@visulima/vis 4.3.1 → 5.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (79) hide show
  1. package/CHANGELOG.md +497 -0
  2. package/dist/bin.js +1 -1
  3. package/dist/binx.js +1 -1
  4. package/dist/config/index.d.ts +27 -2
  5. package/dist/packem_chunks/catalog.js +2 -2
  6. package/dist/packem_chunks/cli-exec.js +1 -1
  7. package/dist/packem_chunks/cli-main.js +126 -126
  8. package/dist/packem_chunks/handler.js +1 -1
  9. package/dist/packem_chunks/handler11.js +1 -1
  10. package/dist/packem_chunks/handler12.js +1 -1
  11. package/dist/packem_chunks/handler13.js +1 -1
  12. package/dist/packem_chunks/handler14.js +1 -1
  13. package/dist/packem_chunks/handler15.js +1 -1
  14. package/dist/packem_chunks/handler16.js +1 -1
  15. package/dist/packem_chunks/handler17.js +1 -1
  16. package/dist/packem_chunks/handler18.js +1 -1
  17. package/dist/packem_chunks/handler2.js +1 -1
  18. package/dist/packem_chunks/handler20.js +1 -1
  19. package/dist/packem_chunks/handler26.js +5 -5
  20. package/dist/packem_chunks/handler27.js +1 -1
  21. package/dist/packem_chunks/handler28.js +1 -1
  22. package/dist/packem_chunks/handler29.js +1 -1
  23. package/dist/packem_chunks/handler3.js +1 -1
  24. package/dist/packem_chunks/handler5.js +1 -1
  25. package/dist/packem_chunks/handler51.js +1 -1
  26. package/dist/packem_chunks/handler59.js +1 -1
  27. package/dist/packem_chunks/handler6.js +1 -1
  28. package/dist/packem_chunks/handler61.js +1 -1
  29. package/dist/packem_chunks/handler62.js +10 -10
  30. package/dist/packem_chunks/handler64.js +6 -3
  31. package/dist/packem_chunks/handler65.js +8 -6
  32. package/dist/packem_chunks/handler66.js +1 -1
  33. package/dist/packem_chunks/handler69.js +22 -153
  34. package/dist/packem_chunks/handler7.js +1 -1
  35. package/dist/packem_chunks/handler70.js +9 -9
  36. package/dist/packem_chunks/handler71.js +153 -22
  37. package/dist/packem_chunks/handler72.js +1 -1
  38. package/dist/packem_chunks/handler73.js +1 -1
  39. package/dist/packem_chunks/handler75.js +12 -12
  40. package/dist/packem_chunks/handler77.js +1 -1
  41. package/dist/packem_chunks/handler78.js +70 -68
  42. package/dist/packem_chunks/handler9.js +1 -1
  43. package/dist/packem_chunks/heal-accept.js +1 -1
  44. package/dist/packem_chunks/help-command.js +1 -1
  45. package/dist/packem_chunks/index6.js +1 -1
  46. package/dist/packem_chunks/list.js +1 -1
  47. package/dist/packem_chunks/loader.js +1 -1
  48. package/dist/packem_chunks/sync2.js +1 -1
  49. package/dist/packem_chunks/tar.js +1 -1
  50. package/dist/packem_chunks/tripwire.js +1 -1
  51. package/dist/packem_chunks/ts-loader.js +1 -1
  52. package/dist/packem_chunks/verify-lockfile.js +1 -1
  53. package/dist/packem_shared/{affected-selection-D4giBK2X.js → affected-selection-BJXJW_3Q.js} +1 -1
  54. package/dist/packem_shared/affected-shas-B_kfSKss.js +1 -0
  55. package/dist/packem_shared/{bin-C1XKj-O-.js → bin-Dx8mjl3g.js} +1 -1
  56. package/dist/packem_shared/{ecosystem-gate-ddru_hOg.js → ecosystem-gate-CeV20GSB.js} +1 -1
  57. package/dist/packem_shared/env-consistency-Dt_uDbSP.js +1 -0
  58. package/dist/packem_shared/git-source-DExWbfN0.js +2 -0
  59. package/dist/packem_shared/{index-DQ2GJzmy.js → index-C_ScJMpb.js} +1 -1
  60. package/dist/packem_shared/{index-Chje3u9v.js → index-nEyN71oX.js} +1 -1
  61. package/dist/packem_shared/{package-version-Dxirp-UO.js → package-version-CiRZecQu.js} +1 -1
  62. package/dist/packem_shared/{packument-BQv4je9m.js → packument-Df46y5MY.js} +1 -1
  63. package/dist/packem_shared/pm-runner-3iiQayy-.js +1 -0
  64. package/dist/packem_shared/{project-name-filter-D6tXD8gd.js → project-name-filter-CH8Ih7Qr.js} +1 -1
  65. package/dist/packem_shared/{provenance-DNyVMxNv.js → provenance-DKeR0Ig1.js} +1 -1
  66. package/dist/packem_shared/{resolve-explicit-BPsdmuty.js → resolve-explicit-BmV8YBE-.js} +1 -1
  67. package/dist/packem_shared/{s1ngularity-QD2LD1sO.js → s1ngularity-DZhkIqL4.js} +1 -1
  68. package/dist/packem_shared/{signatures-t8LbOaqr.js → signatures-BxTMck2l.js} +1 -1
  69. package/dist/packem_shared/task-env-DzR4RkOj.js +2 -0
  70. package/dist/packem_shared/{vis-user-error-75VtCwMv.js → vis-user-error-Dd7hwxlW.js} +1 -1
  71. package/dist/packem_shared/{watch-loop-qRn0IHPG.js → watch-loop-BBkg02-Q.js} +2 -2
  72. package/index.js +52 -52
  73. package/package.json +10 -10
  74. package/schemas/project.schema.json +44 -1
  75. package/schemas/vis-config.schema.json +122 -7
  76. package/skills/vis/SKILL.md +24 -12
  77. package/dist/packem_shared/affected-shas-B2V84O0g.js +0 -1
  78. package/dist/packem_shared/giget-D8Kwb0kD.js +0 -2
  79. package/dist/packem_shared/pm-runner-CMSml1Bj.js +0 -1
@@ -1 +1 @@
1
- import{r as g,a as p,b as v}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as h,a as x}from"../packem_shared/command-runtime-p4IXiIf6.js";import{t as R}from"../packem_shared/utils-DQFHJn72.js";const B=async({argument:f,logger:c,options:e,rawUnknown:i,visConfig:s,workspaceRoot:k})=>{const l=f;if(!l||l.length===0)throw new Error("No command specified. Usage: vis exec <command> [args...]");const[o,...n]=l,t=i??[],m=t[0]==="--"?n:[...n,...t],a=k??process.cwd(),d=R(e.filter);let r=!e.recursive&&!e.workspaceRoot&&!e.parallel&&!e.reverse&&!e.shellMode&&d.length===0?g(o,m,a):null;if(r===null){const u=h({logger:c,options:e,visConfig:s},a),w=p(a,{backend:x(u),configBackend:s?.install?.backend,configCorepack:s?.install?.corepack});r=v(w,{args:m,command:o,filter:d,parallel:e.parallel||!1,recursive:e.recursive||!1,reverse:e.reverse||!1,shellMode:e.shellMode||!1,workspaceRoot:e.workspaceRoot||!1},a,c)}r!==0&&(process.exitCode=r)};export{B as default};
1
+ import{r as g,a as p,b as v}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as h,a as x}from"../packem_shared/command-runtime-p4IXiIf6.js";import{t as R}from"../packem_shared/utils-DQFHJn72.js";const B=async({argument:f,logger:c,options:e,rawUnknown:i,visConfig:s,workspaceRoot:k})=>{const l=f;if(!l||l.length===0)throw new Error("No command specified. Usage: vis exec <command> [args...]");const[o,...n]=l,t=i??[],m=t[0]==="--"?n:[...n,...t],a=k??process.cwd(),d=R(e.filter);let r=!e.recursive&&!e.workspaceRoot&&!e.parallel&&!e.reverse&&!e.shellMode&&d.length===0?g(o,m,a):null;if(r===null){const u=h({logger:c,options:e,visConfig:s},a),w=p(a,{backend:x(u),configBackend:s?.install?.backend,configCorepack:s?.install?.corepack});r=v(w,{args:m,command:o,filter:d,parallel:e.parallel||!1,recursive:e.recursive||!1,reverse:e.reverse||!1,shellMode:e.shellMode||!1,workspaceRoot:e.workspaceRoot||!1},a,c)}r!==0&&(process.exitCode=r)};export{B as default};
@@ -1 +1 @@
1
- import{a as f,f as k}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as m,a as w}from"../packem_shared/command-runtime-p4IXiIf6.js";const I=async({argument:e,logger:s,options:n,process:r,visConfig:a,workspaceRoot:t})=>{if(!e||e.length===0)throw new Error("No package specified. Usage: vis info <package> [field...]");const[l,...d]=e,c=t??r.cwd,i=m({logger:s,options:n,visConfig:a},c),p=f(c,{backend:w(i),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),o=k(p,{fields:d,json:n.json||!1,package:l},c,s);o!==0&&o!==1&&(process.exitCode=o)};export{I as default};
1
+ import{a as f,f as k}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as m,a as w}from"../packem_shared/command-runtime-p4IXiIf6.js";const I=async({argument:e,logger:s,options:n,process:r,visConfig:a,workspaceRoot:t})=>{if(!e||e.length===0)throw new Error("No package specified. Usage: vis info <package> [field...]");const[l,...d]=e,c=t??r.cwd,i=m({logger:s,options:n,visConfig:a},c),p=f(c,{backend:w(i),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),o=k(p,{fields:d,json:n.json||!1,package:l},c,s);o!==0&&o!==1&&(process.exitCode=o)};export{I as default};
@@ -1,4 +1,4 @@
1
- import{createRequire as A}from"node:module";import{e as m,a as O}from"../packem_shared/index-BzhrR_iC.js";import{findVisConfigFile as F,DEFAULT_MIN_RELEASE_AGE_MINUTES as h}from"./CONFIG_FILES.js";import{p as e,e as q}from"./cli-main.js";import{d as G}from"../packem_shared/pm-runner-CMSml1Bj.js";import{s as K}from"../packem_shared/build-scripts-CEDx_nJp.js";import{y as S}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as j}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{s as T}from"../packem_shared/native-config-sync-TdTWjVgI.js";import{s as R}from"../packem_shared/min-release-age-JViyQuBM.js";let M;const N=n=>(M??=A(import.meta.url))(n),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,x=n=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[s,t]=g.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return g.getBuiltinModule(n)}return N(n)},{execFileSync:D}=x("node:child_process"),{createInterface:I}=x("node:readline"),U=n=>{const s=[];return S(m(n,"turbo.json"))&&s.push("turborepo"),S(m(n,"nx.json"))&&s.push("nx"),S(m(n,".moon"))&&s.push("moon"),s},B=(n,s)=>new Promise(t=>{n.question(s,i=>{t(i.trim())})}),d=async(n,s,t=!0)=>{const o=await B(n,`${s} ${t?"[Y/n]":"[y/N]"} `);return o===""?t:o.toLowerCase()==="y"||o.toLowerCase()==="yes"},w=(n,s)=>{const t=[],i=Object.entries(s.allowBuilds).filter(([,c])=>c).map(([c])=>` "${c}": true,`).join(`
1
+ import{createRequire as A}from"node:module";import{e as m,a as O}from"../packem_shared/index-BzhrR_iC.js";import{findVisConfigFile as F,DEFAULT_MIN_RELEASE_AGE_MINUTES as h}from"./CONFIG_FILES.js";import{p as e,e as q}from"./cli-main.js";import{d as G}from"../packem_shared/pm-runner-3iiQayy-.js";import{s as K}from"../packem_shared/build-scripts-CEDx_nJp.js";import{y as S}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as j}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{s as T}from"../packem_shared/native-config-sync-TdTWjVgI.js";import{s as R}from"../packem_shared/min-release-age-JViyQuBM.js";let M;const N=n=>(M??=A(import.meta.url))(n),g=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,x=n=>{if(typeof g<"u"&&g.versions&&g.versions.node){const[s,t]=g.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return g.getBuiltinModule(n)}return N(n)},{execFileSync:D}=x("node:child_process"),{createInterface:I}=x("node:readline"),U=n=>{const s=[];return S(m(n,"turbo.json"))&&s.push("turborepo"),S(m(n,"nx.json"))&&s.push("nx"),S(m(n,".moon"))&&s.push("moon"),s},B=(n,s)=>new Promise(t=>{n.question(s,i=>{t(i.trim())})}),d=async(n,s,t=!0)=>{const o=await B(n,`${s} ${t?"[Y/n]":"[y/N]"} `);return o===""?t:o.toLowerCase()==="y"||o.toLowerCase()==="yes"},w=(n,s)=>{const t=[],i=Object.entries(s.allowBuilds).filter(([,c])=>c).map(([c])=>` "${c}": true,`).join(`
2
2
  `),a=[` installScripts: {
3
3
  allow: ${i?`{
4
4
  ${i}
@@ -1,4 +1,4 @@
1
- import{J as k,F as v,X as $,b as y}from"../packem_shared/index.server-sXNQYpsl.js";import{p}from"./cli-main.js";import{r as N,M,a as S,b as x,c as A,d as b,e as C,f as R,g as P,h as j}from"../packem_shared/s1ngularity-QD2LD1sO.js";import{g as B,r as D}from"../packem_shared/packument-BQv4je9m.js";import{r as E}from"../packem_shared/provenance-DNyVMxNv.js";import{r as O}from"../packem_shared/signatures-t8LbOaqr.js";const w=new Set(["archivedRepo","author","downloads","expiredDomains","metadata","newBin","provenance","s1ngularity","signatures"]),V=n=>{const s=n.trim();if(s==="")return;if(s.startsWith("@")){const r=s.indexOf("@",1);return r===-1?{name:s,spec:void 0}:{name:s.slice(0,r),spec:s.slice(r+1)||void 0}}const t=s.indexOf("@");return t===-1?{name:s,spec:void 0}:{name:s.slice(0,t),spec:s.slice(t+1)||void 0}},F=n=>{if(n===void 0||n.trim()==="")return;const s=new Set;for(const t of n.split(",")){const r=t.trim();if(!w.has(r))throw new Error(`Unknown marshall in --only: ${r}. Known: ${[...w].sort().join(", ")}.`);s.add(r)}return s},l=(n,s)=>n===void 0||n.has(s),L=n=>n?.has("signatures")??!1,q=async({argument:n,options:s,workspaceRoot:t})=>{if(!n||n.length===0)throw new Error("No package specified. Usage: vis inspect <package>[@<spec>]");const r=V(n[0]);if(r===void 0)throw new Error(`Invalid package argument: "${String(n[0])}". Usage: vis inspect <package>[@<spec>]`);const i=F(s.only),u=await B(r.name,{workspaceRoot:t});if(u===void 0){p.error(`Package ${r.name} not found in the registry.`),process.exitCode=2;return}const g=D(u,r.spec);if(g===void 0){p.error(`Could not resolve ${r.name}@${r.spec??"latest"} to a published version.`),process.exitCode=2;return}const c=[{name:r.name,version:g}],o=new M;if(l(i,"author")){const a=await N(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"author",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"provenance")){const a=await E(c);for(const e of a)o.add({marshall:"provenance",message:`Prior version ${e.priorVersionWithProvenance} had provenance but ${e.version} does not.`,packageName:e.packageName,severity:"error"})}if(l(i,"s1ngularity")){const a=await S(c,{workspaceRoot:t});for(const e of a){const d=e.hookChanges.map(f=>`${f.hook} (${f.kind})`).join(", "),m=e.hookChanges.length===1;o.add({marshall:"s1ngularity",message:`${e.version} ${m?"has an":"has"} install-script ${m?"change":"changes"} [${d}] AND dropped the provenance attestation that ${e.priorVersion} carried — this is the s1ngularity compromised-publish shape.`,packageName:e.packageName,severity:"error"})}}if(l(i,"newBin")){const a=await x(c);for(const e of a){const d=e.newBins.map(m=>m.command).join(", ");o.add({marshall:"newBin",message:`${e.toVersion} adds new bin script${e.newBins.length===1?"":"s"}: ${d} (prior: ${e.fromVersion}).`,packageName:e.packageName,severity:"warning"})}}if(l(i,"metadata")){const a=await A(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"metadata",message:`Missing/invalid metadata: ${e.issues.join(", ")}.`,packageName:e.packageName,severity:"warning"})}if(l(i,"downloads")){const a=await b([r.name]);for(const e of a){const d=e.downloadsLastMonth===void 0?"unknown":String(e.downloadsLastMonth);o.add({marshall:"downloads",message:e.kind==="no-data"?"npm stats API returned no monthly download data.":`Only ${d} downloads in the past month.`,packageName:e.packageName,severity:e.severity})}}if(l(i,"expiredDomains")){const a=await C(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"expiredDomains",message:e.kind==="expired"?`Maintainer email domain ${e.domain} (${e.maintainer}) is unregistered — potential hijack risk.`:`Could not verify maintainer email domain ${e.domain} (${e.maintainer}).`,packageName:e.packageName,severity:e.severity})}if(L(i)){const a=await O(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"signatures",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"archivedRepo")){const a=await R(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"archivedRepo",message:e.kind==="archived"?`Source repo ${e.owner}/${e.repo} is archived${e.archivedAt===void 0?"":` (since ${e.archivedAt})`}.`:`Source repo ${e.owner}/${e.repo} returned 404 from GitHub.`,packageName:e.packageName,severity:"warning"})}const h=o.all();if(s.json)process.stdout.write(`${JSON.stringify(P(h),void 0,2)}
1
+ import{J as k,F as v,X as $,b as y}from"../packem_shared/index.server-sXNQYpsl.js";import{p}from"./cli-main.js";import{r as N,M,a as S,b as x,c as A,d as b,e as C,f as R,g as P,h as j}from"../packem_shared/s1ngularity-DZhkIqL4.js";import{g as B,r as D}from"../packem_shared/packument-Df46y5MY.js";import{r as E}from"../packem_shared/provenance-DKeR0Ig1.js";import{r as O}from"../packem_shared/signatures-BxTMck2l.js";const w=new Set(["archivedRepo","author","downloads","expiredDomains","metadata","newBin","provenance","s1ngularity","signatures"]),V=n=>{const s=n.trim();if(s==="")return;if(s.startsWith("@")){const r=s.indexOf("@",1);return r===-1?{name:s,spec:void 0}:{name:s.slice(0,r),spec:s.slice(r+1)||void 0}}const t=s.indexOf("@");return t===-1?{name:s,spec:void 0}:{name:s.slice(0,t),spec:s.slice(t+1)||void 0}},F=n=>{if(n===void 0||n.trim()==="")return;const s=new Set;for(const t of n.split(",")){const r=t.trim();if(!w.has(r))throw new Error(`Unknown marshall in --only: ${r}. Known: ${[...w].sort().join(", ")}.`);s.add(r)}return s},l=(n,s)=>n===void 0||n.has(s),L=n=>n?.has("signatures")??!1,q=async({argument:n,options:s,workspaceRoot:t})=>{if(!n||n.length===0)throw new Error("No package specified. Usage: vis inspect <package>[@<spec>]");const r=V(n[0]);if(r===void 0)throw new Error(`Invalid package argument: "${String(n[0])}". Usage: vis inspect <package>[@<spec>]`);const i=F(s.only),u=await B(r.name,{workspaceRoot:t});if(u===void 0){p.error(`Package ${r.name} not found in the registry.`),process.exitCode=2;return}const g=D(u,r.spec);if(g===void 0){p.error(`Could not resolve ${r.name}@${r.spec??"latest"} to a published version.`),process.exitCode=2;return}const c=[{name:r.name,version:g}],o=new M;if(l(i,"author")){const a=await N(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"author",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"provenance")){const a=await E(c);for(const e of a)o.add({marshall:"provenance",message:`Prior version ${e.priorVersionWithProvenance} had provenance but ${e.version} does not.`,packageName:e.packageName,severity:"error"})}if(l(i,"s1ngularity")){const a=await S(c,{workspaceRoot:t});for(const e of a){const d=e.hookChanges.map(f=>`${f.hook} (${f.kind})`).join(", "),m=e.hookChanges.length===1;o.add({marshall:"s1ngularity",message:`${e.version} ${m?"has an":"has"} install-script ${m?"change":"changes"} [${d}] AND dropped the provenance attestation that ${e.priorVersion} carried — this is the s1ngularity compromised-publish shape.`,packageName:e.packageName,severity:"error"})}}if(l(i,"newBin")){const a=await x(c);for(const e of a){const d=e.newBins.map(m=>m.command).join(", ");o.add({marshall:"newBin",message:`${e.toVersion} adds new bin script${e.newBins.length===1?"":"s"}: ${d} (prior: ${e.fromVersion}).`,packageName:e.packageName,severity:"warning"})}}if(l(i,"metadata")){const a=await A(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"metadata",message:`Missing/invalid metadata: ${e.issues.join(", ")}.`,packageName:e.packageName,severity:"warning"})}if(l(i,"downloads")){const a=await b([r.name]);for(const e of a){const d=e.downloadsLastMonth===void 0?"unknown":String(e.downloadsLastMonth);o.add({marshall:"downloads",message:e.kind==="no-data"?"npm stats API returned no monthly download data.":`Only ${d} downloads in the past month.`,packageName:e.packageName,severity:e.severity})}}if(l(i,"expiredDomains")){const a=await C(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"expiredDomains",message:e.kind==="expired"?`Maintainer email domain ${e.domain} (${e.maintainer}) is unregistered — potential hijack risk.`:`Could not verify maintainer email domain ${e.domain} (${e.maintainer}).`,packageName:e.packageName,severity:e.severity})}if(L(i)){const a=await O(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"signatures",message:e.message,packageName:e.packageName,severity:e.severity})}if(l(i,"archivedRepo")){const a=await R(c,{workspaceRoot:t});for(const e of a)o.add({marshall:"archivedRepo",message:e.kind==="archived"?`Source repo ${e.owner}/${e.repo} is archived${e.archivedAt===void 0?"":` (since ${e.archivedAt})`}.`:`Source repo ${e.owner}/${e.repo} returned 404 from GitHub.`,packageName:e.packageName,severity:"warning"})}const h=o.all();if(s.json)process.stdout.write(`${JSON.stringify(P(h),void 0,2)}
2
2
  `);else{const a=`${r.name}@${g}`;if(h.length===0)p.info(`${k("✓")} ${a} — no findings.`);else{p.info(`${v("Inspecting")} ${a}`);for(const m of j(h))process.stdout.write(`${m}
3
3
  `);const e=o.errors().length,d=o.warnings().length;process.stdout.write(`
4
4
  ${v("Summary:")} ${$(`${String(e)} error${e===1?"":"s"}`)}, ${y(`${String(d)} warning${d===1?"":"s"}`)}.
