@visulima/vis 1.0.0-alpha.9 → 1.0.0

package/dist/packem_chunks/handler39.js

@@ -1,2 +1,9 @@
-var m=Object.defineProperty;var d=(n,o)=>m(n,"name",{value:o,configurable:!0});import{createRequire as g}from"node:module";import{writeFileSync as $}from"@visulima/fs";import{join as w}from"@visulima/path";import{Z as v}from"../packem_shared/bin-BaZZ32BK.js";const j=g(import.meta.url),a=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,y=d(n=>{if(typeof a<"u"&&a.versions&&a.versions.node){const[o,e]=a.versions.node.split(".").map(Number);if(o>22||o===22&&e>=3||o===20&&e>=16)return a.getBuiltinModule(n)}return j(n)},"__cjs_getBuiltinModule"),{readFileSync:b}=y("node:fs");var k=Object.defineProperty,f=d((n,o)=>k(n,"name",{value:o,configurable:!0}),"i");const C=f((n,o)=>{const e=o.replace(/^\.?\//,"");return e===""||e==="."?`/${n}/`:n===""||n==="."?`/${e}`:`/${n}/${e}`},"toWorkspacePath"),_=f((n,o)=>{const e=[];for(const[r,t]of Object.entries(o?.globalPaths??{}))e.push({owners:t,path:r});for(const[r,t]of Object.entries(n.projects)){const s=t.owners??[];for(const c of s)e.push({channel:c.channel,owners:c.owners,path:C(t.root??r,c.path),projectId:r})}return(o?.orderBy??"file-source")==="project-id"?e.sort((r,t)=>(r.projectId??"").localeCompare(t.projectId??"")||r.path.localeCompare(t.path)):e.sort((r,t)=>r.path.localeCompare(t.path)),e},"buildCodeownersLines"),E=["# CODEOWNERS — generated by `vis sync codeowners`. Do not edit by hand.","# Update each project's project.json `owners` field and re-run the command.",""],O=f((n,o="github")=>{const e=[...E];for(const r of n){const t=r.owners.join(" "),s=r.channel?`    # notify: ${r.channel}`:"";e.push(`${r.path} ${t}${s}`)}return e.push(""),e.join(`
-`)},"renderCodeowners");var N=Object.defineProperty,R=d((n,o)=>N(n,"name",{value:o,configurable:!0}),"p");const x=R(async({argument:n,logger:o,options:e,visConfig:r,workspaceRoot:t})=>{const s=n[0];if(!s)throw new Error("Missing sync kind. Usage: vis sync <kind> (known kinds: codeowners)");if(!t)throw new Error("Could not determine workspace root. Run inside a monorepo.");if(s!=="codeowners")throw new Error(`Unknown sync kind: "${s}". Known kinds: codeowners.`);const{workspace:c}=v(t,r),p=_(c,r?.codeowners);if(p.length===0){o.info("No `owners` entries found in any project. Nothing to sync.");return}const l=O(p,r?.codeowners?.provider??"github"),i=e.out?w(t,e.out):w(t,"CODEOWNERS");if(e.check){let u="";try{u=b(i,"utf8")}catch(h){if(h.code==="ENOENT")u="";else throw h}if(u.trim()!==l.trim()){o.error(`${i} is out of date. Run \`vis sync codeowners\` to update it.`),process.exitCode=1;return}o.info(`${i} is up to date.`);return}$(i,l),o.info(`Wrote ${p.length} entries to ${i}`)},"execute");export{x as default};
+import{b as j}from"./orchestrator.js";const A=async({logger:u,options:m,workspaceRoot:h})=>{const c=h??process.cwd(),a=[];let n;try{n=await j({cwd:c}),a.push({message:"vis.config.ts loaded; release block parsed.",name:"config-loads",severity:"error",status:"pass"})}catch(e){a.push({message:`Config failed to load: ${e.message}`,name:"config-loads",severity:"error",status:"fail"}),await $(u,m,a),process.exitCode=1;return}n.packages.length===0?a.push({message:"No packages discovered. Ensure your package manager's workspace block resolves.",name:"workspace-discovered",severity:"error",status:"fail"}):a.push({message:`Discovered ${n.packages.length} workspace package(s).`,name:"workspace-discovered",severity:"info",status:"pass"});try{const e=await n.pm.detectVersion(c);e?a.push({message:`${n.pm.id}@${e} (min required: ${n.pm.minVersion})`,name:"pm-version",severity:"info",status:"pass"}):a.push({message:`Could not detect ${n.pm.id} version.`,name:"pm-version",severity:"warn",status:"skip"})}catch(e){a.push({message:`Skipped: ${e.message}`,name:"pm-version",severity:"warn",status:"skip"})}n.branch&&n.channel?a.push({message:`Branch "${n.branch}" → channel ${n.channel.tag}${n.channel.prerelease?` (preid: ${n.channel.prerelease})`:""}, mode: ${n.channel.mode}`,name:"branch-channel",severity:"info",status:"pass"}):n.branch&&!n.channel?a.push({message:`Branch "${n.branch}" does not match any configured channel. Releases will use dist-tag "latest" by default.`,name:"branch-channel",severity:"warn",status:"fail"}):a.push({message:"No branch detected (detached HEAD or non-git workspace).",name:"branch-channel",severity:"warn",status:"skip"});try{await import("node:child_process").then(({execSync:e})=>{try{return e("gh --version",{stdio:"ignore"}),!0}catch{return!1}})?a.push({message:"gh CLI is on PATH.",name:"gh-cli-available",severity:"info",status:"pass"}):a.push({message:"gh CLI not found. GH releases / PR comments will be skipped.",name:"gh-cli-available",severity:"warn",status:"fail"})}catch{}if(process.env.CI==="true"||process.env.GITHUB_ACTIONS==="true")try{const{createShellRunner:e}=await import("./shell-runner.js"),i=await e().run("gh",["auth","status","--show-token"],{cwd:c,silent:!0}),t=`${i.stdout}
+${i.stderr}`,s=/Token scopes:\s*(.+)/.exec(t);if(i.exitCode!==0||!s)a.push({message:"Skipped: `gh auth status` did not return a parseable Token scopes line. (Fine-grained tokens / OIDC-only auth fall in this bucket.)",name:"github.token-scopes",severity:"info",status:"skip"});else{const r=s[1].split(",").map(l=>l.trim().replaceAll(/^['"]|['"]$/g,"")).filter(Boolean),o=new Set(["admin:org","admin:repo_hook","delete_repo","repo","site_admin"]),g=r.filter(l=>o.has(l));g.length>0?a.push({message:`Token carries broader scopes than vis needs: ${g.join(", ")}. The release flow needs only contents:write + pull-requests:write (+ optional id-token:write for OIDC). Consider provisioning a fine-grained PAT or scoping the workflow's permissions block.`,name:"github.token-scopes",severity:"warn",status:"fail"}):a.push({message:`Token scopes look appropriately narrow: ${r.join(", ")||"(none)"}.`,name:"github.token-scopes",severity:"info",status:"pass"})}}catch{a.push({message:"Skipped: gh auth status could not be invoked.",name:"github.token-scopes",severity:"info",status:"skip"})}(process.env.CI==="true"||process.env.GITHUB_ACTIONS==="true")&&(process.env.ACTIONS_ID_TOKEN_REQUEST_URL?a.push({message:"GitHub Actions OIDC env vars present.",name:"oidc-available",severity:"info",status:"pass"}):process.env.NPM_TOKEN?a.push({message:"OIDC env vars missing; falling back to NPM_TOKEN. Add `permissions: { id-token: write }` to the workflow to enable trusted publishing.",name:"oidc-available",severity:"warn",status:"fail"}):a.push({message:"Neither OIDC env vars nor NPM_TOKEN are set in CI. Publish will fail.",name:"oidc-available",severity:"error",status:"fail"}));const y=await import("node:fs/promises"),b=await import("node:path");for(const e of n.packages){if(e.manifest.napi===void 0)continue;const i=b.join(e.dir,"npm");try{const t=(await y.readdir(i,{withFileTypes:!0})).filter(g=>g.isDirectory());if(t.length===0){a.push({message:`${e.name} has a napi field but no npm/<platform>/ subdirs. Run pnpm exec napi artifacts before publishing.`,name:`napi-${e.name}-platforms`,severity:"warn",status:"fail"});continue}const s=[];for(const g of t){const l=b.join(i,g.name,"package.json");try{const p=JSON.parse(await y.readFile(l,"utf8"));p.version!==e.version&&s.push(`${g.name} (${p.version} vs parent ${e.version})`)}catch{s.push(`${g.name} (unreadable manifest)`)}}s.length>0?a.push({message:`${e.name}: platform versions out of sync — ${s.join(", ")}. They'll be re-synced on next publish.`,name:`napi-${e.name}-versions`,severity:"warn",status:"fail"}):a.push({message:`${e.name}: ${t.length} platform package(s), all versions in sync.`,name:`napi-${e.name}`,severity:"info",status:"pass"});const r=e.manifest.optionalDependencies??{},o=[];for(const g of t)try{const l=JSON.parse(await y.readFile(b.join(i,g.name,"package.json"),"utf8"));Object.hasOwn(r,l.name)||o.push(l.name)}catch{}o.length>0&&a.push({message:`${e.name}: missing optionalDependencies entries for: ${o.join(", ")}. Consumers won't get the right binary.`,name:`napi-${e.name}-optdeps`,severity:"error",status:"fail"})}catch{a.push({message:`${e.name}: could not read npm/ subdir.`,name:`napi-${e.name}-platforms`,severity:"warn",status:"skip"})}}{const{resolveVersionActionsId:e}=await import("./orchestrator.js").then(t=>t.w),i=n.packages.filter(t=>e(t,n.perPackageConfig.get(t.name)??{})==="jsr");for(const t of i){const s=n.perPackageConfig.get(t.name)??{},r=["jsr","publish","--dry-run","--allow-dirty"],o=s.jsrConfigPath;o!==void 0&&o!=="jsr.json"&&r.push("--config",o);for(const g of s.jsrPublishArgs??[])r.push(g);try{const g=await n.pm.runner.run("npx",r,{cwd:t.dir,silent:!0});g.exitCode===0?a.push({message:`${t.name}: \`jsr publish --dry-run\` passed.`,name:`jsr-dry-run/${t.name}`,severity:"info",status:"pass"}):a.push({message:`${t.name}: \`jsr publish --dry-run\` reported issues (slow types / exports / auth?): ${(g.stderr||g.stdout).trim().slice(0,300)}`,name:`jsr-dry-run/${t.name}`,severity:"warn",status:"fail"})}catch(g){a.push({message:`${t.name}: could not run \`npx jsr publish --dry-run\` (${g.message}). Install the jsr CLI / check network to enable this pre-flight.`,name:`jsr-dry-run/${t.name}`,severity:"warn",status:"skip"})}}}if(n.plan.warnings.length>0)for(const e of n.plan.warnings)a.push({message:e,name:"plan-warning",severity:"warn",status:"fail"});else a.push({message:n.plan.releases.length===0?"No pending releases.":`Plan resolves ${n.plan.releases.length} release(s).`,name:"plan-readable",severity:"info",status:"pass"});const d=n.config.publish?.guards;if(d?.packSecretScan)try{await import("@visulima/secret-scanner"),a.push({message:"@visulima/secret-scanner resolves; pack-set secret scanning will run.",name:"publish-guards.packSecretScan",severity:"info",status:"pass"})}catch{a.push({message:"publish.guards.packSecretScan is enabled but @visulima/secret-scanner is not installed. pnpm add -D @visulima/secret-scanner, or set the gate to false.",name:"publish-guards.packSecretScan",severity:"error",status:"fail"})}d?.audit&&d.audit!=="off"&&a.push({message:`Runtime npm audit gate active at "${d.audit}" severity.`,name:"publish-guards.audit",severity:"info",status:"pass"});const f=n.config.publish?.releaseAssets;if((f?.stampHashes||f?.uploadTarball)&&a.push({message:`Release-asset attestation: stampHashes=${f.stampHashes??!1}, uploadTarball=${f.uploadTarball??!1}.`,name:"publish-releaseAssets",severity:"info",status:"pass"}),n.config.publish?.stage){try{const{execSync:r}=await import("node:child_process"),o=r("npm --version",{stdio:["ignore","pipe","ignore"]}).toString().trim(),[g="0",l="0"]=o.split("."),p=Number.parseInt(g,10)>11||Number.parseInt(g,10)===11&&Number.parseInt(l,10)>=15;a.push({message:p?`npm ${o} supports \`npm stage publish\`.`:`npm ${o} is too old for staged publishing. Upgrade to npm ≥ 11.15.0.`,name:"publish-stage.npm-version",severity:p?"info":"error",status:p?"pass":"fail"})}catch{a.push({message:"publish.stage is enabled but npm is not on PATH.",name:"publish-stage.npm-version",severity:"error",status:"fail"})}const e=n.config.publish?.registry??"https://registry.npmjs.org/",i=/(?:^|:\/\/)registry\.npmjs\.(?:org|com)\//.test(e);a.push({message:i?"Registry is npmjs.com; staging is supported.":`publish.stage is enabled but registry "${e}" is not npmjs.com. Staging is npm Inc-specific; the request will be rejected.`,name:"publish-stage.registry",severity:i?"info":"warn",status:i?"pass":"fail"});const t=n.packages.filter(r=>r.manifest.publishConfig?.access==="restricted"),s=!!process.env.ACTIONS_ID_TOKEN_REQUEST_URL&&!process.env.NPM_TOKEN;t.length>0&&s&&a.push({message:`${t.length} package(s) have publishConfig.access: "restricted" and OIDC trusted publishing is active. Staging this combo is not supported in v1 (no static token for the post-decision read). Set NPM_TOKEN, or disable publish.stage for these packages.`,name:"publish-stage.oidc-restricted",severity:"error",status:"fail"})}try{const{DEFAULT_CHANGES_DIR:e}=await import("./DEFAULT_CLEAN_KEEP.js"),{readStagedRegistry:i}=await import("./staged-registry.js"),t=await i(c,n.config.changesDir??e);if(t.pending.length>0){const s=t.pending.map(r=>`${r.name}@${r.version} (${r.reason})`).join(", ");a.push({message:`${t.pending.length} pending stage(s) recorded in .vis/release/staged.json: ${s}. Approve / reject before the next release: vis release stage approve --all`,name:"publish-stage.pending",severity:"warn",status:"fail"})}}catch{}try{const{DEFAULT_CHANGES_DIR:e}=await import("./DEFAULT_CLEAN_KEEP.js"),{readFile:i}=await import("node:fs/promises"),{join:t}=await import("node:path"),s=t(c,n.config.changesDir??e,".state.json"),r=await i(s,"utf8"),o=JSON.parse(r);Array.isArray(o.stagedIds)&&o.stagedIds.length>0&&a.push({message:`Found ${o.stagedIds.length} legacy stage id(s) in .state.json#stagedIds: ${o.stagedIds.join(", ")}. The new registry lives in .vis/release/staged.json. Approve / reject these via npmjs.com or \`vis release stage approve <id>\` to avoid losing them.`,name:"publish-stage.legacy-stagedIds",severity:"warn",status:"fail"})}catch{}{const e=n.packages.filter(i=>n.perPackageConfig.get(i.name)?.versionActions==="shell");for(const i of e){const t=n.perPackageConfig.get(i.name)??{},s=n.config.allowCustomCommands,r=s===!0||Array.isArray(s)&&s.includes(i.name),o=t.publishCommand!==void 0&&t.publishCommand!=="";r||a.push({message:`${i.name} uses versionActions: "shell" but release.allowCustomCommands does not permit it. Set allowCustomCommands: true or include "${i.name}" in the array.`,name:`shell-actions.${i.name}.trust-gate`,severity:"error",status:"fail"}),o?r&&a.push({message:`${i.name} → shell publish (${Array.isArray(t.publishCommand)?`${t.publishCommand.length} commands`:"1 command"}).`,name:`shell-actions.${i.name}`,severity:"info",status:"pass"}):a.push({message:`${i.name} uses versionActions: "shell" but no publishCommand is configured. Set release.packages["${i.name}"].publishCommand.`,name:`shell-actions.${i.name}.publish-command`,severity:"error",status:"fail"})}}if(!n.config.gitUser)try{const{createShellRunner:e}=await import("./shell-runner.js"),i=e(),t=await i.run("git",["config","user.name"],{cwd:c,silent:!0}),s=await i.run("git",["config","user.email"],{cwd:c,silent:!0}),r=t.exitCode===0&&t.stdout.trim().length>0,o=s.exitCode===0&&s.stdout.trim().length>0;!r||!o?a.push({message:`git config user.name/user.email is not set (name=${r?"ok":"missing"}, email=${o?"ok":"missing"}). vis auto-commits staged.json and version bumps — these will fail without an identity. Set release.gitUser in vis.config.ts or configure git globally.`,name:"git.identity",severity:"warn",status:"fail"}):a.push({message:`git identity: ${t.stdout.trim()} <${s.stdout.trim()}>.`,name:"git.identity",severity:"info",status:"pass"})}catch{}if(n.config.signing){const{signing:e}=n.config;try{const{createShellRunner:i}=await import("./shell-runner.js"),t=i(),s=await t.run("git",["config","user.signingkey"],{cwd:c,silent:!0}),r=await t.run("git",["config","gpg.format"],{cwd:c,silent:!0}),o=s.exitCode===0?s.stdout.trim():"",g=r.exitCode===0?r.stdout.trim():"",l=o.length>0||!!e.key;if(e.mode==="ssh")g!=="ssh"||!l?a.push({message:`release.signing.mode is "ssh" but git config is incomplete (gpg.format=${g||"<unset>"}, user.signingkey=${l?"ok":"missing"}). Run \`git config gpg.format ssh\` and \`git config user.signingkey <path-to-key>\` before releasing.`,name:"git.signing",severity:"warn",status:"fail"}):a.push({message:"git signing: ssh mode active (gpg.format=ssh, signingkey configured).",name:"git.signing",severity:"info",status:"pass"});else if(e.mode==="sigstore"){const{gitsignAvailable:p}=await import("./git.js");await p({cwd:c,runner:t})?a.push({message:"git signing: sigstore mode (preview); gitsign is on PATH.",name:"git.signing",severity:"info",status:"pass"}):a.push({message:'release.signing.mode is "sigstore" (preview) but gitsign is not on PATH. Tags will fall back to GPG signing with a warning. Install gitsign: https://github.com/sigstore/gitsign',name:"git.signing",severity:"warn",status:"fail"})}else if(l){const p=e.key?/[\\/]/.test(e.key)||/\.(?:pem|gpg|key|asc|p12|pfx)$/i.test(e.key)||e.key.length<8?"configured":`…${e.key.slice(-4)}`:"from git config";a.push({message:`git signing: gpg mode active (key: ${p}).`,name:"git.signing",severity:"info",status:"pass"})}else a.push({message:'release.signing.mode is "gpg" but neither release.signing.key nor git config user.signingkey is set. Configure one before releasing.',name:"git.signing",severity:"warn",status:"fail"})}catch(i){a.push({message:`Could not verify git signing config: ${i.message}.`,name:"git.signing",severity:"warn",status:"skip"})}}if(n.config.floatingMajorTag===!0&&n.config.signing?.mode==="sigstore"&&a.push({message:`release.floatingMajorTag and release.signing.mode="sigstore" are both enabled. The floating-tag retarget force-pushes <unscoped-name>-v<major> (e.g. acme-action-v1) on every release, which appends a new sigstore transparency-log entry to Rekor each time (Rekor is append-only — entries are never removed). Over a long-lived major you'll accumulate one log entry per release. Consider either dropping floatingMajorTag (and pin consumers to a specific tag) or switching to gpg/ssh signing if the Rekor footprint matters for your project.`,name:"floating-major-tag.signing-risk",severity:"warn",status:"fail"}),n.config.floatingMajorTag===!0)try{const{createShellRunner:e}=await import("./shell-runner.js"),i=await e().run("git",["tag","--list","v*"],{cwd:c,silent:!0});if(i.exitCode===0){const t=i.stdout.split(`
+`).map(s=>s.trim()).filter(s=>/^v\d+$/.test(s));if(t.length===0)a.push({message:"No legacy `v<major>` tags found; floating-tag migration is clean.",name:"floating-major-tag.legacy-tags",severity:"info",status:"pass"});else{const s=t.slice(0,5),r=t.length>5?` (+${t.length-5} more)`:"",o=t[0],g=o.slice(1);a.push({message:`Legacy floating-major tags detected (${s.join(", ")}${r}). After upgrading the floating-tag format to \`<safe-name>-v<major>\`, these legacy tags are no longer updated. Consumers pinning \`<repo>@${o}\` will silently freeze at the pre-upgrade commit. Migration:
+  1. Re-tag the legacy tag to point at the new floating tag:
+       git tag -f ${o} <safe-name>-v${g}
+       git push --force origin ${o}
+  2. Or sunset the legacy tag and announce the new pin to consumers.`,name:"floating-major-tag.legacy-tags",severity:"warn",status:"fail"})}}else a.push({message:`Skipped: \`git tag --list "v*"\` exited ${i.exitCode}.`,name:"floating-major-tag.legacy-tags",severity:"info",status:"skip"})}catch(e){a.push({message:`Skipped: could not list git tags: ${e.message}.`,name:"floating-major-tag.legacy-tags",severity:"info",status:"skip"})}if(m.firstRelease===!0){const e=[];try{const{createShellRunner:i}=await import("./shell-runner.js"),t=i(),s=new Set,r=n.config.releaseTagPattern??"{name}@{version}";s.add(r);for(const o of n.packages){const g=n.perPackageConfig.get(o.name)?.releaseTagPattern??r;s.add(g)}for(const o of s){const g=o.replaceAll(/\{(?:name|unscopedName|version|major|minor|patch|date|channel)\}/g,()=>"*"),l=await t.run("git",["tag","--list",g],{cwd:c,silent:!0});if(l.exitCode!==0)continue;const p=l.stdout.split(`
+`).map(v=>v.trim()).filter(Boolean);p.length>0&&e.push(`Found ${p.length} git tag(s) matching "${o}": ${p.slice(0,5).join(", ")}${p.length>5?` (+${p.length-5} more)`:""}.`)}}catch(i){e.push(`Could not scan git tags: ${i.message}.`)}try{const{resolveVersionActionsId:i}=await import("./orchestrator.js").then(s=>s.w),{createVersionActions:t}=await import("../packem_shared/createVersionActions-BK43SNDH.js");for(const s of n.packages){const r=n.perPackageConfig.get(s.name),o=i(s,r??{});let g;try{g=t(o)}catch{continue}let l;try{l=await g.readPublishedVersion.call(g,{perPackageConfig:r,pkg:s,pm:n.pm})}catch{continue}l&&l.length>0&&e.push(`${s.name} is already published at version ${l}.`)}}catch(i){e.push(`Could not probe published versions: ${i.message}.`)}e.length>0?a.push({message:`--first-release is set but the workspace is NOT greenfield: ${e.join(" ")} Remove --first-release and run a normal release, or roll back the existing tags / unpublish before bootstrapping.`,name:"first-release.repo-not-greenfield",severity:"error",status:"fail"}):a.push({message:"Workspace looks greenfield (no matching release tags, no published versions detected). Safe to use --first-release.",name:"first-release.repo-not-greenfield",severity:"info",status:"pass"})}if(n.config.gitlabHost){const{detectRemoteProvider:e}=await import("./detect2.js"),{createShellRunner:i}=await import("./shell-runner.js"),t=await e(c,i(),n.config.provider);t==="gitlab"?a.push({message:`Self-hosted GitLab host configured: ${n.config.gitlabHost}.`,name:"gitlab-host",severity:"info",status:"pass"}):a.push({message:`release.gitlabHost is set ("${n.config.gitlabHost}") but the resolved provider is "${t}". The host will be ignored. Either set release.provider: "gitlab" or remove gitlabHost.`,name:"gitlab-host",severity:"warn",status:"fail"})}if(n.config.githubHost){const{detectRemoteProvider:e}=await import("./detect2.js"),{createShellRunner:i}=await import("./shell-runner.js"),t=await e(c,i(),n.config.provider);t==="github"?await import("node:child_process").then(({execSync:s})=>{try{return s("gh --version",{stdio:"ignore"}),!0}catch{return!1}})?a.push({message:`Self-hosted GitHub Enterprise host configured: ${n.config.githubHost}.`,name:"github-host",severity:"info",status:"pass"}):a.push({message:`release.githubHost is set ("${n.config.githubHost}") but the gh CLI is not on PATH. Install gh and run \`gh auth login --hostname ${n.config.githubHost}\` before releasing.`,name:"github-host",severity:"error",status:"fail"}):a.push({message:`release.githubHost is set ("${n.config.githubHost}") but the resolved provider is "${t}". The host will be ignored. Either set release.provider: "github" or remove githubHost.`,name:"github-host",severity:"warn",status:"fail"})}{const e=await import("node:fs/promises"),i=await import("node:path");let t;for(const s of n.packages){const r=n.perPackageConfig.get(s.name);if(r){if(r.uvLockPath){const o=i.isAbsolute(r.uvLockPath)?r.uvLockPath:i.join(s.dir,r.uvLockPath);try{await e.access(o),a.push({message:`uv.lock present at ${o}.`,name:`uv-lockfile/${s.name}`,severity:"info",status:"pass"})}catch{a.push({message:`${s.name}: configured uvLockPath "${r.uvLockPath}" doesn't exist (expected ${o}). Run \`uv lock\` to generate it, or remove uvLockPath if the lockfile lives elsewhere.`,name:`uv-lockfile/${s.name}`,severity:"warn",status:"fail"})}}if(r.uvWorkspace?.root){const o=i.resolve(s.dir,r.uvWorkspace.root),g=i.relative(o,s.dir).replaceAll("\\","/");switch(t||({checkUvWorkspaceMembership:t}=await import("./registry.js").then(l=>l.g)),await t(o,g)){case"member":{a.push({message:`${s.name} is a member of the uv workspace rooted at ${o}.`,name:`uv-workspace/${s.name}`,severity:"info",status:"pass"});break}case"no-root-pyproject":{a.push({message:`${s.name}: uvWorkspace.root points at ${o} but no pyproject.toml was found there. Verify the path is correct.`,name:`uv-workspace/${s.name}`,severity:"warn",status:"fail"});break}case"no-workspace":{a.push({message:`${s.name}: uvWorkspace.root points at ${o} but that pyproject.toml has no [tool.uv.workspace] block. Add one with a "members" list, or drop the uvWorkspace setting.`,name:`uv-workspace/${s.name}`,severity:"warn",status:"fail"});break}default:a.push({message:`${s.name}: uv workspace root at ${o} has [tool.uv.workspace] but its "members" list doesn't include "${g}". Add the package to members or correct uvWorkspace.root.`,name:`uv-workspace/${s.name}`,severity:"warn",status:"fail"})}}}}}const{execFileSync:w}=await import("node:child_process"),k=(e,i)=>{const t=e.split(".").map(r=>Number.parseInt(r,10)),s=i.split(".").map(r=>Number.parseInt(r,10));for(const[r,o]of s.entries()){const g=t[r]??0;if(g!==(o??0))return g>(o??0)}return!0};{const e=process.versions.node,[i=0,t=0]=e.split(".").map(r=>Number.parseInt(r,10)),s=i===22&&t>=14||i>=24||i===23;a.push({message:`node@${e} (min: 22.14.0 || >=24.10.0)`,name:"node-version",severity:s?"info":"error",status:s?"pass":"fail"})}for(const[e,i,t]of[["git","2.31","git-version"],["gh","2.40","gh-version"]])try{const s=w(e,["--version"],{stdio:["ignore","pipe","ignore"]}).toString(),r=/(\d+\.\d+\.\d+)/.exec(s);if(!r)continue;const o=k(r[1],i);a.push({message:`${e}@${r[1]} (min: ${i})`,name:t,severity:o?"info":e==="git"?"error":"warn",status:o?"pass":"fail"})}catch{}{const e=new Set([n.config.publish?.registry??"https://registry.npmjs.org"]);for(const i of n.packages){const t=n.perPackageConfig.get(i.name)?.registry;t&&e.add(t)}for(const i of e)try{const t=i.replace(/\/+$/,""),s=await fetch(`${t}/-/ping`,{method:"HEAD",signal:AbortSignal.timeout(3e3)});a.push({message:`${i} reachable (HTTP ${s.status}).`,name:"registry-reachable",severity:s.ok||s.status===404?"info":"warn",status:"pass"})}catch(t){a.push({message:`${i} not reachable: ${t.message}. Publishing may fail (or you're offline — this is a warning).`,name:"registry-reachable",severity:"warn",status:"fail"})}}try{const e=w("git",["tag","--list"],{cwd:c,stdio:["ignore","pipe","ignore"]}).toString().split(/\r?\n/).map(s=>s.trim()).filter(Boolean),i=/(?:^|@)\d+\.\d+\.\d+(?:[-+].+)?$/,t=e.filter(s=>!i.test(s)&&!/^v?\d+\.\d+\.\d+/.test(s));a.push({message:e.length===0?"No git tags yet (fresh repo).":`${e.length-t.length}/${e.length} tags parse as a release tag${t.length>0?` (unrecognised: ${t.slice(0,3).join(", ")}${t.length>3?"…":""})`:""}.`,name:"tags-parseable",severity:"warn",status:t.length>0?"fail":"pass"})}catch{}{const{readFile:e}=await import("node:fs/promises"),i=await import("node:path");let t=0,s=0;for(const r of n.packages)try{const o=await e(i.join(r.dir,"CHANGELOG.md"),"utf8");s+=1,/^#{1,2}\s/m.test(o)&&(t+=1)}catch{}s>0&&a.push({message:`${t}/${s} existing CHANGELOG.md file(s) have a recognised heading structure.`,name:"changelog-format",severity:"info",status:t===s?"pass":"fail"})}try{const e=await n.pm.readCatalogYaml(c);if(e){const{parseCatalogs:i}=await import("./registry.js").then(r=>r.f),t=i(e),s=[];for(const r of n.packages)for(const o of["dependencies","devDependencies","peerDependencies","optionalDependencies"]){const g=r.manifest[o];if(!(!g||typeof g!="object"))for(const[l,p]of Object.entries(g)){if(typeof p!="string"||!p.startsWith("catalog:"))continue;const v=p.slice(8)||"default";(v==="default"?t.default?.[l]:t.named?.[v]?.[l])||s.push(`${r.name} → ${l} (${p})`)}}a.push({message:s.length===0?"All catalog: references resolve against pnpm-workspace.yaml.":`${s.length} catalog: reference(s) don't resolve: ${s.slice(0,3).join("; ")}${s.length>3?"…":""}`,name:"catalog-consistency",severity:"warn",status:s.length===0?"pass":"fail"})}}catch{}await $(u,m,a);const C=a.some(e=>e.severity==="error"&&e.status==="fail");process.exitCode=C?1:0},$=async(u,m,h)=>{if(m.json){process.stdout.write(`${JSON.stringify({checks:h},null,2)}
+`);return}for(const c of h){const a=`${c.status==="pass"?"✓":c.status==="fail"?"✗":"—"}  [${c.severity}] ${c.name}: ${c.message}`;c.severity==="error"&&c.status==="fail"?u.error(a):c.severity==="warn"&&c.status==="fail"?u.warn(a):u.info(a)}};export{A as default};

