@visulima/vis 1.0.0-alpha.8 → 1.0.0

package/dist/sbom/types.d.ts

@@ -1,196 +0,0 @@
-/**
- * TypeScript types for the subset of CycloneDX 1.6 that `vis sbom` emits.
- *
- * These types are hand-maintained against the vendored schema at
- * `__tests__/sbom/schemas/bom-1.6.schema.json` (upstream tag 1.6.1). They
- * intentionally cover only the shapes the SBOM generator produces —
- * `services`, `vulnerabilities`, `compositions`, `annotations`,
- * `formulation`, `declarations`, `signature`, `pedigree`, `evidence`,
- * `modelCard`, and crypto-asset fields are omitted.
- *
- * The schema is still the source of truth: see
- * `__tests__/sbom/schema-conformance.test.ts` for the ajv-backed validator
- * that runs on every emitted BOM.
- */
-/** Hash algorithms permitted by CycloneDX 1.6. */
-export type HashAlgorithm = "BLAKE2b-256" | "BLAKE2b-384" | "BLAKE2b-512" | "BLAKE3" | "MD5" | "SHA-1" | "SHA-256" | "SHA-384" | "SHA-512" | "SHA3-256" | "SHA3-384" | "SHA3-512";
-/** A single hash entry on a component. */
-export interface Hash {
-    alg: HashAlgorithm;
-    /** Hex-encoded digest (no `sha512-` prefix; integrity strings from npm lockfiles must be stripped + base64-decoded first). */
-    content: string;
-}
-/** Component type enumeration. */
-export type ComponentType = "application" | "container" | "cryptographic-asset" | "data" | "device" | "device-driver" | "file" | "firmware" | "framework" | "library" | "machine-learning-model" | "operating-system" | "platform";
-/** Dependency scope on a component. */
-export type ComponentScope = "excluded" | "optional" | "required";
-/** License acknowledgement status. */
-export type LicenseAcknowledgement = "concluded" | "declared";
-/** Fields shared by every licence variant. */
-export interface LicenseBase {
-    acknowledgement?: LicenseAcknowledgement;
-    "bom-ref"?: string;
-    text?: Attachment;
-    url?: string;
-}
-/**
- * A named or SPDX-identified licence.
- *
- * The schema requires exactly one of `id` or `name` to be present; this is
- * modelled as a discriminated union so the constraint is enforced at the
- * type level rather than just at ajv-validation time.
- */
-export type License = NamedLicense | SpdxLicense;
-/** SPDX-identified licence (`id` is a valid SPDX licence identifier). */
-export interface SpdxLicense extends LicenseBase {
-    /** SPDX licence identifier (e.g. `"MIT"`). */
-    id: string;
-    name?: never;
-}
-/** Free-form licence where no SPDX identifier matches. */
-export interface NamedLicense extends LicenseBase {
-    id?: never;
-    /** Free-form licence name. */
-    name: string;
-}
-/** A single licence entry in the `licenses` array. */
-export interface LicenseEntry {
-    license: License;
-}
-/** A single-element tuple carrying an SPDX expression. */
-export interface LicenseExpressionEntry {
-    acknowledgement?: LicenseAcknowledgement;
-    "bom-ref"?: string;
-    expression: string;
-}
-/**
- * Per the spec, `licenses` is EITHER a list of `{ license }` entries OR a
- * one-element tuple carrying an SPDX expression — never mixed.
- */
-export type LicenseChoice = LicenseEntry[] | [LicenseExpressionEntry];
-/** Attachment (inline blob) used for licence texts, etc. */
-export interface Attachment {
-    content: string;
-    contentType?: string;
-    encoding?: "base64";
-}
-/** Individual contact within an organisation. */
-export interface OrganizationalContact {
-    "bom-ref"?: string;
-    email?: string;
-    name?: string;
-    phone?: string;
-}
-/** Postal address attached to an organisation. */
-export interface PostalAddress {
-    "bom-ref"?: string;
-    country?: string;
-    locality?: string;
-    postalCode?: string;
-    region?: string;
-    streetAddress?: string;
-}
-/** Company / organisation metadata. */
-export interface OrganizationalEntity {
-    address?: PostalAddress;
-    "bom-ref"?: string;
-    contact?: OrganizationalContact[];
-    name?: string;
-    url?: string[];
