@visulima/vis 1.0.0-alpha.9 → 1.0.1

package/dist/config/index.js

@@ -0,0 +1 @@
+import{CONFIG_FILES as o,SECURITY_DEFAULTS as e,TASK_CONFIG_FILES as n,applyDefaults as l,defineConfig as C,defineTaskConfig as g,findVisConfigFile as s,findVisTaskConfigFile as a,loadVisConfig as d,loadVisTaskConfig as F}from"../packem_chunks/CONFIG_FILES.js";import{definePlugin as T}from"../packem_shared/definePlugin-DoUcoYSy.js";import{otelPlugin as t}from"../packem_shared/otelPlugin-DmKDBaPo.js";export{o as CONFIG_FILES,e as SECURITY_DEFAULTS,n as TASK_CONFIG_FILES,l as applyDefaults,C as defineConfig,T as definePlugin,g as defineTaskConfig,s as findVisConfigFile,a as findVisTaskConfigFile,d as loadVisConfig,F as loadVisTaskConfig,t as otelPlugin};

package/dist/generate/index.d.ts

@@ -147,7 +147,7 @@ interface DiscoveredTemplate {
   /** Absolute path on disk (file for native, directory for moon). */
   path: string;
   /** Source classification — affects load + listing. */
-  source: "config" | "moon" | "native" | "remote";
+  source: "builtin" | "config" | "moon" | "native" | "remote";
 }
 /**
 * Identity helper for type inference. Authors get autocomplete + checks

package/dist/generate/index.js

@@ -1 +1 @@
-var t=Object.defineProperty;var r=(e,a)=>t(e,"name",{value:a,configurable:!0});var c=Object.defineProperty,l=r((e,a)=>c(e,"name",{value:a,configurable:!0}),"a");const o=l(e=>e,"createTemplate");export{o as createTemplate};
+const t=e=>e;export{t as createTemplate};

