@visulima/vis 2.0.2 → 3.0.1

package/dist/packem_chunks/handler46.js

@@ -1 +1 @@
-import{b as u,p as $}from"./orchestrator.js";import{VisReleaseError as m}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const x=async({logger:s,options:r,workspaceRoot:l})=>{const p=l??process.cwd(),o=r.dryRun===!0;let n;try{n=await u({channel:r.channel,cwd:p,firstRelease:r.firstRelease===!0,projects:r.filter?r.filter.split(",").map(e=>e.trim()).filter(Boolean):void 0})}catch(e){s.error(`Failed to load release context: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}const{printConfigIfRequested:h}=await import("./print-config.js");if(h(r,n,s))return;if(r.checkOnly===!0){if(s.info(`Preflight: ${n.plan.releases.length} pending publish(es)${n.channel?` to dist-tag "${n.channel.tag}"`:""}.`),n.plan.warnings.length>0)for(const e of n.plan.warnings)s.warn(`  - ${e}`);process.exitCode=n.plan.releases.length===0?1:0;return}if(n.plan.releases.length===0){s.info("No pending releases — nothing to publish.");return}const i=r.tag??n.channel?.tag;i||s.warn("No --tag provided and no channel matched the current branch. Defaulting to dist-tag 'latest'. Set channels in vis.config.ts to control this."),s.info(`${o?"[dry-run] would publish":"Publishing"} ${n.plan.releases.length} package(s) to dist-tag "${i??"latest"}"${o?"":"..."}`);let t;try{t=await $(n,{dryRun:o,noPush:r.noPush===!0,otp:r.otp,resume:r.resume===!0,tag:i})}catch(e){if(e instanceof m&&e.code==="STAGE_PENDING"){s.error(e.message),e.hint&&(s.info(""),s.info(`Next steps: ${e.hint}`)),process.exitCode=1;return}s.error(`Publish failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}s.info("");for(const e of t.published)s.info(`  [published] ${e.name}@${e.version}`);for(const e of t.skipped)e.reason.startsWith("stage-")?s.warn(`  [stage]     ${e.name} (${e.reason} — re-run \`vis release publish\` once approved)`):s.info(`  [skipped]   ${e.name} (${e.reason})`);for(const e of t.failed)s.error(`  [failed]    ${e.name}: ${e.reason}`);s.info(""),s.info(`Published: ${t.published.length} | Skipped: ${t.skipped.length} | Failed: ${t.failed.length}`),t.tags.length>0&&s.info(`Tags created: ${t.tags.length}${t.tagsPushed?" (pushed)":" (NOT pushed — re-run with --resume to retry)"}`),t.failed.length===0?process.exitCode=0:t.published.length===0&&t.skipped.length===0?process.exitCode=3:process.exitCode=2;const a=t.failed.filter(e=>/\bEOTP\b|one[- ]time password|otp/i.test(e.reason));if(a.length>0){s.info(""),s.warn("Publish failed because the registry required a 2FA OTP. Rerun with:");const e=a.map(g=>g.name).join(","),d=r.channel?` --channel=${r.channel}`:"",c=r.tag?` --tag=${r.tag}`:"",f=` --filter='${e}'`;s.info(`  vis release publish --otp=REPLACE_WITH_NEW_OTP --resume${c}${d}${f}`)}};export{x as default};
+import{b as $,p as m}from"./orchestrator.js";import{VisReleaseError as b}from"../packem_shared/VisReleaseError-DZtgcKf8.js";const P=async({logger:t,options:n,workspaceRoot:o})=>{const f=o??process.cwd(),r=n.dryRun===!0;let a;try{a=await $({channel:n.channel,cwd:f,firstRelease:n.firstRelease===!0,projects:n.filter?n.filter.split(",").map(e=>e.trim()).filter(Boolean):void 0})}catch(e){t.error(`Failed to load release context: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}const{printConfigIfRequested:c}=await import("./print-config.js");if(c(n,a,t))return;if(n.checkOnly===!0){if(t.info(`Preflight: ${a.plan.releases.length} pending publish(es)${a.channel?` to dist-tag "${a.channel.tag}"`:""}.`),a.plan.warnings.length>0)for(const e of a.plan.warnings)t.warn(`  - ${e}`);process.exitCode=a.plan.releases.length===0?1:0;return}if(a.plan.releases.length===0){t.info("No pending releases — nothing to publish.");return}const i=n.tag??a.channel?.tag;i||t.warn("No --tag provided and no channel matched the current branch. Defaulting to dist-tag 'latest'. Set channels in vis.config.ts to control this."),t.info(`${r?"[dry-run] would publish":"Publishing"} ${a.plan.releases.length} package(s) to dist-tag "${i??"latest"}"${r?"":"..."}`);let s;try{s=await m(a,{dryRun:r,noPush:n.noPush===!0,otp:n.otp,resume:n.resume===!0,tag:i})}catch(e){if(e instanceof b&&e.code==="STAGE_PENDING"){t.error(e.message),e.hint&&(t.info(""),t.info(`Next steps: ${e.hint}`)),process.exitCode=1;return}t.error(`Publish failed: ${e instanceof Error?e.message:String(e)}`),process.exitCode=1;return}t.info("");for(const e of s.published)t.info(`  [published] ${e.name}@${e.version}`);for(const e of s.skipped)e.reason.startsWith("stage-")?t.warn(`  [stage]     ${e.name} (${e.reason} — re-run \`vis release publish\` once approved)`):t.info(`  [skipped]   ${e.name} (${e.reason})`);for(const e of s.failed)t.error(`  [failed]    ${e.name}: ${e.reason}`);t.info(""),t.info(`Published: ${s.published.length} | Skipped: ${s.skipped.length} | Failed: ${s.failed.length}`),s.tags.length>0&&t.info(`Tags created: ${s.tags.length}${s.tagsPushed?" (pushed)":" (NOT pushed — re-run with --resume to retry)"}`),s.failed.length===0?process.exitCode=0:s.published.length===0&&s.skipped.length===0?process.exitCode=3:process.exitCode=2;const l=s.failed.filter(e=>/\bEOTP\b|one[- ]time password|otp/i.test(e.reason));if(l.length>0){t.info(""),t.warn("Publish failed because the registry required a 2FA OTP. Rerun with:");const e=l.map(p=>p.name).join(","),h=n.channel?` --channel=${n.channel}`:"",d=n.tag?` --tag=${n.tag}`:"",u=` --filter='${e}'`;t.info(`  vis release publish --otp=REPLACE_WITH_NEW_OTP --resume${d}${h}${u}`)}};export{P as default};

package/dist/packem_chunks/handler47.js

@@ -1 +1 @@
-import{b as p}from"./orchestrator.js";import{runSnapshot as f}from"./snapshot.js";const u=async({logger:r,options:i,workspaceRoot:n})=>{const a=n??process.cwd();if(!i.tag){r.error("--tag is required."),process.exitCode=1;return}const o=i.dryRun===!0,s=await p({cwd:a}),{printConfigIfRequested:d}=await import("./print-config.js");if(d(i,s,r))return;let e;try{e=await f({context:s,dryRun:o,filter:i.filter,registry:i.registry,tag:i.tag})}catch(t){r.error(`Snapshot failed: ${t.message}`),process.exitCode=1;return}r.info(`${o?"[dry-run] would snapshot":"Snapshotting"} at version ${e.snapshotVersion} → tag "${e.tag}"`);for(const t of e.published)r.info(`  ${o?"[dry-run]  ":"[published]"} ${t.name}@${t.version}`);for(const t of e.skipped)r.info(`  [skipped]   ${t.name} (${t.reason})`);for(const t of e.failed)r.error(`  [failed]    ${t.name}: ${t.reason}`);r.info(""),r.info(`Published: ${e.published.length} | Skipped: ${e.skipped.length} | Failed: ${e.failed.length}`),process.exitCode=e.failed.length>0?2:0};export{u as default};
+import{b as f}from"./orchestrator.js";import{runSnapshot as c}from"./snapshot.js";const h=async({logger:r,options:i,workspaceRoot:a})=>{const o=a??process.cwd();if(!i.tag){r.error("--tag is required."),process.exitCode=1;return}const s=i.dryRun===!0,n=await f({cwd:o}),{printConfigIfRequested:d}=await import("./print-config.js");if(d(i,n,r))return;let e;try{e=await c({context:n,dryRun:s,filter:i.filter,registry:i.registry,tag:i.tag})}catch(t){r.error(`Snapshot failed: ${t.message}`),process.exitCode=1;return}r.info(`${s?"[dry-run] would snapshot":"Snapshotting"} at version ${e.snapshotVersion} → tag "${e.tag}"`);for(const t of e.published)r.info(`  ${s?"[dry-run]  ":"[published]"} ${t.name}@${t.version}`);for(const t of e.skipped)r.info(`  [skipped]   ${t.name} (${t.reason})`);for(const t of e.failed)r.error(`  [failed]    ${t.name}: ${t.reason}`);r.info(""),r.info(`Published: ${e.published.length} | Skipped: ${e.skipped.length} | Failed: ${e.failed.length}`),process.exitCode=e.failed.length>0?2:0};export{h as default};

package/dist/packem_chunks/handler48.js

@@ -1,3 +1,3 @@
-import{DEFAULT_CHANGES_DIR as u}from"./DEFAULT_CLEAN_KEEP.js";import{b as m}from"./orchestrator.js";import{createShellRunner as $}from"./shell-runner.js";import{readStagedRegistry as v,removePendingStages as y,writeStagedRegistry as C}from"./staged-registry.js";import{acquireLock as x,releaseLock as S}from"./state.js";const j=["approve","list","reject"],k=t=>t===void 0||t===""?"list":j.includes(t)?t:void 0,A=async(t,r,o,s)=>{const i=["stage","list","--json"],d=o.stageIds?.[0],n=o.filter??d;n&&i.push(n);const p=await t.run("npm",i,{cwd:r,silent:!0}),c=await m({cwd:r}),a=await v(r,c.config.changesDir??u),f=n?{pending:a.pending.filter(e=>e.name===n)}:a;let g=[];if(p.exitCode===0&&p.stdout.trim())try{g=JSON.parse(p.stdout)}catch{process.stdout.write(`${p.stdout}
-`)}if(o.json){process.stdout.write(`${JSON.stringify({npm:g,registry:f.pending},null,2)}
-`);return}if(g.length===0&&f.pending.length===0){s.info("No staged versions awaiting approval.");return}const h=new Set(g.map(e=>e.id).filter(Boolean)),l=new Set(f.pending.map(e=>e.id));for(const e of g){const w=l.has(e.id??"")?"":"  [npm-only]";s.info(`  ${e.id??"<no-id>"}  ${e.package??"?"}@${e.version??"?"}  → ${e.tag??"latest"}${w}`)}for(const e of f.pending)h.has(e.id)||s.info(`  ${e.id}  ${e.name}@${e.version}  → ${e.tag??"latest"}  [registry-only, ${e.reason}]`)},b=async(t,r,o)=>{if(r.all){const i=await m({cwd:t}),d=await v(t,i.config.changesDir??u);if(d.pending.length===0){o.error("No pending stages in .vis/release/staged.json. Approve manually with explicit ids, or rerun `vis release publish` with publish.stage: true.");return}return d.pending.map(n=>n.id)}const s=r.stageIds??[];if(s.length===0){o.error("Pass stage ids positionally, or use --all to approve every pending stage in .vis/release/staged.json.");return}return s},E=async(t,r,o,s,i)=>{const d=t==="approve"?await b(o,s,i):s.stageIds;if(!d||d.length===0){t==="reject"&&i.error("Pass stage ids positionally to reject."),process.exitCode=1;return}const n=[],p=[];for(const c of d){const a=await r.run("npm",["stage",t,c],{cwd:o,silent:!1});a.exitCode===0?n.push(c):p.push({id:c,reason:a.stderr.trim()||`exit ${a.exitCode}`})}if(i.info(""),n.length>0){i.info(`${t==="approve"?"Approved":"Rejected"} ${n.length} stage(s).`);let c=[];try{const a=await m({cwd:o}),f=a.config.changesDir??u,g=await v(o,f);if(t==="reject"){const l=new Set(n);c=g.pending.filter(e=>l.has(e.id)).map(e=>({name:e.name,version:e.version}))}const h=y(g,n);if(h!==g){const l=await C(o,f,h);if(l.changed&&s.commit!==!1){const{stageAndCommitFile:e}=await import("./git.js"),w=l.removed?"chore(release): clear pending stage registry [skip ci]":`chore(release): ${t} ${n.length} stage${n.length===1?"":"s"} [skip ci]`;await e({cwd:o,runner:r},l.path,w,{author:a.config.gitUser,push:s.push!==!1,sign:a.config.gitSignCommits===!0}),i.info(`Updated ${l.path} and committed${s.push===!1?"":" + pushed"}.`)}else l.changed&&i.info(`Updated ${l.path}. Commit + push it so the next release wave sees the resolved state.`)}}catch(a){i.warn(`Could not update staged registry: ${a.message}`)}if(c.length>0){i.info(""),i.info("Orphan CHANGELOG sections to review:");for(const a of c)i.info(`  Edit CHANGELOG.md for ${a.name} to remove the orphan ${a.version} section before the next wave`);i.info("(Workspace CHANGELOG.md is unaffected — its wave entry is written from the publish phase against actually-published versions.)")}}if(p.length>0){for(const c of p)i.error(`  ${c.id}: ${c.reason}`);process.exitCode=1}},R=async({logger:t,options:r,workspaceRoot:o})=>{const s=o??process.cwd(),i=k(r.action);if(i===void 0){t.error(`Unknown action "${r.action}". Expected one of: list, approve, reject.`),process.exitCode=1;return}const d=$();if(i==="list"){await A(d,s,r,t);return}let n,p=!1;if(r.commit!==!1)try{n=(await m({cwd:s})).config.changesDir??u,await x(s,n),p=!0}catch(c){t.error(`Could not acquire release lock: ${c.message}`),process.exitCode=1;return}try{await E(i,d,s,r,t)}finally{p&&n&&await S(s,n)}};export{R as default};
+import{DEFAULT_CHANGES_DIR as g}from"./DEFAULT_CLEAN_KEEP.js";import{b as m}from"./orchestrator.js";import{createShellRunner as $}from"./shell-runner.js";import{readStagedRegistry as y,removePendingStages as w,writeStagedRegistry as x}from"./staged-registry.js";import{acquireLock as C,releaseLock as A}from"./state.js";const S=["approve","list","reject"],j=t=>t===void 0||t===""?"list":S.includes(t)?t:void 0,N=async(t,a,o,n)=>{const s=["stage","list","--json"],d=o.stageIds?.[0],i=o.filter??d;i&&s.push(i);const f=await t.run("npm",s,{cwd:a,silent:!0}),c=await m({cwd:a}),r=await y(a,c.config.changesDir??g),u=i?{...r,pending:r.pending.filter(e=>e.name===i)}:r;let l=[];if(f.exitCode===0&&f.stdout.trim())try{l=JSON.parse(f.stdout)}catch{process.stdout.write(`${f.stdout}
+`)}if(o.json){process.stdout.write(`${JSON.stringify({npm:l,registry:u.pending},null,2)}
+`);return}if(l.length===0&&u.pending.length===0){n.info("No staged versions awaiting approval.");return}const h=new Set(l.map(e=>e.id).filter(Boolean)),p=new Set(u.pending.map(e=>e.id));for(const e of l){const v=p.has(e.id??"")?"":"  [npm-only]";n.info(`  ${e.id??"<no-id>"}  ${e.package??"?"}@${e.version??"?"}  → ${e.tag??"latest"}${v}`)}for(const e of u.pending)h.has(e.id)||n.info(`  ${e.id}  ${e.name}@${e.version}  → ${e.tag??"latest"}  [registry-only, ${e.reason}]`)},k=async(t,a,o)=>{if(a.all){const s=await m({cwd:t}),d=await y(t,s.config.changesDir??g);if(d.pending.length===0){o.error("No pending stages in .vis/release/staged.json. Approve manually with explicit ids, or rerun `vis release publish` with publish.stage: true.");return}return d.pending.map(i=>i.id)}const n=a.stageIds??[];if(n.length===0){o.error("Pass stage ids positionally, or use --all to approve every pending stage in .vis/release/staged.json.");return}return n},E=async(t,a,o,n,s)=>{const d=t==="approve"?await k(o,n,s):n.stageIds;if(!d||d.length===0){t==="reject"&&s.error("Pass stage ids positionally to reject."),process.exitCode=1;return}const i=[],f=[];for(const c of d){const r=await a.run("npm",["stage",t,c],{cwd:o,silent:!1});r.exitCode===0?i.push(c):f.push({id:c,reason:r.stderr.trim()||`exit ${r.exitCode}`})}if(s.info(""),i.length>0){s.info(`${t==="approve"?"Approved":"Rejected"} ${i.length} stage(s).`);let c=[];try{const r=await m({cwd:o}),u=r.config.changesDir??g,l=await y(o,u);if(t==="reject"){const p=new Set(i);c=l.pending.filter(e=>p.has(e.id)).map(e=>({name:e.name,version:e.version}))}const h=w(l,i);if(h!==l){const p=await x(o,u,h);if(p.changed&&n.commit!==!1){const{stageAndCommitFile:e}=await import("./git.js"),v=p.removed?"chore(release): clear pending stage registry [skip ci]":`chore(release): ${t} ${i.length} stage${i.length===1?"":"s"} [skip ci]`;await e({cwd:o,runner:a},p.path,v,{author:r.config.gitUser,push:n.push!==!1,sign:r.config.gitSignCommits===!0}),s.info(`Updated ${p.path} and committed${n.push===!1?"":" + pushed"}.`)}else p.changed&&s.info(`Updated ${p.path}. Commit + push it so the next release wave sees the resolved state.`)}}catch(r){s.warn(`Could not update staged registry: ${r.message}`)}if(c.length>0){s.info(""),s.info("Orphan CHANGELOG sections to review:");for(const r of c)s.info(`  Edit CHANGELOG.md for ${r.name} to remove the orphan ${r.version} section before the next wave`);s.info("(Workspace CHANGELOG.md is unaffected — its wave entry is written from the publish phase against actually-published versions.)")}}if(f.length>0){for(const c of f)s.error(`  ${c.id}: ${c.reason}`);process.exitCode=1}},G=async({logger:t,options:a,workspaceRoot:o})=>{const n=o??process.cwd(),s=j(a.action);if(s===void 0){t.error(`Unknown action "${a.action}". Expected one of: list, approve, reject.`),process.exitCode=1;return}const d=$();if(s==="list"){await N(d,n,a,t);return}let i,f=!1;if(a.commit!==!1)try{i=(await m({cwd:n})).config.changesDir??g,await C(n,i),f=!0}catch(c){t.error(`Could not acquire release lock: ${c.message}`),process.exitCode=1;return}try{await E(s,d,n,a,t)}finally{f&&i&&await A(n,i)}};export{G as default};