package/dist/packem_chunks/handler4.js

@@ -1,5 +1,4 @@
-var v=Object.defineProperty;var l=(t,e)=>v(t,"name",{value:e,configurable:!0});import{runProvider as u,detectAllProviders as h}from"@visulima/find-ai-runner";import{renderToString as S,Table as g}from"@visulima/tui";import $ from"react";import{M as y,R as m,S as c,x as b}from"../packem_shared/ai-analysis-DDqXRFxY.js";import{H as w}from"../packem_shared/bin-BaZZ32BK.js";var I=Object.defineProperty,d=l((t,e)=>I(t,"name",{value:e,configurable:!0}),"c");const C=d((t,e)=>{const r=y();if(t==="json"){process.stdout.write(`${JSON.stringify(r,void 0,2)}
-`);return}e.info("AI Cache Statistics:"),e.info(`  Entries:    ${String(r.entries)}`),e.info(`  Total size: ${String(Math.round(r.totalSizeBytes/1024))} KB`),e.info(`  Oldest:     ${r.oldestEntry?new Date(r.oldestEntry).toISOString():"N/A"}`),e.info(`  Newest:     ${r.newestEntry?new Date(r.newestEntry).toISOString():"N/A"}`)},"handleCacheStats"),x=d(async(t,e)=>{const r=m(e);if(!r){t.error("No AI provider available to test."),process.exitCode=1;return}t.info(`Testing ${r.name}...`);try{const n=await u(r,"Reply with exactly: OK",{timeoutMs:3e4});t.info(`Provider ${r.name} responded: ${n.stdout.trim().slice(0,200)}`)}catch(n){const o=n instanceof Error?n.message:String(n);t.error(`Provider ${r.name} failed: ${o}`),process.exitCode=1}},"handleTest"),A=d((t,e,r)=>{const n=h(),o=m(r);if(t==="json"){const i=n.map(a=>({available:a.available,method:a.detectionMethod,name:a.name,path:a.path,priority:c[a.name]??0,selected:a.name===o?.name,version:a.version}));process.stdout.write(`${JSON.stringify(i,void 0,2)}
-`);return}const s=n.map(i=>({method:i.detectionMethod??"-",path:i.path??"-",priority:String(c[i.name]??0),provider:i.name,selected:i.name===o?.name?">>>":"",status:i.available?"available":"not found",version:i.version??"-"})),f=process.stdout.columns||80,p=S($.createElement(g,{data:s}),{columns:f});e.info(p),o?e.info(`
-Selected provider: ${o.name} (priority ${String(c[o.name]??0)})`):e.info(`
-No AI provider available. Install one of the supported AI CLI tools.`)},"handleProviderStatus"),j=d(async({logger:t,options:e,visConfig:r})=>{const n=e.format??"table";if(e.cacheStats){C(n,t);return}if(e.clearCache){const o=b(),s=w();t.info(`Cleared ${String(o)} cached AI response${o===1?"":"s"}.`),s>0&&t.info(`Cleared ${String(s)} cached Socket.dev report${s===1?"":"s"}.`);return}if(e.test){await x(t,r?.ai);return}A(n,t,r?.ai)},"execute");export{j as default};
+import{P as N}from"./cli-main.js";import"../packem_shared/index-CE6MsgcV.js";import"../packem_shared/public-api-WqUCiyIe.js";import{K as C,Z as P,W as T}from"../packem_shared/ai-analysis-BpVdn20h.js";import{R as I,T as j,a as h,N as q,c as x,f as z,q as A,I as F}from"./catalog.js";const M=/^[\^~>=<]+/,V=async({argument:v,logger:n,options:c,visConfig:l,workspaceRoot:f})=>{if(!f)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const m=v,e=m[0];if(!e)throw new Error("Package name is required. Usage: vis analyze <package> [version]");const p=m[1],{packageManager:R}=N(f);let t,u="default";const b=I(f,R);for(const[o,i]of b){const a=i.get(e);if(a){t=a,u=o;break}}if(!t)throw new Error(`Package "${e}" not found in any catalog or package.json. Make sure it exists in your workspace dependencies.`);let r;if(p)r=p;else{n.info(`Fetching latest version for ${e}...
+`);const o=await j(e);if(!o.latest)throw new Error(`Could not determine latest version for "${e}".`);r=o.latest}const d=h(t),w=h(r);if(!d||!w)throw new Error(`Could not parse versions: current="${t}", target="${r}".`);const k=A(d,w);if(k==="none"){n.info(`${e} is already at ${r}. Nothing to analyze.`);return}const E=F(t),g={catalogName:u,currentRange:t,newRange:`${E}${r}`,packageName:e,targetVersion:r,updateType:k},y=C(c.aiType??"impact");if(y==="security"||c.security){n.info(`Checking for known vulnerabilities...
+`);const o=t.replace(M,""),i=(await q([{name:e,version:o}])).get(e);i&&i.length>0&&(g.vulnerabilities=i);const a=x(l?.security,{minimumScore:l?.security?.policies?.score?.minimum});if(a.length>0){const s=(await z(a,[{name:e,version:o}])).get(`${e}@${o}`);s&&(g.socketReport={alerts:s.alerts,license:s.license,score:s.score})}}const $=await P([g],n,l?.ai,y);(c.format??"table")==="json"?process.stdout.write(`${JSON.stringify($,void 0,2)}
+`):n.info(T($))};export{V as default};