-}
-/**
- * All 43 values from the CycloneDX 1.6 `externalReferenceType` enum. Kept
- * exhaustive so any spec-legal reference type type-checks.
- */
-export type ExternalReferenceType = "adversary-model" | "advisories" | "attestation" | "bom" | "build-meta" | "build-system" | "certification-report" | "chat" | "codified-infrastructure" | "component-analysis-report" | "configuration" | "digital-signature" | "distribution" | "distribution-intake" | "documentation" | "dynamic-analysis-report" | "electronic-signature" | "evidence" | "exploitability-statement" | "formulation" | "issue-tracker" | "license" | "log" | "mailing-list" | "maturity-report" | "model-card" | "other" | "pentest-report" | "poam" | "quality-metrics" | "release-notes" | "rfc-9116" | "risk-assessment" | "runtime-analysis-report" | "security-contact" | "social" | "source-distribution" | "static-analysis-report" | "support" | "threat-model" | "vcs" | "vulnerability-assertion" | "website";
-/** External reference (website, VCS, distribution, etc.). */
-export interface ExternalReference {
-    comment?: string;
-    hashes?: Hash[];
-    type: ExternalReferenceType;
-    url: string;
-}
-/**
- * A software component in the BOM. This is the shape `vis sbom` emits —
- * it's a strict subset of the CycloneDX definition.
- */
-export interface Component {
-    author?: string;
-    "bom-ref"?: string;
-    components?: Component[];
-    copyright?: string;
-    cpe?: string;
-    description?: string;
-    externalReferences?: ExternalReference[];
-    group?: string;
-    hashes?: Hash[];
-    licenses?: LicenseChoice;
-    manufacturer?: OrganizationalEntity;
-    "mime-type"?: string;
-    name: string;
-    properties?: Property[];
-    publisher?: string;
-    /** Package URL, e.g. `pkg:npm/@scope/name@1.2.3`. */
-    purl?: string;
-    scope?: ComponentScope;
-    supplier?: OrganizationalEntity;
-    tags?: string[];
-    type: ComponentType;
-    version?: string;
-}
-/** Arbitrary key-value metadata attachable to components and BOMs. */
-export interface Property {
-    name: string;
-    value?: string;
-}
-/**
- * CycloneDX 1.5+ form of `metadata.tools`: a bag of tool components and
- * (optionally) services. The legacy array form is intentionally not
- * supported — new BOMs should use this shape.
- */
-export interface ToolsAggregate {
-    components?: Component[];
-}
-/** BOM lifecycle phase (pre-defined names in the spec). */
-export type LifecyclePhase = "build" | "decommission" | "design" | "discovery" | "operations" | "post-build" | "pre-build";
-export interface Lifecycle {
-    description?: string;
-    name?: string;
-    phase?: LifecyclePhase;
-}
-export interface Metadata {
-    authors?: OrganizationalContact[];
-    component?: Component;
-    licenses?: LicenseChoice;
-    lifecycles?: Lifecycle[];
-    manufacturer?: OrganizationalEntity;
-    properties?: Property[];
-    supplier?: OrganizationalEntity;
-    /** ISO 8601 timestamp describing when the BOM was created. */
-    timestamp?: string;
-    tools?: ToolsAggregate;
-}
-/** A single edge in the dependency graph. */
-export interface Dependency {
-    /** `bom-ref`s of components this component directly depends on. */
-    dependsOn?: string[];
-    /** `bom-ref`s of components this component provides (conformance claims). */
-    provides?: string[];
-    /** `bom-ref` of the subject component. */
-    ref: string;
-}
-/** The root CycloneDX 1.6 BOM document. */
-export interface CycloneDxBom {
-    $schema?: string;
-    bomFormat: "CycloneDX";
-    components?: Component[];
-    dependencies?: Dependency[];
-    externalReferences?: ExternalReference[];
-    metadata?: Metadata;
-    properties?: Property[];
-    /** `urn:uuid:<rfc-4122>` — unique identifier for this specific BOM revision. */
-    serialNumber?: string;
-    specVersion: "1.6";
-    /** Monotonically increasing integer for BOM revisions (starts at 1). */
-    version?: number;
-}

