@visulima/vis 3.0.0 → 3.0.1

package/dist/packem_chunks/defineReleasePlugin.js

@@ -1,3 +1,3 @@
-const e=s=>s.config.plugins??[],i=async(s,a)=>{for(const l of e(s))l.applyDraft&&await l.applyDraft({...s,plan:a})},t=async(s,a)=>{for(const l of e(s))if(l.willPublish&&await l.willPublish({...s,package:a})===!1)return{by:l.name,skip:!0};return{skip:!1}},n=async(s,a)=>{for(const l of e(s))if(l.afterPublish)try{await l.afterPublish({...s,package:a})}catch(r){process.stderr.write(`[vis release] plugin "${l.name}" afterPublish(${a.name}) failed: ${r.message}
-`)}},f=async(s,a)=>{for(const l of e(s))if(l.afterPublishAll)try{await l.afterPublishAll({...s,result:a})}catch(r){process.stderr.write(`[vis release] plugin "${l.name}" afterPublishAll failed: ${r.message}
-`)}},o=s=>s;export{o as defineReleasePlugin,f as runAfterPublishAllHooks,n as runAfterPublishHooks,i as runApplyDraftHooks,t as runWillPublishHooks};
+const l=s=>s.config.plugins??[],a=async(s,i)=>{for(const e of l(s))e.applyDraft&&await e.applyDraft({...s,plan:i})},n=async(s,i)=>{for(const e of l(s)){if(!e.willPublish)continue;if(await e.willPublish({...s,package:i})===!1)return{by:e.name,skip:!0}}return{skip:!1}},t=async(s,i)=>{for(const e of l(s))if(e.afterPublish)try{await e.afterPublish({...s,package:i})}catch(r){process.stderr.write(`[vis release] plugin "${e.name}" afterPublish(${i.name}) failed: ${r.message}
+`)}},o=async(s,i)=>{for(const e of l(s))if(e.afterPublishAll)try{await e.afterPublishAll({...s,result:i})}catch(r){process.stderr.write(`[vis release] plugin "${e.name}" afterPublishAll failed: ${r.message}
+`)}},f=s=>s;export{f as defineReleasePlugin,o as runAfterPublishAllHooks,t as runAfterPublishHooks,a as runApplyDraftHooks,n as runWillPublishHooks};

