@visulima/vis 6.1.2 → 6.1.4

package/dist/bin.js

@@ -1 +1 @@
-import"./packem_shared/compile-cache-DoMHRsRZ.js";import"./packem_shared/bin-BcLTer1k.js";
+import"./packem_shared/compile-cache-DoMHRsRZ.js";import"./packem_shared/bin-DwACrJUJ.js";

package/dist/binx.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import{a as r,x as i,i as c,d as a,r as d}from"./packem_shared/vis-user-error-3YS7sPYy.js";import{t as n}from"./packem_shared/compile-cache-DoMHRsRZ.js";import{g as o}from"./packem_shared/package-version-Bq6Cne_7.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o()}
+import{a as r,x as i,i as c,d as a,r as d}from"./packem_shared/vis-user-error-BivZDkQD.js";import{t as n}from"./packem_shared/compile-cache-DoMHRsRZ.js";import{g as o}from"./packem_shared/package-version-x7sPg2TM.js";process.argv.includes("--no-color")&&(process.env.NO_COLOR="1",process.env.FORCE_COLOR="0");process.argv.slice(2).some(s=>s==="--version"||s==="-v"||s==="-V")&&(process.stdout.write(`${o()}
 `),process.exit(0));process.argv.splice(2,0,"dlx");n();const e=r("visx",{packageName:"visx",packageVersion:o()}),p=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(i({concise:c,detailed:p,exitOnError:!1}));e.addCommand(a);d(e);

package/dist/config/index.d.ts

@@ -2473,6 +2473,15 @@ interface VisConfig {
      */
     lockfile?: boolean;
   };
+  /**
+   * Workspace package directories to leave out of the project graph:
+   * `vis list`, `run`, `affected` and the graph never see them. The
+   * package manager still installs them, so use this for fixtures that
+   * must be in `pnpm-workspace.yaml` but should not be built or tested.
+   * Uses the same `!`-exclusion semantics as `pnpm-workspace.yaml`.
+   * @example ["packages/fixtures/**"]
+   */
+  projectIgnore?: string[];
   /**
    * Python projects as task projects. Off by default: a directory with a
    * `pyproject.toml` (and `[project]`) gets an inferred build target only when this is set.
@@ -3369,9 +3378,7 @@ declare const findVisTaskConfigFile: (projectDirectory: string) => string | unde
  * Load the vis configuration from a `vis.config.ts` (or `.js`, `.mjs`, `.cjs`, `.mts`, `.cts`) file.
  *
  * Resolves the entire `extends` chain, post-order, and folds it into a
- * single merged config (extends first, root last — child wins). The
- * cache key covers every file in the chain, so editing any extended
- * file invalidates the cache.
+ * single merged config (extends first, root last — child wins).
  *
  * Falls back to secure defaults if no config file is found.
  * @param workspaceRoot The workspace root directory to search for the config file.
@@ -3389,18 +3396,17 @@ declare const loadVisConfig: (workspaceRoot: string, options?: {
  * Load the per-package `vis.task.ts` overlay for a project, if any.
  *
  * Returns `undefined` when no overlay file exists. Otherwise compiles
- * the file via the oxc TS loader and caches the result under
- * `node_modules/.cache/vis/task-configs/<project>.json`, keyed by the
- * file's content hash. Editing one project's overlay does not invalidate
- * the root config cache.
+ * the file via the oxc TS loader on every call. The result is not cached
+ * on disk: a content hash of the overlay file misses edits to the modules it
+ * imports, and a JSON copy cannot hold function values.
  *
  * Errors thrown by the file are wrapped in `VisConfigLoadError` so the
  * source path is reported instead of an opaque workspace.ts failure.
- * @param workspaceRoot Absolute workspace root path (cache scope).
+ * @param _workspaceRoot Absolute workspace root path. Unused, since the overlay is not cached. Kept for a stable public signature.
  * @param projectDirectory Absolute path of the project to probe.
- * @param projectName Project identifier — used to scope the cache file.
+ * @param _projectName Project identifier. Unused, since the overlay is not cached. Kept for a stable public signature.
  */
-declare const loadVisTaskConfig: (workspaceRoot: string, projectDirectory: string, projectName: string) => Promise<VisTaskConfig | undefined>;
+declare const loadVisTaskConfig: (_workspaceRoot: string, projectDirectory: string, _projectName: string) => Promise<VisTaskConfig | undefined>;
 /**
  * Type-safe helper for defining a per-package `vis.task.ts` overlay.
  * Pure identity — exists only so users get type inference and

package/dist/generate/index.d.ts

@@ -1,3 +1,28 @@
+/**
+ * Public surface for `vis generate` template authors.
+ *
+ * Native templates live at `<workspace>/.vis/templates/<name>.{ts,js,mjs}`
+ * and import `createTemplate` from this module.
+ * @example
+ * ```typescript
+ * import { createTemplate } from "@visulima/vis/generate";
+ *
+ * export default createTemplate({
+ *     about: { name: "package", description: "Scaffold a new package" },
+ *     options: {
+ *         name: { type: "string", required: true, prompt: "Package name?" },
+ *     },
+ *     async produce({ options }) {
+ *         return {
+ *             files: {
+ *                 [`packages/${options.name}/package.json`]: JSON.stringify({ name: options.name }, null, 2),
+ *                 [`packages/${options.name}/src/index.ts`]: "export {};\n",
+ *             },
+ *         };
+ *     },
+ * });
+ * ```
+ */
 /**
  * Type definitions for the `vis generate` template runtime.
  *

