@visulima/vis 4.3.1 → 6.0.0

package/LICENSE.md

@@ -1187,36 +1187,6 @@ Repository: git+https://github.com/visulima/visulima.git
 > > MIT
 > >
 > > # Bundled dependencies:
-> > ## codsen-format-diagnostic-value
-> > License: MIT
-> > By: Roy Revelt
-> > Repository: git+https://github.com/codsen/codsen.git
-> >
-> > > MIT License
-> > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
-> > >
-> > > Permission is hereby granted, free of charge, to any person obtaining
-> > > a copy of this software and associated documentation files (the
-> > > "Software"), to deal in the Software without restriction, including
-> > > without limitation the rights to use, copy, modify, merge, publish,
-> > > distribute, sublicense, and/or sell copies of the Software, and to
-> > > permit persons to whom the Software is furnished to do so, subject to
-> > > the following conditions:
-> > >
-> > > The above copyright notice and this permission notice shall be
-> > > included in all copies or substantial portions of the Software.
-> > >
-> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-> > > EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-> > > MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-> > > NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
-> > > LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
-> > > OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
-> > > WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-> >
-> > ---------------------------------------
-> >
 > > ## codsen-utils
 > > License: MIT
 > > By: Roy Revelt
@@ -1224,7 +1194,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1322,14 +1292,68 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > ---------------------------------------
 > >
-> > ## html-entity-codec
+> > ## html-entities
 > > License: MIT
-> > By: Roy Revelt
-> > Repository: git+https://github.com/codsen/codsen.git
+> > By: Marat Dulin
+> > Repository: https://github.com/mdevils/html-entities.git
+> >
+> > > Copyright (c) 2021 Dulin Marat
+> > >
+> > > Permission is hereby granted, free of charge, to any person obtaining a copy
+> > > of this software and associated documentation files (the "Software"), to deal
+> > > in the Software without restriction, including without limitation the rights
+> > > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> > > copies of the Software, and to permit persons to whom the Software is
+> > > furnished to do so, subject to the following conditions:
+> > >
+> > > The above copyright notice and this permission notice shall be included in
+> > > all copies or substantial portions of the Software.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> > > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> > > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> > > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> > > THE SOFTWARE.
+> >
+> > ---------------------------------------
+> >
+> > ## indent-string
+> > License: MIT
+> > By: Sindre Sorhus
+> > Repository: sindresorhus/indent-string
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+> > >
+> > > Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+> > >
+> > > The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+> >
+> > ---------------------------------------
+> >
+> > ## lodash-es
+> > License: MIT
+> > By: John-David Dalton, Mathias Bynens
+> > Repository: lodash/lodash
+> >
+> > > Copyright OpenJS Foundation and other contributors <https://openjsf.org/>
+> > >
+> > > Based on Underscore.js, copyright Jeremy Ashkenas,
+> > > DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>
+> > >
+> > > This software consists of voluntary contributions made by many
+> > > individuals. For exact contribution history, see the revision history
+> > > available at https://github.com/lodash/lodash
+> > >
+> > > The following license applies to all parts of this software except as
+> > > documented below:
+> > >
+> > > ====
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1349,23 +1373,21 @@ Repository: git+https://github.com/visulima/visulima.git
 > > > LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 > > > OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
 > > > WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-> >
-> > ---------------------------------------
-> >
-> > ## indent-string
-> > License: MIT
-> > By: Sindre Sorhus
-> > Repository: sindresorhus/indent-string
-> >
-> > > MIT License
 > > >
-> > > Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)
+> > > ====
 > > >
-> > > Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+> > > Copyright and related rights for sample code are waived via CC0. Sample
+> > > code is defined as all source code displayed within the prose of the
+> > > documentation.
 > > >
-> > > The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+> > > CC0: http://creativecommons.org/publicdomain/zero/1.0/
 > > >
-> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+> > > ====
+> > >
+> > > Files located in the node_modules and vendor directories are externally
+> > > maintained libraries used by this software which have their own
+> > > licenses; we recommend you read them, as their terms may differ from the
+> > > terms above.
 > >
 > > ---------------------------------------
 > >
@@ -1376,7 +1398,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1406,7 +1428,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1436,7 +1458,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1466,7 +1488,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1506,6 +1528,29 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > ---------------------------------------
 > >
+> > ## rfdc
+> > License: MIT
+> > By: David Mark Clements
+> > Repository: git+https://github.com/davidmarkclements/rfdc.git
+> >
+> > > Copyright 2019 "David Mark Clements <david.mark.clements@gmail.com>"
+> > >
+> > > Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated 
+> > > documentation files (the "Software"), to deal in the Software without restriction, including without limitation 
+> > > the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and 
+> > > to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+> > >
+> > > The above copyright notice and this permission notice shall be included in all copies or substantial portions 
+> > > of the Software.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED 
+> > > TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL 
+> > > THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF 
+> > > CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS 
+> > > IN THE SOFTWARE.