package/dist/secrets/baseline.d.ts

@@ -1,20 +0,0 @@
-import type { Finding } from "@visulima/secret-scanner";
-/** Convert a finding to the shape we persist in baselines (with paths relative to root). */
-export declare const toRelativeFinding: (f: Finding, root: string) => Finding;
-export interface BaselineDiff {
-    fresh: Finding[];
-    resolved: Finding[];
-    surviving: Finding[];
-}
-/** Compare current findings against an existing baseline. */
-export declare const diffBaseline: (findings: Finding[], baselinePath: string, root: string) => BaselineDiff;
-export interface WriteBaselineOptions {
-    /** If true, replace the file instead of merging with existing entries. */
-    replace?: boolean;
-}
-/**
- * Write `findings` to `baselinePath` with paths relative to `root`. By default
- * merges with any existing baseline (so prior triage decisions for files not
- * rescanned this run are preserved). Pass `replace: true` to overwrite.
- */
-export declare const writeBaseline: (findings: Finding[], baselinePath: string, root: string, options?: WriteBaselineOptions) => number;

package/dist/secrets/format.d.ts

@@ -1,14 +0,0 @@
-import type { Finding, RuleInfo } from "@visulima/secret-scanner";
-/** Pretty grouped text output with file headers, context lines, and carets. */
-export declare const formatText: (findings: Finding[], root: string, useColor: boolean) => string;
-/**
- * Structured SARIF v2.1.0 output for GitHub / GitLab code-scanning.
- *
- * Polished for spec compliance:
- *   - `artifactLocation.uri` emits `file://` URIs for absolute paths (SARIF §3.4.2).
- *   - `tool.driver.rules` lists every rule that triggered, with `shortDescription` +
- *     `fullDescription` + `helpUri` so consumer UIs can render rule detail pages.
- *   - `result.level` stays `"error"` (everything we surface is an actionable leak).
- *   - `result.ruleIndex` cross-references into `tool.driver.rules` per SARIF §3.27.6.
- */
-export declare const formatSarif: (findings: Finding[], toolVersion: string, root?: string, ruleMetadata?: RuleInfo[]) => string;

package/dist/secrets/git.d.ts

@@ -1,6 +0,0 @@
-/** Absolute paths of files currently staged for commit (A/C/M/R only). */
-export declare const stagedFiles: (root: string) => string[];
-/** Absolute paths of files changed since `ref` (defaults to upstream/HEAD~1). */
-export declare const filesSince: (root: string, ref: string) => string[];
-/** True if `git` is on PATH and `root` is a working tree. */
-export declare const hasGit: (root: string) => boolean;

package/dist/secrets/spinner.d.ts

@@ -1,9 +0,0 @@
-export interface Spinner {
-    stop: (finalMessage?: string) => void;
-    update: (message: string) => void;
-}
-/**
- * Minimal stderr spinner for TTY sessions. No-op when stderr isn't a TTY
- * (CI, piped output). No dependencies beyond node stdlib.
- */
-export declare const startSpinner: (message: string) => Spinner;