package/dist/packem_chunks/CONFIG_FILES.js

@@ -1,9 +1,8 @@
-import{createRequire as I}from"node:module";import{L as x,m as K,T as O}from"../packem_shared/target-merge-DVJl-7Qz.js";import{v as _,e as a,m as C}from"../packem_shared/index-BzhrR_iC.js";import{i as M}from"./ts-loader.js";import{otelPlugin as _e}from"../packem_shared/otelPlugin-D8LL2-4L.js";import{definePlugin as Ee}from"../packem_shared/definePlugin-DoUcoYSy.js";import{y as d}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{h as m}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{p as S}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";let N;const F=e=>(N??=I(import.meta.url))(e),l=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,v=e=>{if(typeof l<"u"&&l.versions&&l.versions.node){const[s,t]=l.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return l.getBuiltinModule(e)}return F(e)},{createHash:w}=v("node:crypto"),{readdirSync:$,readFileSync:L}=v("node:fs"),{createRequire:q}=v("node:module");class p extends Error{chain;constructor(s,t,o){super(s,o),this.name=this.constructor.name,this.chain=t}}class P extends p{constructor(s,t){const o=[...t,`${s} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,t)}}class E extends p{filePath;removedKeys;constructor(s,t,o){const r=[`${s} uses removed keys.`,""];for(const n of o){const c=n.location?` (at ${n.location})`:"";r.push(`  • ${n.name}${c} → renamed to \`${n.renamedTo}\``);for(const i of n.children??[])r.push(`        ↳ ${i.name} → renamed to \`${i.renamedTo}\``)}r.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(r.join(`
-`),t),this.filePath=s,this.removedKeys=o}}class T extends p{constructor(s,t,o){const r=o instanceof Error?o.message:String(o),n=t.length>0?`
-Chain: ${t.join(" → ")}`:"";super(`Failed to load ${s}: ${r}${n}`,t,{cause:o})}}const U=e=>e.join(" → ");class k extends p{constructor(s,t,o){const r=t.length>0?t[t.length-1]:"<unknown>",n=o.length>0?`
+import{createRequire as x}from"node:module";import{v as b,e as l,m as A}from"../packem_shared/index-0dnGN3GP.js";import{i as R}from"./ts-loader.js";import{m as V}from"../packem_shared/target-merge-ya19LiWB.js";import{otelPlugin as fe}from"../packem_shared/otelPlugin-D8LL2-4L.js";import{definePlugin as de}from"../packem_shared/definePlugin-DoUcoYSy.js";import{y as T}from"../packem_shared/isAccessibleSync-DYKTrrvc-CBsMZhj-.js";let _;const E=e=>(_??=x(import.meta.url))(e),c=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,g=e=>{if(typeof c<"u"&&c.versions&&c.versions.node){const[s,t]=c.versions.node.split(".").map(Number);if(s>22||s===22&&t>=3||s===20&&t>=16)return c.getBuiltinModule(e)}return E(e)},{readdirSync:j}=g("node:fs"),{createRequire:S}=g("node:module");class f extends Error{chain;constructor(s,t,o){super(s,o),this.name=this.constructor.name,this.chain=t}}class D extends f{constructor(s,t){const o=[...t,`${s} (re-enters)`].join(" → ");super(`Config cycle: ${o}`,t)}}class v extends f{filePath;removedKeys;constructor(s,t,o){const n=[`${s} uses removed keys.`,""];for(const r of o){const i=r.location?` (at ${r.location})`:"";n.push(`  • ${r.name}${i} → renamed to \`${r.renamedTo}\``);for(const a of r.children??[])n.push(`        ↳ ${a.name} → renamed to \`${a.renamedTo}\``)}n.push("","Run `vis migrate self` to auto-rewrite the config (use --dry-run to preview)."),super(n.join(`
+`),t),this.filePath=s,this.removedKeys=o}}class h extends f{constructor(s,t,o){const n=o instanceof Error?o.message:String(o),r=t.length>0?`
+Chain: ${t.join(" → ")}`:"";super(`Failed to load ${s}: ${n}${r}`,t,{cause:o})}}const G=e=>e.join(" → ");class p extends f{constructor(s,t,o){const n=t.length>0?t[t.length-1]:"<unknown>",r=o.length>0?`
 Tried:
   ${o.join(`
-  `)}`:"";super(`Cannot resolve "${s}" extended from ${r}.${n}
-Chain: ${U(t)}`,t)}}class W extends p{filePath;violations;constructor(s,t,o){const r=[`${s} has an invalid value.`,""];for(const n of o)r.push(`  • ${n.location} — expected ${n.expected}, found ${n.found}`);r.push("","See https://visulima.com/docs/packages/vis/configuration for the expected shape."),super(r.join(`
-`),t),this.filePath=s,this.violations=o}}const z=e=>{const s=[];if(Object.hasOwn(e,"targetDefaults")&&s.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(e,"taskRunnerOptions")&&s.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(e,"taskDefaults")){const{taskDefaults:t}=e,o=[];if(Array.isArray(t))for(const[r,n]of t.entries())n&&typeof n=="object"&&(Object.hasOwn(n,"scope")&&o.push({location:`taskDefaults[${r}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(n,"targets")&&o.push({location:`taskDefaults[${r}].targets`,name:"targets",renamedTo:"tasks"}));s.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(e.scopedTasks))for(const[t,o]of e.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&s.push({location:`scopedTasks[${t}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&s.push({location:`scopedTasks[${t}].targets`,name:"targets",renamedTo:"tasks"}));return s},B=e=>Object.hasOwn(e,"targets")&&!Object.hasOwn(e,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],H=(e,s,t)=>{if(!t||typeof t!="object")return;const o=z(t);if(o.length>0)throw new E(e,s,o)},Y=(e,s,t)=>{if(!t||typeof t!="object")return;const o=B(t);if(o.length>0)throw new E(e,s,o)},h=e=>{if(e===null)return"null";if(Array.isArray(e))return"an array";if(typeof e=="object"){const s=Object.keys(e);return s.length>0?