package/dist/packem_chunks/detect.js

@@ -1,3 +1,8 @@
-import{createRequire as N}from"node:module";import S from"./index.js";import{VisReleaseError as u}from"../packem_shared/VisReleaseError-DMGRBTNO.js";let A;const x=o=>(A??=N(import.meta.url))(o),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,v=o=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[t,e]=h.versions.node.split(".").map(Number);if(t>22||t===22&&e>=3||t===20&&e>=16)return h.getBuiltinModule(o)}return x(o)},{readFile:b,rename:L,readdir:_}=v("node:fs/promises"),{isAbsolute:k,join:c,basename:C}=v("node:path");class m{constructor(t){this.runner=t}runner;async publishNative(t){throw new u({code:"CONFIG_INVALID",hint:'Set publish.publishStrategy back to "npm-publish-tarball" (the default), or use a package manager whose adapter implements native publish.',message:`publishStrategy "native" is not supported by the "${this.id}" adapter.`})}async readCatalogYaml(t){}}const f=(o,t)=>{if(o.exitCode===0)return{output:o.stdout,published:!0};const e=`${o.stdout}
-${o.stderr}`;if(/EPUBLISHCONFLICT|cannot publish over the previously published versions|forbidden.*409/i.test(e))return{alreadyPublished:!0,output:e,published:!1};throw new u({code:"PUBLISH_FAILED",message:`${t} failed: ${e}`})};class g extends m{id="npm";minVersion="11.5.1";async pack(t){const e=["pack","--json"];t.destination&&e.push("--pack-destination",t.destination);const s=await this.runner.run("npm",e,{cwd:t.cwd,silent:!0});if(s.exitCode!==0)throw new u({code:"PUBLISH_FAILED",message:`npm pack failed: ${s.stderr||s.stdout}`});const a=JSON.parse(s.stdout),n=a[0]?.filename;if(!n)throw new u({code:"PUBLISH_FAILED",hint:"Upgrade npm to a version that emits --json output, or report this with the raw stdout.",message:`npm pack: could not parse output: ${s.stdout}`});const r=t.destination??t.cwd;let i=k(n)?n:c(r,n);return t.filename&&(await(await import("node:fs/promises")).rename(i,c(r,t.filename)),i=c(r,t.filename)),{raw:a,tarball:i}}async installLockfileOnly(t){const e=await this.runner.run("npm",["install","--package-lock-only"],{cwd:t.cwd,silent:t.silent});if(e.exitCode!==0)throw new u({code:"CONFIG_INVALID",message:`npm install --package-lock-only failed: ${e.stderr||e.stdout}`})}async listWorkspacePackages(t){const e=await this.runner.run("npm",["query",".workspace","--json"],{cwd:t,silent:!0});if(e.exitCode!==0)return[];try{return JSON.parse(e.stdout).filter(s=>typeof s.name=="string").map(s=>({name:s.name,path:s.path??s.location??t,private:s.private??!1,version:s.version??"0.0.0"}))}catch{return[]}}async publish(t){const e=t.stage?["stage","publish",t.tarball]:["publish",t.tarball];t.tag&&e.push("--tag",t.tag),t.access&&e.push("--access",t.access),t.registry&&e.push("--registry",t.registry),t.otp&&e.push("--otp",t.otp),t.provenance&&e.push("--provenance"),t.stage&&e.push("--json");for(const n of t.extraArgs??[])e.push(n);const s=await this.runner.run("npm",e,{cwd:process.cwd(),silent:!0});if(s.exitCode===0){const n={output:s.stdout,published:!0};if(t.stage)try{const r=JSON.parse(s.stdout);n.stageId=r.id??r.stageId}catch{}return n}const a=`${s.stdout}
-${s.stderr}`;if(/EPUBLISHCONFLICT|cannot publish over the previously published versions|forbidden.*409/i.test(a))return{alreadyPublished:!0,output:a,published:!1};throw new u({code:"PUBLISH_FAILED",message:`npm publish failed: ${a}`})}async publishNative(t){const e=["publish"];t.tag&&e.push("--tag",t.tag),t.access&&e.push("--access",t.access),t.registry&&e.push("--registry",t.registry),t.otp&&e.push("--otp",t.otp),t.provenance&&e.push("--provenance");for(const a of t.extraArgs??[])e.push(a);const s=await this.runner.run("npm",e,{cwd:t.cwd,silent:!0});return f(s,"npm publish")}async detectVersion(t){const e=await this.runner.run("npm",["--version"],{cwd:t,silent:!0});return e.exitCode===0?e.stdout.trim():void 0}}class O extends m{id="bun";minVersion="1.1.36";async pack(t){const e=["pm","pack"];t.destination&&e.push("--destination",t.destination);const s=await this.runner.run("bun",e,{cwd:t.cwd,silent:!0});if(s.exitCode!==0)throw new u({code:"PUBLISH_FAILED",message:`bun pm pack failed: ${s.stderr||s.stdout}`});const a=/(?:^|["'\s])([^\s"']*\.tgz)/m.exec(s.stdout),n=t.destination??t.cwd;let r;if(a?.[1]){const i=a[1];r=k(i)?i:c(n,i)}else{const i=JSON.parse(await b(c(t.cwd,"package.json"),"utf8")),d=(i.name??"package").replaceAll("/","-").replace(/^@/,"");r=c(n,`${d}-${i.version??"0.0.0"}.tgz`)}if(t.filename&&C(r)!==t.filename){const i=c(n,t.filename);await L(r,i),r=i}return{raw:s.stdout,tarball:r}}async installLockfileOnly(t){const e=await this.runner.run("bun",["install","--lockfile-only"],{cwd:t.cwd,silent:t.silent});if(e.exitCode!==0)throw new u({code:"CONFIG_INVALID",message:`bun install --lockfile-only failed: ${e.stderr||e.stdout}`})}async listWorkspacePackages(t){try{const e=JSON.parse(await b(c(t,"package.json"),"utf8")),s=Array.isArray(e.workspaces)?e.workspaces:e.workspaces?.packages??[];if(s.length===0)return[];const a=new Set,n=["."],r=5,i=new Set;for(;n.length>0;){const p=n.shift();if(i.has(p)||(i.add(p),(p==="."?0:p.split("/").length)>r))continue;let w;try{w=await _(c(t,p),{withFileTypes:!0})}catch{continue}for(const l of w){if(!l.isDirectory()||l.name==="node_modules"||l.name.startsWith("."))continue;const y=p==="."?l.name:`${p}/${l.name}`;s.some(I=>S(I,y))&&a.add(y),n.push(y)}}const d=[];for(const p of a){const w=c(t,p,"package.json");try{const l=JSON.parse(await b(w,"utf8"));if(typeof l.name!="string")continue;d.push({name:l.name,path:c(t,p),private:l.private??!1,version:l.version??"0.0.0"})}catch{}}return d}catch{return[]}}async publish(t){return new g(this.runner).publish(t)}async publishNative(t){const e=["publish"];t.tag&&e.push("--tag",t.tag),t.access&&e.push("--access",t.access),t.registry&&e.push("--registry",t.registry);for(const a of t.extraArgs??[])e.push(a);const s=await this.runner.run("bun",e,{cwd:t.cwd,silent:!0});return f(s,"bun publish")}async detectVersion(t){const e=await this.runner.run("bun",["--version"],{cwd:t,silent:!0});return e.exitCode===0?e.stdout.trim():void 0}}class $ extends m{id="pnpm";minVersion="9.5.0";async pack(t){const e=["pack","--json"];t.destination&&e.push("--pack-destination",t.destination);const s=await this.runner.run("pnpm",e,{cwd:t.cwd,silent:!0});if(s.exitCode!==0)throw new u({code:"PUBLISH_FAILED",message:`pnpm pack failed: ${s.stderr||s.stdout}`});const a=JSON.parse(s.stdout),{filename:n}=a;if(!n)throw new u({code:"PUBLISH_FAILED",message:`pnpm pack: could not parse output: ${s.stdout}`});const r=t.destination??t.cwd;let i=k(n)?n:c(r,n);return t.filename&&(await(await import("node:fs/promises")).rename(i,c(r,t.filename)),i=c(r,t.filename)),{raw:a,tarball:i}}async installLockfileOnly(t){const e=await this.runner.run("pnpm",["install","--lockfile-only"],{cwd:t.cwd,silent:t.silent});if(e.exitCode!==0)throw new u({code:"CONFIG_INVALID",message:`pnpm install --lockfile-only failed: ${e.stderr||e.stdout}`})}async listWorkspacePackages(t){const e=await this.runner.run("pnpm",["-r","ls","--depth","-1","--json"],{cwd:t,silent:!0});if(e.exitCode!==0)return[];try{return JSON.parse(e.stdout).filter(s=>typeof s.name=="string").map(s=>({name:s.name,path:s.path??t,private:s.private??!1,version:s.version??"0.0.0"}))}catch{return[]}}async publish(t){return new g(this.runner).publish(t)}async publishNative(t){const e=["publish","--no-git-checks"];t.tag&&e.push("--tag",t.tag),t.access&&e.push("--access",t.access),t.registry&&e.push("--registry",t.registry),t.otp&&e.push("--otp",t.otp),t.provenance&&e.push("--provenance");for(const a of t.extraArgs??[])e.push(a);const s=await this.runner.run("pnpm",e,{cwd:t.cwd,silent:!0});return f(s,"pnpm publish")}async detectVersion(t){const e=await this.runner.run("pnpm",["--version"],{cwd:t,silent:!0});return e.exitCode===0?e.stdout.trim():void 0}async readCatalogYaml(t){const e=await import("node:fs/promises");try{return await e.readFile(c(t,"pnpm-workspace.yaml"),"utf8")}catch{return}}}class j extends m{id="yarn";minVersion="4.0.0";async pack(t){const e=t.destination??t.cwd,s=t.filename??"%s-%v.tgz",a=["pack","--out",c(e,s)],n=await this.runner.run("yarn",a,{cwd:t.cwd,silent:!0});if(n.exitCode!==0)throw new u({code:"PUBLISH_FAILED",message:`yarn pack failed: ${n.stderr||n.stdout}`});const r=await import("node:fs/promises"),i=await import("node:path"),d=JSON.parse(await r.readFile(i.join(t.cwd,"package.json"),"utf8")),p=s.replaceAll("%s",(d.name??"package").replaceAll("/","-").replace(/^@/,"")).replaceAll("%v",d.version??"0.0.0");return{raw:n.stdout,tarball:c(e,p)}}async installLockfileOnly(t){const e=await this.runner.run("yarn",["install","--mode","update-lockfile"],{cwd:t.cwd,silent:t.silent});if(e.exitCode!==0)throw new u({code:"CONFIG_INVALID",message:`yarn install --mode update-lockfile failed: ${e.stderr||e.stdout}`})}async listWorkspacePackages(t){const e=await this.runner.run("yarn",["workspaces","list","--json"],{cwd:t,silent:!0});if(e.exitCode!==0)return[];const s=[];for(const a of e.stdout.split(/\r?\n/)){const n=a.trim();if(n)try{const r=JSON.parse(n);if(typeof r.name!="string"||r.name==="")continue;s.push({name:r.name,path:r.location?c(t,r.location):t,private:!1,version:"0.0.0"})}catch{}}return s}async publish(t){return new g(this.runner).publish(t)}async publishNative(t){const e=["npm","publish"];t.tag&&e.push("--tag",t.tag),t.access&&e.push("--access",t.access),t.provenance&&e.push("--provenance");for(const a of t.extraArgs??[])e.push(a);const s=await this.runner.run("yarn",e,{cwd:t.cwd,silent:!0});return f(s,"yarn npm publish")}async detectVersion(t){const e=await this.runner.run("yarn",["--version"],{cwd:t,silent:!0});return e.exitCode===0?e.stdout.trim():void 0}}const V=async(o,t)=>{const e=await import("node:fs/promises"),s=await import("node:path");try{const n=JSON.parse(await e.readFile(s.join(o,"package.json"),"utf8"));if(typeof n.packageManager=="string"){const r=n.packageManager.indexOf("@"),i=r>0?n.packageManager.slice(0,r):n.packageManager;if(i==="pnpm"||i==="yarn"||i==="bun"||i==="npm")return i}}catch{}const a=async n=>{try{return await e.access(s.join(o,n)),!0}catch{return!1}};return await a("bun.lock")||await a("bun.lockb")?"bun":await a("pnpm-lock.yaml")||await a("pnpm-workspace.yaml")?"pnpm":await a("yarn.lock")?"yarn":"npm"},B=(o,t)=>{switch(o){case"bun":return new O(t);case"pnpm":return new $(t);case"yarn":return new j(t);default:return new g(t)}};export{g as N,B as c,V as d};
+import{createRequire as w}from"node:module";let $;const x=c=>($??=w(import.meta.url))(c),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,O=c=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[t,e]=g.versions.node.split(".").map(Number);if(t>22||t===22&&e>=3||t===20&&e>=16)return g.getBuiltinModule(c)}return x(c)},{basename:P}=O("node:path"),R=c=>{const t=[],e=[];for(const r of c??[]){if(typeof r=="string"){t.push(r);continue}if(r.path){const a=r.label??r.name;t.push(a?`${r.path}#${a}`:r.path)}else if(r.linkUrl){const a=r.label??r.name??r.linkUrl;e.push(`- [${a}](${r.linkUrl})`)}}return{linkAppendix:e.length>0?`
+
+### Additional links
+
+${e.join(`
+`)}`:"",paths:t}},k=(c,t)=>{if(c!==0)return[];try{return JSON.parse(t).filter(s=>typeof s.body=="string").map(s=>({body:s.body??"",id:s.id}))}catch{return[]}};class C{id="github";host;httpProxy;constructor(t={}){this.host=t.host,this.httpProxy=t.httpProxy}runOpts(t){if(!this.host&&!this.httpProxy)return{cwd:t,silent:!0};const e={...process.env};return this.host&&(e.GH_HOST=this.host),this.httpProxy&&(e.HTTPS_PROXY=this.httpProxy,e.HTTP_PROXY=this.httpProxy),{cwd:t,env:e,silent:!0}}async listRecentReleases(t,e){const s=Math.max(1,e.limit),r=e.tagPrefix?Math.min(100,s*4):s,a=await t.run("gh",["release","list","--repo",e.repo,"--limit",String(r),"--json","tagName,url,name"],this.runOpts(e.cwd));if(a.exitCode!==0)return[];let i;try{i=JSON.parse(a.stdout)}catch{return[]}const n=[];for(const u of i)if(!(typeof u.tagName!="string"||typeof u.url!="string")&&!(e.tagPrefix&&!u.tagName.startsWith(e.tagPrefix))&&!(e.excludeTag&&u.tagName===e.excludeTag)&&(n.push({name:u.name??u.tagName,tag:u.tagName,url:u.url}),n.length>=s))break;return n}async detectRepoSlug(t,e){const s=await e.run("gh",["repo","view","--json","nameWithOwner","-q",".nameWithOwner"],this.runOpts(t));if(s.exitCode===0)return s.stdout.trim()||void 0}detectPullRequestNumber(t){const e=t.GITHUB_REF;if(e){const r=/^refs\/pull\/(\d+)\/(?:merge|head)$/.exec(e);if(r?.[1])return Number.parseInt(r[1],10)}const s=t.PR_NUMBER??t.VIS_PR_NUMBER;if(s){const r=Number.parseInt(s,10);return Number.isNaN(r)?void 0:r}}async upsertStickyComment(t,e){const s=await t.run("gh",["api",`repos/${e.repo}/issues/${e.issueNumber}/comments`,"--paginate"],this.runOpts(e.cwd)),a=k(s.exitCode,s.stdout).find(u=>u.body.includes(e.marker)),i=e.body.includes(e.marker)?e.body:`${e.marker}
+${e.body}`;if(a)return(await t.run("gh",["api","-X","PATCH",`repos/${e.repo}/issues/comments/${a.id}`,"-f",`body=${i}`],this.runOpts(e.cwd))).exitCode===0?{created:!1,id:a.id}:void 0;const n=await t.run("gh",["api","-X","POST",`repos/${e.repo}/issues/${e.issueNumber}/comments`,"-f",`body=${i}`],this.runOpts(e.cwd));if(n.exitCode===0)try{return{created:!0,id:JSON.parse(n.stdout).id}}catch{return}}async createRelease(t,e){const{linkAppendix:s,paths:r}=R(e.assets),a=s?`${e.body}${s}`:e.body,i=["release","create",e.tag,"--repo",e.repo,"--title",e.title,"--notes",a];e.draft&&i.push("--draft"),e.prerelease&&i.push("--prerelease"),e.discussionCategory&&i.push("--discussion-category",e.discussionCategory),r.length>0&&i.push(...r);const n=await t.run("gh",i,this.runOpts(e.cwd));if(n.exitCode===0)return{url:n.stdout.trim()||void 0}}async addLabels(t,e){if(e.labels.length===0)return!0;const s=["api","-X","POST",`repos/${e.repo}/issues/${e.issueNumber}/labels`];for(const a of e.labels)s.push("-f",`labels[]=${a}`);return(await t.run("gh",s,this.runOpts(e.cwd))).exitCode===0}async upsertIssue(t,e){const s=await t.run("gh",["issue","list","--repo",e.repo,"--state","open","--search",e.marker,"--json","number,title,url","--limit","20"],this.runOpts(e.cwd));if(s.exitCode===0&&s.stdout.trim()&&s.stdout.trim()!=="[]")try{const d=JSON.parse(s.stdout).find(l=>l.title.includes(e.marker));if(d){const l=["issue","edit",String(d.number),"--repo",e.repo,"--title",e.title,"--body",e.body];return e.labels&&e.labels.length>0&&l.push("--add-label",e.labels.join(",")),e.assignees&&e.assignees.length>0&&l.push("--add-assignee",e.assignees.join(",")),(await t.run("gh",l,this.runOpts(e.cwd))).exitCode===0?{created:!1,number:d.number,url:d.url}:void 0}}catch{}const r=["issue","create","--repo",e.repo,"--title",e.title,"--body",e.body];e.labels&&e.labels.length>0&&r.push("--label",e.labels.join(",")),e.assignees&&e.assignees.length>0&&r.push("--assignee",e.assignees.join(","));const a=await t.run("gh",r,this.runOpts(e.cwd));if(a.exitCode!==0)return;const i=a.stdout.trim(),n=/\/issues\/(\d+)/.exec(i);return n?{created:!0,number:Number.parseInt(n[1]??"0",10),url:i}:void 0}async closeIssue(t,e){return e.closingComment&&await t.run("gh",["issue","comment",String(e.issueNumber),"--repo",e.repo,"--body",e.closingComment],this.runOpts(e.cwd)),(await t.run("gh",["issue","close",String(e.issueNumber),"--repo",e.repo],this.runOpts(e.cwd))).exitCode===0}async upsertPullRequest(t,e){const s=await t.run("gh",["pr","list","--repo",e.repo,"--head",e.head,"--state","open","--json","number,url"],this.runOpts(e.cwd));if(s.exitCode===0&&s.stdout.trim()&&s.stdout.trim()!=="[]")try{const i=JSON.parse(s.stdout);if(i[0])return await t.run("gh",["pr","edit",String(i[0].number),"--repo",e.repo,"--title",e.title,"--body",e.body],this.runOpts(e.cwd)),{existing:!0,number:i[0].number,url:i[0].url}}catch{}const r=await t.run("gh",["pr","create","--repo",e.repo,"--head",e.head,"--base",e.base,"--title",e.title,"--body",e.body],this.runOpts(e.cwd));if(r.exitCode!==0)return;const a=/\/pull\/(\d+)/.exec(r.stdout);return a?{existing:!1,number:Number.parseInt(a[1]??"0",10),url:r.stdout.trim()}:void 0}}const h=c=>encodeURIComponent(c),N=c=>c.replace(/^v(?=\d)/,""),_=c=>{const t=[],e=[],s=[];for(const r of c??[]){if(typeof r=="string"){t.push(r);continue}r.path?r.target==="generic_package"?s.push({label:r.label,linkType:r.type,name:r.name,packageName:r.packageName,packageVersion:r.packageVersion,path:r.path}):t.push(r.path):r.linkUrl&&e.push({linkType:r.type,name:r.label??r.name??r.linkUrl,url:r.linkUrl})}return{genericPackages:s,links:e,uploads:t}};class p{id="gitlab";static recentReleasesWarned=!1;async listRecentReleases(t,e){return p.recentReleasesWarned||(p.recentReleasesWarned=!0,console.warn("[vis release] addReleases is not yet supported on GitLab — skipping the Related releases block.")),[]}host;httpProxy;constructor(t={}){this.host=t.host,this.httpProxy=t.httpProxy}runOpts(t){if(!this.host&&!this.httpProxy)return{cwd:t,silent:!0};const e={...process.env};return this.host&&(e.GITLAB_HOST=this.host),this.httpProxy&&(e.HTTPS_PROXY=this.httpProxy,e.HTTP_PROXY=this.httpProxy),{cwd:t,env:e,silent:!0}}async listMrNotes(t,e,s,r){const a=await t.run("glab",["api",`projects/${h(s)}/merge_requests/${r}/notes`,"--paginate"],this.runOpts(e));if(a.exitCode!==0)return[];try{return JSON.parse(a.stdout).filter(n=>typeof n.body=="string"&&n.system!==!0).map(n=>({body:n.body??"",id:n.id}))}catch{return[]}}async uploadGenericPackage(t,e,s,r,a){const i=h(s),n=P(a.path),u=a.packageName??s.split("/").pop()??"release",d=a.packageVersion??N(r),l=`projects/${i}/packages/generic/${encodeURIComponent(u)}/${encodeURIComponent(d)}/${encodeURIComponent(n)}`;if((await t.run("glab",["api","-X","PUT",l,"--input",a.path],this.runOpts(e))).exitCode!==0)return;const b=this.host?.replace(/^https?:\/\//i,"").replace(/\/+$/,""),m=`${b?`https://${b}`:"https://gitlab.com"}/api/v4/${l}`,y=["api","-X","POST",`projects/${i}/releases/${encodeURIComponent(r)}/assets/links`,"-f",`name=${a.label??a.name??n}`,"-f",`url=${m}`];a.linkType&&y.push("-f",`link_type=${a.linkType}`),await t.run("glab",y,this.runOpts(e))}async detectRepoSlug(t,e){const s=process.env.CI_PROJECT_PATH;if(s)return s;const r=await e.run("git",["config","--get","remote.origin.url"],{cwd:t,silent:!0});if(r.exitCode!==0)return;const a=r.stdout.trim();return/gitlab\.[\w.-]+[/:]([^/].*?)(?:\.git)?$/.exec(a)?.[1]}detectPullRequestNumber(t){const e=t.CI_MERGE_REQUEST_IID??t.VIS_MR_NUMBER;if(!e)return;const s=Number.parseInt(e,10);return Number.isNaN(s)?void 0:s}async upsertStickyComment(t,e){const r=(await this.listMrNotes(t,e.cwd,e.repo,e.issueNumber)).find(u=>u.body.includes(e.marker)),a=e.body.includes(e.marker)?e.body:`${e.marker}
+${e.body}`,i=h(e.repo);if(r)return(await t.run("glab",["api","-X","PUT",`projects/${i}/merge_requests/${e.issueNumber}/notes/${r.id}`,"-f",`body=${a}`],this.runOpts(e.cwd))).exitCode===0?{created:!1,id:r.id}:void 0;const n=await t.run("glab",["api","-X","POST",`projects/${i}/merge_requests/${e.issueNumber}/notes`,"-f",`body=${a}`],this.runOpts(e.cwd));if(n.exitCode===0)try{return{created:!0,id:JSON.parse(n.stdout).id}}catch{return}}async createRelease(t,e){const{genericPackages:s,links:r,uploads:a}=_(e.assets),i=["release","create",e.tag,"--repo",e.repo,"--name",e.title,"--notes",e.body];if(e.milestones&&e.milestones.length>0)for(const l of e.milestones)i.push("--milestone",l);if((await t.run("glab",i,this.runOpts(e.cwd))).exitCode!==0)return;a.length>0&&await t.run("glab",["release","upload",e.tag,"--repo",e.repo,...a],this.runOpts(e.cwd));const u=h(e.repo);for(const l of r){const o=["api","-X","POST",`projects/${u}/releases/${encodeURIComponent(e.tag)}/assets/links`,"-f",`name=${l.name}`,"-f",`url=${l.url}`];l.linkType&&o.push("-f",`link_type=${l.linkType}`),await t.run("glab",o,this.runOpts(e.cwd))}for(const l of s)await this.uploadGenericPackage(t,e.cwd,e.repo,e.tag,l);const d=await t.run("glab",["api",`projects/${u}/releases/${encodeURIComponent(e.tag)}`],this.runOpts(e.cwd));try{return{url:JSON.parse(d.stdout)._links?.self}}catch{return{url:void 0}}}async addLabels(t,e){if(e.labels.length===0)return!0;const s=h(e.repo);return(await t.run("glab",["api","-X","PUT",`projects/${s}/issues/${e.issueNumber}`,"-f",`add_labels=${e.labels.join(",")}`],this.runOpts(e.cwd))).exitCode===0}async upsertIssue(t,e){const s=h(e.repo),r=await t.run("glab",["api",`projects/${s}/issues?state=opened&search=${encodeURIComponent(e.marker)}&in=title`],this.runOpts(e.cwd));if(r.exitCode===0)try{const l=JSON.parse(r.stdout).find(o=>o.title.includes(e.marker));if(l){const o=["api","-X","PUT",`projects/${s}/issues/${l.iid}`,"-f",`title=${e.title}`,"-f",`description=${e.body}`];if(e.labels&&e.labels.length>0&&o.push("-f",`add_labels=${e.labels.join(",")}`),e.assignees?.[0]){const f=await t.run("glab",["api",`users?username=${encodeURIComponent(e.assignees[0])}`],this.runOpts(e.cwd));try{const m=JSON.parse(f.stdout);m[0]&&o.push("-f",`assignee_id=${m[0].id}`)}catch{}}return(await t.run("glab",o,this.runOpts(e.cwd))).exitCode===0?{created:!1,number:l.iid,url:l.web_url}:void 0}}catch{}const a=["issue","create","--repo",e.repo,"--title",e.title,"--description",e.body,"--yes"];e.labels&&e.labels.length>0&&a.push("--label",e.labels.join(",")),e.assignees?.[0]&&a.push("--assignee",e.assignees[0]);const i=await t.run("glab",a,this.runOpts(e.cwd));if(i.exitCode!==0)return;const n=i.stdout.trim(),u=/\/issues\/(\d+)/.exec(n);return u?{created:!0,number:Number.parseInt(u[1]??"0",10),url:n}:void 0}async closeIssue(t,e){if(e.closingComment){const r=h(e.repo);await t.run("glab",["api","-X","POST",`projects/${r}/issues/${e.issueNumber}/notes`,"-f",`body=${e.closingComment}`],this.runOpts(e.cwd))}return(await t.run("glab",["issue","close",String(e.issueNumber),"--repo",e.repo],this.runOpts(e.cwd))).exitCode===0}async upsertPullRequest(t,e){const s=h(e.repo),r=await t.run("glab",["api",`projects/${s}/merge_requests?state=opened&source_branch=${encodeURIComponent(e.head)}&target_branch=${encodeURIComponent(e.base)}`],this.runOpts(e.cwd));if(r.exitCode===0)try{const u=JSON.parse(r.stdout);if(u[0])return(await t.run("glab",["api","-X","PUT",`projects/${s}/merge_requests/${u[0].iid}`,"-f",`title=${e.title}`,"-f",`description=${e.body}`],this.runOpts(e.cwd))).exitCode===0?{existing:!0,number:u[0].iid,url:u[0].web_url}:void 0}catch{}const a=await t.run("glab",["mr","create","--repo",e.repo,"--source-branch",e.head,"--target-branch",e.base,"--title",e.title,"--description",e.body,"--yes"],this.runOpts(e.cwd));if(a.exitCode!==0)return;const i=a.stdout.trim(),n=/\/merge_requests\/(\d+)/.exec(i);return n?{existing:!1,number:Number.parseInt(n[1]??"0",10),url:i}:void 0}}const v=c=>{if(c.GITHUB_ACTIONS==="true"||c.GITHUB_REPOSITORY)return"github";if(c.GITLAB_CI==="true"||c.CI_PROJECT_PATH)return"gitlab"},T=c=>{const t=c.trim();if(t!==""){if(!t.includes("://")){const e=t.indexOf(":"),s=t.indexOf("/");if(e>0&&(s===-1||e<s)){const r=t.slice(0,e),a=r.lastIndexOf("@");return(a===-1?r:r.slice(a+1)).toLowerCase()||void 0}return}try{return new URL(t).hostname.toLowerCase()||void 0}catch{return}}},j=async(c,t)=>{const e=await t.run("git",["config","--get","remote.origin.url"],{cwd:c,silent:!0});if(e.exitCode!==0)return;const s=T(e.stdout);if(s){if(s==="github.com"||s.endsWith(".github.com"))return"github";if(s==="gitlab.com"||s.startsWith("gitlab."))return"gitlab"}},S=async(c,t,e,s=process.env)=>{if(e&&e!=="auto"){if(e==="github"||e==="gitlab")return e;throw new Error(`Unsupported release.provider: ${e}. Expected "github", "gitlab", or "auto".`)}return v(s)??await j(c,t)??"github"},U=(c,t={})=>c==="gitlab"?new p({host:t.gitlabHost,httpProxy:t.httpProxy}):new C({host:t.githubHost,httpProxy:t.httpProxy});export{U as createRemoteClient,S as detectRemoteProvider};

package/dist/packem_chunks/devtools.js

@@ -1,4 +1,4 @@
-import n from"react-devtools-core";const s=async()=>new Promise(t=>{const e=new WebSocket("ws://localhost:8097"),o=setTimeout(()=>{e.close(),t(!1)},2e3);o.unref(),e.addEventListener("open",()=>{clearTimeout(o),e.close(),t(!0)}),e.addEventListener("error",()=>{clearTimeout(o),t(!1)})});await s()?(n.initialize(),n.connectToDevTools()):console.warn(`DEV is set to true, but the React DevTools server is not running. Start it with:
+import n from"react-devtools-core";const s=async()=>new Promise(o=>{const e=new WebSocket("ws://localhost:8097"),t=setTimeout(()=>{e.close(),o(!1)},2e3);t.unref(),e.addEventListener("open",()=>{clearTimeout(t),e.close(),o(!0)}),e.addEventListener("error",()=>{clearTimeout(t),o(!1)})});await s()?(n.initialize(),n.connectToDevTools()):console.warn(`DEV is set to true, but the React DevTools server is not running. Start it with:
 