package/dist/security.d.ts

@@ -1,64 +0,0 @@
-/**
- * Supply chain security for package management commands.
- *
- * Ports pnpm's security features (minimumReleaseAge, trustPolicy,
- * allowBuilds, blockExoticSubdeps, strictDepBuilds) to work universally
- * across all package managers.
- *
- * Support matrix for build script enforcement:
- * - pnpm v10+: Native `allowBuilds` in pnpm-workspace.yaml (vis validates config)
- * - bun: Native `trustedDependencies` in package.json (vis validates config)
- * - npm: NO native allowlist. vis adds --ignore-scripts and runs approved scripts manually
- * - yarn: NO native allowlist. vis checks enableScripts in .yarnrc.yml
- */
-import type { VisConfig } from "./workspace.d.ts";
-type PackageManagerName = "bun" | "npm" | "pnpm" | "yarn";
-interface SecurityCheckResult {
-    errors: string[];
-    warnings: string[];
-}
-/**
- * Checks the vis config for recommended security settings.
- *
- * When `defineConfig()` or `loadVisConfig()` is used, secure defaults are already
- * merged. This function validates the *final* config (defaults + user overrides)
- * and flags remaining gaps — primarily `allowBuilds`, which must be user-supplied.
- */
-declare const checkSecurityConfig: (config: VisConfig, packageManager: string) => SecurityCheckResult;
-/**
- * Emits a single-line security summary warning before PM commands.
- * Skipped in CI unless VIS_SECURITY_WARNINGS=1.
- */
-declare const emitSecurityWarnings: (config: VisConfig, packageManager: string) => void;
-/**
- * Prints the full security audit report, including active settings and warnings.
- */
-declare const printSecurityReport: (config: VisConfig, packageManager: string) => void;
-/**
- * Reports which vis security settings would map to pnpm-workspace.yaml.
- */
-declare const previewPnpmSync: (config: VisConfig) => string[];
-/**
- * Scans node_modules for packages with install scripts that aren't approved.
- */
-declare const scanUnapprovedBuildScripts: (cwd: string, allowBuilds: Record<string, boolean>) => string[];
-interface EnforcementResult {
-    extraArgs: string[];
-    postInstallPackages: string[];
-    scriptsBlockedByDefault: boolean;
-    warnings: string[];
-}
-/**
- * Determines enforcement actions needed before install/add/update.
- */
-declare const enforceScriptSecurity: (pm: PackageManagerName, workspaceRoot: string, config: VisConfig) => EnforcementResult;
-/**
- * Syncs vis security.allowBuilds to native PM config format.
- */
-declare const syncAllowBuildsToNativeConfig: (pm: PackageManagerName, workspaceRoot: string, allowBuilds: Record<string, boolean>) => string[];
-/**
- * Runs postinstall scripts for approved packages after --ignore-scripts install.
- */
-declare const runApprovedScripts: (workspaceRoot: string, patterns: string[]) => void;
-export type { EnforcementResult, PackageManagerName, SecurityCheckResult };
-export { checkSecurityConfig, emitSecurityWarnings, enforceScriptSecurity, previewPnpmSync, printSecurityReport, runApprovedScripts, scanUnapprovedBuildScripts, syncAllowBuildsToNativeConfig, };

package/dist/selectors.d.ts

@@ -1,81 +0,0 @@
-import type { WorkspaceConfiguration } from "@visulima/task-runner";
-/**
- * Parsed form of a target selector.
- *
- * vis accepts moon-style target syntax alongside the simple `<target>`
- * and `--projects` form:
- *
- *   :build              → run `build` on every project
- *   ~:build             → run `build` on the project closest to cwd
- *   #frontend:build     → run `build` on every project tagged `frontend`
- *   my-pkg:build        → run `build` on the single project `my-pkg`
- *   build               → run `build` on every project (legacy form)
- */
-export interface ParsedSelector {
-    /** Selector kind — used by commands for richer diagnostics. */
-    kind: "all" | "closest" | "project" | "tag";
-    /** Projects the selector resolves to (before further filtering). */
-    projects?: string[];
-    /** The tag, when `kind === "tag"`. */
-    tag?: string;
-    /** The target name. */
-    target: string;
-}
-/**
- * Parses a target selector string into its component parts.
- * @param input Raw selector string (e.g. `:build`, `~:test`, `#tag:lint`, `pkg:build`, or bare `build`).
- * @returns The parsed selector, or `undefined` if `input` is empty.
- */
-export declare const parseTargetSelector: (input: string) => Omit<ParsedSelector, "projects"> | undefined;
-/**
- * Resolves a selector string against a workspace to produce a concrete
- * list of project names and the target to run.
- * @param input Raw selector string.
- * @param workspace The discovered workspace configuration.
- * @param cwd Current working directory (used for `~:` closest resolution).
- * @param workspaceRoot Absolute path to the workspace root.
- * @returns An object with `projects` (candidate names) and `target`.
- * @throws If the selector is invalid or `~:` finds no matching project.
- */
-export declare const resolveSelector: (input: string, workspace: WorkspaceConfiguration, cwd: string, workspaceRoot: string) => Promise<{
-    projects: string[];
-    target: string;
-}>;
-/**
- * A single parsed query clause. e.g. `language=typescript` or
- * `tag!=deprecated`.
- */
-interface QueryClause {
-    field: string;
-    op: "!=" | "=";
-    value: string;
-}
-/**
- * Parsed query — a list of clauses combined with either AND or OR.
- * Groups are not supported; all clauses are combined with the same
- * top-level operator.
- */
-interface ParsedQuery {
-    clauses: QueryClause[];
-    op: "&&" | "||";
-}
-/**
- * Parses a query string into a structured predicate.
- *
- * Grammar: `&lt;field>=&lt;value>` or `&lt;field>!=&lt;value>` clauses joined by
- * `&amp;&amp;` (all must match) or `||` (any must match). Mixing operators is
- * not supported and throws.
- * @param input Raw query string, e.g. `"language=typescript &amp;& tag=lib"`.
- * @returns The parsed query, or `undefined` if the input is empty.
- * @throws On mixed `&amp;&amp;` / `||` or malformed clauses.
- */
-export declare const parseQuery: (input: string) => ParsedQuery | undefined;
-/**
- * Filters project names by a query string.
- * @param projectNames Candidate project names to filter.
- * @param workspace The workspace configuration (projects must carry vis metadata).
- * @param query A query string, or `undefined` / empty to skip filtering.
- * @returns The subset of `projectNames` that match the query.
- */
-export declare const filterProjectsByQuery: (projectNames: string[], workspace: WorkspaceConfiguration, query: string | undefined) => string[];
-export {};