package/dist/packem_chunks/CONFIG_FILES.js

@@ -0,0 +1,8 @@
+import{createRequire as G}from"node:module";import{R as O,m as P}from"../packem_shared/target-merge-D2eTghgd.js";import{m as c,A as b,f as p,a as h,H as y,O as C}from"../packem_shared/index-BVuCxe14.js";import{i as I}from"./ts-loader.js";import{otelPlugin as jt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as Tt}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as _}from"../packem_shared/readJsonSync-DuMMeB3s-Cx08VBQg.js";const F=G(import.meta.url),d=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof d<"u"&&d.versions&&d.versions.node){const[e,s]=d.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return d.getBuiltinModule(t)}return F(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:V}=k("node:fs"),{createRequire:N}=k("node:module");class l extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class K extends l{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class x extends l{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
+`),s),this.filePath=e,this.removedKeys=o}}class j extends l{constructor(e,s,o){const r=o instanceof Error?o.message:String(o),n=s.length>0?`
+Chain: ${s.join(" → ")}`:"";super(`Failed to load ${e}: ${r}${n}`,s,{cause:o})}}const L=t=>t.join(" → ");class g extends l{constructor(e,s,o){const r=s.length>0?s[s.length-1]:"<unknown>",n=o.length>0?`
+Tried:
+  ${o.join(`
+  `)}`:"";super(`Cannot resolve "${e}" extended from ${r}.${n}
+Chain: ${L(s)}`,s)}}const q=t=>{const e=[];if(Object.hasOwn(t,"targetDefaults")&&e.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(t,"taskRunnerOptions")&&e.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(t,"taskDefaults")){const{taskDefaults:s}=t,o=[];if(Array.isArray(s))for(const[r,n]of s.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));e.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(t.scopedTasks))for(const[s,o]of t.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&e.push({location:`scopedTasks[${s}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&e.push({location:`scopedTasks[${s}].targets`,name:"targets",renamedTo:"tasks"}));return e},M=t=>Object.hasOwn(t,"targets")&&!Object.hasOwn(t,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],U=(t,e,s)=>{if(!s||typeof s!="object")return;const o=q(s);if(o.length>0)throw new x(t,e,o)},H=(t,e,s)=>{if(!s||typeof s!="object")return;const o=M(s);if(o.length>0)throw new x(t,e,o)},E=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],W=new Set(E),R=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],B=new Set(R),ht=2880,m={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},Y=t=>{if(!t)return{...m};const e=m.policies??{},s=t.policies??{},o={...e,...s};for(const r of Object.keys(e)){const n=e[r],a=s[r];n!==void 0&&a!==void 0&&(o[r]={...n,...a})}return{...m,...t,policies:o}},v=t=>({...t,security:Y(t.security),update:{security:!0,target:"minor",...t.update}}),z=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>W.has(o)));for(const o of E)if(s.has(o))return c(t,o)},J=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>B.has(o)));for(const o of R)if(s.has(o))return c(t,o)},S=t=>T("sha256").update(V(t)).digest("hex"),Q=t=>{const e=T("sha256"),s=[...t].sort();for(const o of s)e.update(o),e.update(":"),e.update(S(o)),e.update(`
+`);return e.digest("hex")},X=t=>{const e=c(t,"node_modules");if(p(e)){const o=c(e,".cache","vis");return h(o),c(o,"vis-config-cache.json")}const s=O("vis",{create:!0,cwd:t});return s?c(s,"vis-config-cache.json"):void 0},Z=(t,e)=>{if(p(t))try{const s=_(t);if(s.hash===e)return s.config}catch{}},tt=(t,e,s)=>{try{h(y(t)),C(t,{config:s,hash:e})}catch{}},et=t=>t===void 0?[]:Array.isArray(t)?t:[t],st=(t,e,s)=>{if(b(t))throw new g(t,[...s,e],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(t.startsWith("./")||t.startsWith("../")){const r=y(e),n=c(r,t);if(o.push(n),p(n))return n;throw new g(t,[...s,e],o)}try{return N(e).resolve(t)}catch{throw o.push(`require.resolve("${t}") from ${e}`),new g(t,[...s,e],o)}},A=async(t,e)=>{let s;try{s=(await I(t)).default??{}}catch(o){throw new j(t,e,o)}try{return(typeof s=="function"?await s()??{}:s)??{}}catch(o){throw new j(t,e,o)}},ot=(t,e)=>{const s={...t,...e};if(t.tasks||e.tasks){const o=new Set([...Object.keys(t.tasks??{}),...Object.keys(e.tasks??{})]),r={};for(const n of o)r[n]=P(t.tasks?.[n],e.tasks?.[n]);s.tasks=r}if((t.scopedTasks||e.scopedTasks)&&(s.scopedTasks=[...t.scopedTasks??[],...e.scopedTasks??[]]),(t.fileGroups||e.fileGroups)&&(s.fileGroups={...t.fileGroups,...e.fileGroups}),(t.taskGroups||e.taskGroups)&&(s.taskGroups={...t.taskGroups,...e.taskGroups}),t.security||e.security){const o=t.security?.policies??{},r=e.security?.policies??{},n={...o,...r};for(const a of Object.keys(o)){const i=o[a],f=r[a];i!==void 0&&f!==void 0&&(n[a]={...i,...f})}s.security={...t.security,...e.security,acceptedRisks:{...t.security?.acceptedRisks,...e.security?.acceptedRisks},policies:n}}return(t.update||e.update)&&(s.update={...t.update,...e.update}),(t.taskRunner||e.taskRunner)&&(s.taskRunner={...t.taskRunner,...e.taskRunner}),delete s.extends,s},D=async(t,e,s,o,r)=>{if(s.has(t))throw new K(t,e);if(!o.has(t)){s.add(t);try{const n=await A(t,e);U(t,e,n);const a=et(n.extends);for(const i of a){const f=st(i,t,e);await D(f,[...e,t],s,o,r)}o.set(t,n),r.push(t)}finally{s.delete(t)}}},lt=async(t,e)=>{let s;if(e?.explicitConfigPath){const u=b(e.explicitConfigPath)?e.explicitConfigPath:c(t,e.explicitConfigPath);if(!p(u))throw new Error(`Cannot find config file at ${u}`);s=u}else s=z(t);if(!s)return v({});const o=new Set,r=new Map,n=[];await D(s,[],o,r,n);const a=Q(n),i=X(t);if(i){const u=Z(i,a);if(u)return u}let f={};for(const u of n)f=ot(f,r.get(u));const w=v(f);return i&&tt(i,a,w),w},nt=t=>t.replaceAll(/[^\w.-]+/g,"_"),rt=(t,e)=>{const s=c(t,"node_modules"),o=nt(e);if(p(s)){const n=c(s,".cache","vis","task-configs");return h(n),c(n,`${o}.json`)}const r=O("vis",{create:!0,cwd:t});return r?c(r,"task-configs",`${o}.json`):void 0},at=(t,e)=>{if(p(t))try{const s=_(t);if(s.hash===e)return s.config}catch{}},it=(t,e,s)=>{try{h(y(t)),C(t,{config:s,hash:e})}catch{}},gt=async(t,e,s)=>{const o=J(e);if(!o)return;const r=S(o),n=rt(t,s);if(n){const f=at(n,r);if(f)return f}const a=await A(o,[]);H(o,[],a);const i=a;return n&&it(n,r,i),i},mt=t=>t,kt=t=>t;export{E as CONFIG_FILES,ht as DEFAULT_MIN_RELEASE_AGE_MINUTES,m as SECURITY_DEFAULTS,R as TASK_CONFIG_FILES,v as applyDefaults,kt as defineConfig,Tt as definePlugin,mt as defineTaskConfig,z as findVisConfigFile,J as findVisTaskConfigFile,lt as loadVisConfig,gt as loadVisTaskConfig,jt as otelPlugin};