package/dist/packem_chunks/handler49.js

@@ -1 +1 @@
-import{b as f,a as c}from"./orchestrator.js";import{VisReleaseError as d}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const p=async({logger:e,options:t,workspaceRoot:l})=>{const a=l??process.cwd(),r=t.dryRun===!0,o=await f({channel:t.channel,cwd:a,firstRelease:t.firstRelease===!0,projects:t.filter?t.filter.split(",").map(n=>n.trim()).filter(Boolean):void 0}),{printConfigIfRequested:s}=await import("./print-config.js");if(s(t,o,e))return;if(t.checkOnly===!0){if(e.info(`Preflight: ${o.plan.releases.length} pending release(s)${o.channel?` on channel "${o.channel.tag}"`:""}.`),o.plan.warnings.length>0)for(const n of o.plan.warnings)e.warn(`  - ${n}`);process.exitCode=o.plan.releases.length===0?1:0;return}if(o.plan.releases.length===0){e.info("No pending releases — nothing to version."),process.exitCode=0;return}o.channel&&e.info(`Channel: ${o.channel.tag}${o.channel.prerelease?` (preid: ${o.channel.prerelease})`:""}`),e.info(`${r?"[dry-run] would version":"Versioning"} ${o.plan.releases.length} package(s)...`);for(const n of o.plan.releases)e.info(`  ${n.name}: ${n.oldVersion} → ${n.newVersion}`);let i;try{i=await c(o,{commit:t.commit===!0,dryRun:r})}catch(n){if(n instanceof d&&n.code==="STAGE_PENDING"){e.error(n.message),n.hint&&(e.info(""),e.info(`Next steps: ${n.hint}`)),process.exitCode=1;return}throw n}if(r){e.info(""),e.info(`[dry-run] would write ${i.changedFiles.length} file(s):`);for(const n of i.changedFiles)e.info(`  ${n}`);if(i.deletedFiles.length>0){e.info(`[dry-run] would delete ${i.deletedFiles.length} change file(s):`);for(const n of i.deletedFiles)e.info(`  ${n}`)}e.info(""),e.info("Dry run complete. No changes made.")}else e.info(""),e.info(`Wrote ${i.changedFiles.length} file(s); deleted ${i.deletedFiles.length} consumed change file(s).`),i.commitSha?e.info(`Committed as ${i.commitSha.slice(0,7)}.`):t.commit&&e.warn("--commit was requested but no commit was made (likely no changes to commit).");if(o.plan.warnings.length>0){e.info(""),e.warn(`${o.plan.warnings.length} warning(s):`);for(const n of o.plan.warnings)e.warn(`  - ${n}`)}};export{p as default};
+import{b as c,a as o}from"./orchestrator.js";import{VisReleaseError as d}from"../packem_shared/VisReleaseError-DZtgcKf8.js";const p=async({logger:e,options:a,workspaceRoot:r})=>{const l=r??process.cwd(),s=a.dryRun===!0,t=await c({channel:a.channel,cwd:l,firstRelease:a.firstRelease===!0,projects:a.filter?a.filter.split(",").map(n=>n.trim()).filter(Boolean):void 0}),{printConfigIfRequested:f}=await import("./print-config.js");if(f(a,t,e))return;if(a.checkOnly===!0){if(e.info(`Preflight: ${t.plan.releases.length} pending release(s)${t.channel?` on channel "${t.channel.tag}"`:""}.`),t.plan.warnings.length>0)for(const n of t.plan.warnings)e.warn(`  - ${n}`);process.exitCode=t.plan.releases.length===0?1:0;return}if(t.plan.releases.length===0){e.info("No pending releases — nothing to version."),process.exitCode=0;return}t.channel&&e.info(`Channel: ${t.channel.tag}${t.channel.prerelease?` (preid: ${t.channel.prerelease})`:""}`),e.info(`${s?"[dry-run] would version":"Versioning"} ${t.plan.releases.length} package(s)...`);for(const n of t.plan.releases)e.info(`  ${n.name}: ${n.oldVersion} → ${n.newVersion}`);let i;try{i=await o(t,{commit:a.commit===!0,dryRun:s})}catch(n){if(n instanceof d&&n.code==="STAGE_PENDING"){e.error(n.message),n.hint&&(e.info(""),e.info(`Next steps: ${n.hint}`)),process.exitCode=1;return}throw n}if(s){e.info(""),e.info(`[dry-run] would write ${i.changedFiles.length} file(s):`);for(const n of i.changedFiles)e.info(`  ${n}`);if(i.deletedFiles.length>0){e.info(`[dry-run] would delete ${i.deletedFiles.length} change file(s):`);for(const n of i.deletedFiles)e.info(`  ${n}`)}e.info(""),e.info("Dry run complete. No changes made.")}else e.info(""),e.info(`Wrote ${i.changedFiles.length} file(s); deleted ${i.deletedFiles.length} consumed change file(s).`),i.commitSha?e.info(`Committed as ${i.commitSha.slice(0,7)}.`):a.commit&&e.warn("--commit was requested but no commit was made (likely no changes to commit).");if(t.plan.warnings.length>0){e.info(""),e.warn(`${t.plan.warnings.length} warning(s):`);for(const n of t.plan.warnings)e.warn(`  - ${n}`)}};export{p as default};

package/dist/packem_chunks/handler5.js

@@ -1,6 +1,6 @@
-import{createRequire as _}from"node:module";import{h as j,R as O}from"./catalog.js";import"../packem_shared/en-D3CfXlO7.js";import{Table as R}from"@visulima/tui-kit/table";import{A as E}from"../packem_shared/pm-runner-C6eTANt1.js";import{l as I}from"../packem_shared/dependency-scan-D_ona0Qm.js";import{r as P}from"../packem_shared/provenance-D4Cza8cp.js";import{r as T}from"../packem_shared/signatures-Dyeyg1q9.js";import{loadOptionalSigstore as C}from"./loader.js";let $;const N=t=>($??=_(import.meta.url))(t),u=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,b=t=>{if(typeof u<"u"&&u.versions&&u.versions.node){const[o,r]=u.versions.node.split(".").map(Number);if(o>22||o===22&&r>=3||o===20&&r>=16)return u.getBuiltinModule(t)}return N(t)},{createHash:S}=b("node:crypto"),{isAbsolute:y,resolve:k,basename:v}=b("node:path"),D=t=>(t??"").split(",").map(o=>o.trim()).filter(o=>o.length>0),L=async({logger:t,options:o,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const n=o.format??"table",c=o.prodOnly??!1,p=o.failOn==="error"?"error":"warning",l=D(o.allowlist),a=E(r),d=I(r,a.name,{includeDev:!c}).map(({name:e,version:i})=>({name:e,version:i})),[m,g]=await Promise.all([P(d,{allowlist:l,workspaceRoot:r}),T(d,{allowlist:l,workspaceRoot:r})]),s=[...m.map(e=>({code:"provenance-regression",message:`Resolved ${e.packageName}@${e.version} has no published provenance attestation, but ${e.packageName}@${e.priorVersionWithProvenance} did — a provenance regression.`,packageName:e.packageName,severity:"warning",version:e.version})),...g.map(e=>({code:e.code,message:e.message,packageName:e.packageName,severity:e.severity,version:e.version}))],f=s.filter(e=>p==="error"?e.severity==="error":!0);if(n==="json")process.stdout.write(`${JSON.stringify({findings:s,ok:f.length===0},void 0,2)}
-`);else if(n==="ndjson")for(const e of s)process.stdout.write(`${JSON.stringify(e)}
-`);else if(s.length===0)t.info(`No provenance regressions or signature problems across ${String(d.length)} locked packages.`);else{const e=process.stdout.columns||80;t.info(j(O.createElement(R,{data:s.map(i=>({code:i.code,package:`${i.packageName}@${i.version}`,severity:i.severity}))}),{columns:e}));for(const i of s)t.warn(`${i.packageName}@${i.version}: ${i.message}`)}f.length>0&&(process.exitCode=1)},q=()=>process.env.CI==="true"||typeof process.env.ACTIONS_ID_TOKEN_REQUEST_URL=="string"||typeof process.env.SIGSTORE_ID_TOKEN=="string",x=(t,o,r)=>({_type:"https://in-toto.io/Statement/v1",predicate:{buildDefinition:{buildType:"https://visulima.com/vis/attest/v1",externalParameters:{workspaceRoot:r},internalParameters:{},resolvedDependencies:[]},runDetails:{builder:{id:"https://visulima.com/vis"},metadata:{invocationId:process.env.GITHUB_RUN_ID??"",startedOn:new Date().toISOString()}}},predicateType:"https://slsa.dev/provenance/v1",subject:[{digest:{sha256:o},name:t}]}),V=async({argument:t,fs:o,logger:r,options:n,workspaceRoot:c})=>{if(!c)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const p=t[0];if(!p)throw new Error("Missing subject. Usage: vis attest <path-to-artifact>");const l=n.predicate??"slsaProvenance";if(l!=="slsaProvenance")throw new Error(`Unsupported predicate '${l}'. Only 'slsaProvenance' is supported.`);const a=y(p)?p:k(c,p),d=n.requireSigning??!1,m=n.format??"table";let g;try{g=await o.readFile(a)}catch{throw new Error(`Cannot read subject artifact at ${a}.`)}const s=S("sha256").update(g).digest("hex");if(!q()){const w="No ambient OIDC token (not running in CI). Keyless signing needs a Fulcio identity from CI OIDC.";if(d)throw new Error(`${w} Re-run in CI or drop --require-signing.`);if(m==="json"){process.stdout.write(`${JSON.stringify({ok:!1,reason:"no-ambient-oidc",sha256:s,skipped:!0,subject:v(a)},void 0,2)}
-`);return}r.warn(`${w} Skipping signing (subject sha256: ${s}). Pass --require-signing to make this fatal.`);return}const f=x(v(a),s,c),e=Buffer.from(JSON.stringify(f)),i=await(await C({workspaceRoot:c})).attest(e,"application/vnd.in-toto+json"),h=n.output?y(n.output)?n.output:k(c,n.output):`${a}.sigstore`;if(await o.writeFile(h,`${JSON.stringify(i,void 0,2)}
-`,"utf8"),m==="json"){process.stdout.write(`${JSON.stringify({bundle:h,ok:!0,sha256:s,subject:v(a)},void 0,2)}
-`);return}r.info(`Signed SLSA v1 provenance for ${v(a)} (sha256 ${s.slice(0,16)}…).`),r.info(`Bundle written to ${h}.`)};export{V as attestEmitExecute,L as attestVerifyExecute};
+import{createRequire as $}from"node:module";import{E as j,R as E,q as I}from"./catalog.js";import{d as P}from"../packem_shared/pm-runner-de-jCq8q.js";import{l as C}from"../packem_shared/dependency-scan-DBH2Qo4I.js";import{r as T}from"../packem_shared/provenance-CvfQEJPQ.js";import{r as D}from"../packem_shared/signatures-oZ_2IneN.js";import{loadOptionalSigstore as R}from"./loader.js";let y;const N=s=>(y??=$(import.meta.url))(s),m=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=s=>{if(typeof m<"u"&&m.versions&&m.versions.node){const[t,r]=m.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return m.getBuiltinModule(s)}return N(s)},{createHash:O}=_("node:crypto"),{isAbsolute:k,resolve:S,basename:v}=_("node:path"),q=s=>(s??"").split(",").map(t=>t.trim()).filter(t=>t.length>0),G=async({logger:s,options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const n=t.format??"table",c=t.prodOnly??!1,u=t.failOn==="error"?"error":"warning",d=q(t.allowlist),a=P(r),l=C(r,a.name,{includeDev:!c}).map(({name:e,version:o})=>({name:e,version:o})),[f,p]=await Promise.all([T(l,{allowlist:d,workspaceRoot:r}),D(l,{allowlist:d,workspaceRoot:r})]),i=[...f.map(e=>({code:"provenance-regression",message:`Resolved ${e.packageName}@${e.version} has no published provenance attestation, but ${e.packageName}@${e.priorVersionWithProvenance} did — a provenance regression.`,packageName:e.packageName,severity:"warning",version:e.version})),...p.map(e=>({code:e.code,message:e.message,packageName:e.packageName,severity:e.severity,version:e.version}))],g=i.filter(e=>u==="error"?e.severity==="error":!0);if(n==="json")process.stdout.write(`${JSON.stringify({findings:i,ok:g.length===0},void 0,2)}
+`);else if(n==="ndjson")for(const e of i)process.stdout.write(`${JSON.stringify(e)}
+`);else if(i.length===0)s.info(`No provenance regressions or signature problems across ${String(l.length)} locked packages.`);else{const e=process.stdout.columns||80;s.info(j(E.createElement(I,{data:i.map(o=>({code:o.code,package:`${o.packageName}@${o.version}`,severity:o.severity}))}),{columns:e}));for(const o of i)s.warn(`${o.packageName}@${o.version}: ${o.message}`)}g.length>0&&(process.exitCode=1)},x=()=>process.env.CI==="true"||typeof process.env.ACTIONS_ID_TOKEN_REQUEST_URL=="string"||typeof process.env.SIGSTORE_ID_TOKEN=="string",J=(s,t,r)=>({_type:"https://in-toto.io/Statement/v1",predicate:{buildDefinition:{buildType:"https://visulima.com/vis/attest/v1",externalParameters:{workspaceRoot:r},internalParameters:{},resolvedDependencies:[]},runDetails:{builder:{id:"https://visulima.com/vis"},metadata:{invocationId:process.env.GITHUB_RUN_ID??"",startedOn:new Date().toISOString()}}},predicateType:"https://slsa.dev/provenance/v1",subject:[{digest:{sha256:t},name:s}]}),H=async({argument:s,fs:t,logger:r,options:n,workspaceRoot:c})=>{if(!c)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const u=s[0];if(!u)throw new Error("Missing subject. Usage: vis attest <path-to-artifact>");const d=n.predicate??"slsaProvenance";if(d!=="slsaProvenance")throw new Error(`Unsupported predicate '${d}'. Only 'slsaProvenance' is supported.`);const a=k(u)?u:S(c,u),w=n.requireSigning??!1,l=n.format??"table";let f;try{f=await t.readFile(a)}catch{throw new Error(`Cannot read subject artifact at ${a}.`)}const p=O("sha256").update(f).digest("hex");if(!x()){const b="No ambient OIDC token (not running in CI). Keyless signing needs a Fulcio identity from CI OIDC.";if(w)throw new Error(`${b} Re-run in CI or drop --require-signing.`);if(l==="json"){process.stdout.write(`${JSON.stringify({ok:!1,reason:"no-ambient-oidc",sha256:p,skipped:!0,subject:v(a)},void 0,2)}
+`);return}r.warn(`${b} Skipping signing (subject sha256: ${p}). Pass --require-signing to make this fatal.`);return}const i=J(v(a),p,c),g=Buffer.from(JSON.stringify(i)),o=await(await R({workspaceRoot:c})).attest(g,"application/vnd.in-toto+json"),h=n.output?k(n.output)?n.output:S(c,n.output):`${a}.sigstore`;if(await t.writeFile(h,`${JSON.stringify(o,void 0,2)}
+`,"utf8"),l==="json"){process.stdout.write(`${JSON.stringify({bundle:h,ok:!0,sha256:p,subject:v(a)},void 0,2)}
+`);return}r.info(`Signed SLSA v1 provenance for ${v(a)} (sha256 ${p.slice(0,16)}…).`),r.info(`Bundle written to ${h}.`)};export{H as attestEmitExecute,G as attestVerifyExecute};