package/dist/packem_chunks/handler40.js

@@ -1 +1,75 @@
-var b=Object.defineProperty;var j=(t,e)=>b(t,"name",{value:e,configurable:!0});import{createTaskGraph as v}from"@visulima/task-runner";import{Z as y,e as E}from"../packem_shared/bin-BaZZ32BK.js";var T=Object.defineProperty,w=j((t,e)=>T(t,"name",{value:e,configurable:!0}),"h");const O=w((t,e)=>{const s=new Map;for(const[i,r]of Object.entries(t.dependencies))for(const f of r){const c=s.get(f)??[];c.push(i),s.set(f,c)}if(!t.tasks[e])return;const a=new Set([e]),o=[{node:e,path:[e]}];for(;o.length>0;){const i=o.shift();if(t.roots.includes(i.node))return i.path;for(const r of s.get(i.node)??[])a.has(r)||(a.add(r),o.push({node:r,path:[r,...i.path]}))}return[e]},"findShortestPathToRoot"),x=w((t,e)=>{const s=[];for(const[a,o]of Object.entries(t.dependencies))o.includes(e)&&s.push(a);return s.sort()},"collectParents"),I=w(async({argument:t,logger:e,visConfig:s,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root.");const o=t[0];if(!o)throw new Error("No task ID specified. Usage: vis task-why <project>:<target>");if(!o.includes(":"))throw new Error(`Invalid task ID "${o}" — expected format "project:target".`);const{packageJsons:i,workspace:r}=y(a,s),f=E(a,r,i),[c,k]=o.split(":",2),$=r.projects[c];if(!$)throw new Error(`Unknown project "${c}".`);if(!$.targets?.[k])throw new Error(`Project "${c}" has no target "${k}".`);const m=Object.entries(r.projects).flatMap(([n,u])=>Object.keys(u.targets??{}).map(h=>({id:`${n}:${h}`,outputs:[],overrides:{},target:{project:n,target:h}}))),p=v(m,{projectGraph:f,workspace:r});if(!p.tasks[o])throw new Error(`Task "${o}" is not reachable in the graph.`);const d=O(p,o),g=x(p,o);if(e.info(""),e.info(`Why ${o}?`),e.info(""),d&&d.length>1){e.info("Shortest path from a root to this task:");for(const[n,u]of d.entries()){const h=n===0?"  ":`${"  ".repeat(n+1)}└─ `;e.info(`${h}${u}`)}e.info("")}else e.info("  This task is itself a root — nothing upstream depends on it."),e.info("");if(g.length>0){e.info(`Directly depended on by ${g.length} task(s):`);for(const n of g)e.info(`  - ${n}`);e.info("")}const l=p.dependencies[o]??[];if(l.length>0){e.info(`This task depends on ${l.length} task(s):`);for(const n of[...l].sort())e.info(`  - ${n}`);e.info("")}},"execute");export{I as default};
+import{createRequire as J}from"node:module";const R=J(import.meta.url),S=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,A=e=>{if(typeof S<"u"&&S.versions&&S.versions.node){const[n,a]=S.versions.node.split(".").map(Number);if(n>22||n===22&&a>=3||n===20&&a>=16)return S.getBuiltinModule(e)}return R(e)},{mkdir:N,readFile:k,writeFile:w,readdir:x,access:O,rm:M}=A("node:fs/promises"),{join:c,relative:$,dirname:P}=A("node:path"),b=async e=>{try{return await O(e),!0}catch{return!1}},_=async e=>await b(c(e,".changeset"))?"changesets":await b(c(e,".bumpy"))?"bumpy":await(async()=>{for(const a of[".releaserc.json",".releaserc.cjs",".releaserc.js"])if(await b(c(e,a)))return!0;const n=[c(e,"packages"),c(e,"apps")];for(;n.length>0;){const a=n.shift();let t;try{t=await x(a,{withFileTypes:!0})}catch{continue}for(const s of t)if(s.isDirectory()){if(s.name==="node_modules"||s.name.startsWith("."))continue;n.push(c(a,s.name))}else if(s.name===".releaserc.json"||s.name===".releaserc.cjs"||s.name===".releaserc.js")return!0;if(n.length>200)break}return!1})()?"semantic-release":"fresh",C=async e=>{const n=[];for(const s of[".releaserc.json",".releaserc.cjs",".releaserc.js"]){const f=c(e,s);await b(f)&&n.push(f)}const a=[c(e,"packages"),c(e,"apps")];let t=0;for(;a.length>0&&t<5e3;){const s=a.shift();t+=1;let f;try{f=await x(s,{withFileTypes:!0})}catch{continue}for(const i of f){const r=c(s,i.name);if(i.isDirectory()){if(i.name==="node_modules"||i.name.startsWith("."))continue;a.push(r)}else(i.name===".releaserc.json"||i.name===".releaserc.cjs"||i.name===".releaserc.js")&&n.push(r)}}return n},T=async e=>{if(!e.endsWith(".json"))return{path:e};try{const n=await k(e,"utf8"),a=JSON.parse(n);return{branches:a.branches,extends:typeof a.extends=="string"?a.extends:void 0,path:e,plugins:Array.isArray(a.plugins)?a.plugins:void 0}}catch{return}},F=e=>Array.isArray(e)?e.map(n=>{if(typeof n=="string")return{name:n};if(typeof n=="object"&&n!==null&&typeof n.name=="string"){const a=n;return{channel:a.channel,name:a.name,prerelease:a.prerelease}}}).filter(n=>n!==void 0):[],B=e=>{const n={};for(const a of e){const t={tag:"latest"};typeof a.prerelease=="string"?(t.prerelease=a.prerelease,t.tag=a.prerelease,t.mode="auto-publish"):a.prerelease===!0?(t.prerelease=a.name,t.tag=a.name,t.mode="auto-publish"):(t.tag=a.channel??(a.name==="main"||a.name==="master"?"latest":a.name),t.mode="version-pr"),n[a.name]=t}return n},z=async({logger:e,options:n,workspaceRoot:a})=>{const t=a??process.cwd(),s=n.dryRun===!0;let f=n.apply===!0;s&&f&&(e.warn("--apply is ignored because --dry-run is set (dry-run takes precedence)."),f=!1);let i;n.fromSemanticRelease?i="semantic-release":n.fromChangesets?i="changesets":n.fromBumpy?i="bumpy":n.fresh?i="fresh":i=await _(t),e.info(`Detected source: ${i}`),e.info("");const r=c(t,".vis","release"),l=".vis/release/.state.json",h=".vis/release/.lock",u=c(t,".gitignore");if(s)e.info(`[dry-run] would create directory: ${r}`),e.info(`[dry-run] would append to .gitignore:
+    ${l}
+    ${h}`);else{await N(r,{recursive:!0}),e.info(`Created ${$(t,r)}/`);try{const d=await k(u,"utf8"),g=[];d.includes(l)||g.push(l),d.includes(h)||g.push(h),g.length>0&&(await w(u,`${d.replace(/\n*$/,`
+`)}
+# vis release subsystem
+${g.join(`
+`)}
+`),e.info("Updated .gitignore."))}catch{await w(u,`# vis release subsystem
+${l}
+${h}
+`),e.info("Created .gitignore.")}}if(n.agent){const{upsertAgentSection:d}=await import("./agent-instructions.js"),g=c(t,"AGENTS.md");let v;try{v=await k(g,"utf8")}catch(j){if(j.code!=="ENOENT")throw j;v=void 0}const{changed:m,content:y}=d(v);m?s?e.info(`[dry-run] would ${v?"update":"create"} AGENTS.md with the 'Releasing with vis' section`):(await w(g,y),e.info(`${v?"Updated":"Created"} AGENTS.md.`)):e.info("AGENTS.md already up to date.")}const o=".vis/release/**",p=c(t,".secretlintignore");if(s)e.info(`[dry-run] would add to .secretlintignore:
+    ${o}`);else try{const d=await k(p,"utf8");d.includes(o)||(await w(p,`${d.replace(/\n*$/,`
+`)}
+# vis release change files (author handles false-positive secretlint)
+${o}
+`),e.info("Updated .secretlintignore."))}catch{await w(p,`# vis release change files (author handles false-positive secretlint)
+${o}
+`),e.info("Created .secretlintignore.")}switch(i){case"bumpy":{await G(t,s,e);break}case"changesets":{await W(t,s,e);break}case"semantic-release":{await E(t,s,f,e);break}default:V(e)}await U(t,s,n.yes===!0,e),await q(t,s,n,e),e.info(""),e.info("Next steps:"),e.info("  1. Add the `release: { ... }` block above to your vis.config.ts"),e.info("  2. Author your first change file: vis release add"),e.info("  3. Preview the plan: vis release status"),e.info("  4. Apply: vis release version --dry-run")},E=async(e,n,a,t)=>{const s=await C(e);if(t.info(`Found ${s.length} .releaserc file(s).`),s.length===0)return;let f=[],i=0;for(const o of s){const p=await T(o);p&&(p.branches&&(f=[...f,...F(p.branches)]),p.plugins?.some(d=>typeof d=="string"&&d.includes("native-addons"))&&(i+=1),p.plugins?.some(d=>Array.isArray(d)&&typeof d[0]=="string"&&d[0].includes("native-addons"))&&(i+=1))}const r=new Set,l=f.filter(o=>r.has(o.name)?!1:(r.add(o.name),!0)),h=l.length>0?B(l):{alpha:{mode:"auto-publish",prerelease:"alpha",tag:"alpha"},main:{mode:"version-pr",tag:"latest"}};t.info(""),t.info("Suggested vis.config.ts release block (paste into your existing config):"),t.info("");const u=`    release: {
+        baseBranch: "main",
+        defaultManaged: false, // flip to true after Phase 6
+        channels: {
+${Object.entries(h).map(([o,p])=>`        ${JSON.stringify(o)}: ${JSON.stringify(p)},`).join(`
+`)}
+        },
+        publish: {
+            packManager: "auto",
+            publishStrategy: "npm-publish-tarball",
+            publishArgs: ["--provenance"],
+            protocolResolution: "pack",
+            catalogResolution: "auto",
+            cleanPackageJson: true,
+        },
+        gitUser: { name: "release-bot", email: "release-bot@example.com" },
+    },`;if(t.info(u),t.info(""),i>0&&(t.info(`Found ${i} package(s) using a NAPI native-addons plugin.`),t.info("These will auto-detect via the `napi` field in package.json — no config needed."),t.info("")),t.info("Migration is per-package opt-in (RFC §17.1). For each package you want to migrate:"),t.info('  1. Add to its package.json:  "vis-release": { "managed": true }'),t.info("  2. Backfill any missing git tags so already-published detection works."),t.info("  3. Add to multi-semantic-release's --ignore-packages list in your release workflow."),t.info(""),!a){t.info("Existing .releaserc.json files are kept in place during transition (deleted in Phase 6)."),t.info("Re-run with `--apply` to perform the writes automatically.");return}t.info(""),t.info("Applying migration writes (--apply set)…"),await D(e,s,u,t),t.info(""),t.info("Migration writes complete. Follow-up steps you still need to do manually:"),t.info("  - Update your CI workflow: remove `multi-semantic-release` step, add `vis release ci/release` step (see `.github/workflows/vis-release.yml` example in the vis package)"),t.info("  - Run `pnpm install` to drop semantic-release deps once you remove them from root package.json"),t.info("  - Run `vis release doctor` to verify the migration")},D=async(e,n,a,t)=>{const s=c(e,"vis.config.ts"),f=await k(s,"utf8").catch(()=>{});if(f===void 0){const i=`import { defineConfig } from "@visulima/vis/config";
+
+export default defineConfig({
+${a}
+});
+`;await w(s,i),t.info(`  wrote ${$(e,s)}`)}else if(/\brelease\s*:/.test(f))t.warn(`  skipped ${$(e,s)} — already has a \`release\` key; merge the suggested block manually.`);else{const i=I(f,a);i===void 0?t.warn(`  skipped ${$(e,s)} — could not locate \`defineConfig({\` or \`export default {\` to inject into; merge the suggested block manually.`):(await w(s,i),t.info(`  updated ${$(e,s)} (injected release block)`))}for(const i of n){const r=P(i),l=c(r,"package.json");if(!await b(l))continue;const h=await k(l,"utf8");let u;try{u=JSON.parse(h)}catch{t.warn(`  skipped ${$(e,l)} — invalid JSON.`);continue}const o=u["vis-release"];if(o!==null&&typeof o=="object"&&o.managed===!0)continue;const p=o!==null&&typeof o=="object"?{...o,managed:!0}:{managed:!0};u["vis-release"]=p,await w(l,`${JSON.stringify(u,void 0,4)}
+`),t.info(`  updated ${$(e,l)} (added vis-release.managed = true)`)}for(const i of n)await M(i,{force:!0}),t.info(`  deleted ${$(e,i)}`)},I=(e,n)=>{const a=/defineConfig\s*\(\s*\{/.exec(e);if(a!==null){const s=a.index+a[0].length;return`${e.slice(0,s)}
+${n}
+${e.slice(s)}`}const t=/export\s+default\s+\{/.exec(e);if(t!==null){const s=t.index+t[0].length;return`${e.slice(0,s)}
+${n}
+${e.slice(s)}`}},W=async(e,n,a)=>{const t=c(e,".changeset"),s=c(t,"config.json"),f=c(t,"pre.json");if(await b(f)){a.error("Pre-release mode is active in changesets (.changeset/pre.json exists)."),a.error("Run `changeset pre exit && changeset version` to consume pending changes, then re-run `vis release init`."),process.exitCode=1;return}let i={};try{i=JSON.parse(await k(s,"utf8"))}catch{a.warn(".changeset/config.json missing or unreadable; using defaults.")}const r={access:i.access==="restricted"?"restricted":"public",baseBranch:typeof i.baseBranch=="string"?i.baseBranch:"main",defaultManaged:!0,fixed:Array.isArray(i.fixed)?i.fixed:[],ignore:Array.isArray(i.ignore)?i.ignore:[],linked:Array.isArray(i.linked)?i.linked:[],privatePackages:i.privatePackages??{tag:!1,version:!1},updateInternalDependencies:i.updateInternalDependencies??"out-of-range"},l=i.changelog,h=typeof l=="string"?l:Array.isArray(l)&&typeof l[0]=="string"?l[0]:void 0;let u;l===!1?u="false":h?.includes("@changesets/changelog-github")?u='"github"':(h?.includes("@changesets/cli"),u='"default"');const o=[];let p=0;try{const d=await x(t);for(const g of d)!g.endsWith(".md")||g==="README.md"||o.push(g)}catch{}if(o.length>0){const d=c(e,".vis","release");let g=0;for(const v of o){const m=c(t,v),y=c(d,v);if(n){a.info(`[dry-run] would copy ${m} → ${y}`);continue}if(await b(y)){a.info(`Skipping existing ${$(e,y)}.`),g+=1;continue}const j=await k(m,"utf8");await w(y,j),p+=1}g>0&&a.info(`Skipped ${g} file(s) that already exist in .vis/release/.`)}a.info(`Found ${o.length} pending .changeset/*.md file(s); ${p>0?`copied ${p} to .vis/release/`:"(dry-run — would copy)"}.`),a.info(""),a.info("Suggested vis.config.ts release block:"),a.info(""),a.info(`    release: {
+        baseBranch: ${JSON.stringify(r.baseBranch)},
+        access: ${JSON.stringify(r.access)},
+        defaultManaged: ${r.defaultManaged},
+        updateInternalDependencies: ${JSON.stringify(r.updateInternalDependencies)},
+        fixed: ${JSON.stringify(r.fixed)},
+        linked: ${JSON.stringify(r.linked)},
+        ignore: ${JSON.stringify(r.ignore)},
+        privatePackages: ${JSON.stringify(r.privatePackages)},
+        changelog: ${u},
+        publish: {
+            packManager: "auto",
+            publishStrategy: "npm-publish-tarball",
+            cleanPackageJson: true,
+        },
+    },`),a.info(""),a.info("After confirming the config, you can delete `.changeset/` (or run `vis release init --remove-changesets`).")},G=async(e,n,a)=>{const t=c(e,".bumpy"),s=c(t,"_config.json");let f={};try{f=JSON.parse(await k(s,"utf8"))}catch{a.warn(".bumpy/_config.json missing or unreadable; using defaults.")}const i=JSON.stringify(f,null,4).split(`
+`).map(h=>`    ${h}`).join(`
+`),r=[];let l=0;try{const h=await x(t);for(const u of h)!u.endsWith(".md")||u==="README.md"||r.push(u)}catch{}if(r.length>0){const h=c(e,".vis","release");let u=0;for(const o of r){const p=c(t,o),d=c(h,o);if(n){a.info(`[dry-run] would copy ${p} → ${d}`);continue}if(await b(d)){a.info(`Skipping existing ${$(e,d)}.`),u+=1;continue}const g=await k(p,"utf8");await w(d,g),l+=1}u>0&&a.info(`Skipped ${u} file(s) that already exist in .vis/release/.`)}a.info(`Found ${r.length} pending .bumpy/*.md file(s); ${l>0?`copied ${l} to .vis/release/`:"(dry-run)"}.`),a.info(""),a.info("Suggested vis.config.ts release block (bumpy config translates 1:1):"),a.info(""),a.info(`    release: ${i.trimStart()},`),a.info(""),a.info("After confirming, delete `.bumpy/`.")},U=async(e,n,a,t)=>{const s=c(e,".husky","pre-commit");if(!await b(s))return;const f=await k(s,"utf8").catch(()=>"");if(f.includes("vis release check"))return;const i="vis release check --hook pre-commit --no-fail";if(!await(async()=>{if(!process.stdout.isTTY||process.env.CI==="true")return!1;if(a)return!0;try{const{confirmPrompt:l}=await import("./prompts.js");return await l(`Wire \`${i}\` into your .husky/pre-commit hook?`,!0)}catch{return!1}})()){t.info(""),t.info("Optional: add this line to .husky/pre-commit:"),t.info(`    ${i}`);return}if(n){t.info(`[dry-run] would append \`${i}\` to .husky/pre-commit`);return}const r=`${f.replace(/\n*$/,`
+`)}${i}
+`;await w(s,r),t.info("Wired vis release check into .husky/pre-commit.")},q=async(e,n,a,t)=>{const s=a.workflows===!0,f=a.yes===!0;if(!s&&(!process.stdout.isTTY||process.env.CI==="true"))return;if(!(s||f||await(async()=>{try{const{confirmPrompt:m}=await import("./prompts.js");return await m("Generate CI workflow files for the active provider?",!0)}catch{return!1}})())){t.info(""),t.info("Skipped workflow generation. Re-run with `vis release init --workflows` later.");return}const{detectRemoteProvider:i}=await import("./detect2.js"),{generateWorkflowFiles:r}=await import("./workflow-templates.js"),{detectPackageManager:l}=await import("../packem_shared/createAdapter-bU4DIP3F.js"),{createShellRunner:h}=await import("./shell-runner.js"),u=h(),o=await i(e,u,void 0),p=await l(e,u),d=a.packageManager??p;let g={};try{const{loadVisConfig:m}=await import("./CONFIG_FILES.js"),y=await m(e);y.release&&(g=y.release)}catch{}const v=r(g,{packageManager:d,provider:o});t.info(""),t.info(`Generating ${v.length} workflow file(s) for ${o}:`);for(const m of v){const y=c(e,m.path);if(await b(y)){t.warn(`  ${m.path} — already exists, skipping`);continue}if(n){t.info(`  ${m.path} — [dry-run] would write ${m.content.length} bytes`);continue}const j=await import("node:path");await N(j.dirname(y),{recursive:!0}),await w(y,m.content),t.info(`  ${m.path} — wrote ${m.content.length} bytes`)}},V=e=>{e.info(""),e.info("Suggested vis.config.ts release block:"),e.info(""),e.info(`    release: {
+        baseBranch: "main",
+        defaultManaged: true,
+        channels: {
+            main: { tag: "latest", mode: "version-pr" },
+        },
+        publish: {
+            packManager: "auto",
+            publishStrategy: "npm-publish-tarball",
+            publishArgs: ["--provenance"],
+            cleanPackageJson: true,
+        },
+    },`)};export{z as default};