package/dist/shell-history.d.ts

@@ -1,16 +0,0 @@
-/**
- * Best-effort append of a command string to the user's shell history
- * file so bare `vis run` followed by an interactive pick shows up in
- * the terminal history — up-arrow then re-runs the resolved target.
- *
- * Detects the shell from `$SHELL`/`$ZDOTDIR` and writes in the
- * shell-specific format. Never throws; silently returns when:
- * - the platform is Windows (history formats vary by terminal host),
- * - no recognizable shell is detected,
- * - the history file can't be opened,
- * - `VIS_NO_SHELL_HISTORY` is set (escape hatch).
- *
- * Scoped intentionally to the interactive-picker path. Explicit
- * `vis run <target>` invocations already appear in history verbatim.
- */
-export declare const appendToShellHistory: (commandLine: string) => Promise<void>;

package/dist/socket-security.d.ts

@@ -1,129 +0,0 @@
-/**
- * Socket.dev security helpers for package security intelligence.
- *
- * Ported from @vltpkg/security-archive and adapted to use the Socket.dev
- * public API for fetching package security scores, alerts, and report data.
- * Uses a file-based cache (following the ai-cache.ts pattern) with a 1-hour TTL.
- * @see https://socket.dev
- * @see https://github.com/vltpkg/vltpkg/tree/main/src/security-archive
- */
-declare const DEFAULT_LOW_SCORE_THRESHOLD = 0.4;
-/** Extra properties attached to a package alert. */
-interface PackageAlertProps {
-    cveId?: `CVE-${string}`;
-    cwes?: {
-        id: `CWE-${string}`;
-    }[];
-    lastPublish: string;
-}
-/** A known security alert for a given package. */
-interface PackageAlert {
-    category: string;
-    key: string;
-    props?: PackageAlertProps;
-    severity: "critical" | "high" | "low" | "medium";
-    type: string;
-}
-/** Security scores for a given package (each 0–1). */
-interface PackageScore {
-    /** Score factors relating to package licensing. */
-    license: number;
-    /** Score factors relating to package maintenance. */
-    maintenance: number;
-    /** Average of all score factors. */
-    overall: number;
-    /** Score factors relating to code quality. */
-    quality: number;
-    /** Score factors relating to supply chain security. */
-    supplyChain: number;
-    /** Score factors relating to package vulnerabilities. */
-    vulnerability: number;
-}
-/** Full report data for a single package from Socket.dev. */
-interface PackageReportData {
-    alerts: PackageAlert[];
-    author: string[];
-    id: string;
-    license: string;
-    name: string;
-    namespace?: `@${string}`;
-    score: PackageScore;
-    size: number;
-    type: "npm";
-    version: string;
-}
-/** Configuration options for the Socket.dev security client. */
-interface SocketSecurityOptions {
-    /** Custom API token. Required — set via VIS_SOCKET_TOKEN env var or config. */
-    apiToken?: string;
-    /** Cache TTL in milliseconds. Defaults to 1 hour. */
-    cacheTtlMs?: number;
-    /** Minimum overall score (0–1) below which packages are flagged. Defaults to 0.4. */
-    minimumScore?: number;
-    /** Request timeout in milliseconds. Defaults to 15 seconds. */
-    timeoutMs?: number;
-}
-declare const isPackageReportData: (o: unknown) => o is PackageReportData;
-declare const calculateOverallScore: (score: Omit<PackageScore, "overall">) => number;
-/**
