@visulima/vis 2.0.2 → 3.0.0

package/CHANGELOG.md

@@ -1,3 +1,23 @@
+## @visulima/vis [3.0.0](https://github.com/visulima/visulima/compare/%40visulima%2Fvis%402.0.2...%40visulima%2Fvis%403.0.0) (2026-08-08)
+
+
+### Dependencies
+
+* **@visulima/secret-scanner:** upgraded to 2.0.0
+* **@visulima/task-runner:** upgraded to 1.0.4
+* **@visulima/tui:** upgraded to 4.0.0
+* **@visulima/tui-kit:** upgraded to 1.0.3
+* **@visulima/cerebro:** upgraded to 3.0.6
+* **@visulima/colorize:** upgraded to 2.1.1
+* **@visulima/fs:** upgraded to 6.0.0
+* **@visulima/humanizer:** upgraded to 4.0.0
+* **@visulima/package:** upgraded to 5.0.12
+* **@visulima/pail:** upgraded to 4.1.1
+* **@visulima/path:** upgraded to 4.0.0
+* **@visulima/redact:** upgraded to 4.0.0
+* **@visulima/tsconfig:** upgraded to 3.2.7
+* **@visulima/yaml:** upgraded to 1.0.0
+
 ## @visulima/vis [2.0.2](https://github.com/visulima/visulima/compare/%40visulima%2Fvis%402.0.1...%40visulima%2Fvis%402.0.2) (2026-08-02)
 
 

package/LICENSE.md

@@ -4031,9 +4031,41 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > # Licenses of bundled types
 > > The published @visulima/fs artifact additionally contains code with the following licenses:
-> > ISC, MIT
+> > MIT
 > >
 > > # Bundled types:
+> > ## @visulima/yaml
+> > License: MIT
+> > By: Daniel Bannert
+> > Repository: git+https://github.com/visulima/visulima.git
+> >
+> > > MIT License
+> > >
+> > > Copyright (c) 2026 visulima
+> > >
+> > > Permission is hereby granted, free of charge, to any person obtaining a copy
+> > > of this software and associated documentation files (the "Software"), to deal
+> > > in the Software without restriction, including without limitation the rights
+> > > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> > > copies of the Software, and to permit persons to whom the Software is
+> > > furnished to do so, subject to the following conditions:
+> > >
+> > > The above copyright notice and this permission notice shall be included in all
+> > > copies or substantial portions of the Software.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> > > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> > > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> > > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> > > SOFTWARE.
+> > >
+> > > 
+> > > 
+> >
+> > ---------------------------------------
+> >
 > > ## is-fs-case-sensitive
 > > License: MIT
 > > By: Hiroki Osame
@@ -4089,27 +4121,6 @@ Repository: git+https://github.com/visulima/visulima.git
 > > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 > > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 > > > SOFTWARE.
-> >
-> > ---------------------------------------
-> >
-> > ## yaml
-> > License: ISC
-> > By: Eemeli Aro
-> > Repository: github:eemeli/yaml
-> >
-> > > Copyright Eemeli Aro <eemeli@gmail.com>
-> > >
-> > > Permission to use, copy, modify, and/or distribute this software for any purpose
-> > > with or without fee is hereby granted, provided that the above copyright notice
-> > > and this permission notice appear in all copies.
-> > >
-> > > THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-> > > REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
-> > > FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-> > > INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
-> > > OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-> > > TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
-> > > THIS SOFTWARE.
 >
 > ---------------------------------------
 >
@@ -4557,9 +4568,41 @@ Repository: git+https://github.com/visulima/visulima.git
 >
 > # Licenses of bundled types
 > The published @visulima/fs artifact additionally contains code with the following licenses:
-> ISC, MIT
+> MIT
 >
 > # Bundled types:
+> ## @visulima/yaml
+> License: MIT
+> By: Daniel Bannert
+> Repository: git+https://github.com/visulima/visulima.git
+>
+> > MIT License
+> >
+> > Copyright (c) 2026 visulima
+> >
+> > Permission is hereby granted, free of charge, to any person obtaining a copy
+> > of this software and associated documentation files (the "Software"), to deal
+> > in the Software without restriction, including without limitation the rights
+> > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> > copies of the Software, and to permit persons to whom the Software is
+> > furnished to do so, subject to the following conditions:
+> >
+> > The above copyright notice and this permission notice shall be included in all
+> > copies or substantial portions of the Software.
+> >
+> > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> > SOFTWARE.
+> >
+> > 
+> > 
+>
+> ---------------------------------------
+>
 > ## is-fs-case-sensitive
 > License: MIT
 > By: Hiroki Osame
@@ -4615,27 +4658,6 @@ Repository: git+https://github.com/visulima/visulima.git
 > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 > > SOFTWARE.
->
-> ---------------------------------------
->
-> ## yaml
-> License: ISC
-> By: Eemeli Aro
-> Repository: github:eemeli/yaml
->
-> > Copyright Eemeli Aro <eemeli@gmail.com>
-> >
-> > Permission to use, copy, modify, and/or distribute this software for any purpose
-> > with or without fee is hereby granted, provided that the above copyright notice
-> > and this permission notice appear in all copies.
-> >
-> > THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-> > REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
-> > FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-> > INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
-> > OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-> > TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
-> > THIS SOFTWARE.
 
