export type { CatalogCheckOptions, CatalogProvider, ChangelogInfo, CheckOutdatedResult, MaturityOptions, NpmrcConfig, OutdatedEntry, OutputFormat, ReadCatalogOptions, SecurityVulnerability, SocketReport, UpdateTarget, };
-export { applyCatalogUpdates, applyPackageJsonUpdates, checkOutdated, createBackup, detectJsonIndent, extractPrefix, fetchChangelogInfo, fetchPackageVersions, fetchVulnerabilities, findTargetVersion, formatOutdatedJson, formatOutdatedMinimal, formatOutdatedTable, formatSummary, getRegistryForPackage, getUpdateType, groupByCatalog, hasBackup, hasCatalogs, hasPackageJsonDeps, isNewer, loadNpmrc, matchesFilters, matchesPattern, parseBunCatalogs, parseCatalogsFromYaml, parseCompositeCatalogName, parseNpmrc, parseVersion, promptPackageSelection, readCatalogs, readPackageJsonDeps, resolvePackageTarget, restoreFromBackup, toFilterArray, };

package/dist/codeowners.d.ts

@@ -1,30 +0,0 @@
-import type { WorkspaceConfiguration } from "@visulima/task-runner";
-import type { CodeownersConfig } from "./workspace.d.ts";
-export type { CodeownersConfig } from "./workspace.d.ts";
-/**
- * A single resolved CODEOWNERS line, pre-sorted by path. Kept as an
- * object so callers can post-process (e.g. append sub-sections).
- */
-export interface CodeownersLine {
-    /** Optional notification channel (added as a trailing comment). */
-    channel?: string;
-    /** Owner handles, space-separated by the writer. */
-    owners: string[];
-    /** Effective path glob (workspace-root-relative). */
-    path: string;
-    /** Source project name — used for `order-by=project-id` sorting. */
-    projectId?: string;
-}
-/**
- * Computes CODEOWNERS lines from the workspace's projects and a
- * workspace-level `codeowners` block. Returns lines in the requested
- * order (default: `file-source`).
- */
-export declare const buildCodeownersLines: (workspace: WorkspaceConfiguration, config: CodeownersConfig | undefined) => CodeownersLine[];
-/**
- * Serialises {@link CodeownersLine}s to a valid CODEOWNERS file string.
- * @param lines Resolved CODEOWNERS lines.
- * @param _provider Reserved for future provider-specific formatting (e.g. Bitbucket syntax).
- * @returns The full CODEOWNERS file content with header and trailing newline.
- */
-export declare const renderCodeowners: (lines: CodeownersLine[], _provider?: CodeownersConfig["provider"]) => string;

package/dist/commands/action-graph.d.ts

@@ -1,8 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-/**
- * `vis action-graph <selector>` — shows the execution plan that would
- * be produced by `vis run <selector>` without running anything. Matches
- * moon's `moon action-graph`.
- */
-declare const actionGraph: Command;
-export default actionGraph;

package/dist/commands/add.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-declare const add: Command;
-export default add;

package/dist/commands/affected.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-declare const affected: Command;
-export default affected;

package/dist/commands/ai.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-declare const ai: Command;
-export default ai;

package/dist/commands/analyze.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-declare const analyze: Command;
-export default analyze;

package/dist/commands/approve-builds.d.ts

@@ -1,3 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-declare const approveBuilds: Command;
-export default approveBuilds;

package/dist/commands/audit.d.ts

@@ -1,23 +0,0 @@
-import type { Command } from "@visulima/cerebro";
-interface InstalledPackage {
-    isDev: boolean;
-    name: string;
-    version: string;
-}
-/** A package installed in multiple versions. */
-interface DuplicatePackage {
-    /** The package name. */
-    name: string;
-    /** Each installed version. */
-    versions: string[];
-}
-declare const scanInstalledPackages: (workspaceRoot: string) => InstalledPackage[];
-/**
- * Finds packages with multiple installed versions by parsing the
- * workspace lockfile via `@visulima/package`.
- */
-declare const findDuplicateDependencies: (workspaceRoot: string, pmName: string) => DuplicatePackage[];
-declare const audit: Command;
-export default audit;
-export type { DuplicatePackage, InstalledPackage };
-export { findDuplicateDependencies, scanInstalledPackages };