- * Fetches security report data from the Socket.dev API for the given packages.
- * Batches requests to stay within API limits.
- * @param packages Array of { name, version } to look up.
- * @param options Optional configuration.
- * @returns Map of "name@version" to PackageReportData.
- */
-declare const fetchSocketReports: (packages: {
-    name: string;
-    version: string;
-}[], options?: SocketSecurityOptions) => Promise<Map<string, PackageReportData>>;
-/** Returns the full package name including namespace scope if present. */
-declare const getFullPackageName: (report: Pick<PackageReportData, "name" | "namespace">) => string;
-/** Maps a 0–1 score to a human-readable label. */
-declare const scoreLabel: (score: number) => string;
-/** Maps a 0–1 score to a color name for terminal output. */
-declare const scoreColor: (score: number) => "green" | "red" | "yellow";
-/** Formats a PackageReportData into a compact one-line summary string. */
-declare const formatReportSummary: (report: PackageReportData) => string;
-/** Formats a detailed multi-line report for a single package. */
-declare const formatReportDetailed: (report: PackageReportData) => string;
-/**
- * Formats a security summary for a list of packages.
- * Suitable for displaying after install/update commands.
- */
-declare const formatSecurityOverview: (reports: Map<string, PackageReportData>) => string;
-declare const clearSocketCache: () => number;
-/** Socket.dev config shape as it appears in VisConfig.security.socket. */
-interface SocketConfigLike {
-    apiToken?: string;
-    cacheTtlMs?: number;
-    enabled?: boolean;
-    minimumScore?: number;
-    timeoutMs?: number;
-}
-/**
- * Builds SocketSecurityOptions from the VisConfig socket config section.
- * Returns undefined if Socket.dev is not enabled or no API token is available.
- */
-declare const buildSocketOptions: (socketConfig: SocketConfigLike | undefined) => SocketSecurityOptions | undefined;
-/** A persisted "accepted risk" entry from the vis config. */
-interface AcceptedRisk {
-    /** ISO 8601 timestamp when the risk was accepted. */
-    acceptedAt: string;
-    /** The overall Socket.dev score at the time of acceptance. */
-    acceptedScore: number;
-    /** User-provided reason for accepting the risk. */
-    reason: string;
-}
-/**
- * Checks if a package has an accepted risk entry.
- * Matches by exact name@version, unversioned name, or trailing glob patterns.
- * Returns the matching AcceptedRisk if found, undefined otherwise.
- */
-declare const findAcceptedRisk: (packageName: string, version: string, acceptedRisks: Record<string, AcceptedRisk> | undefined) => AcceptedRisk | undefined;
-/**
- * Formats a config snippet for the user to paste into vis.config.ts
- * to persist an accepted risk decision.
- */
-declare const formatAcceptedRiskSnippet: (packageName: string, _version: string, score: number, reason: string) => string;
-export type { AcceptedRisk, PackageAlert, PackageAlertProps, PackageReportData, PackageScore, SocketSecurityOptions };
-export { buildSocketOptions, calculateOverallScore, clearSocketCache, DEFAULT_LOW_SCORE_THRESHOLD, fetchSocketReports, findAcceptedRisk, formatAcceptedRiskSnippet, formatReportDetailed, formatReportSummary, formatSecurityOverview, getFullPackageName, isPackageReportData, scoreColor, scoreLabel, };