+> >
+> > ---------------------------------------
+> >
 > > ## string-collapse-leading-whitespace
 > > License: MIT
 > > By: Roy Revelt
@@ -1513,7 +1558,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1543,7 +1588,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1573,7 +1618,7 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > > MIT License
 > > >
-> > > Copyright © 2010-2026 Roy Revelt and other contributors
+> > > Copyright © 2010-2025 Roy Revelt and other contributors
 > > >
 > > > Permission is hereby granted, free of charge, to any person obtaining
 > > > a copy of this software and associated documentation files (the
@@ -1611,6 +1656,35 @@ Repository: git+https://github.com/visulima/visulima.git
 > > >
 > > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 > >
+> > ---------------------------------------
+> >
+> > ## tiny-invariant
+> > License: MIT
+> > By: Alex Reardon
+> > Repository: https://github.com/alexreardon/tiny-invariant.git
+> >
+> > > MIT License
+> > >
+> > > Copyright (c) 2019 Alexander Reardon
+> > >
+> > > Permission is hereby granted, free of charge, to any person obtaining a copy
+> > > of this software and associated documentation files (the "Software"), to deal
+> > > in the Software without restriction, including without limitation the rights
+> > > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> > > copies of the Software, and to permit persons to whom the Software is
+> > > furnished to do so, subject to the following conditions:
+> > >
+> > > The above copyright notice and this permission notice shall be included in all
+> > > copies or substantial portions of the Software.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> > > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> > > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> > > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+> > > SOFTWARE.
+> >
 > >
 > >
 > >
@@ -3280,41 +3354,9 @@ Repository: git+https://github.com/visulima/visulima.git
 > >
 > > # Licenses of bundled types
 > > The published @visulima/fs artifact additionally contains code with the following licenses:
-> > MIT
+> > ISC, MIT
 > >
 > > # Bundled types:
-> > ## @visulima/yaml
-> > License: MIT
-> > By: Daniel Bannert
-> > Repository: git+https://github.com/visulima/visulima.git
-> >
-> > > MIT License
-> > >
-> > > Copyright (c) 2026 visulima
-> > >
-> > > Permission is hereby granted, free of charge, to any person obtaining a copy
-> > > of this software and associated documentation files (the "Software"), to deal
-> > > in the Software without restriction, including without limitation the rights
-> > > to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-> > > copies of the Software, and to permit persons to whom the Software is
-> > > furnished to do so, subject to the following conditions:
-> > >
-> > > The above copyright notice and this permission notice shall be included in all
-> > > copies or substantial portions of the Software.
-> > >
-> > > THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-> > > IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-> > > FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-> > > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-> > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-> > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-> > > SOFTWARE.
-> > >
-> > > 
-> > > 
-> >
-> > ---------------------------------------
-> >
 > > ## is-fs-case-sensitive
 > > License: MIT
 > > By: Hiroki Osame
@@ -3370,6 +3412,27 @@ Repository: git+https://github.com/visulima/visulima.git
 > > > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 > > > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 > > > SOFTWARE.
+> >
+> > ---------------------------------------
+> >
+> > ## yaml
+> > License: ISC
+> > By: Eemeli Aro
+> > Repository: github:eemeli/yaml
+> >
+> > > Copyright Eemeli Aro <eemeli@gmail.com>
+> > >
+> > > Permission to use, copy, modify, and/or distribute this software for any purpose
+> > > with or without fee is hereby granted, provided that the above copyright notice
+> > > and this permission notice appear in all copies.
+> > >
+> > > THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+> > > REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND
+> > > FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+> > > INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS
+> > > OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
+> > > TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
+> > > THIS SOFTWARE.
 >
 > ---------------------------------------
 >

package/README.md

@@ -233,8 +233,8 @@ When aube is the installer, `vis doctor` surfaces aube's effective hardening pos
 | `vis hook <action>`     |        | Manage git hooks (install, uninstall, migrate)                                         |
 | `vis secrets [paths]`   |        | Scan for hardcoded secrets / credentials (Rust-native)                                 |
 | `vis toolchain <cmd>`   |        | Inspect / delegate to the version manager (proto, mise, fnm, volta…)                   |
-| `vis lint [files]`      |        | Orchestrate detected source-code linters (oxlint, biome, eslint, stylelint, deno-lint) |
-| `vis fmt [files]`       |        | Orchestrate detected formatters (oxfmt, biome, dprint, prettier, deno-fmt)             |
+| `vis lint [files]`      |        | Orchestrate detected source-code linters (oxlint, biome, eslint, stylelint)           |
+| `vis fmt [files]`       |        | Orchestrate detected formatters (oxfmt, biome, dprint, prettier)                       |