`an object with { ${s.join(", ")} }`:"an empty object"}return typeof e},g=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),J=e=>{const s=[];if(!Object.hasOwn(e,"scopedTasks")||e.scopedTasks===void 0)return s;const{scopedTasks:t}=e;if(!Array.isArray(t))return s.push({expected:"an array of `{ match?, tasks }` blocks",found:h(t),location:"scopedTasks"}),s;for(const[o,r]of t.entries()){const n=`scopedTasks[${o}]`;if(!g(r)){s.push({expected:"a `{ match?, tasks }` block",found:h(r),location:n});continue}g(r.tasks)||s.push({expected:"`tasks` to be an object keyed by target name",found:r.tasks===void 0?`a block with { ${Object.keys(r).join(", ")} }`:h(r.tasks),location:`${n}.tasks`}),r.match!==void 0&&!g(r.match)&&s.push({expected:"`match` to be an object of project constraints",found:h(r.match),location:`${n}.match`})}return s},Q=(e,s,t)=>{if(!t||typeof t!="object")return;const o=J(t);if(o.length>0)throw new W(e,s,o)},D=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],X=new Set(D),A=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],Z=new Set(A),je=2880,y={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},ee=e=>{if(!e)return{...y};const s=y.policies??{},t=e.policies??{},o={...s,...t};for(const r of Object.keys(s)){const n=s[r],c=t[r];n!==void 0&&c!==void 0&&(o[r]={...n,...c})}return{...y,...e,policies:o}},b=e=>({...e,security:ee(e.security),update:{security:!0,target:"minor",...e.update}}),se=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>X.has(o)));for(const o of D)if(t.has(o))return a(e,o)},te=e=>{let s;try{s=$(e)}catch{return}const t=new Set(s.filter(o=>Z.has(o)));for(const o of A)if(t.has(o))return a(e,o)},V=e=>w("sha256").update(L(e)).digest("hex"),oe=e=>{const s=w("sha256"),t=[...e].sort();for(const o of t)s.update(o),s.update(":"),s.update(V(o)),s.update(`
-`);return s.digest("hex")},ne=e=>{const s=a(e,"node_modules");if(d(s)){const o=a(s,".cache","vis");return m(o),a(o,"vis-config-cache.json")}const t=x("vis",{create:!0,cwd:e});return t?a(t,"vis-config-cache.json"):void 0},re=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},ce=(e,s,t)=>{try{m(C(e)),O(e,{config:t,hash:s})}catch{}},ie=e=>e===void 0?[]:Array.isArray(e)?e:[e],ae=(e,s,t)=>{if(_(e))throw new k(e,[...t,s],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(e.startsWith("./")||e.startsWith("../")){const r=C(s),n=a(r,e);if(o.push(n),d(n))return n;throw new k(e,[...t,s],o)}try{return q(s).resolve(e)}catch{throw o.push(`require.resolve("${e}") from ${s}`),new k(e,[...t,s],o)}},G=async(e,s)=>{let t;try{t=(await M(e)).default??{}}catch(o){throw new T(e,s,o)}try{return(typeof t=="function"?await t()??{}:t)??{}}catch(o){throw new T(e,s,o)}},fe=(e,s)=>{const t={...e,...s};if(e.tasks||s.tasks){const o=new Set([...Object.keys(e.tasks??{}),...Object.keys(s.tasks??{})]),r={};for(const n of o)r[n]=K(e.tasks?.[n],s.tasks?.[n]);t.tasks=r}if((e.scopedTasks||s.scopedTasks)&&(t.scopedTasks=[...e.scopedTasks??[],...s.scopedTasks??[]]),(e.fileGroups||s.fileGroups)&&(t.fileGroups={...e.fileGroups,...s.fileGroups}),(e.taskGroups||s.taskGroups)&&(t.taskGroups={...e.taskGroups,...s.taskGroups}),e.security||s.security){const o=e.security?.policies??{},r=s.security?.policies??{},n={...o,...r};for(const c of Object.keys(o)){const i=o[c],f=r[c];i!==void 0&&f!==void 0&&(n[c]={...i,...f})}t.security={...e.security,...s.security,acceptedRisks:{...e.security?.acceptedRisks,...s.security?.acceptedRisks},policies:n}}return(e.update||s.update)&&(t.update={...e.update,...s.update}),(e.taskRunner||s.taskRunner)&&(t.taskRunner={...e.taskRunner,...s.taskRunner}),delete t.extends,t},R=async(e,s,t,o,r)=>{if(t.has(e))throw new P(e,s);if(!o.has(e)){t.add(e);try{const n=await G(e,s);H(e,s,n),Q(e,s,n);const c=ie(n.extends);for(const i of c){const f=ae(i,e,s);await R(f,[...s,e],t,o,r)}o.set(e,n),r.push(e)}finally{t.delete(e)}}},Te=async(e,s)=>{let t;if(s?.explicitConfigPath){const u=_(s.explicitConfigPath)?s.explicitConfigPath:a(e,s.explicitConfigPath);if(!d(u))throw new Error(`Cannot find config file at ${u}`);t=u}else t=se(e);if(!t)return b({});const o=new Set,r=new Map,n=[];await R(t,[],o,r,n);const c=oe(n),i=ne(e);if(i){const u=re(i,c);if(u)return u}let f={};for(const u of n)f=fe(f,r.get(u));const j=b(f);return i&&ce(i,c,j),j},ue=e=>e.replaceAll(/[^\w.-]+/g,"_"),de=(e,s)=>{const t=a(e,"node_modules"),o=ue(s);if(d(t)){const n=a(t,".cache","vis","task-configs");return m(n),a(n,`${o}.json`)}const r=x("vis",{create:!0,cwd:e});return r?a(r,"task-configs",`${o}.json`):void 0},le=(e,s)=>{if(d(e))try{const t=S(e);if(t.hash===s)return t.config}catch{}},pe=(e,s,t)=>{try{m(C(e)),O(e,{config:t,hash:s})}catch{}},be=async(e,s,t)=>{const o=te(s);if(!o)return;const r=V(o),n=de(e,t);if(n){const f=le(n,r);if(f)return f}const c=await G(o,[]);Y(o,[],c);const i=c;return n&&pe(n,r,i),i},we=e=>e,$e=e=>e;export{D as CONFIG_FILES,je as DEFAULT_MIN_RELEASE_AGE_MINUTES,y as SECURITY_DEFAULTS,A as TASK_CONFIG_FILES,b as applyDefaults,$e as defineConfig,Ee as definePlugin,we as defineTaskConfig,se as findVisConfigFile,te as findVisTaskConfigFile,Te as loadVisConfig,be as loadVisTaskConfig,_e as otelPlugin};
+  `)}`:"";super(`Cannot resolve "${s}" extended from ${n}.${r}
+Chain: ${G(t)}`,t)}}class I extends f{filePath;violations;constructor(s,t,o){const n=[`${s} has an invalid value.`,""];for(const r of o)n.push(`  • ${r.location} — expected ${r.expected}, found ${r.found}`);n.push("","See https://visulima.com/docs/packages/vis/configuration for the expected shape."),super(n.join(`