package/dist/packem_chunks/DEFAULT_CLEAN_KEEP.js

@@ -0,0 +1 @@
+const t=".vis/release",a="main",r=e=>e,p={access:"public",aggregateRelease:!1,allowCustomCommands:!1,baseBranch:a,changedFilePatterns:["**"],changelog:"default",changesDir:t,defaultManaged:!1,fixed:[],ignore:[],include:[],linked:[],postPublishCommand:"",postVersionCommand:"",prePublishCommand:"",preVersionCommand:"",privatePackages:{tag:!1,version:!1},updateInternalDependencies:"out-of-range"},o={dependencies:{bumpAs:"patch",trigger:"patch"},devDependencies:!1,optionalDependencies:{bumpAs:"patch",trigger:"minor"},peerDependencies:{bumpAs:"match",trigger:"major"}},n=["scripts","devDependencies","private","workspaces","vis-release","bumpy","release","nx","lint-staged","husky","commitlint","eslint","prettier","vitest","tsup","packem","tsdown","@visulima/packem","pnpm"],d=["name","version","description","keywords","homepage","bugs","repository","funding","author","contributors","license","dependencies","peerDependencies","peerDependenciesMeta","optionalDependencies","engines","os","cpu","type","sideEffects","main","module","types","typings","exports","imports","bin","files","publishConfig","napi"],l=e=>{if(e===!1)return[];if(e===void 0||e===!0)return[...n];const s=new Set([...n,...e.strip??[]]);for(const i of e.keep??[])s.delete(i);return[...s]};export{a as DEFAULT_BASE_BRANCH,t as DEFAULT_CHANGES_DIR,d as DEFAULT_CLEAN_KEEP,n as DEFAULT_CLEAN_STRIP,p as DEFAULT_CONFIG,o as DEFAULT_DEPENDENCY_BUMP_RULES,r as defineReleaseConfig,l as resolveCleanStripList};

package/dist/packem_chunks/agent-instructions.js

@@ -0,0 +1,11 @@
+const s="<!-- BEGIN vis release (managed) -->",i="<!-- END vis release (managed) -->",o="## Releasing with vis\n\nThis repo uses `@visulima/vis` for releases. To record a change for the next release, add a change file:\n\n```bash\nvis release add --packages '@scope/pkg:minor' --message 'Describe the change'\n```\n\nChange files live in `.vis/release/*.md` as YAML-frontmatter Markdown — one per logical change:\n\n```markdown\n---\n\"@scope/pkg\": minor\n---\n\nWhat changed, in changelog prose.\n```\n\n- Pick the bump by impact: `major` (breaking), `minor` (feature), `patch` (fix). You may also omit the level and let a heading decide (`#`→major, `##`→minor, `###`→patch).\n- Do NOT bump versions or edit `CHANGELOG.md` by hand — `vis release version` does that from the change files.\n- Preview the effect with `vis release status`; never run `vis release publish` locally.\n- One change file per PR is expected; an empty frontmatter (`---\\n{}\\n---`) records a deliberate no-release change.",c=()=>`${s}
+
+${o}
+
+${i}`,r=e=>e.replaceAll(/[.*+?^${}()|[\]\\]/g,String.raw`\$&`),t=new RegExp(String.raw`${r(s)}[\s\S]*?${r(i)}`),l=e=>{const n=c();if(e===void 0||e.trim()==="")return{changed:!0,content:`# AGENTS.md
+
+${n}
+`};if(t.test(e)){const a=e.replace(t,n);return{changed:a!==e,content:a}}return{changed:!0,content:`${e.replace(/\n*$/,`
+`)}
+${n}
+`}};export{o as AGENT_SECTION_BODY,c as renderAgentSection,l as upsertAgentSection};

package/dist/packem_chunks/bloom-status.js

@@ -0,0 +1,2 @@
+import{s as c,E as n,I as f}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-BAyJUnRx.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+`);return}if(i.info(`Cache: ${e.cacheDir}`),!e.present){i.warn(`No osv-bloom filter yet. Run ${c("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;i.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),i.info(`Fetch:  ${e.fetchedAtIso??n("—")} (${a(e.fetchedAtIso)})`),i.info(`Filter: ${f(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),i.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),i.info(n(`Digest: ${o.setDigestSha256}`))}else i.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},h=u;export{h as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -0,0 +1,2 @@
+import{E as m}from"../packem_shared/index.server-J83sowC4.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-DQ4TMXcb.js";import{s as d,D}from"../packem_shared/osv-bloom-BAyJUnRx.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+`):e&&(i.info(m(`Cache: ${e.cacheDir}`)),i.info(m(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},O=h;export{O as advisoriesBloomSyncExecute};