 $ npx react-devtools
 `);

package/dist/packem_chunks/discord.js

@@ -1,4 +1,4 @@
-import{expandNotificationTemplate as h}from"./interface.js";const p=4096,l=3800,d=i=>i.url?`• [\`${i.name}@${i.version}\`](${i.url})`:`• \`${i.name}@${i.version}\``,f=i=>{const t=i.published.map(n=>d(n));let s=t.join(`
-`);if(s.length>l){let n=0;const e=[];for(const r of t){if(n+r.length+1>l){e.push(`*… +${t.length-e.length} more*`);break}e.push(r),n+=r.length+1}s=e.join(`
-`)}return s.slice(0,p)};class g{constructor(t){this.config=t,this.id=t.id?`discord:${t.id}`:"discord"}config;id;async send(t){const s=this.config.title?h(this.config.title,t):`🚀 Released ${t.published.length} package${t.published.length===1?"":"s"}`,n={color:this.config.color??3900150,description:f(t),fields:[],timestamp:t.completedAt,title:s},e=[];if(t.channel&&e.push({inline:!0,name:"Channel",value:`\`${t.channel}\``}),t.repo&&e.push({inline:!0,name:"Repository",value:`[${t.repo}](https://github.com/${t.repo})`}),t.skipped.length>0&&this.config.includeSkipped!==!1){const o=t.skipped.map(c=>`\`${c.name}\` — ${c.reason}`).join(`
-`).slice(0,1024);e.push({inline:!1,name:`Skipped (${t.skipped.length})`,value:o})}e.length>0&&(n.fields=e);const r={...this.config.username?{username:this.config.username}:{},...this.config.avatarUrl?{avatar_url:this.config.avatarUrl}:{},embeds:[n]};let a;try{a=await fetch(this.config.webhook,{body:JSON.stringify(r),headers:{"Content-Type":"application/json"},method:"POST"})}catch(o){const c=o instanceof Error?o.name:"NetworkError";throw new Error(`Discord webhook fetch failed (${c})`,{cause:o})}if(!a.ok){const o=await a.text().catch(()=>"");throw new Error(`Discord webhook returned ${a.status} ${a.statusText}${o?`: ${o.slice(0,200)}`:""}`)}}}export{g as DiscordNotificationChannel};
+import{expandNotificationTemplate as c}from"./interface.js";const d=4096,h=3800,p=n=>n.url?`• [\`${n.name}@${n.version}\`](${n.url})`:`• \`${n.name}@${n.version}\``,f=n=>{const e=n.published.map(t=>p(t));let o=e.join(`
+`);if(o.length>h){let t=0;const i=[];for(const r of e){if(t+r.length+1>h){i.push(`*… +${e.length-i.length} more*`);break}i.push(r),t+=r.length+1}o=i.join(`
+`)}return o.slice(0,d)};class m{constructor(e){this.config=e,this.id=e.id?`discord:${e.id}`:"discord"}config;id;async send(e){const o=this.config.title?c(this.config.title,e):`🚀 Released ${e.published.length} package${e.published.length===1?"":"s"}`,t={color:this.config.color??3900150,description:f(e),fields:[],timestamp:e.completedAt,title:o},i=[];if(e.channel&&i.push({inline:!0,name:"Channel",value:`\`${e.channel}\``}),e.repo&&i.push({inline:!0,name:"Repository",value:`[${e.repo}](https://github.com/${e.repo})`}),e.skipped.length>0&&this.config.includeSkipped!==!1){const s=e.skipped.map(l=>`\`${l.name}\` — ${l.reason}`).join(`
+`).slice(0,1024);i.push({inline:!1,name:`Skipped (${e.skipped.length})`,value:s})}i.length>0&&(t.fields=i);const r={...this.config.username?{username:this.config.username}:{},...this.config.avatarUrl?{avatar_url:this.config.avatarUrl}:{},embeds:[t]};let a;try{a=await fetch(this.config.webhook,{body:JSON.stringify(r),headers:{"Content-Type":"application/json"},method:"POST"})}catch(s){const l=s instanceof Error?s.name:"NetworkError";throw new Error(`Discord webhook fetch failed (${l})`,{cause:s})}if(!a.ok){const s=await a.text().catch(()=>"");throw new Error(`Discord webhook returned ${a.status} ${a.statusText}${s?`: ${s.slice(0,200)}`:""}`)}}}export{m as DiscordNotificationChannel};

package/dist/packem_chunks/dispatch.js

@@ -1,4 +1,4 @@
-import{createRequire as m}from"node:module";import{w as p,J as _}from"../packem_shared/index-BLtnel38.js";let f;const l=e=>(f??=m(import.meta.url))(e),i=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,u=e=>{if(typeof i<"u"&&i.versions&&i.versions.node){const[r,s]=i.versions.node.split(".").map(Number);if(r>22||r===22&&s>=3||r===20&&s>=16)return i.getBuiltinModule(e)}return l(e)},{spawnSync:h}=u("node:child_process"),{readFileSync:g,statSync:v}=u("node:fs"),d={npm:{pm:"npm",runner:!1},npx:{pm:"npm",runner:!0},pnpm:{pm:"pnpm",runner:!1},pnpx:{pm:"pnpm",runner:!0},yarn:{pm:"yarn",runner:!1},yarnpkg:{pm:"yarn",runner:!1}},y=new Set(["create","dlx","exec","init"]),a=e=>{try{return v(e).isFile()}catch{return!1}},w=e=>e==="npm"||e==="pnpm"||e==="yarn"?e:void 0,x=e=>{const r=[["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"],["package-lock.json","npm"],["npm-shrinkwrap.json","npm"]];let s=e;for(;;){const t=p(s,"package.json");if(a(t))try{const o=JSON.parse(g(t,"utf8")).packageManager;if(typeof o=="string"&&o.length>0){const c=w(o.split("@")[0]);if(c!==void 0)return c}}catch{}for(const[o,c]of r)if(a(p(s,o)))return c;const n=_(s);if(n===s)return;s=n}},j=()=>process.env.npm_config_user_agent!==void 0||process.env.npm_execpath!==void 0,k=(e,r,s,t)=>{const n=d[e];if(n===void 0)return"dispatch";const o=n.runner||s!==void 0&&y.has(s);return r!==void 0&&n.pm!==r&&!o&&!t?"refuse":"dispatch"},S=e=>{const r=process.platform==="win32"?[`${e}.cmd`,`${e}.exe`,e]:[e];for(const s of(process.env.PATH??"").split(process.platform==="win32"?";":":"))if(!(s===""||s.replace(/[/\\]+$/u,"").endsWith(p(".vis","shims"))))for(const t of r){const n=p(s,t);if(a(n))return n}},T=(e,r)=>{d[e]===void 0&&(process.stderr.write(`vis: ${e} is not a known package-manager shim.
-`),process.exit(1));const s=x(process.cwd());k(e,s,r[0],j())==="refuse"&&(process.stderr.write(`vis: this project uses ${String(s)}, but \`${e}\` was run. Use \`${String(s)}\` instead, or run \`vis shim uninstall\` to disable the PM guard.
-`),process.exit(1));const t=S(e);t===void 0&&(process.stderr.write(`vis: \`${e}\` was not found on PATH (outside the shim dir).
-`),process.exit(1));const n=h(t,r,{stdio:"inherit"});process.exit(n.status??(n.signal===null?0:1))};export{k as decideShim,T as dispatchShim};
+import{createRequire as m}from"node:module";import{e as p,m as g}from"../packem_shared/index-DHD8wb6Z.js";let l;const f=e=>(l??=m(import.meta.url))(e),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,u=e=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[n,s]=c.versions.node.split(".").map(Number);if(n>22||n===22&&s>=3||n===20&&s>=16)return c.getBuiltinModule(e)}return f(e)},{spawnSync:h}=u("node:child_process"),{readFileSync:y,statSync:_}=u("node:fs"),d={npm:{pm:"npm",runner:!1},npx:{pm:"npm",runner:!0},pnpm:{pm:"pnpm",runner:!1},pnpx:{pm:"pnpm",runner:!0},yarn:{pm:"yarn",runner:!1},yarnpkg:{pm:"yarn",runner:!1}},v=new Set(["create","dlx","exec","init"]),a=e=>{try{return _(e).isFile()}catch{return!1}},S=e=>e==="npm"||e==="pnpm"||e==="yarn"?e:void 0,w=e=>{const n=[["pnpm-lock.yaml","pnpm"],["yarn.lock","yarn"],["package-lock.json","npm"],["npm-shrinkwrap.json","npm"]];let s=e;for(;;){const t=p(s,"package.json");if(a(t))try{const o=JSON.parse(y(t,"utf8")).packageManager;if(typeof o=="string"&&o.length>0){const i=S(o.split("@")[0]);if(i!==void 0)return i}}catch{}for(const[o,i]of n)if(a(p(s,o)))return i;const r=g(s);if(r===s)return;s=r}},x=()=>process.env.npm_config_user_agent!==void 0||process.env.npm_execpath!==void 0,j=(e,n,s,t)=>{const r=d[e];if(r===void 0)return"dispatch";const o=r.runner||s!==void 0&&v.has(s);return n!==void 0&&r.pm!==n&&!o&&!t?"refuse":"dispatch"},$=e=>{const n=process.platform==="win32"?[`${e}.cmd`,`${e}.exe`,e]:[e];for(const s of(process.env.PATH??"").split(process.platform==="win32"?";":":"))if(!(s===""||s.replace(/[/\\]+$/u,"").endsWith(p(".vis","shims"))))for(const t of n){const r=p(s,t);if(a(r))return r}},R=(e,n)=>{d[e]===void 0&&(process.stderr.write(`vis: ${e} is not a known package-manager shim.
+`),process.exit(1));const t=w(process.cwd());j(e,t,n[0],x())==="refuse"&&(process.stderr.write(`vis: this project uses ${String(t)}, but \`${e}\` was run. Use \`${String(t)}\` instead, or run \`vis shim uninstall\` to disable the PM guard.
+`),process.exit(1));const r=$(e);r===void 0&&(process.stderr.write(`vis: \`${e}\` was not found on PATH (outside the shim dir).
+`),process.exit(1));const o=h(r,n,{stdio:"inherit"});process.exit(o.status??(o.signal===null?0:1))};export{j as decideShim,R as dispatchShim};

package/dist/packem_chunks/doctor-probe.js

@@ -1,2 +1,2 @@
-import{I as p,V as u,j as l,E as i,q as h,s as g}from"../packem_shared/index.server-CusjRLCh.js";import{resolveTurboEnvCompat as d,ReapiRemoteCache as m}from"@visulima/task-runner";import{p as b}from"./cli-main.js";const f=(t,r)=>r==="http"||r==="reapi"?r:t.startsWith("grpc://")||t.startsWith("grpcs://")?"reapi":"http",$=async(t,r)=>{const o=Date.now(),a=new AbortController,e=setTimeout(()=>{a.abort()},r);try{const s=await fetch(t,{method:"HEAD",signal:a.signal});return{backend:"http",durationMs:Date.now()-o,httpStatus:s.status,ok:!0,url:t}}catch(s){return{backend:"http",durationMs:Date.now()-o,error:s instanceof Error?s.message:String(s),ok:!1,url:t}}finally{clearTimeout(e)}},k=async(t,r)=>{const o=Date.now(),a=new m({...t,timeout:r});try{return{backend:"reapi",capabilities:await a.probeCapabilities(),durationMs:Date.now()-o,ok:!0,url:t.url}}catch(e){return{backend:"reapi",durationMs:Date.now()-o,error:e instanceof Error?e.message:String(e),ok:!1,url:t.url}}finally{try{await a.close()}catch{}}},w=t=>{const r=[],o=t.ok?p("OK"):u("FAIL");if(r.push(`${l("Remote cache")} ${o}`),r.push(`  ${i("URL:")}     ${h(t.url)}`),r.push(`  ${i("Backend:")} ${t.backend}`),r.push(`  ${i("Latency:")} ${String(t.durationMs)}ms`),t.httpStatus!==void 0&&r.push(`  ${i("Status:")}  ${String(t.httpStatus)}`),t.capabilities){const a=t.capabilities.digestFunctions.length>0?t.capabilities.digestFunctions.join(", "):g("(none advertised)");r.push(`  ${i("Digests:")} ${a}`),r.push(`  ${i("Batch:")}   ${String(t.capabilities.maxBatchTotalSizeBytes)} bytes`)}return t.error&&r.push(`  ${i("Error:")}   ${u(t.error)}`),r.join(`
-`)},D=async({logger:t,options:r,visConfig:o})=>{const a=d((o??{}).taskRunner?.remoteCache),e=r.url??a?.url,s=r.format??"table",c=r.timeout??5e3;if(!e){b.error("No remote cache configured. Set taskRunner.remoteCache.url in vis.config.ts, pass --url=..., or export TURBO_API."),process.exitCode=1;return}const n=f(e,r.backend)==="reapi"?await k({...a??{url:e},backend:"reapi",url:e},c):await $(e,c);s==="json"?t.log(JSON.stringify(n,null,2)):t.log(w(n)),n.ok||(process.exitCode=1)};export{D as cacheDoctorExecute};
+import{J as l,X as u,q as f,F as n,D as m,r as d}from"../packem_shared/index.server-CwSgbeN7.js";import{resolveTurboEnvCompat as b,ReapiRemoteCache as g}from"@visulima/task-runner";import{p as k}from"./cli-main.js";const $=(t,e)=>e==="http"||e==="reapi"?e:t.startsWith("grpc://")||t.startsWith("grpcs://")?"reapi":"http",w=async(t,e)=>{const r=Date.now(),o=new AbortController,a=setTimeout(()=>{o.abort()},e);try{const s=await fetch(t,{method:"HEAD",signal:o.signal});return{backend:"http",durationMs:Date.now()-r,httpStatus:s.status,ok:!0,url:t}}catch(s){return{backend:"http",durationMs:Date.now()-r,error:s instanceof Error?s.message:String(s),ok:!1,url:t}}finally{clearTimeout(a)}},y=async(t,e)=>{const r=Date.now(),o=new g({...t,timeout:e});try{return{backend:"reapi",capabilities:await o.probeCapabilities(),durationMs:Date.now()-r,ok:!0,url:t.url}}catch(a){return{backend:"reapi",durationMs:Date.now()-r,error:a instanceof Error?a.message:String(a),ok:!1,url:t.url}}finally{try{await o.close()}catch{}}},S=t=>{const e=[],r=t.ok?l("OK"):u("FAIL");if(e.push(`${f("Remote cache")} ${r}`),e.push(`  ${n("URL:")}     ${m(t.url)}`),e.push(`  ${n("Backend:")} ${t.backend}`),e.push(`  ${n("Latency:")} ${String(t.durationMs)}ms`),t.httpStatus!==void 0&&e.push(`  ${n("Status:")}  ${String(t.httpStatus)}`),t.capabilities){const o=t.capabilities.digestFunctions.length>0?t.capabilities.digestFunctions.join(", "):d("(none advertised)");e.push(`  ${n("Digests:")} ${o}`),e.push(`  ${n("Batch:")}   ${String(t.capabilities.maxBatchTotalSizeBytes)} bytes`)}return t.error&&e.push(`  ${n("Error:")}   ${u(t.error)}`),e.join(`
+`)},A=async({logger:t,options:e,visConfig:r})=>{const a=b((r??{}).taskRunner?.remoteCache),i=e.url??a?.url,h=e.format??"table",p=e.timeout??5e3;if(!i){k.error("No remote cache configured. Set taskRunner.remoteCache.url in vis.config.ts, pass --url=..., or export TURBO_API."),process.exitCode=1;return}const c=$(i,e.backend)==="reapi"?await y({...a??{url:i},backend:"reapi",url:i},p):await w(i,p);h==="json"?t.log(JSON.stringify(c,null,2)):t.log(S(c)),c.ok||(process.exitCode=1)};export{A as cacheDoctorExecute};