 | `vis staged`            |        | Run tasks on staged files (built-in `lint-staged` replacement)                         |
 | `vis migrate <type>`    |        | Migrate from other tools — now including `gitleaks` and `secretlint`                   |
 

package/dist/bin.js

@@ -1 +1 @@
-import"./packem_shared/compile-cache-DoMHRsRZ.js";import"./packem_shared/bin-C1XKj-O-.js";
+import"./packem_shared/compile-cache-DoMHRsRZ.js";import"./packem_shared/bin-Be7_QhQK.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{a as r,x as i,i as c,d as a,r as d}from"./packem_shared/vis-user-error-75VtCwMv.js";import{t as n}from"./packem_shared/compile-cache-DoMHRsRZ.js";import{g as o}from"./packem_shared/package-version-Dxirp-UO.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o()}
+import{a as r,x as i,i as c,d as a,r as d}from"./packem_shared/vis-user-error-k7CLTpA4.js";import{t as n}from"./packem_shared/compile-cache-DoMHRsRZ.js";import{g as o}from"./packem_shared/package-version-CFuNUWDG.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o()}
 `),process.exit(0));process.argv.splice(2,0,"dlx");n();const e=r("visx",{packageName:"visx",packageVersion:o()}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(i({concise:c,detailed:p,exitOnError:!1}));e.addCommand(a);d(e);

package/dist/config/index.d.ts

@@ -1,4 +1,4 @@
-import { TargetConfiguration, TaskResult, Task, FingerprintContributor, ConstraintsConfig, NamedInputs, TaskRunnerOptions } from '@visulima/task-runner';
+import { TargetConfiguration, ChildEnvOptions, TaskResult, Task, FingerprintContributor, ConstraintsConfig, NamedInputs, TaskRunnerOptions } from '@visulima/task-runner';
 export type { FingerprintContributor } from '@visulima/task-runner';
 import { VisReleaseConfig } from "../release/types.js";
 /**
@@ -21,22 +21,21 @@ interface SimilarDepFamily {
   prefixes?: string[];
 }
 /** Adapter IDs that can format (adapter `kind` is `"fmt"` or `"both"`). */
-type FmtAdapterId = "biome" | "deno-fmt" | "dprint" | "oxfmt" | "prettier" | "ruff-fmt";
+type FmtAdapterId = "biome" | "dprint" | "oxfmt" | "prettier" | "ruff-fmt";
 /** Adapter IDs that can lint (adapter `kind` is `"lint"` or `"both"`). */
-type LintAdapterId = "biome" | "deno-lint" | "eslint" | "markdownlint" | "oxlint" | "ruff-check" | "shellcheck" | "stylelint";
+type LintAdapterId = "biome" | "eslint" | "markdownlint" | "oxlint" | "ruff-check" | "shellcheck" | "stylelint" | "typecheck";
 /**
  * Runtime adapter contract for the cross-runtime multi-tool (see
  * `rfc/design-runtime-multitool.md`). Phase 0 defines the identity +
  * detection metadata; Phase 1 extends adapters with the spawn-building
  * methods (`runFile` / `runScript` / `install` / `exec`) that route through
- * `pm-runner`. Deno is a planned third adapter — deliberately not a
- * `RuntimeId` yet (it carries permission + no-`node_modules` semantics that
- * the first cut omits).
+ * `pm-runner`.
  */
-/** JS runtimes vis can target today. `"deno"` is deferred. */
-type RuntimeId = "bun" | "node";
+declare const RUNTIME_IDS: readonly ["bun", "node"];
+/** JS runtimes vis can target today. */
+type RuntimeId = (typeof RUNTIME_IDS)[number];
 type VersionManagerName = "asdf" | "corepack" | "fnm" | "mise" | "none" | "nvm" | "proto" | "self-activate" | "volta";
-type RuntimeTool = "aube" | "bun" | "deno" | "go" | "node" | "npm" | "pnpm" | "python" | "ruby" | "rust" | "yarn";
+type RuntimeTool = "aube" | "bun" | "go" | "node" | "npm" | "pnpm" | "python" | "ruby" | "rust" | "yarn";
 interface ToolchainConfig {
   /**
    * When a tool pin doesn't match the running version, try to fix it
@@ -276,6 +275,24 @@ interface VisTargetOptions {
    * @default false
    */
   affectedFiles?: AffectedFilesMode;
+  /**
+   * Child-process environment for this target. Overrides the workspace
+   * `taskRunner.env`.
+   * - `mode: "inherit"`: the child gets the whole parent environment, even
+   *   when the workspace is `clean`.
+   * - `mode: "clean"`: the child gets only the allow-listed names, `PATH`,
+   *   `HOME`, `TERM`, `CI`, the platform essentials and what vis injects
+   *   (`VIS_TASK_SLOTS`, `VIS_ARG_*`, `envFile` values, service env).
+   * - `allow`: names and `*` wildcard patterns kept under `clean`. Added to
+   *   the workspace allow-list when the workspace is also `clean`.
+   *
+   * A traced target (`hashMode: "trace"`, or a workspace `autoFingerprint`)
+   * can be `clean` too: it gets the same environment plus the tracker's own
+   * variables, and the tracker then runs without its native backends. Without
+   * this option the workspace `taskRunner.env` applies, and that defaults to
+   * `inherit`.
+   */
+  env?: ChildEnvOptions;
   /**
    * Load environment variables from dotenv file(s) before running.
    * - `string`: a single file path (relative to project root).
@@ -974,6 +991,13 @@ interface VisConfig {
      * @default "github"
      */
     defaultProvider?: "bitbucket" | "github" | "gitlab" | "sourcehut";
+    /**
+     * Template used by a bare `vis create`. Accepts any template input, including an
+     * organization scope (`@acme` opens the `@acme/create` manifest picker, `@acme:app`
+     * selects one entry directly). In a terminal the usual prompts still run, minus the template step.
+     * @example "@acme"
+     */
+    defaultTemplate?: string;
     /**
      * Initialize a git repository after scaffolding standalone projects.
      * @default false
@@ -1078,15 +1102,15 @@ interface VisConfig {
    * Tunes adapter detection precedence, per-extension routing, and
    * per-adapter overrides. Flags on the CLI always win over config.