package/dist/packem_chunks/handler41.js

@@ -1,5 +1,5 @@
-var U=Object.defineProperty;var y=(e,n)=>U(e,"name",{value:n,configurable:!0});import{createRequire as F}from"node:module";import{green as B,red as O,yellow as q,dim as f}from"@visulima/colorize";import{join as H}from"@visulima/path";import{O as u,I as $,c as p,E as m,y as M}from"../packem_shared/bin-BaZZ32BK.js";import{S as C,g as T,w as I,b as K,p as L,f as P,a as _,c as D,u as j,d as G,e as J,h as V}from"../packem_shared/toolchain-C3ZG0o_X.js";const W=F(import.meta.url),v=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=y(e=>{if(typeof v<"u"&&v.versions&&v.versions.node){const[n,a]=v.versions.node.split(".").map(Number);if(n>22||n===22&&a>=3||n===20&&a>=16)return v.getBuiltinModule(e)}return W(e)},"__cjs_getBuiltinModule"),{spawnSync:A}=k("node:child_process"),{writeFileSync:N}=k("node:fs");var z=Object.defineProperty,d=y((e,n)=>z(e,"name",{value:n,configurable:!0}),"u");const b=["bun","deno","go","node","npm","pnpm","python","ruby","rust","yarn"],Q=d(e=>b.includes(e),"isKnownTool"),x=d(e=>e?B("✓"):O("✗"),"icon"),E=q("⚠"),X=d(e=>{if(e.installed){const n=e.version?` v${e.version}`:"",a=e.configFiles.length>0?` (${e.configFiles.join(", ")})`:"";return`${x(!0)} ${e.name}${n}${a}`}return`${E} ${e.name} — referenced by ${e.configFiles.join(", ")} but not installed`},"renderManagerLine"),Y=d(e=>{if(e.matches)return"";const{manager:n}=e;return n.name==="none"?f("→ (no manager)"):n.name==="self-activate"?"":n.installed?f(`→ ${n.name}`):f(`→ ${n.name} (missing)`)},"renderToolManager"),Z=d(e=>e.matches?x(!0):e.actual?E:x(!1),"toolIcon"),ee=d(e=>{if(u(""),u(f("── Toolchain ───────────────────────")),e.detected.length===0)u(`  ${x(!1)} No version manager detected`),$(`  Install one of: ${C.join(", ")}`);else for(const n of e.detected)u(`  ${X(n)}`);if(u(""),e.tools.length===0){u(`  ${f("No tool pins found — add engines.node, .nvmrc, or a manager config file.")}`);return}u(f("── Tools ───────────────────────────"));for(const n of e.tools){const a=`${n.expected.tool} ${n.expected.version}`,s=n.actual?`actual ${n.actual}`:"not installed",o=n.matches?"":f(` [${n.expected.source}]`),t=Y(n),l=t===""?"":` ${t}`;u(`  ${Z(n)} ${a} — ${s}${o}${l}`),n.manager.note&&$(`     ${n.manager.note}`)}},"printStatus"),ne=d((e,n,a)=>{const s=T(e,n);if(a.json){process.stdout.write(`${JSON.stringify({detected:s.detected.map(t=>({binPath:t.binPath??null,configFiles:t.configFiles,installed:t.installed,name:t.name,version:t.version??null})),tools:s.tools.map(t=>({actual:t.actual??null,expected:t.expected.version,manager:t.manager.name,managerInstalled:t.manager.installed,matches:t.matches,note:t.manager.note??null,source:t.expected.source,tool:t.expected.tool}))},void 0,2)}
-`);return}ee(s);const o=s.tools.filter(t=>!t.matches);o.length>0&&(u(""),$("  Run `vis toolchain install` to install pinned versions.")),a.exitCode&&o.length>0&&(process.exitCode=1)},"executeStatus"),oe=d(e=>{const n=new Map;for(const a of e){const s=n.get(a.manager.name);s?s.push(a):n.set(a.manager.name,[a])}return n},"groupByManager"),R=d((e,n,a)=>A(e,n,{cwd:a,stdio:"inherit"}).status??1,"runInvocation"),te=d((e,n,a)=>{const s=T(e,n),o=s.tools.filter(r=>!r.matches);if(o.length===0){p("Everything already matches — nothing to install.");return}const t=o.some(r=>r.manager.name!=="self-activate"&&r.manager.name!=="none");if(s.detected.length===0&&t){m(`No version manager detected. Install one of: ${C.join(", ")}.`),process.exitCode=1;return}const l=oe(o);let c=!1,g=0;for(const[r,h]of l){if(r==="self-activate"){for(const{expected:i}of h){if(i.source!=="packageManager")if(u(`${f("$")} Writing packageManager=${i.tool}@${i.version}`),a.dryRun)c=!0;else try{I(e,i),c=!0}catch(w){m(w.message),g=1}else u(`${f("$")} (${i.tool} will self-activate from packageManager on next invocation)`);$(`  ${i.tool} ${i.version} — no install needed`)}continue}if(r==="none"){for(const{expected:i}of h)M(`Cannot install ${i.tool} ${i.version} — no manager can handle it.`);g=1;continue}if(!s.detected.find(i=>i.name===r)?.installed){m(`${r} is referenced but not on PATH — install it first, then rerun \`vis toolchain install\`.`),g=1;continue}const S=h.map(i=>K(r,i.expected)).filter(Boolean);for(const i of S){if(!i)continue;if(i.bin==="nvm"&&i.args.length===0){m("nvm is a shell function — run `nvm install` in your shell, then rerun `vis toolchain install`."),i.hint&&$(`  ${i.hint}`),g=1;continue}if(u(`${f("$")} ${i.bin} ${i.args.join(" ")}`),i.hint&&$(`  ${i.hint}`),a.dryRun){c=!0;continue}const w=R(i.bin,i.args,e);if(c=!0,w!==0){g=w;break}}}if(g!==0){process.exitCode=g;return}c&&p("Toolchain installed.")},"executeInstall"),ae=d((e,n,a,s)=>{if(!a)throw new Error("Usage: vis toolchain use <tool>@<version> (e.g. vis toolchain use node@22.13.0)");const o=L(a);if(!o)throw new Error(`Could not parse "${a}". Expected "<tool>@<version>" where <tool> is one of ${b.join(", ")}.`);const t=P(e),l=_(o,t,n);if(l.name==="none"){m(`No manager can pin ${o.tool}. Install one of: ${C.join(", ")}.`),process.exitCode=1;return}if(!l.installed){m(`The best manager for ${o.tool} (${l.name}) is not on PATH. ${l.note??""}`),process.exitCode=1;return}const c=D(l.name,o);if(!c){m(`${l.name} cannot pin ${o.tool}. Use a different manager, or set \`toolchain.tools.${o.tool}\` in vis.config.ts.`),process.exitCode=1;return}if(l.name==="self-activate"){if(u(`${f("→")} Writing packageManager field to package.json...`),s.dryRun){$(`  Would set packageManager: "${o.tool}@${o.version}"`);return}try{const r=I(e,o);if(!r){m(`Refusing to pin non-package-manager tool ${o.tool} via the packageManager field.`),process.exitCode=1;return}if(p(`Set packageManager: "${r}" — ${o.tool} will activate this version on next invocation.`),s.engines!==!1){const h=j(e,o);h&&p(`Updated package.json engines.${o.tool} → ${h}.`)}}catch(r){m(r.message),process.exitCode=1}return}if(c.args.length===0&&l.name==="nvm"&&o.tool==="node"){const r=H(e,".nvmrc");if(u(`${f("→")} Writing ${r}...`),s.dryRun){$(`  Would write ${o.version} to .nvmrc`);return}try{N(r,`${o.version}
-`)}catch(h){m(`Failed to write .nvmrc: ${h.message}`),process.exitCode=1;return}p(`Wrote ${o.version} to .nvmrc.`),$("  nvm is a shell function — run `nvm use` to activate it in this shell.");return}if(c.args.length===0){m(`${l.name} cannot pin ${o.tool} from a subprocess. ${c.configChange?.hint??""}`),c.configChange&&$(`  Edit ${c.configChange.file} by hand and rerun \`vis toolchain status\` to verify.`),process.exitCode=1;return}if(u(`${f("$")} ${c.bin} ${c.args.join(" ")}`),c.configChange&&$(`  Will update ${c.configChange.file} — ${c.configChange.hint}`),s.dryRun)return;const g=R(c.bin,c.args,e);if(g!==0){process.exitCode=g;return}if(p(`Pinned ${o.tool} to ${o.version}.`),s.engines!==!1)try{const r=j(e,o);r&&p(`Updated package.json engines.${o.tool} → ${r}.`)}catch(r){M(`Could not update engines.${o.tool}: ${r.message}`)}},"executeUse"),se=d((e,n,a)=>{if(!a)throw new Error("Usage: vis toolchain which <tool> (e.g. vis toolchain which node)");const s=a.toLowerCase();if(!Q(s))throw new Error(`Unknown tool "${a}". Known: ${b.join(", ")}.`);const o=P(e),t=_({source:"vis.config.ts",tool:s,version:"*"},o,n),l=t.installed&&t.name!=="self-activate"&&t.name!=="none"?o.find(g=>g.name===t.name):void 0,c=l?G(l,s):J(s);if(!c){m(`${a} not found in PATH${l?` or via ${l.name}`:""}.`),process.exitCode=1;return}process.stdout.write(`${c}
-`)},"executeWhich"),ie=d((e,n)=>{const a=V(e,n);process.stdout.write(`${a.name}
-`)},"executeDetect"),ge=d(async({argument:e,options:n,visConfig:a,workspaceRoot:s})=>{if(!s)throw new Error("Could not determine workspace root. Run inside a monorepo.");const o=e[0]??"status",t=a?.toolchain;switch(o){case"detect":{ie(s,t);return}case"install":{te(s,t,n);return}case"status":{ne(s,t,n);return}case"use":{ae(s,t,e[1],n);return}case"which":{se(s,t,e[1]);return}default:throw new Error(`Unknown toolchain action "${o}". Known: status, detect, install, use, which.`)}},"execute");export{ge as default};
+import{b as d}from"./orchestrator.js";const k=async({logger:c,options:o,workspaceRoot:p})=>{const l=p??process.cwd(),t=await d({channel:o.channel,cwd:l,firstRelease:o.firstRelease===!0,skipRegistryLookup:!0}),{printConfigIfRequested:f}=await import("./print-config.js");if(f(o,t,c))return;const s=o.package,i=s?t.plan.releases.filter(e=>e.name===s):t.plan.releases;if(i.length===0){if(s!==void 0&&s!==""){const e=new Set(t.plan.releases.map(a=>a.name)).has(s),r=t.packages.some(a=>a.name===s);let n;if(e)n=`release plan unexpectedly empty for "${s}"`;else if(r)n=`package "${s}" is in the workspace but has no pending release (no change file targets it).`;else{const a=t.packages.slice(0,5).map(u=>u.name).join(", "),m=a?` Known workspace packages: ${a}${t.packages.length>5?", …":""}.`:"";n=`package "${s}" is not in this workspace.${m}`}c.error(`--package filter matched no releases: ${n}`),o.json&&process.stdout.write(`${JSON.stringify({error:n},null,2)}
+`),process.exitCode=1;return}o.json&&process.stdout.write(`{}
+`);return}if(o.json){const e={};for(const r of i)e[r.name]={from:r.oldVersion,to:r.newVersion};process.stdout.write(`${JSON.stringify(e,null,2)}
+`);return}const g=[...i].sort((e,r)=>e.name.localeCompare(r.name));for(const e of g)process.stdout.write(`${e.name} ${e.oldVersion} -> ${e.newVersion}
+`)};export{k as default};