package/dist/packem_chunks/extra-files.js

@@ -1,3 +1,3 @@
-import{createRequire as N}from"node:module";import{VisReleaseError as b}from"../packem_shared/VisReleaseError-DMGRBTNO.js";let A;const I=e=>(A??=N(import.meta.url))(e),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=e=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[r,s]=g.versions.node.split(".").map(Number);if(r>22||r===22&&s>=3||r===20&&s>=16)return g.getBuiltinModule(e)}return I(e)},{readFile:R}=_("node:fs/promises"),{isAbsolute:x,join:w}=_("node:path"),j="x-release-please-version",y=e=>e.type==="annotation",O=e=>!y(e),E=(e,r)=>{if(!O(e))throw new b({code:"CONFIG_INVALID",message:`extra-files rule at ${r} has type="${e.type}" — compileRule is regex-only.`});try{return new RegExp(e.search,e.flags??"g")}catch(s){throw new b({cause:s,code:"CONFIG_INVALID",message:`Invalid extra-files regex at ${r}.search: ${s.message}`})}},F=(e,r,s)=>e.replaceAll("{version}",r).replaceAll("{name}",s).replaceAll("{packageName}",s),T=/\d+\.\d+\.\d+(?:-[\w.-]+)?(?:\+[\w.-]+)?/,v=(e,r)=>{let s=0;if(r!==void 0){const h=e.indexOf(r);if(h===-1)return;s=h+r.length}const u=e.slice(s),o=T.exec(u);if(o)return{index:s+o.index,match:o[0]}},q=(e,r,s,u,o)=>{const h=e.marker??j,i=[],l=r.split(`
-`);let t=!1,a=!1;for(let n=0;n<l.length;n++){const c=l[n];if(c.includes(h))if(t=!0,c.slice(0,c.indexOf(h)).replace(/^\s*(?:#|\/\/|\/\*|--|<!--)\s*$/,"").trim()===""){const p=n+1,f=l[p];if(f===void 0){i.push(`extra-files: ${u}[${e.path}] annotation marker on the last line of ${o} (no following line to update).`);continue}const d=v(f,e.anchor);if(!d){i.push(e.anchor===void 0?`extra-files: ${u}[${e.path}] annotation marker at ${o}:${n+1} but no semver-shaped substring on the following line.`:`extra-files: ${u}[${e.path}] annotation marker at ${o}:${n+1} but anchor "${e.anchor}" / no semver-shaped substring after it on the following line.`);continue}l[p]=f.slice(0,d.index)+s+f.slice(d.index+d.match.length),a=!0}else{const p=v(c,e.anchor);if(!p){i.push(e.anchor===void 0?`extra-files: ${u}[${e.path}] annotation marker at ${o}:${n+1} but no semver-shaped substring on the marked line.`:`extra-files: ${u}[${e.path}] annotation marker at ${o}:${n+1} but anchor "${e.anchor}" / no semver-shaped substring after it on the marked line.`);continue}l[n]=c.slice(0,p.index)+s+c.slice(p.index+p.match.length),a=!0}}return t?a?{content:l.join(`
-`),warnings:i}:{warnings:i}:(i.push(`extra-files: ${u}[${e.path}] annotation marker "${h}" not found in ${o}; rule may be stale.`),{warnings:i})},M=async(e,r,s,u,o)=>{let h;try{h=await R(e,"utf8")}catch(t){return t.code==="ENOENT"?{warnings:[`extra-files: ${o} → ${e} does not exist; skipping ${r.length} rule(s).`]}:{warnings:[`extra-files: ${o} → could not read ${e}: ${t.message}`]}}let i=h;const l=[];for(const t of r){if(y(t)){const f=q(t,i,s,o,e);l.push(...f.warnings),f.content!==void 0&&(i=f.content);continue}const a=E(t,`${o}[${t.path}]`),n=t.replace===void 0?s:F(t.replace,s,u);let c=!1;const p=i.replace(a,(f,...d)=>(c=!0,t.replace===void 0?n:n.replaceAll(/\$([&$1-9])/g,(D,$)=>{if($==="&")return f;if($==="$")return"$";const k=Number.parseInt($,10)-1,m=d[k];return typeof m=="string"?m:""})));if(!c){l.push(`extra-files: ${o}[${t.path}] regex /${t.search}/${t.flags??"g"} matched nothing in ${e}; rule may be stale.`);continue}i=p}return i===h?{warnings:l}:{content:i,warnings:l}},B=async(e,r,s,u,o=[],h=[])=>{const i=[],l=[],t=new Map;for(const a of o){const n=x(a.path)?a.path:w(e,a.path),c=t.get(n)??{label:"workspace",rules:[]};c.rules.push(a),t.set(n,c)}for(const a of h){const n=x(a.path)?a.path:w(r,a.path),c=t.get(n)??{label:"per-package",rules:[]};c.rules.push(a),t.set(n,c)}for(const[a,n]of t){const c=n.rules[0],p=await M(a,n.rules,s,u,n.label);l.push(...p.warnings),p.content!==void 0&&i.push({content:p.content,path:a,rule:c})}return{warnings:l,writes:i}};export{j as DEFAULT_ANNOTATION_MARKER,B as applyExtraFilesForRelease,E as compileRule};
+import{createRequire as I}from"node:module";import{VisReleaseError as R}from"../packem_shared/VisReleaseError-DZtgcKf8.js";let E;const N=e=>(E??=I(import.meta.url))(e),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=e=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[r,s]=$.versions.node.split(".").map(Number);if(r>22||r===22&&s>=3||r===20&&s>=16)return $.getBuiltinModule(e)}return N(e)},{readFile:O}=k("node:fs/promises"),{isAbsolute:v,join:_}=k("node:path"),T="x-release-please-version",A=e=>e.type==="annotation",b=e=>!A(e),j=(e,r)=>{if(!b(e))throw new R({code:"CONFIG_INVALID",message:`extra-files rule at ${r} has type="${e.type}" — compileRule is regex-only.`});try{return new RegExp(e.search,e.flags??"g")}catch(s){throw new R({cause:s,code:"CONFIG_INVALID",message:`Invalid extra-files regex at ${r}.search: ${s.message}`})}},M=(e,r,s)=>e.replaceAll("{version}",r).replaceAll("{name}",s).replaceAll("{packageName}",s),F=/\d+\.\d+\.\d+(?:-[\w.-]+)?(?:\+[\w.-]+)?/,y=(e,r)=>{let s=0;if(r!==void 0){const f=e.indexOf(r);if(f===-1)return;s=f+r.length}const p=e.slice(s),o=F.exec(p);if(o)return{index:s+o.index,match:o[0]}},L=(e,r,s,p,o)=>{const f=e.marker??T,a=[],l=r.split(`
+`);let t=!1,i=!1;for(let n=0;n<l.length;n++){const c=l[n];if(!c.includes(f))continue;if(t=!0,c.slice(0,c.indexOf(f)).replace(/^\s*(?:#|\/\/|\/\*|--|<!--)\s*$/,"").trim()===""){const u=n+1,d=l[u];if(d===void 0){a.push(`extra-files: ${p}[${e.path}] annotation marker on the last line of ${o} (no following line to update).`);continue}const m=y(d,e.anchor);if(!m){a.push(e.anchor===void 0?`extra-files: ${p}[${e.path}] annotation marker at ${o}:${n+1} but no semver-shaped substring on the following line.`:`extra-files: ${p}[${e.path}] annotation marker at ${o}:${n+1} but anchor "${e.anchor}" / no semver-shaped substring after it on the following line.`);continue}l[u]=d.slice(0,m.index)+s+d.slice(m.index+m.match.length),i=!0}else{const u=y(c,e.anchor);if(!u){a.push(e.anchor===void 0?`extra-files: ${p}[${e.path}] annotation marker at ${o}:${n+1} but no semver-shaped substring on the marked line.`:`extra-files: ${p}[${e.path}] annotation marker at ${o}:${n+1} but anchor "${e.anchor}" / no semver-shaped substring after it on the marked line.`);continue}l[n]=c.slice(0,u.index)+s+c.slice(u.index+u.match.length),i=!0}}return t?i?{content:l.join(`
+`),warnings:a}:{warnings:a}:(a.push(`extra-files: ${p}[${e.path}] annotation marker "${f}" not found in ${o}; rule may be stale.`),{warnings:a})},q=async(e,r,s,p,o)=>{let f;try{f=await O(e,"utf8")}catch(t){return t.code==="ENOENT"?{warnings:[`extra-files: ${o} → ${e} does not exist; skipping ${r.length} rule(s).`]}:{warnings:[`extra-files: ${o} → could not read ${e}: ${t.message}`]}}let a=f;const l=[];for(const t of r){if(A(t)){const g=L(t,a,s,o,e);l.push(...g.warnings),g.content!==void 0&&(a=g.content);continue}const i=j(t,`${o}[${t.path}]`),n=t.replace===void 0?s:M(t.replace,s,p);let c=!1;const h=a.replace(i,(g,...x)=>(c=!0,t.replace===void 0?n:n.replaceAll(/\$([&$1-9])/g,(u,d)=>{if(d==="&")return g;if(d==="$")return"$";const m=Number.parseInt(d,10)-1,w=x[m];return typeof w=="string"?w:""})));if(!c){l.push(`extra-files: ${o}[${t.path}] regex /${t.search}/${t.flags??"g"} matched nothing in ${e}; rule may be stale.`);continue}a=h}return a===f?{warnings:l}:{content:a,warnings:l}},G=async(e,r,s,p,o=[],f=[])=>{const a=[],l=[],t=new Map;for(const i of o){const n=v(i.path)?i.path:_(e,i.path),c=t.get(n)??{label:"workspace",rules:[]};c.rules.push(i),t.set(n,c)}for(const i of f){const n=v(i.path)?i.path:_(r,i.path),c=t.get(n)??{label:"per-package",rules:[]};c.rules.push(i),t.set(n,c)}for(const[i,n]of t){const c=n.rules[0],h=await q(i,n.rules,s,p,n.label);l.push(...h.warnings),h.content!==void 0&&a.push({content:h.content,path:i,rule:c})}return{warnings:l,writes:a}};export{T as DEFAULT_ANNOTATION_MARKER,G as applyExtraFilesForRelease,j as compileRule};

package/dist/packem_chunks/fix.js

@@ -1,11 +1,11 @@
-import{createRequire as F}from"node:module";import{j as w,E as b,s as k,q as J,V as C,I as j}from"../packem_shared/index.server-CusjRLCh.js";import{b as I}from"../packem_shared/index-BLtnel38.js";import{a as D,r as E,b as m,c as B}from"../packem_shared/ai-fix-bfWo0cZX.js";import{p}from"./cli-main.js";import{l as N}from"../packem_shared/failure-log-DyhWPqno.js";let A;const O=o=>(A??=F(import.meta.url))(o),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,q=o=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[t,r]=h.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return h.getBuiltinModule(o)}return O(o)},{createInterface:T}=q("node:readline"),L={"ambiguous-match":"ambiguous match",applied:"applied",error:"error","missing-file":"missing file","no-match":"no match","outside-workspace":"outside workspace"},R=(o,t,r)=>{const e=B(o,t,r),s=I(o,e);return s===""||s.startsWith("..")?e:s},M=(o,t,r)=>{const e=[w(`Fix proposal (${o.provider}, confidence: ${o.confidence})`),"",o.explanation||b("<no explanation>")];if(o.cannotFix)return e.push(""),e.push(k(`Cannot fix automatically: ${o.cannotFix}`)),e.join(`
-`);if(o.patches.length===0)return e.push(""),e.push(k("No patches were proposed.")),e.join(`
-`);e.push(""),e.push(w(`Patches (${String(o.patches.length)}):`));for(const[s,i]of o.patches.entries()){const a=R(t,r,i.file);e.push(""),e.push(J(`[${String(s+1)}] ${a}`)),i.reason&&e.push(b(`    reason: ${i.reason}`));for(const u of i.oldString.split(`
-`))e.push(C(`  - ${u}`));for(const u of i.newString.split(`
-`))e.push(j(`  + ${u}`))}return e.join(`
-`)},_=(o,t,r)=>{const e=[];for(const s of o){const i=s.absolutePath?I(t,s.absolutePath)||s.absolutePath:R(t,r,s.patch.file),a=L[s.status];s.status==="applied"?e.push(j(`  ✓ ${i}: ${a}`)):e.push(C(`  ✗ ${i}: ${a}${s.error?` (${s.error})`:""}`))}return e.join(`
-`)},y=o=>{let t=0,r=0;for(const e of o)e.status==="applied"?t+=1:r+=1;return{applied:t,failed:r}},U=o=>new Promise(t=>{const r=T({input:process.stdin,output:process.stderr});r.question(`${o} (y/N) `,e=>{r.close();const s=e.trim().toLowerCase();t(s==="y"||s==="yes")})}),W=o=>o??process.cwd(),X=async({argument:o,logger:t,options:r,visConfig:e,workspaceRoot:s})=>{const i=o[0],a=W(s),u=(r.format??"text")==="json";if(!i){if(u){const l=N(a);process.stdout.write(`${JSON.stringify({availableTasks:l,error:"No task ID specified"},void 0,2)}
-`)}else{p.error("No task ID specified. Usage: vis ai fix <project>:<target>");const l=N(a);if(l.length>0){p.info("Tasks with captured failure logs:");for(const f of l)p.info(`  - ${f}`)}else p.notice("No failure logs found. Re-run a failing task with `vis run` to capture logs.")}process.exitCode=1;return}const n=await D(a,i,{runId:r.run});if(!n){u?process.stdout.write(`${JSON.stringify({error:"No failure log or run summary found",taskId:i},void 0,2)}
-`):(p.error(`No failure log or run summary found for task "${i}".`),p.notice("Re-run the task with `vis run` so its terminal output and run metadata are captured.")),process.exitCode=1;return}n.terminalOutputCaptured||p.warn(`No captured terminal output for "${i}". Re-run with \`vis run\` for a better fix proposal.`);const S=e?.ai,c=await E(n,t,{cache:r.cache!==!1,config:S});if(!c){u&&process.stdout.write(`${JSON.stringify({error:"AI fix proposal failed or no provider available",taskId:i},void 0,2)}
-`),process.exitCode=1;return}const g=r.apply===!0;if(u){const l=g?void 0:await m(a,n.cwd,c,{dryRun:!0}),f=g?await m(a,n.cwd,c):void 0;if(process.stdout.write(`${JSON.stringify({appliedResults:f,dryRunResults:l,failureContext:{cwd:n.cwd,hash:n.hash,runId:n.runId,taskId:n.taskId,terminalOutputCaptured:n.terminalOutputCaptured},proposal:c},void 0,2)}
-`),g&&f){const{failed:P}=y(f);P>0&&(process.exitCode=1)}return}if(t.info(M(c,a,n.cwd)),c.cannotFix||c.patches.length===0)return;const x=await m(a,n.cwd,c,{dryRun:!0}),$=y(x);if(t.info(""),t.info(w("Patch validation:")),t.info(_(x,a,n.cwd)),!g){t.info(""),p.info("Re-run with --apply to write these patches to disk.");return}if($.applied===0){p.error("No patches can be applied (every patch failed validation)."),process.exitCode=1;return}if(r.yes!==!0&&(t.info(""),!await U(`Apply ${String($.applied)} patch${$.applied===1?"":"es"} to disk?`))){p.notice("Aborted. Nothing written.");return}const v=await m(a,n.cwd,c),d=y(v);t.info(""),t.info(w("Apply results:")),t.info(_(v,a,n.cwd)),t.info(""),d.failed===0?p.success(`Applied ${String(d.applied)} patch${d.applied===1?"":"es"}.`):(p.warn(`${String(d.applied)} applied, ${String(d.failed)} failed.`),process.exitCode=1)};export{X as aiFix};
+import{createRequire as T}from"node:module";import{q as $,F as b,r as P,D,X as S,J as k}from"../packem_shared/index.server-CwSgbeN7.js";import{a as N}from"../packem_shared/index-DHD8wb6Z.js";import{a as L,r as B,b as y,c as M}from"../packem_shared/ai-fix-6nXZbecQ.js";import{p as c}from"./cli-main.js";import{l as _}from"../packem_shared/failure-log-D92tM0ie.js";let A;const O=s=>(A??=T(import.meta.url))(s),d=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,q=s=>{if(typeof d<"u"&&d.versions&&d.versions.node){const[t,i]=d.versions.node.split(".").map(Number);if(t>22||t===22&&i>=3||t===20&&i>=16)return d.getBuiltinModule(s)}return O(s)},{createInterface:J}=q("node:readline"),U={"ambiguous-match":"ambiguous match",applied:"applied",error:"error","missing-file":"missing file","no-match":"no match","outside-workspace":"outside workspace"},j=(s,t,i)=>{const e=M(s,t,i),r=N(s,e);return r===""||r.startsWith("..")?e:r},W=(s,t,i)=>{const e=[$(`Fix proposal (${s.provider}, confidence: ${s.confidence})`),"",s.explanation||b("<no explanation>")];if(s.cannotFix)return e.push(""),e.push(P(`Cannot fix automatically: ${s.cannotFix}`)),e.join(`
+`);if(s.patches.length===0)return e.push(""),e.push(P("No patches were proposed.")),e.join(`
+`);e.push(""),e.push($(`Patches (${String(s.patches.length)}):`));for(const[r,o]of s.patches.entries()){const a=j(t,i,o.file);e.push(""),e.push(D(`[${String(r+1)}] ${a}`)),o.reason&&e.push(b(`    reason: ${o.reason}`));for(const h of o.oldString.split(`
+`))e.push(S(`  - ${h}`));for(const h of o.newString.split(`
+`))e.push(k(`  + ${h}`))}return e.join(`
+`)},C=(s,t,i)=>{const e=[];for(const r of s){const o=r.absolutePath?N(t,r.absolutePath)||r.absolutePath:j(t,i,r.patch.file),a=U[r.status];r.status==="applied"?e.push(k(`  ✓ ${o}: ${a}`)):e.push(S(`  ✗ ${o}: ${a}${r.error?` (${r.error})`:""}`))}return e.join(`
+`)},v=s=>{let t=0,i=0;for(const e of s)e.status==="applied"?t+=1:i+=1;return{applied:t,failed:i}},z=s=>new Promise(t=>{const i=J({input:process.stdin,output:process.stderr});i.question(`${s} (y/N) `,e=>{i.close();const r=e.trim().toLowerCase();t(r==="y"||r==="yes")})}),E=s=>s??process.cwd(),Y=async({argument:s,logger:t,options:i,visConfig:e,workspaceRoot:r})=>{const o=s[0],a=E(r),m=(i.format??"text")==="json";if(!o){if(m){const p=_(a);process.stdout.write(`${JSON.stringify({availableTasks:p,error:"No task ID specified"},void 0,2)}
+`)}else{c.error("No task ID specified. Usage: vis ai fix <project>:<target>");const p=_(a);if(p.length>0){c.info("Tasks with captured failure logs:");for(const f of p)c.info(`  - ${f}`)}else c.notice("No failure logs found. Re-run a failing task with `vis run` to capture logs.")}process.exitCode=1;return}const n=await L(a,o,{runId:i.run});if(!n){m?process.stdout.write(`${JSON.stringify({error:"No failure log or run summary found",taskId:o},void 0,2)}
+`):(c.error(`No failure log or run summary found for task "${o}".`),c.notice("Re-run the task with `vis run` so its terminal output and run metadata are captured.")),process.exitCode=1;return}n.terminalOutputCaptured||c.warn(`No captured terminal output for "${o}". Re-run with \`vis run\` for a better fix proposal.`);const F=e?.ai,u=await B(n,t,{cache:i.cache!==!1,config:F});if(!u){m&&process.stdout.write(`${JSON.stringify({error:"AI fix proposal failed or no provider available",taskId:o},void 0,2)}
+`),process.exitCode=1;return}const w=i.apply===!0;if(m){const p=w?void 0:await y(a,n.cwd,u,{dryRun:!0}),f=w?await y(a,n.cwd,u):void 0;if(process.stdout.write(`${JSON.stringify({appliedResults:f,dryRunResults:p,failureContext:{cwd:n.cwd,hash:n.hash,runId:n.runId,taskId:n.taskId,terminalOutputCaptured:n.terminalOutputCaptured},proposal:u},void 0,2)}
+`),w&&f){const{failed:I}=v(f);I>0&&(process.exitCode=1)}return}if(t.info(W(u,a,n.cwd)),u.cannotFix||u.patches.length===0)return;const g=await y(a,n.cwd,u,{dryRun:!0}),x=v(g);if(t.info(""),t.info($("Patch validation:")),t.info(C(g,a,n.cwd)),!w){t.info(""),c.info("Re-run with --apply to write these patches to disk.");return}if(x.applied===0){c.error("No patches can be applied (every patch failed validation)."),process.exitCode=1;return}if(i.yes!==!0&&(t.info(""),!await z(`Apply ${String(x.applied)} patch${x.applied===1?"":"es"} to disk?`))){c.notice("Aborted. Nothing written.");return}const R=await y(a,n.cwd,u),l=v(R);t.info(""),t.info($("Apply results:")),t.info(C(R,a,n.cwd)),t.info(""),l.failed===0?c.success(`Applied ${String(l.applied)} patch${l.applied===1?"":"es"}.`):(c.warn(`${String(l.applied)} applied, ${String(l.failed)} failed.`),process.exitCode=1)};export{Y as aiFix};