+`),t),this.filePath=s,this.violations=o}}const N=e=>{const s=[];if(Object.hasOwn(e,"targetDefaults")&&s.push({name:"targetDefaults",renamedTo:"tasks"}),Object.hasOwn(e,"taskRunnerOptions")&&s.push({name:"taskRunnerOptions",renamedTo:"taskRunner"}),Object.hasOwn(e,"taskDefaults")){const{taskDefaults:t}=e,o=[];if(Array.isArray(t))for(const[n,r]of t.entries())r&&typeof r=="object"&&(Object.hasOwn(r,"scope")&&o.push({location:`taskDefaults[${n}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(r,"targets")&&o.push({location:`taskDefaults[${n}].targets`,name:"targets",renamedTo:"tasks"}));s.push({children:o.length>0?o:void 0,name:"taskDefaults",renamedTo:"scopedTasks"})}else if(Array.isArray(e.scopedTasks))for(const[t,o]of e.scopedTasks.entries())o&&typeof o=="object"&&(Object.hasOwn(o,"scope")&&s.push({location:`scopedTasks[${t}].scope`,name:"scope",renamedTo:"match"}),Object.hasOwn(o,"targets")&&s.push({location:`scopedTasks[${t}].targets`,name:"targets",renamedTo:"tasks"}));return s},F=e=>Object.hasOwn(e,"targets")&&!Object.hasOwn(e,"tasks")?[{name:"targets",renamedTo:"tasks"}]:[],L=(e,s,t)=>{if(!t||typeof t!="object")return;const o=N(t);if(o.length>0)throw new v(e,s,o)},q=(e,s,t)=>{if(!t||typeof t!="object")return;const o=F(t);if(o.length>0)throw new v(e,s,o)},d=e=>{if(e===null)return"null";if(Array.isArray(e))return"an array";if(typeof e=="object"){const s=Object.keys(e);return s.length>0?`an object with { ${s.join(", ")} }`:"an empty object"}return typeof e},k=e=>typeof e=="object"&&e!==null&&!Array.isArray(e),K=e=>{const s=[];if(!Object.hasOwn(e,"scopedTasks")||e.scopedTasks===void 0)return s;const{scopedTasks:t}=e;if(!Array.isArray(t))return s.push({expected:"an array of `{ match?, tasks }` blocks",found:d(t),location:"scopedTasks"}),s;for(const[o,n]of t.entries()){const r=`scopedTasks[${o}]`;if(!k(n)){s.push({expected:"a `{ match?, tasks }` block",found:d(n),location:r});continue}k(n.tasks)||s.push({expected:"`tasks` to be an object keyed by target name",found:n.tasks===void 0?`a block with { ${Object.keys(n).join(", ")} }`:d(n.tasks),location:`${r}.tasks`}),n.match!==void 0&&!k(n.match)&&s.push({expected:"`match` to be an object of project constraints",found:d(n.match),location:`${r}.match`})}return s},P=(e,s,t)=>{if(!t||typeof t!="object")return;const o=K(t);if(o.length>0)throw new I(e,s,o)},w=["vis.config.ts","vis.config.mts","vis.config.cts","vis.config.js","vis.config.mjs","vis.config.cjs"],M=new Set(w),C=["vis.task.ts","vis.task.mts","vis.task.cts","vis.task.js","vis.task.mjs","vis.task.cjs"],U=new Set(C),te=2880,m={blockExoticSubdeps:!0,policies:{installScripts:{strict:!0},publisherChange:{ignoreAfter:43200,mode:"no-downgrade"}}},W=e=>{if(!e)return{...m};const s=m.policies??{},t=e.policies??{},o={...s,...t};for(const n of Object.keys(s)){const r=s[n],i=t[n];r!==void 0&&i!==void 0&&(o[n]={...r,...i})}return{...m,...e,policies:o}},y=e=>({...e,security:W(e.security),update:{security:!0,target:"minor",...e.update}}),B=e=>{let s;try{s=j(e)}catch{return}const t=new Set(s.filter(o=>M.has(o)));for(const o of w)if(t.has(o))return l(e,o)},z=e=>{let s;try{s=j(e)}catch{return}const t=new Set(s.filter(o=>U.has(o)));for(const o of C)if(t.has(o))return l(e,o)},Y=e=>e===void 0?[]:Array.isArray(e)?e:[e],H=(e,s,t)=>{if(b(e))throw new p(e,[...t,s],["Absolute paths in `extends` are not supported. Use a relative path or an npm package name."]);const o=[];if(e.startsWith("./")||e.startsWith("../")){const n=A(s),r=l(n,e);if(o.push(r),T(r))return r;throw new p(e,[...t,s],o)}try{return S(s).resolve(e)}catch{throw o.push(`require.resolve("${e}") from ${s}`),new p(e,[...t,s],o)}},$=async(e,s)=>{let t;try{t=(await R(e)).default??{}}catch(o){throw new h(e,s,o)}try{return(typeof t=="function"?await t()??{}:t)??{}}catch(o){throw new h(e,s,o)}},J=(e,s)=>{const t={...e,...s};if(e.tasks||s.tasks){const o=new Set([...Object.keys(e.tasks??{}),...Object.keys(s.tasks??{})]),n={};for(const r of o)n[r]=V(e.tasks?.[r],s.tasks?.[r]);t.tasks=n}if((e.scopedTasks||s.scopedTasks)&&(t.scopedTasks=[...e.scopedTasks??[],...s.scopedTasks??[]]),(e.fileGroups||s.fileGroups)&&(t.fileGroups={...e.fileGroups,...s.fileGroups}),(e.taskGroups||s.taskGroups)&&(t.taskGroups={...e.taskGroups,...s.taskGroups}),e.security||s.security){const o=e.security?.policies??{},n=s.security?.policies??{},r={...o,...n};for(const i of Object.keys(o)){const a=o[i],u=n[i];a!==void 0&&u!==void 0&&(r[i]={...a,...u})}t.security={...e.security,...s.security,acceptedRisks:{...e.security?.acceptedRisks,...s.security?.acceptedRisks},policies:r}}return(e.update||s.update)&&(t.update={...e.update,...s.update}),(e.taskRunner||s.taskRunner)&&(t.taskRunner={...e.taskRunner,...s.taskRunner}),delete t.extends,t},O=async(e,s,t,o,n)=>{if(t.has(e))throw new D(e,s);if(!o.has(e)){t.add(e);try{const r=await $(e,s);L(e,s,r),P(e,s,r);const i=Y(r.extends);for(const a of i){const u=H(a,e,s);await O(u,[...s,e],t,o,n)}o.set(e,r),n.push(e)}finally{t.delete(e)}}},oe=async(e,s)=>{let t;if(s?.explicitConfigPath){const a=b(s.explicitConfigPath)?s.explicitConfigPath:l(e,s.explicitConfigPath);if(!T(a))throw new Error(`Cannot find config file at ${a}`);t=a}else t=B(e);if(!t)return y({});const o=new Set,n=new Map,r=[];await O(t,[],o,n,r);let i={};for(const a of r)i=J(i,n.get(a));return y(i)},ne=async(e,s,t)=>{const o=z(s);if(!o)return;const n=await $(o,[]);return q(o,[],n),n},re=e=>e,ie=e=>e;export{w as CONFIG_FILES,te as DEFAULT_MIN_RELEASE_AGE_MINUTES,m as SECURITY_DEFAULTS,C as TASK_CONFIG_FILES,y as applyDefaults,ie as defineConfig,de as definePlugin,re as defineTaskConfig,B as findVisConfigFile,z as findVisTaskConfigFile,oe as loadVisConfig,ne as loadVisTaskConfig,fe as otelPlugin};