package/dist/packem_chunks/handler50.js

@@ -1,7 +1,7 @@
-import{a as $,R as l,S as d,b as y}from"../packem_shared/ai-analysis-bGCAc1jR.js";import{h as b,R as x}from"./catalog.js";import"../packem_shared/en-D3CfXlO7.js";import{Table as S}from"@visulima/tui-kit/table";import{j as w,E as p,q as E,I,s as R}from"../packem_shared/index.server-CusjRLCh.js";const u={command:"ai",description:"AI-assisted commands: provider detection, cache management, and failure-fix proposals."},N=e=>{if(typeof e!="function")return String(e);const{name:t}=e;return t==="Boolean"?"boolean":t==="Number"?"number":t==="String"?"string":t??"unknown"},j=e=>{const t=[...e.commandPath??[],e.name].join(" "),n=(e.examples??[]).map(([o,r])=>({command:o??"",description:r??""})),a=(e.options??[]).map(o=>({defaultValue:o.defaultValue,description:o.description,name:o.name,type:N(o.type)}));return{argument:e.argument?{description:e.argument.description,name:e.argument.name}:void 0,description:e.description??"",examples:n,name:e.name,options:a,path:t}},f=(e,t=u)=>({command:t.command,description:t.description,subcommands:e.map(n=>j(n))}),A=(e,t=u)=>`${JSON.stringify(f(e,t),void 0,2)}
-`,C=(e,t=u)=>{const n=f(e,t),a=[w(`vis ${n.command} — ${n.description}`),"",p("Subcommands:")];for(const o of n.subcommands){const r=o.argument?` ${E(`<${o.argument.name}>`)}`:"";if(a.push(""),a.push(`  ${I(`vis ${o.path}`)}${r}`),o.description&&a.push(`    ${o.description}`),o.options.length>0){const i=o.options.map(m=>`--${m.name}${m.type==="boolean"?"":`=<${m.type}>`}`).join(", ");a.push(p(`    options: ${i}`))}if(o.examples.length>0){a.push(p("    examples:"));for(const i of o.examples){const m=i.description?p(` — ${i.description}`):"";a.push(`      ${R(i.command)}${m}`)}}}return a.push(""),a.push(p(`Run \`vis ${n.command} discover-help\` for the machine-readable JSON catalogue (designed for AI agents).`)),a.push(p(`Run \`vis ${n.command} <subcommand> --help\` for full usage of a specific subcommand.`)),`${a.join(`
+import{c as b,a as l,D as d,T as y}from"../packem_shared/ai-analysis-DSQQDFU9.js";import{E as g,R as x,q as S}from"./catalog.js";import{q as w,F as u,D as E,J as I,r as D}from"../packem_shared/index.server-CwSgbeN7.js";const p={command:"ai",description:"AI-assisted commands: provider detection, cache management, and failure-fix proposals."},R=e=>{if(typeof e!="function")return String(e);const{name:n}=e;return n==="Boolean"?"boolean":n==="Number"?"number":n==="String"?"string":n??"unknown"},A=e=>{const n=[...e.commandPath??[],e.name].join(" "),s=(e.examples??[]).map(([t,r])=>({command:t??"",description:r??""})),o=(e.options??[]).map(t=>({defaultValue:t.defaultValue,description:t.description,name:t.name,type:R(t.type)}));return{argument:e.argument?{description:e.argument.description,name:e.argument.name}:void 0,description:e.description??"",examples:s,name:e.name,options:o,path:n}},f=(e,n=p)=>({command:n.command,description:n.description,subcommands:e.map(s=>A(s))}),P=(e,n=p)=>`${JSON.stringify(f(e,n),void 0,2)}
+`,T=(e,n=p)=>{const s=f(e,n),o=[w(`vis ${s.command} — ${s.description}`),"",u("Subcommands:")];for(const t of s.subcommands){const r=t.argument?` ${E(`<${t.argument.name}>`)}`:"";if(o.push(""),o.push(`  ${I(`vis ${t.path}`)}${r}`),t.description&&o.push(`    ${t.description}`),t.options.length>0){const a=t.options.map(c=>`--${c.name}${c.type==="boolean"?"":`=<${c.type}>`}`).join(", ");o.push(u(`    options: ${a}`))}if(t.examples.length>0){o.push(u("    examples:"));for(const a of t.examples){const c=a.description?u(` — ${a.description}`):"";o.push(`      ${D(a.command)}${c}`)}}}return o.push(""),o.push(u(`Run \`vis ${s.command} discover-help\` for the machine-readable JSON catalogue (designed for AI agents).`)),o.push(u(`Run \`vis ${s.command} <subcommand> --help\` for full usage of a specific subcommand.`)),`${o.join(`
 `)}
-`},h=async()=>{const{default:e}=await import("./cli-main.js").then(t=>t.ao);return e.filter(t=>t.name!=="ai")},M=async()=>{const e=await h();process.stderr.write(C(e))},F=async()=>{const e=await h();process.stdout.write(A(e))},V=async({logger:e,visConfig:t})=>{const n=t?.ai,a=l(n);if(!a){e.error("No AI provider available to test."),process.exitCode=1;return}e.info(`Testing ${a.name}...`);try{const o=await y(a,"Reply with exactly: OK",{timeoutMs:3e4});e.info(`Provider ${a.name} responded: ${o.stdout.trim().slice(0,200)}`)}catch(o){const r=o instanceof Error?o.message:String(o);e.error(`Provider ${a.name} failed: ${r}`),process.exitCode=1}},k=({logger:e,options:t,visConfig:n})=>{const a=t.format??"table",o=n?.ai,r=$(),i=l(o);if(a==="json"){const s=r.map(c=>({available:c.available,method:c.detectionMethod,name:c.name,path:c.path,priority:d[c.name]??0,selected:c.name===i?.name,version:c.version}));process.stdout.write(`${JSON.stringify(s,void 0,2)}
-`);return}const m=r.map(s=>({method:s.detectionMethod??"-",path:s.path??"-",priority:String(d[s.name]??0),provider:s.name,selected:s.name===i?.name?">>>":"",status:s.available?"available":"not found",version:s.version??"-"})),v=process.stdout.columns||80,g=b(x.createElement(S,{data:m}),{columns:v});e.info(g),i?e.info(`
-Selected provider: ${i.name} (priority ${String(d[i.name]??0)})`):e.info(`
-No AI provider available. Install one of the supported AI CLI tools.`)},q=async e=>{const{aiFix:t}=await import("./fix.js");await t(e)};export{F as aiDiscoverHelpExecute,q as aiFixExecute,k as aiProvidersExecute,M as aiRootExecute,V as aiTestExecute};
+`},h=async()=>{const{default:e}=await import("./cli-main.js").then(n=>n.av);return e.filter(n=>n.name!=="ai")},J=async()=>{const e=await h();process.stderr.write(T(e))},j=async()=>{const e=await h();process.stdout.write(P(e))},F=async({logger:e,visConfig:n})=>{const s=n?.ai,o=l(s);if(!o){e.error("No AI provider available to test."),process.exitCode=1;return}e.info(`Testing ${o.name}...`);try{const t=await y(o,"Reply with exactly: OK",{timeoutMs:3e4});e.info(`Provider ${o.name} responded: ${t.stdout.trim().slice(0,200)}`)}catch(t){const r=t instanceof Error?t.message:String(t);e.error(`Provider ${o.name} failed: ${r}`),process.exitCode=1}},M=({logger:e,options:n,visConfig:s})=>{const o=n.format??"table",t=s?.ai,r=b(),a=l(t);if(o==="json"){const i=r.map(m=>({available:m.available,method:m.detectionMethod,name:m.name,path:m.path,priority:d[m.name]??0,selected:m.name===a?.name,version:m.version}));process.stdout.write(`${JSON.stringify(i,void 0,2)}
+`);return}const c=r.map(i=>({method:i.detectionMethod??"-",path:i.path??"-",priority:String(d[i.name]??0),provider:i.name,selected:i.name===a?.name?">>>":"",status:i.available?"available":"not found",version:i.version??"-"})),v=process.stdout.columns||80,$=g(x.createElement(S,{data:c}),{columns:v});e.info($),a?e.info(`
+Selected provider: ${a.name} (priority ${String(d[a.name]??0)})`):e.info(`
+No AI provider available. Install one of the supported AI CLI tools.`)},q=async e=>{const{aiFix:n}=await import("./fix.js");await n(e)};export{j as aiDiscoverHelpExecute,q as aiFixExecute,M as aiProvidersExecute,J as aiRootExecute,F as aiTestExecute};