package/dist/packem_chunks/handler42.js

@@ -1 +1,4 @@
-var l=Object.defineProperty;var r=(e,a)=>l(e,"name",{value:a,configurable:!0});import{a as p,af as u}from"../packem_shared/bin-BaZZ32BK.js";var d=Object.defineProperty,g=r((e,a)=>d(e,"name",{value:a,configurable:!0}),"c");const x=g(async({argument:e,logger:a,options:c,visConfig:n,workspaceRoot:t})=>{const i=e||[],o=t??process.cwd(),f=p(o,{configBackend:n?.install?.backend}),s=u(f,i,c.recursive||!1,o,a);s!==0&&(process.exitCode=s)},"execute");export{x as default};
+import{createRequire as k}from"node:module";import{b as N}from"./orchestrator.js";import{createShellRunner as v}from"./shell-runner.js";const b=k(import.meta.url),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,$=e=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[o,r]=g.versions.node.split(".").map(Number);if(o>22||o===22&&r>=3||o===20&&r>=16)return g.getBuiltinModule(e)}return b(e)},{resolve:A}=$("node:path"),x=["test"],C=e=>e===void 0||e===""?"test":x.includes(e)?e:void 0,w=e=>e==null?[]:Array.isArray(e)?e:[e],S=async(e,o)=>{const r=v();let i,n;try{const{createRemoteClient:u,detectRemoteProvider:l}=await import("./detect2.js"),c=await l(o,r,void 0);i=await u(c,{}).detectRepoSlug(o,r)}catch{}try{n=JSON.parse(await e.readFile(`${o}/package.json`,"utf8")).name}catch{}const p=n?`${n.startsWith("@")?n:`@${n}`}/example`:"@scope/example",s=i?`https://github.com/${i}/releases/tag/v1.0.0`:"https://github.com/example/example/releases/tag/v1.0.0";return{channel:"latest",completedAt:new Date().toISOString(),...n===void 0?{}:{monorepoName:n},published:[{name:p,tag:"latest",url:s,version:"1.0.0"}],...i===void 0?{}:{repo:i},skipped:[]}},j=(e,o)=>o?o.includes(":")?e===o:e===o||e.startsWith(`${o}:`):!0,_=async e=>{const o=[],r=[];if(!e)return{channels:o,pluginFailures:r};const{SlackNotificationChannel:i}=await import("./slack.js");for(const s of w(e.slack))o.push(new i(s));const{DiscordNotificationChannel:n}=await import("./discord.js");for(const s of w(e.discord))o.push(new n(s));const{WebhookNotificationChannel:p}=await import("./webhook.js");for(const s of w(e.webhook))o.push(new p(s));if(e.plugins&&e.plugins.length>0){const{pathToFileURL:s}=await import("node:url"),{dynamicEsmImport:u}=await import("./dynamic-import.js");for(const l of e.plugins){const[c,h]=Array.isArray(l)?l:[l,void 0],m=c;try{const d=c.startsWith(".")?s(`${process.cwd()}/${c}`).href:c,f=await u(d),t=f.default??f;let a;typeof t=="function"?a=t(h):t&&typeof t=="object"&&typeof t.send=="function"&&(a=t),a&&typeof a=="object"&&typeof a.send=="function"?o.push(a):r.push({error:"did not export a NotificationChannel (object with .send) or a factory returning one",id:m})}catch(d){r.push({error:d.message,id:m})}}}return{channels:o,pluginFailures:r}},R=async(e,o)=>{try{return await e.send(o),{id:e.id,ok:!0}}catch(r){const i=r instanceof Error?r.message:String(r),{redactTokens:n}=await import("./security.js");return{error:n(i),id:e.id,ok:!1}}},F=async(e,o)=>{const r=A(process.cwd(),o),i=await e.readFile(r,"utf8"),n=JSON.parse(i);return{channel:n.channel,completedAt:n.completedAt??new Date().toISOString(),...n.monorepoName===void 0?{}:{monorepoName:n.monorepoName},published:Array.isArray(n.published)?n.published:[],...n.repo===void 0?{}:{repo:n.repo},skipped:Array.isArray(n.skipped)?n.skipped:[]}},D=async({fs:e,logger:o,options:r,workspaceRoot:i})=>{const n=i??process.cwd();if(C(r.action)===void 0){o.error(`Unknown action "${r.action}". Expected: test.`),process.exitCode=1;return}let p;try{p=await N({cwd:n,skipRegistryLookup:!0})}catch(t){o.error(`Failed to load release context: ${t instanceof Error?t.message:String(t)}`),process.exitCode=1;return}const s=p.config.notifications;if(!(s&&(s.slack&&(!Array.isArray(s.slack)||s.slack.length>0)||s.discord&&(!Array.isArray(s.discord)||s.discord.length>0)||s.webhook&&(!Array.isArray(s.webhook)||s.webhook.length>0)||s.plugins&&s.plugins.length>0))){const t={channels:[],hint:"No notifications configured. Add `release.notifications.{slack,discord,webhook,plugins}` to vis.config.ts.",ok:!0};r.json?process.stdout.write(`${JSON.stringify(t,null,2)}
+`):o.info(t.hint);return}let u;try{u=r.customContext?await F(e,r.customContext):await S(e,n)}catch(t){o.error(`Could not load NotificationContext: ${t.message}`),process.exitCode=1;return}const{channels:l,pluginFailures:c}=await _(s),h=r.channel,m=l.filter(t=>j(t.id,h));if(m.length===0&&c.length===0){const t=h?`No channels matched filter "${h}". Configured ids: ${l.map(a=>a.id).join(", ")||"(none)"}.`:"No channels could be materialised from the configured notifications block.";r.json?process.stdout.write(`${JSON.stringify({channels:[],hint:t,ok:!1},null,2)}
+`):o.error(t),process.exitCode=1;return}const d=[...await Promise.all(m.map(t=>R(t,u))),...c.map(t=>({error:`plugin load failed: ${t.error}`,id:t.id,ok:!1}))],f=d.filter(t=>!t.ok);if(r.json)process.stdout.write(`${JSON.stringify({channels:d,ok:f.length===0},null,2)}
+`);else{for(const y of d)y.ok?o.info(`  ${y.id}  OK`):o.error(`  ${y.id}  FAIL — ${y.error??"unknown error"}`);const t=d.length,a=t-f.length;o.info(""),o.info(`Dispatched ${a}/${t} channel${t===1?"":"s"}.`)}f.length>0&&(process.exitCode=1)};export{D as default};

package/dist/packem_chunks/handler43.js

@@ -1,24 +1,3 @@
-var ue=Object.defineProperty;var B=(e,t)=>ue(e,"name",{value:t,configurable:!0});import{createRequire as de}from"node:module";import fe from"@visulima/colorize";import{isAccessibleSync as Z,readJsonSync as he}from"@visulima/fs";import{readYamlSync as $e}from"@visulima/fs/yaml";import{findPackageManagerSync as ke,getPackageManagerVersion as ve}from"@visulima/package";import{join as H}from"@visulima/path";import{render as K,renderToString as J,Text as b}from"@visulima/tui";import{ag as we,J as ye,N as be,s as Se,a as Re}from"../packem_shared/bin-BaZZ32BK.js";import $ from"react";import{G as Ce,r as Ae,i as Q}from"../packem_shared/ai-analysis-DDqXRFxY.js";import{N as A,C as Ee,O as Te,T as xe,v as re,V as je,L as oe,o as Ue,a as Ne,w as _e,c as Oe,E as qe,S as Me,s as Be}from"../packem_shared/catalog-CuSpuB_R.js";import{U as Pe,p as Fe,f as X}from"../packem_shared/VisUpdateApp-BBx3idMI.js";import{r as Le,s as Ve}from"../packem_shared/typosquats-Bpq4zcWL.js";import{d as Ye}from"../packem_shared/utils-DrNg0XTR.js";const ge=de(import.meta.url),_=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,me=B(e=>{if(typeof _<"u"&&_.versions&&_.versions.node){const[t,n]=_.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return _.getBuiltinModule(e)}return ge(e)},"__cjs_getBuiltinModule"),{execSync:ae}=me("node:child_process");var ze=Object.defineProperty,E=B((e,t)=>ze(e,"name",{value:t,configurable:!0}),"s");const Je=E(e=>{const t=[];for(const n of e.filters)t.push("--filter",n);return e.workspaceRoot&&t.push("--filter","."),t.push("update"),e.latest&&t.push("--latest"),e.recursive&&t.push("--recursive"),e.interactive&&t.push("--interactive"),e.dev&&t.push("--dev"),e.prod&&t.push("--prod"),e.noOptional&&t.push("--no-optional"),e.noSave&&t.push("--no-save"),t.push(...e.packages),{args:t,bin:"pnpm"}},"resolvePnpm"),We=E(e=>{const t=[];return e.filters.length>0&&t.push("workspace",e.filters[0]),t.push("upgrade"),e.latest&&t.push("--latest"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnV1"),De=E(e=>{const t=[];if(e.filters.length>0||e.recursive){t.push("workspaces","foreach","--all");for(const n of e.filters)t.push("--include",n)}return t.push("up"),e.interactive&&t.push("--interactive"),t.push(...e.packages),{args:t,bin:"yarn"}},"resolveYarnBerry"),Ie=E((e,t)=>{const n=["update"];e.latest&&t.push("npm does not support --latest flag. Packages will be updated within their semver range."),e.interactive&&t.push("npm does not support --interactive mode.");for(const a of e.filters)n.push("--workspace",a);return e.recursive&&n.push("--workspaces"),e.workspaceRoot&&n.push("--include-workspace-root"),e.dev&&n.push("--dev"),e.prod&&n.push("--production"),e.noOptional&&n.push("--no-optional"),e.noSave&&n.push("--no-save"),n.push(...e.packages),{args:n,bin:"npm"}},"resolveNpm"),Ge=E(e=>{const t=["update"];e.latest&&t.push("--latest");for(const n of e.filters)t.push("--filter",n);return t.push(...e.packages),{args:t,bin:"bun"}},"resolveBun"),Ze=E((e,t,n)=>{const a=[];if(n.global&&e!=="aube")return{command:{args:["update","--global",...n.packages],bin:"npm"},warnings:a};let l;switch(e){case"aube":{const r=we(n);l={args:r.args,bin:r.bin},a.push(...r.warnings);break}case"bun":{l=Ge(n);break}case"npm":{l=Ie(n,a);break}case"pnpm":{l=Je(n);break}case"yarn":{l=t.startsWith("1.")?We(n):De(n);break}default:{const r=e;throw new Error(`Unsupported package manager: ${String(r)}`)}}return{command:l,warnings:a}},"resolveUpdateCommand");var He=Object.defineProperty,S=B((e,t)=>He(e,"name",{value:t,configurable:!0}),"w");const{red:Ke,yellow:W}=fe,Qe=S((e,t)=>{try{if(t==="pnpm"){const n=H(e,"pnpm-workspace.yaml");if(Z(n)){const a=$e(n);if(typeof a?.minimumReleaseAge=="number")return a.minimumReleaseAge}}else if(t==="bun"){const n=H(e,"package.json");if(Z(n)){const a=he(n);if(typeof a.minimumReleaseAge=="number")return a.minimumReleaseAge}}}catch{}},"readPmNativeMinimumReleaseAge"),Xe=S((e,t,n)=>{const a=e.latest?"latest":e.target??t.target??"latest";if(!["latest","minor","patch"].includes(a))throw new Error(`Invalid target "${a}". Use: latest, minor, or patch.`);return{exclude:[...A(e.exclude),...A(t.exclude)],ignore:A(t.ignore),include:[...A(e.include),...A(t.include),...n],includeLocked:e.includeLocked||t.includeLocked||!1,includePrerelease:e.prerelease||t.prerelease||!1,minimumReleaseAge:t.minimumReleaseAge,minimumReleaseAgeExclude:t.minimumReleaseAgeExclude,packageMode:t.packageMode,security:e.security||e.ai||t.security||!1,target:a}},"buildCatalogCheckOptions"),ee=S((e,t)=>{if(e.length!==0){t.info(`
-${W("⚠")} ${String(e.length)} package${e.length===1?"":"s"} skipped by target constraint (use --target latest to include):`);for(const n of e)t.info(`    ${n.packageName}  ${n.currentRange} → ${n.newRange}  (${n.updateType})`)}},"logFilteredByTarget"),te=S((e,t,n,a)=>{n==="json"?process.stdout.write(`${Ee({checkedCount:0,failed:t,filteredByTarget:[],ignored:[],outdated:e})}
-`):n==="minimal"?process.stdout.write(`${Te(e)}
-`):(xe(e,a),a.info(re(e)))},"writeFormattedOutput"),ne=S(async(e,t,n,a,l)=>{const r=je(e,n,t),s=t==="pnpm"?"pnpm-workspace.yaml":"package.json";if(l.info(`
-Updated ${s}`),r&&l.info(`Backup saved to ${r}`),a.changelog){l.info(`
-Fetching changelogs...`);const u=await oe(n);for(const c of u){const f=c.releaseUrl??c.repoUrl??c.npmUrl;l.info(`  ${c.packageName}: ${f}`)}}if(a.install??!0){const u={bun:"bun install",npm:"npm install",pnpm:"pnpm install",yarn:"yarn install"}[t]??`${t} install`;l.info(`Running ${u}...
-`);try{ae(u,{cwd:e,env:process.env,stdio:"inherit"})}catch{l.warn(`${u} failed. You may need to run it manually.`)}}},"applyCatalogAndInstall"),et=S(async(e,t,n,a,l,r)=>{const s=n.update??{},u=[["global","--global is not supported in catalog mode"],["recursive","--recursive is not needed in catalog mode (catalogs are workspace-level)"],["filter","--filter is not supported in catalog mode (use --include/--exclude instead)"],["no-save","--no-save is not supported in catalog mode"],["workspace-root","--workspace-root is not needed in catalog mode"],["no-optional","--no-optional is not supported in catalog mode"]];for(const[o,h]of u)a[o]&&r.warn(`${W("⚠")} ${h}, ignoring.`);const c=Qe(e,t),f=s.minimumReleaseAge??c;if(s.minimumReleaseAge!==void 0&&c!==void 0&&s.minimumReleaseAge!==c){const o=t==="pnpm"?"pnpm-workspace.yaml":"package.json";r.warn(`${W("⚠")} minimumReleaseAge mismatch: vis config = ${String(s.minimumReleaseAge)} min, ${o} = ${String(c)} min. Consider keeping them in sync.`)}const w=Ue(e),p=Ne(e,t,{depFields:s.depFields,dev:a.dev,prod:a.prod});if(p.size===0){r.info("No catalogs found.");return}const O={...s,minimumReleaseAge:f},T=Xe(a,O,l);let P=0;for(const o of p.values())P+=o.size;const q=!!process.stdout.isTTY&&!Se;let C;const se=q?(o,h)=>{C?C.rerender($.createElement(X,{current:o,total:h})):C=K($.createElement(X,{current:o,total:h}),{interactive:!0,patchConsole:!1})}:(o,h)=>{r.info(`Checking ${String(o)}/${String(h)} dependencies...`)};q||r.info(`Checking ${String(P)} catalog dependencies...
-`);const ie=ye(n.security?.socket),{checkedCount:k,failed:v,filteredByTarget:g,ignored:x,outdated:d}=await _e(p,T,w,se,e,ie,n.security?.socket?.acceptedRisks);C&&(C.clear(),C.unmount());const D=k-d.length-v.length;if(v.length>0&&r.warn(`Failed to fetch: ${v.join(", ")}`),x.length>0&&r.info(`Skipped ${String(x.length)} ignored package${x.length===1?"":"s"}: ${x.join(", ")}`),!q&&k>d.length){const o=[...p.values()].reduce((N,L)=>N+L.size,0),h=o>k?` (${String(o)} catalog entries, ${String(o-k)} duplicates)`:"";r.info(`Checked ${String(k)} unique packages${h}: ${String(d.length)} outdated, ${String(D)} up-to-date${v.length>0?`, ${String(v.length)} failed`:""}${g.length>0?`, ${String(g.length)} skipped by target`:""}`)}if(d.length===0){g.length>0?r.info(`All catalog dependencies are up to date within the current target.
-${String(g.length)} package${g.length===1?" has":"s have"} newer versions available with --target latest:
-${g.map(o=>`  ${o.packageName}  ${o.currentRange} → ${o.newRange}  (${o.updateType})`).join(`
-`)}`):r.info("All catalog dependencies are up to date.");return}const j=a.format??s.format??"table";let y;if(a.ai){const o=Ce(a.aiType??"impact");y=await Ae(d,r,n.ai,o)}const F=!!a.dryRun;if(q&&j==="table"){const o=new Pe(d,y??null);let h;if(a.changelog){r.info("Fetching changelogs...");const i=await oe(d);h=new Map;for(const m of i){const R=m.releaseUrl??m.repoUrl??m.npmUrl;R&&h.set(m.packageName,R)}}const N=n.tui?.autoExit??!1,L=N===!0?3:typeof N=="number"?N:0,I=await K($.createElement(Fe,{autoExitSeconds:L,changelogUrls:h,checkedCount:k,filteredOutEntries:g,isDryRun:F,store:o,totalCatalogEntries:P}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0}).waitUntilExit(),V=process.stdout.columns||80;process.stdout.write(`
-`);for(const i of d){const m=i.vulnerabilities?.length||i.socketReport&&i.socketReport.alerts.length>0,R=!!i.acceptedRisk,z=m?R?"✓":"⚠":"✓",ce=R?"gray":i.updateType==="major"?"red":i.updateType==="minor"?"yellow":"green",M=i.socketReport?.score.overall,pe=M===void 0?"":` [${String(Math.round(M*100))}%]`,G=M===void 0?void 0:be(M);process.stdout.write(`${J($.createElement(b,null,"   ",$.createElement(b,{color:ce},z),`  ${i.packageName}  ${i.currentRange} → ${i.newRange}`,$.createElement(b,{dimColor:!0},`  ${i.updateType}`),G?$.createElement(b,{color:G},pe):null),{columns:V})}
-`)}if(process.stdout.write(`
-`),r.info(re(d)),k>d.length){const i=[...p.values()].reduce((R,z)=>R+z.size,0),m=i>k?` (${String(i)} catalog entries, ${String(i-k)} duplicates)`:"";r.info(`  Checked ${String(k)} unique packages${m}: ${String(D)} up-to-date${v.length>0?`, ${String(v.length)} failed`:""}`)}if(g.length>0){process.stdout.write(`
-`);const i=`${String(g.length)} package${g.length===1?"":"s"} skipped by target constraint (use --target latest to include):`;process.stdout.write(`${J($.createElement(b,{color:"yellow"},`  ${i}`),{columns:V})}
-`);for(const m of g)process.stdout.write(`${J($.createElement(b,null,"     ",$.createElement(b,{dimColor:!0},m.packageName),`  ${m.currentRange} → ${m.newRange}`,$.createElement(b,{dimColor:!0},`  ${m.updateType}`)),{columns:V})}
-`)}const Y=Array.isArray(I)?I:[];if(Y.length>0&&!F){r.info(`
-Applying ${String(Y.length)} updates...
-`);const i={...a,install:a.install??s.install};await ne(e,t,Y,i,r)}return}if(F){if(j==="json"){const o={failed:v,filteredByTarget:g,ignored:x,outdated:d};y&&(o.aiAnalysis=y),process.stdout.write(`${JSON.stringify(o,void 0,2)}
-`)}else r.info(`Would update ${String(d.length)} dependencies:
-`),te(d,v,j,r),y&&(r.info(""),r.info(Q(y))),ee(g,r);return}y&&j!=="json"&&(r.info(Q(y)),r.info(""));let U=d;if(a.interactive&&(U=await Oe(d),U.length===0)){r.info("No updates selected.");return}r.info(`Updating ${String(U.length)} catalog dependencies...
-`),te(U,[],j,r),ee(g,r);const le={...a,install:a.install??s.install};await ne(e,t,U,le,r)},"executeCatalogUpdate"),tt=S((e,t,n,a,l,r)=>{const s={dev:a.dev,filters:A(a.filter),global:a.global,interactive:a.interactive,latest:a.latest||a.target==="latest",noOptional:a.noOptional,noSave:a.noSave,packages:l,prod:a.prod,recursive:a.recursive,workspaceRoot:a.workspaceRoot},{command:u,warnings:c}=Ze(t,n,s);for(const w of c)r.warn(w);const f=`${u.bin} ${u.args.join(" ")}`.trim();if(a.dryRun){r.info(`Would run: ${f}`);return}r.info(`Running: ${f}`);try{ae(f,{cwd:e,env:process.env,stdio:"inherit"})}catch(w){const p=w.status??1;r.error(`
-${Ke("✖")} Update failed (exit code ${String(p)})`),r.error(`  Command: ${f}`),r.error(`  Directory: ${e}
-`),process.exitCode=p}},"executePmWrapper"),$t=S(async({argument:e,logger:t,options:n,visConfig:a,workspaceRoot:l})=>{if(!l)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");let r=e;const s=l,{packageManager:u}=ke(s);if(!n.noTyposquatCheck){if(r.length>0){const c=r.map(p=>Ye(p)),f=a?.security?.typosquatAllowlist,w=await Le(c.map(p=>p.name),f);if(!w.ok){process.exitCode=1;return}r=c.map((p,O)=>{const T=w.packages[O];return T!==p.name?p.versionSpec?`${T}@${p.versionSpec}`:T??"":r[O]??""})}else if(!await Ve(s,a?.security?.typosquatAllowlist)){process.exitCode=1;return}}if(n.rollback){if(!qe(s,u)){t.info("No backup found. Run 'vis update' first to create a backup.");return}if(Me(s,u))t.info("Restored from backup.");else throw new Error("Failed to restore from backup.");return}if(!n.noCatalog&&Be(s,u))await et(s,u,a??{},n,r,t);else{const c=Re(s,{configBackend:a?.install?.backend}),f=c.name==="aube"?"":ve(c.name);tt(s,c.name,f,n,r,t)}},"execute");export{$t as default};
+import{createRequire as y}from"node:module";import{DEFAULT_CHANGES_DIR as j}from"./DEFAULT_CLEAN_KEEP.js";import{b as C,f as T}from"./orchestrator.js";import{a as x}from"../packem_shared/slug-DoueYuLo.js";import B from"./handler44.js";const k=y(import.meta.url),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=e=>{if(typeof l<"u"&&l.versions&&l.versions.node){const[t,o]=l.versions.node.split(".").map(Number);if(t>22||t===22&&o>=3||t===20&&o>=16)return l.getBuiltinModule(e)}return k(e)},{join:h}=_("node:path"),f=["none","patch","minor","major"],g=(e,t)=>{const o=f.indexOf(e)+t;return f[Math.min(Math.max(o,0),f.length-1)]??e},v=e=>e.chosen!==e.release.type,R=(e,t)=>{const o=[];e.isCascadeBump&&o.push("cascade"),e.isGroupBump&&o.push("group"),e.isDependencyBump&&!e.isCascadeBump&&o.push("dep-bump");const r=o.length>0?` [${o.join(", ")}]`:"";return`${e.name}: ${e.oldVersion} → ${e.newVersion} (${t})${r}`},q=async e=>{const{selectPrompt:t}=await import("./prompts.js");process.stdout.write(`
+${R(e,e.type)}
+`);const o=await t("Action?",[{label:"accept (keep as-is)",value:"accept"},{label:"promote (bump up one level)",value:"promote"},{label:"demote (bump down one level)",value:"demote"},{label:"set explicitly (major | minor | patch | none)",value:"set"},{label:"skip this package",value:"skip"}]);return o==="promote"?g(e.type,1):o==="demote"?g(e.type,-1):o==="skip"?"none":o==="set"?t("Set bump level to?",[{label:"major",value:"major"},{label:"minor",value:"minor"},{label:"patch",value:"patch"},{label:"none (skip)",value:"none"}]):e.type},D=async e=>{const t=[];for(const o of e)t.push({chosen:await q(o),release:o});return t},N=async(e,t,o,r,c)=>{const i={};for(const s of r)s.chosen!=="none"&&(i[s.release.name]=s.chosen);const n=h(t,o,`${x("plan")}.md`),u={bumps:i};return await e.mkdir(h(t,o),{recursive:!0}),await e.writeFile(n,T(u,c)),n},S=async e=>{const{fs:t,logger:o,options:r,workspaceRoot:c}=e,i=c??process.cwd();if(!process.stdout.isTTY){o.error("--interactive requires a TTY. Drop the flag to get JSON output."),process.exitCode=1;return}const n=await C({channel:r.channel,cwd:i,skipRegistryLookup:!0}),{printConfigIfRequested:u}=await import("./print-config.js");if(u(r,n,o))return;const{releases:s}=n.plan;if(s.length===0){o.info("No pending releases.");return}n.channel&&o.info(`Channel: ${n.channel.tag}${n.channel.prerelease?` (preid: ${n.channel.prerelease})`:""} | mode: ${n.channel.mode}`),o.info(`Walking through ${s.length} pending release(s). Press Ctrl-C to abort.`);const p=await D(s),m=p.filter(a=>v(a)).length,w=p.filter(a=>a.chosen==="none").length;o.info(""),o.info("Summary:");for(const a of p){const d=v(a)?` (was ${a.release.type})`:"";o.info(`  ${a.release.name}: ${a.chosen}${d}`)}if(o.info(""),o.info(`${m} overridden, ${w} skipped, ${p.length-m} accepted as-is.`),r.write){if(m===0){o.info("Nothing to write — every package was accepted as-is.");return}const{textPrompt:a}=await import("./prompts.js"),d=await a("Changelog body for the override change file:","Operator-driven plan adjustment via `vis release plan -i`."),b=n.config.changesDir??j,$=await N(t,i,b,p,d);o.info(`Wrote ${$}`)}},L=async e=>{if(e.options.interactive){await S(e);return}await B({...e,options:{...e.options,bump:void 0,json:!0}})};export{L as default};