package/dist/packem_chunks/git.js

@@ -1,3 +1,3 @@
-import{VisReleaseError as d}from"../packem_shared/VisReleaseError-DMGRBTNO.js";const u=async(t,e,i=!0)=>t.runner.run("git",e,{cwd:t.cwd,silent:i}),h=async t=>{const e=await u(t,["rev-parse","--abbrev-ref","HEAD"]);if(e.exitCode!==0)return;const i=e.stdout.trim();return i==="HEAD"||i===""?void 0:i},w=async t=>{const e=await u(t,["rev-parse","HEAD"]);return e.exitCode===0?e.stdout.trim():void 0},E=async t=>{const e=await u(t,["rev-parse","--short","HEAD"]);return e.exitCode===0?e.stdout.trim():void 0},_=async t=>{const e=await u(t,["status","--porcelain"]);return e.exitCode===0&&e.stdout.trim()!==""},f=async(t,e)=>(await u(t,["rev-parse","--verify","--quiet",`refs/tags/${e}`])).exitCode===0,p=async(t,e,i="origin")=>{const s=await u(t,["ls-remote","--tags",i,e]);return s.exitCode===0&&s.stdout.trim()!==""},C=async(t,e,i,s={})=>{if(e.length===0&&!s.allowEmpty)throw new d({code:"CONFIG_INVALID",message:"stageAndCommit called with no files (and allowEmpty=false)."});if(e.length>0){const o=await t.runner.run("git",["add","--",...e],{cwd:t.cwd,silent:!0});if(o.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git add failed: ${o.stderr||o.stdout}`})}const a={...process.env};s.author&&(a.GIT_AUTHOR_NAME=s.author.name,a.GIT_AUTHOR_EMAIL=s.author.email,a.GIT_COMMITTER_NAME=s.author.name,a.GIT_COMMITTER_EMAIL=s.author.email);const r=["commit","-m",i];s.allowEmpty&&r.push("--allow-empty");const n=await t.runner.run("git",r,{cwd:t.cwd,env:a,silent:!0});if(n.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git commit failed: ${n.stderr||n.stdout}`});const c=await w(t);if(!c)throw new d({code:"GIT_OPERATION_FAILED",message:"git commit succeeded but HEAD is not resolvable."});return c},A=6e4;let g;const l=async t=>{const e=Date.now();if(g!==void 0&&e-g.cachedAtMs<A)return g.value;const i=await t.runner.run("gitsign",["--version"],{cwd:t.cwd,silent:!0});return g={cachedAtMs:e,value:i.exitCode===0},g.value},$=async(t,e,i,s={})=>{if(await f(t,e))throw new d({code:"TAG_COLLISION",message:`Tag "${e}" already exists locally. Resolve manually before re-running.`});if(!s.skipRemoteCheck&&await p(t,e,s.remote??"origin"))throw new d({code:"TAG_COLLISION",message:`Tag "${e}" already exists on remote "${s.remote??"origin"}". A previous run may have pushed tags but failed mid-publish — inspect the remote and either re-use the existing tag or delete it before re-running.`});const{signing:a}=s;if(a?.mode==="sigstore"){if(await l(t)){const c=["tag","-a",e];i&&c.push("-m",i);const o=await t.runner.run("gitsign",c,{cwd:t.cwd,silent:!0});if(o.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`gitsign tag ${e} failed: ${o.stderr||o.stdout}`});return}process.stderr.write(`[vis release] Warning: signing.mode is "sigstore" but \`gitsign\` is not on PATH; falling back to GPG signing for tag ${e}.
-`)}const r=["tag"];a&&(a.key&&a.mode==="gpg"?r.push("-u",a.key):r.push("-s")),i?r.push("-a",e,"-m",i):r.push(e);const n=await u(t,r);if(n.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git tag ${e} failed: ${n.stderr||n.stdout}`})},O=async(t,e={})=>{const i=["push",e.remote??"origin","--tags"];e.atomic&&i.splice(1,0,"--atomic");const s=await u(t,i,!1);if(s.exitCode!==0)throw new d({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --tags failed: ${s.stderr||s.stdout}`})},v=async(t,e,i={})=>{const{signing:s}=i;if(s?.mode==="sigstore"){if(await l(t)){const c=["tag","-f","-a","-m",`Floating tag ${e}`,e],o=await t.runner.run("gitsign",c,{cwd:t.cwd,silent:!0});if(o.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`gitsign tag -f ${e} failed: ${o.stderr||o.stdout}`});if(i.push===!1)return;const m=await u(t,["push",i.remote??"origin","--force",`refs/tags/${e}:refs/tags/${e}`],!1);if(m.exitCode!==0)throw new d({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --force refs/tags/${e} failed: ${m.stderr||m.stdout}`});return}process.stderr.write(`[vis release] Warning: signing.mode is "sigstore" but \`gitsign\` is not on PATH; falling back to GPG signing for floating tag ${e}.
-`)}const a=["tag","-f"];s&&(s.key&&s.mode==="gpg"?a.push("-u",s.key):a.push("-s")),a.push(e);const r=await u(t,a);if(r.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git tag -f ${e} failed: ${r.stderr||r.stdout}`});if(i.push===!1)return;const n=await u(t,["push",i.remote??"origin","--force",`refs/tags/${e}:refs/tags/${e}`],!1);if(n.exitCode!==0)throw new d({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --force refs/tags/${e} failed: ${n.stderr||n.stdout}`})},y=async(t,e,i,s={})=>{const a=await t.runner.run("git",["add","-A","--",e],{cwd:t.cwd,silent:!0});if(a.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git add ${e} failed: ${a.stderr||a.stdout}`});if((await t.runner.run("git",["diff","--cached","--quiet","--",e],{cwd:t.cwd,silent:!0})).exitCode===0)return{committed:!1,pushed:!1};const r={...process.env};s.author&&(r.GIT_AUTHOR_NAME=s.author.name,r.GIT_AUTHOR_EMAIL=s.author.email,r.GIT_COMMITTER_NAME=s.author.name,r.GIT_COMMITTER_EMAIL=s.author.email);const n=["commit","-m",i];s.sign&&n.push("-S");const c=await t.runner.run("git",n,{cwd:t.cwd,env:r,silent:!0});if(c.exitCode!==0)throw new d({code:"GIT_OPERATION_FAILED",message:`git commit failed: ${c.stderr||c.stdout}`});if(!s.push)return{committed:!0,pushed:!1};const o=s.branch??await h(t);return o?{committed:!0,pushed:(await t.runner.run("git",["push",s.remote??"origin",`HEAD:${o}`],{cwd:t.cwd,silent:!1})).exitCode===0}:{committed:!0,pushed:!1}},G=async(t,e,i={})=>{const s=["push",i.remote??"origin",`HEAD:${e}`];i.force&&s.push("--force-with-lease");const a=await u(t,s,!1);if(a.exitCode!==0)throw new d({code:"TAG_PUSH_FAILED",message:`git push ${e} failed: ${a.stderr||a.stdout}`})},x=(t,e)=>`${t}@${e}`,I=/\{(name|unscopedName|version|major|minor|patch|date|channel)\}/g,D=(t,e)=>{const i=e.version??"",[s="",a="",r=""]=i.split(/[-+]/,1)[0].split("."),n={channel:e.channel??"",date:e.date??new Date().toISOString().slice(0,10),major:s,minor:a,name:e.name??"",patch:r,unscopedName:e.name?e.name.replace(/^@[^/]+\//,""):"",version:i};return t.replaceAll(I,(c,o)=>n[o]??"")};export{v as createOrUpdateFloatingTag,$ as createTag,x as defaultTagFor,h as getCurrentBranch,w as getCurrentSha,E as getShortSha,l as gitsignAvailable,_ as hasUncommittedChanges,G as pushBranch,O as pushTags,D as renderTagPattern,C as stageAndCommit,y as stageAndCommitFile,f as tagExists,p as tagExistsRemote};
+import{VisReleaseError as n}from"../packem_shared/VisReleaseError-DZtgcKf8.js";const d=async(t,e,r=!0)=>t.runner.run("git",e,{cwd:t.cwd,silent:r}),f=async t=>{const e=await d(t,["rev-parse","--abbrev-ref","HEAD"]);if(e.exitCode!==0)return;const r=e.stdout.trim();return r==="HEAD"||r===""?void 0:r},w=async t=>{const e=await d(t,["rev-parse","HEAD"]);return e.exitCode===0?e.stdout.trim():void 0},C=async t=>{const e=await d(t,["rev-parse","--short","HEAD"]);return e.exitCode===0?e.stdout.trim():void 0},v=async t=>{const e=await d(t,["status","--porcelain"]);return e.exitCode===0&&e.stdout.trim()!==""},A=async(t,e)=>(await d(t,["rev-parse","--verify","--quiet",`refs/tags/${e}`])).exitCode===0,T=async(t,e,r="origin")=>{const s=await d(t,["ls-remote","--tags",r,e]);return s.exitCode===0&&s.stdout.trim()!==""},$=async(t,e,r,s={})=>{if(e.length===0&&!s.allowEmpty)throw new n({code:"CONFIG_INVALID",message:"stageAndCommit called with no files (and allowEmpty=false)."});if(e.length>0){const u=await t.runner.run("git",["add","--",...e],{cwd:t.cwd,silent:!0});if(u.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git add failed: ${u.stderr||u.stdout}`})}const i={...process.env};s.author&&(i.GIT_AUTHOR_NAME=s.author.name,i.GIT_AUTHOR_EMAIL=s.author.email,i.GIT_COMMITTER_NAME=s.author.name,i.GIT_COMMITTER_EMAIL=s.author.email);const o=["commit","-m",r];s.allowEmpty&&o.push("--allow-empty");const a=await t.runner.run("git",o,{cwd:t.cwd,env:i,silent:!0});if(a.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git commit failed: ${a.stderr||a.stdout}`});const c=await w(t);if(!c)throw new n({code:"GIT_OPERATION_FAILED",message:"git commit succeeded but HEAD is not resolvable."});return c},I=6e4;let l;const h=async t=>{const e=Date.now();if(l!==void 0&&e-l.cachedAtMs<I)return l.value;const r=await t.runner.run("gitsign",["--version"],{cwd:t.cwd,silent:!0});return l={cachedAtMs:e,value:r.exitCode===0},l.value},_=()=>{l=void 0},O=_,G=async(t,e,r,s={})=>{if(await A(t,e))throw new n({code:"TAG_COLLISION",message:`Tag "${e}" already exists locally. Resolve manually before re-running.`});if(!s.skipRemoteCheck&&await T(t,e,s.remote??"origin"))throw new n({code:"TAG_COLLISION",message:`Tag "${e}" already exists on remote "${s.remote??"origin"}". A previous run may have pushed tags but failed mid-publish — inspect the remote and either re-use the existing tag or delete it before re-running.`});const{signing:i}=s;if(i?.mode==="sigstore"){if(await h(t)){const c=["tag","-a",e];r&&c.push("-m",r);const u=await t.runner.run("gitsign",c,{cwd:t.cwd,silent:!0});if(u.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`gitsign tag ${e} failed: ${u.stderr||u.stdout}`});return}process.stderr.write(`[vis release] Warning: signing.mode is "sigstore" but \`gitsign\` is not on PATH; falling back to GPG signing for tag ${e}.
+`)}const o=["tag"];i&&(i.key&&i.mode==="gpg"?o.push("-u",i.key):o.push("-s")),r?o.push("-a",e,"-m",r):o.push(e);const a=await d(t,o);if(a.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git tag ${e} failed: ${a.stderr||a.stdout}`})},R=async(t,e={})=>{const r=["push",e.remote??"origin","--tags"];e.atomic&&r.splice(1,0,"--atomic");const s=await d(t,r,!1);if(s.exitCode!==0)throw new n({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --tags failed: ${s.stderr||s.stdout}`})},y=async(t,e,r={})=>{const{signing:s}=r;if(s?.mode==="sigstore"){if(await h(t)){const u=["tag","-f","-a","-m",`Floating tag ${e}`,e],g=await t.runner.run("gitsign",u,{cwd:t.cwd,silent:!0});if(g.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`gitsign tag -f ${e} failed: ${g.stderr||g.stdout}`});if(r.push===!1)return;const m=await d(t,["push",r.remote??"origin","--force",`refs/tags/${e}:refs/tags/${e}`],!1);if(m.exitCode!==0)throw new n({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --force refs/tags/${e} failed: ${m.stderr||m.stdout}`});return}process.stderr.write(`[vis release] Warning: signing.mode is "sigstore" but \`gitsign\` is not on PATH; falling back to GPG signing for floating tag ${e}.
+`)}const i=["tag","-f"];s&&(s.key&&s.mode==="gpg"?i.push("-u",s.key):i.push("-s")),i.push(e);const o=await d(t,i);if(o.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git tag -f ${e} failed: ${o.stderr||o.stdout}`});if(r.push===!1)return;const a=await d(t,["push",r.remote??"origin","--force",`refs/tags/${e}:refs/tags/${e}`],!1);if(a.exitCode!==0)throw new n({code:"TAG_PUSH_FAILED",hint:"After resolving, re-run with --resume to retry the push.",message:`git push --force refs/tags/${e} failed: ${a.stderr||a.stdout}`})},D=async(t,e,r,s={})=>{const i=await t.runner.run("git",["add","-A","--",e],{cwd:t.cwd,silent:!0});if(i.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git add ${e} failed: ${i.stderr||i.stdout}`});if((await t.runner.run("git",["diff","--cached","--quiet","--",e],{cwd:t.cwd,silent:!0})).exitCode===0)return{committed:!1,pushed:!1};const a={...process.env};s.author&&(a.GIT_AUTHOR_NAME=s.author.name,a.GIT_AUTHOR_EMAIL=s.author.email,a.GIT_COMMITTER_NAME=s.author.name,a.GIT_COMMITTER_EMAIL=s.author.email);const c=["commit","-m",r];s.sign&&c.push("-S");const u=await t.runner.run("git",c,{cwd:t.cwd,env:a,silent:!0});if(u.exitCode!==0)throw new n({code:"GIT_OPERATION_FAILED",message:`git commit failed: ${u.stderr||u.stdout}`});if(!s.push)return{committed:!0,pushed:!1};const g=s.branch??await f(t);return g?{committed:!0,pushed:(await t.runner.run("git",["push",s.remote??"origin",`HEAD:${g}`],{cwd:t.cwd,silent:!1})).exitCode===0}:{committed:!0,pushed:!1}},L=async(t,e,r={})=>{const s=["push",r.remote??"origin",`HEAD:${e}`];r.force&&s.push("--force-with-lease");const i=await d(t,s,!1);if(i.exitCode!==0)throw new n({code:"TAG_PUSH_FAILED",message:`git push ${e} failed: ${i.stderr||i.stdout}`})},N=(t,e)=>`${t}@${e}`,E=/\{(name|unscopedName|version|major|minor|patch|date|channel)\}/g,F=(t,e)=>{const r=e.version??"",[s="",i="",o=""]=r.split(/[-+]/,1)[0].split("."),a={channel:e.channel??"",date:e.date??new Date().toISOString().slice(0,10),major:s,minor:i,name:e.name??"",patch:o,unscopedName:e.name?e.name.replace(/^@[^/]+\//,""):"",version:r};return t.replaceAll(E,(c,u)=>a[u]??"")};export{y as createOrUpdateFloatingTag,G as createTag,N as defaultTagFor,f as getCurrentBranch,w as getCurrentSha,C as getShortSha,h as gitsignAvailable,v as hasUncommittedChanges,L as pushBranch,R as pushTags,F as renderTagPattern,_ as resetGitsignCache,O as resetGitsignCacheForTests,$ as stageAndCommit,D as stageAndCommitFile,A as tagExists,T as tagExistsRemote};