package/dist/packem_chunks/handler51.js

@@ -1,33 +1,33 @@
-import{createRequire as P}from"node:module";import{l as V,z as q,j as w}from"../packem_shared/index-uBVnF4ji.js";import{findVisConfigFile as A}from"./CONFIG_FILES.js";import{p as e}from"./cli-main.js";import{A as F}from"../packem_shared/pm-runner-C6eTANt1.js";import{W as O}from"../packem_shared/build-scripts-w4SNeR7D.js";import{O as M}from"../packem_shared/native-config-sync-Ds1FtcrM.js";let R;const C=r=>(R??=P(import.meta.url))(r),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,D=r=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[t,s]=$.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return $.getBuiltinModule(r)}return C(r)},{spawnSync:T}=D("node:child_process"),W=/(defineConfig\s*\(\s*\{)/,z=/(export\s+default\s+\{)/,v=(r,t)=>`${t}${JSON.stringify(r)}: true,`,B=(r,t)=>{if(t.length===0)return{added:[],skipped:[],status:"noop"};const s=A(r);if(!s)return{added:[],skipped:t,status:"no-config"};if(!V(s))return{added:[],skipped:t,status:"no-config"};const i=q(s),h=i.search(/installScripts\s*:\s*\{/);let p=null,c=0;if(h!==-1){const a=i.slice(h),d=/(allow\s*:\s*\{)([^}]*)(\})/.exec(a);d?.index!==void 0&&(p=d,c=h+d.index)}if(p){const a=p[2]??"",d=new Set;for(const g of a.matchAll(/["']([^"']+)["']\s*:/g))d.add(g[1]);for(const g of a.matchAll(/(?:^|,|\{)\s*([a-z_$][\w-]*)\s*:/gi))d.add(g[1]);const f=[],k=[];for(const g of t)d.has(g)?k.push(g):f.push(g);if(f.length===0)return{added:[],configPath:s,skipped:k,status:"noop"};const _=/\n([ \t]+)\S/.exec(a)?.[1]??"                ",b=`
-${f.map(g=>v(g,_)).join(`
-`)}`,y=a.replace(/\s+$/,""),S=a.slice(y.length),j=`${y}${y.endsWith(",")||y===""?"":","}${b}${S.length>0?S:`
-`}`,N=`${i.slice(0,c)}${p[1]}${j}${p[3]}${i.slice(c+p[0].length)}`;return w(s,N),{added:f,configPath:s,skipped:k,status:"updated"}}const n=/(installScripts\s*:\s*\{)/;if(n.test(i)){const a=`
+import{createRequire as B}from"node:module";import{z as E}from"../packem_shared/index-DHD8wb6Z.js";import{findVisConfigFile as D}from"./CONFIG_FILES.js";import{y as V}from"../packem_shared/isAccessibleSync-DYKTrrvc-CSnBISfV.js";import{U as w}from"../packem_shared/writeFileSync-DJoHk3Ks-CgQ-VNNT.js";import{p as e}from"./cli-main.js";import{d as C}from"../packem_shared/pm-runner-de-jCq8q.js";import{a as F}from"../packem_shared/build-scripts-pdVmqXRm.js";import{s as O}from"../packem_shared/native-config-sync-BSzU4qUO.js";let N;const M=c=>(N??=B(import.meta.url))(c),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,T=c=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[t,s]=$.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return $.getBuiltinModule(c)}return M(c)},{spawnSync:A}=T("node:child_process"),P=/(defineConfig\s*\(\s*\{)/,q=/(export\s+default\s+\{)/,y=(c,t)=>`${t}${JSON.stringify(c)}: true,`,z=(c,t)=>{if(t.length===0)return{added:[],skipped:[],status:"noop"};const s=D(c);if(!s)return{added:[],skipped:t,status:"no-config"};if(!V(s))return{added:[],skipped:t,status:"no-config"};const n=E(s),h=n.search(/installScripts\s*:\s*\{/);let l=null,r=0;if(h!==-1){const a=n.slice(h),d=/(allow\s*:\s*\{)([^}]*)(\})/.exec(a);d?.index!==void 0&&(l=d,r=h+d.index)}if(l){const a=l[2]??"",f=new Set;for(const g of a.matchAll(/["']([^"']+)["']\s*:/g))f.add(g[1]);for(const g of a.matchAll(/(?:^|,|\{)\s*([a-z_$][\w-]*)\s*:/gi))f.add(g[1]);const d=[],k=[];for(const g of t)f.has(g)?k.push(g):d.push(g);if(d.length===0)return{added:[],configPath:s,skipped:k,status:"noop"};const x=/\n([ \t]+)\S/.exec(a)?.[1]??"                ",_=`
+${d.map(g=>y(g,x)).join(`
+`)}`,v=a.replace(/\s+$/,""),S=a.slice(v.length),R=`${v}${v.endsWith(",")||v===""?"":","}${_}${S.length>0?S:`
+`}`,j=`${n.slice(0,r)}${l[1]}${R}${l[3]}${n.slice(r+l[0].length)}`;return w(s,j),{added:d,configPath:s,skipped:k,status:"updated"}}const i=/(installScripts\s*:\s*\{)/;if(i.test(n)){const a=`
                 allow: {
-${t.map(f=>v(f,"                    ")).join(`
+${t.map(d=>y(d,"                    ")).join(`
 `)}
-                },`,d=i.replace(n,`$1${a}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const o=/(policies\s*:\s*\{)/;if(o.test(i)){const a=`
+                },`,f=n.replace(i,`$1${a}`);return w(s,f),{added:t,configPath:s,skipped:[],status:"updated"}}const o=/(policies\s*:\s*\{)/;if(o.test(n)){const a=`
             installScripts: {
                 allow: {
-${t.map(f=>v(f,"                    ")).join(`
+${t.map(d=>y(d,"                    ")).join(`
 `)}
                 },
-            },`,d=i.replace(o,`$1${a}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const u=/(security\s*:\s*\{)/;if(u.test(i)){const a=`
+            },`,f=n.replace(o,`$1${a}`);return w(s,f),{added:t,configPath:s,skipped:[],status:"updated"}}const u=/(security\s*:\s*\{)/;if(u.test(n)){const a=`
         policies: {
             installScripts: {
                 allow: {
-${t.map(f=>v(f,"                    ")).join(`
+${t.map(d=>y(d,"                    ")).join(`
 `)}
                 },
             },
-        },`,d=i.replace(u,`$1${a}`);return w(s,d),{added:t,configPath:s,skipped:[],status:"updated"}}const l=W.exec(i)??z.exec(i);if(!l)return{added:[],configPath:s,skipped:t,status:"missing-anchor"};const m=`
+        },`,f=n.replace(u,`$1${a}`);return w(s,f),{added:t,configPath:s,skipped:[],status:"updated"}}const p=P.exec(n)??q.exec(n);if(!p)return{added:[],configPath:s,skipped:t,status:"missing-anchor"};const m=`
     security: {
         policies: {
             installScripts: {
                 allow: {
-${t.map(a=>v(a,"                    ")).join(`
+${t.map(a=>y(a,"                    ")).join(`
 `)}
                 },
             },
         },
-    },`,x=`${i.slice(0,l.index+l[0].length)}${m}${i.slice(l.index+l[0].length)}`;return w(s,x),{added:t,configPath:s,skipped:[],status:"updated"}},Q=async({options:r,visConfig:t,workspaceRoot:s})=>{const i=s??process.cwd(),h=F(i);if(h.name==="pnpm"&&!r.scan){e.info("Delegating to pnpm approve-builds...");const p=["approve-builds"];r.all&&p.push("--all");const c=T("pnpm",p,{cwd:i,stdio:"inherit"});if(c.error)throw new Error(`Failed to run pnpm approve-builds: ${c.error.message}`);if(c.status!==0&&c.status!==null&&(e.error(`pnpm approve-builds exited with code ${c.status}`),process.exitCode=c.status),!r.syncNative){e.notice(""),e.notice("Tip: vis.config.ts security.policies.installScripts.allow may now be out of sync with pnpm-workspace.yaml."),e.notice("Run 'vis check --security-config' to compare, or copy the new entries into vis.config.ts.");return}}else{const p=t?.security?.policies?.installScripts?.allow??{},c=t?.security?.pinVersions===!0,n=O(i,p,{pinVersions:c});if(n.unapproved.length===0)e.success("No unapproved build scripts found."),r.write&&(e.info(""),e.info("Nothing to write — there are no unapproved build scripts."));else{e.warn(`Found ${n.unapproved.length} package${n.unapproved.length===1?"":"s"} with unapproved build scripts:
-`);for(const o of n.unapproved)e.info(`  ${o.name} (${o.hooks.join(", ")})`);e.notice(""),e.notice("To approve these packages, add them to vis.config.ts:"),e.notice(""),e.notice("  security: {"),e.notice("    policies: {"),e.notice("      installScripts: {"),e.notice("        allow: {");for(const o of n.unapproved){const u=c&&o.version?`${o.name}@${o.version}`:o.name;e.notice(`          "${u}": true,`)}if(e.notice("        },"),e.notice("      },"),e.notice("    },"),e.notice("  },"),h.name==="pnpm"&&(e.notice(""),e.notice("Or run 'pnpm approve-builds' to update pnpm-workspace.yaml directly.")),r.write){const o=t?.security?.pinVersions===!0,u=n.unapproved.map(m=>o&&m.version?`${m.name}@${m.version}`:m.name),l=B(i,u);switch(e.info(""),l.status){case"missing-anchor":{e.warn(`Could not locate 'defineConfig({' or 'export default {' in ${String(l.configPath)} — please add entries manually.`);break}case"no-config":{e.warn("No vis.config.ts found. Run 'vis init' first, then re-run with --write.");break}case"noop":{e.info(`All ${String(u.length)} entr${u.length===1?"y":"ies"} were already present in vis.config.ts security.policies.installScripts.allow.`);break}default:e.success(`Wrote ${String(l.added.length)} entr${l.added.length===1?"y":"ies"} to ${String(l.configPath)}.`),l.skipped.length>0&&e.info(`Skipped ${String(l.skipped.length)} already-present entr${l.skipped.length===1?"y":"ies"}.`)}}}if(n.excess.length>0){e.notice(""),e.warn(`Stale installScripts.allow entries — ${String(n.excess.length)} pattern${n.excess.length===1?"":"s"} no longer match any installed package:`);for(const o of n.excess)e.info(`  ${o}`);e.notice("Consider removing these entries from vis.config.ts security.policies.installScripts.allow.")}if(n.versionDrift.length>0){e.notice(""),e.warn(`Version drift — ${String(n.versionDrift.length)} entr${n.versionDrift.length===1?"y":"ies"} pinned to an outdated version:`);for(const{from:o,to:u}of n.versionDrift)e.info(`  ${o}  →  ${u}`);e.notice("Rename the keys in vis.config.ts security.policies.installScripts.allow to migrate.")}}if(r.syncNative){const p=t?.security?.policies?.installScripts?.allow??{};if(Object.keys(p).length===0)e.warn("No security.policies.installScripts.allow configured in vis.config.ts. Nothing to sync.");else{const c=M(h.name,i,p);e.info("");for(const n of c)e.success(n)}}};export{Q as default};
+    },`,b=`${n.slice(0,p.index+p[0].length)}${m}${n.slice(p.index+p[0].length)}`;return w(s,b),{added:t,configPath:s,skipped:[],status:"updated"}},Z=async({options:c,visConfig:t,workspaceRoot:s})=>{const n=s??process.cwd(),h=C(n);if(h.name==="pnpm"&&!c.scan){e.info("Delegating to pnpm approve-builds...");const l=["approve-builds"];c.all&&l.push("--all");const r=A("pnpm",l,{cwd:n,stdio:"inherit"});if(r.error)throw new Error(`Failed to run pnpm approve-builds: ${r.error.message}`);if(r.status!==0&&r.status!==null&&(e.error(`pnpm approve-builds exited with code ${r.status}`),process.exitCode=r.status),!c.syncNative){e.notice(""),e.notice("Tip: vis.config.ts security.policies.installScripts.allow may now be out of sync with pnpm-workspace.yaml."),e.notice("Run 'vis check --security-config' to compare, or copy the new entries into vis.config.ts.");return}}else{const l=t?.security?.policies?.installScripts?.allow??{},r=t?.security?.pinVersions===!0,i=F(n,l,{pinVersions:r});if(i.unapproved.length===0)e.success("No unapproved build scripts found."),c.write&&(e.info(""),e.info("Nothing to write — there are no unapproved build scripts."));else{e.warn(`Found ${i.unapproved.length} package${i.unapproved.length===1?"":"s"} with unapproved build scripts:
+`);for(const o of i.unapproved)e.info(`  ${o.name} (${o.hooks.join(", ")})`);e.notice(""),e.notice("To approve these packages, add them to vis.config.ts:"),e.notice(""),e.notice("  security: {"),e.notice("    policies: {"),e.notice("      installScripts: {"),e.notice("        allow: {");for(const o of i.unapproved){const u=r&&o.version?`${o.name}@${o.version}`:o.name;e.notice(`          "${u}": true,`)}if(e.notice("        },"),e.notice("      },"),e.notice("    },"),e.notice("  },"),h.name==="pnpm"&&(e.notice(""),e.notice("Or run 'pnpm approve-builds' to update pnpm-workspace.yaml directly.")),c.write){const o=t?.security?.pinVersions===!0,u=i.unapproved.map(m=>o&&m.version?`${m.name}@${m.version}`:m.name),p=z(n,u);switch(e.info(""),p.status){case"missing-anchor":{e.warn(`Could not locate 'defineConfig({' or 'export default {' in ${String(p.configPath)} — please add entries manually.`);break}case"no-config":{e.warn("No vis.config.ts found. Run 'vis init' first, then re-run with --write.");break}case"noop":{e.info(`All ${String(u.length)} entr${u.length===1?"y":"ies"} were already present in vis.config.ts security.policies.installScripts.allow.`);break}default:e.success(`Wrote ${String(p.added.length)} entr${p.added.length===1?"y":"ies"} to ${String(p.configPath)}.`),p.skipped.length>0&&e.info(`Skipped ${String(p.skipped.length)} already-present entr${p.skipped.length===1?"y":"ies"}.`)}}}if(i.excess.length>0){e.notice(""),e.warn(`Stale installScripts.allow entries — ${String(i.excess.length)} pattern${i.excess.length===1?"":"s"} no longer match any installed package:`);for(const o of i.excess)e.info(`  ${o}`);e.notice("Consider removing these entries from vis.config.ts security.policies.installScripts.allow.")}if(i.versionDrift.length>0){e.notice(""),e.warn(`Version drift — ${String(i.versionDrift.length)} entr${i.versionDrift.length===1?"y":"ies"} pinned to an outdated version:`);for(const{from:o,to:u}of i.versionDrift)e.info(`  ${o}  →  ${u}`);e.notice("Rename the keys in vis.config.ts security.policies.installScripts.allow to migrate.")}}if(c.syncNative){const l=t?.security?.policies?.installScripts?.allow??{};if(Object.keys(l).length===0)e.warn("No security.policies.installScripts.allow configured in vis.config.ts. Nothing to sync.");else{const r=O(h.name,n,l);e.info("");for(const i of r)e.success(i)}}};export{Z as default};

package/dist/packem_chunks/handler52.js

@@ -1,3 +1,3 @@
-import{createRequire as B}from"node:module";import{getAffectedProjects as H}from"@visulima/task-runner";import{v as T,S as D}from"./catalog.js";let C;const F=e=>(C??=B(import.meta.url))(e),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,A=e=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[t,r]=g.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return g.getBuiltinModule(e)}return F(e)},{execFile:q}=A("node:child_process"),{promisify:G}=A("node:util"),P=G(q),N=["[skip ci]","[ci skip]","[no ci]","[vis skip]","[nx skip]"],U=["[vis deploy]","[nx deploy]"],J=["vis","nx"],V=["CACHED_COMMIT_REF","VERCEL_GIT_PREVIOUS_SHA","GITHUB_BASE_REF","CI_COMMIT_BEFORE_SHA"],z=/^[\w./~^@{}][\w.\-/~^@{}]*$/,L=(e=process.env)=>{for(const t of V){const r=e[t];if(r&&r.trim().length>0)return r.trim()}},k=e=>{if(!z.test(e))throw new Error(`Invalid git ref: "${e}". Refs must start with an alphanumeric character or one of _ . / ~ ^ @ { } and may only contain letters, digits, dots, dashes, underscores, slashes, tildes, carets, @, and braces.`)},W=async(e,t)=>{try{return await P("git",["rev-parse","--verify",`${t}^{commit}`],{cwd:e}),!0}catch{return!1}},Z=async e=>{try{const{stdout:t}=await P("git",["log","-1","--pretty=%B"],{cwd:e});return t}catch{return""}},R=(e,t,r)=>J.some(c=>e.includes(`[${c} ${t} ${r}]`)),K=(e,t)=>N.some(r=>e.includes(r))||R(e,"skip",t),Q=(e,t)=>U.some(r=>e.includes(r))||R(e,"deploy",t),f=(e,t,r,c)=>({action:"build",message:r,project:e,reason:t,...c}),_=(e,t,r,c)=>({action:"skip",message:r,project:e,reason:t,...c}),X=e=>`${e.action==="skip"?"🛑":"✅"} ${e.message}`,Y=(e,t)=>e.action==="skip"||t?0:1,E=new Set(["deep","direct","none"]),oe=async({argument:e,logger:t,options:r,visConfig:c,workspaceRoot:l})=>{const o=e[0]??"",b=!!r.json,S=!!r.verbose,I=!!(r["exit-zero-on-build"]??r.exitZeroOnBuild),p=s=>{S&&!b&&t.info(`❱ ${s}`)},n=s=>{b?process.stdout.write(`${JSON.stringify(s)}
-`):t.info(X(s)),process.exit(Y(s,I))};if(!o)return n(f("","missing-project-argument","Missing project argument. Usage: vis ci ignore <project>"));if(!l)return n(f(o,"workspace-error","Could not determine workspace root — building defensively"));const m=await Z(l),$=m.trim().split(`
-`)[0]??"";if(p(`commit: ${$}`),m&&Q(m,o))return n(f(o,"commit-force-deploy",`Force-deploy keyword in commit: "${$}"`));if(m&&K(m,o))return n(_(o,"commit-skip",`Skip keyword in commit: "${$}"`));let h,v;try{({packageJsons:v,workspace:h}=T(l,c))}catch(s){const a=s instanceof Error?s.message:String(s);return n(f(o,"workspace-error",`Workspace discovery failed (${a}) — building defensively`))}if(!Object.hasOwn(h.projects,o))return n(f(o,"project-unknown",`Project "${o}" not found in workspace — building defensively`));try{const s=r.base?.trim(),a=L();let i=s||a||"HEAD~1";const u=r.head?.trim()||"HEAD";k(i),k(u),p(`resolved base ref: ${i} (source: ${s?"flag":a?"ci-env":"default"})`);const x=W(l,i),M=D(l,h,v);await x||(p(`base ref ${i} not reachable — falling back to HEAD~1`),i="HEAD~1"),p(`comparing ${i}...${u}`);const w=r.downstream??"deep",y=r.upstream??"none";if(!E.has(w))throw new Error(`Invalid --downstream value: "${w}". Must be "none", "direct", or "deep".`);if(!E.has(y))throw new Error(`Invalid --upstream value: "${y}". Must be "none", "direct", or "deep".`);const O={base:i,downstream:w,head:u,projectGraph:M,projects:h.projects,upstream:y,workspaceRoot:l},d=await H(O);p(`changed files: ${d.changedFiles.length}`),p(`affected projects: ${d.affectedProjects.join(", ")||"(none)"}`);const j={base:i,head:u};return d.changedFiles.length===0?n(_(o,"no-changes",`No files changed between ${i}...${u}`,{...j,affectedProjects:[]})):d.affectedProjects.includes(o)?n(f(o,"project-affected",`Build ${o}: affected by ${d.changedFiles.length} changed file(s)`,{...j,affectedProjects:d.affectedProjects})):n(_(o,"project-not-affected",`Skip ${o}: not affected by changes between ${i}...${u}`,{...j,affectedProjects:d.affectedProjects}))}catch(s){const a=s instanceof Error?s.message:String(s);return t.error(`Affected detection failed: ${a}`),n(f(o,"workspace-error",`Affected detection failed (${a}) — building defensively`))}};export{oe as default};
+import{createRequire as F}from"node:module";import{getAffectedProjects as T}from"@visulima/task-runner";import{d as H,b as D}from"./catalog.js";let I;const M=e=>(I??=F(import.meta.url))(e),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=e=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[t,r]=g.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return g.getBuiltinModule(e)}return M(e)},{execFile:N}=k("node:child_process"),{promisify:G}=k("node:util"),P=G(N),V=["[skip ci]","[ci skip]","[no ci]","[vis skip]","[nx skip]"],q=["[vis deploy]","[nx deploy]"],J=["vis","nx"],K=["CACHED_COMMIT_REF","VERCEL_GIT_PREVIOUS_SHA","GITHUB_BASE_REF","CI_COMMIT_BEFORE_SHA"],L=/^[\w./~^@{}][\w.\-/~^@{}]*$/,U=(e=process.env)=>{for(const t of K){const r=e[t];if(r&&r.trim().length>0)return r.trim()}},w=e=>{if(!L.test(e))throw new Error(`Invalid git ref: "${e}". Refs must start with an alphanumeric character or one of _ . / ~ ^ @ { } and may only contain letters, digits, dots, dashes, underscores, slashes, tildes, carets, @, and braces.`)},W=async(e,t)=>{try{return await P("git",["rev-parse","--verify",`${t}^{commit}`],{cwd:e}),!0}catch{return!1}},Z=async e=>{try{const{stdout:t}=await P("git",["log","-1","--pretty=%B"],{cwd:e});return t}catch{return""}},B=(e,t,r)=>J.some(i=>e.includes(`[${i} ${t} ${r}]`)),z=(e,t)=>V.some(r=>e.includes(r))||B(e,"skip",t),X=(e,t)=>q.some(r=>e.includes(r))||B(e,"deploy",t),f=(e,t,r,i)=>({action:"build",message:r,project:e,reason:t,...i}),y=(e,t,r,i)=>({action:"skip",message:r,project:e,reason:t,...i}),Q=e=>`${e.action==="skip"?"🛑":"✅"} ${e.message}`,Y=(e,t)=>e.action==="skip"||t?0:1,S=new Set(["deep","direct","none"]),se=async({argument:e,logger:t,options:r,visConfig:i,workspaceRoot:l})=>{const s=e[0]??"",E=!!r.json,A=!!r.verbose,O=!!(r["exit-zero-on-build"]??r.exitZeroOnBuild),u=n=>{A&&!E&&t.info(`❱ ${n}`)},o=n=>{E?process.stdout.write(`${JSON.stringify(n)}
+`):t.info(Q(n)),process.exit(Y(n,O))};if(!s)return o(f("","missing-project-argument","Missing project argument. Usage: vis ci ignore <project>"));if(!l)return o(f(s,"workspace-error","Could not determine workspace root — building defensively"));const m=await Z(l),_=m.trim().split(`
+`)[0]??"";if(u(`commit: ${_}`),m&&X(m,s))return o(f(s,"commit-force-deploy",`Force-deploy keyword in commit: "${_}"`));if(m&&z(m,s))return o(y(s,"commit-skip",`Skip keyword in commit: "${_}"`));let h,v;try{({packageJsons:v,workspace:h}=H(l,i))}catch(n){const a=n instanceof Error?n.message:String(n);return o(f(s,"workspace-error",`Workspace discovery failed (${a}) — building defensively`))}if(!Object.hasOwn(h.projects,s))return o(f(s,"project-unknown",`Project "${s}" not found in workspace — building defensively`));try{const n=r.base?.trim(),a=U();let c=n||a||"HEAD~1";const p=r.head?.trim()||"HEAD";w(c),w(p),u(`resolved base ref: ${c} (source: ${n?"flag":a?"ci-env":"default"})`);const R=W(l,c),x=D(l,h,v);await R||(u(`base ref ${c} not reachable — falling back to HEAD~1`),c="HEAD~1"),u(`comparing ${c}...${p}`);const b=r.downstream??"deep",j=r.upstream??"none";if(!S.has(b))throw new Error(`Invalid --downstream value: "${b}". Must be "none", "direct", or "deep".`);if(!S.has(j))throw new Error(`Invalid --upstream value: "${j}". Must be "none", "direct", or "deep".`);const C={base:c,downstream:b,head:p,projectGraph:x,projects:h.projects,upstream:j,workspaceRoot:l},d=await T(C);u(`changed files: ${d.changedFiles.length}`),u(`affected projects: ${d.affectedProjects.join(", ")||"(none)"}`);const $={base:c,head:p};return d.changedFiles.length===0?o(y(s,"no-changes",`No files changed between ${c}...${p}`,{...$,affectedProjects:[]})):d.affectedProjects.includes(s)?o(f(s,"project-affected",`Build ${s}: affected by ${d.changedFiles.length} changed file(s)`,{...$,affectedProjects:d.affectedProjects})):o(y(s,"project-not-affected",`Skip ${s}: not affected by changes between ${c}...${p}`,{...$,affectedProjects:d.affectedProjects}))}catch(n){const a=n instanceof Error?n.message:String(n);return t.error(`Affected detection failed: ${a}`),o(f(s,"workspace-error",`Affected detection failed (${a}) — building defensively`))}};export{se as default};

