@visulima/vis 1.0.0-alpha.8 → 1.0.0

package/dist/typosquats.d.ts

@@ -1,70 +0,0 @@
-/**
- * Typosquat detection for package names.
- *
- * Uses a curated blocklist of known typosquats (data/typosquats.json) and
- * runtime heuristics (character substitution, transposition, omission) to
- * warn users before they install a potentially malicious package.
- */
-export type Blocklist = Record<string, string[]>;
-export interface TyposquatMatch {
-    /** The package name that was checked. */
-    input: string;
-    /** The legitimate package this appears to be a typosquat of. */
-    legitimate: string;
-    /** How the match was detected: "blocklist" (exact match in JSON) or "heuristic" (generated variant). */
-    method: "blocklist" | "heuristic";
-}
-export interface TyposquatCheckResult {
-    /** Whether the operation should proceed. */
-    ok: boolean;
-    /**
-     * The (possibly corrected) package names to use.
-     * When the user chooses "use suggested name", the typosquat names are
-     * replaced with their legitimate counterparts.
-     */
-    packages: string[];
-}
-/**
- * Generates typosquat variants of a package name using common attack patterns:
- * - Character omission (dropping one character)
- * - Adjacent character transposition (swapping neighbors)
- * - Character duplication (repeating one character)
- * - Homoglyph / keyboard substitution
- * - Separator manipulation (dash/dot/underscore swaps)
- * - Common suffixes (-js, -node)
- *
- * Separators (`-`, `.`, `_`) are preserved during omission and duplication passes.
- * Transposition is skipped when either character is a separator.
- * Names shorter than 3 characters return an empty set.
- * @param name The package name to generate variants for.
- * @returns A set of unique variant strings (never includes the original name).
- */
-export declare const generateVariants: (name: string) => Set<string>;
-/**
- * Check a single package name against the typosquat blocklist.
- * Returns a match if the name is a known typosquat, or `undefined` if safe.
- */
-export declare const checkTyposquat: (packageName: string) => TyposquatMatch | undefined;
-/** Check multiple package names. Returns only the matches (empty if all safe). */
-export declare const checkTyposquats: (packageNames: string[], allowlist?: string[]) => TyposquatMatch[];
-/**
- * Display typosquat warnings and prompt the user.
- *
- * Choices:
- * - **S** (suggested): replace the typosquat names with the correct packages and continue
- * - **y** (yes): continue with the original (potentially dangerous) names
- * - **N** (no, default): abort the operation
- *
- * Non-interactive mode always aborts.
- */
-export declare const runTyposquatCheck: (packageNames: string[], allowlist?: string[]) => Promise<TyposquatCheckResult>;
-/**
- * Scan package.json dependencies for potential typosquats.
- *
- * Unlike `runTyposquatCheck` (used by `add`), this cannot replace names because
- * they live in package.json. It warns the user and asks whether to proceed.
- *
- * In non-interactive mode, always aborts.
- * @returns `true` to proceed, `false` to abort.
- */
-export declare const scanDepsForTyposquats: (cwd: string, allowlist?: string[]) => Promise<boolean>;

package/dist/upgrade-check.d.ts

@@ -1,30 +0,0 @@
-/**
- * Background upgrade check - non-intrusive update notification.
- *
- * Per vite-plus upgrade-check RFC:
- * - Spawns async registry check while command runs (no latency impact)
- * - Shows single-line notice at most once per 24 hours
- * - Cached at ~/.vis/.upgrade-check.json
- * - Skipped in CI, test, quiet, non-TTY, and excluded commands
- * - 500ms timeout prevents network from delaying exit
- */
-/** Commands that should NOT trigger upgrade checks. */
-declare const EXCLUDED_COMMANDS: Set<string>;
-/**
- * Compares two semver version strings.
- * Returns true if `latest` is newer than `current`.
- */
-declare const isNewerVersion: (current: string, latest: string) => boolean;
-/**
- * Determines if the upgrade check should run for this invocation.
- */
-declare const shouldCheck: (command: string) => boolean;
-/**
- * Runs the background upgrade check. Non-blocking.
- *
- * 1. Check if we need to query the registry (24h cooldown)
- * 2. If yes, fetch latest version asynchronously
- * 3. Return a promise that resolves with the check function to call after command
- */
-declare const startUpgradeCheck: (currentVersion: string, command: string) => (() => void) | undefined;
-export { EXCLUDED_COMMANDS, isNewerVersion, shouldCheck, startUpgradeCheck };