 ---------------------------------------
 
@@ -9921,6 +9943,35 @@ Repository: git+https://github.com/visulima/visulima.git
 
 ---------------------------------------
 
+## @visulima/yaml
+License: MIT
+By: Daniel Bannert
+Repository: git+https://github.com/visulima/visulima.git
+
+> MIT License
+>
+> Copyright (c) 2026 visulima
+>
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+>
+> The above copyright notice and this permission notice shall be included in all
+> copies or substantial portions of the Software.
+>
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> SOFTWARE.
+
+---------------------------------------
+
 ## @yarnpkg/parsers
 License: BSD-2-Clause
 Repository: git+https://github.com/yarnpkg/berry.git
@@ -11464,27 +11515,6 @@ Repository: git+https://github.com/npm/validate-npm-package-name.git
 
 ---------------------------------------
 
-## yaml
-License: ISC
-By: Eemeli Aro
-Repository: github:eemeli/yaml
-
-> Copyright Eemeli Aro <eemeli@gmail.com>
->
-> Permission to use, copy, modify, and/or distribute this software for any purpose
-> with or without fee is hereby granted, provided that the above copyright notice
-> and this permission notice appear in all copies.
->
-> THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
-> REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
-> FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
-> INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
-> OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-> TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
-> THIS SOFTWARE.
-
----------------------------------------
-
 ## yoga-layout
 License: MIT
 By: Meta Open Source

package/dist/bin.js

@@ -1 +1 @@
-import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-CtzhnYMp.js";
+import"./packem_shared/compile-cache-B_Vf_WxT.js";import"./packem_shared/bin-B-TytgzW.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{V as o,p as c,e as i,r as a,i as p}from"./packem_shared/vis-user-error-xmha3L4n.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";import{m as r}from"./packem_shared/package-version-C47v64aB.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r()}
+import{V as o,p as c,e as i,r as a,i as p}from"./packem_shared/vis-user-error-CfM4_ORo.js";import{c as n}from"./packem_shared/compile-cache-B_Vf_WxT.js";import{m as r}from"./packem_shared/package-version-BNRJ3o9C.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${r()}
 `),process.exit(0));process.argv.splice(2,0,"dlx");n();const e=o("visx",{packageName:"visx",packageVersion:r()}),d=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(c({concise:p,detailed:d,exitOnError:!1}));e.addCommand(i);a(e);