package/dist/packem_chunks/group-tags.js

@@ -1 +1 @@
-import{s as l}from"../packem_shared/index-BAe6e0XE.js";import g from"./index.js";import{normaliseGroup as d}from"../release/types.js";const v=(n,e,r)=>(n??"{name}@{version}").replaceAll("{name}",e).replaceAll("{version}",r),h=n=>{let e=n[0]??"0.0.0";for(const r of n){const s=l.valid(r)!==null,t=l.valid(e)!==null;s&&(!t||l.gt(r,e))&&(e=r)}return e},k=(n,e)=>{const r=[...n.fixed??[],...n.linked??[]].map(a=>d(a)),s=[],t=new Set;return r.forEach((a,f)=>{if(!a.syncGitTag)return;const m=e.filter(o=>!t.has(o.name)&&a.packages.some(i=>o.name===i||g(i,o.name))).map(o=>o.name);if(m.length===0)return;for(const o of m)t.add(o);const u=m.map(o=>e.find(i=>i.name===o)?.version??"0.0.0"),p=h(u),c=a.name??`group-${f}`;s.push({members:m,name:c,tag:v(a.tagPattern,c,p),version:p})}),{grouped:t,groups:s}};export{k as resolveSyncTagGroups};
+import{s as i}from"../packem_shared/index-B4AjSxHU.js";import d from"./index.js";import{normaliseGroup as v}from"../release/types.js";const g=(r,e,o)=>(r??"{name}@{version}").replaceAll("{name}",e).replaceAll("{version}",o),x=r=>{let e=r[0]??"0.0.0";for(const o of r){const s=i.valid(o)!==null,t=i.valid(e)!==null;s&&(!t||i.gt(o,e))&&(e=o)}return e},T=(r,e)=>{const o=[...r.fixed??[],...r.linked??[]].map(a=>v(a)),s=[],t=new Set;return o.forEach((a,f)=>{if(!a.syncGitTag)return;const m=e.filter(n=>!t.has(n.name)&&a.packages.some(c=>n.name===c||d(c,n.name))).map(n=>n.name);if(m.length===0)return;for(const n of m)t.add(n);const u=m.map(n=>e.find(c=>c.name===n)?.version??"0.0.0"),l=x(u),p=a.name??`group-${f}`;s.push({members:m,name:p,tag:g(a.tagPattern,p,l),version:l})}),{grouped:t,groups:s}};export{T as resolveSyncTagGroups};

package/dist/packem_chunks/handler.js

@@ -1 +1 @@
-import{L as v,h,N as u}from"../packem_shared/pm-runner-DRybtzOV.js";import{r as w,a as C}from"../packem_shared/command-runtime-DQ7ZpLYL.js";import{i as R}from"../packem_shared/utils-CRueU43T.js";const b=async({argument:f,logger:l,options:e,rawUnknown:m,visConfig:s,workspaceRoot:d})=>{const a=f;if(!a||a.length===0)throw new Error("No command specified. Usage: vis exec <command> [args...]");const[n,...c]=a,t=m??[],i=t[0]==="--"?c:[...c,...t],o=d??process.cwd(),p=R(e.filter);let r=!e.recursive&&!e.workspaceRoot&&!e.parallel&&!e.reverse&&!e.shellMode&&p.length===0?v(n,i,o):null;if(r===null){const g=w({logger:l,options:e,visConfig:s},o),k=h(o,{backend:C(g),configBackend:s?.install?.backend,configCorepack:s?.install?.corepack});r=u(k,{args:i,command:n,filter:p,parallel:e.parallel||!1,recursive:e.recursive||!1,reverse:e.reverse||!1,shellMode:e.shellMode||!1,workspaceRoot:e.workspaceRoot||!1},o,l)}r!==0&&(process.exitCode=r)};export{b as default};
+import{r as g,a as p,b as v}from"../packem_shared/pm-runner-de-jCq8q.js";import{r as h,a as x}from"../packem_shared/command-runtime-CiLVo4ED.js";import{t as R}from"../packem_shared/utils-DQFHJn72.js";const B=async({argument:f,logger:c,options:e,rawUnknown:i,visConfig:s,workspaceRoot:k})=>{const l=f;if(!l||l.length===0)throw new Error("No command specified. Usage: vis exec <command> [args...]");const[o,...n]=l,t=i??[],m=t[0]==="--"?n:[...n,...t],a=k??process.cwd(),d=R(e.filter);let r=!e.recursive&&!e.workspaceRoot&&!e.parallel&&!e.reverse&&!e.shellMode&&d.length===0?g(o,m,a):null;if(r===null){const u=h({logger:c,options:e,visConfig:s},a),w=p(a,{backend:x(u),configBackend:s?.install?.backend,configCorepack:s?.install?.corepack});r=v(w,{args:m,command:o,filter:d,parallel:e.parallel||!1,recursive:e.recursive||!1,reverse:e.reverse||!1,shellMode:e.shellMode||!1,workspaceRoot:e.workspaceRoot||!1},a,c)}r!==0&&(process.exitCode=r)};export{B as default};

package/dist/packem_chunks/handler10.js

@@ -1,5 +1,5 @@
-import{createRequire as _}from"node:module";import{l as a,z as d,w as r,j as y}from"../packem_shared/index-BLtnel38.js";import{b}from"../packem_shared/en-BDYMmM2_.js";let g;const v=s=>(g??=_(import.meta.url))(s),t=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,u=s=>{if(typeof t<"u"&&t.versions&&t.versions.node){const[n,i]=t.versions.node.split(".").map(Number);if(n>22||n===22&&i>=3||n===20&&i>=16)return t.getBuiltinModule(s)}return v(s)},{homedir:o}=u("node:os"),{createInterface:w}=u("node:readline"),c=b(),p=[r(o(),".zshrc"),r(o(),".zshenv"),r(o(),".bashrc"),r(o(),".bash_profile"),r(o(),".profile"),r(o(),".config","fish","config.fish")],j=s=>{const n=[];for(const i of p)if(a(i))try{const f=d(i).split(`
-`),l=f.filter(e=>!e.includes(".vis/bin")&&!e.includes("VIS_HOME")&&!e.includes("# vis "));l.length!==f.length&&(y(i,l.join(`
-`)),n.push(i))}catch{s.warn(`warning: could not clean ${i}`)}return n},E=async({fs:s,logger:n,options:i})=>{if(!a(c)){n.info("vis is not installed (no ~/.vis directory found).");return}n.info("This will remove:"),n.info(`  ${c}/`);const f=p.filter(e=>a(e)&&d(e).includes(".vis"));for(const e of f)n.info(`  Lines in ${e}`);if(!i.yes){if(!process.stdin.isTTY)throw new Error("Non-interactive terminal. Use --yes to confirm.");const e=w({input:process.stdin,output:process.stdout}),m=await new Promise(h=>{e.question(`
-Type "uninstall" to confirm: `,h)});if(e.close(),m.trim()!=="uninstall"){n.info("Aborted.");return}}const l=j(n);for(const e of l)n.info(`Cleaned ${e}`);try{await s.rm(c,{force:!0,recursive:!0}),n.info(`
-✓ Removed ${c}`)}catch(e){throw new Error(`Failed to remove ${c}: ${e instanceof Error?e.message:String(e)}`,{cause:e})}n.info("✓ vis has been uninstalled.")};export{E as default};
+import{createRequire as _}from"node:module";import{z as m,e as t}from"../packem_shared/index-DHD8wb6Z.js";import{b}from"../packem_shared/formatBytes-BHAzNIrn-DFIppnY0.js";import{y as a}from"../packem_shared/isAccessibleSync-DYKTrrvc-CSnBISfV.js";import{U as j}from"../packem_shared/writeFileSync-DJoHk3Ks-CgQ-VNNT.js";let v;const w=s=>(v??=_(import.meta.url))(s),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,d=s=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[n,o]=c.versions.node.split(".").map(Number);if(n>22||n===22&&o>=3||n===20&&o>=16)return c.getBuiltinModule(s)}return w(s)},{homedir:i}=d("node:os"),{createInterface:y}=d("node:readline"),f=b(),p=[t(i(),".zshrc"),t(i(),".zshenv"),t(i(),".bashrc"),t(i(),".bash_profile"),t(i(),".profile"),t(i(),".config","fish","config.fish")],E=s=>{const n=[];for(const o of p)if(a(o))try{const l=m(o).split(`
+`),e=l.filter(r=>!r.includes(".vis/bin")&&!r.includes("VIS_HOME")&&!r.includes("# vis "));e.length!==l.length&&(j(o,e.join(`
+`)),n.push(o))}catch{s.warn(`warning: could not clean ${o}`)}return n},H=async({fs:s,logger:n,options:o})=>{if(!a(f)){n.info("vis is not installed (no ~/.vis directory found).");return}n.info("This will remove:"),n.info(`  ${f}/`);const u=p.filter(e=>a(e)&&m(e).includes(".vis"));for(const e of u)n.info(`  Lines in ${e}`);if(!o.yes){if(!process.stdin.isTTY)throw new Error("Non-interactive terminal. Use --yes to confirm.");const e=y({input:process.stdin,output:process.stdout}),r=await new Promise(h=>{e.question(`
+Type "uninstall" to confirm: `,h)});if(e.close(),r.trim()!=="uninstall"){n.info("Aborted.");return}}const l=E(n);for(const e of l)n.info(`Cleaned ${e}`);try{await s.rm(f,{force:!0,recursive:!0}),n.info(`
+✓ Removed ${f}`)}catch(e){throw new Error(`Failed to remove ${f}: ${e instanceof Error?e.message:String(e)}`,{cause:e})}n.info("✓ vis has been uninstalled.")};export{H as default};

package/dist/packem_chunks/handler11.js

@@ -1 +1 @@
-import{h as f,a as d}from"../packem_shared/pm-runner-DRybtzOV.js";import{r as k,a as m}from"../packem_shared/command-runtime-DQ7ZpLYL.js";const h=async({argument:o,logger:s,options:i,process:c,visConfig:e,workspaceRoot:r})=>{if(!o||o.length===0)throw new Error("No package specified. Usage: vis info <package> [field...]");const[t,...l]=o,a=r??c.cwd,p=k({logger:s,options:i,visConfig:e},a),g=f(a,{backend:m(p),configBackend:e?.install?.backend,configCorepack:e?.install?.corepack}),n=d(g,{fields:l,json:i.json||!1,package:t},a,s);n!==0&&n!==1&&(process.exitCode=n)};export{h as default};
+import{a as f,f as k}from"../packem_shared/pm-runner-de-jCq8q.js";import{r as m,a as w}from"../packem_shared/command-runtime-CiLVo4ED.js";const I=async({argument:e,logger:s,options:n,process:r,visConfig:a,workspaceRoot:t})=>{if(!e||e.length===0)throw new Error("No package specified. Usage: vis info <package> [field...]");const[l,...d]=e,c=t??r.cwd,i=m({logger:s,options:n,visConfig:a},c),p=f(c,{backend:w(i),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),o=k(p,{fields:d,json:n.json||!1,package:l},c,s);o!==0&&o!==1&&(process.exitCode=o)};export{I as default};