@@ -1 +1 @@
1
- import{e as w,m as F,b as _}from"../packem_shared/index-BzhrR_iC.js";import{p as r}from"./cli-main.js";import{d as j,a as v,g as N,h as W}from"../packem_shared/pm-runner-CMSml1Bj.js";import{a as $,r as K}from"../packem_shared/command-runtime-p4IXiIf6.js";import{s as M}from"../packem_shared/typosquats-8u0drCqQ.js";import{h as T,P as H}from"../packem_shared/peer-warnings-CmYSxvql.js";import{t as G}from"../packem_shared/utils-DQFHJn72.js";import{y as J}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";const Q=["pnpm-lock.yaml","yarn.lock","package-lock.json","npm-shrinkwrap.json","bun.lock","bun.lockb"],U=n=>{let t=n;for(;;){for(const c of Q)if(J(w(t,c)))return!0;const a=F(t);if(a===t||_(t).root===t)return!1;t=a}},g=new Set(["aube","auto","bun","npm","pnpm","yarn"]),re=async n=>{const{argument:t,fs:a,logger:c,options:e,visConfig:l,workspaceRoot:C}=n,s=C??process.cwd();if(t&&t.length>0){const o=e,{default:L}=await import("./handler15.js"),R=o.marshallCheck===!1||o["no-marshall-check"]===!0?!1:void 0,z=o.socketCheck===!1||o["no-socket-check"]===!0?!1:void 0,D=o.typosquatCheck===!1||o["no-typosquat-check"]===!0?!1:void 0,I=o.runScripts===!0||o["run-scripts"]===!0,P=o.workspaceRoot===!0||o["workspace-root"]===!0,q=o.saveOptional===!0||o["save-optional"]===!0,A=e.dev===!0,B={autoInstallPeers:!1,exact:o.exact===!0,filter:e.filter,global:!1,marshallCheck:R,runScripts:I,saveDev:A,saveOptional:q,savePeer:!1,socketCheck:z,to:void 0,typosquatCheck:D,workspace:!1,workspaceRoot:P};await L({...n,argument:t,options:B});return}if(e.typosquatCheck!==!1&&!await M(s,l?.security?.typosquatAllowlist)){process.exitCode=1;return}const i=e.installer;if(i&&!g.has(i)){r.error(`Invalid --installer value: "${i}". Expected one of: ${[...g].join(", ")}.`),process.exitCode=1;return}const y=i,O=e.aube===!1,f=$(K({logger:c,options:e,visConfig:l},s));let p;try{p=O?f===void 0?j(s):v(s,{backend:f}):v(s,{backend:y??f,configBackend:l?.install?.backend,configCorepack:l?.install?.corepack})}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exitCode=1;return}const k=N(s,p);k&&r.warn(k);const b=G(e.filter),u=e.ci||!1,m=e.frozenLockfile||u,x=!e.frozenLockfile||e.force||e.lockfileOnly,E=U(s),h=m||!x&&E;if(!m&&h&&!e.silent&&r.info("Defaulting to frozen lockfile (pass --no-frozen-lockfile to allow lockfile updates)."),u){r.info("Clean install: removing node_modules...");try{await a.rm(w(s,"node_modules"),{force:!0,recursive:!0})}catch(o){r.error(`Failed to remove node_modules: ${o instanceof Error?o.message:String(o)}`),process.exitCode=1;return}}const{code:d,output:S}=await W(p,{dev:e.dev||!1,filter:b,force:e.force||!1,frozenLockfile:h,ignoreScripts:!e.runScripts,lockfileOnly:e.lockfileOnly||!1,noOptional:e.optional===!1,offline:e.offline||!1,prod:e.prod||!1,recursive:e.recursive||!1,silent:e.silent||!1,workspaceRoot:e.workspaceRoot||!1},s,c,{ciMode:u,preferOffline:e.preferOffline||!1});d!==0&&(process.exitCode=d),d===0&&!e.silent&&T(S)&&r.info(H)};export{re as default};
1
+ import{e as w,m as F,b as _}from"../packem_shared/index-BzhrR_iC.js";import{p as r}from"./cli-main.js";import{d as j,a as v,g as N,h as W}from"../packem_shared/pm-runner-3iiQayy-.js";import{a as $,r as K}from"../packem_shared/command-runtime-p4IXiIf6.js";import{s as M}from"../packem_shared/typosquats-8u0drCqQ.js";import{h as T,P as H}from"../packem_shared/peer-warnings-CmYSxvql.js";import{t as G}from"../packem_shared/utils-DQFHJn72.js";import{y as J}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";const Q=["pnpm-lock.yaml","yarn.lock","package-lock.json","npm-shrinkwrap.json","bun.lock","bun.lockb"],U=n=>{let t=n;for(;;){for(const c of Q)if(J(w(t,c)))return!0;const a=F(t);if(a===t||_(t).root===t)return!1;t=a}},g=new Set(["aube","auto","bun","npm","pnpm","yarn"]),re=async n=>{const{argument:t,fs:a,logger:c,options:e,visConfig:l,workspaceRoot:C}=n,s=C??process.cwd();if(t&&t.length>0){const o=e,{default:L}=await import("./handler15.js"),R=o.marshallCheck===!1||o["no-marshall-check"]===!0?!1:void 0,z=o.socketCheck===!1||o["no-socket-check"]===!0?!1:void 0,D=o.typosquatCheck===!1||o["no-typosquat-check"]===!0?!1:void 0,I=o.runScripts===!0||o["run-scripts"]===!0,P=o.workspaceRoot===!0||o["workspace-root"]===!0,q=o.saveOptional===!0||o["save-optional"]===!0,A=e.dev===!0,B={autoInstallPeers:!1,exact:o.exact===!0,filter:e.filter,global:!1,marshallCheck:R,runScripts:I,saveDev:A,saveOptional:q,savePeer:!1,socketCheck:z,to:void 0,typosquatCheck:D,workspace:!1,workspaceRoot:P};await L({...n,argument:t,options:B});return}if(e.typosquatCheck!==!1&&!await M(s,l?.security?.typosquatAllowlist)){process.exitCode=1;return}const i=e.installer;if(i&&!g.has(i)){r.error(`Invalid --installer value: "${i}". Expected one of: ${[...g].join(", ")}.`),process.exitCode=1;return}const y=i,O=e.aube===!1,f=$(K({logger:c,options:e,visConfig:l},s));let p;try{p=O?f===void 0?j(s):v(s,{backend:f}):v(s,{backend:y??f,configBackend:l?.install?.backend,configCorepack:l?.install?.corepack})}catch(o){r.error(o instanceof Error?o.message:String(o)),process.exitCode=1;return}const k=N(s,p);k&&r.warn(k);const b=G(e.filter),u=e.ci||!1,m=e.frozenLockfile||u,x=!e.frozenLockfile||e.force||e.lockfileOnly,E=U(s),h=m||!x&&E;if(!m&&h&&!e.silent&&r.info("Defaulting to frozen lockfile (pass --no-frozen-lockfile to allow lockfile updates)."),u){r.info("Clean install: removing node_modules...");try{await a.rm(w(s,"node_modules"),{force:!0,recursive:!0})}catch(o){r.error(`Failed to remove node_modules: ${o instanceof Error?o.message:String(o)}`),process.exitCode=1;return}}const{code:d,output:S}=await W(p,{dev:e.dev||!1,filter:b,force:e.force||!1,frozenLockfile:h,ignoreScripts:!e.runScripts,lockfileOnly:e.lockfileOnly||!1,noOptional:e.optional===!1,offline:e.offline||!1,prod:e.prod||!1,recursive:e.recursive||!1,silent:e.silent||!1,workspaceRoot:e.workspaceRoot||!1},s,c,{ciMode:u,preferOffline:e.preferOffline||!1});d!==0&&(process.exitCode=d),d===0&&!e.silent&&T(S)&&r.info(H)};export{re as default};
@@ -1 +1 @@
1
- import{createRequire as A}from"node:module";import{J as P,F as j,X as F,b as I}from"../packem_shared/index.server-sXNQYpsl.js";import{e as q}from"../packem_shared/index-BzhrR_iC.js";import{c as b,p,O as N}from"./cli-main.js";import{i as B,j as U,d as z,a as H,E as V}from"./catalog.js";import{V as W}from"../packem_shared/vis-user-error-75VtCwMv.js";import{a as G,c as X,n as Y}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as J,a as K}from"../packem_shared/command-runtime-p4IXiIf6.js";import{r as _,a as Q,p as Z,b as ee}from"../packem_shared/resolve-explicit-BPsdmuty.js";import{D as te,e as y,f as re,h as S,i as se,j as oe,s as ne}from"../packem_shared/formatBytes-BHAzNIrn-CrusHOew.js";import{r as ae}from"../packem_shared/typosquats-8u0drCqQ.js";import{p as E,t as C}from"../packem_shared/utils-DQFHJn72.js";import{y as ce}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{p as ie}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";import{T as le}from"../packem_shared/target-merge-DVJl-7Qz.js";let L;const T=r=>(L??=A(import.meta.url))(r),w=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,M=r=>{if(typeof w<"u"&&w.versions&&w.versions.node){const[i,e]=w.versions.node.split(".").map(Number);if(i>22||i===22&&e>=3||i===20&&e>=16)return w.getBuiltinModule(r)}return T(r)},{createInterface:O}=M("node:readline"),x=r=>r==="default"?"catalog:":`catalog:${r}`,v=r=>r==="default"?"default catalog":`catalog "${r}"`,fe=(r,i)=>{const e=[];for(const[t,s]of i)t.includes(":")||s.has(r)&&e.push(t);if(e.length===0)return;if(e.length===1){const[t]=e;return{source:v(t),spec:x(t)}}const n=e.find(t=>t==="default")??e[0],a=e.filter(t=>t!==n);return{candidates:[...e],conflict:!0,source:`${v(n)} (also in: ${a.map(t=>v(t)).join(", ")})`,spec:x(n)}},pe=(r,i)=>{const e=new Map;for(const[c,d]of i){if(!c.includes(":"))continue;const f=d.get(r);f!==void 0&&e.set(f,(e.get(f)??0)+1)}if(e.size===0)return;const n=[...e.entries()],a=n.reduce((c,[,d])=>c+d,0);if(n.length===1){const[[c]]=n;return{source:`siblings (${String(a)} pkg${a===1?"":"s"} on ${c})`,spec:c}}const t=[...n].sort((c,d)=>d[1]-c[1]),[s,o]=t[0],l=t.slice(1).map(([c,d])=>`${c} (×${String(d)})`);return{candidates:t.map(([c])=>c),conflict:!0,source:`siblings (most common: ${s} ×${String(o)}; conflicts: ${l.join(", ")})`,spec:s}},de=(r,i)=>{const e=fe(r,i);return e||pe(r,i)},ue=(r,i,e)=>{const n=[];for(const a of r.values()){const{overall:t}=a.score,s=ne(t),o=`${String(Math.round(t*100))}%`,l=a.alerts.length,c=y(a),d=re(c,a.version,e),f=s==="red"?F:s==="yellow"?I:P;if(d?p.info(` ${f(o)} ${S(a)} ${j(`[accepted: ${d.reason}]`)}`):p.info(` ${f(o)} ${S(a)}`),l>0){const m=a.alerts.filter(u=>u.severity==="critical"||u.severity==="high").length;m>0&&p.warn(` ${String(m)} critical/high alert${m===1?"":"s"}`)}t<i&&!d&&n.push(a)}return n},me=async(r,i)=>{const e=O({input:process.stdin,output:process.stdout}),n=o=>new Promise(l=>{e.question(o,c=>{l(c.trim())})}),a=String(Math.round(i*100));p.warn(""),p.warn(`${String(r.length)} package${r.length===1?"":"s"} scored below the minimum threshold (${a}%):`);for(const o of r){const l=y(o),c=`${String(Math.round(o.score.overall*100))}%`;p.warn(` • ${l}@${o.version} — score: ${c} (${se(o.score.overall)})`)}p.warn("");const t=await n("Continue adding these packages? [y/N] ");if(t.toLowerCase()!=="y"&&t.toLowerCase()!=="yes")return e.close(),!1;const s=await n("Remember this decision? (prints config snippet) [y/N] ");if(e.close(),s.toLowerCase()==="y"||s.toLowerCase()==="yes"){p.notice(""),p.notice("Add the following to security.acceptedRisks in vis.config.ts:"),p.notice("");for(const o of r){const l=y(o),c=oe(l,o.version,o.score.overall,"Reviewed and accepted");p.notice(c)}p.notice("")}return!0},ge=async(r,i,e,n)=>{const a=await _(r);if(a.length===0)return!0;p.info(""),p.info(`${i.map(o=>o.displayName).join(" + ")} security check:`);const t=await U(i,a);if(t.size===0)return p.info(" Could not fetch security data. Proceeding."),!0;const s=ue(t,e,n);return s.length===0?(p.info(""),!0):process.stdin.isTTY?me(s,e):(p.warn(`Aborting: ${String(s.length)} package${s.length===1?"":"s"} below minimum score. Use --no-socket-check to skip.`),!1)},he=["dependencies","devDependencies","peerDependencies","optionalDependencies"],ke=r=>r.savePeer?"peerDependencies":r.saveOptional?"optionalDependencies":r.saveDev?"devDependencies":"dependencies",R=(r,i)=>r.startsWith("catalog:")||!i?r:r.replace(/^[\^~]/,""),we=async(r,i)=>{const e=[];for(const t of r){const{name:s,versionSpec:o}=E(t);if(!s)continue;if(o!==void 0){e.push({explicit:o,name:s});continue}const l=de(s,i);if(l){l.conflict&&p.warn(`${s}: ambiguous constraint — picking ${l.spec} (${l.source}). Pass ${s}@<version> to override.`),e.push({entry:{name:s,source:l.source,spec:l.spec},kind:"resolved",name:s});continue}e.push({kind:"missing",name:s})}const n=e.filter(t=>"kind"in t&&t.kind==="missing").map(t=>t.name),a=n.length>0?await ee(n):new Map;return e.map(t=>{if("explicit"in t)return{name:t.name,source:"explicit",spec:t.explicit};if(t.kind==="resolved")return t.entry;const s=a.get(t.name);if(s===void 0)throw new Error(`--to: cannot resolve a version for "${t.name}" (not in any catalog or sibling, and registry lookup failed). Pass ${t.name}@<version> explicitly.`);const o=`^${s}`;return p.info(`${t.name}: no existing constraint — using registry latest (${o}). Add to a catalog to share this version across workspace packages.`),{name:t.name,source:"registry latest",spec:o}})},ve=(r,i,e,n)=>{for(const{name:a,spec:t}of i){const s=R(t,n);for(const l of he){if(l===e)continue;const c=r[l];c?.[a]!==void 0&&(delete c[a],Object.keys(c).length===0&&delete r[l])}let o=r[e];o===void 0&&(o={},r[e]=o),o[a]=s}},ye=async({ignoreScripts:r,logger:i,options:e,packages:n,pm:a,target:t,visConfig:s,workspaceRoot:o})=>{const{workspace:l}=z(o,s??{}),c=l.projects[t];if(!c){const g=Object.keys(l.projects).sort();throw new Error(`--to: workspace package "${t}" not found. Available: ${g.length>0?g.slice(0,10).join(", "):"(none)"}${g.length>10?`, ... (${String(g.length-10)} more)`:""}.`)}const d=q(o,c.root,"package.json");if(!ce(d))throw new W(`--to: project "${t}" has no package.json (${c.root}), so there is nothing to add npm dependencies to.`);const{packageManager:f}=N(o),m=H(o,f),u=ke(e),k=e.exact??!1,h=await we(n,m);if(h.length===0)return 0;const $=ie(d);ve($,h,u,k),le(d,$,{indent:V(d,{useEditorconfig:s?.editorconfig??!0}),overwrite:!0});for(const g of h){const D=R(g.spec,k);p.info(`${P("+")} ${g.name}@${D} → ${t}/${u} (${j(g.source)})`)}return Y(a,{dev:!1,filter:[],force:!1,frozenLockfile:!1,ignoreScripts:r,lockfileOnly:!1,noOptional:!1,offline:!1,prod:!1,recursive:!1,silent:!1,workspaceRoot:!1},o,i)},Oe=async({argument:r,logger:i,options:e,visConfig:n,workspaceRoot:a})=>{let t=r;if(!t||t.length===0)throw new Error("No packages specified. Usage: vis add <packages...>");if(e.typosquatCheck!==!1){const f=t.map(u=>E(u)),m=await ae(f.map(u=>u.name),n?.security?.typosquatAllowlist);if(!m.ok){process.exitCode=1;return}t=f.map((u,k)=>{const h=m.packages[k];return h!==u.name?u.versionSpec?`${h}@${u.versionSpec}`:h??"":t[k]??""})}if(e.marshallCheck!==!1){const f=await _(t);if(f.length>0){const m=await Q(f,{config:n?.security?.marshalls,workspaceRoot:a});if(!await Z(m)){process.exitCode=1;return}}}if(e.socketCheck!==!1){const f=new Set;b("socket")&&f.add("socket"),b("depsDev")&&f.add("deps-dev");const m=B(n?.security,{disabled:f,minimumScore:n?.security?.policies?.score?.minimum});if(m.length>0){const u=n?.security?.policies?.score?.minimum??te;if(!await ge(t,m,u,n?.security?.acceptedRisks)){process.exitCode=1;return}}}const s=process.cwd(),o=J({logger:i,options:e,visConfig:n},a??s),l=G(a??s,{backend:K(o),configBackend:n?.install?.backend,configCorepack:n?.install?.corepack}),c=!e.runScripts;if(e.to){if(e.global||e.workspaceRoot)throw new Error("--to is incompatible with --global / --workspace-root.");if(e.filter&&C(e.filter).length>0)throw new Error("--to and --filter are mutually exclusive — --to already targets one package.");if(!a)throw new Error("--to requires a monorepo workspace. Run from inside a pnpm/bun/yarn/npm workspace.");const f=await ye({ignoreScripts:c,logger:i,options:e,packages:t,pm:l,target:e.to,visConfig:n,workspaceRoot:a});f!==0&&(process.exitCode=f);return}const d=X(l,{exact:e.exact||!1,filter:C(e.filter),global:e.global||!1,optional:e.saveOptional||!1,packages:t,peer:e.savePeer||!1,saveDev:e.saveDev||!1,workspace:e.workspace||!1,workspaceRoot:e.workspaceRoot||!1},s,i,{autoInstallPeers:e.autoInstallPeers||!1,ignoreScripts:c});d!==0&&(process.exitCode=d)};export{Oe as default};
1