package/dist/packem_chunks/CONFIG_FILES.js

@@ -1,8 +1,8 @@
-import{createRequire as F}from"node:module";import{F as _,m as P}from"../packem_shared/target-merge-Cfy7c__2.js";import{w as c,v as b,l as d,d as l,J as y,q as C}from"../packem_shared/index-uBVnF4ji.js";import{i as I}from"./ts-loader.js";import{otelPlugin as vt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as $t}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as O}from"../packem_shared/readJsonSync-DweZd5ZA-0eZh9sGm.js";let G;const V=t=>(G??=F(import.meta.url))(t),p=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof p<"u"&&p.versions&&p.versions.node){const[e,s]=p.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return p.getBuiltinModule(t)}return V(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:q}=k("node:fs"),{createRequire:N}=k("node:module");class h extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class K extends h{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class x extends h{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
+import{createRequire as G}from"node:module";import{K as _,m as N}from"../packem_shared/target-merge-DLxJTcxn.js";import{w as c,v as b,l as d,d as l,J as y,q as C}from"../packem_shared/index-BLtnel38.js";import{i as P}from"./ts-loader.js";import{otelPlugin as vt}from"../packem_shared/otelPlugin-DmKDBaPo.js";import{definePlugin as $t}from"../packem_shared/definePlugin-DoUcoYSy.js";import{a as O}from"../packem_shared/readJsonSync-DweZd5ZA-CtrDlqpb.js";let F;const V=t=>(F??=G(import.meta.url))(t),p=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof p<"u"&&p.versions&&p.versions.node){const[e,s]=p.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return p.getBuiltinModule(t)}return V(t)},{createHash:T}=k("node:crypto"),{readdirSync:$,readFileSync:q}=k("node:fs"),{createRequire:K}=k("node:module");class h extends Error{chain;constructor(e,s,o){super(e,o),this.name=this.constructor.name,this.chain=s}}class I extends h{constructor(e,s){const o=[...s,`${e} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,s)}}class x extends h{filePath;removedKeys;constructor(e,s,o){const r=[`${e} uses removed keys.`,""];for(const n of o){const a=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${a} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
 `),s),this.filePath=e,this.removedKeys=o}}class j extends h{constructor(e,s,o){const r=o instanceof Error?o.message:String(o),n=s.length>0?`
 Chain: ${s.join(" → ")}`:"";super(`Failed to load ${e}: ${r}${n}`,s,{cause:o})}}const L=t=>t.join(" → ");class g extends h{constructor(e,s,o){const r=s.length>0?s[s.length-1]:"<unknown>",n=o.length>0?`
 Tried:
   ${o.join(`
   `)}`:"";super(`Cannot resolve "${e}" extended from ${r}.${n}
 Chain: ${L(s)}`,s)}}const M=t=>{const e=[];if(Object.hasOwn(t,"targetDefaults")&&e.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(t,"taskRunnerOptions")&&e.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(t,"taskDefaults")){const{taskDefaults:s}=t,o=[];if(Array.isArray(s))for(const[r,n]of s.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));e.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(t.scopedTasks))for(const[s,o]of t.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&e.push({location:`scopedTasks[${s}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&e.push({location:`scopedTasks[${s}].targets`,name:"targets",renamedTo:"tasks"}));return e},U=t=>Object.hasOwn(t,"targets")&&!Object.hasOwn(t,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],W=(t,e,s)=>{if(!s||typeof s!="object")return;const o=M(s);if(o.length>0)throw new x(t,e,o)},B=(t,e,s)=>{if(!s||typeof s!