package/dist/packem_chunks/handler12.js

@@ -1,27 +1,27 @@
-import{createRequire as D}from"node:module";import{w as d,b as F,l as $,j as y}from"../packem_shared/index-BLtnel38.js";import{findVisConfigFile as I,DEFAULT_MIN_RELEASE_AGE_MINUTES as h}from"./CONFIG_FILES.js";import{p as e,e as G}from"./cli-main.js";import{A as P}from"../packem_shared/pm-runner-DRybtzOV.js";import{w as q}from"../packem_shared/build-scripts-DWypBQ--.js";import{O as A}from"../packem_shared/native-config-sync-CHMCJx7H.js";import{S as x}from"../packem_shared/min-release-age-6avfn81h.js";let N;const M=i=>(N??=D(import.meta.url))(i),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,R=i=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[s,o]=g.versions.node.split(".").map(Number);if(s>22||s===22&&o>=3||s===20&&o>=16)return g.getBuiltinModule(i)}return M(i)},{execFileSync:O}=R("node:child_process"),{createInterface:B}=R("node:readline"),K=i=>{const s=[];return $(d(i,"turbo.json"))&&s.push("turborepo"),$(d(i,"nx.json"))&&s.push("nx"),$(d(i,".moon"))&&s.push("moon"),s},E=(i,s)=>new Promise(o=>{i.question(s,t=>{o(t.trim())})}),u=async(i,s,o=!0)=>{const t=await E(i,`${s} ${o?"[Y/n]":"[y/N]"} `);return t===""?o:t.toLowerCase()==="y"||t.toLowerCase()==="yes"},w=(i,s)=>{const o=[],t=Object.entries(s.allowBuilds).filter(([,c])=>c).map(([c])=>`                    "${c}": true,`).join(`
-`),a=[`            installScripts: {
-                allow: ${t?`{
-${t}
+import{createRequire as E}from"node:module";import{e as m,a as O}from"../packem_shared/index-DHD8wb6Z.js";import{findVisConfigFile as F,DEFAULT_MIN_RELEASE_AGE_MINUTES as v}from"./CONFIG_FILES.js";import{p as e,e as q}from"./cli-main.js";import{d as G}from"../packem_shared/pm-runner-de-jCq8q.js";import{s as U}from"../packem_shared/build-scripts-pdVmqXRm.js";import{y as S}from"../packem_shared/isAccessibleSync-DYKTrrvc-CSnBISfV.js";import{U as j}from"../packem_shared/writeFileSync-DJoHk3Ks-CgQ-VNNT.js";import{s as T}from"../packem_shared/native-config-sync-BSzU4qUO.js";import{s as R}from"../packem_shared/min-release-age-ChzTC7_I.js";let M;const N=t=>(M??=E(import.meta.url))(t),p=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,x=t=>{if(typeof p<"u"&&p.versions&&p.versions.node){const[s,n]=p.versions.node.split(".").map(Number);if(s>22||s===22&&n>=3||s===20&&n>=16)return p.getBuiltinModule(t)}return N(t)},{execFileSync:I}=x("node:child_process"),{createInterface:D}=x("node:readline"),K=t=>{const s=[];return S(m(t,"turbo.json"))&&s.push("turborepo"),S(m(t,"nx.json"))&&s.push("nx"),S(m(t,".moon"))&&s.push("moon"),s},B=(t,s)=>new Promise(n=>{t.question(s,i=>{n(i.trim())})}),d=async(t,s,n=!0)=>{const o=await B(t,`${s} ${n?"[Y/n]":"[y/N]"} `);return o===""?n:o.toLowerCase()==="y"||o.toLowerCase()==="yes"},w=(t,s)=>{const n=[],i=Object.entries(s.allowBuilds).filter(([,c])=>c).map(([c])=>`                    "${c}": true,`).join(`
+`),r=[`            installScripts: {
+                allow: ${i?`{
+${i}
                 }`:"{}"},
-            },`];s.minimumReleaseAge!==void 0&&a.push(`            firstSeen: {
+            },`];s.minimumReleaseAge!==void 0&&r.push(`            firstSeen: {
                 minutes: ${String(s.minimumReleaseAge)},
-            },`);let n=`        policies: {
-${a.join(`
+            },`);let l=`        policies: {
+${r.join(`
 `)}
-        },`;return s.enableSocket&&(n+=`
-        socket: { enabled: true },`),s.enableDepsDev&&(n+=`
-        depsDev: { enabled: true },`),o.push(`    security: {
-${n}
-    },`),s.staged&&o.push(`    staged: {
+        },`;return s.enableSocket&&(l+=`
+        socket: { enabled: true },`),s.enableDepsDev&&(l+=`
+        depsDev: { enabled: true },`),n.push(`    security: {
+${l}
+    },`),s.staged&&n.push(`    staged: {
         "*": ["vis lint --staged --fix", "vis fmt --staged"],
     },`),`import { defineConfig } from "@visulima/vis/config";
 
 export default defineConfig({
-${o.join(`
+${n.join(`
 
 `)}
 });
-`},L=async(i,s,o)=>{const t=B({input:process.stdin,output:process.stdout});e.info(`
+`},L=async(t,s,n)=>{const i=D({input:process.stdin,output:process.stdout});e.info(`
   vis init — interactive setup
-`);const a=await u(t,"  Enable Socket.dev security scanning?");a&&(e.success("    Socket.dev enabled — scores, alerts, and supply chain data active."),process.env.VIS_SOCKET_TOKEN||e.notice("    Set VIS_SOCKET_TOKEN for a custom API token (optional).")),e.info("");const n=await u(t,"  Enable Google deps.dev (OpenSSF Scorecard + GHSA advisories)?");n&&e.success("    deps.dev enabled — Scorecard signals and advisories merged into the security report."),e.info("");const c=await u(t,"  Scan for packages with build scripts?"),p={};if(c){e.info("    Scanning node_modules...");const l=q(i,{});if(l.length>0){e.info(`    Found ${String(l.length)} package${l.length===1?"":"s"} with build scripts:
-`);for(const r of l){const f=await u(t,`    Allow ${r}?`,!1),_=r.split(" (")[0]??r;p[_]=f,f&&e.success(`      ✓ ${_} approved`)}}else e.info("    No packages with build scripts found.")}e.info("");const T=await u(t,"  Enforce a minimum release age (block freshly-published versions)?");let m;if(T){const l=await E(t,`    Minimum age in minutes (default ${String(h)} = 2 days): `),r=l===""?h:Number.parseInt(l,10);m=Number.isFinite(r)&&r>0?r:h,e.success(`    minimumReleaseAge: ${String(m)} minutes`)}e.info("");const b=await u(t,"  Set up pre-commit hooks (lint-staged)?",!1);let S=!1;(s.name==="pnpm"||s.name==="yarn"||s.name==="npm"||s.name==="bun")&&(e.info(""),S=await u(t,`  Sync security settings to ${s.name} config?`));const v=K(i);if(v.length>0&&(e.info(""),e.info(`  Detected existing tools: ${v.join(", ")}`),await u(t,`  Run \`vis migrate\` for ${v.join(", ")}?`,!1))){t.close();const[l,...r]=s.name==="pnpm"?["pnpm","exec"]:s.name==="yarn"?["yarn","exec"]:s.name==="bun"?["bunx"]:["npx"];for(const f of v){e.info(`    Migrating from ${f}...`);try{O(l,[...r,"vis","migrate",f],{cwd:i,stdio:"inherit"})}catch{e.warn(`    Migration from ${f} had issues — run \`vis migrate ${f}\` manually.`)}}if($(o))e.success(`Migrated config written to ${o}`);else{const f=w(s.name,{allowBuilds:p,enableDepsDev:n,enableSocket:a,minimumReleaseAge:m,staged:b});y(o,f),e.success(`Created ${o}`)}e.notice("  Run 'vis doctor' to see your project's full health status.");return}t.close(),e.info("");const C=w(s.name,{allowBuilds:p,enableDepsDev:n,enableSocket:a,minimumReleaseAge:m,staged:b});if(y(o,C),e.success(`Created ${o}`),S){const l=Object.fromEntries(Object.entries(p).filter(([,r])=>r));for(const r of A(s.name,i,l))e.success(`  ${r}`);for(const r of x(s.name,i,m))e.success(`  ${r}`)}e.info(""),e.info("  Setup complete. Your config:");const j=[a&&"Socket.dev",n&&"deps.dev"].filter(Boolean);e.info(`    Security:      ${j.length>0?`${j.join(" + ")} enabled`:"defaults only"}`),e.info(`    Build scripts: ${Object.values(p).filter(Boolean).length} approved`),e.info(`    Min age:       ${m===void 0?"not enforced":`${String(m)} minutes`}`),e.info(`    Git hooks:     ${b?"lint-staged configured":"not configured"}`),e.info(`    PM sync:       ${S?"done":"skipped"}`),e.info(""),e.notice("  Run 'vis doctor' to see your project's full health status."),e.info("")},U=(i,s,o,t)=>{const a=w(s.name,{allowBuilds:{},enableDepsDev:!1,enableSocket:!1,minimumReleaseAge:h,staged:!1});if(y(t,a),e.success(`Created ${t}`),e.info("  Secure defaults are applied automatically by defineConfig()."),o.syncNative){for(const n of A(s.name,i,{}))e.success(`  ${n}`);for(const n of x(s.name,i,h))e.success(`  ${n}`)}e.info(""),e.notice("Run 'vis doctor' for a full health check, or 'vis init' in a terminal for guided setup.")},k=(i,s,o)=>{const t=d(i,".."),a=d(s,"node_modules","@visulima","vis","schemas",o),n=F(t,a),c=n===""?`./${o}`:n.split(/[/\\]/u).join("/");return c.startsWith(".")?c:`./${c}`},V=(i,s)=>{const o=k(d(i,"project.json"),s,"project.schema.json"),t=k(d(i,"vis.config.ts"),s,"vis-config.schema.json");e.info(""),e.info("Paste these into your config files to get editor IntelliSense:"),e.info(""),e.info(`  project.json    → "$schema": "${o}"`),e.info(`  vis.config.ts   → see ${t} (vis.config.ts is TypeScript; use the import path directly)`),e.info(""),e.notice("For nested project.json files, the `..` depth changes — run `vis migrate nx` to auto-rewrite all of them.")},ee=async({options:i,workspaceRoot:s})=>{const o=s??process.cwd();if(i.schema){V(o,o);return}const t=P(o),a=I(o);if(a&&!i.force){e.warn(`Config already exists: ${a}`),e.notice("Use --force to overwrite, or edit the existing file.");return}const n=a??d(o,"vis.config.ts");process.stdin.isTTY&&i.interactive!==!1?await L(o,t,n):U(o,t,i,n);const c=G(o);c.added.length>0&&e.success(`Added to .gitignore: ${c.added.join(", ")}`)};export{k as buildSchemaRefForTesting,ee as default};
+`);const o=await d(i,"  Enable Socket.dev security scanning?");o&&(e.success("    Socket.dev enabled — scores, alerts, and supply chain data active."),process.env.VIS_SOCKET_TOKEN||e.notice("    Set VIS_SOCKET_TOKEN for a custom API token (optional).")),e.info("");const r=await d(i,"  Enable Google deps.dev (OpenSSF Scorecard + GHSA advisories)?");r&&e.success("    deps.dev enabled — Scorecard signals and advisories merged into the security report."),e.info("");const l=await d(i,"  Scan for packages with build scripts?"),c={};if(l){e.info("    Scanning node_modules...");const f=U(t,{});if(f.length>0){e.info(`    Found ${String(f.length)} package${f.length===1?"":"s"} with build scripts:
+`);for(const a of f){const y=await d(i,`    Allow ${a}?`,!1),u=a.split(" (")[0]??a;c[u]=y,y&&e.success(`      ✓ ${u} approved`)}}else e.info("    No packages with build scripts found.")}e.info("");const C=await d(i,"  Enforce a minimum release age (block freshly-published versions)?");let g;if(C){const f=await B(i,`    Minimum age in minutes (default ${String(v)} = 2 days): `),a=f===""?v:Number.parseInt(f,10);g=Number.isFinite(a)&&a>0?a:v,e.success(`    minimumReleaseAge: ${String(g)} minutes`)}e.info("");const $=await d(i,"  Set up pre-commit hooks (lint-staged)?",!1);let b=!1;(s.name==="pnpm"||s.name==="yarn"||s.name==="npm"||s.name==="bun")&&(e.info(""),b=await d(i,`  Sync security settings to ${s.name} config?`));const h=K(t);if(h.length>0&&(e.info(""),e.info(`  Detected existing tools: ${h.join(", ")}`),await d(i,`  Run \`vis migrate\` for ${h.join(", ")}?`,!1))){i.close();const[a,...y]=s.name==="pnpm"?["pnpm","exec"]:s.name==="yarn"?["yarn","exec"]:s.name==="bun"?["bunx"]:["npx"];for(const u of h){e.info(`    Migrating from ${u}...`);try{I(a,[...y,"vis","migrate",u],{cwd:t,stdio:"inherit"})}catch{e.warn(`    Migration from ${u} had issues — run \`vis migrate ${u}\` manually.`)}}if(S(n))e.success(`Migrated config written to ${n}`);else{const u=w(s.name,{allowBuilds:c,enableDepsDev:r,enableSocket:o,minimumReleaseAge:g,staged:$});j(n,u),e.success(`Created ${n}`)}e.notice("  Run 'vis doctor' to see your project's full health status.");return}i.close(),e.info("");const A=w(s.name,{allowBuilds:c,enableDepsDev:r,enableSocket:o,minimumReleaseAge:g,staged:$});if(j(n,A),e.success(`Created ${n}`),b){const f=Object.fromEntries(Object.entries(c).filter(([,a])=>a));for(const a of T(s.name,t,f))e.success(`  ${a}`);for(const a of R(s.name,t,g))e.success(`  ${a}`)}e.info(""),e.info("  Setup complete. Your config:");const _=[o&&"Socket.dev",r&&"deps.dev"].filter(Boolean);e.info(`    Security:      ${_.length>0?`${_.join(" + ")} enabled`:"defaults only"}`),e.info(`    Build scripts: ${Object.values(c).filter(Boolean).length} approved`),e.info(`    Min age:       ${g===void 0?"not enforced":`${String(g)} minutes`}`),e.info(`    Git hooks:     ${$?"lint-staged configured":"not configured"}`),e.info(`    PM sync:       ${b?"done":"skipped"}`),e.info(""),e.notice("  Run 'vis doctor' to see your project's full health status."),e.info("")},V=(t,s,n,i)=>{const o=w(s.name,{allowBuilds:{},enableDepsDev:!1,enableSocket:!1,minimumReleaseAge:v,staged:!1});if(j(i,o),e.success(`Created ${i}`),e.info("  Secure defaults are applied automatically by defineConfig()."),n.syncNative){for(const r of T(s.name,t,{}))e.success(`  ${r}`);for(const r of R(s.name,t,v))e.success(`  ${r}`)}e.info(""),e.notice("Run 'vis doctor' for a full health check, or 'vis init' in a terminal for guided setup.")},k=(t,s,n)=>{const i=m(t,".."),o=m(s,"node_modules","@visulima","vis","schemas",n),r=O(i,o),l=r===""?`./${n}`:r.split(/[/\\]/u).join("/");return l.startsWith(".")?l:`./${l}`},Y=(t,s)=>{const n=k(m(t,"project.json"),s,"project.schema.json"),i=k(m(t,"vis.config.ts"),s,"vis-config.schema.json");e.info(""),e.info("Paste these into your config files to get editor IntelliSense:"),e.info(""),e.info(`  project.json    → "$schema": "${n}"`),e.info(`  vis.config.ts   → see ${i} (vis.config.ts is TypeScript; use the import path directly)`),e.info(""),e.notice("For nested project.json files, the `..` depth changes — run `vis migrate nx` to auto-rewrite all of them.")},ne=async({options:t,workspaceRoot:s})=>{const n=s??process.cwd();if(t.schema){Y(n,n);return}const i=G(n),o=F(n);if(o&&!t.force){e.warn(`Config already exists: ${o}`),e.notice("Use --force to overwrite, or edit the existing file.");return}const r=o??m(n,"vis.config.ts");!!process.stdin.isTTY&&t.interactive!==!1?await L(n,i,r):V(n,i,t,r);const c=q(n);c.added.length>0&&e.success(`Added to .gitignore: ${c.added.join(", ")}`)};export{k as buildSchemaRefForTesting,ne as default};