+ import{createRequire as A}from"node:module";import{J as P,F as j,X as F,b as I}from"../packem_shared/index.server-sXNQYpsl.js";import{e as q}from"../packem_shared/index-BzhrR_iC.js";import{c as b,p,O as N}from"./cli-main.js";import{i as B,j as U,d as z,a as H,E as V}from"./catalog.js";import{V as W}from"../packem_shared/vis-user-error-Dd7hwxlW.js";import{a as G,c as X,n as Y}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as J,a as K}from"../packem_shared/command-runtime-p4IXiIf6.js";import{r as _,a as Q,p as Z,b as ee}from"../packem_shared/resolve-explicit-BmV8YBE-.js";import{D as te,e as y,f as re,h as S,i as se,j as oe,s as ne}from"../packem_shared/formatBytes-BHAzNIrn-CrusHOew.js";import{r as ae}from"../packem_shared/typosquats-8u0drCqQ.js";import{p as E,t as C}from"../packem_shared/utils-DQFHJn72.js";import{y as ce}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{p as ie}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";import{T as le}from"../packem_shared/target-merge-DVJl-7Qz.js";let L;const T=r=>(L??=A(import.meta.url))(r),w=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,M=r=>{if(typeof w<"u"&&w.versions&&w.versions.node){const[i,e]=w.versions.node.split(".").map(Number);if(i>22||i===22&&e>=3||i===20&&e>=16)return w.getBuiltinModule(r)}return T(r)},{createInterface:O}=M("node:readline"),x=r=>r==="default"?"catalog:":`catalog:${r}`,v=r=>r==="default"?"default catalog":`catalog "${r}"`,fe=(r,i)=>{const e=[];for(const[t,s]of i)t.includes(":")||s.has(r)&&e.push(t);if(e.length===0)return;if(e.length===1){const[t]=e;return{source:v(t),spec:x(t)}}const n=e.find(t=>t==="default")??e[0],a=e.filter(t=>t!==n);return{candidates:[...e],conflict:!0,source:`${v(n)} (also in: ${a.map(t=>v(t)).join(", ")})`,spec:x(n)}},pe=(r,i)=>{const e=new Map;for(const[c,d]of i){if(!c.includes(":"))continue;const f=d.get(r);f!==void 0&&e.set(f,(e.get(f)??0)+1)}if(e.size===0)return;const n=[...e.entries()],a=n.reduce((c,[,d])=>c+d,0);if(n.length===1){const[[c]]=n;return{source:`siblings (${String(a)} pkg${a===1?"":"s"} on ${c})`,spec:c}}const t=[...n].sort((c,d)=>d[1]-c[1]),[s,o]=t[0],l=t.slice(1).map(([c,d])=>`${c} (×${String(d)})`);return{candidates:t.map(([c])=>c),conflict:!0,source:`siblings (most common: ${s} ×${String(o)}; conflicts: ${l.join(", ")})`,spec:s}},de=(r,i)=>{const e=fe(r,i);return e||pe(r,i)},ue=(r,i,e)=>{const n=[];for(const a of r.values()){const{overall:t}=a.score,s=ne(t),o=`${String(Math.round(t*100))}%`,l=a.alerts.length,c=y(a),d=re(c,a.version,e),f=s==="red"?F:s==="yellow"?I:P;if(d?p.info(` ${f(o)} ${S(a)} ${j(`[accepted: ${d.reason}]`)}`):p.info(` ${f(o)} ${S(a)}`),l>0){const m=a.alerts.filter(u=>u.severity==="critical"||u.severity==="high").length;m>0&&p.warn(` ${String(m)} critical/high alert${m===1?"":"s"}`)}t<i&&!d&&n.push(a)}return n},me=async(r,i)=>{const e=O({input:process.stdin,output:process.stdout}),n=o=>new Promise(l=>{e.question(o,c=>{l(c.trim())})}),a=String(Math.round(i*100));p.warn(""),p.warn(`${String(r.length)} package${r.length===1?"":"s"} scored below the minimum threshold (${a}%):`);for(const o of r){const l=y(o),c=`${String(Math.round(o.score.overall*100))}%`;p.warn(` • ${l}@${o.version} — score: ${c} (${se(o.score.overall)})`)}p.warn("");const t=await n("Continue adding these packages? [y/N] ");if(t.toLowerCase()!=="y"&&t.toLowerCase()!=="yes")return e.close(),!1;const s=await n("Remember this decision? (prints config snippet) [y/N] ");if(e.close(),s.toLowerCase()==="y"||s.toLowerCase()==="yes"){p.notice(""),p.notice("Add the following to security.acceptedRisks in vis.config.ts:"),p.notice("");for(const o of r){const l=y(o),c=oe(l,o.version,o.score.overall,"Reviewed and accepted");p.notice(c)}p.notice("")}return!0},ge=async(r,i,e,n)=>{const a=await _(r);if(a.length===0)return!0;p.info(""),p.info(`${i.map(o=>o.displayName).join(" + ")} security check:`);const t=await U(i,a);if(t.size===0)return p.info(" Could not fetch security data. Proceeding."),!0;const s=ue(t,e,n);return s.length===0?(p.info(""),!0):process.stdin.isTTY?me(s,e):(p.warn(`Aborting: ${String(s.length)} package${s.length===1?"":"s"} below minimum score. Use --no-socket-check to skip.`),!1)},he=["dependencies","devDependencies","peerDependencies","optionalDependencies"],ke=r=>r.savePeer?"peerDependencies":r.saveOptional?"optionalDependencies":r.saveDev?"devDependencies":"dependencies",R=(r,i)=>r.startsWith("catalog:")||!i?r:r.replace(/^[\^~]/,""),we=async(r,i)=>{const e=[];for(const t of r){const{name:s,versionSpec:o}=E(t);if(!s)continue;if(o!==void 0){e.push({explicit:o,name:s});continue}const l=de(s,i);if(l){l.conflict&&p.warn(`${s}: ambiguous constraint — picking ${l.spec} (${l.source}). Pass ${s}@<version> to override.`),e.push({entry:{name:s,source:l.source,spec:l.spec},kind:"resolved",name:s});continue}e.push({kind:"missing",name:s})}const n=e.filter(t=>"kind"in t&&t.kind==="missing").map(t=>t.name),a=n.length>0?await ee(n):new Map;return e.map(t=>{if("explicit"in t)return{name:t.name,source:"explicit",spec:t.explicit};if(t.kind==="resolved")return t.entry;const s=a.get(t.name);if(s===void 0)throw new Error(`--to: cannot resolve a version for "${t.name}" (not in any catalog or sibling, and registry lookup failed). Pass ${t.name}@<version> explicitly.`);const o=`^${s}`;return p.info(`${t.name}: no existing constraint — using registry latest (${o}). Add to a catalog to share this version across workspace packages.`),{name:t.name,source:"registry latest",spec:o}})},ve=(r,i,e,n)=>{for(const{name:a,spec:t}of i){const s=R(t,n);for(const l of he){if(l===e)continue;const c=r[l];c?.[a]!==void 0&&(delete c[a],Object.keys(c).length===0&&delete r[l])}let o=r[e];o===void 0&&(o={},r[e]=o),o[a]=s}},ye=async({ignoreScripts:r,logger:i,options:e,packages:n,pm:a,target:t,visConfig:s,workspaceRoot:o})=>{const{workspace:l}=z(o,s??{}),c=l.projects[t];if(!c){const g=Object.keys(l.projects).sort();throw new Error(`--to: workspace package "${t}" not found. Available: ${g.length>0?g.slice(0,10).join(", "):"(none)"}${g.length>10?`, ... (${String(g.length-10)} more)`:""}.`)}const d=q(o,c.root,"package.json");if(!ce(d))throw new W(`--to: project "${t}" has no package.json (${c.root}), so there is nothing to add npm dependencies to.`);const{packageManager:f}=N(o),m=H(o,f),u=ke(e),k=e.exact??!1,h=await we(n,m);if(h.length===0)return 0;const $=ie(d);ve($,h,u,k),le(d,$,{indent:V(d,{useEditorconfig:s?.editorconfig??!0}),overwrite:!0});for(const g of h){const D=R(g.spec,k);p.info(`${P("+")} ${g.name}@${D} → ${t}/${u} (${j(g.source)})`)}return Y(a,{dev:!1,filter:[],force:!1,frozenLockfile:!1,ignoreScripts:r,lockfileOnly:!1,noOptional:!1,offline:!1,prod:!1,recursive:!1,silent:!1,workspaceRoot:!1},o,i)},Oe=async({argument:r,logger:i,options:e,visConfig:n,workspaceRoot:a})=>{let t=r;if(!t||t.length===0)throw new Error("No packages specified. Usage: vis add <packages...>");if(e.typosquatCheck!==!1){const f=t.map(u=>E(u)),m=await ae(f.map(u=>u.name),n?.security?.typosquatAllowlist);if(!m.ok){process.exitCode=1;return}t=f.map((u,k)=>{const h=m.packages[k];return h!==u.name?u.versionSpec?`${h}@${u.versionSpec}`:h??"":t[k]??""})}if(e.marshallCheck!==!1){const f=await _(t);if(f.length>0){const m=await Q(f,{config:n?.security?.marshalls,workspaceRoot:a});if(!await Z(m)){process.exitCode=1;return}}}if(e.socketCheck!==!1){const f=new Set;b("socket")&&f.add("socket"),b("depsDev")&&f.add("deps-dev");const m=B(n?.security,{disabled:f,minimumScore:n?.security?.policies?.score?.minimum});if(m.length>0){const u=n?.security?.policies?.score?.minimum??te;if(!await ge(t,m,u,n?.security?.acceptedRisks)){process.exitCode=1;return}}}const s=process.cwd(),o=J({logger:i,options:e,visConfig:n},a??s),l=G(a??s,{backend:K(o),configBackend:n?.install?.backend,configCorepack:n?.install?.corepack}),c=!e.runScripts;if(e.to){if(e.global||e.workspaceRoot)throw new Error("--to is incompatible with --global / --workspace-root.");if(e.filter&&C(e.filter).length>0)throw new Error("--to and --filter are mutually exclusive — --to already targets one package.");if(!a)throw new Error("--to requires a monorepo workspace. Run from inside a pnpm/bun/yarn/npm workspace.");const f=await ye({ignoreScripts:c,logger:i,options:e,packages:t,pm:l,target:e.to,visConfig:n,workspaceRoot:a});f!==0&&(process.exitCode=f);return}const d=X(l,{exact:e.exact||!1,filter:C(e.filter),global:e.global||!1,optional:e.saveOptional||!1,packages:t,peer:e.savePeer||!1,saveDev:e.saveDev||!1,workspace:e.workspace||!1,workspaceRoot:e.workspaceRoot||!1},s,i,{autoInstallPeers:e.autoInstallPeers||!1,ignoreScripts:c});d!==0&&(process.exitCode=d)};export{Oe as default};
@@ -1 +1 @@
1
- import{a as m,i}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as p,a as k}from"../packem_shared/command-runtime-p4IXiIf6.js";const w=async({argument:o,logger:a,options:t,visConfig:e,workspaceRoot:s})=>{const r=o?.[0]??null,c=s??process.cwd(),l=p({logger:a,options:t,visConfig:e},c),d=m(c,{backend:k(l),configBackend:e?.install?.backend,configCorepack:e?.install?.corepack}),n=i(d,r,c,a);n!==0&&(process.exitCode=n)};export{w as default};
1
+ import{a as m,i}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as p,a as k}from"../packem_shared/command-runtime-p4IXiIf6.js";const w=async({argument:o,logger:a,options:t,visConfig:e,workspaceRoot:s})=>{const r=o?.[0]??null,c=s??process.cwd(),l=p({logger:a,options:t,visConfig:e},c),d=m(c,{backend:k(l),configBackend:e?.install?.backend,configCorepack:e?.install?.corepack}),n=i(d,r,c,a);n!==0&&(process.exitCode=n)};export{w as default};
@@ -1 +1 @@
1
- import{a as w,j as b}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as f,a as h}from"../packem_shared/command-runtime-p4IXiIf6.js";const R=async({argument:r,logger:c,options:i,rawUnknown:l,visConfig:o,workspaceRoot:d})=>{const e=r;if(!e||e.length===0)throw new Error("No subcommand specified. Available: cache, publish, audit, list, view, config, whoami, login, logout, pack, owner, dist-tag, search, fund, ping, token, deprecate, rebuild, prune, plugin");const[m,...s]=e,t=l??[],p=t[0]==="--"?s:[...s,...t],n=d??process.cwd(),u=f({logger:c,options:i,visConfig:o},n),k=w(n,{backend:h(u),configBackend:o?.install?.backend,configCorepack:o?.install?.corepack}),a=b(k,m,p,n,c);a!==0&&(process.exitCode=a)};export{R as default};
1
+ import{a as w,j as b}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as f,a as h}from"../packem_shared/command-runtime-p4IXiIf6.js";const R=async({argument:r,logger:c,options:i,rawUnknown:l,visConfig:o,workspaceRoot:d})=>{const e=r;if(!e||e.length===0)throw new Error("No subcommand specified. Available: cache, publish, audit, list, view, config, whoami, login, logout, pack, owner, dist-tag, search, fund, ping, token, deprecate, rebuild, prune, plugin");const[m,...s]=e,t=l??[],p=t[0]==="--"?s:[...s,...t],n=d??process.cwd(),u=f({logger:c,options:i,visConfig:o},n),k=w(n,{backend:h(u),configBackend:o?.install?.backend,configCorepack:o?.install?.corepack}),a=b(k,m,p,n,c);a!==0&&(process.exitCode=a)};export{R as default};
@@ -1 +1 @@
1
- import{a as d,k as f}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as i,a as p}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as v,t as g}from"../packem_shared/utils-DQFHJn72.js";const R=async({argument:l,logger:s,options:e,rawUnknown:n,visConfig:a,workspaceRoot:c})=>{const o=v(l,n);if(o.length===0)throw new Error("No packages specified. Usage: vis remove <packages...>");const r=process.cwd(),m=i({logger:s,options:e,visConfig:a},c??r),k=d(c??r,{backend:p(m),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),t=f(k,{filter:g(e.filter),global:e.global||!1,packages:o,recursive:e.recursive||!1,saveDev:e.saveDev||!1,workspaceRoot:e.workspaceRoot||!1},r,s);t!==0&&(process.exitCode=t)};export{R as default};
1
+ import{a as d,k as f}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as i,a as p}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as v,t as g}from"../packem_shared/utils-DQFHJn72.js";const R=async({argument:l,logger:s,options:e,rawUnknown:n,visConfig:a,workspaceRoot:c})=>{const o=v(l,n);if(o.length===0)throw new Error("No packages specified. Usage: vis remove <packages...>");const r=process.cwd(),m=i({logger:s,options:e,visConfig:a},c??r),k=d(c??r,{backend:p(m),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),t=f(k,{filter:g(e.filter),global:e.global||!1,packages:o,recursive:e.recursive||!1,saveDev:e.saveDev||!1,workspaceRoot:e.workspaceRoot||!1},r,s);t!==0&&(process.exitCode=t)};export{R as default};
@@ -1 +1 @@
1
- import{createTaskGraph as $}from"@visulima/task-runner";import{d as b,b as O}from"./catalog.js";import{f as P}from"../packem_shared/project-name-filter-D6tXD8gd.js";import{r as S,f as E,a as G}from"../packem_shared/selectors-edwcgNl3.js";const T=(l,s,t)=>{const a=[],e=new Set,n=(r,u)=>{if(e.has(r))return;e.add(r);const m=s[r]??[];for(const d of m)n(d,u+1);const o=t[r],h=" ".repeat(u);a.push(`${h}${r}${o?.cache===!1?" (no-cache)":""}`)};for(const r of l)n(r,0);return a},x=(l,s,t)=>({roots:l,tasks:Object.fromEntries(Object.entries(t).map(([a,e])=>[a,{cache:e.cache,dependsOn:s[a]??[],outputs:e.outputs,parallelism:e.parallelism,projectRoot:e.projectRoot,target:e.target}]))}),C=async({argument:l,logger:s,options:t,process:a,visConfig:e,workspaceRoot:n})=>{const r=l[0];if(!r)throw new Error("Missing selector. Usage: vis action-graph <selector>");if(!n)throw new Error("Could not determine workspace root. Run inside a monorepo.");const{config:u,packageJsons:m,workspace:o}=b(n,e),h=O(n,o,m),d=await S(r,o,a.cwd,n),{target:f}=d;let i=d.projects;t.projects!==void 0&&(i=P(i,String(t.projects),Object.keys(o.projects))),t.query&&(i=E(i,o,t.query)),i=G(i,o,t.tag);const k=i.filter(p=>o.projects[p]?.targets?.[f]!==void 0);if(k.length===0){s.info(`No projects have a "${f}" target.`);return}const y=k.map(p=>{const g=o.projects[p],j=g.targets?.[f],v={project:p,target:f};return{cache:j?.cache,id:`${p}:${f}`,outputs:j?.outputs??[],overrides:{command:j?.command},parallelism:j?.parallelism,projectRoot:g.root,target:v}}),c=$(y,{projectGraph:h,targetDefaults:u.tasks,workspace:o});if(t.json){s.info(JSON.stringify(x(c.roots,c.dependencies,c.tasks),null,2));return}const w=T(c.roots,c.dependencies,c.tasks);s.info(`Execution plan (${Object.keys(c.tasks).length} task(s), ${c.roots.length} root(s)):`),s.info("");for(const p of w)s.info(p)};export{C as default};
1
+ import{createTaskGraph as $}from"@visulima/task-runner";import{d as b,b as O}from"./catalog.js";import{f as P}from"../packem_shared/project-name-filter-CH8Ih7Qr.js";import{r as S,f as E,a as G}from"../packem_shared/selectors-edwcgNl3.js";const T=(l,s,t)=>{const a=[],e=new Set,n=(r,u)=>{if(e.has(r))return;e.add(r);const m=s[r]??[];for(const d of m)n(d,u+1);const o=t[r],h=" ".repeat(u);a.push(`${h}${r}${o?.cache===!1?" (no-cache)":""}`)};for(const r of l)n(r,0);return a},x=(l,s,t)=>({roots:l,tasks:Object.fromEntries(Object.entries(t).map(([a,e])=>[a,{cache:e.cache,dependsOn:s[a]??[],outputs:e.outputs,parallelism:e.parallelism,projectRoot:e.projectRoot,target:e.target}]))}),C=async({argument:l,logger:s,options:t,process:a,visConfig:e,workspaceRoot:n})=>{const r=l[0];if(!r)throw new Error("Missing selector. Usage: vis action-graph <selector>");if(!n)throw new Error("Could not determine workspace root. Run inside a monorepo.");const{config:u,packageJsons:m,workspace:o}=b(n,e),h=O(n,o,m),d=await S(r,o,a.cwd,n),{target:f}=d;let i=d.projects;t.projects!==void 0&&(i=P(i,String(t.projects),Object.keys(o.projects))),t.query&&(i=E(i,o,t.query)),i=G(i,o,t.tag);const k=i.filter(p=>o.projects[p]?.targets?.[f]!==void 0);if(k.length===0){s.info(`No projects have a "${f}" target.`);return}const y=k.map(p=>{const g=o.projects[p],j=g.targets?.[f],v={project:p,target:f};return{cache:j?.cache,id:`${p}:${f}`,outputs:j?.outputs??[],overrides:{command:j?.command},parallelism:j?.parallelism,projectRoot:g.root,target:v}}),c=$(y,{projectGraph:h,targetDefaults:u.tasks,workspace:o});if(t.json){s.info(JSON.stringify(x(c.roots,c.dependencies,c.tasks),null,2));return}const w=T(c.roots,c.dependencies,c.tasks);s.info(`Execution plan (${Object.keys(c.tasks).length} task(s), ${c.roots.length} root(s)):`),s.info("");for(const p of w)s.info(p)};export{C as default};
@@ -1,2 +1,2 @@
1
- import{U as B,m as E}from"../packem_shared/index-BzhrR_iC.js";import{d as $,b as v}from"./catalog.js";import{p as f}from"./cli-main.js";import{o as S,s as g,f as C,b as O,a as D}from"../packem_shared/ecosystem-gate-ddru_hOg.js";import{h as F}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";const w=["json","xml"],G=n=>w.includes(n),T=async({console:n,fs:x,options:e,visConfig:a,workspaceRoot:o})=>{if(!o)throw new Error("Could not determine workspace root. Run inside a monorepo.");const{packageJsons:h,workspace:i}=$(o,a),y=v(o,i,h),m=e.focus,b=m?m.split(",").map(r=>r.trim()).filter(Boolean):void 0,t=(e.format??"json").toLowerCase();if(!G(t))throw new Error(`Unknown --format: "${t}". Expected one of: ${w.join(", ")}.`);const d=S(a),p=g(C(o).filter(({id:r})=>!d.has(r)));p!==void 0&&n.error(p);const s=O({ecosystems:d,focus:b,includeDev:!!e.includeDev,projectGraph:y,workspace:i,workspaceRoot:o}),l=t==="xml"?D(s):`${JSON.stringify(s,void 0,2)}