="object")return;const o=U(s);if(o.length>0)throw new x(t,e,o)},E=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],J=new Set(E),R=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],H=new Set(R),ht=2880,m={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},Y=t=>{if(!t)return{...m};const e=m.policies??{},s=t.policies??{},o={...e,...s};for(const r of Object.keys(e)){const n=e[r],a=s[r];n!==void 0&&a!==void 0&&(o[r]={...n,...a})}return{...m,...t,policies:o}},v=t=>({...t,security:Y(t.security),update:{security:!0,target:"minor",...t.update}}),z=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>J.has(o)));for(const o of E)if(s.has(o))return c(t,o)},Q=t=>{let e;try{e=$(t)}catch{return}const s=new Set(e.filter(o=>H.has(o)));for(const o of R)if(s.has(o))return c(t,o)},S=t=>T("sha256").update(q(t)).digest("hex"),X=t=>{const e=T("sha256"),s=[...t].sort();for(const o of s)e.update(o),e.update(":"),e.update(S(o)),e.update(`
-`);return e.digest("hex")},Z=t=>{const e=c(t,"node_modules");if(d(e)){const o=c(e,".cache","vis");return l(o),c(o,"vis-config-cache.json")}const s=_("vis",{create:!0,cwd:t});return s?c(s,"vis-config-cache.json"):void 0},tt=(t,e)=>{if(d(t))try{const s=O(t);if(s.hash===e)return s.config}catch{}},et=(t,e,s)=>{try{l(y(t)),C(t,{config:s,hash:e})}catch{}},st=t=>t===void 0?[]:Array.isArray(t)?t:[t],ot=(t,e,s)=>{if(b(t))throw new g(t,[...s,e],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(t.startsWith("./")||t.startsWith("../")){const r=y(e),n=c(r,t);if(o.push(n),d(n))return n;throw new g(t,[...s,e],o)}try{return N(e).resolve(t)}catch{throw o.push(`require.resolve("${t}") from ${e}`),new g(t,[...s,e],o)}},A=async(t,e)=>{let s;try{s=(await I(t)).default??{}}catch(o){throw new j(t,e,o)}try{return(typeof s=="function"?await s()??{}:s)??{}}catch(o){throw new j(t,e,o)}},nt=(t,e)=>{const s={...t,...e};if(t.tasks||e.tasks){const o=new Set([...Object.keys(t.tasks??{}),...Object.keys(e.tasks??{})]),r={};for(const n of o)r[n]=P(t.tasks?.[n],e.tasks?.[n]);s.tasks=r}if((t.scopedTasks||e.scopedTasks)&&(s.scopedTasks=[...t.scopedTasks??[],...e.scopedTasks??[]]),(t.fileGroups||e.fileGroups)&&(s.fileGroups={...t.fileGroups,...e.fileGroups}),(t.taskGroups||e.taskGroups)&&(s.taskGroups={...t.taskGroups,...e.taskGroups}),t.security||e.security){const o=t.security?.policies??{},r=e.security?.policies??{},n={...o,...r};for(const a of Object.keys(o)){const i=o[a],f=r[a];i!==void 0&&f!==void 0&&(n[a]={...i,...f})}s.security={...t.security,...e.security,acceptedRisks:{...t.security?.acceptedRisks,...e.security?.acceptedRisks},policies:n}}return(t.update||e.update)&&(s.update={...t.update,...e.update}),(t.taskRunner||e.taskRunner)&&(s.taskRunner={...t.taskRunner,...e.taskRunner}),delete s.extends,s},D=async(t,e,s,o,r)=>{if(s.has(t))throw new K(t,e);if(!o.has(t)){s.add(t);try{const n=await A(t,e);W(t,e,n);const a=st(n.extends);for(const i of a){const f=ot(i,t,e);await D(f,[...e,t],s,o,r)}o.set(t,n),r.push(t)}finally{s.delete(t)}}},gt=async(t,e)=>{let s;if(e?.explicitConfigPath){const u=b(e.explicitConfigPath)?e.explicitConfigPath:c(t,e.explicitConfigPath);if(!d(u))throw new Error(`Cannot find config file at ${u}`);s=u}else s=z(t);if(!s)return v({});const o=new Set,r=new Map,n=[];await D(s,[],o,r,n);const a=X(n),i=Z(t);if(i){const u=tt(i,a);if(u)return u}let f={};for(const u of n)f=nt(f,r.get(u));const w=v(f);return i&&et(i,a,w),w},rt=t=>t.replaceAll(/[^\w.-]+/g,"_"),at=(t,e)=>{const s=c(t,"node_modules"),o=rt(e);if(d(s)){const n=c(s,".cache","vis","task-configs");return l(n),c(n,`${o}.json`)}const r=_("vis",{create:!0,cwd:t});return r?c(r,"task-configs",`${o}.json`):void 0},it=(t,e)=>{if(d(t))try{const s=O(t);if(s.hash===e)return s.config}catch{}},ct=(t,e,s)=>{try{l(y(t)),C(t,{config:s,hash:e})}catch{}},mt=async(t,e,s)=>{const o=Q(e);if(!o)return;const r=S(o),n=at(t,s);if(n){const f=it(n,r);if(f)return f}const a=await A(o,[]);B(o,[],a);const i=a;return n&&ct(n,r,i),i},kt=t=>t,yt=t=>t;export{E as CONFIG_FILES,ht as DEFAULT_MIN_RELEASE_AGE_MINUTES,m as SECURITY_DEFAULTS,R as TASK_CONFIG_FILES,v as applyDefaults,yt as defineConfig,$t as definePlugin,kt as defineTaskConfig,z as findVisConfigFile,Q as findVisTaskConfigFile,gt as loadVisConfig,mt as loadVisTaskConfig,vt as otelPlugin};