    *
-   * The default fmt precedence is `oxfmt → biome → dprint → prettier
-   * → deno-fmt`. When multiple adapters claim the same extension,
+   * The default fmt precedence is `oxfmt → biome → dprint → prettier`.
+   * When multiple adapters claim the same extension,
    * the first in this order owns it unless overridden here.
    * @example
    * ```
    * fmt: {
    *   order: ["biome", "prettier"],
    *   extensionOverrides: { md: "dprint" },
-   *   adapters: { "deno-fmt": { enabled: false } },
+   *   adapters: { dprint: { enabled: false } },
    * }
    * ```
    */
@@ -1210,7 +1234,6 @@ interface VisConfig {
    *   format:check), `biome` (lint, format), `oxlint` (lint),
    *   `oxfmt` (format / format:check), `stylelint` (lint:css),
    *   `knip` (knip).
-   * - **Runtimes** — `deno` (test/lint/fmt/check).
    * - **Database tooling** — `prisma` (db:generate/db:migrate/
    *   db:push/db:studio), `drizzle` (db:generate/db:migrate/
    *   db:push/db:studio).
@@ -1226,15 +1249,15 @@ interface VisConfig {
    * a config file (because the package frequently appears transitively
    * and a dep-only match would synthesize broken commands): `vite`,
    * `rolldown`, `rollup`, `webpack`, `storybook`, `nest`, `remix`,
-   * `vitepress`, `bun`, `deno`, `changeset`.
+   * `vitepress`, `bun`, `changeset`.
    *
    * Conflict resolution: detectors are evaluated in registration order
    * (see `BUILT_IN_DETECTORS`) and the first to claim a target name
    * wins. Per-name priorities: `build` → nuxt > next > remix > astro
    * > gatsby > docusaurus > vite > nest > rolldown > tsdown > tsup >
-   * packem > rollup > webpack; `test` → vitest > jest > bun > deno;
+   * packem > rollup > webpack; `test` → vitest > jest > bun;
    * `test:e2e` → playwright > cypress; `lint` → eslint > biome >
-   * oxlint > deno; `format` → prettier > biome > oxfmt; `db:*` →
+   * oxlint; `format` → prettier > biome > oxfmt; `db:*` →
    * prisma > drizzle.
    *
    * Also accepts an object form (`{ vite: false, vitest: true }`) to
@@ -1302,7 +1325,7 @@ interface VisConfig {
      *   and the PM is corepack-managed (errors loudly otherwise).
      * - `false`: never go through corepack — invoke the PM directly.
      *
-     * Mirrors nypm's `corepack: true` flag. Bun, deno, and aube are
+     * Mirrors nypm's `corepack: true` flag. Bun and aube are
      * never wrapped — corepack does not manage them.
      * @default "auto"
      */
@@ -1315,13 +1338,13 @@ interface VisConfig {
    * Flags on the CLI always win over config.
    *
    * The default lint precedence is `oxlint → biome → eslint →
-   * stylelint → deno-lint`. Override with `order` to e.g. let biome
+   * stylelint`. Override with `order` to e.g. let biome
    * fire before oxlint when the workspace standardises on biome.
    * @example
    * ```
    * lint: {
    *   order: ["biome", "eslint"],
-   *   adapters: { "deno-lint": { enabled: false } },
+   *   adapters: { oxlint: { enabled: false } },
    * }
    * ```
    */

package/dist/packem_chunks/CONFIG_FILES.js

@@ -1,9 +1,9 @@
-import{createRequire as I}from"node:module";import{L as x,m as K,T as O}from"../packem_shared/target-merge-DVJl-7Qz.js";import{v as _,e as a,m as C}from"../packem_shared/index-BzhrR_iC.js";import{i as M}from"./ts-loader.js";import{otelPlugin as _e}from"../packem_shared/otelPlugin-D8LL2-4L.js";import{definePlugin as Ee}from"../packem_shared/definePlugin-DoUcoYSy.js";import{y as d}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{h as m}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{p as S}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";let N;const F=e=>(N??=I(import.meta.url))(e),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,v=e=>{if(typeof l<"u"&&l.versions&&l.versions.node){const[s,t]=l.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return l.getBuiltinModule(e)}return F(e)},{createHash:w}=v("node:crypto"),{readdirSync:$,readFileSync:L}=v("node:fs"),{createRequire:q}=v("node:module");class p extends Error{chain;constructor(s,t,o){super(s,o),this.name=this.constructor.name,this.chain=t}}class P extends p{constructor(s,t){const o=[...t,`${s} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,t)}}class E extends p{filePath;removedKeys;constructor(s,t,o){const r=[`${s} uses removed keys.`,""];for(const n of o){const c=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${c} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