package/dist/utils.d.ts

@@ -1,22 +0,0 @@
-/**
- * Shared utility for option parsing across command handlers.
- */
-/**
- * Converts a CLI option value (which may be undefined, a single string,
- * or an array of strings) into a normalized string array.
- */
-declare const toStringArray: (value: unknown) => string[];
-/**
- * Safely extracts an error message from an unknown caught value.
- * Handles Error instances, strings, and other types.
- */
-declare const errorMessage: (error: unknown) => string;
-/**
- * Extracts the package name and optional version specifier from a CLI argument
- * like "react", "react@19", "@scope/pkg@^2".
- */
-declare const parsePackageArgument: (argument: string) => {
-    name: string;
-    versionSpec: string | undefined;
-};
-export { errorMessage, parsePackageArgument, toStringArray };

package/dist/watch.d.ts

@@ -1,65 +0,0 @@
-import type { TaskResults } from "@visulima/task-runner";
-/**
- * Debounced multi-directory file watcher. Watches one or more project
- * roots recursively and invokes `onChange` at most once per debounce
- * window. Ignores edits inside `node_modules` and `.git`.
- *
- * `node:fs.watch({ recursive: true })` is supported on Linux, macOS,
- * and Windows since Node 20+, so no additional dependency is needed.
- */
-export interface WatchHandle {
-    close: () => void;
-}
-export interface WatchOptions {
-    /** Debounce window in milliseconds. Defaults to 150 ms. */
-    debounceMs?: number;
-    /**
-     * Optional predicate invoked against every raw file event
-     * (relative path as provided by `node:fs.watch`). Used by
-     * tracked-access watch mode to drop changes to files the last
-     * run didn't actually read. Return `false` to discard the event.
-     */
-    filter?: (path: string) => boolean;
-    /** Fired when a watched file changes (after debounce). */
-    onChange: (changedPaths: string[]) => void | Promise<void>;
-    /** Project roots to watch, resolved to absolute paths. */
-    paths: string[];
-}
-/**
- * The set of workspace-relative paths that a run actually read, plus
- * the minimal set of directories that contain them. Used by
- * tracked-access watch mode to only re-trigger runs when a file the
- * previous run actually consumed changes — drops noise from unrelated
- * edits under the project roots.
- *
- * `files` stays workspace-relative because `node:fs.watch` emits
- * paths relative to the watched root.
- */
-export interface TrackedWatchTargets {
-    directories: string[];
-    files: Set<string>;
-}
-/**
- * Extracts the set of files every task in `results` reported as an
- * input. Returns empty sets when no task carries hash details — the
- * caller falls back to watching project roots in that case.
- *
- * Directories are deduplicated and pruned so a parent dir shadows its
- * descendants — watching both would double-fire events.
- */
-export declare const collectTrackedWatchTargets: (results: TaskResults, workspaceRoot: string) => TrackedWatchTargets;
-/**
- * Translates a set of workspace-relative tracked paths into a filter
- * suitable for {@link startWatcher}. The watcher emits paths relative
- * to its watched root — which, after pruning, may be any ancestor
- * directory — so we match on the **suffix** of the tracked path
- * instead of an exact comparison.
- */
-export declare const createTrackedFileFilter: (trackedFiles: Set<string>, workspaceRoot: string, watchedDirectories: string[]) => ((path: string) => boolean);
-/**
- * Starts recursive file watchers on the given paths and invokes
- * {@link WatchOptions.onChange} after a debounce window.
- * @param options Watcher configuration.
- * @returns A handle to close all watchers.
- */
-export declare const startWatcher: (options: WatchOptions) => WatchHandle;