package/dist/packem_chunks/handler44.js

@@ -1,3 +1,2 @@
-var a=Object.defineProperty;var s=(n,e)=>a(n,"name",{value:e,configurable:!0});import{createRequire as f}from"node:module";import{ah as v}from"../packem_shared/bin-BaZZ32BK.js";const d=f(import.meta.url),t=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,l=s(n=>{if(typeof t<"u"&&t.versions&&t.versions.node){const[e,r]=t.versions.node.split(".").map(Number);if(e>22||e===22&&r>=3||e===20&&r>=16)return t.getBuiltinModule(n)}return d(n)},"__cjs_getBuiltinModule"),{execSync:p,spawnSync:m}=l("node:child_process");var g=Object.defineProperty,y=s((n,e)=>g(n,"name",{value:e,configurable:!0}),"r");const w=y(async({argument:n,logger:e,options:r})=>{const c=n?.[0];e.info("info: checking for updates...");const o=v.version;let i;try{const u=p("npm view @visulima/vis version",{encoding:"utf8"}).trim();i=c??u}catch{throw new Error("Failed to query npm registry. Check your network connection.")}if(o===i&&!r.force){e.info(`
-✓ Already up to date (${o})`);return}if(r.check){o===i?e.info(`✓ Already up to date (${o})`):e.info(`info: found @visulima/vis@${i} (current: ${o})`);return}if(e.info(`info: found @visulima/vis@${i} (current: ${o})`),e.info("info: installing..."),m("npm",["install","-g",`@visulima/vis@${i}`],{encoding:"utf8",stdio:"inherit"}).status!==0)throw new Error("Failed to update. Try running with sudo or fix npm permissions.");e.info(`
-✓ Updated @visulima/vis from ${o} → ${i}`)},"execute");export{w as default};
+import{b as m}from"./orchestrator.js";const u=a=>a==="major"||a==="minor"||a==="patch"||a==="none",d=async({logger:a,options:i,workspaceRoot:p})=>{const l=p??process.cwd();let r;try{r=await m({channel:i.channel,cwd:l,skipRegistryLookup:!0})}catch(e){a.error(`Failed to load release context: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}const{printConfigIfRequested:c}=await import("./print-config.js");if(c(i,r,a))return;let{releases:o}=r.plan;if(i.bump){const e=i.bump.split(",").map(n=>n.trim()).filter(u);e.length>0&&(o=o.filter(n=>e.includes(n.type)))}if(i.filter){const e=(await import("./index.js")).default;o=o.filter(n=>e(i.filter,n.name))}if(i.json){const e={branch:r.branch,channel:r.channel,consumedChangeFiles:r.plan.consumedChangeFiles.map(n=>n.path),releases:o.map(n=>({isCascadeBump:n.isCascadeBump,isDependencyBump:n.isDependencyBump,isGroupBump:n.isGroupBump,name:n.name,newVersion:n.newVersion,oldVersion:n.oldVersion,reasons:n.reasons,type:n.type})),warnings:r.plan.warnings};process.stdout.write(`${JSON.stringify(e,null,2)}
+`),o.length===0&&(process.exitCode=1);return}if(o.length===0){if(a.info("No pending releases."),r.plan.warnings.length>0){a.warn(`${r.plan.warnings.length} warning(s):`);for(const e of r.plan.warnings)a.warn(`  - ${e}`)}process.exitCode=1;return}r.channel&&a.info(`Channel: ${r.channel.tag}${r.channel.prerelease?` (preid: ${r.channel.prerelease})`:""} | mode: ${r.channel.mode}`),a.info(`${o.length} package(s) pending release:`),a.info("");const t={major:[],minor:[],none:[],patch:[]};for(const e of o)t[e.type].push(e);for(const e of["major","minor","patch"])if(t[e].length!==0){a.info(`  ${e.toUpperCase()}:`);for(const n of t[e]){const s=[];n.isCascadeBump&&s.push("cascade"),n.isGroupBump&&s.push("group"),n.isDependencyBump&&!n.isCascadeBump&&s.push("dep-bump");const f=s.length>0?` [${s.join(", ")}]`:"";a.info(`    ${n.name}: ${n.oldVersion} → ${n.newVersion}${f}`)}}if(r.plan.warnings.length>0){a.info(""),a.warn(`${r.plan.warnings.length} warning(s):`);for(const e of r.plan.warnings)a.warn(`  - ${e}`)}};export{d as default};

package/dist/packem_chunks/handler45.js

@@ -1 +1 @@
-var p=Object.defineProperty;var t=(a,o)=>p(a,"name",{value:o,configurable:!0});import{a as f,ai as d}from"../packem_shared/bin-BaZZ32BK.js";import{o as g}from"../packem_shared/utils-DrNg0XTR.js";var v=Object.defineProperty,u=t((a,o)=>v(a,"name",{value:o,configurable:!0}),"c");const k=u(async({argument:a,logger:o,options:e,visConfig:n,workspaceRoot:i})=>{const s=a;if(!s||s.length===0)throw new Error("No packages specified. Usage: vis why <package...>");const l=i??process.cwd(),c=f(l,{configBackend:n?.install?.backend}),r=d(c,{depth:e.depth===void 0?void 0:Number(e.depth),dev:e.dev||!1,filter:g(e.filter),global:e.global||!1,json:e.json||!1,long:e.long||!1,noOptional:e.noOptional||!1,packages:s,parseable:e.parseable||!1,prod:e.prod||!1,recursive:e.recursive||!1},l,o);r!==0&&r!==1&&(process.exitCode=r)},"execute");export{k as default};
+import{DEFAULT_CHANGES_DIR as l}from"./DEFAULT_CLEAN_KEEP.js";import{stageAndCommitFile as g}from"./git.js";import{b as d}from"./orchestrator.js";import{readPreMode as m,buildEnterFile as w,writePreMode as u,preModeFilePath as $}from"./pre-mode.js";import{createShellRunner as h}from"./shell-runner.js";import{VisReleaseError as x}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const v=["enter","exit","status"],k=t=>t===void 0||t===""?"status":v.includes(t)?t:void 0,C=async(t,i,r)=>{const e=i.tag?.[0];if(!e){r.error("`pre enter` requires a tag, e.g.: vis release pre enter alpha"),process.exitCode=1;return}const o=await d({cwd:t,skipRegistryLookup:!0}),s=o.config.changesDir??l,p=await m(t,s);if(p){r.error(`Already in pre-mode (tag "${p.tag}", mode "${p.mode}"). Run \`vis release pre exit\` first if you want to switch tags.`),process.exitCode=1;return}const a=w(e,o.packages.map(c=>({name:c.name,version:c.version}))),n=await u(t,s,a);if(r.info(`Entered pre-mode with tag "${e}". ${Object.keys(a.initialVersions).length} package version(s) snapshot.`),i.commit===!1)r.info(`Run \`git add ${n} && git commit -m 'chore(release): enter pre-mode (${e}) [skip ci]'\` so CI sees the state.`);else{const c=h();try{await g({cwd:t,runner:c},n,`chore(release): enter pre-mode (${e}) [skip ci]`,{author:o.config.gitUser,push:i.push!==!1,sign:o.config.gitSignCommits===!0}),r.info(`Committed ${n}${i.push===!1?"":" + pushed"}.`)}catch(f){r.warn(`Could not commit ${n}: ${f.message}`)}}},y=async(t,i,r)=>{const e=await d({cwd:t,skipRegistryLookup:!0}),o=e.config.changesDir??l,s=await m(t,o);if(!s){r.error("Not in pre-mode. Nothing to exit."),process.exitCode=1;return}if(s.mode==="exit-pending"){r.info("Pre-mode already in `exit-pending` state. Run `vis release version` to consolidate.");return}if(e.channel?.prerelease!==void 0)throw new x({code:"CONFIG_INVALID",hint:`Switch to a non-prerelease branch (one whose channel has no \`prerelease\` set) before running \`vis release pre exit\`, or stay in pre-mode by skipping the exit. Current channel "${e.channel.tag}" pins prerelease "${e.channel.prerelease}".`,message:`Refusing to exit pre-mode: the active channel "${e.channel.tag}" has its own prerelease identifier "${e.channel.prerelease}". Exiting would create an unrecoverable state — the next \`vis release version\` would still produce a prerelease via the channel, but the cleanup would delete pre.json making retry impossible.`});const p={...s,mode:"exit-pending"},a=await u(t,o,p);if(r.info("Pre-mode flagged for exit. The next `vis release version` will consolidate the prereleases and delete pre.json."),i.commit!==!1){const n=h();try{await g({cwd:t,runner:n},a,`chore(release): exit pre-mode (was ${s.tag}) [skip ci]`,{author:e.config.gitUser,push:i.push!==!1,sign:e.config.gitSignCommits===!0}),r.info(`Committed ${a}${i.push===!1?"":" + pushed"}.`)}catch(c){r.warn(`Could not commit ${a}: ${c.message}`)}}},b=async(t,i)=>{const r=(await d({cwd:t,skipRegistryLookup:!0})).config.changesDir??l,e=await m(t,r);if(!e){i.info("Pre-mode: off.");return}i.info(`Pre-mode: ${e.mode==="pre"?"ACTIVE":"EXIT-PENDING"} (tag "${e.tag}", entered ${e.enteredAt})`),i.info(`  → ${$(t,r)}`),i.info(`  → ${Object.keys(e.initialVersions).length} package version(s) snapshot at enter time.`)},N=async({logger:t,options:i,workspaceRoot:r})=>{const e=r??process.cwd(),o=k(i.action);if(o===void 0){t.error(`Unknown action "${i.action}". Expected one of: enter, exit, status.`),process.exitCode=1;return}if(o==="enter"){await C(e,i,t);return}if(o==="exit"){await y(e,i,t);return}await b(e,t)};export{N as default};