+import{createRequire as I}from"node:module";import{K as x,m as q,T as O}from"../packem_shared/target-merge-BClIXg2k.js";import{z as _,e as a,$ as j}from"../packem_shared/index-BdMIfGVZ.js";import{i as M}from"./ts-loader.js";import{otelPlugin as _e}from"../packem_shared/otelPlugin-D8LL2-4L.js";import{definePlugin as Ee}from"../packem_shared/definePlugin-DoUcoYSy.js";import{y as d}from"../packem_shared/isAccessibleSync-DYKTrrvc-BwaMhQs0.js";import{h as m}from"../packem_shared/writeFileSync-DJoHk3Ks-Dhem3Uof.js";import{p as S}from"../packem_shared/readJsonSync-CbryXYxN-Bm5i10UW.js";let N;const F=e=>(N??=I(import.meta.url))(e),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,C=e=>{if(typeof l<"u"&&l.versions&&l.versions.node){const[s,t]=l.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return l.getBuiltinModule(e)}return F(e)},{createHash:w}=C("node:crypto"),{readdirSync:$,readFileSync:K}=C("node:fs"),{createRequire:L}=C("node:module");class p extends Error{chain;constructor(s,t,o){super(s,o),this.name=this.constructor.name,this.chain=t}}class P extends p{constructor(s,t){const o=[...t,`${s} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,t)}}class E extends p{filePath;removedKeys;constructor(s,t,o){const r=[`${s} uses removed keys.`,""];for(const n of o){const c=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${c} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
 `),t),this.filePath=s,this.removedKeys=o}}class T extends p{constructor(s,t,o){const r=o instanceof Error?o.message:String(o),n=t.length>0?`
 Chain: ${t.join(" → ")}`:"";super(`Failed to load ${s}: ${r}${n}`,t,{cause:o})}}const U=e=>e.join(" → ");class k extends p{constructor(s,t,o){const r=t.length>0?t[t.length-1]:"<unknown>",n=o.length>0?`
 Tried:
   ${o.join(`
   `)}`:"";super(`Cannot resolve "${s}" extended from ${r}.${n}
-Chain: ${U(t)}`,t)}}class W extends p{filePath;violations;constructor(s,t,o){const r=[`${s} has an invalid value.`,""];for(const n of o)r.push(`  • ${n.location} — expected ${n.expected}, found ${n.found}`);r.push("","See https://visulima.com/docs/packages/vis/configuration for the expected shape."),super(r.join(`
-`),t),this.filePath=s,this.violations=o}}const z=e=>{const s=[];if(Object.hasOwn(e,"targetDefaults")&&s.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(e,"taskRunnerOptions")&&s.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(e,"taskDefaults")){const{taskDefaults:t}=e,o=[];if(Array.isArray(t))for(const[r,n]of t.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));s.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(e.scopedTasks))for(const[t,o]of e.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&s.push({location:`scopedTasks[${t}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&s.push({location:`scopedTasks[${t}].targets`,name:"targets",renamedTo:"tasks"}));return s},B=e=>Object.hasOwn(e,"targets")&&!Object.hasOwn(e,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],H=(e,s,t)=>{if(!t||typeof t!="object")return;const o=z(t);if(o.length>0)throw new E(e,s,o)},Y=(e,s,t)=>{if(!t||typeof t!="object")return;const o=B(t);if(o.length>0)throw new E(e,s,o)},h=e=>{if(e===null)return"null";if(Array.isArray(e))return"an array";if(typeof e=="object"){const s=Object.keys(e);return s.length>0?`an object with { ${s.join(", ")} }`:"an empty object"}return typeof e},g=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),J=e=>{const s=[];if(!Object.hasOwn(e,"scopedTasks")||e.scopedTasks===void 0)return s;const{scopedTasks:t}=e;if(!Array.isArray(t))return s.push({expected:"an array of `{ match?, tasks }` blocks",found:h(t),location:"scopedTasks"}),s;for(const[o,r]of t.entries()){const n=`scopedTasks[${o}]`;if(!g(r)){s.push({expected:"a `{ match?, tasks }` block",found:h(r),location:n});continue}g(r.tasks)||s.push({expected:"`tasks` to be an object keyed by target name",found:r.tasks===void 0?`a block with { ${Object.keys(r).join(", ")} }`:h(r.tasks),location:`${n}.tasks`}),r.match!==void 0&&!g(r.match)&&s.push({expected:"`match` to be an object of project constraints",found:h(r.match),location:`${n}.match`})}return s},Q=(e,s,t)=>{if(!t||typeof t!="object")return;const o=J(t);if(o.length>0)throw new W(e,s,o)},D=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],X=new Set(D),A=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],Z=new Set(A),je=2880,y={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},ee=e=>{if(!e)return{...y};const s=y.policies??{},t=e.policies??{},o={...s,...t};for(const r of Object.keys(s)){const n=s[r],c=t[r];n!==void 0&&c!==void 0&&(o[r]={...n,...c})}return{...y,...e,policies:o}},b=e=>({...e,security:ee(e.security),update:{security:!0,target:"minor",...e.update}}),se=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>X.has(o)));for(const o of D)if(t.has(o))return a(e,o)},te=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>Z.has(o)));for(const o of A)if(t.has(o))return a(e,o)},V=e=>w("sha256").update(L(e)).digest("hex"),oe=e=>{const s=w("sha256"),t=[...e].sort();for(const o of t)s.update(o),s.update(":"),s.update(V(o)),s.update(`