1
+ import{U as B,m as E}from"../packem_shared/index-BzhrR_iC.js";import{d as $,b as v}from"./catalog.js";import{p as f}from"./cli-main.js";import{o as S,s as g,f as C,b as O,a as D}from"../packem_shared/ecosystem-gate-CeV20GSB.js";import{h as F}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";const w=["json","xml"],G=n=>w.includes(n),T=async({console:n,fs:x,options:e,visConfig:a,workspaceRoot:o})=>{if(!o)throw new Error("Could not determine workspace root. Run inside a monorepo.");const{packageJsons:h,workspace:i}=$(o,a),y=v(o,i,h),m=e.focus,b=m?m.split(",").map(r=>r.trim()).filter(Boolean):void 0,t=(e.format??"json").toLowerCase();if(!G(t))throw new Error(`Unknown --format: "${t}". Expected one of: ${w.join(", ")}.`);const d=S(a),p=g(C(o).filter(({id:r})=>!d.has(r)));p!==void 0&&n.error(p);const s=O({ecosystems:d,focus:b,includeDev:!!e.includeDev,projectGraph:y,workspace:i,workspaceRoot:o}),l=t==="xml"?D(s):`${JSON.stringify(s,void 0,2)}
2
2
  `,u=e.output??(t==="xml"?"sbom.cdx.xml":"sbom.cdx.json");if(u==="-"){process.stdout.write(l);return}const c=B(o,u);F(E(c)),await x.writeFile(c,l,"utf8");const k=s.components?.length??0,j=s.dependencies?.length??0;f.success(`SBOM written to ${c}`),f.notice(`${k} components, ${j} dependency edges`)};export{T as default};
@@ -1,5 +1,5 @@
1
- import{createRequire as P}from"node:module";import{F as d,J as k,X as W,b as A}from"../packem_shared/index.server-sXNQYpsl.js";import{e as S}from"../packem_shared/index-BzhrR_iC.js";import{p as t}from"./cli-main.js";import{p as R,g as C,S as x,w,b as B,a as O,f as j,c as M,d as q,u as b,e as H,h as K}from"../packem_shared/toolchain-BRdpaAC4.js";let I;const F=e=>(I??=P(import.meta.url))(e),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,N=e=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[n,i]=h.versions.node.split(".").map(Number);if(n>22||n===22&&i>=3||n===20&&i>=16)return h.getBuiltinModule(e)}return F(e)},{spawnSync:U}=N("node:child_process"),y=["aube","bun","deno","go","node","npm","pnpm","python","ruby","rust","yarn"],L=e=>y.includes(e),v=e=>e?k("✓"):W("✗"),_=A("⚠"),D=e=>{if(e.installed){const n=e.version?` v${e.version}`:"",i=e.configFiles.length>0?` (${e.configFiles.join(", ")})`:"";return`${v(!0)} ${e.name}${n}${i}`}return`${_} ${e.name} — referenced by ${e.configFiles.join(", ")} but not installed`},J=e=>{if(e.matches)return"";const{manager:n}=e;return n.name==="none"?d("→ (no manager)"):n.name==="self-activate"?"":n.installed?d(`→ ${n.name}`):d(`→ ${n.name} (missing)`)},z=e=>e.matches?v(!0):e.actual?_:v(!1),G=e=>{if(t.info(""),t.info(d("── Toolchain ───────────────────────")),e.detected.length===0)t.info(` ${v(!1)} No version manager detected`),t.notice(` Install one of: ${x.join(", ")}`);else for(const n of e.detected)t.info(` ${D(n)}`);if(t.info(""),e.tools.length===0){t.info(` ${d("No tool pins found — add engines.node, .nvmrc, or a manager config file.")}`);return}t.info(d("── Tools ───────────────────────────"));for(const n of e.tools){const i=`${n.expected.tool} ${n.expected.version}`,r=n.actual?`actual ${n.actual}`:"not installed",c=n.matches?"":d(` [${n.expected.source}]`),o=J(n),g=o===""?"":` ${o}`;t.info(` ${z(n)} ${i} — ${r}${c}${g}`),n.manager.note&&t.notice(` ${n.manager.note}`)}},X=(e,n,i)=>{const r=C(e,n);if(i.json){process.stdout.write(`${JSON.stringify({detected:r.detected.map(o=>({binPath:o.binPath??null,configFiles:o.configFiles,installed:o.installed,name:o.name,version:o.version??null})),tools:r.tools.map(o=>({actual:o.actual??null,expected:o.expected.version,manager:o.manager.name,managerInstalled:o.manager.installed,matches:o.matches,note:o.manager.note??null,source:o.expected.source,tool:o.expected.tool}))},void 0,2)}
2
- `);return}G(r);const c=r.tools.filter(o=>!o.matches);c.length>0&&(t.info(""),t.notice(" Run `vis toolchain install` to install pinned versions.")),i.exitCode&&c.length>0&&(process.exitCode=1)},Q=e=>{const n=new Map;for(const i of e){const r=n.get(i.manager.name);r?r.push(i):n.set(i.manager.name,[i])}return n},E=(e,n,i)=>U(e,n,{cwd:i,stdio:"inherit"}).status??1,V=(e,n,i)=>{const r=C(e,n),c=r.tools.filter(f=>!f.matches);if(c.length===0){t.success("Everything already matches — nothing to install.");return}const o=c.some(f=>f.manager.name!=="self-activate"&&f.manager.name!=="none");if(r.detected.length===0&&o){t.error(`No version manager detected. Install one of: ${x.join(", ")}.`),process.exitCode=1;return}const g=Q(c);let l=!1,a=0;for(const[f,u]of g){if(f==="self-activate"){for(const{expected:s}of u){if(s.source==="packageManager")t.info(`${d("$")} (${s.tool} will self-activate from packageManager on next invocation)`);else if(t.info(`${d("$")} Writing packageManager=${s.tool}@${s.version}`),i.dryRun)l=!0;else try{w(e,s),l=!0}catch(p){t.error(p.message),a=1}t.notice(` ${s.tool} ${s.version} — no install needed`)}continue}if(f==="none"){for(const{expected:s}of u)t.warn(`Cannot install ${s.tool} ${s.version} — no manager can handle it.`);a=1;continue}if(!r.detected.find(s=>s.name===f)?.installed){t.error(`${f} is referenced but not on PATH — install it first, then rerun \`vis toolchain install\`.`),a=1;continue}const T=u.map(s=>B(f,s.expected)).filter(Boolean);for(const s of T){if(!s)continue;if(s.bin==="nvm"&&s.args.length===0){t.error("nvm is a shell function — run `nvm install` in your shell, then rerun `vis toolchain install`."),s.hint&&t.notice(` ${s.hint}`),a=1;continue}if(t.info(`${d("$")} ${s.bin} ${s.args.join(" ")}`),s.hint&&t.notice(` ${s.hint}`),i.dryRun){l=!0;continue}const p=E(s.bin,s.args,e);if(l=!0,p!==0){a=p;break}}}if(a!==0){process.exitCode=a;return}l&&t.success("Toolchain installed.")},Y=async(e,n,i,r,c)=>{if(!r)throw new Error("Usage: vis toolchain use <tool>@<version> (e.g. vis toolchain use node@22.13.0)");const o=O(r);if(!o)throw new Error(`Could not parse "${r}". Expected "<tool>@<version>" where <tool> is one of ${y.join(", ")}.`);const g=j(n),l=M(o,g,i);if(l.name==="none"){t.error(`No manager can pin ${o.tool}. Install one of: ${x.join(", ")}.`),process.exitCode=1;return}if(!l.installed){t.error(`The best manager for ${o.tool} (${l.name}) is not on PATH. ${l.note??""}`),process.exitCode=1;return}const a=q(l.name,o);if(!a){t.error(`${l.name} cannot pin ${o.tool}. Use a different manager, or set \`toolchain.tools.${o.tool}\` in vis.config.ts.`),process.exitCode=1;return}if(l.name==="self-activate"){if(t.info(`${d("→")} Writing packageManager field to package.json...`),c.dryRun){t.notice(` Would set packageManager: "${o.tool}@${o.version}"`);return}try{const u=w(n,o);if(!u){t.error(`Refusing to pin non-package-manager tool ${o.tool} via the packageManager field.`),process.exitCode=1;return}if(t.success(`Set packageManager: "${u}" — ${o.tool} will activate this version on next invocation.`),c.engines!==!1){const m=b(n,o);m&&t.success(`Updated package.json engines.${o.tool} → ${m}.`)}}catch(u){t.error(u.message),process.exitCode=1}return}if(a.args.length===0&&l.name==="nvm"&&o.tool==="node"){const u=S(n,".nvmrc");if(t.info(`${d("→")} Writing ${u}...`),c.dryRun){t.notice(` Would write ${o.version} to .nvmrc`);return}try{await e.writeFile(u,`${o.version}
3
- `)}catch(m){t.error(`Failed to write .nvmrc: ${m.message}`),process.exitCode=1;return}t.success(`Wrote ${o.version} to .nvmrc.`),t.notice(" nvm is a shell function — run `nvm use` to activate it in this shell.");return}if(a.args.length===0){t.error(`${l.name} cannot pin ${o.tool} from a subprocess. ${a.configChange?.hint??""}`),a.configChange&&t.notice(` Edit ${a.configChange.file} by hand and rerun \`vis toolchain status\` to verify.`),process.exitCode=1;return}if(t.info(`${d("$")} ${a.bin} ${a.args.join(" ")}`),a.configChange&&t.notice(` Will update ${a.configChange.file} — ${a.configChange.hint}`),c.dryRun)return;const f=E(a.bin,a.args,n);if(f!==0){process.exitCode=f;return}if(t.success(`Pinned ${o.tool} to ${o.version}.`),c.engines!==!1)try{const u=b(n,o);u&&t.success(`Updated package.json engines.${o.tool} → ${u}.`)}catch(u){t.warn(`Could not update engines.${o.tool}: ${u.message}`)}},Z=(e,n,i)=>{if(!i)throw new Error("Usage: vis toolchain which <tool> (e.g. vis toolchain which node)");const r=i.toLowerCase();if(!L(r))throw new Error(`Unknown tool "${i}". Known: ${y.join(", ")}.`);const c=j(e),o=M({source:"vis.config.ts",tool:r,version:"*"},c,n),g=o.installed&&o.name!=="self-activate"&&o.name!=="none"?c.find(a=>a.name===o.name):void 0,l=g?H(g,r):K(r);if(!l){t.error(`${i} not found in PATH${g?` or via ${g.name}`:""}.`),process.exitCode=1;return}process.stdout.write(`${l}
4
- `)},ee=(e,n)=>{const i=R(e,n);process.stdout.write(`${i.name}
5
- `)},$=e=>{if(!e)throw new Error("Could not determine workspace root. Run inside a monorepo.");return e},re=async({options:e,visConfig:n,workspaceRoot:i})=>{X($(i),n?.toolchain,e)},ae=async({visConfig:e,workspaceRoot:n})=>{ee($(n),e?.toolchain)},ce=async({options:e,visConfig:n,workspaceRoot:i})=>{V($(i),n?.toolchain,e)},le=async({argument:e,fs:n,options:i,visConfig:r,workspaceRoot:c})=>{await Y(n,$(c),r?.toolchain,e[0],i)},ue=async({argument:e,visConfig:n,workspaceRoot:i})=>{Z($(i),n?.toolchain,e[0])};export{ae as detectExecute,ce as installExecute,re as statusExecute,le as useExecute,ue as whichExecute};
1
+ import{createRequire as P}from"node:module";import{F as g,J as W,X as k,b as A}from"../packem_shared/index.server-sXNQYpsl.js";import{e as S}from"../packem_shared/index-BzhrR_iC.js";import{p as o}from"./cli-main.js";import{c as B}from"../packem_shared/env-consistency-Dt_uDbSP.js";import{p as O,g as w,S as x,w as C,b as R,a as q,f as j,c as M,d as H,u as b,e as K,h as L}from"../packem_shared/toolchain-BRdpaAC4.js";let I;const F=e=>(I??=P(import.meta.url))(e),h=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,N=e=>{if(typeof h<"u"&&h.versions&&h.versions.node){const[n,i]=h.versions.node.split(".").map(Number);if(n>22||n===22&&i>=3||n===20&&i>=16)return h.getBuiltinModule(e)}return F(e)},{spawnSync:U}=N("node:child_process"),y=["aube","bun","deno","go","node","npm","pnpm","python","ruby","rust","yarn"],D=e=>y.includes(e),v=e=>e?W("✓"):k("✗"),_=A("⚠"),J=e=>{if(e.installed){const n=e.version?` v${e.version}`:"",i=e.configFiles.length>0?` (${e.configFiles.join(", ")})`:"";return`${v(!0)} ${e.name}${n}${i}`}return`${_} ${e.name} — referenced by ${e.configFiles.join(", ")} but not installed`},z=e=>{if(e.matches)return"";const{manager:n}=e;return n.name==="none"?g("→ (no manager)"):n.name==="self-activate"?"":n.installed?g(`→ ${n.name}`):g(`→ ${n.name} (missing)`)},G=e=>e.matches?v(!0):e.actual?_:v(!1),X=e=>{if(o.info(""),o.info(g("── Toolchain ───────────────────────")),e.detected.length===0)o.info(` ${v(!1)} No version manager detected`),o.notice(` Install one of: ${x.join(", ")}`);else for(const n of e.detected)o.info(` ${J(n)}`);if(o.info(""),e.tools.length===0){o.info(` ${g("No tool pins found — add engines.node, .nvmrc, or a manager config file.")}`);return}o.info(g("── Tools ───────────────────────────"));for(const n of e.tools){const i=`${n.expected.tool} ${n.expected.version}`,a=n.actual?`actual ${n.actual}`:"not installed",l=n.matches?"":g(` [${n.expected.source}]`),t=z(n),s=t===""?"":` ${t}`;o.info(` ${G(n)} ${i} — ${a}${l}${s}`),n.manager.note&&o.notice(` ${n.manager.note}`)}},Q=(e,n,i)=>{const a=w(e,n),l=B(e).filter(s=>s.status==="warn").map(s=>s.message);if(i.json){process.stdout.write(`${JSON.stringify({declarationWarnings:l,detected:a.detected.map(s=>({binPath:s.binPath??null,configFiles:s.configFiles,installed:s.installed,name:s.name,version:s.version??null})),tools:a.tools.map(s=>({actual:s.actual??null,expected:s.expected.version,manager:s.manager.name,managerInstalled:s.manager.installed,matches:s.matches,note:s.manager.note??null,source:s.expected.source,tool:s.expected.tool}))},void 0,2)}
2
+ `);return}if(X(a),l.length>0){o.info("");for(const s of l)o.warn(` ${s}`)}const t=a.tools.filter(s=>!s.matches);t.length>0&&(o.info(""),o.notice(" Run `vis toolchain install` to install pinned versions.")),i.exitCode&&t.length>0&&(process.exitCode=1)},V=e=>{const n=new Map;for(const i of e){const a=n.get(i.manager.name);a?a.push(i):n.set(i.manager.name,[i])}return n},E=(e,n,i)=>U(e,n,{cwd:i,stdio:"inherit"}).status??1,Y=(e,n,i)=>{const a=w(e,n),l=a.tools.filter(d=>!d.matches);if(l.length===0){o.success("Everything already matches — nothing to install.");return}const t=l.some(d=>d.manager.name!=="self-activate"&&d.manager.name!=="none");if(a.detected.length===0&&t){o.error(`No version manager detected. Install one of: ${x.join(", ")}.`),process.exitCode=1;return}const s=V(l);let f=!1,c=0;for(const[d,u]of s){if(d==="self-activate"){for(const{expected:r}of u){if(r.source==="packageManager")o.info(`${g("$")} (${r.tool} will self-activate from packageManager on next invocation)`);else if(o.info(`${g("$")} Writing packageManager=${r.tool}@${r.version}`),i.dryRun)f=!0;else try{C(e,r),f=!0}catch(p){o.error(p.message),c=1}o.notice(` ${r.tool} ${r.version} — no install needed`)}continue}if(d==="none"){for(const{expected:r}of u)o.warn(`Cannot install ${r.tool} ${r.version} — no manager can handle it.`);c=1;continue}if(!a.detected.find(r=>r.name===d)?.installed){o.error(`${d} is referenced but not on PATH — install it first, then rerun \`vis toolchain install\`.`),c=1;continue}const T=u.map(r=>R(d,r.expected)).filter(Boolean);for(const r of T){if(!r)continue;if(r.bin==="nvm"&&r.args.length===0){o.error("nvm is a shell function — run `nvm install` in your shell, then rerun `vis toolchain install`."),r.hint&&o.notice(` ${r.hint}`),c=1;continue}if(o.info(`${g("$")} ${r.bin} ${r.args.join(" ")}`),r.hint&&o.notice(` ${r.hint}`),i.dryRun){f=!0;continue}const p=E(r.bin,r.args,e);if(f=!0,p!==0){c=p;break}}}if(c!==0){process.exitCode=c;return}f&&o.success("Toolchain installed.")},Z=async(e,n,i,a,l)=>{if(!a)throw new Error("Usage: vis toolchain use <tool>@<version> (e.g. vis toolchain use node@22.13.0)");const t=q(a);if(!t)throw new Error(`Could not parse "${a}". Expected "<tool>@<version>" where <tool> is one of ${y.join(", ")}.`);const s=j(n),f=M(t,s,i);if(f.name==="none"){o.error(`No manager can pin ${t.tool}. Install one of: ${x.join(", ")}.`),process.exitCode=1;return}if(!f.installed){o.error(`The best manager for ${t.tool} (${f.name}) is not on PATH. ${f.note??""}`),process.exitCode=1;return}const c=H(f.name,t);if(!c){o.error(`${f.name} cannot pin ${t.tool}. Use a different manager, or set \`toolchain.tools.${t.tool}\` in vis.config.ts.`),process.exitCode=1;return}if(f.name==="self-activate"){if(o.info(`${g("→")} Writing packageManager field to package.json...`),l.dryRun){o.notice(` Would set packageManager: "${t.tool}@${t.version}"`);return}try{const u=C(n,t);if(!u){o.error(`Refusing to pin non-package-manager tool ${t.tool} via the packageManager field.`),process.exitCode=1;return}if(o.success(`Set packageManager: "${u}" — ${t.tool} will activate this version on next invocation.`),l.engines!==!1){const m=b(n,t);m&&o.success(`Updated package.json engines.${t.tool} → ${m}.`)}}catch(u){o.error(u.message),process.exitCode=1}return}if(c.args.length===0&&f.name==="nvm"&&t.tool==="node"){const u=S(n,".nvmrc");if(o.info(`${g("→")} Writing ${u}...`),l.dryRun){o.notice(` Would write ${t.version} to .nvmrc`);return}try{await e.writeFile(u,`${t.version}
3