+`);return e.digest("hex")},Z=t=>{const e=c(t,"node_modules");if(d(e)){const o=c(e,".cache","vis");return l(o),c(o,"vis-config-cache.json")}const s=_("vis",{create:!0,cwd:t});return s?c(s,"vis-config-cache.json"):void 0},tt=(t,e)=>{if(d(t))try{const s=O(t);if(s.hash===e)return s.config}catch{}},et=(t,e,s)=>{try{l(y(t)),C(t,{config:s,hash:e})}catch{}},st=t=>t===void 0?[]:Array.isArray(t)?t:[t],ot=(t,e,s)=>{if(b(t))throw new g(t,[...s,e],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(t.startsWith("./")||t.startsWith("../")){const r=y(e),n=c(r,t);if(o.push(n),d(n))return n;throw new g(t,[...s,e],o)}try{return K(e).resolve(t)}catch{throw o.push(`require.resolve("${t}") from ${e}`),new g(t,[...s,e],o)}},A=async(t,e)=>{let s;try{s=(await P(t)).default??{}}catch(o){throw new j(t,e,o)}try{return(typeof s=="function"?await s()??{}:s)??{}}catch(o){throw new j(t,e,o)}},nt=(t,e)=>{const s={...t,...e};if(t.tasks||e.tasks){const o=new Set([...Object.keys(t.tasks??{}),...Object.keys(e.tasks??{})]),r={};for(const n of o)r[n]=N(t.tasks?.[n],e.tasks?.[n]);s.tasks=r}if((t.scopedTasks||e.scopedTasks)&&(s.scopedTasks=[...t.scopedTasks??[],...e.scopedTasks??[]]),(t.fileGroups||e.fileGroups)&&(s.fileGroups={...t.fileGroups,...e.fileGroups}),(t.taskGroups||e.taskGroups)&&(s.taskGroups={...t.taskGroups,...e.taskGroups}),t.security||e.security){const o=t.security?.policies??{},r=e.security?.policies??{},n={...o,...r};for(const a of Object.keys(o)){const i=o[a],f=r[a];i!==void 0&&f!==void 0&&(n[a]={...i,...f})}s.security={...t.security,...e.security,acceptedRisks:{...t.security?.acceptedRisks,...e.security?.acceptedRisks},policies:n}}return(t.update||e.update)&&(s.update={...t.update,...e.update}),(t.taskRunner||e.taskRunner)&&(s.taskRunner={...t.taskRunner,...e.taskRunner}),delete s.extends,s},D=async(t,e,s,o,r)=>{if(s.has(t))throw new I(t,e);if(!o.has(t)){s.add(t);try{const n=await A(t,e);W(t,e,n);const a=st(n.extends);for(const i of a){const f=ot(i,t,e);await D(f,[...e,t],s,o,r)}o.set(t,n),r.push(t)}finally{s.delete(t)}}},gt=async(t,e)=>{let s;if(e?.explicitConfigPath){const u=b(e.explicitConfigPath)?e.explicitConfigPath:c(t,e.explicitConfigPath);if(!d(u))throw new Error(`Cannot find config file at ${u}`);s=u}else s=z(t);if(!s)return v({});const o=new Set,r=new Map,n=[];await D(s,[],o,r,n);const a=X(n),i=Z(t);if(i){const u=tt(i,a);if(u)return u}let f={};for(const u of n)f=nt(f,r.get(u));const w=v(f);return i&&et(i,a,w),w},rt=t=>t.replaceAll(/[^\w.-]+/g,"_"),at=(t,e)=>{const s=c(t,"node_modules"),o=rt(e);if(d(s)){const n=c(s,".cache","vis","task-configs");return l(n),c(n,`${o}.json`)}const r=_("vis",{create:!0,cwd:t});return r?c(r,"task-configs",`${o}.json`):void 0},it=(t,e)=>{if(d(t))try{const s=O(t);if(s.hash===e)return s.config}catch{}},ct=(t,e,s)=>{try{l(y(t)),C(t,{config:s,hash:e})}catch{}},mt=async(t,e,s)=>{const o=Q(e);if(!o)return;const r=S(o),n=at(t,s);if(n){const f=it(n,r);if(f)return f}const a=await A(o,[]);B(o,[],a);const i=a;return n&&ct(n,r,i),i},kt=t=>t,yt=t=>t;export{E as CONFIG_FILES,ht as DEFAULT_MIN_RELEASE_AGE_MINUTES,m as SECURITY_DEFAULTS,R as TASK_CONFIG_FILES,v as applyDefaults,yt as defineConfig,$t as definePlugin,kt as defineTaskConfig,z as findVisConfigFile,Q as findVisTaskConfigFile,gt as loadVisConfig,mt as loadVisTaskConfig,vt as otelPlugin};