-`);return s.digest("hex")},ne=e=>{const s=a(e,"node_modules");if(d(s)){const o=a(s,".cache","vis");return m(o),a(o,"vis-config-cache.json")}const t=x("vis",{create:!0,cwd:e});return t?a(t,"vis-config-cache.json"):void 0},re=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},ce=(e,s,t)=>{try{m(C(e)),O(e,{config:t,hash:s})}catch{}},ie=e=>e===void 0?[]:Array.isArray(e)?e:[e],ae=(e,s,t)=>{if(_(e))throw new k(e,[...t,s],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(e.startsWith("./")||e.startsWith("../")){const r=C(s),n=a(r,e);if(o.push(n),d(n))return n;throw new k(e,[...t,s],o)}try{return q(s).resolve(e)}catch{throw o.push(`require.resolve("${e}") from ${s}`),new k(e,[...t,s],o)}},G=async(e,s)=>{let t;try{t=(await M(e)).default??{}}catch(o){throw new T(e,s,o)}try{return(typeof t=="function"?await t()??{}:t)??{}}catch(o){throw new T(e,s,o)}},fe=(e,s)=>{const t={...e,...s};if(e.tasks||s.tasks){const o=new Set([...Object.keys(e.tasks??{}),...Object.keys(s.tasks??{})]),r={};for(const n of o)r[n]=K(e.tasks?.[n],s.tasks?.[n]);t.tasks=r}if((e.scopedTasks||s.scopedTasks)&&(t.scopedTasks=[...e.scopedTasks??[],...s.scopedTasks??[]]),(e.fileGroups||s.fileGroups)&&(t.fileGroups={...e.fileGroups,...s.fileGroups}),(e.taskGroups||s.taskGroups)&&(t.taskGroups={...e.taskGroups,...s.taskGroups}),e.security||s.security){const o=e.security?.policies??{},r=s.security?.policies??{},n={...o,...r};for(const c of Object.keys(o)){const i=o[c],f=r[c];i!==void 0&&f!==void 0&&(n[c]={...i,...f})}t.security={...e.security,...s.security,acceptedRisks:{...e.security?.acceptedRisks,...s.security?.acceptedRisks},policies:n}}return(e.update||s.update)&&(t.update={...e.update,...s.update}),(e.taskRunner||s.taskRunner)&&(t.taskRunner={...e.taskRunner,...s.taskRunner}),delete t.extends,t},R=async(e,s,t,o,r)=>{if(t.has(e))throw new P(e,s);if(!o.has(e)){t.add(e);try{const n=await G(e,s);H(e,s,n),Q(e,s,n);const c=ie(n.extends);for(const i of c){const f=ae(i,e,s);await R(f,[...s,e],t,o,r)}o.set(e,n),r.push(e)}finally{t.delete(e)}}},Te=async(e,s)=>{let t;if(s?.explicitConfigPath){const u=_(s.explicitConfigPath)?s.explicitConfigPath:a(e,s.explicitConfigPath);if(!d(u))throw new Error(`Cannot find config file at ${u}`);t=u}else t=se(e);if(!t)return b({});const o=new Set,r=new Map,n=[];await R(t,[],o,r,n);const c=oe(n),i=ne(e);if(i){const u=re(i,c);if(u)return u}let f={};for(const u of n)f=fe(f,r.get(u));const j=b(f);return i&&ce(i,c,j),j},ue=e=>e.replaceAll(/[^\w.-]+/g,"_"),de=(e,s)=>{const t=a(e,"node_modules"),o=ue(s);if(d(t)){const n=a(t,".cache","vis","task-configs");return m(n),a(n,`${o}.json`)}const r=x("vis",{create:!0,cwd:e});return r?a(r,"task-configs",`${o}.json`):void 0},le=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},pe=(e,s,t)=>{try{m(C(e)),O(e,{config:t,hash:s})}catch{}},be=async(e,s,t)=>{const o=te(s);if(!o)return;const r=V(o),n=de(e,t);if(n){const f=le(n,r);if(f)return f}const c=await G(o,[]);Y(o,[],c);const i=c;return n&&pe(n,r,i),i},we=e=>e,$e=e=>e;export{D as CONFIG_FILES,je as DEFAULT_MIN_RELEASE_AGE_MINUTES,y as SECURITY_DEFAULTS,A as TASK_CONFIG_FILES,b as applyDefaults,$e as defineConfig,Ee as definePlugin,we as defineTaskConfig,se as findVisConfigFile,te as findVisTaskConfigFile,Te as loadVisConfig,be as loadVisTaskConfig,_e as otelPlugin};
+Chain: ${U(t)}`,t)}}class z extends p{filePath;violations;constructor(s,t,o){const r=[`${s} has an invalid value.`,""];for(const n of o)r.push(`  • ${n.location} — expected ${n.expected}, found ${n.found}`);r.push("","See https://visulima.com/docs/packages/vis/configuration for the expected shape."),super(r.join(`
+`),t),this.filePath=s,this.violations=o}}const W=e=>{const s=[];if(Object.hasOwn(e,"targetDefaults")&&s.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(e,"taskRunnerOptions")&&s.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(e,"taskDefaults")){const{taskDefaults:t}=e,o=[];if(Array.isArray(t))for(const[r,n]of t.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));s.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(e.scopedTasks))for(const[t,o]of e.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&s.push({location:`scopedTasks[${t}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&s.push({location:`scopedTasks[${t}].targets`,name:"targets",renamedTo:"tasks"}));return s},B=e=>Object.hasOwn(e,"targets")&&!Object.hasOwn(e,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],H=(e,s,t)=>{if(!t||typeof t!="object")return;const o=W(t);if(o.length>0)throw new E(e,s,o)},Y=(e,s,t)=>{if(!t||typeof t!