package/dist/packem_chunks/handler53.js

@@ -1,8 +1,8 @@
-import{E as u}from"../packem_shared/index.server-CusjRLCh.js";import{w as p}from"../packem_shared/index-uBVnF4ji.js";const f={docker:".dockerignore",npm:".npmignore",slug:".slugignore",vercel:".vercelignore"},m=[".git",".gitattributes",".gitignore",".editorconfig",".vscode/",".idea/",".DS_Store","*.md","LICENSE*","LICENCE*","CHANGELOG*","CONTRIBUTING*","AUTHORS*","docs/","doc/","examples/","example/",".github/",".gitlab-ci.yml",".circleci/","appveyor.yml",".eslintrc*","eslint.config.*",".prettierrc*","prettier.config.*","*.log","npm-debug.log*","*.d.ts","*.map","*.flow","tsconfig*.json","__tests__/","__mocks__/","test/","tests/","*.test.*","*.spec.*","coverage/",".nyc_output/"],w={docker:["node_modules",".vis/","Dockerfile*",".dockerignore"],npm:[],slug:["node_modules"],vercel:["node_modules",".vercel/"]},$=e=>{const r=new Set,n=[];for(const t of[...m,...w[e]])r.has(t)||(r.add(t),n.push(t));return n},h=e=>e.trim(),_="# Added by vis ignore",v=(e,r)=>{const n=new Set;for(const o of e.split(/\r?\n/u)){const c=h(o);c!==""&&!c.startsWith("#")&&n.add(c)}const t=[];for(const o of r)n.has(o)||(n.add(o),t.push(o));if(t.length===0)return{added:t,content:e};const s=e.includes(`\r
+import{F as p}from"../packem_shared/index.server-CwSgbeN7.js";import{e as f}from"../packem_shared/index-DHD8wb6Z.js";const g={docker:".dockerignore",npm:".npmignore",slug:".slugignore",vercel:".vercelignore"},m=[".git",".gitattributes",".gitignore",".editorconfig",".vscode/",".idea/",".DS_Store","*.md","LICENSE*","LICENCE*","CHANGELOG*","CONTRIBUTING*","AUTHORS*","docs/","doc/","examples/","example/",".github/",".gitlab-ci.yml",".circleci/","appveyor.yml",".eslintrc*","eslint.config.*",".prettierrc*","prettier.config.*","*.log","npm-debug.log*","*.d.ts","*.map","*.flow","tsconfig*.json","__tests__/","__mocks__/","test/","tests/","*.test.*","*.spec.*","coverage/",".nyc_output/"],w={docker:["node_modules",".vis/","Dockerfile*",".dockerignore"],npm:[],slug:["node_modules"],vercel:["node_modules",".vercel/"]},E=e=>{const r=new Set,o=[];for(const t of[...m,...w[e]])r.has(t)||(r.add(t),o.push(t));return o},_=e=>e.trim(),h="# Added by vis ignore",$=(e,r)=>{const o=new Set;for(const n of e.split(/\r?\n/u)){const i=_(n);i!==""&&!i.startsWith("#")&&o.add(i)}const t=[];for(const n of r)o.has(n)||(o.add(n),t.push(n));if(t.length===0)return{added:t,content:e};const s=e.includes(`\r
 `)?`\r
 `:`
-`,d=[_,...t].join(s);if(e.trim()==="")return{added:t,content:`${d}${s}`};const i=e.endsWith(`
-`)?s:`${s}${s}`;return{added:t,content:`${e}${i}${d}${s}`}},E=e=>e==="docker"||e==="npm"||e==="slug"||e==="vercel",k=async(e,r)=>{try{return await e.readFile(r,"utf8")}catch{return""}},N=async({fs:e,logger:r,options:n,process:t,workspaceRoot:s})=>{const d=s??t.cwd,i=n.target??"docker";if(!E(i))throw new Error(`Invalid --target "${i}". Expected one of: docker, vercel, npm, slug.`);const o=f[i],c=p(d,o),g=await k(e,c),{added:a,content:l}=v(g,$(i));if(n.json){process.stdout.write(`${JSON.stringify({added:a,file:o,target:i},null,2)}
-`);return}if(n.write){if(a.length===0){r.info(`${o} is already up to date (no new patterns).`);return}await e.writeFile(c,l),r.info(`Added ${a.length} pattern(s) to ${o}.`);return}process.stdout.write(l.endsWith(`
+`,d=[h,...t].join(s);if(e.trim()==="")return{added:t,content:`${d}${s}`};const c=e.endsWith(`
+`)?s:`${s}${s}`;return{added:t,content:`${e}${c}${d}${s}`}},S=e=>e==="docker"||e==="npm"||e==="slug"||e==="vercel",I=async(e,r)=>{try{return await e.readFile(r,"utf8")}catch{return""}},y=async({fs:e,logger:r,options:o,process:t,workspaceRoot:s})=>{const d=s??t.cwd,c=o.target??"docker";if(!S(c))throw new Error(`Invalid --target "${c}". Expected one of: docker, vercel, npm, slug.`);const n=g[c],i=f(d,n),u=await I(e,i),{added:a,content:l}=$(u,E(c));if(o.json){process.stdout.write(`${JSON.stringify({added:a,file:n,target:c},null,2)}
+`);return}if(o.write){if(a.length===0){r.info(`${n} is already up to date (no new patterns).`);return}await e.writeFile(i,l),r.info(`Added ${a.length} pattern(s) to ${n}.`);return}process.stdout.write(l.endsWith(`
 `)?l:`${l}
-`),r.info(u(`(${a.length} new pattern(s); re-run with --write to save ${o})`))};export{N as default};
+`),r.info(p(`(${a.length} new pattern(s); re-run with --write to save ${n})`))};export{y as default};

package/dist/packem_chunks/handler54.js

@@ -1,4 +1,4 @@
-import{E as d}from"../packem_shared/index.server-CusjRLCh.js";import{w as g,l as y,z as k,j as w,q as l}from"../packem_shared/index-uBVnF4ji.js";import{a as $,b as h,f as x}from"../packem_shared/subtree-DSm0QEoE.js";import{a as u}from"../packem_shared/utils-CRueU43T.js";import{P as b,e as R}from"./catalog.js";import{a as A}from"../packem_shared/readJsonSync-DweZd5ZA-0eZh9sGm.js";const j=["aube-workspace.yaml","pnpm-workspace.yaml"],E=/^\s*packages\s*:\s*$/,q=/^(\s*)-\s/,v=(c,i)=>{const r=c.includes(`\r
+import{F as p}from"../packem_shared/index.server-CwSgbeN7.js";import{e as m,z as k}from"../packem_shared/index-DHD8wb6Z.js";import{a as y,b as h,f as w}from"../packem_shared/subtree-DtmcKAJK.js";import{n as u}from"../packem_shared/utils-DQFHJn72.js";import{v as $,j as x}from"./catalog.js";import{y as A}from"../packem_shared/isAccessibleSync-DYKTrrvc-CSnBISfV.js";import{U as b}from"../packem_shared/writeFileSync-DJoHk3Ks-CgQ-VNNT.js";import{p as E}from"../packem_shared/readJsonSync-CbryXYxN-B2aSeDpC.js";import{T as l}from"../packem_shared/target-merge-D1xbylFw.js";const P=["aube-workspace.yaml","pnpm-workspace.yaml"],v=/^\s*packages\s*:\s*$/,j=/^(\s*)-\s/,I=(c,i)=>{const s=c.includes(`\r
 `)?`\r
 `:`
-`,e=c.split(/\r?\n/),a=e.findIndex(t=>E.test(t));if(a===-1)return;let s="  ";for(let t=a+1;t<e.length;t++){const o=q.exec(e[t]);if(o){s=o[1];break}if(e[t].trim().length>0)break}return e.splice(a+1,0,`${s}- "${i}"`),e.join(r)},P=(c,i,r)=>{const e=g(c,"package.json");let a;try{a=A(e)}catch{return!1}const{workspaces:s}=a;return Array.isArray(s)?s.includes(i)?!1:(r||l(e,{...a,workspaces:[...s,i]},{detectIndent:!0}),!0):s&&typeof s=="object"&&Array.isArray(s.packages)?s.packages.includes(i)?!1:(r||l(e,{...a,workspaces:{...s,packages:[...s.packages,i]}},{detectIndent:!0}),!0):!1},I=({dryRun:c=!1,prefix:i,workspaceRoot:r})=>{const e=u(i),a=b(r);if(!a)return{status:"no-config"};if(R(r,a).some(s=>u(s)===e))return{status:"already-covered"};for(const s of j){const t=g(r,s);if(!y(t))continue;const o=v(k(t),e);if(o!==void 0)return c||w(t,o),{entry:e,file:s,status:"added"}}return P(r,e,c)?{entry:e,file:"package.json",status:"added"}:{status:"no-config"}},H=async({argument:c,fs:i,logger:r,options:e,process:a,workspaceRoot:s})=>{const t=c[0];if(!t)throw new Error("Missing <source>. Pass a git repository URL or local path to import.");if(!e.prefix)throw new Error("Missing --prefix <dir>. Pass the target directory in the monorepo (e.g. packages/tooling/foo).");const o=s??a.cwd,n=u(e.prefix),f=e.ref??"HEAD";if($(o),await(async p=>{try{return await i.access(p),!0}catch{return!1}})(g(o,n)))throw new Error(`Target "${n}" already exists. git subtree add requires a non-existent prefix.`);if(e.dryRun){const p=e.squash?" --squash":"",m=e.message?` -m "${e.message}"`:"";r.info("Dry run — no changes will be made. Planned steps:"),r.info(`  git subtree add --prefix=${n}${p}${m} ${t} ${f}`),e.noRegister||r.info(`  register ${n} into the workspace config (skipped if already covered by an existing glob)`);return}if(h(o),r.info(`Importing ${d(t)}@${f} → ${n} ...`),x({cwd:o,message:e.message,prefix:n,ref:f,repo:t,squash:e.squash}),r.info(`✓ Imported ${t} into ${n} (history preserved).`),e.noRegister)r.info(d(`Skipped workspace registration (--no-register). Add ${n} to your workspace config manually.`));else{const p=I({prefix:n,workspaceRoot:o});p.status==="already-covered"?r.info(`✓ ${n} is already covered by an existing workspace glob.`):p.status==="added"?r.info(`✓ Registered ${p.entry} in ${p.file}.`):r.warn(`Could not auto-register ${n}: no workspace config found. Add it to pnpm-workspace.yaml or package.json#workspaces manually.`)}r.info(d("Note: project.json / nx tags are not generated. Add them if your tooling needs them."))};export{H as default};
+`,e=c.split(/\r?\n/),n=e.findIndex(r=>v.test(r));if(n===-1)return;let t="  ";for(let r=n+1;r<e.length;r++){const o=j.exec(e[r]);if(o){t=o[1];break}if(e[r].trim().length>0)break}return e.splice(n+1,0,`${t}- "${i}"`),e.join(s)},R=(c,i,s)=>{const e=m(c,"package.json");let n;try{n=E(e)}catch{return!1}const{workspaces:t}=n;return Array.isArray(t)?t.includes(i)?!1:(s||l(e,{...n,workspaces:[...t,i]},{detectIndent:!0}),!0):t&&typeof t=="object"&&Array.isArray(t.packages)?t.packages.includes(i)?!1:(s||l(e,{...n,workspaces:{...t,packages:[...t.packages,i]}},{detectIndent:!0}),!0):!1},q=({dryRun:c=!1,prefix:i,workspaceRoot:s})=>{const e=u(i),n=$(s);if(!n)return{status:"no-config"};if(x(s,n).some(r=>u(r)===e))return{status:"already-covered"};for(const r of P){const o=m(s,r);if(!A(o))continue;const a=I(k(o),e);if(a!==void 0)return c||b(o,a),{entry:e,file:r,status:"added"}}return R(s,e,c)?{entry:e,file:"package.json",status:"added"}:{status:"no-config"}},z=async({argument:c,fs:i,logger:s,options:e,process:n,workspaceRoot:t})=>{const r=c[0];if(!r)throw new Error("Missing <source>. Pass a git repository URL or local path to import.");if(!e.prefix)throw new Error("Missing --prefix <dir>. Pass the target directory in the monorepo (e.g. packages/tooling/foo).");const o=t??n.cwd,a=u(e.prefix),d=e.ref??"HEAD";if(y(o),await(async f=>{try{return await i.access(f),!0}catch{return!1}})(m(o,a)))throw new Error(`Target "${a}" already exists. git subtree add requires a non-existent prefix.`);if(e.dryRun){const f=e.squash?" --squash":"",g=e.message?` -m "${e.message}"`:"";s.info("Dry run — no changes will be made. Planned steps:"),s.info(`  git subtree add --prefix=${a}${f}${g} ${r} ${d}`),e.noRegister||s.info(`  register ${a} into the workspace config (skipped if already covered by an existing glob)`);return}if(h(o),s.info(`Importing ${p(r)}@${d} → ${a} ...`),w({cwd:o,message:e.message,prefix:a,ref:d,repo:r,squash:e.squash}),s.info(`✓ Imported ${r} into ${a} (history preserved).`),e.noRegister)s.info(p(`Skipped workspace registration (--no-register). Add ${a} to your workspace config manually.`));else{const f=q({prefix:a,workspaceRoot:o});f.status==="already-covered"?s.info(`✓ ${a} is already covered by an existing workspace glob.`):f.status==="added"?s.info(`✓ Registered ${f.entry} in ${f.file}.`):s.warn(`Could not auto-register ${a}: no workspace config found. Add it to pnpm-workspace.yaml or package.json#workspaces manually.`)}s.info(p("Note: project.json / nx tags are not generated. Add them if your tooling needs them."))};export{z as default};