+ `)}catch(m){o.error(`Failed to write .nvmrc: ${m.message}`),process.exitCode=1;return}o.success(`Wrote ${t.version} to .nvmrc.`),o.notice(" nvm is a shell function — run `nvm use` to activate it in this shell.");return}if(c.args.length===0){o.error(`${f.name} cannot pin ${t.tool} from a subprocess. ${c.configChange?.hint??""}`),c.configChange&&o.notice(` Edit ${c.configChange.file} by hand and rerun \`vis toolchain status\` to verify.`),process.exitCode=1;return}if(o.info(`${g("$")} ${c.bin} ${c.args.join(" ")}`),c.configChange&&o.notice(` Will update ${c.configChange.file} — ${c.configChange.hint}`),l.dryRun)return;const d=E(c.bin,c.args,n);if(d!==0){process.exitCode=d;return}if(o.success(`Pinned ${t.tool} to ${t.version}.`),l.engines!==!1)try{const u=b(n,t);u&&o.success(`Updated package.json engines.${t.tool} → ${u}.`)}catch(u){o.warn(`Could not update engines.${t.tool}: ${u.message}`)}},ee=(e,n,i)=>{if(!i)throw new Error("Usage: vis toolchain which <tool> (e.g. vis toolchain which node)");const a=i.toLowerCase();if(!D(a))throw new Error(`Unknown tool "${i}". Known: ${y.join(", ")}.`);const l=j(e),t=M({source:"vis.config.ts",tool:a,version:"*"},l,n),s=t.installed&&t.name!=="self-activate"&&t.name!=="none"?l.find(c=>c.name===t.name):void 0,f=s?K(s,a):L(a);if(!f){o.error(`${i} not found in PATH${s?` or via ${s.name}`:""}.`),process.exitCode=1;return}process.stdout.write(`${f}
4
+ `)},ne=(e,n)=>{const i=O(e,n);process.stdout.write(`${i.name}
5
+ `)},$=e=>{if(!e)throw new Error("Could not determine workspace root. Run inside a monorepo.");return e},ce=async({options:e,visConfig:n,workspaceRoot:i})=>{Q($(i),n?.toolchain,e)},le=async({visConfig:e,workspaceRoot:n})=>{ne($(n),e?.toolchain)},fe=async({options:e,visConfig:n,workspaceRoot:i})=>{Y($(i),n?.toolchain,e)},ue=async({argument:e,fs:n,options:i,visConfig:a,workspaceRoot:l})=>{await Z(n,$(l),a?.toolchain,e[0],i)},de=async({argument:e,visConfig:n,workspaceRoot:i})=>{ee($(i),n?.toolchain,e[0])};export{le as detectExecute,fe as installExecute,ce as statusExecute,ue as useExecute,de as whichExecute};
@@ -1 +1 @@
1
- import{a as k,l as p}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as i,a as u}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as f}from"../packem_shared/utils-DQFHJn72.js";const B=async({argument:o,logger:c,options:s,rawUnknown:n,visConfig:e,workspaceRoot:t})=>{const m=f(o,n),a=t??process.cwd(),l=i({logger:c,options:s,visConfig:e},a),d=k(a,{backend:u(l),configBackend:e?.install?.backend,configCorepack:e?.install?.corepack}),r=p(d,m,s.recursive||!1,a,c);r!==0&&(process.exitCode=r)};export{B as default};
1
+ import{a as k,l as p}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as i,a as u}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as f}from"../packem_shared/utils-DQFHJn72.js";const B=async({argument:o,logger:c,options:s,rawUnknown:n,visConfig:e,workspaceRoot:t})=>{const m=f(o,n),a=t??process.cwd(),l=i({logger:c,options:s,visConfig:e},a),d=k(a,{backend:u(l),configBackend:e?.install?.backend,configCorepack:e?.install?.corepack}),r=p(d,m,s.recursive||!1,a,c);r!==0&&(process.exitCode=r)};export{B as default};
@@ -1,3 +1,3 @@
1
- import{createRequire as u}from"node:module";import{g as m}from"../packem_shared/package-version-Dxirp-UO.js";let a;const f=t=>(a??=u(import.meta.url))(t),r=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,d=t=>{if(typeof r<"u"&&r.versions&&r.versions.node){const[e,s]=r.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return r.getBuiltinModule(t)}return f(t)},{execSync:l,spawnSync:p}=d("node:child_process"),y=async({argument:t,logger:e,options:s})=>{const o=t?.[0];e.info("info: checking for updates...");const i=m();let n;try{const c=l("npm view @visulima/vis version",{encoding:"utf8"}).trim();n=o??c}catch{throw new Error("Failed to query npm registry. Check your network connection.")}if(i===n&&!s.force){e.info(`
1
+ import{createRequire as u}from"node:module";import{g as m}from"../packem_shared/package-version-CiRZecQu.js";let a;const f=t=>(a??=u(import.meta.url))(t),r=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,d=t=>{if(typeof r<"u"&&r.versions&&r.versions.node){const[e,s]=r.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return r.getBuiltinModule(t)}return f(t)},{execSync:l,spawnSync:p}=d("node:child_process"),y=async({argument:t,logger:e,options:s})=>{const o=t?.[0];e.info("info: checking for updates...");const i=m();let n;try{const c=l("npm view @visulima/vis version",{encoding:"utf8"}).trim();n=o??c}catch{throw new Error("Failed to query npm registry. Check your network connection.")}if(i===n&&!s.force){e.info(`
2
2
  ✓ Already up to date (${i})`);return}if(s.check){i===n?e.info(`✓ Already up to date (${i})`):e.info(`info: found @visulima/vis@${n} (current: ${i})`);return}if(e.info(`info: found @visulima/vis@${n} (current: ${i})`),e.info("info: installing..."),p("npm",["install","-g",`@visulima/vis@${n}`],{encoding:"utf8",stdio:"inherit"}).status!==0)throw new Error("Failed to update. Try running with sudo or fix npm permissions.");e.info(`
3
3
  ✓ Updated @visulima/vis from ${i} → ${n}`)};export{y as default};
@@ -1 +1 @@
1
- import{a as p,m as k}from"../packem_shared/pm-runner-CMSml1Bj.js";import{r as g,a as i}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as u,t as b}from"../packem_shared/utils-DQFHJn72.js";const y=async({argument:d,logger:l,options:e,process:t,rawUnknown:o,visConfig:a,workspaceRoot:n})=>{const c=u(d,o);if(c.length===0)throw new Error("No packages specified. Usage: vis why <package...>");const r=n??t.cwd,f=g({logger:l,options:e,visConfig:a},r),m=p(r,{backend:i(f),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),s=k(m,{depth:e.depth===void 0?void 0:Number(e.depth),dev:e.dev||!1,filter:b(e.filter),global:e.global||!1,json:e.json||!1,long:e.long||!1,noOptional:e.optional===!1,packages:c,parseable:e.parseable||!1,prod:e.prod||!1,recursive:e.recursive||!1},r,l);s!==0&&s!==1&&(process.exitCode=s)};export{y as default};
1
+ import{a as p,m as k}from"../packem_shared/pm-runner-3iiQayy-.js";import{r as g,a as i}from"../packem_shared/command-runtime-p4IXiIf6.js";import{m as u,t as b}from"../packem_shared/utils-DQFHJn72.js";const y=async({argument:d,logger:l,options:e,process:t,rawUnknown:o,visConfig:a,workspaceRoot:n})=>{const c=u(d,o);if(c.length===0)throw new Error("No packages specified. Usage: vis why <package...>");const r=n??t.cwd,f=g({logger:l,options:e,visConfig:a},r),m=p(r,{backend:i(f),configBackend:a?.install?.backend,configCorepack:a?.install?.corepack}),s=k(m,{depth:e.depth===void 0?void 0:Number(e.depth),dev:e.dev||!1,filter:b(e.filter),global:e.global||!1,json:e.json||!1,long:e.long||!1,noOptional:e.optional===!1,packages:c,parseable:e.parseable||!1,prod:e.prod||!1,recursive:e.recursive||!1},r,l);s!==0&&s!==1&&(process.exitCode=s)};export{y as default};
@@ -1,3 +1,3 @@
1
- import{d as j,b as k}from"./catalog.js";import{V as n}from"../packem_shared/vis-user-error-75VtCwMv.js";import{s as P}from"../packem_shared/affected-selection-D4giBK2X.js";import{f as y,a as b}from"../packem_shared/selectors-edwcgNl3.js";const x=(r,e)=>{if(r.length>0)return[...r];const a=e.indexOf("affected",2);return a===-1?[]:e.slice(a+1)},M=async({argument:r,options:e,process:a,rawArgv:u,runtime:g,visConfig:o,workspaceRoot:d})=>{if(!r[0])throw new n("Missing target. Usage: vis affected <target>");if(!d)throw new n("Could not determine workspace root. Run this command inside a monorepo.");if(e.sparseCheckout){const c=d,{fileOwners:p,packageJsons:l,workspace:t}=j(c,o),w=k(c,t,l),h=await P({base:e.base,downstream:e.downstream,head:e.head,uncommitted:e.uncommitted,upstream:e.upstream},{fileOwners:p,projectGraph:w,projects:t.projects,workspaceRoot:c},{affectedIgnore:o?.affectedIgnore,defaultBase:o?.defaultBase});let f=y(h.affectedProjects,t,e.query);f=b(f,t,e.tag);const m=[...new Set(f.map(i=>t.projects[i]?.root??i))].sort();process.stdout.write(m.length>0?`${m.join(`
1
+ import{d as j,b as k}from"./catalog.js";import{V as n}from"../packem_shared/vis-user-error-Dd7hwxlW.js";import{s as P}from"../packem_shared/affected-selection-BJXJW_3Q.js";import{f as y,a as b}from"../packem_shared/selectors-edwcgNl3.js";const x=(r,e)=>{if(r.length>0)return[...r];const a=e.indexOf("affected",2);return a===-1?[]:e.slice(a+1)},M=async({argument:r,options:e,process:a,rawArgv:u,runtime:g,visConfig:o,workspaceRoot:d})=>{if(!r[0])throw new n("Missing target. Usage: vis affected <target>");if(!d)throw new n("Could not determine workspace root. Run this command inside a monorepo.");if(e.sparseCheckout){const c=d,{fileOwners:p,packageJsons:l,workspace:t}=j(c,o),w=k(c,t,l),h=await P({base:e.base,downstream:e.downstream,head:e.head,uncommitted:e.uncommitted,upstream:e.upstream},{fileOwners:p,projectGraph:w,projects:t.projects,workspaceRoot:c},{affectedIgnore:o?.affectedIgnore,defaultBase:o?.defaultBase});let f=y(h.affectedProjects,t,e.query);f=b(f,t,e.tag);const m=[...new Set(f.map(i=>t.projects[i]?.root??i))].sort();process.stdout.write(m.length>0?`${m.join(`
2
2
  `)}
3
3
  `:"");return}const s=x(u??[],a?.argv??[]);if(s.length===0)throw new n("Missing target. Usage: vis affected <target>");await g.runCommand("run",{argv:s.includes("--affected")?s:[...s,"--affected"]})};export{M as default,x as forwardedArgv};
@@ -1,4 +1,4 @@
1
- import{createRequire as $}from"node:module";import{O as j,R as E,q as I}from"./catalog.js";import{d as P}from"../packem_shared/pm-runner-CMSml1Bj.js";import{l as C}from"../packem_shared/dependency-scan-B8jroa1D.js";import{r as T}from"../packem_shared/provenance-DNyVMxNv.js";import{r as D}from"../packem_shared/signatures-t8LbOaqr.js";import{loadOptionalSigstore as R}from"./loader.js";let y;const O=s=>(y??=$(import.meta.url))(s),m=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=s=>{if(typeof m<"u"&&m.versions&&m.versions.node){const[t,r]=m.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return m.getBuiltinModule(s)}return O(s)},{createHash:N}=_("node:crypto"),{isAbsolute:k,resolve:S,basename:v}=_("node:path"),q=s=>(s??"").split(",").map(t=>t.trim()).filter(t=>t.length>0),G=async({logger:s,options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const n=t.format??"table",c=t.prodOnly??!1,u=t.failOn==="error"?"error":"warning",d=q(t.allowlist),a=P(r),l=C(r,a.name,{includeDev:!c}).map(({name:e,version:o})=>({name:e,version:o})),[f,p]=await Promise.all([T(l,{allowlist:d,workspaceRoot:r}),D(l,{allowlist:d,workspaceRoot:r})]),i=[...f.map(e=>({code:"provenance-regression",message:`Resolved ${e.packageName}@${e.version} has no published provenance attestation, but ${e.packageName}@${e.priorVersionWithProvenance} did — a provenance regression.`,packageName:e.packageName,severity:"warning",version:e.version})),...p.map(e=>({code:e.code,message:e.message,packageName:e.packageName,severity:e.severity,version:e.version}))],g=i.filter(e=>u==="error"?e.severity==="error":!0);if(n==="json")process.stdout.write(`${JSON.stringify({findings:i,ok:g.length===0},void 0,2)}
1
+ import{createRequire as $}from"node:module";import{O as j,R as E,q as I}from"./catalog.js";import{d as P}from"../packem_shared/pm-runner-3iiQayy-.js";import{l as C}from"../packem_shared/dependency-scan-B8jroa1D.js";import{r as T}from"../packem_shared/provenance-DKeR0Ig1.js";import{r as D}from"../packem_shared/signatures-BxTMck2l.js";import{loadOptionalSigstore as R}from"./loader.js";let y;const O=s=>(y??=$(import.meta.url))(s),m=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,_=s=>{if(typeof m<"u"&&m.versions&&m.versions.node){const[t,r]=m.versions.node.split(".").map(Number);if(t>22||t===22&&r>=3||t===20&&r>=16)return m.getBuiltinModule(s)}return O(s)},{createHash:N}=_("node:crypto"),{isAbsolute:k,resolve:S,basename:v}=_("node:path"),q=s=>(s??"").split(",").map(t=>t.trim()).filter(t=>t.length>0),G=async({logger:s,options:t,workspaceRoot:r})=>{if(!r)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const n=t.format??"table",c=t.prodOnly??!1,u=t.failOn==="error"?"error":"warning",d=q(t.allowlist),a=P(r),l=C(r,a.name,{includeDev:!c}).map(({name:e,version:o})=>({name:e,version:o})),[f,p]=await Promise.all([T(l,{allowlist:d,workspaceRoot:r}),D(l,{allowlist:d,workspaceRoot:r})]),i=[...f.map(e=>({code:"provenance-regression",message:`Resolved ${e.packageName}@${e.version} has no published provenance attestation, but ${e.packageName}@${e.priorVersionWithProvenance} did — a provenance regression.`,packageName:e.packageName,severity:"warning",version:e.version})),...p.map(e=>({code:e.code,message:e.message,packageName:e.packageName,severity:e.severity,version:e.version}))],g=i.filter(e=>u==="error"?e.severity==="error":!0);if(n==="json")process.stdout.write(`${JSON.stringify({findings:i,ok:g.length===0},void 0,2)}
2
2
  `);else if(n==="ndjson")for(const e of i)process.stdout.write(`${JSON.stringify(e)}
3
3
  `);else if(i.length===0)s.info(`No provenance regressions or signature problems across ${String(l.length)} locked packages.`);else{const e=process.stdout.columns||80;s.info(j(E.createElement(I,{data:i.map(o=>({code:o.code,package:`${o.packageName}@${o.version}`,severity:o.severity}))}),{columns:e}));for(const o of i)s.warn(`${o.packageName}@${o.version}: ${o.message}`)}g.length>0&&(process.exitCode=1)},x=()=>process.env.CI==="true"||typeof process.env.ACTIONS_ID_TOKEN_REQUEST_URL=="string"||typeof process.env.SIGSTORE_ID_TOKEN=="string",J=(s,t,r)=>({_type:"https://in-toto.io/Statement/v1",predicate:{buildDefinition:{buildType:"https://visulima.com/vis/attest/v1",externalParameters:{workspaceRoot:r},internalParameters:{},resolvedDependencies:[]},runDetails:{builder:{id:"https://visulima.com/vis"},metadata:{invocationId:process.env.GITHUB_RUN_ID??"",startedOn:new Date().toISOString()}}},predicateType:"https://slsa.dev/provenance/v1",subject:[{digest:{sha256:t},name:s}]}),H=async({argument:s,fs:t,logger:r,options:n,workspaceRoot:c})=>{if(!c)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const u=s[0];if(!u)throw new Error("Missing subject. Usage: vis attest <path-to-artifact>");const d=n.predicate??"slsaProvenance";if(d!=="slsaProvenance")throw new Error(`Unsupported predicate '${d}'. Only 'slsaProvenance' is supported.`);const a=k(u)?u:S(c,u),w=n.requireSigning??!1,l=n.format??"table";let f;try{f=await t.readFile(a)}catch{throw new Error(`Cannot read subject artifact at ${a}.`)}const p=N("sha256").update(f).digest("hex");if(!x()){const b="No ambient OIDC token (not running in CI). Keyless signing needs a Fulcio identity from CI OIDC.";if(w)throw new Error(`${b} Re-run in CI or drop --require-signing.`);if(l==="json"){process.stdout.write(`${JSON.stringify({ok:!1,reason:"no-ambient-oidc",sha256:p,skipped:!0,subject:v(a)},void 0,2)}
4
4
  `);return}r.warn(`${b} Skipping signing (subject sha256: ${p}). Pass --require-signing to make this fatal.`);return}const i=J(v(a),p,c),g=Buffer.from(JSON.stringify(i)),o=await(await R({workspaceRoot:c})).attest(g,"application/vnd.in-toto+json"),h=n.output?k(n.output)?n.output:S(c,n.output):`${a}.sigstore`;if(await t.writeFile(h,`${JSON.stringify(o,void 0,2)}
@@ -1,4 +1,4 @@
1
- import{createRequire as B}from"node:module";import{z as E}from"../packem_shared/index-BzhrR_iC.js";import{findVisConfigFile as D}from"./CONFIG_FILES.js";import{y as V}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as w}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{p as e}from"./cli-main.js";import{d as C}from"../packem_shared/pm-runner-CMSml1Bj.js";import{a as F}from"../packem_shared/build-scripts-CEDx_nJp.js";import{s as O}from"../packem_shared/native-config-sync-TdTWjVgI.js";let N;const M=c=>(N??=B(import.meta.url))(c),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,T=c=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[t,s]=$.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return $.getBuiltinModule(c)}return M(c)},{spawnSync:A}=T("node:child_process"),P=/(defineConfig\s*\(\s*\{)/,q=/(export\s+default\s+\{)/,y=(c,t)=>`${t}${JSON.stringify(c)}: true,`,z=(c,t)=>{if(t.length===0)return{added:[],skipped:[],status:"noop"};const s=D(c);if(!s)return{added:[],skipped:t,status:"no-config"};if(!V(s))return{added:[],skipped:t,status:"no-config"};const n=E(s),h=n.search(/installScripts\s*:\s*\{/);let l=null,r=0;if(h!==-1){const a=n.slice(h),d=/(allow\s*:\s*\{)([^}]*)(\})/.exec(a);d?.index!==void 0&&(l=d,r=h+d.index)}if(l){const a=l[2]??"",f=new Set;for(const g of a.matchAll(/["']([^"']+)["']\s*:/g))f.add(g[1]);for(const g of a.matchAll(/(?:^|,|\{)\s*([a-z_$][\w-]*)\s*:/gi))f.add(g[1]);const d=[],k=[];for(const g of t)f.has(g)?k.push(g):d.push(g);if(d.length===0)return{added:[],configPath:s,skipped:k,status:"noop"};const x=/\n([ \t]+)\S/.exec(a)?.[1]??" ",_=`