="object")return;const o=B(t);if(o.length>0)throw new E(e,s,o)},h=e=>{if(e===null)return"null";if(Array.isArray(e))return"an array";if(typeof e=="object"){const s=Object.keys(e);return s.length>0?`an object with { ${s.join(", ")} }`:"an empty object"}return typeof e},g=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),J=e=>{const s=[];if(!Object.hasOwn(e,"scopedTasks")||e.scopedTasks===void 0)return s;const{scopedTasks:t}=e;if(!Array.isArray(t))return s.push({expected:"an array of `{ match?, tasks }` blocks",found:h(t),location:"scopedTasks"}),s;for(const[o,r]of t.entries()){const n=`scopedTasks[${o}]`;if(!g(r)){s.push({expected:"a `{ match?, tasks }` block",found:h(r),location:n});continue}g(r.tasks)||s.push({expected:"`tasks` to be an object keyed by target name",found:r.tasks===void 0?`a block with { ${Object.keys(r).join(", ")} }`:h(r.tasks),location:`${n}.tasks`}),r.match!==void 0&&!g(r.match)&&s.push({expected:"`match` to be an object of project constraints",found:h(r.match),location:`${n}.match`})}return s},Q=(e,s,t)=>{if(!t||typeof t!="object")return;const o=J(t);if(o.length>0)throw new z(e,s,o)},D=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],X=new Set(D),A=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],Z=new Set(A),ve=2880,y={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},ee=e=>{if(!e)return{...y};const s=y.policies??{},t=e.policies??{},o={...s,...t};for(const r of Object.keys(s)){const n=s[r],c=t[r];n!==void 0&&c!==void 0&&(o[r]={...n,...c})}return{...y,...e,policies:o}},b=e=>({...e,security:ee(e.security),update:{security:!0,target:"minor",...e.update}}),se=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>X.has(o)));for(const o of D)if(t.has(o))return a(e,o)},te=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>Z.has(o)));for(const o of A)if(t.has(o))return a(e,o)},V=e=>w("sha256").update(K(e)).digest("hex"),oe=e=>{const s=w("sha256"),t=[...e].sort();for(const o of t)s.update(o),s.update(":"),s.update(V(o)),s.update(`
+`);return s.digest("hex")},ne=e=>{const s=a(e,"node_modules");if(d(s)){const o=a(s,".cache","vis");return m(o),a(o,"vis-config-cache.json")}const t=x("vis",{create:!0,cwd:e});return t?a(t,"vis-config-cache.json"):void 0},re=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},ce=(e,s,t)=>{try{m(j(e)),O(e,{config:t,hash:s})}catch{}},ie=e=>e===void 0?[]:Array.isArray(e)?e:[e],ae=(e,s,t)=>{if(_(e))throw new k(e,[...t,s],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(e.startsWith("./")||e.startsWith("../")){const r=j(s),n=a(r,e);if(o.push(n),d(n))return n;throw new k(e,[...t,s],o)}try{return L(s).resolve(e)}catch{throw o.push(`require.resolve("${e}") from ${s}`),new k(e,[...t,s],o)}},G=async(e,s)=>{let t;try{t=(await M(e)).default??{}}catch(o){throw new T(e,s,o)}try{return(typeof t=="function"?await t()??{}:t)??{}}catch(o){throw new T(e,s,o)}},fe=(e,s)=>{const t={...e,...s};if(e.tasks||s.tasks){const o=new Set([...Object.keys(e.tasks??{}),...Object.keys(s.tasks??{})]),r={};for(const n of o)r[n]=q(e.tasks?.[n],s.tasks?.[n]);t.tasks=r}if((e.scopedTasks||s.scopedTasks)&&(t.scopedTasks=[...e.scopedTasks??[],...s.scopedTasks??[]]),(e.fileGroups||s.fileGroups)&&(t.fileGroups={...e.fileGroups,...s.fileGroups}),(e.taskGroups||s.taskGroups)&&(t.taskGroups={...e.taskGroups,...s.taskGroups}),e.security||s.security){const o=e.security?.policies??{},r=s.security?.policies??{},n={...o,...r};for(const c of Object.keys(o)){const i=o[c],f=r[c];i!==void 0&&f!==void 0&&(n[c]={...i,...f})}t.security={...e.security,...s.security,acceptedRisks:{...e.security?.acceptedRisks,...s.security?.acceptedRisks},policies:n}}return(e.update||s.update)&&(t.update={...e.update,...s.update}),(e.taskRunner||s.taskRunner)&&(t.taskRunner={...e.taskRunner,...s.taskRunner}),delete t.extends,t},R=async(e,s,t,o,r)=>{if(t.has(e))throw new P(e,s);if(!o.has(e)){t.add(e);try{const n=await G(e,s);H(e,s,n),Q(e,s,n);const c=ie(n.extends);for(const i of c){const f=ae(i,e,s);await R(f,[...s,e],t,o,r)}o.set(e,n),r.push(e)}finally{t.delete(e)}}},Te=async(e,s)=>{let t;if(s?.explicitConfigPath){const u=_(s.explicitConfigPath)?s.explicitConfigPath:a(e,s.explicitConfigPath);if(!d(u))throw new Error(`Cannot find config file at ${u}`);t=u}else t=se(e);if(!t)return b({});const o=new Set,r=new Map,n=[];await R(t,[],o,r,n);const c=oe(n),i=ne(e);if(i){const u=re(i,c);if(u)return u}let f={};for(const u of n)f=fe(f,r.get(u));const v=b(f);return i&&ce(i,c,v),v},ue=e=>e.replaceAll(/[^\w.-]+/g,"_"),de=(e,s)=>{const t=a(e,"node_modules"),o=ue(s);if(d(t)){const n=a(t,".cache","vis","task-configs");return m(n),a(n,`${o}.json`)}const r=x("vis",{create:!0,cwd:e});return r?a(r,"task-configs",`${o}.json`):void 0},le=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},pe=(e,s,t)=>{try{m(j(e)),O(e,{config:t,hash:s})}catch{}},be=async(e,s,t)=>{const o=te(s);if(!o)return;const r=V(o),n=de(e,t);if(n){const f=le(n,r);if(f)return f}const c=await G(o,[]);Y(o,[],c);const i=c;return n&&pe(n,r,i),i},we=e=>e,$e=e=>e;export{D as CONFIG_FILES,ve as DEFAULT_MIN_RELEASE_AGE_MINUTES,y as SECURITY_DEFAULTS,A as TASK_CONFIG_FILES,b as applyDefaults,$e as defineConfig,Ee as definePlugin,we as defineTaskConfig,se as findVisConfigFile,te as findVisTaskConfigFile,Te as loadVisConfig,be as loadVisTaskConfig,_e as otelPlugin};