package/dist/packem_chunks/handler55.js

@@ -1 +1 @@
-import{b as D}from"../packem_shared/index-uBVnF4ji.js";import{v}from"./catalog.js";import{f as $,a as x}from"../packem_shared/selectors-Ce_6UAoY.js";import E from"./index.js";import{h as J}from"./cli-main.js";const P=(e,n)=>{for(const g of n)if(E(g,e))return!0;return!1},C=(e,n={})=>{const{depTypes:g,excludePatterns:f,externalOnly:y,includePatterns:u,internalOnly:h}=n;if(h&&y)return[];const l=g&&g.length>0?new Set(g):void 0,k=u&&u.length>0?u:void 0,T=f&&f.length>0?f:void 0,w=[];for(const m of e)h&&!m.isInternal||y&&m.isInternal||l&&!l.has(m.depType)||k&&(!m.packageName||!P(m.packageName,k))||T&&m.packageName&&P(m.packageName,T)||w.push(m);return w},q=new Set(["json","ndjson","table"]),B=e=>{if(e===void 0)return"table";const n=e.toLowerCase();if(!q.has(n))throw new Error(`--format must be one of: table, json, ndjson (got "${e}")`);return n},S=(e,n)=>({depName:e.depName,depType:e.depType,isInternal:e.isInternal,packageDir:e.packageDir,packageJsonPath:D(n,e.packageJsonPath),packageName:e.packageName,specifier:e.specifier}),b=new Set(["dependencies","devDependencies","optionalDependencies","overrides","peerDependencies","pnpm.overrides","resolutions"]),L=e=>{if(!e||e.length===0)return;const n=[],g=[];for(const f of e)for(const y of f.split(",")){const u=y.trim();u&&(b.has(u)?n.push(u):g.push(u))}if(g.length>0)throw new Error(`Unknown --dep-type value(s): ${g.join(", ")}. Valid: ${[...b].join(", ")}`);return n.length>0?n:void 0},W=async({logger:e,options:n,visConfig:g,workspaceRoot:f})=>{if(!f)throw new Error("Could not determine workspace root.");const y=B(n.format);if(n.deps===!0){if(n.internalOnly&&n.externalOnly)throw new Error("--internal-only and --external-only are mutually exclusive");const c=L(n.depType),i=J(f);let r=C(i,{depTypes:c,excludePatterns:n.exclude,externalOnly:n.externalOnly,includePatterns:n.include,internalOnly:n.internalOnly});if(n.query||n.tag&&n.tag.length>0){const{workspace:t}=v(f,g),p=$(Object.keys(t.projects),t,n.query),N=new Set(x(p,t,n.tag));r=r.filter(O=>O.packageName!==void 0&&N.has(O.packageName))}const d=[...r].sort((t,p)=>{const N=`${t.packageName??t.packageDir} ${t.depType} ${t.depName}`,O=`${p.packageName??p.packageDir} ${p.depType} ${p.depName}`;return N.localeCompare(O)});if(y==="ndjson"){for(const t of d)e.info(JSON.stringify(S(t,f)));return}if(y==="json"){const t=d.map(p=>S(p,f));e.info(JSON.stringify(t,null,n.pretty===!0?2:void 0));return}if(d.length===0){e.info("No matching dep-instances.");return}const a=["Package","Block","Dep","Specifier","Internal","Path"],o=d.map(t=>[t.packageName??t.packageDir,t.depType,t.depName,t.specifier,t.isInternal?"yes":"no",D(f,t.packageJsonPath)]),s=a.map((t,p)=>Math.max(t.length,...o.map(N=>(N[p]??"").length))),j=(t,p)=>t.padEnd(p);e.info(a.map((t,p)=>j(t,s[p])).join("  ")),e.info(s.map(t=>"─".repeat(t)).join("──"));for(const t of o)e.info(t.map((p,N)=>j(p,s[N])).join("  "));e.info(""),e.info(`${String(d.length)} dep-instance(s)`);return}if(y==="ndjson")throw new Error("--format=ndjson is only supported with --deps");const{projectOptions:u,workspace:h}=v(f,g);let l=Object.keys(h.projects).sort();if(n.query&&(l=$(l,h,n.query)),l=x(l,h,n.tag),l.length===0){e.info("No projects found.");return}const k=n.inferred===!0,T=n.targets===!0||k;if(y==="json"){const c=l.map(i=>{const r=h.projects[i],d=u.get(i)??{},a=Object.entries(r.targets??{}).map(([o])=>{const s=d[o],j=s?.inferred===!0;return{aliases:s?.aliases??[],command:s?.command,description:s?.description,...j?{inferred:!0}:{},name:o,type:s?.type}}).filter(o=>!k||o.inferred===!0);return{language:r.language,layer:r.layer,name:i,root:r.root,stack:r.stack,tags:r.tags??[],targets:a,type:r.projectType??"library"}});e.info(JSON.stringify(c,null,2));return}const w=(c,i)=>{const r=c.map((a,o)=>{let s=0;for(const j of i)s=Math.max(s,(j[o]??"").length);return Math.max(a.length,s)}),d=(a,o)=>a.padEnd(o);e.info(c.map((a,o)=>d(a,r[o])).join("  ")),e.info(r.map(a=>"─".repeat(a)).join("──"));for(const a of i)e.info(a.map((o,s)=>d(o,r[s])).join("  "))};if(T){const c=[];for(const i of l){const r=h.projects[i],d=u.get(i)??{};for(const a of Object.keys(r.targets??{}).sort()){const o=d[a],s=o?.inferred===!0;if(k&&!s)continue;const j=r.targets?.[a],t=j?.cache===!1?"no":j?.cache===!0?"yes":"default";c.push([i,a,o?.type??"—",t,s?"yes":"no",o?.description??"—"])}}if(c.length===0){e.info(k?"No inferred targets found.":"No targets found.");return}w(["Project","Target","Type","Cache","Inferred","Description"],c),e.info(""),e.info(`${String(c.length)} target(s) across ${String(l.length)} project(s)`);return}const m=["Project","Type","Layer","Tags","Targets"],I=l.map(c=>{const i=h.projects[c],r=Object.keys(i.targets??{});return[c,i.projectType??"library",i.layer??"—",(i.tags??[]).join(", ")||"—",r.length>4?`${r.slice(0,4).join(", ")}… (${String(r.length)})`:r.join(", ")||"—"]});w(m,I),e.info(""),e.info(`${String(l.length)} project(s)`)};export{W as default};
+import{a as I}from"../packem_shared/index-DHD8wb6Z.js";import{d as O}from"./catalog.js";import{f as D,a as x}from"../packem_shared/selectors-B7lSFz7l.js";import E from"./index.js";import{v as J}from"./cli-main.js";const S=(e,t)=>{for(const l of t)if(E(l,e))return!0;return!1},q=(e,t={})=>{const{depTypes:l,excludePatterns:f,externalOnly:h,includePatterns:m,internalOnly:g}=t;if(g&&h)return[];const d=l&&l.length>0?new Set(l):void 0,k=m&&m.length>0?m:void 0,w=f&&f.length>0?f:void 0,N=[];for(const y of e)g&&!y.isInternal||h&&y.isInternal||d&&!d.has(y.depType)||k&&(!y.packageName||!S(y.packageName,k))||w&&y.packageName&&S(y.packageName,w)||N.push(y);return N},C=new Set(["json","ndjson","table"]),M=e=>{if(e===void 0)return"table";const t=e.toLowerCase();if(!C.has(t))throw new Error(`--format must be one of: table, json, ndjson (got "${e}")`);return t},P=(e,t)=>({depName:e.depName,depType:e.depType,isInternal:e.isInternal,packageDir:e.packageDir,packageJsonPath:I(t,e.packageJsonPath),packageName:e.packageName,specifier:e.specifier}),$=new Set(["dependencies","devDependencies","optionalDependencies","overrides","peerDependencies","pnpm.overrides","resolutions"]),A=e=>{if(!e||e.length===0)return;const t=[],l=[];for(const f of e)for(const h of f.split(",")){const m=h.trim();m&&($.has(m)?t.push(m):l.push(m))}if(l.length>0)throw new Error(`Unknown --dep-type value(s): ${l.join(", ")}. Valid: ${[...$].join(", ")}`);return t.length>0?t:void 0},V=async({logger:e,options:t,visConfig:l,workspaceRoot:f})=>{if(!f)throw new Error("Could not determine workspace root.");const h=M(t.format);if(t.deps===!0){if(t.internalOnly&&t.externalOnly)throw new Error("--internal-only and --external-only are mutually exclusive");const p=A(t.depType),c=J(f);let r=q(c,{depTypes:p,excludePatterns:t.exclude,externalOnly:t.externalOnly,includePatterns:t.include,internalOnly:t.internalOnly});if(t.query||t.tag&&t.tag.length>0){const{workspace:n}=O(f,l),i=D(Object.keys(n.projects),n,t.query),T=new Set(x(i,n,t.tag));r=r.filter(v=>v.packageName!==void 0&&T.has(v.packageName))}const u=[...r].sort((n,i)=>{const T=`${n.packageName??n.packageDir} ${n.depType} ${n.depName}`,v=`${i.packageName??i.packageDir} ${i.depType} ${i.depName}`;return T.localeCompare(v)});if(h==="ndjson"){for(const n of u)e.info(JSON.stringify(P(n,f)));return}if(h==="json"){const n=u.map(i=>P(i,f));e.info(JSON.stringify(n,null,t.pretty===!0?2:void 0));return}if(u.length===0){e.info("No matching dep-instances.");return}const o=["Package","Block","Dep","Specifier","Internal","Path"],a=u.map(n=>[n.packageName??n.packageDir,n.depType,n.depName,n.specifier,n.isInternal?"yes":"no",I(f,n.packageJsonPath)]),s=o.map((n,i)=>Math.max(n.length,...a.map(T=>(T[i]??"").length))),j=(n,i)=>n.padEnd(i);e.info(o.map((n,i)=>j(n,s[i])).join("  ")),e.info(s.map(n=>"─".repeat(n)).join("──"));for(const n of a)e.info(n.map((i,T)=>j(i,s[T])).join("  "));e.info(""),e.info(`${String(u.length)} dep-instance(s)`);return}if(h==="ndjson")throw new Error("--format=ndjson is only supported with --deps");const{projectOptions:m,workspace:g}=O(f,l);let d=Object.keys(g.projects).sort();if(t.query&&(d=D(d,g,t.query)),d=x(d,g,t.tag),d.length===0){e.info("No projects found.");return}const k=t.inferred===!0,w=t.targets===!0||k;if(h==="json"){const p=d.map(c=>{const r=g.projects[c],u=m.get(c)??{},o=Object.entries(r.targets??{}).map(([a])=>{const s=u[a],j=s?.inferred===!0;return{aliases:s?.aliases??[],command:s?.command,description:s?.description,...j?{inferred:!0}:{},name:a,type:s?.type}}).filter(a=>!k||a.inferred===!0);return{language:r.language,layer:r.layer,name:c,root:r.root,stack:r.stack,tags:r.tags??[],targets:o,type:r.projectType??"library"}});e.info(JSON.stringify(p,null,2));return}const N=(p,c)=>{const r=p.map((o,a)=>{let s=0;for(const j of c)s=Math.max(s,(j[a]??"").length);return Math.max(o.length,s)}),u=(o,a)=>o.padEnd(a);e.info(p.map((o,a)=>u(o,r[a])).join("  ")),e.info(r.map(o=>"─".repeat(o)).join("──"));for(const o of c)e.info(o.map((a,s)=>u(a,r[s])).join("  "))};if(w){const p=[];for(const c of d){const r=g.projects[c],u=m.get(c)??{};for(const o of Object.keys(r.targets??{}).sort()){const a=u[o],s=a?.inferred===!0;if(k&&!s)continue;const j=r.targets?.[o],n=j?.cache===!1?"no":j?.cache===!0?"yes":"default";p.push([c,o,a?.type??"—",n,s?"yes":"no",a?.description??"—"])}}if(p.length===0){e.info(k?"No inferred targets found.":"No targets found.");return}N(["Project","Target","Type","Cache","Inferred","Description"],p),e.info(""),e.info(`${String(p.length)} target(s) across ${String(d.length)} project(s)`);return}const y=["Project","Type","Layer","Tags","Targets"],b=d.map(p=>{const c=g.projects[p],r=Object.keys(c.targets??{});return[p,c.projectType??"library",c.layer??"—",(c.tags??[]).join(", ")||"—",r.length>4?`${r.slice(0,4).join(", ")}… (${String(r.length)})`:r.join(", ")||"—"]});N(y,b),e.info(""),e.info(`${String(d.length)} project(s)`)};export{V as default};