1
+ import{createRequire as B}from"node:module";import{z as E}from"../packem_shared/index-BzhrR_iC.js";import{findVisConfigFile as D}from"./CONFIG_FILES.js";import{y as V}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as w}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{p as e}from"./cli-main.js";import{d as C}from"../packem_shared/pm-runner-3iiQayy-.js";import{a as F}from"../packem_shared/build-scripts-CEDx_nJp.js";import{s as O}from"../packem_shared/native-config-sync-TdTWjVgI.js";let N;const M=c=>(N??=B(import.meta.url))(c),$=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,T=c=>{if(typeof $<"u"&&$.versions&&$.versions.node){const[t,s]=$.versions.node.split(".").map(Number);if(t>22||t===22&&s>=3||t===20&&s>=16)return $.getBuiltinModule(c)}return M(c)},{spawnSync:A}=T("node:child_process"),P=/(defineConfig\s*\(\s*\{)/,q=/(export\s+default\s+\{)/,y=(c,t)=>`${t}${JSON.stringify(c)}: true,`,z=(c,t)=>{if(t.length===0)return{added:[],skipped:[],status:"noop"};const s=D(c);if(!s)return{added:[],skipped:t,status:"no-config"};if(!V(s))return{added:[],skipped:t,status:"no-config"};const n=E(s),h=n.search(/installScripts\s*:\s*\{/);let l=null,r=0;if(h!==-1){const a=n.slice(h),d=/(allow\s*:\s*\{)([^}]*)(\})/.exec(a);d?.index!==void 0&&(l=d,r=h+d.index)}if(l){const a=l[2]??"",f=new Set;for(const g of a.matchAll(/["']([^"']+)["']\s*:/g))f.add(g[1]);for(const g of a.matchAll(/(?:^|,|\{)\s*([a-z_$][\w-]*)\s*:/gi))f.add(g[1]);const d=[],k=[];for(const g of t)f.has(g)?k.push(g):d.push(g);if(d.length===0)return{added:[],configPath:s,skipped:k,status:"noop"};const x=/\n([ \t]+)\S/.exec(a)?.[1]??" ",_=`
2
2
  ${d.map(g=>y(g,x)).join(`
3
3
  `)}`,v=a.replace(/\s+$/,""),S=a.slice(v.length),R=`${v}${v.endsWith(",")||v===""?"":","}${_}${S.length>0?S:`
4
4
  `}`,j=`${n.slice(0,r)}${l[1]}${R}${l[3]}${n.slice(r+l[0].length)}`;return w(s,j),{added:d,configPath:s,skipped:k,status:"updated"}}const i=/(installScripts\s*:\s*\{)/;if(i.test(n)){const a=`
@@ -1,4 +1,4 @@
1
- import{createRequire as D}from"node:module";import{V as q}from"../packem_shared/vis-user-error-75VtCwMv.js";let W;const L=e=>(W??=D(import.meta.url))(e),R=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,E=e=>{if(typeof R<"u"&&R.versions&&R.versions.node){const[t,n]=R.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return R.getBuiltinModule(e)}return L(e)},{relative:h,join:u,dirname:_}=E("node:path"),{lstat:G}=E("node:fs/promises"),U=new Set(["ENOENT","ENOTDIR"]),$=e=>U.has(e?.code??""),T=async(e,t)=>{const n=e.lstat;try{return(typeof n=="function"?await n.call(e,t):await G(t)).isSymbolicLink()}catch(i){if($(i))return!1;throw i}},v=async(e,t,n)=>{if(await T(e,t))throw new q(`Refusing to write ${t}: it is a symlink, and following it would write somewhere else. Remove or replace the link, then re-run.`);await e.writeFile(t,n)},g=async(e,t)=>{try{return await e.access(t),!0}catch(n){if($(n))return!1;throw n}},Y=async(e,t)=>{try{return(await e.stat(t)).isDirectory()}catch(n){if($(n))return!1;throw n}},b=async(e,t)=>{try{return await e.readFile(t,"utf8")}catch(n){if($(n))return;throw n}},K=e=>{const t=/\n([\t ]+)\S/.exec(e);return t?.[1]!==void 0?t[1]:e.includes(`
1
+ import{createRequire as D}from"node:module";import{V as q}from"../packem_shared/vis-user-error-Dd7hwxlW.js";let W;const L=e=>(W??=D(import.meta.url))(e),R=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,E=e=>{if(typeof R<"u"&&R.versions&&R.versions.node){const[t,n]=R.versions.node.split(".").map(Number);if(t>22||t===22&&n>=3||t===20&&n>=16)return R.getBuiltinModule(e)}return L(e)},{relative:h,join:u,dirname:_}=E("node:path"),{lstat:G}=E("node:fs/promises"),U=new Set(["ENOENT","ENOTDIR"]),$=e=>U.has(e?.code??""),T=async(e,t)=>{const n=e.lstat;try{return(typeof n=="function"?await n.call(e,t):await G(t)).isSymbolicLink()}catch(i){if($(i))return!1;throw i}},v=async(e,t,n)=>{if(await T(e,t))throw new q(`Refusing to write ${t}: it is a symlink, and following it would write somewhere else. Remove or replace the link, then re-run.`);await e.writeFile(t,n)},g=async(e,t)=>{try{return await e.access(t),!0}catch(n){if($(n))return!1;throw n}},Y=async(e,t)=>{try{return(await e.stat(t)).isDirectory()}catch(n){if($(n))return!1;throw n}},b=async(e,t)=>{try{return await e.readFile(t,"utf8")}catch(n){if($(n))return;throw n}},K=e=>{const t=/\n([\t ]+)\S/.exec(e);return t?.[1]!==void 0?t[1]:e.includes(`
2
2
  `)?" ":""},V=(e,t)=>{const n=t.includes(`\r
3
3
  `)?`\r
4
4
  `:`
@@ -1,4 +1,4 @@
1
- import{a as L,b as J,p as f,O as G,c as O,q as T}from"./cli-main.js";import{m as H,a as K,t as m,i as Q,n as W,R as c,O as X,o as y,u as P,v as Z,w as _}from"./catalog.js";import{i as ee}from"../packem_shared/index-BjdW45xX.js";import{v as te,r as se,f as re}from"../packem_shared/ai-analysis-pldoS_N4.js";import{V as ae}from"../packem_shared/vis-user-error-75VtCwMv.js";import{d as ne}from"../packem_shared/pm-runner-CMSml1Bj.js";import{s as oe}from"../packem_shared/formatBytes-BHAzNIrn-CrusHOew.js";import{U as ce,V as ie,C as j}from"../packem_shared/vis-update-app-BCIccZfA.js";const ke=async({argument:R,logger:s,options:e,visConfig:o,workspaceRoot:C})=>{if(!C)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const d=C;if(e.sync&&!e.securityConfig)throw new ae("--sync requires --security-config. Run `vis check --security-config --sync`.");if(e.securityConfig){const t=ne(d);if(L(o??{},t.name),e.sync&&t.name==="pnpm"){const r=J(o??{});if(r.length>0){f.info(`
1
+ import{a as L,b as J,p as f,O as G,c as O,q as T}from"./cli-main.js";import{m as H,a as K,t as m,i as Q,n as W,R as c,O as X,o as y,u as P,v as Z,w as _}from"./catalog.js";import{i as ee}from"../packem_shared/index-BjdW45xX.js";import{v as te,r as se,f as re}from"../packem_shared/ai-analysis-pldoS_N4.js";import{V as ae}from"../packem_shared/vis-user-error-Dd7hwxlW.js";import{d as ne}from"../packem_shared/pm-runner-3iiQayy-.js";import{s as oe}from"../packem_shared/formatBytes-BHAzNIrn-CrusHOew.js";import{U as ce,V as ie,C as j}from"../packem_shared/vis-update-app-BCIccZfA.js";const ke=async({argument:R,logger:s,options:e,visConfig:o,workspaceRoot:C})=>{if(!C)throw new Error("Could not determine workspace root. Run this command inside a monorepo.");const d=C;if(e.sync&&!e.securityConfig)throw new ae("--sync requires --security-config. Run `vis check --security-config --sync`.");if(e.securityConfig){const t=ne(d);if(L(o??{},t.name),e.sync&&t.name==="pnpm"){const r=J(o??{});if(r.length>0){f.info(`
2
2
  Settings that would sync to pnpm-workspace.yaml:`);for(const E of r)f.success(` ${E}`)}else f.info("No security settings to sync.")}else e.sync&&t.name!=="pnpm"&&(f.info(`--sync is only available for pnpm projects. Your project uses ${t.name}.`),f.info("vis enforces security settings at the vis layer for non-pnpm projects."));if(!e.security&&!R?.length)return}const{packageManager:N}=G(d),U=H(d),i=o?.update??{},h=K(d,N,{dev:e.dev,includeInternal:e["include-internal"],peer:e.peer,prod:e.prod});if(h.size===0){s.info("No catalogs found.");return}const w=e.target??i.target??"latest";if(!["latest","minor","patch"].includes(w))throw new Error(`Invalid target "${w}". Use: latest, minor, or patch.`);const D={exclude:[...m(e.exclude),...m(i.exclude)],ignore:m(i.ignore),include:[...m(e.include),...m(i.include),...R],includeLocked:!!e.includeLocked,includePrerelease:e.prerelease||i.prerelease||!1,security:e.security!==!1,target:w};let x=0;for(const t of h.values())x+=t.size;const k=!!process.stdout.isTTY&&!ee;let l;const I=k?(t,r)=>{l?l.rerender(c.createElement(j,{current:t,total:r})):l=T(c.createElement(j,{current:t,total:r}),{interactive:!0,patchConsole:!1})}:(t,r)=>{s.info(`Checking ${String(t)}/${String(r)} dependencies...`)};k||s.info(`Checking ${String(x)} catalog dependencies against npm registry...
3
3
  `);const v=new Set;O("socket")&&v.add("socket"),O("depsDev")&&v.add("deps-dev");const g=o?.security?.policies?.score?.minimum,M=Q(o?.security,{disabled:v,minimumScore:g}),{failed:$,outdated:n}=await W(h,D,U,I,d,M,o?.security?.acceptedRisks);if(l&&(l.clear(),l.unmount()),$.length>0&&s.warn(`Failed to fetch: ${$.join(", ")}`),n.length===0){s.info("All catalog dependencies are up to date.");return}const S=e.format??i.format??"table",V=te(e.aiType??"impact"),u=e.ai?await se(n,s,o?.ai,V):void 0;if(k&&S==="table"){const t=new ce(n,u??null),r=o?.tui?.autoExit??!1,E=r===!0?3:typeof r=="number"?r:0;await T(c.createElement(ie,{autoExitSeconds:E,isDryRun:!0,store:t}),{alternateScreen:!0,exitOnCtrlC:!1,interactive:!0,patchConsole:!0}).waitUntilExit();const q=process.stdout.columns||80;process.stdout.write(`
4
4
  `);for(const a of n){const B=a.vulnerabilities?.length||a.socketReport&&a.socketReport.alerts.length>0,b=!!a.acceptedRisk,Y=B?b?"✓":"⚠":"✓",z=b?"gray":a.updateType==="major"?"red":a.updateType==="minor"?"yellow":"green",p=a.socketReport?.score.overall,F=p===void 0?"":` [${String(Math.round(p*100))}%]`,A=p===void 0?void 0:oe(p);process.stdout.write(`${X(c.createElement(y,null," ",c.createElement(y,{color:z},Y),` ${a.packageName} ${a.currentRange} → ${a.newRange}`,c.createElement(y,{dimColor:!0},` ${a.updateType}`),A?c.createElement(y,{color:A},F):null),{columns:q})}
@@ -1,3 +1,3 @@
1
- import{createRequire as H}from"node:module";import{J as A,q as U,j as W,F as E}from"../packem_shared/index.server-sXNQYpsl.js";import{a as P}from"../packem_shared/index-BzhrR_iC.js";import{Z as I}from"./cli-main.js";import{d as F,f as C,r as Z,a as Q,b as X,s as Y,c as ee,e as te,g as se,h as ie,i as ne,j as re,k as ae,l as oe,m as ce,n as de,o as fe,p as le,q as ue,t as pe}from"../packem_shared/watch-loop-qRn0IHPG.js";import{T as h}from"./catalog.js";let J;const D=t=>(J??=H(import.meta.url))(t),k=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,G=t=>{if(typeof k<"u"&&k.versions&&k.versions.node){const[e,s]=k.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return k.getBuiltinModule(t)}return D(t)},{createHash:_}=G("node:crypto"),ge=t=>t.startsWith("/")||/^[a-z]:[\\/]/i.test(t),q=(t,e)=>ge(e)?e:`${t}/${e}`,me={argsCheck:(t,e)=>O(t,e,"check"),argsFix:(t,e)=>O(t,e,"fix"),bin:()=>["pnpm","exec","dprint"],cacheKey:(t,e)=>{const s=["dprint",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.dprint.packageNames[0]),i=C(t,h.dprint.configFiles);if(!(!s&&!i))return{adapter:"dprint",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","css","cts","dockerfile","html","js","json","jsonc","jsx","md","mdx","mjs","mts","toml","ts","tsx","yaml","yml"],id:"dprint",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();!n||n.startsWith("[")||n.startsWith("Checked ")||n.startsWith("Error:")||s.push({adapter:"dprint",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"})}return s}},O=(t,e,s)=>{const i=s==="fix"?["fmt"]:["check","--list-different"];return e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},he={argsCheck:(t,e)=>V(t,e,"check"),argsFix:(t,e)=>V(t,e,"fix"),bin:()=>["pnpm","exec","oxfmt"],cacheKey:(t,e)=>{const s=["oxfmt",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.oxfmt.packageNames[0]),i=C(t,h.oxfmt.configFiles);if(!(!s&&!i))return{adapter:"oxfmt",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","cts","js","json","jsonc","jsx","mjs","mts","ts","tsx"],id:"oxfmt",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();!n||n.startsWith("[")||s.push({adapter:"oxfmt",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"})}return s}},V=(t,e,s)=>{const i=s==="fix"?["--write"]:["--list-different"];return e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},xe={argsCheck:(t,e)=>N(t,e,"check"),argsFix:(t,e)=>N(t,e,"fix"),bin:()=>["pnpm","exec","prettier"],cacheKey:(t,e)=>{const s=["prettier",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.prettier.packageNames[0]),i=C(t,h.prettier.configFiles);if(!(!s&&!i))return{adapter:"prettier",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","css","cts","html","js","json","jsx","less","md","mdx","mjs","mts","scss","ts","tsx","vue","yaml","yml"],id:"prettier",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();n&&(n.startsWith("[")||s.push({adapter:"prettier",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"}))}return s}},N=(t,e,s)=>{const i=s==="fix"?["--write"]:["--list-different"];return e.quiet&&i.push("--log-level","warn"),e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},ke=[he,se,me,xe,ie,ne],Re=async({logger:t,options:e,visConfig:s,workspaceRoot:i})=>{const n=i??process.cwd(),p=s?.fmt,w=Z(ke,p?.order),L=Q(n,w),x=X(L,w,"fmt").filter(({adapter:l})=>p?.adapters?.[l.id]?.enabled!==!1);if(x.length===0){t.warn("vis fmt: no formatter detected in this workspace (looked for: oxfmt, biome, dprint, prettier, ruff, deno-fmt).");return}const R=l=>{const a=p?.adapters?.[l]?.extraArgs;return a&&a.length>0?[...a]:void 0},v={quiet:e.quiet??!1},$=we(e),b=e.check?"check":"fix";let c;if(e.staged){if(c=Y(n),c===void 0)t.warn("vis fmt: could not resolve --staged (not a git repo or git unavailable). Falling back to a workspace-wide run.");else if(c.length===0){t.info(A("✓ fmt: no staged files"));return}}else if(typeof e.since=="string"&&e.since.length>0){if(c=ee(n,e.since),c===void 0)t.warn(`vis fmt: could not resolve --since ${e.since} (not a git repo or unknown ref). Falling back to a workspace-wide run.`);else if(c.length===0){t.info(A(`✓ fmt: no files changed since ${e.since}`));return}}const K=I(n,void 0,void 0,!0),y=e.format??"human";y==="human"&&e.output!==void 0&&t.warn("vis fmt: --output is ignored for the human format; pass --format json|minimal|sarif|junit|github to redirect findings to a file.");const M=async l=>{const a=$.length>0?$:l,g=[];if(a){const r=re(a,x,p?.extensionOverrides);for(const{adapter:o,presence:d}of x){const f=r.get(o.id);if(!f||f.length===0)continue;const B=R(o.id),T={adapter:o,files:f,presence:d};B&&(T.options={...v,extraArgs:B}),g.push(T)}}else for(const{adapter:r,presence:o}of x){const d=R(r.id),f={adapter:r,files:["."],presence:o};d&&(f.options={...v,extraArgs:d}),g.push(f)}if(g.length===0)return;const z=await ae(g,v,b,{cacheRoot:K}),j=g.map((r,o)=>{const d=z[o],f=r.adapter.parse(d,r.presence);return{adapter:r.adapter,durationMs:d.durationMs,exitCode:d.exitCode,findings:f}}),u=oe(j.map(r=>({adapter:r.adapter.id,durationMs:r.durationMs,exitCode:r.exitCode,findingCount:r.findings.length,findings:r.findings}))),m=y==="human"?void 0:ce({cwd:n,target:e.output});try{switch(y){case"github":{m.write(le({runs:j.map(r=>({findings:r.findings})),workspaceRoot:n}));break}case"json":{m.write(`${JSON.stringify({findings:u.findings,mode:b,runs:u.runs},null,2)}
1