package/dist/packem_chunks/bloom-status.js

@@ -1,2 +1,2 @@
-import{s as c,E as n,I as f}from"../packem_shared/index.server-CusjRLCh.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-pKp7urSB.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+import{s as c,E as n,I as f}from"../packem_shared/index.server-CusjRLCh.js";import{p as i}from"./cli-main.js";import{g as l}from"../packem_shared/osv-bloom-DdqDnLCt.js";const a=t=>{if(!t)return"never";const r=Date.parse(t);if(Number.isNaN(r))return t;const e=Date.now()-r;if(e<0)return t;const o=Math.floor(e/6e4);if(o<1)return"just now";if(o<60)return`${o}m ago`;const s=Math.floor(o/60);return s<24?`${s}h ago`:`${Math.floor(s/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,u=async({options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await l(r,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
 `);return}if(i.info(`Cache: ${e.cacheDir}`),!e.present){i.warn(`No osv-bloom filter yet. Run ${c("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;i.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),i.info(`Fetch:  ${e.fetchedAtIso??n("—")} (${a(e.fetchedAtIso)})`),i.info(`Filter: ${f(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),i.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),i.info(n(`Digest: ${o.setDigestSha256}`))}else i.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},h=u;export{h as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -1,2 +1,2 @@
-import{E as m}from"../packem_shared/index.server-CusjRLCh.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-q-N2JtIp.js";import{s as d,D}from"../packem_shared/osv-bloom-pKp7urSB.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+import{E as m}from"../packem_shared/index.server-CusjRLCh.js";import{p as i}from"./cli-main.js";import{s as p}from"../packem_shared/scan-progress-DWfY4zkp.js";import{s as d,D}from"../packem_shared/osv-bloom-DdqDnLCt.js";const b=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,y=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,h=async({options:o,visConfig:f,workspaceRoot:a})=>{if(!a)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const n=o.format==="json",c=b(f),l=o.source??c.source??D,s=p([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!n});let e,t;try{s.start("bloom");const r=Date.now();e=await d({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:a}),e.upToDate?s.finish("bloom","ok",`up to date · ${u(Date.now()-r)}`):s.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${y(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(r){t=r instanceof Error?r.message:String(r),s.finish("bloom","error",t)}finally{s.stop()}n?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
 `):e&&(i.info(m(`Cache: ${e.cacheDir}`)),i.info(m(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},O=h;export{O as advisoriesBloomSyncExecute};