package/dist/packem_chunks/bloom-status.js

@@ -1,2 +1,2 @@
-import{b as f,F as s,J as c}from"../packem_shared/index.server-Ca_EEVfw.js";import{p as r}from"./cli-main.js";import{g as u}from"../packem_shared/osv-bloom-BCAX5ARR.js";const a=t=>{if(!t)return"never";const i=Date.parse(t);if(Number.isNaN(i))return t;const e=Date.now()-i;if(e<0)return t;const n=Math.floor(e/6e4);if(n<1)return"just now";if(n<60)return`${n}m ago`;const o=Math.floor(n/60);return o<24?`${o}h ago`:`${Math.floor(o/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,l=async({options:t,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await u(i,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
+import{b as f,F as s,J as c}from"../packem_shared/index.server-Ca_EEVfw.js";import{p as r}from"./cli-main.js";import{g as u}from"../packem_shared/osv-bloom-DU6avR2k.js";const a=t=>{if(!t)return"never";const i=Date.parse(t);if(Number.isNaN(i))return t;const e=Date.now()-i;if(e<0)return t;const n=Math.floor(e/6e4);if(n<1)return"just now";if(n<60)return`${n}m ago`;const o=Math.floor(n/60);return o<24?`${o}h ago`:`${Math.floor(o/24)}d ago`},m=t=>t<1024?`${t} B`:t<1024*1024?`${(t/1024).toFixed(1)} KB`:`${(t/(1024*1024)).toFixed(1)} MB`,l=async({options:t,workspaceRoot:i})=>{if(!i)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const e=await u(i,t.cacheDir);if(t.format==="json"){process.stdout.write(`${JSON.stringify(e,void 0,2)}
 `);return}if(r.info(`Cache: ${e.cacheDir}`),!e.present){r.warn(`No osv-bloom filter yet. Run ${f("vis advisories bloom sync")} to populate.`);return}if(e.manifest){const{manifest:o}=e;r.info(`Built:  ${o.builtAtRfc3339} (${a(o.builtAtRfc3339)})`),r.info(`Fetch:  ${e.fetchedAtIso??s("—")} (${a(e.fetchedAtIso)})`),r.info(`Filter: ${c(m(o.bloomByteLen))}   m=${o.bloomMBits.toLocaleString()} bits   k=${String(o.bloomKHashes)}`),r.info(`Set:    ${o.entryCount.toLocaleString()} entries from ${o.advisoryCount.toLocaleString()} advisories (target FPR ${o.targetFpr})`),r.info(s(`Digest: ${o.setDigestSha256}`))}else r.warn("filter.bin present but manifest.json missing — `vis advisories bloom sync` will rewrite the cache.")},g=l;export{g as advisoriesBloomStatusExecute};