+ import{createRequire as H}from"node:module";import{J as A,q as U,j as W,F as E}from"../packem_shared/index.server-sXNQYpsl.js";import{a as P}from"../packem_shared/index-BzhrR_iC.js";import{Z as I}from"./cli-main.js";import{d as F,f as C,r as Z,a as Q,b as X,s as Y,c as ee,e as te,g as se,h as ie,i as ne,j as re,k as ae,l as oe,m as ce,n as de,o as fe,p as le,q as ue,t as pe}from"../packem_shared/watch-loop-BBkg02-Q.js";import{T as h}from"./catalog.js";let J;const D=t=>(J??=H(import.meta.url))(t),k=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,G=t=>{if(typeof k<"u"&&k.versions&&k.versions.node){const[e,s]=k.versions.node.split(".").map(Number);if(e>22||e===22&&s>=3||e===20&&s>=16)return k.getBuiltinModule(t)}return D(t)},{createHash:_}=G("node:crypto"),ge=t=>t.startsWith("/")||/^[a-z]:[\\/]/i.test(t),q=(t,e)=>ge(e)?e:`${t}/${e}`,me={argsCheck:(t,e)=>O(t,e,"check"),argsFix:(t,e)=>O(t,e,"fix"),bin:()=>["pnpm","exec","dprint"],cacheKey:(t,e)=>{const s=["dprint",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.dprint.packageNames[0]),i=C(t,h.dprint.configFiles);if(!(!s&&!i))return{adapter:"dprint",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","css","cts","dockerfile","html","js","json","jsonc","jsx","md","mdx","mjs","mts","toml","ts","tsx","yaml","yml"],id:"dprint",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();!n||n.startsWith("[")||n.startsWith("Checked ")||n.startsWith("Error:")||s.push({adapter:"dprint",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"})}return s}},O=(t,e,s)=>{const i=s==="fix"?["fmt"]:["check","--list-different"];return e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},he={argsCheck:(t,e)=>V(t,e,"check"),argsFix:(t,e)=>V(t,e,"fix"),bin:()=>["pnpm","exec","oxfmt"],cacheKey:(t,e)=>{const s=["oxfmt",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.oxfmt.packageNames[0]),i=C(t,h.oxfmt.configFiles);if(!(!s&&!i))return{adapter:"oxfmt",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","cts","js","json","jsonc","jsx","mjs","mts","ts","tsx"],id:"oxfmt",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();!n||n.startsWith("[")||s.push({adapter:"oxfmt",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"})}return s}},V=(t,e,s)=>{const i=s==="fix"?["--write"]:["--list-different"];return e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},xe={argsCheck:(t,e)=>N(t,e,"check"),argsFix:(t,e)=>N(t,e,"fix"),bin:()=>["pnpm","exec","prettier"],cacheKey:(t,e)=>{const s=["prettier",t.declaredVersion??"unknown",t.configFile??"no-config",e.quiet?"q":"",...e.extraArgs??[]];return _("sha256").update(s.join("|")).digest("hex").slice(0,16)},detect:(t,e)=>{const s=F(e,h.prettier.packageNames[0]),i=C(t,h.prettier.configFiles);if(!(!s&&!i))return{adapter:"prettier",configFile:i,declared:!!s,declaredVersion:s,root:t}},extensions:["cjs","css","cts","html","js","json","jsx","less","md","mdx","mjs","mts","scss","ts","tsx","vue","yaml","yml"],id:"prettier",kind:"fmt",parse:(t,e)=>{if(t.exitCode===0)return[];const s=[];for(const i of t.stdout.split(/\r?\n/)){const n=i.trim();n&&(n.startsWith("[")||s.push({adapter:"prettier",file:q(e.root,n),fixable:!0,message:"Code style issues would be auto-fixed",severity:"info"}))}return s}},N=(t,e,s)=>{const i=s==="fix"?["--write"]:["--list-different"];return e.quiet&&i.push("--log-level","warn"),e.extraArgs?.length&&i.push(...e.extraArgs),i.push(...t),i},ke=[he,se,me,xe,ie,ne],Re=async({logger:t,options:e,visConfig:s,workspaceRoot:i})=>{const n=i??process.cwd(),p=s?.fmt,w=Z(ke,p?.order),L=Q(n,w),x=X(L,w,"fmt").filter(({adapter:l})=>p?.adapters?.[l.id]?.enabled!==!1);if(x.length===0){t.warn("vis fmt: no formatter detected in this workspace (looked for: oxfmt, biome, dprint, prettier, ruff, deno-fmt).");return}const R=l=>{const a=p?.adapters?.[l]?.extraArgs;return a&&a.length>0?[...a]:void 0},v={quiet:e.quiet??!1},$=we(e),b=e.check?"check":"fix";let c;if(e.staged){if(c=Y(n),c===void 0)t.warn("vis fmt: could not resolve --staged (not a git repo or git unavailable). Falling back to a workspace-wide run.");else if(c.length===0){t.info(A("✓ fmt: no staged files"));return}}else if(typeof e.since=="string"&&e.since.length>0){if(c=ee(n,e.since),c===void 0)t.warn(`vis fmt: could not resolve --since ${e.since} (not a git repo or unknown ref). Falling back to a workspace-wide run.`);else if(c.length===0){t.info(A(`✓ fmt: no files changed since ${e.since}`));return}}const K=I(n,void 0,void 0,!0),y=e.format??"human";y==="human"&&e.output!==void 0&&t.warn("vis fmt: --output is ignored for the human format; pass --format json|minimal|sarif|junit|github to redirect findings to a file.");const M=async l=>{const a=$.length>0?$:l,g=[];if(a){const r=re(a,x,p?.extensionOverrides);for(const{adapter:o,presence:d}of x){const f=r.get(o.id);if(!f||f.length===0)continue;const B=R(o.id),T={adapter:o,files:f,presence:d};B&&(T.options={...v,extraArgs:B}),g.push(T)}}else for(const{adapter:r,presence:o}of x){const d=R(r.id),f={adapter:r,files:["."],presence:o};d&&(f.options={...v,extraArgs:d}),g.push(f)}if(g.length===0)return;const z=await ae(g,v,b,{cacheRoot:K}),j=g.map((r,o)=>{const d=z[o],f=r.adapter.parse(d,r.presence);return{adapter:r.adapter,durationMs:d.durationMs,exitCode:d.exitCode,findings:f}}),u=oe(j.map(r=>({adapter:r.adapter.id,durationMs:r.durationMs,exitCode:r.exitCode,findingCount:r.findings.length,findings:r.findings}))),m=y==="human"?void 0:ce({cwd:n,target:e.output});try{switch(y){case"github":{m.write(le({runs:j.map(r=>({findings:r.findings})),workspaceRoot:n}));break}case"json":{m.write(`${JSON.stringify({findings:u.findings,mode:b,runs:u.runs},null,2)}
2
2
  `);break}case"junit":{m.write(fe({runs:j.map(r=>({adapter:r.adapter.id,durationMs:r.durationMs,findings:r.findings})),workspaceRoot:n}));break}case"minimal":{je(u.findings,n,m);break}case"sarif":{m.write(de({runs:j.map(r=>({adapter:r.adapter.id,findings:r.findings,presence:g.find(o=>o.adapter.id===r.adapter.id)?.presence})),workspaceRoot:n}));break}default:be(u.findings,n,b,t)}}finally{m?.close()}const S=b==="fix"?u.hadProcessFailure?1:0:ue({...u,maxSeverity:u.findings.length>0?"error":void 0});S!==0&&(process.exitCode=S)};if(e.watch){const l=[...new Set(x.flatMap(({adapter:a})=>a.extensions))];await te({extensions:l,initialFiles:c,label:"fmt",log:a=>{t.info(a)},runCycle:M,workspaceRoot:n});return}await M(c)},we=t=>{const e=t;return[...e._??e.args??[]]},be=(t,e,s,i)=>{if(t.length===0){i.info(A(s==="fix"?"✓ fmt: nothing to change":"✓ fmt: all files already formatted"));return}const n=pe(t),p=s==="fix"?U(W("Formatted:")):W("Would change:");i.info(p);for(const w of n.keys())i.info(` ${E("·")} ${P(e,w)}`);s==="check"&&(i.info(""),i.info(E(`Run \`vis fmt\` to apply changes (${String(n.size)} file${n.size===1?"":"s"}).`)))},je=(t,e,s)=>{for(const i of t)s.write(`${i.adapter} ${P(e,i.file)}
3
3
  `)};export{Re as default};
@@ -1,22 +1,22 @@
1
- import{createRequire as re}from"node:module";import{F as d,j as y,q as v}from"../packem_shared/index.server-sXNQYpsl.js";import{e as S,m as K,a as G,v as F,l as oe,U as ie}from"../packem_shared/index-BzhrR_iC.js";import{y as _}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{L as H}from"./catalog.js";import{d as de}from"../packem_shared/giget-D8Kwb0kD.js";import{p as f}from"./cli-main.js";import{h as J,U as me}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";let se;const ne=t=>(se??=re(import.meta.url))(t),O=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,B=t=>{if(typeof O<"u"&&O.versions&&O.versions.node){const[e,r]=O.versions.node.split(".").map(Number);if(e>22||e===22&&r>=3||e===20&&r>=16)return O.getBuiltinModule(t)}return ne(t)},{fileURLToPath:ae}=B("node:url"),{createInterface:ce}=B("node:readline"),{mkdtempSync:le,rmSync:fe}=B("node:fs"),{tmpdir:ue}=B("node:os"),{spawnSync:pe}=B("node:child_process"),z=[".ts",".mts",".cts",".js",".mjs",".cjs"],he="template.yml",ge=[".d",".test",".spec",".config",".bench",".stories"],we=[".d.ts",".d.mts",".d.cts",".js.map",".mjs.map",".cjs.map",".ts.map"],X=t=>{for(const e of z)if(t.endsWith(e))return t.slice(0,-e.length);return t},$e=t=>{if(we.some(r=>t.endsWith(r))||!z.some(r=>t.endsWith(r)))return!1;const e=X(t);return!ge.some(r=>e.endsWith(r))},U=(t,e)=>{const r=[];if(!_(t))return r;for(const n of H(t,{includeDirs:!1,includeSymlinks:!1,maxDepth:1})){if(!$e(n.name))continue;const s=X(n.name);r.push({load:()=>ve(n.path),name:s,path:n.path,source:e})}return r},I=(t,e)=>{const r=[];if(!_(t))return r;for(const n of H(t,{includeFiles:!1,includeSymlinks:!1,maxDepth:1})){if(n.path===t)continue;const s=S(n.path,he);_(s)&&r.push({load:()=>be(n.path,n.name),name:n.name,path:n.path,source:e})}return r},ye=()=>{try{const t=ae(import.meta.url),e=S(K(t),"..","..","templates");return _(e)?e:void 0}catch{return}},R=t=>{const{extraDirectories:e=[],onWarning:r,workspaceRoot:n}=t,s=[...U(S(n,".vis","templates"),"native"),...I(S(n,".vis","templates"),"moon"),...I(S(n,".moon","templates"),"moon")];for(const c of e)s.push(...I(c,"config")),s.push(...U(c,"config"));const i=ye();i&&s.push(...I(i,"builtin"));const a=new Map;for(const c of s){const o=a.get(c.name);if(!o){a.set(c.name,c);continue}r&&r(`Template "${c.name}" exists in multiple sources — using ${o.source} (${o.path}), ignoring ${c.source} (${c.path}).`)}return[...a.values()].sort((c,o)=>c.name.localeCompare(o.name))},ve=async t=>{const{loadNativeTemplate:e}=await import("./loader2.js");return e(t)},be=async(t,e)=>{const{loadMoonTemplate:r}=await import("./index6.js");return r(t,e)},q=(t,e)=>new Promise(r=>{t.question(e,n=>{r(n.trim())})}),Te=async(t,e,r)=>{const s=await q(t,` ${e} ${d(r?"[Y/n]":"[y/N]")} `);return s===""?r:s.toLowerCase()==="y"||s.toLowerCase()==="yes"},Se=async(t,e,r,n)=>{process.stderr.write(` ${e}
1
+ import{createRequire as re}from"node:module";import{F as d,j as y,q as v}from"../packem_shared/index.server-sXNQYpsl.js";import{e as E,m as J,a as z,v as F,l as oe,U as ie}from"../packem_shared/index-BzhrR_iC.js";import{y as _}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{L as K}from"./catalog.js";import{p as f}from"./cli-main.js";import{d as de}from"../packem_shared/git-source-DExWbfN0.js";import{h as X,U as me}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";let se;const ne=t=>(se??=re(import.meta.url))(t),O=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,k=t=>{if(typeof O<"u"&&O.versions&&O.versions.node){const[e,r]=O.versions.node.split(".").map(Number);if(e>22||e===22&&r>=3||e===20&&r>=16)return O.getBuiltinModule(t)}return ne(t)},{fileURLToPath:ae}=k("node:url"),{createInterface:ce}=k("node:readline"),{mkdtempSync:le,rmSync:fe}=k("node:fs"),{tmpdir:ue}=k("node:os"),{spawnSync:pe}=k("node:child_process"),Y=[".ts",".mts",".cts",".js",".mjs",".cjs"],he="template.yml",ge=[".d",".test",".spec",".config",".bench",".stories"],we=[".d.ts",".d.mts",".d.cts",".js.map",".mjs.map",".cjs.map",".ts.map"],G=t=>{for(const e of Y)if(t.endsWith(e))return t.slice(0,-e.length);return t},$e=t=>{if(we.some(r=>t.endsWith(r))||!Y.some(r=>t.endsWith(r)))return!1;const e=G(t);return!ge.some(r=>e.endsWith(r))},U=(t,e)=>{const r=[];if(!_(t))return r;for(const n of K(t,{includeDirs:!1,includeSymlinks:!1,maxDepth:1})){if(!$e(n.name))continue;const s=G(n.name);r.push({load:()=>ve(n.path),name:s,path:n.path,source:e})}return r},R=(t,e)=>{const r=[];if(!_(t))return r;for(const n of K(t,{includeFiles:!1,includeSymlinks:!1,maxDepth:1})){if(n.path===t)continue;const s=E(n.path,he);_(s)&&r.push({load:()=>be(n.path,n.name),name:n.name,path:n.path,source:e})}return r},ye=()=>{try{const t=ae(import.meta.url),e=E(J(t),"..","..","templates");return _(e)?e:void 0}catch{return}},I=t=>{const{extraDirectories:e=[],onWarning:r,workspaceRoot:n}=t,s=[...U(E(n,".vis","templates"),"native"),...R(E(n,".vis","templates"),"moon"),...R(E(n,".moon","templates"),"moon")];for(const c of e)s.push(...R(c,"config")),s.push(...U(c,"config"));const i=ye();i&&s.push(...R(i,"builtin"));const a=new Map;for(const c of s){const o=a.get(c.name);if(!o){a.set(c.name,c);continue}r&&r(`Template "${c.name}" exists in multiple sources — using ${o.source} (${o.path}), ignoring ${c.source} (${c.path}).`)}return[...a.values()].sort((c,o)=>c.name.localeCompare(o.name))},ve=async t=>{const{loadNativeTemplate:e}=await import("./loader2.js");return e(t)},be=async(t,e)=>{const{loadMoonTemplate:r}=await import("./index6.js");return r(t,e)},q=(t,e)=>new Promise(r=>{t.question(e,n=>{r(n.trim())})}),Se=async(t,e,r)=>{const s=await q(t,` ${e} ${d(r?"[Y/n]":"[y/N]")} `);return s===""?r:s.toLowerCase()==="y"||s.toLowerCase()==="yes"},Ee=async(t,e,r,n)=>{process.stderr.write(` ${e}
2
2
  `);for(const[s,i]of r.entries()){const a=y(v(` ${String(s+1)}.`)),c=i===n?d(" (default)"):"";process.stderr.write(`${a} ${i}${c}
3
3
  `)}for(;;){const s=await q(t,`
4
4
  ${d(`Enter choice (1-${String(r.length)}):`)} `);if(s===""&&n!==void 0)return n;const i=Number.parseInt(s,10);if(Number.isInteger(i)&&i>=1&&i<=r.length)return r[i-1];const a=r.find(c=>c===s);if(a)return a;process.stderr.write(` ${d("Invalid choice. Try again.")}
5
- `)}},Ee=async(t,e,r,n)=>{process.stderr.write(` ${e} ${d("(comma-separated numbers)")}
5
+ `)}},Te=async(t,e,r,n)=>{process.stderr.write(` ${e} ${d("(comma-separated numbers)")}
6
6
  `);for(const[s,i]of r.entries()){const a=y(v(` ${String(s+1)}.`)),c=n.includes(i)?d(" (default)"):"";process.stderr.write(`${a} ${i}${c}
7
7
  `)}for(;;){const s=await q(t,`
8
8
  ${d("Enter choices:")} `);if(s===""&&n.length>0)return n;const i=s.split(",").map(a=>Number.parseInt(a.trim(),10)).filter(a=>Number.isInteger(a)&&a>=1&&a<=r.length);if(i.length>0)return i.map(a=>r[a-1]);process.stderr.write(` ${d("Invalid choice. Try again.")}
9
- `)}},xe=t=>` ${d(`${t}:`)} `,Ne=(t,e)=>e.prompt??t,Oe=t=>Object.entries(t).sort(([e,r],[n,s])=>{const i=r.order??0,a=s.order??0;return i!==a?i-a:e.localeCompare(n)}),V=(t,e)=>{switch(t.type){case"array":return e.split(",").map(r=>r.trim()).filter(Boolean);case"boolean":return e==="true"||e==="1"||e==="yes"||e==="y";case"enum":return t.multiple?e.split(",").map(r=>r.trim()).filter(Boolean):e;case"number":{const r=Number(e);if(Number.isNaN(r))throw new TypeError(`Expected a number, got "${e}"`);return r}default:return e}},W=(t,e,r)=>{if(e.type==="enum"){const n=Array.isArray(r)?r:[r];for(const s of n)if(typeof s!="string"||!e.values.includes(s))throw new Error(`Variable "${t}" must be one of: ${e.values.join(", ")} (got "${String(s)}")`)}},_e=async t=>{const{defaults:e,interactive:r,overrides:n,variables:s}=t,i={},a=r?ce({input:process.stdin,output:process.stderr}):null;try{for(const[c,o]of Oe(s)){if(Object.hasOwn(n,c)){const m=V(o,n[c]??"");W(c,o,m),i[c]=m;continue}if(e||!r||o.internal){if(o.default!==void 0){W(c,o,o.default),i[c]=o.default;continue}if(o.required)throw new Error(`Required variable "${c}" not provided. Pass --${c}=<value> or remove --defaults.`);continue}const l=Ne(c,o);let u;if(o.type==="boolean")u=await Te(a,l,!!(o.default??!1));else if(o.type==="enum")if(o.multiple){const m=Array.isArray(o.default)?o.default:[];u=await Ee(a,l,o.values,m)}else{const m=typeof o.default=="string"?o.default:void 0;u=await Se(a,l,o.values,m)}else{const m=o.default===void 0?"":` (${String(o.default)})`,T=await q(a,xe(`${l}${m}`));if(T===""&&o.default!==void 0)u=o.default;else if(T===""){if(o.required)throw new Error(`Variable "${c}" is required`);continue}else u=V(o,T)}W(c,o,u),i[c]=u}return i}finally{a?.close()}},Be=["git://","npm://","https://","github:","gitlab:","bitbucket:","sourcehut:"],ke=t=>Be.some(e=>t.startsWith(e)),De=async(t,e={})=>{const r=e.targetDirectory===void 0,n=e.targetDirectory??le(S(ue(),"vis-generate-")),s=()=>{if(r)try{fe(n,{force:!0,recursive:!0})}catch{}};f.info(`Downloading ${t}…`);try{const i=await de(t,{auth:e.auth||process.env.GIGET_AUTH||process.env.GITHUB_TOKEN||process.env.GH_TOKEN||void 0,dir:n,force:!0,preferOffline:e.preferOffline});return{cleanup:s,directory:i.dir}}catch(i){s();const a=i instanceof Error?i.message:String(i);throw f.warn(`Failed to download template: ${a}`),i}},Y=(t,e="")=>{const r=[];for(const[n,s]of Object.entries(t)){const i=e?`${e}/${n}`:n;typeof s=="string"||Buffer.isBuffer(s)?r.push({content:s,path:i}):s&&typeof s=="object"&&r.push(...Y(s,i))}return r},je=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,Ie=(t,e)=>{if(F(e))throw new Error(`Refusing to write outside destination: template produced absolute path "${e}".`);const r=S(t,e),n=G(t,r);if(n===".."||n.startsWith(`..${oe}`)||F(n))throw new Error(`Refusing to write outside destination: "${e}" resolves to "${r}" which escapes "${t}".`);return r},Re=(t,e)=>{J(K(t)),me(t,e)},qe=(t,e,r=!1)=>{const n=typeof t=="string"?[t]:t.commands,s=typeof t=="string"?r:t.silent??r;for(const i of n){s||f.info(`$ ${i}`);const a=pe(i,{cwd:e,shell:!0,stdio:s?"ignore":"inherit"});if(a.status!==0)return f.warn(`Script failed (exit ${String(a.status)}): ${i}`),!1}return!0},Le=t=>{const e=new Map;for(const r of t){const n=typeof r=="string"?0:r.phase??0,s=e.get(n);s?s.push(r):e.set(n,[r])}return[...e.entries()].sort(([r],[n])=>r-n)},We=async(t,e)=>{const n={builtins:{dest_dir:e.destination,dest_rel_dir:G(e.workspaceRoot,e.destination)||".",working_dir:e.cwd,workspace_root:e.workspaceRoot},options:e.options},s=await t.produce(n),i=s.files?Y(s.files):[],a=s.filesMeta??{},c=[];for(const o of i){const l=Ie(e.destination,o.path);c.push({file:o,meta:a[o.path]??{},target:l})}if(e.dryRun){f.info(`${y(v("Plan"))} ${d("(dry-run, no files written)")}`);for(const o of c){const l=Buffer.isBuffer(o.file.content)?o.file.content.length:Buffer.byteLength(o.file.content,"utf8");process.stderr.write(` ${d("write")} ${o.file.path} ${d(`(${je(l)})`)}