package/dist/packem_chunks/handler46.js

@@ -0,0 +1 @@
+import{b as u,p as $}from"./orchestrator.js";import{VisReleaseError as m}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const x=async({logger:s,options:r,workspaceRoot:l})=>{const p=l??process.cwd(),o=r.dryRun===!0;let n;try{n=await u({channel:r.channel,cwd:p,firstRelease:r.firstRelease===!0,projects:r.filter?r.filter.split(",").map(e=>e.trim()).filter(Boolean):void 0})}catch(e){s.error(`Failed to load release context: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}const{printConfigIfRequested:h}=await import("./print-config.js");if(h(r,n,s))return;if(r.checkOnly===!0){if(s.info(`Preflight: ${n.plan.releases.length} pending publish(es)${n.channel?` to dist-tag "${n.channel.tag}"`:""}.`),n.plan.warnings.length>0)for(const e of n.plan.warnings)s.warn(`  - ${e}`);process.exitCode=n.plan.releases.length===0?1:0;return}if(n.plan.releases.length===0){s.info("No pending releases — nothing to publish.");return}const i=r.tag??n.channel?.tag;i||s.warn("No --tag provided and no channel matched the current branch. Defaulting to dist-tag 'latest'. Set channels in vis.config.ts to control this."),s.info(`${o?"[dry-run] would publish":"Publishing"} ${n.plan.releases.length} package(s) to dist-tag "${i??"latest"}"${o?"":"..."}`);let t;try{t=await $(n,{dryRun:o,noPush:r.noPush===!0,otp:r.otp,resume:r.resume===!0,tag:i})}catch(e){if(e instanceof m&&e.code==="STAGE_PENDING"){s.error(e.message),e.hint&&(s.info(""),s.info(`Next steps: ${e.hint}`)),process.exitCode=1;return}s.error(`Publish failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}s.info("");for(const e of t.published)s.info(`  [published] ${e.name}@${e.version}`);for(const e of t.skipped)e.reason.startsWith("stage-")?s.warn(`  [stage]     ${e.name} (${e.reason} — re-run \`vis release publish\` once approved)`):s.info(`  [skipped]   ${e.name} (${e.reason})`);for(const e of t.failed)s.error(`  [failed]    ${e.name}: ${e.reason}`);s.info(""),s.info(`Published: ${t.published.length} | Skipped: ${t.skipped.length} | Failed: ${t.failed.length}`),t.tags.length>0&&s.info(`Tags created: ${t.tags.length}${t.tagsPushed?" (pushed)":" (NOT pushed — re-run with --resume to retry)"}`),t.failed.length===0?process.exitCode=0:t.published.length===0&&t.skipped.length===0?process.exitCode=3:process.exitCode=2;const a=t.failed.filter(e=>/\bEOTP\b|one[- ]time password|otp/i.test(e.reason));if(a.length>0){s.info(""),s.warn("Publish failed because the registry required a 2FA OTP. Rerun with:");const e=a.map(g=>g.name).join(","),d=r.channel?` --channel=${r.channel}`:"",c=r.tag?` --tag=${r.tag}`:"",f=` --filter='${e}'`;s.info(`  vis release publish --otp=REPLACE_WITH_NEW_OTP --resume${c}${d}${f}`)}};export{x as default};

package/dist/packem_chunks/handler47.js

@@ -0,0 +1 @@
+import{b as p}from"./orchestrator.js";import{runSnapshot as f}from"./snapshot.js";const u=async({logger:r,options:i,workspaceRoot:n})=>{const a=n??process.cwd();if(!i.tag){r.error("--tag is required."),process.exitCode=1;return}const o=i.dryRun===!0,s=await p({cwd:a}),{printConfigIfRequested:d}=await import("./print-config.js");if(d(i,s,r))return;let e;try{e=await f({context:s,dryRun:o,filter:i.filter,registry:i.registry,tag:i.tag})}catch(t){r.error(`Snapshot failed: ${t.message}`),process.exitCode=1;return}r.info(`${o?"[dry-run] would snapshot":"Snapshotting"} at version ${e.snapshotVersion} → tag "${e.tag}"`);for(const t of e.published)r.info(`  ${o?"[dry-run]  ":"[published]"} ${t.name}@${t.version}`);for(const t of e.skipped)r.info(`  [skipped]   ${t.name} (${t.reason})`);for(const t of e.failed)r.error(`  [failed]    ${t.name}: ${t.reason}`);r.info(""),r.info(`Published: ${e.published.length} | Skipped: ${e.skipped.length} | Failed: ${e.failed.length}`),process.exitCode=e.failed.length>0?2:0};export{u as default};

package/dist/packem_chunks/handler48.js

@@ -0,0 +1,3 @@
+import{DEFAULT_CHANGES_DIR as u}from"./DEFAULT_CLEAN_KEEP.js";import{b as m}from"./orchestrator.js";import{createShellRunner as $}from"./shell-runner.js";import{readStagedRegistry as v,removePendingStages as y,writeStagedRegistry as C}from"./staged-registry.js";import{acquireLock as x,releaseLock as S}from"./state.js";const j=["approve","list","reject"],k=t=>t===void 0||t===""?"list":j.includes(t)?t:void 0,A=async(t,r,o,s)=>{const i=["stage","list","--json"],d=o.stageIds?.[0],n=o.filter??d;n&&i.push(n);const p=await t.run("npm",i,{cwd:r,silent:!0}),c=await m({cwd:r}),a=await v(r,c.config.changesDir??u),f=n?{pending:a.pending.filter(e=>e.name===n)}:a;let g=[];if(p.exitCode===0&&p.stdout.trim())try{g=JSON.parse(p.stdout)}catch{process.stdout.write(`${p.stdout}
+`)}if(o.json){process.stdout.write(`${JSON.stringify({npm:g,registry:f.pending},null,2)}
+`);return}if(g.length===0&&f.pending.length===0){s.info("No staged versions awaiting approval.");return}const h=new Set(g.map(e=>e.id).filter(Boolean)),l=new Set(f.pending.map(e=>e.id));for(const e of g){const w=l.has(e.id??"")?"":"  [npm-only]";s.info(`  ${e.id??"<no-id>"}  ${e.package??"?"}@${e.version??"?"}  → ${e.tag??"latest"}${w}`)}for(const e of f.pending)h.has(e.id)||s.info(`  ${e.id}  ${e.name}@${e.version}  → ${e.tag??"latest"}  [registry-only, ${e.reason}]`)},b=async(t,r,o)=>{if(r.all){const i=await m({cwd:t}),d=await v(t,i.config.changesDir??u);if(d.pending.length===0){o.error("No pending stages in .vis/release/staged.json. Approve manually with explicit ids, or rerun `vis release publish` with publish.stage: true.");return}return d.pending.map(n=>n.id)}const s=r.stageIds??[];if(s.length===0){o.error("Pass stage ids positionally, or use --all to approve every pending stage in .vis/release/staged.json.");return}return s},E=async(t,r,o,s,i)=>{const d=t==="approve"?await b(o,s,i):s.stageIds;if(!d||d.length===0){t==="reject"&&i.error("Pass stage ids positionally to reject."),process.exitCode=1;return}const n=[],p=[];for(const c of d){const a=await r.run("npm",["stage",t,c],{cwd:o,silent:!1});a.exitCode===0?n.push(c):p.push({id:c,reason:a.stderr.trim()||`exit ${a.exitCode}`})}if(i.info(""),n.length>0){i.info(`${t==="approve"?"Approved":"Rejected"} ${n.length} stage(s).`);let c=[];try{const a=await m({cwd:o}),f=a.config.changesDir??u,g=await v(o,f);if(t==="reject"){const l=new Set(n);c=g.pending.filter(e=>l.has(e.id)).map(e=>({name:e.name,version:e.version}))}const h=y(g,n);if(h!==g){const l=await C(o,f,h);if(l.changed&&s.commit!==!1){const{stageAndCommitFile:e}=await import("./git.js"),w=l.removed?"chore(release): clear pending stage registry [skip ci]":`chore(release): ${t} ${n.length} stage${n.length===1?"":"s"} [skip ci]`;await e({cwd:o,runner:r},l.path,w,{author:a.config.gitUser,push:s.push!==!1,sign:a.config.gitSignCommits===!0}),i.info(`Updated ${l.path} and committed${s.push===!1?"":" + pushed"}.`)}else l.changed&&i.info(`Updated ${l.path}. Commit + push it so the next release wave sees the resolved state.`)}}catch(a){i.warn(`Could not update staged registry: ${a.message}`)}if(c.length>0){i.info(""),i.info("Orphan CHANGELOG sections to review:");for(const a of c)i.info(`  Edit CHANGELOG.md for ${a.name} to remove the orphan ${a.version} section before the next wave`);i.info("(Workspace CHANGELOG.md is unaffected — its wave entry is written from the publish phase against actually-published versions.)")}}if(p.length>0){for(const c of p)i.error(`  ${c.id}: ${c.reason}`);process.exitCode=1}},R=async({logger:t,options:r,workspaceRoot:o})=>{const s=o??process.cwd(),i=k(r.action);if(i===void 0){t.error(`Unknown action "${r.action}". Expected one of: list, approve, reject.`),process.exitCode=1;return}const d=$();if(i==="list"){await A(d,s,r,t);return}let n,p=!1;if(r.commit!==!1)try{n=(await m({cwd:s})).config.changesDir??u,await x(s,n),p=!0}catch(c){t.error(`Could not acquire release lock: ${c.message}`),process.exitCode=1;return}try{await E(i,d,s,r,t)}finally{p&&n&&await S(s,n)}};export{R as default};

package/dist/packem_chunks/handler49.js

@@ -0,0 +1 @@
+import{b as f,a as c}from"./orchestrator.js";import{VisReleaseError as d}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const p=async({logger:e,options:t,workspaceRoot:l})=>{const a=l??process.cwd(),r=t.dryRun===!0,o=await f({channel:t.channel,cwd:a,firstRelease:t.firstRelease===!0,projects:t.filter?t.filter.split(",").map(n=>n.trim()).filter(Boolean):void 0}),{printConfigIfRequested:s}=await import("./print-config.js");if(s(t,o,e))return;if(t.checkOnly===!0){if(e.info(`Preflight: ${o.plan.releases.length} pending release(s)${o.channel?` on channel "${o.channel.tag}"`:""}.`),o.plan.warnings.length>0)for(const n of o.plan.warnings)e.warn(`  - ${n}`);process.exitCode=o.plan.releases.length===0?1:0;return}if(o.plan.releases.length===0){e.info("No pending releases — nothing to version."),process.exitCode=0;return}o.channel&&e.info(`Channel: ${o.channel.tag}${o.channel.prerelease?` (preid: ${o.channel.prerelease})`:""}`),e.info(`${r?"[dry-run] would version":"Versioning"} ${o.plan.releases.length} package(s)...`);for(const n of o.plan.releases)e.info(`  ${n.name}: ${n.oldVersion} → ${n.newVersion}`);let i;try{i=await c(o,{commit:t.commit===!0,dryRun:r})}catch(n){if(n instanceof d&&n.code==="STAGE_PENDING"){e.error(n.message),n.hint&&(e.info(""),e.info(`Next steps: ${n.hint}`)),process.exitCode=1;return}throw n}if(r){e.info(""),e.info(`[dry-run] would write ${i.changedFiles.length} file(s):`);for(const n of i.changedFiles)e.info(`  ${n}`);if(i.deletedFiles.length>0){e.info(`[dry-run] would delete ${i.deletedFiles.length} change file(s):`);for(const n of i.deletedFiles)e.info(`  ${n}`)}e.info(""),e.info("Dry run complete. No changes made.")}else e.info(""),e.info(`Wrote ${i.changedFiles.length} file(s); deleted ${i.deletedFiles.length} consumed change file(s).`),i.commitSha?e.info(`Committed as ${i.commitSha.slice(0,7)}.`):t.commit&&e.warn("--commit was requested but no commit was made (likely no changes to commit).");if(o.plan.warnings.length>0){e.info(""),e.warn(`${o.plan.warnings.length} warning(s):`);for(const n of o.plan.warnings)e.warn(`  - ${n}`)}};export{p as default};

package/dist/packem_chunks/handler5.js

@@ -1,4 +1,6 @@
-var R=Object.defineProperty;var h=(n,t)=>R(n,"name",{value:t,configurable:!0});import{findPackageManagerSync as N}from"@visulima/package";import{G as P,r as j,i as M}from"../packem_shared/ai-analysis-DDqXRFxY.js";import{a as O,f as T,b,n as z,_ as J,m as S}from"../packem_shared/catalog-CuSpuB_R.js";import{J as U,x as q}from"../packem_shared/bin-BaZZ32BK.js";var A=Object.defineProperty,F=h((n,t)=>A(n,"name",{value:t,configurable:!0}),"x");const G=/^[\^~>=<]+/,H=F(async({argument:n,logger:t,options:f,visConfig:u,workspaceRoot:g})=>{if(!g)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const m=n,e=m[0];if(!e)throw new Error("Package name is required. Usage: vis analyze <package> [version]");const p=m[1],{packageManager:x}=N(g);let a,w="default";const E=O(g,x);for(const[o,i]of E){const s=i.get(e);if(s){a=s,w=o;break}}if(!a)throw new Error(`Package "${e}" not found in any catalog or package.json. Make sure it exists in your workspace dependencies.`);let r;if(p)r=p;else{t.info(`Fetching latest version for ${e}...
-`);const o=await T(e);if(!o.latest)throw new Error(`Could not determine latest version for "${e}".`);r=o.latest}const d=b(a),k=b(r);if(!d||!k)throw new Error(`Could not parse versions: current="${a}", target="${r}".`);const v=z(d,k);if(v==="none"){t.info(`${e} is already at ${r}. Nothing to analyze.`);return}const C=J(a),l={catalogName:w,currentRange:a,newRange:`${C}${r}`,packageName:e,targetVersion:r,updateType:v},y=P(f.aiType??"impact");if(y==="security"||f.security){t.info(`Checking for known vulnerabilities...
-`);const o=a.replace(G,""),i=(await S([{name:e,version:o}])).get(e);i&&i.length>0&&(l.vulnerabilities=i);const s=U(u?.security?.socket);if(s){const c=(await q([{name:e,version:o}],s)).get(`${e}@${o}`);c&&(l.socketReport={alerts:c.alerts,license:c.license,score:c.score})}}const $=await j([l],t,u?.ai,y);(f.format??"table")==="json"?process.stdout.write(`${JSON.stringify($,void 0,2)}
-`):t.info(M($))},"execute");export{H as default};
+import{createRequire as b}from"node:module";import{h as _,d as O,E as j}from"./catalog.js";import"../packem_shared/env-DdQRnEIy.js";import{A as R}from"../packem_shared/pm-runner-CQcraCcu.js";import{l as E}from"../packem_shared/dependency-scan-DpOFiZuI.js";import{r as I}from"../packem_shared/provenance-S7y0BRAt.js";import{r as P}from"../packem_shared/signatures-DoNG2hEr.js";import{loadOptionalSigstore as C}from"./loader.js";const N=b(import.meta.url),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,$=r=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[o,t]=u.versions.node.split(".").map(Number);if(o>22||o===22&&t>=3||o===20&&t>=16)return u.getBuiltinModule(r)}return N(r)},{createHash:S}=$("node:crypto"),{isAbsolute:y,resolve:k,basename:v}=$("node:path"),T=r=>(r??"").split(",").map(o=>o.trim()).filter(o=>o.length>0),G=async({logger:r,options:o,workspaceRoot:t})=>{if(!t)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const n=o.format??"table",c=o.prodOnly??!1,p=o.failOn==="error"?"error":"warning",l=T(o.allowlist),a=R(t),d=E(t,a.name,{includeDev:!c}).map(({name:e,version:i})=>({name:e,version:i})),[m,g]=await Promise.all([I(d,{allowlist:l,workspaceRoot:t}),P(d,{allowlist:l,workspaceRoot:t})]),s=[...m.map(e=>({code:"provenance-regression",message:`Resolved ${e.packageName}@${e.version} has no published provenance attestation, but ${e.packageName}@${e.priorVersionWithProvenance} did — a provenance regression.`,packageName:e.packageName,severity:"warning",version:e.version})),...g.map(e=>({code:e.code,message:e.message,packageName:e.packageName,severity:e.severity,version:e.version}))],f=s.filter(e=>p==="error"?e.severity==="error":!0);if(n==="json")process.stdout.write(`${JSON.stringify({findings:s,ok:f.length===0},void 0,2)}
+`);else if(n==="ndjson")for(const e of s)process.stdout.write(`${JSON.stringify(e)}
+`);else if(s.length===0)r.info(`No provenance regressions or signature problems across ${String(d.length)} locked packages.`);else{const e=process.stdout.columns||80;r.info(_(O.createElement(j,{data:s.map(i=>({code:i.code,package:`${i.packageName}@${i.version}`,severity:i.severity}))}),{columns:e}));for(const i of s)r.warn(`${i.packageName}@${i.version}: ${i.message}`)}f.length>0&&(process.exitCode=1)},D=()=>process.env.CI==="true"||typeof process.env.ACTIONS_ID_TOKEN_REQUEST_URL=="string"||typeof process.env.SIGSTORE_ID_TOKEN=="string",q=(r,o,t)=>({_type:"https://in-toto.io/Statement/v1",predicate:{buildDefinition:{buildType:"https://visulima.com/vis/attest/v1",externalParameters:{workspaceRoot:t},internalParameters:{},resolvedDependencies:[]},runDetails:{builder:{id:"https://visulima.com/vis"},metadata:{invocationId:process.env.GITHUB_RUN_ID??"",startedOn:new Date().toISOString()}}},predicateType:"https://slsa.dev/provenance/v1",subject:[{digest:{sha256:o},name:r}]}),H=async({argument:r,fs:o,logger:t,options:n,workspaceRoot:c})=>{if(!c)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const p=r[0];if(!p)throw new Error("Missing subject. Usage: vis attest <path-to-artifact>");const l=n.predicate??"slsaProvenance";if(l!=="slsaProvenance")throw new Error(`Unsupported predicate '${l}'. Only 'slsaProvenance' is supported.`);const a=y(p)?p:k(c,p),d=n.requireSigning??!1,m=n.format??"table";let g;try{g=await o.readFile(a)}catch{throw new Error(`Cannot read subject artifact at ${a}.`)}const s=S("sha256").update(g).digest("hex");if(!D()){const h="No ambient OIDC token (not running in CI). Keyless signing needs a Fulcio identity from CI OIDC.";if(d)throw new Error(`${h} Re-run in CI or drop --require-signing.`);if(m==="json"){process.stdout.write(`${JSON.stringify({ok:!1,reason:"no-ambient-oidc",sha256:s,skipped:!0,subject:v(a)},void 0,2)}
+`);return}t.warn(`${h} Skipping signing (subject sha256: ${s}). Pass --require-signing to make this fatal.`);return}const f=q(v(a),s,c),e=Buffer.from(JSON.stringify(f)),i=await(await C({workspaceRoot:c})).attest(e,"application/vnd.in-toto+json"),w=n.output?y(n.output)?n.output:k(c,n.output):`${a}.sigstore`;if(await o.writeFile(w,`${JSON.stringify(i,void 0,2)}
+`,"utf8"),m==="json"){process.stdout.write(`${JSON.stringify({bundle:w,ok:!0,sha256:s,subject:v(a)},void 0,2)}
+`);return}t.info(`Signed SLSA v1 provenance for ${v(a)} (sha256 ${s.slice(0,16)}…).`),t.info(`Bundle written to ${w}.`)};export{H as attestEmitExecute,G as attestVerifyExecute};