package/dist/packem_chunks/bloom-sync.js

@@ -1,2 +1,2 @@
-import{F as f}from"../packem_shared/index.server-Ca_EEVfw.js";import{p as i}from"./cli-main.js";import{s as d}from"../packem_shared/scan-progress-DymX71_5.js";import{D as p,s as D}from"../packem_shared/osv-bloom-BCAX5ARR.js";const h=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,$=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,b=async({options:o,visConfig:m,workspaceRoot:n})=>{if(!n)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const a=o.format==="json",c=h(m),l=o.source??c.source??p,r=d([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!a});let e,t;try{r.start("bloom");const s=Date.now();e=await D({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:n}),e.upToDate?r.finish("bloom","ok",`up to date · ${u(Date.now()-s)}`):r.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${$(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(s){t=s instanceof Error?s.message:String(s),r.finish("bloom","error",t)}finally{r.stop()}a?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
+import{F as f}from"../packem_shared/index.server-Ca_EEVfw.js";import{p as i}from"./cli-main.js";import{s as d}from"../packem_shared/scan-progress-CY3XIDOY.js";import{D as p,s as D}from"../packem_shared/osv-bloom-DU6avR2k.js";const h=o=>o?.security?.audit?.advisories?.bloom??{},u=o=>o>=1e3?`${(o/1e3).toFixed(1)}s`:`${Math.round(o)}ms`,$=o=>o<1024?`${o} B`:o<1024*1024?`${(o/1024).toFixed(1)} KB`:`${(o/(1024*1024)).toFixed(1)} MB`,b=async({options:o,visConfig:m,workspaceRoot:n})=>{if(!n)throw new Error("Could not determine workspace root. Run this command inside a workspace.");const a=o.format==="json",c=h(m),l=o.source??c.source??p,r=d([{id:"bloom",label:"Sync osv-bloom prefilter"}],{live:!a});let e,t;try{r.start("bloom");const s=Date.now();e=await D({allowedHosts:c.allowedHosts,cacheDir:o.cacheDir,force:!!o.force,source:l,workspaceRoot:n}),e.upToDate?r.finish("bloom","ok",`up to date · ${u(Date.now()-s)}`):r.finish("bloom","ok",`${e.manifest.entryCount.toLocaleString()} entries · ${$(e.bytesOnDisk)} · ${u(e.durationMs)}`)}catch(s){t=s instanceof Error?s.message:String(s),r.finish("bloom","error",t)}finally{r.stop()}a?process.stdout.write(`${JSON.stringify({bytesOnDisk:e?.bytesOnDisk??0,cacheDir:e?.cacheDir??null,durationMs:e?.durationMs??0,error:t??null,manifest:e?.manifest??null,source:l,upToDate:e?.upToDate??!1},void 0,2)}
 `):e&&(i.info(f(`Cache: ${e.cacheDir}`)),i.info(f(`Built: ${e.manifest.builtAtRfc3339}`)),t||i.success(e.upToDate?"osv-bloom prefilter up to date.":"osv-bloom prefilter synced.")),t&&(process.exitCode=1)},g=b;export{g as advisoriesBloomSyncExecute};