package/dist/packem_chunks/handler13.js

@@ -1,5 +1,5 @@
-import{I as $,E as u,V as k,s as y}from"../packem_shared/index.server-CusjRLCh.js";import{p}from"./cli-main.js";import{r as N,M,a as R,b as S,c as x,d as A,e as V,f as b,g as C,h as E}from"../packem_shared/s1ngularity-BIYhg82u.js";import{g as P,r as j}from"../packem_shared/packument-B9-WqReu.js";import{r as B}from"../packem_shared/provenance-CLxuqCfL.js";import{r as D}from"../packem_shared/signatures-C8iQ5fUq.js";const v=new Set(["archivedRepo","author","downloads","expiredDomains","metadata","newBin","provenance","s1ngularity","signatures"]),I=r=>{const s=r.trim();if(s==="")return;if(s.startsWith("@")){const o=s.indexOf("@",1);return o===-1?{name:s,spec:void 0}:{name:s.slice(0,o),spec:s.slice(o+1)||void 0}}const i=s.indexOf("@");return i===-1?{name:s,spec:void 0}:{name:s.slice(0,i),spec:s.slice(i+1)||void 0}},O=r=>{if(r===void 0||r.trim()==="")return;const s=new Set;for(const i of r.split(",")){const o=i.trim();if(!v.has(o))throw new Error(`Unknown marshall in --only: ${o}. Known: ${[...v].sort().join(", ")}.`);s.add(o)}return s},m=(r,s)=>r===void 0||r.has(s),F=r=>r?.has("signatures")??!1,K=async({argument:r,options:s,workspaceRoot:i})=>{if(!r||r.length===0)throw new Error("No package specified. Usage: vis inspect <package>[@<spec>]");const o=I(r[0]);if(o===void 0)throw new Error(`Invalid package argument: "${String(r[0])}". Usage: vis inspect <package>[@<spec>]`);const t=O(s.only),f=await P(o.name,{workspaceRoot:i});if(f===void 0){p.error(`Package ${o.name} not found in the registry.`),process.exitCode=2;return}const g=j(f,o.spec);if(g===void 0){p.error(`Could not resolve ${o.name}@${o.spec??"latest"} to a published version.`),process.exitCode=2;return}const c=[{name:o.name,version:g}],n=new M;if(m(t,"author")){const e=await N(c,{workspaceRoot:i});for(const a of e)n.add({marshall:"author",message:a.message,packageName:a.packageName,severity:a.severity})}if(m(t,"provenance")){const e=await B(c);for(const a of e)n.add({marshall:"provenance",message:`Prior version ${a.priorVersionWithProvenance} had provenance but ${a.version} does not.`,packageName:a.packageName,severity:"error"})}if(m(t,"s1ngularity")){const e=await R(c,{workspaceRoot:i});for(const a of e){const d=a.hookChanges.map(w=>`${w.hook} (${w.kind})`).join(", "),l=a.hookChanges.length===1;n.add({marshall:"s1ngularity",message:`${a.version} ${l?"has an":"has"} install-script ${l?"change":"changes"} [${d}] AND dropped the provenance attestation that ${a.priorVersion} carried — this is the s1ngularity compromised-publish shape.`,packageName:a.packageName,severity:"error"})}}if(m(t,"newBin")){const e=await S(c);for(const a of e){const d=a.newBins.map(l=>l.command).join(", ");n.add({marshall:"newBin",message:`${a.toVersion} adds new bin script${a.newBins.length===1?"":"s"}: ${d} (prior: ${a.fromVersion}).`,packageName:a.packageName,severity:"warning"})}}if(m(t,"metadata")){const e=await x(c,{workspaceRoot:i});for(const a of e)n.add({marshall:"metadata",message:`Missing/invalid metadata: ${a.issues.join(", ")}.`,packageName:a.packageName,severity:"warning"})}if(m(t,"downloads")){const e=await A([o.name]);for(const a of e){const d=a.downloadsLastMonth===void 0?"unknown":String(a.downloadsLastMonth);n.add({marshall:"downloads",message:a.kind==="no-data"?"npm stats API returned no monthly download data.":`Only ${d} downloads in the past month.`,packageName:a.packageName,severity:a.severity})}}if(m(t,"expiredDomains")){const e=await V(c,{workspaceRoot:i});for(const a of e)n.add({marshall:"expiredDomains",message:a.kind==="expired"?`Maintainer email domain ${a.domain} (${a.maintainer}) is unregistered — potential hijack risk.`:`Could not verify maintainer email domain ${a.domain} (${a.maintainer}).`,packageName:a.packageName,severity:a.severity})}if(F(t)){const e=await D(c,{workspaceRoot:i});for(const a of e)n.add({marshall:"signatures",message:a.message,packageName:a.packageName,severity:a.severity})}if(m(t,"archivedRepo")){const e=await b(c,{workspaceRoot:i});for(const a of e)n.add({marshall:"archivedRepo",message:a.kind==="archived"?`Source repo ${a.owner}/${a.repo} is archived${a.archivedAt===void 0?"":` (since ${a.archivedAt})`}.`:`Source repo ${a.owner}/${a.repo} returned 404 from GitHub.`,packageName:a.packageName,severity:"warning"})}const h=n.all();if(s.json===!0)process.stdout.write(`${JSON.stringify(C(h),void 0,2)}
-`);else{const e=`${o.name}@${g}`;if(h.length===0)p.info(`${$("✓")} ${e} — no findings.`);else{p.info(`${u("Inspecting")} ${e}`);for(const l of E(h))process.stdout.write(`${l}
-`);const a=n.errors().length,d=n.warnings().length;process.stdout.write(`
-${u("Summary:")} ${k(`${String(a)} error${a===1?"":"s"}`)}, ${y(`${String(d)} warning${d===1?"":"s"}`)}.
-`)}}(n.hasErrors()||s.strict===!0&&!n.isEmpty())&&(process.exitCode=1)};export{K as default,I as parsePackageArg};
+import{J as k,F as v,X as $,r as y}from"../packem_shared/index.server-CwSgbeN7.js";import{p}from"./cli-main.js";import{r as N,M,a as S,b as x,c as A,d as C,e as R,f as b,g as P,h as j}from"../packem_shared/s1ngularity-RZOHbGrE.js";import{g as B,r as D}from"../packem_shared/packument-C55kVxcQ.js";import{r as E}from"../packem_shared/provenance-CvfQEJPQ.js";import{r as O}from"../packem_shared/signatures-oZ_2IneN.js";const w=new Set(["archivedRepo","author","downloads","expiredDomains","metadata","newBin","provenance","s1ngularity","signatures"]),V=n=>{const s=n.trim();if(s==="")return;if(s.startsWith("@")){const r=s.indexOf("@",1);return r===-1?{name:s,spec:void 0}:{name:s.slice(0,r),spec:s.slice(r+1)||void 0}}const t=s.indexOf("@");return t===-1?{name:s,spec:void 0}:{name:s.slice(0,t),spec:s.slice(t+1)||void 0}},F=n=>{if(n===void 0||n.trim()==="")return;const s=new Set;for(const t of n.split(",")){const r=t.trim();if(!w.has(r))throw new Error(`Unknown marshall in --only: ${r}. Known: ${[...w].sort().join(", ")}.`);s.add(r)}return s},l=(n,s)=>n===void 0||n.has(s),L=n=>n?.has("signatures")??!1,q=async({argument:n,options:s,workspaceRoot:t})=>{if(!n||n.length===0)throw new Error("No package specified. Usage: vis inspect <package>[@<spec>]");const r=V(n[0]);if(r===void 0)throw new Error(`Invalid package argument: "${String(n[0])}". Usage: vis inspect <package>[@<spec>]`);const i=F(s.only),h=await B(r.name,{workspaceRoot:t});if(h===void 0){p.error(`Package ${r.name} not found in the registry.`),process.exitCode=2;return}const g=D(h,r.spec);if(g===void 0){p.error(`Could not resolve ${r.name}@${r.spec??"latest"} to a published version.`),process.exitCode=2;return}const c=[{name:r.name,version:g}],o=new M;if(l(i,"author")){const a=await N(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"author",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"provenance")){const a=await E(c);for(const e of a)o.add({marshall:"provenance",message:`Prior version ${e.priorVersionWithProvenance} had provenance but ${e.version} does not.`,packageName:e.packageName,severity:"error"})}if(l(i,"s1ngularity")){const a=await S(c,{workspaceRoot:t});for(const e of a){const d=e.hookChanges.map(f=>`${f.hook} (${f.kind})`).join(", "),m=e.hookChanges.length===1;o.add({marshall:"s1ngularity",message:`${e.version} ${m?"has an":"has"} install-script ${m?"change":"changes"} [${d}] AND dropped the provenance attestation that ${e.priorVersion} carried — this is the s1ngularity compromised-publish shape.`,packageName:e.packageName,severity:"error"})}}if(l(i,"newBin")){const a=await x(c);for(const e of a){const d=e.newBins.map(m=>m.command).join(", ");o.add({marshall:"newBin",message:`${e.toVersion} adds new bin script${e.newBins.length===1?"":"s"}: ${d} (prior: ${e.fromVersion}).`,packageName:e.packageName,severity:"warning"})}}if(l(i,"metadata")){const a=await A(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"metadata",message:`Missing/invalid metadata: ${e.issues.join(", ")}.`,packageName:e.packageName,severity:"warning"})}if(l(i,"downloads")){const a=await C([r.name]);for(const e of a){const d=e.downloadsLastMonth===void 0?"unknown":String(e.downloadsLastMonth);o.add({marshall:"downloads",message:e.kind==="no-data"?"npm stats API returned no monthly download data.":`Only ${d} downloads in the past month.`,packageName:e.packageName,severity:e.severity})}}if(l(i,"expiredDomains")){const a=await R(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"expiredDomains",message:e.kind==="expired"?`Maintainer email domain ${e.domain} (${e.maintainer}) is unregistered — potential hijack risk.`:`Could not verify maintainer email domain ${e.domain} (${e.maintainer}).`,packageName:e.packageName,severity:e.severity})}if(L(i)){const a=await O(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"signatures",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"archivedRepo")){const a=await b(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"archivedRepo",message:e.kind==="archived"?`Source repo ${e.owner}/${e.repo} is archived${e.archivedAt===void 0?"":` (since ${e.archivedAt})`}.`:`Source repo ${e.owner}/${e.repo} returned 404 from GitHub.`,packageName:e.packageName,severity:"warning"})}const u=o.all();if(s.json===!0)process.stdout.write(`${JSON.stringify(P(u),void 0,2)}
+`);else{const a=`${r.name}@${g}`;if(u.length===0)p.info(`${k("✓")} ${a} — no findings.`);else{p.info(`${v("Inspecting")} ${a}`);for(const m of j(u))process.stdout.write(`${m}
+`);const e=o.errors().length,d=o.warnings().length;process.stdout.write(`
+${v("Summary:")} ${$(`${String(e)} error${e===1?"":"s"}`)}, ${y(`${String(d)} warning${d===1?"":"s"}`)}.
+`)}}(o.hasErrors()||s.strict===!0&&!o.isEmpty())&&(process.exitCode=1)};export{q as default,V as parsePackageArg};

package/dist/packem_chunks/handler14.js

@@ -1 +1 @@
-import{w,l as j,J as A,M as B}from"../packem_shared/index-BLtnel38.js";import{p as t}from"./cli-main.js";import{A as M,h,I as F,C as T}from"../packem_shared/pm-runner-DRybtzOV.js";import{a as H,r as J}from"../packem_shared/command-runtime-DQ7ZpLYL.js";import{s as N}from"../packem_shared/typosquats-BWrmhh36.js";import{h as Q,P as U}from"../packem_shared/peer-warnings-BXAzXqY3.js";import{i as V}from"../packem_shared/utils-CRueU43T.js";const W=["pnpm-lock.yaml","yarn.lock","package-lock.json","npm-shrinkwrap.json","bun.lock","bun.lockb"],G=a=>{let r=a;for(;;){for(const l of W)if(j(w(r,l)))return!0;const n=A(r);if(n===r||B(r).root===r)return!1;r=n}},g=new Set(["aube","auto","bun","npm","pnpm","yarn"]),se=async a=>{const{argument:r,fs:n,logger:l,options:e,visConfig:i,workspaceRoot:C}=a,s=C??process.cwd();if(r&&r.length>0){const o=e,{default:q}=await import("./handler15.js"),I=o.marshallCheck===!1||o["no-marshall-check"]===!0?!1:void 0,z=o.socketCheck===!1||o["no-socket-check"]===!0?!1:void 0,E=o.typosquatCheck===!1||o["no-typosquat-check"]===!0?!1:void 0,P=o.runScripts===!0||o["run-scripts"]===!0,D=o.workspaceRoot===!0||o["workspace-root"]===!0,$=o.saveOptional===!0||o["save-optional"]===!0,L=e.dev===!0,_={autoInstallPeers:!1,exact:o.exact===!0,filter:e.filter,global:!1,marshallCheck:I,runScripts:P,saveDev:L,saveOptional:$,savePeer:!1,socketCheck:z,to:void 0,typosquatCheck:E,workspace:!1,workspaceRoot:D};await q({...a,argument:r,options:_});return}if(e.typosquatCheck!==!1&&!await N(s,i?.security?.typosquatAllowlist)){process.exitCode=1;return}const c=e.installer;if(c&&!g.has(c)){t.error(`Invalid --installer value: "${c}". Expected one of: ${[...g].join(", ")}.`),process.exitCode=1;return}const y=c,b=e.aube===!1,f=H(J({logger:l,options:e,visConfig:i},s));let p;try{p=b?f===void 0?M(s):h(s,{backend:f}):h(s,{backend:y??f,configBackend:i?.install?.backend,configCorepack:i?.install?.corepack})}catch(o){t.error(o instanceof Error?o.message:String(o)),process.exitCode=1;return}const d=F(s,p);d&&t.warn(d);const x=V(e.filter),u=e.ci||!1,m=e.frozenLockfile||u,O=e.frozenLockfile===!1||e.force||e.lockfileOnly,R=G(s),v=m||!O&&R;if(!m&&v&&!e.silent&&t.info("Defaulting to frozen lockfile (pass --no-frozen-lockfile to allow lockfile updates)."),u){t.info("Clean install: removing node_modules...");try{await n.rm(w(s,"node_modules"),{force:!0,recursive:!0})}catch(o){t.error(`Failed to remove node_modules: ${o instanceof Error?o.message:String(o)}`),process.exitCode=1;return}}const{code:k,output:S}=await T(p,{dev:e.dev||!1,filter:x,force:e.force||!1,frozenLockfile:v,ignoreScripts:!e.runScripts,lockfileOnly:e.lockfileOnly||!1,noOptional:e.optional===!1,offline:e.offline||!1,prod:e.prod||!1,recursive:e.recursive||!1,silent:e.silent||!1,workspaceRoot:e.workspaceRoot||!1},s,l,{ciMode:u,preferOffline:e.preferOffline||!1});k!==0&&(process.exitCode=k),k===0&&!e.silent&&Q(S)&&t.info(U)};export{se as default};
+import{e as w,m as F,c as _}from"../packem_shared/index-DHD8wb6Z.js";import{p as r}from"./cli-main.js";import{d as j,a as v,g as N,h as W}from"../packem_shared/pm-runner-de-jCq8q.js";import{a as $,r as K}from"../packem_shared/command-runtime-CiLVo4ED.js";import{s as M}from"../packem_shared/typosquats-D8ppc5kr.js";import{h as T,P as H}from"../packem_shared/peer-warnings-CmYSxvql.js";import{t as G}from"../packem_shared/utils-DQFHJn72.js";import{y as J}from"../packem_shared/isAccessibleSync-DYKTrrvc-CSnBISfV.js";const Q=["pnpm-lock.yaml","yarn.lock","package-lock.json","npm-shrinkwrap.json","bun.lock","bun.lockb"],U=n=>{let t=n;for(;;){for(const c of Q)if(J(w(t,c)))return!0;const a=F(t);if(a===t||_(t).root===t)return!1;t=a}},g=new Set(["aube","auto","bun","npm","pnpm","yarn"]),re=async n=>{const{argument:t,fs:a,logger:c,options:e,visConfig:l,workspaceRoot:C}=n,s=C??process.cwd();if(t&&t.length>0){const o=e,{default:L}=await import("./handler15.js"),R=o.marshallCheck===!1||o["no-marshall-check"]===!0?!1:void 0,z=o.socketCheck===!1||o["no-socket-check"]===!0?!1:void 0,D=o.typosquatCheck===!1||o["no-typosquat-check"]===!0?!1:void 0,I=o.runScripts===!0||o["run-scripts"]===!0,P=o.workspaceRoot===!0||o["workspace-root"]===!0,q=o.saveOptional===!0||o["save-optional"]===!0,A=e.dev===!0,B={autoInstallPeers:!1,exact:o.exact===!0,filter:e.filter,global:!1,marshallCheck:R,runScripts:I,saveDev:A,saveOptional:q,savePeer:!1,socketCheck:z,to:void 0,typosquatCheck:D,workspace:!1,workspaceRoot:P};await L({...n,argument:t,options:B});return}if(e.typosquatCheck!==!1&&!await M(s,l?.security?.typosquatAllowlist)){process.exitCode=1;return}const i=e.installer;if(i&&!g.has(i)){r.error(`Invalid --installer value: "${i}". Expected one of: ${[...g].join(", ")}.`),process.exitCode=1;return}const y=i,O=e.aube===!1,f=$(K({logger:c,options:e,visConfig:l},s));let p;try{p=O?f===void 0?j(s):v(s,{backend:f}):v(s,{backend:y??f,configBackend:l?.install?.backend,configCorepack:l?.install?.corepack})}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exitCode=1;return}const k=N(s,p);k&&r.warn(k);const x=G(e.filter),u=e.ci||!1,m=e.frozenLockfile||u,b=e.frozenLockfile===!1||e.force||e.lockfileOnly,E=U(s),h=m||!b&&E;if(!m&&h&&!e.silent&&r.info("Defaulting to frozen lockfile (pass --no-frozen-lockfile to allow lockfile updates)."),u){r.info("Clean install: removing node_modules...");try{await a.rm(w(s,"node_modules"),{force:!0,recursive:!0})}catch(o){r.error(`Failed to remove node_modules: ${o instanceof Error?o.message:String(o)}`),process.exitCode=1;return}}const{code:d,output:S}=await W(p,{dev:e.dev||!1,filter:x,force:e.force||!1,frozenLockfile:h,ignoreScripts:!e.runScripts,lockfileOnly:e.lockfileOnly||!1,noOptional:e.optional===!1,offline:e.offline||!1,prod:e.prod||!1,recursive:e.recursive||!1,silent:e.silent||!1,workspaceRoot:e.workspaceRoot||!1},s,c,{ciMode:u,preferOffline:e.preferOffline||!1});d!==0&&(process.exitCode=d),d===0&&!e.silent&&T(S)&&r.info(H)};export{re as default};