package/dist/packem_chunks/cache-attestation.js

@@ -0,0 +1 @@
+import{createRequire as _}from"node:module";import{loadOptionalSigstore as g}from"./loader.js";const R=_(import.meta.url),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,m=e=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[t,s]=c.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return c.getBuiltinModule(e)}return R(e)},{createHash:w}=m("node:crypto"),{createReadStream:I}=m("node:fs"),v="https://token.actions.githubusercontent.com",h=e=>e.replaceAll(/[$()*+.?[\\\]^{|}]/g,String.raw`\$&`),S=e=>{if("github"in e){const{ref:t,repo:s,workflow:r}=e.github;return{issuer:v,sanPattern:`^${h(`https://github.com/${s}/${r}@${t}`)}$`}}return"sanRegex"in e?{issuer:e.oidcIssuer,sanPattern:e.sanRegex}:{issuer:e.oidcIssuer,sanPattern:`^${h(e.san)}$`}},$=()=>process.env.CI==="true"||typeof process.env.ACTIONS_ID_TOKEN_REQUEST_URL=="string"||typeof process.env.SIGSTORE_ID_TOKEN=="string",y=e=>new Promise((t,s)=>{const r=w("sha256"),i=I(e);i.on("error",s),i.on("data",n=>r.update(n)),i.on("end",()=>{t(Buffer.from(r.digest("hex")))})}),x=1024,P=e=>{const{issuer:t,sanPattern:s}=S(e.expectedIdentity),r=new Map,i=(n,o)=>{let u;try{u=JSON.parse(o)}catch{return Promise.resolve(!1)}return(async()=>{let a;try{a=await y(n)}catch{return!1}const p=`${a.toString("utf8")}:${w("sha256").update(o).digest("hex")}`,d=r.get(p);if(d)return d;const l=(async()=>{try{return await(await g({workspaceRoot:e.workspaceRoot})).verify(u,a,{certificateIdentityURI:s,certificateIssuer:t}),!0}catch(f){return e.onVerifyFailure?.(f instanceof Error?f.message:String(f)),!1}})();return r.size>=x&&r.clear(),r.set(p,l),l})()};return{expectedIdentity:e.expectedIdentity,onReject:e.onReject,requireOnDownload:e.requireOnDownload??!1,signArtifact:async({archivePath:n})=>{if(!$())return null;const o=await g({workspaceRoot:e.workspaceRoot}),u=await y(n),a=await o.sign(u);return JSON.stringify(a)},verifyArtifact:({archivePath:n,attestation:o})=>i(n,o)}};export{P as buildCacheAttestationHooks,S as normalizeExpectedIdentity};

package/dist/packem_chunks/catalog-detector.js

@@ -0,0 +1 @@
+import{p as d}from"./registry.js";const u=a=>{const n=d(a),t=new Map;Object.keys(n.default).length>0&&t.set("",{...n.default});for(const[s,e]of Object.entries(n.named))t.set(s,{...e});return t},g=["dependencies","devDependencies","peerDependencies","optionalDependencies"],l=a=>{const n=[];for(const t of g){const s=a.manifest[t];if(!(!s||typeof s!="object"))for(const[e,o]of Object.entries(s)){if(typeof o!="string"||!o.startsWith("catalog:"))continue;const c=o.slice(8);n.push({catalog:c,dep:e,kind:t,packageName:a.name})}}return n},m=(a,n)=>{const t=new Map;for(const s of n.keys())t.set(s,new Map);for(const s of a)for(const e of l(s)){if(!n.has(e.catalog))continue;let o=t.get(e.catalog);o||(o=new Map,t.set(e.catalog,o));const c=o.get(e.dep);c?c.push({kind:e.kind,packageName:e.packageName}):o.set(e.dep,[{kind:e.kind,packageName:e.packageName}])}return t},h=(a,n)=>{if(a.size===0&&n.size===0)return[];const t=[],s=new Set;for(const[e,o]of n){s.add(e);const c=a.get(e)??{},r=[...new Set([...Object.keys(c),...Object.keys(o)])].sort();for(const i of r){const f=c[i],p=o[i];f!==p&&t.push({catalog:e,dep:i,newVersion:p,oldVersion:f})}}for(const[e,o]of a){if(s.has(e))continue;const c=Object.keys(o).sort();for(const r of c)t.push({catalog:e,dep:r,newVersion:void 0,oldVersion:o[r]})}return t};export{h as detectCatalogChanges,l as extractCatalogRefs,m as findCatalogConsumers,u as parseCatalogs};