package/dist/packem_chunks/catalog2.js

@@ -1,11 +1,11 @@
-import{createRequire as je}from"node:module";import{z as E,e as g,$ as _e,m as V}from"../packem_shared/index-BzhrR_iC.js";import{L as De,q as oe,R as C,O as W,X as Re,e as X,p as P,g as ce,D as I,f as Oe,E as ie,F as J,h as le,i as R}from"../packem_shared/registry-Dg9XI6RT.js";import{L as pe,T as H}from"../packem_shared/target-merge-DVJl-7Qz.js";import{y as h}from"../packem_shared/isAccessibleSync-DYKTrrvc-C-_5cgwu.js";import{U as A,h as O}from"../packem_shared/writeFileSync-DJoHk3Ks-BPRoepNw.js";import{f as Le}from"../packem_shared/removeSync-g1D5kONg-LbjATA8v.js";import{p as b}from"../packem_shared/readJsonSync-CbryXYxN-EWl7_7KX.js";import{g as ue,T as fe,l as Wt}from"../packem_shared/npmrc-CHsOyMvA.js";import{p as ln}from"../packem_shared/npmrc-CHsOyMvA.js";import{O as ge}from"../packem_shared/renderToString-DR0zDUjh-DXppT6AM.js";import{q as Me}from"../packem_shared/table-oA7p7-yP.js";import{D as Ue,f as We}from"../packem_shared/env-BSXG3QKH.js";import{f as Ie}from"../packem_shared/osv-Do9PMOea.js";import{s as Be}from"../packem_shared/index-B4AjSxHU.js";import{a as Z}from"../packem_shared/advisories-DO-P0V1_.js";let Ce;const Ae=t=>(Ce??=je(import.meta.url))(t),j=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,xe=t=>{if(typeof j<"u"&&j.versions&&j.versions.node){const[e,n]=j.versions.node.split(".").map(Number);if(e>22||e===22&&n>=3||e===20&&n>=16)return j.getBuiltinModule(t)}return Ae(t)},{createInterface:Fe}=xe("node:readline"),G=["dependencies","devDependencies","optionalDependencies"],Ge=new Set([...G,"overrides","peerDependencies","pnpm.overrides","resolutions"]),x=t=>{const e=t.lastIndexOf(":");if(e===-1)return;const n=t.slice(e+1);if(Ge.has(n))return{depType:n,relativePath:t.slice(0,e)}},L=t=>{const e=pe("vis",{create:!0,cwd:t});if(!e)throw new Error("Cannot resolve cache directory. Ensure node_modules exists in your workspace. Run your package manager's install command first.");return g(e,"backup")},Y=(t,e)=>e==="bun"?g(t,"package.json"):g(t,"pnpm-workspace.yaml"),K=(t,e)=>{const n=L(t),s=new Set;for(const a of e){const r=x(a.catalogName);r&&s.add(r.relativePath==="."?"package.json":g(r.relativePath,"package.json"))}if(s.size!==0){O(n);for(const a of s){const r=g(t,a);if(h(r)){const o=g(n,a),c=V(o);O(c),A(o,E(r))}}return n}},q=(t,e)=>{const n=Y(t,e),s=L(t);return g(s,`${_e(n)}.bak`)},Ve=(t,e,n)=>{if((e==="npm"||e==="yarn")&&n)return K(t,n);let s;const a=Y(t,e);if(h(a)&&(s=q(t,e),O(V(s)),A(s,E(a))),n){const r=n.filter(o=>x(o.catalogName));r.length>0&&K(t,r)}return s},Xe=t=>{const e=L(t);if(!h(e))return!1;for(const n of De(e,{includeDirs:!1})){const s=n.path.slice(e.length+1),a=g(t,s);A(a,E(n.path))}return Le(e),!0},Jt=(t,e)=>{if(e==="npm"||e==="yarn")return Xe(t);const n=Y(t,e),s=q(t,e);if(!h(s))return!1;const a=E(s);return A(n,a),!0},Ht=(t,e)=>{if(e==="npm"||e==="yarn")try{const n=L(t);return h(n)}catch{return!1}try{return h(q(t,e))}catch{return!1}},de=t=>{if(h(t))try{return b(t)}catch{return}},Je=t=>{const e=de(g(t,"package.json"));return!!(e?.workspaces?.catalog||e?.workspaces?.catalogs)},He=t=>{const e=new Map;if(t.workspaces?.catalog&&typeof t.workspaces.catalog=="object"&&e.set("default",new Map(Object.entries(t.workspaces.catalog))),t.workspaces?.catalogs&&typeof t.workspaces.catalogs=="object")for(const[n,s]of Object.entries(t.workspaces.catalogs))s&&typeof s=="object"&&e.set(n,new Map(Object.entries(s)));return e},Ye=t=>{const e=de(g(t,"package.json"));return e?He(e):new Map},qe=(t,e,n)=>{const s=g(t,"package.json"),a=b(s);for(const r of e)if(r.catalogName==="default")a.workspaces?.catalog&&(a.workspaces.catalog[r.packageName]=r.newRange);else{const o=a.workspaces?.catalogs?.[r.catalogName];o&&(o[r.packageName]=r.newRange)}H(s,a,{indent:oe(s,{useEditorconfig:n}),overwrite:!0})},ze=/\*+/g,Qe=/[.+^${}()|[\]\\]/g,ee=new Map,N=(t,e)=>{let n=ee.get(e);if(!n){const a=e.replaceAll(ze,"*").replaceAll(Qe,String.raw`\$&`);n=new RegExp(`^${a.replaceAll("*",".*").replaceAll("?",".")}$`),ee.set(e,n)}return n.test(t)},me=(t,e,n)=>n.some(s=>N(t,s))?!1:e.length>0?e.some(s=>N(t,s)):!0,te=new Map,he=(t,e,n)=>{if(!n)return e;const s=n[t];if(s!==void 0)return s;for(const[a,r]of Object.entries(n))if(a!==t){if(a.startsWith("/")&&a.endsWith("/")){let o=te.get(a);if(o||(o=new RegExp(a.slice(1,-1)),te.set(a,o)),o.test(t))return r}else if(N(t,a))return r}return e},Ze=/^(?:'([^']+)'|"([^"]+)"|([^:\s]+)):\s*(?:'([^']+)'|"([^"]+)"|(\S+))/,Ke=/^catalog:/m,et=/^catalogs:/m,ke=/^['"]|['"]$/g,we=t=>{const e=Ze.exec(t);if(!e)return;const n=e[1]??e[2]??e[3],s=e[4]??e[5]??e[6];if(!(!n||!s))return[n,s]},ye=(t,e,n,s)=>{t.has(e)||t.set(e,new Map);const a=t.get(e);a&&a.set(n,s)},tt=(t,e,n)=>{if(n<2)return;const s=we(e);s&&ye(t,"default",s[0],s[1])},nt=(t,e,n,s)=>{if(n===2&&e.endsWith(":"))return e.slice(0,-1).trim().replaceAll(ke,"");if(n>=4&&s){const a=we(e);a&&ye(t,s,a[0],a[1])}return s},$e=t=>t==="catalog:"||t.startsWith("catalog:")?"catalog":t==="catalogs:"||t.startsWith("catalogs:")?"catalogs":"none",st=t=>{const e=new Map;let n="none",s="";for(const a of t.split(`
-`)){const r=a.trimStart(),o=a.length-r.length;if(o===0&&r.length>0&&!r.startsWith("#")){n=$e(r),n==="catalogs"&&(s="");continue}r.length===0||r.startsWith("#")||(n==="catalog"&&tt(e,r,o),n==="catalogs"&&(s=nt(e,r,o,s)))}return e},at=t=>{const e=g(t,"pnpm-workspace.yaml");if(!h(e))return!1;const n=E(e);return Ke.test(n)||et.test(n)},rt=t=>{const e=g(t,"pnpm-workspace.yaml");if(!h(e))return new Map;const n=E(e);return st(n)},ne=/[.*+?^${}()|[\]\\]/g,ot=(t,e)=>{const n=t.replaceAll(ne,String.raw`\$&`),s=e.replaceAll(ne,String.raw`\$&`);return new RegExp(String.raw`^(?:'${n}'|"${n}"|${n}):\s*['"]?${s}['"]?`)},ct=(t,e,n)=>ot(e,n).test(t),it=t=>{const e=new Map;for(const n of t){e.has(n.catalogName)||e.set(n.catalogName,new Map);const s=e.get(n.catalogName);s&&s.set(n.packageName,{newRange:n.newRange,oldRange:n.currentRange})}return e},se=(t,e,n)=>{if(!n)return t;for(const[s,{newRange:a,oldRange:r}]of n)if(ct(e,s,r))return t.replace(r,a);return t},lt=(t,e,n,s)=>{const a=t.trimStart(),r=t.length-a.length;return a.length===0||a.startsWith("#")?t:e==="catalog"&&r>=2?se(t,a,s.get("default")):e==="catalogs"&&r>=4&&n?se(t,a,s.get(n)):t},pt=(t,e)=>{const n=g(t,"pnpm-workspace.yaml"),a=E(n).split(`