package/dist/packem_chunks/handler56.js

@@ -1,12 +1,12 @@
-import{DEFAULT_CHANGES_DIR as R}from"./DEFAULT_CLEAN_KEEP.js";import{b as k,c as S,a as C,p as x}from"./orchestrator.js";import{hasUncommittedChanges as F,getCurrentBranch as N,pushBranch as P,stageAndCommit as A}from"./git.js";import{createShellRunner as I}from"./shell-runner.js";import{stateFilePath as j}from"./state.js";import{d as D}from"../packem_shared/sticky-comment-D6_7-w8T.js";import{VisReleaseError as y}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const V="<!-- vis:user-content -->",M="<!-- /vis:user-content -->",U=/<!-- vis:user-content -->([\s\S]*?)<!-- \/vis:user-content -->/g,q=/<!-- vis:user-content -->(?:(?!<!-- \/vis:user-content -->)[\s\S])*?<!-- vis:user-content -->/,E=r=>`${V}${r}${M}`,L=(r,e)=>{const s=[],o=/<!-- vis:user-content -->\s*<!-- \/vis:user-content -->/g;let n=o.exec(r);for(;n!==null;)s.push({end:n.index+n[0].length,start:n.index}),n=o.exec(r);if(s.length===0)return{body:r,remaining:e};let i=0;const t=[],u=Math.min(s.length,e.length);for(let l=0;l<u;l+=1){const d=s[l],a=e[l];t.push(r.slice(i,d.start)),t.push(a),i=d.end}return t.push(r.slice(i)),{body:t.join(""),remaining:e.slice(u)}},O=(r,e)=>{if(r===void 0||r==="")return e;const s=r.replaceAll(/```[\s\S]*?```/g,"").replaceAll(/~~~[\s\S]*?~~~/g,""),o=(s.match(/<!-- vis:user-content -->/g)??[]).length,n=(s.match(/<!-- \/vis:user-content -->/g)??[]).length;if(o!==n)throw new y({code:"CONFIG_INVALID",hint:"Fix the marker pairs in the PR body and re-run.",message:`PR body has unbalanced <!-- vis:user-content --> markers (${o} opens, ${n} closes). Refusing to merge to prevent silent edit loss.`});if(q.test(s))throw new y({code:"CONFIG_INVALID",hint:"Flatten the nesting in the PR body and re-run.",message:"Nested <!-- vis:user-content --> markers are not allowed in PR body. The merger refuses to operate to prevent silent edit loss."});const i=[];for(const a of r.matchAll(U)){const p=a[1]??"";p.trim()!==""&&i.push(E(p))}if(i.length===0)return e;const{body:t,remaining:u}=L(e,i);if(u.length===0)return t;const l=t.replace(/\s+$/u,""),d=u.join(`
+import{DEFAULT_CHANGES_DIR as S}from"./DEFAULT_CLEAN_KEEP.js";import{b as k,c as A,a as $,p as P}from"./orchestrator.js";import{hasUncommittedChanges as E,getCurrentBranch as F,pushBranch as x,stageAndCommit as N}from"./git.js";import{createShellRunner as I}from"./shell-runner.js";import{stateFilePath as D}from"./state.js";import{d as O}from"../packem_shared/sticky-comment-DjhyCIZt.js";import{VisReleaseError as R}from"../packem_shared/VisReleaseError-DZtgcKf8.js";const M="<!-- vis:user-content -->",_="<!-- /vis:user-content -->",j=/<!-- vis:user-content -->([\s\S]*?)<!-- \/vis:user-content -->/g,L=/<!-- vis:user-content -->(?:(?!<!-- \/vis:user-content -->)[\s\S])*?<!-- vis:user-content -->/,V=s=>`${M}${s}${_}`,U=(s,e)=>{const i=[],o=/<!-- vis:user-content -->\s*<!-- \/vis:user-content -->/g;let n=o.exec(s);for(;n!==null;)i.push({end:n.index+n[0].length,start:n.index}),n=o.exec(s);if(i.length===0)return{body:s,remaining:e};let r=0;const t=[],l=Math.min(i.length,e.length);for(let u=0;u<l;u+=1){const d=i[u],a=e[u];t.push(s.slice(r,d.start)),t.push(a),r=d.end}return t.push(s.slice(r)),{body:t.join(""),remaining:e.slice(l)}},T=(s,e)=>{if(s===void 0||s==="")return e;const i=s.replaceAll(/```[\s\S]*?```/g,"").replaceAll(/~~~[\s\S]*?~~~/g,""),o=(i.match(/<!-- vis:user-content -->/g)??[]).length,n=(i.match(/<!-- \/vis:user-content -->/g)??[]).length;if(o!==n)throw new R({code:"CONFIG_INVALID",hint:"Fix the marker pairs in the PR body and re-run.",message:`PR body has unbalanced <!-- vis:user-content --> markers (${o} opens, ${n} closes). Refusing to merge to prevent silent edit loss.`});if(L.test(i))throw new R({code:"CONFIG_INVALID",hint:"Flatten the nesting in the PR body and re-run.",message:"Nested <!-- vis:user-content --> markers are not allowed in PR body. The merger refuses to operate to prevent silent edit loss."});const r=[];for(const a of s.matchAll(j)){const g=a[1]??"";g.trim()!==""&&r.push(V(g))}if(r.length===0)return e;const{body:t,remaining:l}=U(e,r);if(l.length===0)return t;const u=t.replace(/\s+$/u,""),d=l.join(`
 
-`);return`${l}
+`);return`${u}
 
 ${d}
-`},_=async(r,e,s)=>{try{return await r.access(j(e,s)),!0}catch{return!1}},B=async(r,e,s,o,n,i,t)=>{const u=await r.run("gh",["pr","list","--head",o,"--state","open","--json","number"],{cwd:s,silent:!0});if(u.exitCode===0&&u.stdout.trim()!==""&&u.stdout.trim()!=="[]")try{const a=JSON.parse(u.stdout);if(a[0]){let p=i,w=!1;try{const m=await r.run("gh",["pr","view",String(a[0].number),"--json","body","-q",".body"],{cwd:s,silent:!0});if(m.exitCode===0)try{p=O(m.stdout.replace(/\n$/,""),i)}catch($){w=!0,e.warn(`Skipping PR body update for #${a[0].number} — protected-content blocks are unbalanced, refusing to overwrite operator content. Please clean up markers manually. Cause: ${$.message}`)}}catch(m){e.warn(`Could not read existing body of PR #${a[0].number} for protected-edit merge: ${m.message}. Proceeding with the unmerged body.`)}const v=w?["pr","edit",String(a[0].number),"--title",n]:["pr","edit",String(a[0].number),"--title",n,"--body",p],b=await r.run("gh",v,{cwd:s,silent:!0});if(b.exitCode!==0)throw new Error(`gh pr edit #${a[0].number} failed: ${b.stderr.trim()}`);return{existing:!0,number:a[0].number}}}catch{}const l=await r.run("gh",["pr","create","--head",o,"--base",t,"--title",n,"--body",i],{cwd:s,silent:!0});if(l.exitCode!==0)return;const d=/\/pull\/(\d+)/.exec(l.stdout);return d?{existing:!1,number:Number.parseInt(d[1]??"0",10)}:void 0},G=async(r,e,s,o)=>{const n=o.labels??["autorelease: pending"];n.length>0&&await r.run("gh",["pr","edit",String(s),...n.flatMap(i=>["--add-label",i])],{cwd:e,silent:!0}),o.reviewers&&o.reviewers.length>0&&await r.run("gh",["pr","edit",String(s),"--add-reviewer",o.reviewers.join(",")],{cwd:e,silent:!0}),o.assignees&&o.assignees.length>0&&await r.run("gh",["pr","edit",String(s),"--add-assignee",o.assignees.join(",")],{cwd:e,silent:!0})},X=async({fs:r,logger:e,options:s,workspaceRoot:o})=>{const n=o??process.cwd(),i=I(),t=await k({channel:s.channel,cwd:n}),{printConfigIfRequested:u}=await import("./print-config.js");if(u(s,t,e))return;const l=s.autoPublish===!0?"auto-publish":t.channel?.mode??"auto-publish";if(await F({cwd:n,runner:i})){e.warn("Working tree has uncommitted changes. CI mode requires a clean tree."),process.exitCode=1;return}const{files:d}=await S({changesDir:t.config.changesDir,cwd:n});if(l==="auto-publish"){if(d.length===0){e.info("No pending change files. Nothing to release.");return}e.info(`Auto-publish mode — versioning + publishing ${t.plan.releases.length} package(s).`),await C(t,{commit:!0});const c=await x(t,{resume:!0,tag:t.channel?.tag}),h=await N({cwd:n,runner:i});if(h)try{await P({cwd:n,runner:i},h)}catch(f){e.error(`Failed to push branch: ${f.message}`)}e.info(`Published: ${c.published.length} | Skipped: ${c.skipped.length} | Failed: ${c.failed.length}`),process.exitCode=c.failed.length>0?2:0;return}if(d.length===0){const c=t.config.changesDir??R,h=await _(r,n,c);h?e.info("No pending change files but `.state.json` is present — resuming the prior wave's publish."):e.info("No pending change files — assuming this push is a merged release PR. Publishing.");const f=await x(t,{resume:h,tag:t.channel?.tag});e.info(`Published: ${f.published.length} | Skipped: ${f.skipped.length} | Failed: ${f.failed.length}`),process.exitCode=f.failed.length>0?2:0;return}e.info(`Version-PR mode — maintaining release PR for ${t.plan.releases.length} package(s).`);const a=s.branch??t.config.versionPr?.branch??"vis-release/version-packages",p=t.config.versionPr?.title??"🚀 Versioned release";if(!await D(i,n)){e.error("Could not detect repository slug via gh CLI. Cannot maintain version PR."),process.exitCode=1;return}const w=await i.run("git",["switch","-C",a],{cwd:n,silent:!0});if(w.exitCode!==0){e.error(`Could not switch to ${a}: ${w.stderr}`),process.exitCode=1;return}const v=await C(t,{commit:!1}),b=[...v.changedFiles,...v.deletedFiles];if(b.length===0){e.warn("Apply produced no file changes. Aborting version PR.");return}await A({cwd:n,runner:i},b,t.config.gitUser?`release(${t.channel?.tag??"main"}): version packages [skip ci]`:"release: version packages [skip ci]",{author:t.config.gitUser});try{await P({cwd:n,runner:i},a,{force:!0})}catch(c){e.error(`Could not push ${a}: ${c.message}`),process.exitCode=1;return}const m=t.branch??t.config.baseBranch??"main",$=`${t.config.versionPr?.preamble??""}
+`},q=async(s,e,i)=>{try{return await s.access(D(e,i)),!0}catch{return!1}},K=async(s,e,i,o,n,r,t)=>{const l=await s.run("gh",["pr","list","--head",o,"--state","open","--json","number"],{cwd:i,silent:!0});if(l.exitCode===0&&l.stdout.trim()!==""&&l.stdout.trim()!=="[]")try{const a=JSON.parse(l.stdout);if(a[0]){let g=r,w=!1;try{const m=await s.run("gh",["pr","view",String(a[0].number),"--json","body","-q",".body"],{cwd:i,silent:!0});if(m.exitCode===0)try{g=T(m.stdout.replace(/\n$/,""),r)}catch(C){w=!0,e.warn(`Skipping PR body update for #${a[0].number} — protected-content blocks are unbalanced, refusing to overwrite operator content. Please clean up markers manually. Cause: ${C.message}`)}}catch(m){e.warn(`Could not read existing body of PR #${a[0].number} for protected-edit merge: ${m.message}. Proceeding with the unmerged body.`)}const v=w?["pr","edit",String(a[0].number),"--title",n]:["pr","edit",String(a[0].number),"--title",n,"--body",g],b=await s.run("gh",v,{cwd:i,silent:!0});if(b.exitCode!==0)throw new Error(`gh pr edit #${a[0].number} failed: ${b.stderr.trim()}`);return{existing:!0,number:a[0].number}}}catch{}const u=await s.run("gh",["pr","create","--head",o,"--base",t,"--title",n,"--body",r],{cwd:i,silent:!0});if(u.exitCode!==0)return;const d=/\/pull\/(\d+)/.exec(u.stdout);return d?{existing:!1,number:Number.parseInt(d[1]??"0",10)}:void 0},G=async(s,e,i,o)=>{const n=o.labels??["autorelease: pending"];n.length>0&&await s.run("gh",["pr","edit",String(i),...n.flatMap(r=>["--add-label",r])],{cwd:e,silent:!0}),o.reviewers&&o.reviewers.length>0&&await s.run("gh",["pr","edit",String(i),"--add-reviewer",o.reviewers.join(",")],{cwd:e,silent:!0}),o.assignees&&o.assignees.length>0&&await s.run("gh",["pr","edit",String(i),"--add-assignee",o.assignees.join(",")],{cwd:e,silent:!0})},Y=async({fs:s,logger:e,options:i,workspaceRoot:o})=>{const n=o??process.cwd(),r=I(),t=await k({channel:i.channel,cwd:n}),{printConfigIfRequested:l}=await import("./print-config.js");if(l(i,t,e))return;const u=i.autoPublish===!0?"auto-publish":t.channel?.mode??"auto-publish";if(await E({cwd:n,runner:r})){e.warn("Working tree has uncommitted changes. CI mode requires a clean tree."),process.exitCode=1;return}const{files:d}=await A({changesDir:t.config.changesDir,cwd:n});if(u==="auto-publish"){if(d.length===0){e.info("No pending change files. Nothing to release.");return}e.info(`Auto-publish mode — versioning + publishing ${t.plan.releases.length} package(s).`),await $(t,{commit:!0});const c=await P(t,{resume:!0,tag:t.channel?.tag}),p=await F({cwd:n,runner:r});if(p)try{await x({cwd:n,runner:r},p)}catch(f){e.error(`Failed to push branch: ${f.message}`)}e.info(`Published: ${c.published.length} | Skipped: ${c.skipped.length} | Failed: ${c.failed.length}`),process.exitCode=c.failed.length>0?2:0;return}if(d.length===0){const c=t.config.changesDir??S,p=await q(s,n,c);p?e.info("No pending change files but `.state.json` is present — resuming the prior wave's publish."):e.info("No pending change files — assuming this push is a merged release PR. Publishing.");const f=await P(t,{resume:p,tag:t.channel?.tag});e.info(`Published: ${f.published.length} | Skipped: ${f.skipped.length} | Failed: ${f.failed.length}`),process.exitCode=f.failed.length>0?2:0;return}e.info(`Version-PR mode — maintaining release PR for ${t.plan.releases.length} package(s).`);const a=i.branch??t.config.versionPr?.branch??"vis-release/version-packages",g=t.config.versionPr?.title??"🚀 Versioned release";if(!await O(r,n)){e.error("Could not detect repository slug via gh CLI. Cannot maintain version PR."),process.exitCode=1;return}const v=await r.run("git",["switch","-C",a],{cwd:n,silent:!0});if(v.exitCode!==0){e.error(`Could not switch to ${a}: ${v.stderr}`),process.exitCode=1;return}const b=await $(t,{commit:!1}),m=[...b.changedFiles,...b.deletedFiles];if(m.length===0){e.warn("Apply produced no file changes. Aborting version PR.");return}await N({cwd:n,runner:r},m,t.config.gitUser?`release(${t.channel?.tag??"main"}): version packages [skip ci]`:"release: version packages [skip ci]",{author:t.config.gitUser});try{await x({cwd:n,runner:r},a,{force:!0})}catch(c){e.error(`Could not push ${a}: ${c.message}`),process.exitCode=1;return}const C=t.branch??t.config.baseBranch??"main",y=`${t.config.versionPr?.preamble??""}
 
 ## Pending releases
 
 ${t.plan.releases.map(c=>`- \`${c.name}\`: ${c.oldVersion} → **${c.newVersion}**`).join(`
 `)}
-`,g=await B(i,e,n,a,p,$,m);if(g){if(e.info(`${g.existing?"Updated":"Opened"} version PR #${g.number}.`),await G(i,n,g.number,{assignees:g.existing?void 0:t.config.versionPr?.assignees,labels:t.config.versionPr?.labels,reviewers:g.existing?void 0:t.config.versionPr?.reviewers}),t.config.versionPr?.autoMerge&&!g.existing){const c=t.config.versionPr.autoMergeMethod??"squash",h=await i.run("gh",["pr","merge",String(g.number),"--auto",`--${c}`],{cwd:n,silent:!0});h.exitCode===0?e.info(`Auto-merge enabled (${c}).`):e.warn(`Could not enable auto-merge on PR #${g.number}: ${h.stderr.trim()||`exit ${h.exitCode}`}`)}}else e.error("Failed to create / update version PR."),process.exitCode=1};export{X as default};
+`,h=await K(r,e,n,a,g,y,C);if(h){if(e.info(`${h.existing?"Updated":"Opened"} version PR #${h.number}.`),await G(r,n,h.number,{assignees:h.existing?void 0:t.config.versionPr?.assignees,labels:t.config.versionPr?.labels,reviewers:h.existing?void 0:t.config.versionPr?.reviewers}),t.config.versionPr?.autoMerge&&!h.existing){const c=t.config.versionPr.autoMergeMethod??"squash",p=await r.run("gh",["pr","merge",String(h.number),"--auto",`--${c}`],{cwd:n,silent:!0});p.exitCode===0?e.info(`Auto-merge enabled (${c}).`):e.warn(`Could not enable auto-merge on PR #${h.number}: ${p.stderr.trim()||`exit ${p.exitCode}`}`)}}else e.error("Failed to create / update version PR."),process.exitCode=1};export{Y as default};

package/dist/packem_chunks/handler57.js

@@ -1,11 +1,11 @@
-import{createRequire as I}from"node:module";import{b as E}from"./orchestrator.js";let S;const U=e=>(S??=I(import.meta.url))(e),b=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,C=e=>{if(typeof b<"u"&&b.versions&&b.versions.node){const[r,t]=b.versions.node.split(".").map(Number);if(r>22||r===22&&t>=3||r===20&&t>=16)return b.getBuiltinModule(e)}return U(e)},{mkdtemp:M,writeFile:P,rm:N,readdir:D,readFile:O}=C("node:fs/promises"),{tmpdir:q}=C("node:os"),{join:v}=C("node:path"),A="https://www.npmjs.com",_=(e,r)=>r&&!/registry\.npmjs\.org/.test(r)?void 0:`${A}/package/${encodeURIComponent(e)}/access`,F=e=>`# ${e}
+import{createRequire as S}from"node:module";import{b as I}from"./orchestrator.js";let U;const j=e=>(U??=S(import.meta.url))(e),w=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,C=e=>{if(typeof w<"u"&&w.versions&&w.versions.node){const[t,r]=w.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return w.getBuiltinModule(e)}return j(e)},{mkdtemp:F,writeFile:_,rm:D,readdir:M,readFile:N}=C("node:fs/promises"),{tmpdir:A}=C("node:os"),{join:g}=C("node:path"),O="https://www.npmjs.com",P=(e,t)=>t&&!/registry\.npmjs\.org/.test(t)?void 0:`${O}/package/${encodeURIComponent(e)}/access`,q=e=>`# ${e}
 
 > ⚠️ **Placeholder package — do not use.**
 
 This version contains **no code** and is **not functional**. It was published by [\`vis release pretrust\`](https://visulima.com/packages/vis) only to register the package name on the registry so that **npm Trusted Publishing (OIDC)** can be configured before the first real release.
 