package/dist/staged/cli-parse.d.ts

@@ -1,18 +0,0 @@
-/**
- * Small helpers shared between the CLI command and the programmatic
- * surface when a value has to be coerced from a string (CLI flag, env
- * variable, config file). Kept free of runtime deps so it can be unit
- * tested in isolation.
- */
-/** Env var read as the concurrency fallback when `--concurrent` isn't passed. */
-export declare const CONCURRENT_ENV_VAR = "VIS_STAGED_CONCURRENT";
-/**
- * Parses a stringified concurrency value. Accepts the same shapes as the
- * `--concurrent` CLI flag:
- *
- * - `"true"` or an empty string → `true` (unbounded, capped internally at CPU count)
- * - `"false"` → `false` (serial)
- * - an integer string → the parsed number
- * - anything else (including NaN) → `true`, matching the CLI-flag fallback
- */
-export declare const parseConcurrent: (value: string) => boolean | number;

package/dist/staged/config.d.ts

@@ -1,14 +0,0 @@
-import type { RunOptions, StagedConfig, StagedTask } from "./types.d.ts";
-/**
- * Resolves the user's staged config. We deliberately do NOT auto-discover
- * external `.lintstagedrc*` / `.vis-staged.*` files at runtime — that
- * keeps the config surface to a single place (`vis.config.ts`) and means
- * there's no ambiguity about which file drives a run.
- *
- * Users migrating from lint-staged or nano-staged go through
- * `vis migrate lint-staged` / `vis migrate nano-staged`, which inline
- * the old config into `vis.config.ts` and remove the external files.
- */
-export declare const resolveConfig: (options: RunOptions) => Promise<StagedConfig>;
-/** Validates that a resolved config has the right shape. */
-export declare const validateConfig: (config: unknown) => Record<string, StagedTask>;

package/dist/staged/errors/apply-empty-commit-error.d.ts

@@ -1,4 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** Post-task commit would be empty and `--allow-empty` was not set. */
-export declare class ApplyEmptyCommitError extends StagedError {
-}

package/dist/staged/errors/config-error.d.ts

@@ -1,4 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** Configuration was missing, malformed, or resolved to an unsupported shape. */
-export declare class ConfigError extends StagedError {
-}

package/dist/staged/errors/get-backup-stash-error.d.ts

@@ -1,4 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** The backup stash could not be located during cleanup/revert. */
-export declare class GetBackupStashError extends StagedError {
-}

package/dist/staged/errors/git-error.d.ts

@@ -1,6 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** A git subprocess failed. Holds the stderr tail for surface-level reporting. */
-export declare class GitError extends StagedError {
-    readonly stderr?: string;
-    constructor(message: string, stderr?: string, options?: ErrorOptions);
-}

package/dist/staged/errors/index.d.ts

@@ -1,12 +0,0 @@
-/**
- * Typed error classes surfaced by the staged workflow. Consumers can
- * switch on `instanceof` to distinguish setup failures from task/git
- * failures. Error names mirror lint-staged's where behavior overlaps.
- */
-export { ApplyEmptyCommitError } from "./apply-empty-commit-error.d.ts";
-export { ConfigError } from "./config-error.d.ts";
-export { GetBackupStashError } from "./get-backup-stash-error.d.ts";
-export { GitError } from "./git-error.d.ts";
-export { RestoreOriginalStateError } from "./restore-original-state-error.d.ts";
-export { StagedError } from "./staged-error.d.ts";
-export { TaskError } from "./task-error.d.ts";

package/dist/staged/errors/restore-original-state-error.d.ts

@@ -1,4 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** Restoring the working tree from the backup stash failed. */
-export declare class RestoreOriginalStateError extends StagedError {
-}

package/dist/staged/errors/staged-error.d.ts

@@ -1,8 +0,0 @@
-/**
- * Base class for all staged-workflow errors. Consumers switch on
- * `instanceof StagedError` to distinguish our failures from arbitrary
- * task exceptions.
- */
-export declare class StagedError extends Error {
-    constructor(message: string, options?: ErrorOptions);
-}

package/dist/staged/errors/task-error.d.ts

@@ -1,6 +0,0 @@
-import { StagedError } from "./staged-error.d.ts";
-/** A user-provided task exited non-zero or threw. */
-export declare class TaskError extends StagedError {
-    readonly commandTitle: string;
-    constructor(commandTitle: string, message: string, options?: ErrorOptions);
-}