package/dist/packem_chunks/bloom-status.js

@@ -1,2 +1,2 @@
-import{b as f,F as s,J as c}from"../packem_shared/index.server-sXNQYpsl.js";import{p as r}from"./cli-main.js";import{g as u}from"../packem_shared/osv-bloom-BCAX5ARR.js";const a=t=>{if(!t)return"never";const i=Date.parse(t);if(Number.isNaN(i))return t;const e=Date.now()-i;if(e<0)return t;const n=Math.floor(e/6e4);if(n<1)return"just now";if(n<60)return`${n}m ago`;const o=Math.floor(n/60);return o<24?`${o}h ago`:`${Math.floor(o/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,l=async({options:t,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await u(i,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+import{b as f,F as s,J as c}from"../packem_shared/index.server-D8BLnYZO.js";import{p as r}from"./cli-main.js";import{g as u}from"../packem_shared/osv-bloom-t40ra5U5.js";const a=t=>{if(!t)return"never";const i=Date.parse(t);if(Number.isNaN(i))return t;const e=Date.now()-i;if(e<0)return t;const n=Math.floor(e/6e4);if(n<1)return"just now";if(n<60)return`${n}m ago`;const o=Math.floor(n/60);return o<24?`${o}h ago`:`${Math.floor(o/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,l=async({options:t,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await u(i,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
 `);return}if(r.info(`Cache: ${e.cacheDir}`),!e.present){r.warn(`No osv-bloom filter yet. Run ${f("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;r.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),r.info(`Fetch:  ${e.fetchedAtIso??s("—")} (${a(e.fetchedAtIso)})`),r.info(`Filter: ${c(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),r.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),r.info(s(`Digest: ${o.setDigestSha256}`))}else r.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},g=l;export{g as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -1,2 +1,2 @@
-import{F as f}from"../packem_shared/index.server-sXNQYpsl.js";import{p as i}from"./cli-main.js";import{s as d}from"../packem_shared/scan-progress-CkumcBG-.js";import{D as p,s as D}from"../packem_shared/osv-bloom-BCAX5ARR.js";const h=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,$=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,b=async({options:o,visConfig:m,workspaceRoot:n})=>{if(!n)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const a=o.format==="json",c=h(m),l=o.source??c.source??p,r=d([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!a});let e,t;try{r.start("bloom");const s=Date.now();e=await D({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:n}),e.upToDate?r.finish("bloom","ok",`up to date · ${u(Date.now()-s)}`):r.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${$(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(s){t=s instanceof Error?s.message:String(s),r.finish("bloom","error",t)}finally{r.stop()}a?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+import{F as f}from"../packem_shared/index.server-D8BLnYZO.js";import{p as i}from"./cli-main.js";import{s as d}from"../packem_shared/scan-progress-DcYI76zE.js";import{D as p,s as D}from"../packem_shared/osv-bloom-t40ra5U5.js";const h=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,$=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,b=async({options:o,visConfig:m,workspaceRoot:n})=>{if(!n)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const a=o.format==="json",c=h(m),l=o.source??c.source??p,r=d([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!a});let e,t;try{r.start("bloom");const s=Date.now();e=await D({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:n}),e.upToDate?r.finish("bloom","ok",`up to date · ${u(Date.now()-s)}`):r.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${$(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(s){t=s instanceof Error?s.message:String(s),r.finish("bloom","error",t)}finally{r.stop()}a?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
 `):e&&(i.info(f(`Cache: ${e.cacheDir}`)),i.info(f(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},g=b;export{g as advisoriesBloomSyncExecute};