10
- `)}}else{J(e.destination);let o=0,l=0;for(const u of c){const{file:m,meta:T,target:k}=u,b=_(k),E=e.force||T.force===!0;if(b&&!E){f.warn(`Skipped existing file: ${m.path} (use --force or set frontmatter force: true to overwrite)`),l+=1;continue}Re(k,m.content),o+=1}f.success(`Wrote ${String(o)} file${o===1?"":"s"}${l>0?`, skipped ${String(l)}`:""}`)}if(!e.dryRun&&!e.skipScripts&&s.scripts&&s.scripts.length>0){const o=Le(s.scripts);f.info(`Running ${String(s.scripts.length)} script${s.scripts.length===1?"":"s"} across ${String(o.length)} phase${o.length===1?"":"s"}…`);for(const[,l]of o)if((await Promise.all(l.map(m=>Promise.resolve(qe(m,e.destination))))).includes(!1))throw new Error("Script failed — aborting.")}if(s.suggestions&&s.suggestions.length>0){process.stderr.write(`
9
+ `)}},xe=t=>` ${d(`${t}:`)} `,Ne=(t,e)=>e.prompt??t,Oe=t=>Object.entries(t).sort(([e,r],[n,s])=>{const i=r.order??0,a=s.order??0;return i!==a?i-a:e.localeCompare(n)}),V=(t,e)=>{switch(t.type){case"array":return e.split(",").map(r=>r.trim()).filter(Boolean);case"boolean":return e==="true"||e==="1"||e==="yes"||e==="y";case"enum":return t.multiple?e.split(",").map(r=>r.trim()).filter(Boolean):e;case"number":{const r=Number(e);if(Number.isNaN(r))throw new TypeError(`Expected a number, got "${e}"`);return r}default:return e}},W=(t,e,r)=>{if(e.type==="enum"){const n=Array.isArray(r)?r:[r];for(const s of n)if(typeof s!="string"||!e.values.includes(s))throw new Error(`Variable "${t}" must be one of: ${e.values.join(", ")} (got "${String(s)}")`)}},_e=async t=>{const{defaults:e,interactive:r,overrides:n,variables:s}=t,i={},a=r?ce({input:process.stdin,output:process.stderr}):null;try{for(const[c,o]of Oe(s)){if(Object.hasOwn(n,c)){const m=V(o,n[c]??"");W(c,o,m),i[c]=m;continue}if(e||!r||o.internal){if(o.default!==void 0){W(c,o,o.default),i[c]=o.default;continue}if(o.required)throw new Error(`Required variable "${c}" not provided. Pass --${c}=<value> or remove --defaults.`);continue}const l=Ne(c,o);let u;if(o.type==="boolean")u=await Se(a,l,!!(o.default??!1));else if(o.type==="enum")if(o.multiple){const m=Array.isArray(o.default)?o.default:[];u=await Te(a,l,o.values,m)}else{const m=typeof o.default=="string"?o.default:void 0;u=await Ee(a,l,o.values,m)}else{const m=o.default===void 0?"":` (${String(o.default)})`,S=await q(a,xe(`${l}${m}`));if(S===""&&o.default!==void 0)u=o.default;else if(S===""){if(o.required)throw new Error(`Variable "${c}" is required`);continue}else u=V(o,S)}W(c,o,u),i[c]=u}return i}finally{a?.close()}},ke=["git://","git:","git@","npm://","https://","github:","gitlab:","gitlab://","bitbucket:","sourcehut:"],Be=t=>ke.some(e=>t.startsWith(e)),De=async(t,e={})=>{const r=e.targetDirectory===void 0,n=e.targetDirectory??le(E(ue(),"vis-generate-")),s=()=>{if(r)try{fe(n,{force:!0,recursive:!0})}catch{}};f.info(`Downloading ${t}…`);try{const i=await de(t,{auth:e.auth,dir:n,force:!0,preferOffline:e.preferOffline});return{cleanup:s,directory:i.dir}}catch(i){s();const a=i instanceof Error?i.message:String(i);throw f.warn(`Failed to download template: ${a}`),i}},H=(t,e="")=>{const r=[];for(const[n,s]of Object.entries(t)){const i=e?`${e}/${n}`:n;typeof s=="string"||Buffer.isBuffer(s)?r.push({content:s,path:i}):s&&typeof s=="object"&&r.push(...H(s,i))}return r},je=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,Re=(t,e)=>{if(F(e))throw new Error(`Refusing to write outside destination: template produced absolute path "${e}".`);const r=E(t,e),n=z(t,r);if(n===".."||n.startsWith(`..${oe}`)||F(n))throw new Error(`Refusing to write outside destination: "${e}" resolves to "${r}" which escapes "${t}".`);return r},Ie=(t,e)=>{X(J(t)),me(t,e)},qe=(t,e,r=!1)=>{const n=typeof t=="string"?[t]:t.commands,s=typeof t=="string"?r:t.silent??r;for(const i of n){s||f.info(`$ ${i}`);const a=pe(i,{cwd:e,shell:!0,stdio:s?"ignore":"inherit"});if(a.status!==0)return f.warn(`Script failed (exit ${String(a.status)}): ${i}`),!1}return!0},Le=t=>{const e=new Map;for(const r of t){const n=typeof r=="string"?0:r.phase??0,s=e.get(n);s?s.push(r):e.set(n,[r])}return[...e.entries()].sort(([r],[n])=>r-n)},We=async(t,e)=>{const n={builtins:{dest_dir:e.destination,dest_rel_dir:z(e.workspaceRoot,e.destination)||".",working_dir:e.cwd,workspace_root:e.workspaceRoot},options:e.options},s=await t.produce(n),i=s.files?H(s.files):[],a=s.filesMeta??{},c=[];for(const o of i){const l=Re(e.destination,o.path);c.push({file:o,meta:a[o.path]??{},target:l})}if(e.dryRun){f.info(`${y(v("Plan"))} ${d("(dry-run, no files written)")}`);for(const o of c){const l=Buffer.isBuffer(o.file.content)?o.file.content.length:Buffer.byteLength(o.file.content,"utf8");process.stderr.write(` ${d("write")} ${o.file.path} ${d(`(${je(l)})`)}
10
+ `)}}else{X(e.destination);let o=0,l=0;for(const u of c){const{file:m,meta:S,target:B}=u,b=_(B),T=e.force||S.force===!0;if(b&&!T){f.warn(`Skipped existing file: ${m.path} (use --force or set frontmatter force: true to overwrite)`),l+=1;continue}Ie(B,m.content),o+=1}f.success(`Wrote ${String(o)} file${o===1?"":"s"}${l>0?`, skipped ${String(l)}`:""}`)}if(!e.dryRun&&!e.skipScripts&&s.scripts&&s.scripts.length>0){const o=Le(s.scripts);f.info(`Running ${String(s.scripts.length)} script${s.scripts.length===1?"":"s"} across ${String(o.length)} phase${o.length===1?"":"s"}…`);for(const[,l]of o)if((await Promise.all(l.map(m=>Promise.resolve(qe(m,e.destination))))).includes(!1))throw new Error("Script failed — aborting.")}if(s.suggestions&&s.suggestions.length>0){process.stderr.write(`
11
11
  `),f.notice("Next steps:");for(const o of s.suggestions)process.stderr.write(` ${d("•")} ${o}
12
- `)}},Fe=async t=>{let e;try{e=(await t.load()).about?.description}catch{}return{description:e,name:t.name,path:t.path,source:t.source}},Me=(t,e)=>{const r={default:e.default,name:t,order:e.order,prompt:e.prompt,required:e.required,type:e.type};return e.type==="enum"&&(r.multiple=e.multiple,r.values=e.values),r},Ae=async t=>{const e=await t.load(),r=Object.entries(e.options??{}).sort(([n,s],[i,a])=>{const c=s.order??0,o=a.order??0;return c===o?n.localeCompare(i):c-o}).map(([n,s])=>Me(n,s));return{description:e.about?.description??"",destination:e.destination,name:t.name,path:t.path,source:t.source,variables:r}},Pe=t=>{if(t.length===0){f.info("No templates found."),f.notice("Create one at .vis/templates/<name>.ts (programmatic) or .vis/templates/<name>/ (moon-format with template.yml).");return}f.info("Available templates:");for(const e of t){const r=d(`(${e.source})`);process.stderr.write(` ${y(v(e.name))} ${r}
12
+ `)}},Fe=async t=>{let e;try{e=(await t.load()).about?.description}catch{}return{description:e,name:t.name,path:t.path,source:t.source}},Me=(t,e)=>{const r={default:e.default,name:t,order:e.order,prompt:e.prompt,required:e.required,type:e.type};return e.type==="enum"&&(r.multiple=e.multiple,r.values=e.values),r},Pe=async t=>{const e=await t.load(),r=Object.entries(e.options??{}).sort(([n,s],[i,a])=>{const c=s.order??0,o=a.order??0;return c===o?n.localeCompare(i):c-o}).map(([n,s])=>Me(n,s));return{description:e.about?.description??"",destination:e.destination,name:t.name,path:t.path,source:t.source,variables:r}},Ae=t=>{if(t.length===0){f.info("No templates found."),f.notice("Create one at .vis/templates/<name>.ts (programmatic) or .vis/templates/<name>/ (moon-format with template.yml).");return}f.info("Available templates:");for(const e of t){const r=d(`(${e.source})`);process.stderr.write(` ${y(v(e.name))} ${r}
13
13
  `)}},Ce=(t,e)=>{const r={},n=[];for(let s=0;s<t.length;s++){const i=t[s];if(!i.startsWith("--")){n.push(i);continue}const a=i.indexOf("=");if(a===-1){const l=i.slice(2);if(l.startsWith("no-"))r[l.slice(3)]="false";else{r[l]="true";const u=t[s+1];u!==void 0&&!u.startsWith("-")&&e?.(`\`--${l} ${u}\` was read as boolean \`--${l}=true\` and \`${u}\` was ignored. For a string value use \`--${l}=${u}\`.`)}continue}const c=i.slice(2,a),o=i.slice(a+1);r[c]=o}return{overrides:r,remaining:n}},Ue=async t=>{const{createInterface:e}=await import("node:readline"),r=e({input:process.stdin,output:process.stderr});try{process.stderr.write(` ${y(v("vis generate"))} ${d("— pick a template")}
14
14
 
15
15
  `);for(const[n,s]of t.entries()){const i=y(v(` ${String(n+1)}.`));process.stderr.write(`${i} ${s.name} ${d(`(${s.source})`)}
16
16
  `)}return new Promise((n,s)=>{r.question(`
17
- ${d(`Enter choice (1-${String(t.length)}):`)} `,i=>{const a=Number.parseInt(i.trim(),10);Number.isInteger(a)&&a>=1&&a<=t.length?n(t[a-1].name):s(new Error("Invalid choice."))})})}finally{r.close()}},Qe=async({argument:t,options:e,rawUnknown:r,visConfig:n,workspaceRoot:s})=>{const i=e.cwd||s||process.cwd(),a=s??i,c=n?.generator,o=Array.isArray(t)?t:t?[t]:[];if(e.list){const p=R({extraDirectories:c?.templates??[],onWarning:h=>{f.warn(h)},workspaceRoot:a});if(e.json){const h=await Promise.all(p.map(w=>Fe(w)));process.stdout.write(`${JSON.stringify(h,null,2)}
18
- `);return}Pe(p);return}if(e.describe){const p=o[0];if(!p)throw new Error("`--describe` requires a template name. Run `vis generate --list` to see available templates.");const w=R({extraDirectories:c?.templates??[],onWarning:$=>{f.warn($)},workspaceRoot:a}).find($=>$.name===p);if(!w)throw new Error(`Template "${p}" not found. Run \`vis generate --list\` to see available templates.`);const g=await Ae(w);if(e.json){process.stdout.write(`${JSON.stringify(g,null,2)}
17
+ ${d(`Enter choice (1-${String(t.length)}):`)} `,i=>{const a=Number.parseInt(i.trim(),10);Number.isInteger(a)&&a>=1&&a<=t.length?n(t[a-1].name):s(new Error("Invalid choice."))})})}finally{r.close()}},Qe=async({argument:t,options:e,rawUnknown:r,visConfig:n,workspaceRoot:s})=>{const i=e.cwd||s||process.cwd(),a=s??i,c=n?.generator,o=Array.isArray(t)?t:t?[t]:[];if(e.list){const p=I({extraDirectories:c?.templates??[],onWarning:h=>{f.warn(h)},workspaceRoot:a});if(e.json){const h=await Promise.all(p.map(w=>Fe(w)));process.stdout.write(`${JSON.stringify(h,null,2)}
18
+ `);return}Ae(p);return}if(e.describe){const p=o[0];if(!p)throw new Error("`--describe` requires a template name. Run `vis generate --list` to see available templates.");const w=I({extraDirectories:c?.templates??[],onWarning:$=>{f.warn($)},workspaceRoot:a}).find($=>$.name===p);if(!w)throw new Error(`Template "${p}" not found. Run \`vis generate --list\` to see available templates.`);const g=await Pe(w);if(e.json){process.stdout.write(`${JSON.stringify(g,null,2)}
19
19
  `);return}if(f.info(`Template: ${y(v(g.name))} ${d(`(${g.source})`)}`),g.description&&f.info(g.description),g.destination&&f.info(`Destination: ${d(g.destination)}`),g.variables.length===0)f.info("No variables.");else{f.info("Variables:");for(const $ of g.variables){const j=[$.type];$.required&&j.push("required"),$.default!==void 0&&j.push(`default=${JSON.stringify($.default)}`),$.values&&j.push(`values=${$.values.join("|")}`),process.stderr.write(` ${y(v($.name))} ${d(`(${j.join(", ")})`)}
20
- `)}}return}let l=[...r??[]];if(l.length===0){const p=process.argv.slice(2),h=p.indexOf("--");h!==-1&&(l=p.slice(h+1))}const u=o.indexOf("--"),m=u===-1?[]:o.slice(u+1),T=u===-1?o:o.slice(0,u),{overrides:k}=Ce([...m,...l],p=>{f.warn(p)});let b,E,D;const N=T[0];let L;if(N&&ke(N)){const p=await De(N,{auth:c?.auth,preferOffline:!!e.preferOffline||c?.preferOffline});L=p.cleanup;try{const w=R({extraDirectories:[p.directory],workspaceRoot:a}).find(g=>g.path.startsWith(p.directory));if(!w)throw new Error(`Downloaded template at ${p.directory} contains no template.yml or *.ts entrypoint.`);b=await w.load(),E=w.name,D=b.destination}catch(h){throw L(),h}}else{const p=R({extraDirectories:c?.templates??[],onWarning:g=>{f.warn(g)},workspaceRoot:a});if(p.length===0)throw new Error("No templates found. Create one at .vis/templates/<name>.ts or .vis/templates/<name>/template.yml.");let h;if(N)h=N;else{if(e.interactive===!1||!process.stdin.isTTY)throw new Error("No template specified. Pass a template name (see `vis generate --list`) or run interactively in a terminal.");h=await Ue(p)}const w=p.find(g=>g.name===h);if(!w)throw new Error(`Template "${h}" not found. Run 'vis generate --list' to see available templates.`);b=await w.load(),E=w.name,D=b.destination}const M=e.to,A=!!e.dryRun,Q=!!e.force,P=!!e.defaults,Z=!!e.skipScripts,ee=e.interactive!==!1&&!!process.stdin.isTTY&&!P;let x;M?x=M:D?x=D:x=".";const C=F(x)?x:ie(i,x);f.info(`Template: ${y(v(E))}`),f.info(`Target: ${d(C)}`),process.stderr.write(`
21
- `);const te=await _e({defaults:P,interactive:ee,overrides:k,variables:b.options??{}});try{await We(b,{cwd:i,destination:C,dryRun:A,force:Q,options:te,skipScripts:Z,workspaceRoot:a}),A||(process.stderr.write(`
22
- `),f.success(`Template '${E}' applied.`))}finally{L?.()}};export{Qe as default};
20
+ `)}}return}let l=[...r??[]];if(l.length===0){const p=process.argv.slice(2),h=p.indexOf("--");h!==-1&&(l=p.slice(h+1))}const u=o.indexOf("--"),m=u===-1?[]:o.slice(u+1),S=u===-1?o:o.slice(0,u),{overrides:B}=Ce([...m,...l],p=>{f.warn(p)});let b,T,D;const N=S[0];let L;if(N&&Be(N)){const p=await De(N,{auth:c?.auth,preferOffline:!!e.preferOffline||c?.preferOffline});L=p.cleanup;try{const w=I({extraDirectories:[p.directory],workspaceRoot:a}).find(g=>g.path.startsWith(p.directory));if(!w)throw new Error(`Downloaded template at ${p.directory} contains no template.yml or *.ts entrypoint.`);b=await w.load(),T=w.name,D=b.destination}catch(h){throw L(),h}}else{const p=I({extraDirectories:c?.templates??[],onWarning:g=>{f.warn(g)},workspaceRoot:a});if(p.length===0)throw new Error("No templates found. Create one at .vis/templates/<name>.ts or .vis/templates/<name>/template.yml.");let h;if(N)h=N;else{if(e.interactive===!1||!process.stdin.isTTY)throw new Error("No template specified. Pass a template name (see `vis generate --list`) or run interactively in a terminal.");h=await Ue(p)}const w=p.find(g=>g.name===h);if(!w)throw new Error(`Template "${h}" not found. Run 'vis generate --list' to see available templates.`);b=await w.load(),T=w.name,D=b.destination}const M=e.to,P=!!e.dryRun,Q=!!e.force,A=!!e.defaults,Z=!!e.skipScripts,ee=e.interactive!==!1&&!!process.stdin.isTTY&&!A;let x;M?x=M:D?x=D:x=".";const C=F(x)?x:ie(i,x);f.info(`Template: ${y(v(T))}`),f.info(`Target: ${d(C)}`),process.stderr.write(`
21
+ `);const te=await _e({defaults:A,interactive:ee,overrides:B,variables:b.options??{}});try{await We(b,{cwd:i,destination:C,dryRun:P,force:Q,options:te,skipScripts:Z,workspaceRoot:a}),P||(process.stderr.write(`
22
+ `),f.success(`Template '${T}' applied.`))}finally{L?.()}};export{Qe as default};