 Do **not** add this as a dependency. A functional version will replace it when the package is first released.
-`,B=(e,r,t,n)=>{const i={description:"Placeholder published by `vis release pretrust` to enable npm trusted publishing (OIDC). Not functional — do not use.",files:["README.md"],license:typeof e.manifest.license=="string"?e.manifest.license:"MIT",name:r,publishConfig:{access:n},version:t};return e.manifest.repository!==void 0&&(i.repository=e.manifest.repository),i},L=(e,r)=>{const t=["trust",r.provider,e,"--file",r.workflow];return r.repo&&t.push(r.provider==="gitlab"?"--project":"--repo",r.repo),r.env&&t.push("--env",r.env),t.push("--allow-publish"),r.allowStagePublish&&t.push("--allow-stage-publish"),t.push("-y"),t},T=(e,r)=>{if(e.includes("gitlab"))return{provider:"gitlab",repo:r};if(e.includes("github"))return{provider:"github",repo:r}},W=e=>{const r=e.trim().replace(/\.git$/,"");if(r.startsWith("ssh://"))try{const n=new URL(r);return T(n.hostname,n.pathname.replace(/^\/+/,""))}catch{return}const t=/(?:https?:\/\/|git@)([^/:]+)[/:](\S+)/.exec(r);if(t)return T(t[1]??"",t[2]??"")},H=async(e,r)=>{try{const t=await e.run("git",["config","--get","remote.origin.url"],{cwd:r,silent:!0});return t.exitCode!==0?void 0:W(t.stdout.trim())}catch{return}},J=async(e,r)=>{if(r==="gitlab")return".gitlab-ci.yml";const t=v(e,".github","workflows");let n;try{n=await D(t)}catch{return}const i=n.filter(u=>/\.ya?ml$/.test(u)),l=[];for(const u of i)try{const h=await O(v(t,u),"utf8");/vis\s+release/.test(h)&&/publish/.test(h)&&l.push(u)}catch{}if(l.length===1)return l[0];if(l.length>1)return;const c=i.filter(u=>/release/i.test(u));return c.length===1?c[0]:void 0},z=async(e,r,t,n,i)=>{const l=L(t,n);i&&l.push("--registry",i);try{const c=await e.run("npm",l,{cwd:r,silent:!0});return c.exitCode===0?{trusted:!0}:{reason:`${c.stdout}
-${c.stderr}`.trim()||`npm trust exited ${c.exitCode}`,trusted:!1}}catch(c){return{reason:c.message,trusted:!1}}},G=async(e,r,t,n)=>{const i=["view",r,"version","--silent"];n&&i.push("--registry",n);try{const l=await e.run("npm",i,{cwd:t,silent:!0});return l.exitCode===0&&l.stdout.trim().length>0}catch{return!1}},K=async e=>{const{context:r,dryRun:t=!1,force:n=!1,registry:i}=e,l=e.access??"public",c=e.tag??"placeholder",u=e.version??"0.0.0",{createShellRunner:h}=await import("./shell-runner.js"),a=e.runner??h();let g=r.packages.filter(o=>!o.private);if(e.filter){const{default:o}=await import("./index.js"),p=e.filter.split(",").map(d=>d.trim()).filter(Boolean);g=g.filter(d=>p.some(w=>d.name===w||o(w,d.name)))}const m=[],s=[],k=[],j=e.trust!==!1&&!t;let x,y;if(j){const o=e.provider&&e.repo?{provider:e.provider,repo:e.repo}:await H(a,r.cwd),p=e.provider??o?.provider;if(p){const d=e.workflow??await J(r.cwd,p);d?x={allowStagePublish:e.allowStagePublish,env:e.env,provider:p,repo:e.repo??o?.repo,workflow:d}:y="could not find a release workflow file (pass --workflow)"}else y="could not detect a github/gitlab remote (pass --provider + --repo)"}for(const o of g){if(!n&&await G(a,o.name,r.cwd,i)){s.push({name:o.name,reason:"already-on-registry"});continue}if(t){m.push({accessUrl:_(o.name,i),name:o.name,version:u});continue}let p;try{p=await M(v(q(),"vis-pretrust-"));const d=B(o,o.name,u,l);await P(v(p,"package.json"),`${JSON.stringify(d,null,2)}
-`),await P(v(p,"README.md"),F(o.name));const w=["publish","--tag",c,"--access",l];i&&w.push("--registry",i);const $=await a.run("npm",w,{cwd:p,silent:!0});if($.exitCode===0){const f={accessUrl:_(o.name,i),name:o.name,version:u};if(x){const R=await z(a,r.cwd,o.name,x,i);f.trusted=R.trusted,R.trusted||(f.trustReason=R.reason)}else y&&(f.trusted=!1,f.trustReason=y);m.push(f)}else{const f=`${$.stdout}
-${$.stderr}`;/EPUBLISHCONFLICT|cannot publish over|previously published/i.test(f)?s.push({name:o.name,reason:"already-on-registry"}):k.push({name:o.name,reason:f.trim()||`npm publish exited ${$.exitCode}`})}}catch(d){k.push({name:o.name,reason:d.message})}finally{p&&await N(p,{force:!0,recursive:!0}).catch(()=>{})}}return{failed:k,published:m,skipped:s}},X=async({logger:e,options:r,workspaceRoot:t})=>{const n=t??process.cwd(),i=r.dryRun===!0;if(r.access!==void 0&&r.access!=="public"&&r.access!=="restricted"){e.error(`Invalid --access value: "${r.access}". Expected "public" or "restricted".`),process.exitCode=1;return}if(r.provider!==void 0&&r.provider!=="github"&&r.provider!=="gitlab"){e.error(`Invalid --provider value: "${r.provider}". Expected "github" or "gitlab".`),process.exitCode=1;return}const l=r.access??"public",{provider:c}=r,u=await E({cwd:n}),{printConfigIfRequested:h}=await import("./print-config.js");if(h(r,u,e))return;let a;try{a=await K({access:l,allowStagePublish:r.allowStagePublish===!0,context:u,dryRun:i,env:r.env,filter:r.filter,force:r.force===!0,provider:c,registry:r.registry,repo:r.repo,tag:r.tag,trust:r.noTrust!==!0,version:r.version,workflow:r.workflow})}catch(s){e.error(`Pretrust failed: ${s.message}`),process.exitCode=1;return}for(const s of a.published)e.info(`  ${i?"[dry-run]   ":"[published]"} ${s.name}@${s.version}`),!i&&(s.trusted===!0?e.info("              ✓ trusted publisher configured (npm trust)"):s.trustReason?(e.warn(`              ⚠ trust not configured: ${s.trustReason}`),s.accessUrl&&e.info(`                finish manually → ${s.accessUrl}`)):s.accessUrl&&e.info(`              configure trusted publishing → ${s.accessUrl}`));for(const s of a.skipped)e.info(`  [skipped]   ${s.name} (${s.reason})`);for(const s of a.failed)e.error(`  [failed]    ${s.name}: ${s.reason}`);const g=a.published.filter(s=>s.trusted===!0).length,m=a.published.filter(s=>s.trusted===!1).length;e.info(""),e.info(`Placeholders: ${a.published.length} | Trusted: ${g} | Skipped: ${a.skipped.length} | Failed: ${a.failed.length}`),a.published.length>0&&!i&&(e.info(""),m>0?e.info("Next: finish trusted-publisher setup for the packages above (the first `npm trust` call may need a 2FA OTP), then run `vis release publish`."):e.info("Next: run `vis release publish` — trusted publishing is configured.")),process.exitCode=a.failed.length>0?2:0};export{X as default};
+`,B=(e,t,r,a)=>{const i={description:"Placeholder published by `vis release pretrust` to enable npm trusted publishing (OIDC). Not functional — do not use.",files:["README.md"],license:typeof e.manifest.license=="string"?e.manifest.license:"MIT",name:t,publishConfig:{access:a},version:r};return e.manifest.repository!==void 0&&(i.repository=e.manifest.repository),i},L=(e,t)=>{const r=["trust",t.provider,e,"--file",t.workflow];return t.repo&&r.push(t.provider==="gitlab"?"--project":"--repo",t.repo),t.env&&r.push("--env",t.env),r.push("--allow-publish"),t.allowStagePublish&&r.push("--allow-stage-publish"),r.push("-y"),r},T=(e,t)=>{if(e.includes("gitlab"))return{provider:"gitlab",repo:t};if(e.includes("github"))return{provider:"github",repo:t}},W=e=>{const t=e.trim().replace(/\.git$/,"");if(t.startsWith("ssh://"))try{const a=new URL(t);return T(a.hostname,a.pathname.replace(/^\/+/,""))}catch{return}const r=/(?:https?:\/\/|git@)([^/:]+)[/:](\S+)/.exec(t);if(r)return T(r[1]??"",r[2]??"")},H=async(e,t)=>{try{const r=await e.run("git",["config","--get","remote.origin.url"],{cwd:t,silent:!0});return r.exitCode!==0?void 0:W(r.stdout.trim())}catch{return}},z=async(e,t)=>{if(t==="gitlab")return".gitlab-ci.yml";const r=g(e,".github","workflows");let a;try{a=await M(r)}catch{return}const i=a.filter(u=>/\.ya?ml$/.test(u)),c=[];for(const u of i)try{const h=await N(g(r,u),"utf8");/vis\s+release/.test(h)&&/publish/.test(h)&&c.push(u)}catch{}if(c.length===1)return c[0];if(c.length>1)return;const l=i.filter(u=>/release/i.test(u));return l.length===1?l[0]:void 0},G=async(e,t,r,a,i)=>{const c=L(r,a);i&&c.push("--registry",i);try{const l=await e.run("npm",c,{cwd:t,silent:!0});return l.exitCode===0?{trusted:!0}:{reason:`${l.stdout}
+${l.stderr}`.trim()||`npm trust exited ${l.exitCode}`,trusted:!1}}catch(l){return{reason:l.message,trusted:!1}}},J=async(e,t,r,a)=>{const i=["view",t,"version","--silent"];a&&i.push("--registry",a);try{const c=await e.run("npm",i,{cwd:r,silent:!0});return c.exitCode===0&&c.stdout.trim().length>0}catch{return!1}},Y=async e=>{const{context:t,dryRun:r=!1,force:a=!1,registry:i}=e,c=e.access??"public",l=e.tag??"placeholder",u=e.version??"0.0.0",{createShellRunner:h}=await import("./shell-runner.js"),o=e.runner??h();let m=t.packages.filter(n=>!n.private);if(e.filter){const{default:n}=await import("./index.js"),d=e.filter.split(",").map(f=>f.trim()).filter(Boolean);m=m.filter(f=>d.some(b=>f.name===b||n(b,f.name)))}const v=[],s=[],R=[],E=e.trust!==!1&&!r;let x,y;if(E){const n=e.provider&&e.repo?{provider:e.provider,repo:e.repo}:await H(o,t.cwd),d=e.provider??n?.provider;if(d){const f=e.workflow??await z(t.cwd,d);f?x={allowStagePublish:e.allowStagePublish,env:e.env,provider:d,repo:e.repo??n?.repo,workflow:f}:y="could not find a release workflow file (pass --workflow)"}else y="could not detect a github/gitlab remote (pass --provider + --repo)"}for(const n of m){if(!a&&await J(o,n.name,t.cwd,i)){s.push({name:n.name,reason:"already-on-registry"});continue}if(r){v.push({accessUrl:P(n.name,i),name:n.name,version:u});continue}let d;try{d=await F(g(A(),"vis-pretrust-"));const f=B(n,n.name,u,c);await _(g(d,"package.json"),`${JSON.stringify(f,null,2)}
+`),await _(g(d,"README.md"),q(n.name));const b=["publish","--tag",l,"--access",c];i&&b.push("--registry",i);const $=await o.run("npm",b,{cwd:d,silent:!0});if($.exitCode===0){const p={accessUrl:P(n.name,i),name:n.name,version:u};if(x){const k=await G(o,t.cwd,n.name,x,i);p.trusted=k.trusted,k.trusted||(p.trustReason=k.reason)}else y&&(p.trusted=!1,p.trustReason=y);v.push(p)}else{const p=`${$.stdout}
+${$.stderr}`;/EPUBLISHCONFLICT|cannot publish over|previously published/i.test(p)?s.push({name:n.name,reason:"already-on-registry"}):R.push({name:n.name,reason:p.trim()||`npm publish exited ${$.exitCode}`})}}catch(f){R.push({name:n.name,reason:f.message})}finally{d&&await D(d,{force:!0,recursive:!0}).catch(()=>{})}}return{failed:R,published:v,skipped:s}},V=async({logger:e,options:t,workspaceRoot:r})=>{const a=r??process.cwd(),i=t.dryRun===!0;if(t.access!==void 0&&t.access!=="public"&&t.access!=="restricted"){e.error(`Invalid --access value: "${t.access}". Expected "public" or "restricted".`),process.exitCode=1;return}if(t.provider!==void 0&&t.provider!=="github"&&t.provider!=="gitlab"){e.error(`Invalid --provider value: "${t.provider}". Expected "github" or "gitlab".`),process.exitCode=1;return}const c=t.access??"public",{provider:l}=t,u=await I({cwd:a}),{printConfigIfRequested:h}=await import("./print-config.js");if(h(t,u,e))return;let o;try{o=await Y({access:c,allowStagePublish:t.allowStagePublish===!0,context:u,dryRun:i,env:t.env,filter:t.filter,force:t.force===!0,provider:l,registry:t.registry,repo:t.repo,tag:t.tag,trust:t.noTrust!==!0,version:t.version,workflow:t.workflow})}catch(s){e.error(`Pretrust failed: ${s.message}`),process.exitCode=1;return}for(const s of o.published)e.info(`  ${i?"[dry-run]   ":"[published]"} ${s.name}@${s.version}`),!i&&(s.trusted===!0?e.info("              ✓ trusted publisher configured (npm trust)"):s.trustReason?(e.warn(`              ⚠ trust not configured: ${s.trustReason}`),s.accessUrl&&e.info(`                finish manually → ${s.accessUrl}`)):s.accessUrl&&e.info(`              configure trusted publishing → ${s.accessUrl}`));for(const s of o.skipped)e.info(`  [skipped]   ${s.name} (${s.reason})`);for(const s of o.failed)e.error(`  [failed]    ${s.name}: ${s.reason}`);const m=o.published.filter(s=>s.trusted===!0).length,v=o.published.filter(s=>s.trusted===!1).length;e.info(""),e.info(`Placeholders: ${o.published.length} | Trusted: ${m} | Skipped: ${o.skipped.length} | Failed: ${o.failed.length}`),o.published.length>0&&!i&&(e.info(""),v>0?e.info("Next: finish trusted-publisher setup for the packages above (the first `npm trust` call may need a 2FA OTP), then run `vis release publish`."):e.info("Next: run `vis release publish` — trusted publishing is configured.")),process.exitCode=o.failed.length>0?2:0};export{V as default};