package/dist/packem_chunks/handler50.js

@@ -0,0 +1,7 @@
+import{createRequire as $}from"node:module";import{F as y,R as l,S as d,d as b}from"../packem_shared/ai-analysis-BpVdn20h.js";import{h as x,d as _,E as w}from"./catalog.js";import"../packem_shared/env-DdQRnEIy.js";import{j as S,E as p,q as j,I as E,s as I}from"../packem_shared/index.server-J83sowC4.js";const C=$(import.meta.url),M=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process;const u={command:"ai",description:"AI-assisted commands: provider detection, cache management, and failure-fix proposals."},R=e=>{if(typeof e!="function")return String(e);const{name:t}=e;return t==="Boolean"?"boolean":t==="Number"?"number":t==="String"?"string":t??"unknown"},N=e=>{const t=[...e.commandPath??[],e.name].join(" "),i=(e.examples??[]).map(([o,r])=>({command:o??"",description:r??""})),n=(e.options??[]).map(o=>({defaultValue:o.defaultValue,description:o.description,name:o.name,type:R(o.type)}));return{argument:e.argument?{description:e.argument.description,name:e.argument.name}:void 0,description:e.description??"",examples:i,name:e.name,options:n,path:t}},f=(e,t=u)=>({command:t.command,description:t.description,subcommands:e.map(i=>N(i))}),P=(e,t=u)=>`${JSON.stringify(f(e,t),void 0,2)}
+`,T=(e,t=u)=>{const i=f(e,t),n=[S(`vis ${i.command} — ${i.description}`),"",p("Subcommands:")];for(const o of i.subcommands){const r=o.argument?` ${j(`<${o.argument.name}>`)}`:"";if(n.push(""),n.push(`  ${E(`vis ${o.path}`)}${r}`),o.description&&n.push(`    ${o.description}`),o.options.length>0){const s=o.options.map(c=>`--${c.name}${c.type==="boolean"?"":`=<${c.type}>`}`).join(", ");n.push(p(`    options: ${s}`))}if(o.examples.length>0){n.push(p("    examples:"));for(const s of o.examples){const c=s.description?p(` — ${s.description}`):"";n.push(`      ${I(s.command)}${c}`)}}}return n.push(""),n.push(p(`Run \`vis ${i.command} discover-help\` for the machine-readable JSON catalogue (designed for AI agents).`)),n.push(p(`Run \`vis ${i.command} <subcommand> --help\` for full usage of a specific subcommand.`)),`${n.join(`
+`)}
+`},g=async()=>{const{default:e}=await import("./cli-main.js").then(t=>t.as);return e.filter(t=>t.name!=="ai")},B=async()=>{const e=await g();process.stderr.write(T(e))},F=async()=>{const e=await g();process.stdout.write(P(e))},V=async({logger:e,visConfig:t})=>{const i=t?.ai,n=l(i);if(!n){e.error("No AI provider available to test."),process.exitCode=1;return}e.info(`Testing ${n.name}...`);try{const o=await b(n,"Reply with exactly: OK",{timeoutMs:3e4});e.info(`Provider ${n.name} responded: ${o.stdout.trim().slice(0,200)}`)}catch(o){const r=o instanceof Error?o.message:String(o);e.error(`Provider ${n.name} failed: ${r}`),process.exitCode=1}},k=({logger:e,options:t,visConfig:i})=>{const n=t.format??"table",o=i?.ai,r=y(),s=l(o);if(n==="json"){const a=r.map(m=>({available:m.available,method:m.detectionMethod,name:m.name,path:m.path,priority:d[m.name]??0,selected:m.name===s?.name,version:m.version}));process.stdout.write(`${JSON.stringify(a,void 0,2)}
+`);return}const c=r.map(a=>({method:a.detectionMethod??"-",path:a.path??"-",priority:String(d[a.name]??0),provider:a.name,selected:a.name===s?.name?">>>":"",status:a.available?"available":"not found",version:a.version??"-"})),h=process.stdout.columns||80,v=x(_.createElement(w,{data:c}),{columns:h});e.info(v),s?e.info(`
+Selected provider: ${s.name} (priority ${String(d[s.name]??0)})`):e.info(`
+No AI provider available. Install one of the supported AI CLI tools.`)},H=async e=>{const{aiFix:t}=await import("./fix.js");await t(e)};export{F as aiDiscoverHelpExecute,H as aiFixExecute,k as aiProvidersExecute,B as aiRootExecute,V as aiTestExecute};

package/dist/packem_chunks/handler51.js

@@ -0,0 +1,33 @@
+import{createRequire as P}from"node:module";import{f as D,v as V,T as w}from"../packem_shared/index-CE6MsgcV.js";import{findVisConfigFile as A}from"./CONFIG_FILES.js";import{p as e}from"./cli-main.js";import{A as F}from"../packem_shared/pm-runner-CQcraCcu.js";import{W as O}from"../packem_shared/build-scripts-q__dKE2y.js";import{O as q}from"../packem_shared/native-config-sync-D-z2Uwqu.js";const C=P(import.meta.url),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,R=l=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[t,s]=$.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return $.getBuiltinModule(l)}return C(l)},{spawnSync:T}=R("node:child_process"),M=/(defineConfig\s*\(\s*\{)/,W=/(export\s+default\s+\{)/,v=(l,t)=>`${t}${JSON.stringify(l)}: true,`,B=(l,t)=>{if(t.length===0)return{added:[],skipped:[],status:"noop"};const s=A(l);if(!s)return{added:[],skipped:t,status:"no-config"};if(!D(s))return{added:[],skipped:t,status:"no-config"};const i=V(s),h=i.search(/installScripts\s*:\s*\{/);let a=null,r=0;if(h!==-1){const c=i.slice(h),d=/(allow\s*:\s*\{)([^}]*)(\})/.exec(c);d?.index!==void 0&&(a=d,r=h+d.index)}if(a){const c=a[2]??"",d=new Set;for(const g of c.matchAll(/["']([^"']+)["']\s*:/g))d.add(g[1]);for(const g of c.matchAll(/(?:^|,|\{)\s*([a-z_$][\w-]*)\s*:/gi))d.add(g[1]);const u=[],k=[];for(const g of t)d.has(g)?k.push(g):u.push(g);if(u.length===0)return{added:[],configPath:s,skipped:k,status:"noop"};const b=/\n([ \t]+)\S/.exec(c)?.[1]??"                ",_=`
+${u.map(g=>v(g,b)).join(`
+`)}`,y=c.replace(/\s+$/,""),S=c.slice(y.length),j=`${y}${y.endsWith(",")||y===""?"":","}${_}${S.length>0?S:`
+`}`,N=`${i.slice(0,r)}${a[1]}${j}${a[3]}${i.slice(r+a[0].length)}`;return w(s,N),{added:u,configPath:s,skipped:k,status:"updated"}}const n=/(installScripts\s*:\s*\{)/;if(n.test(i)){const c=`
+                allow: {
+${t.map(u=>v(u,"                    ")).join(`
+`)}
+                },`,d=i.replace(n,`$1${c}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const o=/(policies\s*:\s*\{)/;if(o.test(i)){const c=`
+            installScripts: {
+                allow: {
+${t.map(u=>v(u,"                    ")).join(`
+`)}
+                },
+            },`,d=i.replace(o,`$1${c}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const f=/(security\s*:\s*\{)/;if(f.test(i)){const c=`
+        policies: {
+            installScripts: {
+                allow: {
+${t.map(u=>v(u,"                    ")).join(`
+`)}
+                },
+            },
+        },`,d=i.replace(f,`$1${c}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const p=M.exec(i)??W.exec(i);if(!p)return{added:[],configPath:s,skipped:t,status:"missing-anchor"};const m=`
+    security: {
+        policies: {
+            installScripts: {
+                allow: {
+${t.map(c=>v(c,"                    ")).join(`
+`)}
+                },
+            },
+        },
+    },`,x=`${i.slice(0,p.index+p[0].length)}${m}${i.slice(p.index+p[0].length)}`;return w(s,x),{added:t,configPath:s,skipped:[],status:"updated"}},L=async({options:l,visConfig:t,workspaceRoot:s})=>{const i=s??process.cwd(),h=F(i);if(h.name==="pnpm"&&!l.scan){e.info("Delegating to pnpm approve-builds...");const a=["approve-builds"];l.all&&a.push("--all");const r=T("pnpm",a,{cwd:i,stdio:"inherit"});if(r.error)throw new Error(`Failed to run pnpm approve-builds: ${r.error.message}`);if(r.status!==0&&r.status!==null&&(e.error(`pnpm approve-builds exited with code ${r.status}`),process.exitCode=r.status),!l.syncNative){e.notice(""),e.notice("Tip: vis.config.ts security.policies.installScripts.allow may now be out of sync with pnpm-workspace.yaml."),e.notice("Run 'vis check --security-config' to compare, or copy the new entries into vis.config.ts.");return}}else{const a=t?.security?.policies?.installScripts?.allow??{},r=t?.security?.pinVersions===!0,n=O(i,a,{pinVersions:r});if(n.unapproved.length===0)e.success("No unapproved build scripts found."),l.write&&(e.info(""),e.info("Nothing to write — there are no unapproved build scripts."));else{e.warn(`Found ${n.unapproved.length} package${n.unapproved.length===1?"":"s"} with unapproved build scripts:
+`);for(const o of n.unapproved)e.info(`  ${o.name} (${o.hooks.join(", ")})`);e.notice(""),e.notice("To approve these packages, add them to vis.config.ts:"),e.notice(""),e.notice("  security: {"),e.notice("    policies: {"),e.notice("      installScripts: {"),e.notice("        allow: {");for(const o of n.unapproved){const f=r&&o.version?`${o.name}@${o.version}`:o.name;e.notice(`          "${f}": true,`)}if(e.notice("        },"),e.notice("      },"),e.notice("    },"),e.notice("  },"),h.name==="pnpm"&&(e.notice(""),e.notice("Or run 'pnpm approve-builds' to update pnpm-workspace.yaml directly.")),l.write){const o=t?.security?.pinVersions===!0,f=n.unapproved.map(m=>o&&m.version?`${m.name}@${m.version}`:m.name),p=B(i,f);switch(e.info(""),p.status){case"missing-anchor":{e.warn(`Could not locate 'defineConfig({' or 'export default {' in ${String(p.configPath)} — please add entries manually.`);break}case"no-config":{e.warn("No vis.config.ts found. Run 'vis init' first, then re-run with --write.");break}case"noop":{e.info(`All ${String(f.length)} entr${f.length===1?"y":"ies"} were already present in vis.config.ts security.policies.installScripts.allow.`);break}default:e.success(`Wrote ${String(p.added.length)} entr${p.added.length===1?"y":"ies"} to ${String(p.configPath)}.`),p.skipped.length>0&&e.info(`Skipped ${String(p.skipped.length)} already-present entr${p.skipped.length===1?"y":"ies"}.`)}}}if(n.excess.length>0){e.notice(""),e.warn(`Stale installScripts.allow entries — ${String(n.excess.length)} pattern${n.excess.length===1?"":"s"} no longer match any installed package:`);for(const o of n.excess)e.info(`  ${o}`);e.notice("Consider removing these entries from vis.config.ts security.policies.installScripts.allow.")}if(n.versionDrift.length>0){e.notice(""),e.warn(`Version drift — ${String(n.versionDrift.length)} entr${n.versionDrift.length===1?"y":"ies"} pinned to an outdated version:`);for(const{from:o,to:f}of n.versionDrift)e.info(`  ${o}  →  ${f}`);e.notice("Rename the keys in vis.config.ts security.policies.installScripts.allow to migrate.")}}if(l.syncNative){const a=t?.security?.policies?.installScripts?.allow??{};if(Object.keys(a).length===0)e.warn("No security.policies.installScripts.allow configured in vis.config.ts. Nothing to sync.");else{const r=q(h.name,i,a);e.info("");for(const n of r)e.success(n)}}};export{L as default};

package/dist/packem_chunks/handler52.js

@@ -0,0 +1,3 @@
+import{createRequire as B}from"node:module";import{getAffectedProjects as F}from"@visulima/task-runner";import{b as H,O as T}from"./catalog.js";const C=B(import.meta.url),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,A=e=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[t,r]=g.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return g.getBuiltinModule(e)}return C(e)},{execFile:D}=A("node:child_process"),{promisify:q}=A("node:util"),P=q(D),G=["[skip ci]","[ci skip]","[no ci]","[vis skip]","[nx skip]"],N=["[vis deploy]","[nx deploy]"],U=["vis","nx"],J=["CACHED_COMMIT_REF","VERCEL_GIT_PREVIOUS_SHA","GITHUB_BASE_REF","CI_COMMIT_BEFORE_SHA"],V=/^[\w./~^@{}][\w.\-/~^@{}]*$/,z=(e=process.env)=>{for(const t of J){const r=e[t];if(r&&r.trim().length>0)return r.trim()}},_=e=>{if(!V.test(e))throw new Error(`Invalid git ref: "${e}". Refs must start with an alphanumeric character or one of _ . / ~ ^ @ { } and may only contain letters, digits, dots, dashes, underscores, slashes, tildes, carets, @, and braces.`)},L=async(e,t)=>{try{return await P("git",["rev-parse","--verify",`${t}^{commit}`],{cwd:e}),!0}catch{return!1}},W=async e=>{try{const{stdout:t}=await P("git",["log","-1","--pretty=%B"],{cwd:e});return t}catch{return""}},O=(e,t,r)=>U.some(c=>e.includes(`[${c} ${t} ${r}]`)),Z=(e,t)=>G.some(r=>e.includes(r))||O(e,"skip",t),K=(e,t)=>N.some(r=>e.includes(r))||O(e,"deploy",t),f=(e,t,r,c)=>({action:"build",message:r,project:e,reason:t,...c}),b=(e,t,r,c)=>({action:"skip",message:r,project:e,reason:t,...c}),Q=e=>`${e.action==="skip"?"🛑":"✅"} ${e.message}`,X=(e,t)=>e.action==="skip"||t?0:1,E=new Set(["deep","direct","none"]),re=async({argument:e,logger:t,options:r,visConfig:c,workspaceRoot:l})=>{const o=e[0]??"",k=!!r.json,R=!!r.verbose,I=!!(r["exit-zero-on-build"]??r.exitZeroOnBuild),p=s=>{R&&!k&&t.info(`❱ ${s}`)},n=s=>{k?process.stdout.write(`${JSON.stringify(s)}
+`):t.info(Q(s)),process.exit(X(s,I))};if(!o)return n(f("","missing-project-argument","Missing project argument. Usage: vis ci ignore <project>"));if(!l)return n(f(o,"workspace-error","Could not determine workspace root — building defensively"));const m=await W(l),$=m.trim().split(`
+`)[0]??"";if(p(`commit: ${$}`),m&&K(m,o))return n(f(o,"commit-force-deploy",`Force-deploy keyword in commit: "${$}"`));if(m&&Z(m,o))return n(b(o,"commit-skip",`Skip keyword in commit: "${$}"`));let h,v;try{({packageJsons:v,workspace:h}=H(l,c))}catch(s){const a=s instanceof Error?s.message:String(s);return n(f(o,"workspace-error",`Workspace discovery failed (${a}) — building defensively`))}if(!Object.hasOwn(h.projects,o))return n(f(o,"project-unknown",`Project "${o}" not found in workspace — building defensively`));try{const s=r.base?.trim(),a=z();let i=s||a||"HEAD~1";const u=r.head?.trim()||"HEAD";_(i),_(u),p(`resolved base ref: ${i} (source: ${s?"flag":a?"ci-env":"default"})`);const S=L(l,i),x=T(l,h,v);await S||(p(`base ref ${i} not reachable — falling back to HEAD~1`),i="HEAD~1"),p(`comparing ${i}...${u}`);const w=r.downstream??"deep",y=r.upstream??"none";if(!E.has(w))throw new Error(`Invalid --downstream value: "${w}". Must be "none", "direct", or "deep".`);if(!E.has(y))throw new Error(`Invalid --upstream value: "${y}". Must be "none", "direct", or "deep".`);const M={base:i,downstream:w,head:u,projectGraph:x,projects:h.projects,upstream:y,workspaceRoot:l},d=await F(M);p(`changed files: ${d.changedFiles.length}`),p(`affected projects: ${d.affectedProjects.join(", ")||"(none)"}`);const j={base:i,head:u};return d.changedFiles.length===0?n(b(o,"no-changes",`No files changed between ${i}...${u}`,{...j,affectedProjects:[]})):d.affectedProjects.includes(o)?n(f(o,"project-affected",`Build ${o}: affected by ${d.changedFiles.length} changed file(s)`,{...j,affectedProjects:d.affectedProjects})):n(b(o,"project-not-affected",`Skip ${o}: not affected by changes between ${i}...${u}`,{...j,affectedProjects:d.affectedProjects}))}catch(s){const a=s instanceof Error?s.message:String(s);return t.error(`Affected detection failed: ${a}`),n(f(o,"workspace-error",`Affected detection failed (${a}) — building defensively`))}};export{re as default};