-`),r=it(e);let o="none",c="";const i=[];for(const l of a){const p=l.trimStart(),u=l.length-p.length;u===0&&p.length>0&&!p.startsWith("#")&&(o=$e(p),o==="catalogs"&&(c="")),o==="catalogs"&&u===2&&p.endsWith(":")&&(c=p.slice(0,-1).trim().replaceAll(ke,"")),i.push(lt(l,o,c,r))}A(n,i.join(`
-`))},ut=/github\.com[/:]([\w.-]+)\/([\w.-]+?)(?:\.git|\/|$)/,Yt=async(t,e=1e4,n)=>{const s=[],a=new AbortController,r=setTimeout(()=>{a.abort()},e),o=async p=>{const u=`https://www.npmjs.com/package/${p.packageName}`;try{const f=n?ue(p.packageName,n):{url:"https://registry.npmjs.org"},w=f.url.replace(fe,""),y={Accept:"application/json"};f.token&&(y.Authorization=`Bearer ${f.token}`);const m=await fetch(`${w}/${p.packageName}/latest`,{headers:y,signal:a.signal});if(!m.ok)return{npmUrl:u,packageName:p.packageName};const $=(await m.json()).repository?.url;if(!$)return{npmUrl:u,packageName:p.packageName};const d=ut.exec($);if(!d)return{npmUrl:u,packageName:p.packageName,repoUrl:$};const v=d[1],T=d[2],k=`https://github.com/${v}/${T}/releases/tag/v${p.targetVersion}`;return{npmUrl:u,packageName:p.packageName,releaseUrl:k,repoUrl:`https://github.com/${v}/${T}`}}catch{return{npmUrl:u,packageName:p.packageName}}},c=Math.min(8,t.length);let i=0;const l=async()=>{for(;i<t.length;){const p=i;i+=1,s[p]=await o(t[p])}};try{await Promise.all(Array.from({length:c},()=>l()))}finally{clearTimeout(r)}return s},qt=t=>JSON.stringify(t,void 0,2),zt=t=>t.map(e=>`${e.packageName}  ${e.currentRange} → ${e.newRange}`).join(`
-`),ft=t=>{const e=new Map;for(const n of t){e.has(n.catalogName)||e.set(n.catalogName,[]);const s=e.get(n.catalogName);s&&s.push(n)}return e},gt=t=>{const e=x(t);return e?`${e.relativePath==="."?"root":e.relativePath} (${e.depType})`:`Catalog: ${t}`},Qt=(t,e)=>{const n=ft(t),s=process.stdout.columns||80,a=t.some(r=>r.socketReport);for(const[r,o]of n){const c=o.flatMap(p=>{const u=p.vulnerabilities&&p.vulnerabilities.length>0,f=p.socketReport&&p.socketReport.alerts.length>0,y=`${u||f?"[SEC] ":""}${p.packageName}`,m=p.socketReport?`${String(Math.round(p.socketReport.score.overall*100))}%`:"",S={current:p.currentRange,package:y,target:p.newRange,type:p.updateType};a&&(S.score=m);const $=[S];if(p.vulnerabilities)for(const d of p.vulnerabilities){const v={current:d.summary,package:`  ${d.severity} ${d.id}`,target:"",type:""};a&&(v.score=""),$.push(v)}if(p.socketReport)for(const d of p.socketReport.alerts){const v={current:d.category,package:`  [${d.severity.toUpperCase()}] ${d.type}`,target:"",type:""};a&&(v.score=""),$.push(v)}return $}),i=gt(r),l=ge(C.createElement(Me,{data:c}),{columns:s});e.info(`${i}
+import{createRequire as je}from"node:module";import{z as N,e as g,$ as _e,m as V}from"../packem_shared/index-0dnGN3GP.js";import{L as Re,q as X,u as oe,R as C,O as W,X as De,e as J,p as P,g as ce,F as I,f as Oe,G as ie,J as H,h as le,i as D}from"../packem_shared/registry-CndByNx9.js";import{L as ue}from"../packem_shared/index-CIdjkZgt.js";import{y as h}from"../packem_shared/isAccessibleSync-DYKTrrvc-CBsMZhj-.js";import{U as A,h as O,e as Le,i as Me}from"../packem_shared/env-BymuoTL8.js";import{f as Ue}from"../packem_shared/removeSync-g1D5kONg-jOsRSIIv.js";import{p as b}from"../packem_shared/package-version-x7sPg2TM.js";import{g as pe,T as fe,l as Wt}from"../packem_shared/npmrc-CIvOb61L.js";import{p as cn}from"../packem_shared/npmrc-CIvOb61L.js";import{O as ge}from"../packem_shared/renderToString-DR0zDUjh-DeiCwydO.js";import{q as We}from"../packem_shared/table-bu4cV-it.js";import{f as Ie}from"../packem_shared/osv-4kFhXIoW.js";import{s as Be}from"../packem_shared/index-B4AjSxHU.js";import{a as Z}from"../packem_shared/advisories-DHGJ6XhP.js";let Ce;const Ae=t=>(Ce??=je(import.meta.url))(t),j=typeof globalThis<"u"&&typeof globalThis.process<"u"?globalThis.process:process,xe=t=>{if(typeof j<"u"&&j.versions&&j.versions.node){const[e,n]=j.versions.node.split(".").map(Number);if(e>22||e===22&&n>=3||e===20&&n>=16)return j.getBuiltinModule(t)}return Ae(t)},{createInterface:Fe}=xe("node:readline"),G=["dependencies","devDependencies","optionalDependencies"],Ge=new Set([...G,"overrides","peerDependencies","pnpm.overrides","resolutions"]),x=t=>{const e=t.lastIndexOf(":");if(e===-1)return;const n=t.slice(e+1);if(Ge.has(n))return{depType:n,relativePath:t.slice(0,e)}},L=t=>{const e=ue("vis",{create:!0,cwd:t});if(!e)throw new Error("Cannot resolve cache directory. Ensure node_modules exists in your workspace. Run your package manager's install command first.");return g(e,"backup")},Y=(t,e)=>e==="bun"?g(t,"package.json"):g(t,"pnpm-workspace.yaml"),K=(t,e)=>{const n=L(t),s=new Set;for(const a of e){const r=x(a.catalogName);r&&s.add(r.relativePath==="."?"package.json":g(r.relativePath,"package.json"))}if(s.size!==0){O(n);for(const a of s){const r=g(t,a);if(h(r)){const o=g(n,a),c=V(o);O(c),A(o,N(r))}}return n}},q=(t,e)=>{const n=Y(t,e),s=L(t);return g(s,`${_e(n)}.bak`)},Ve=(t,e,n)=>{if((e==="npm"||e==="yarn")&&n)return K(t,n);let s;const a=Y(t,e);if(h(a)&&(s=q(t,e),O(V(s)),A(s,N(a))),n){const r=n.filter(o=>x(o.catalogName));r.length>0&&K(t,r)}return s},Xe=t=>{const e=L(t);if(!h(e))return!1;for(const n of Re(e,{includeDirs:!1})){const s=n.path.slice(e.length+1),a=g(t,s);A(a,N(n.path))}return Ue(e),!0},Xt=(t,e)=>{if(e==="npm"||e==="yarn")return Xe(t);const n=Y(t,e),s=q(t,e);if(!h(s))return!1;const a=N(s);return A(n,a),!0},Jt=(t,e)=>{if(e==="npm"||e==="yarn")try{const n=L(t);return h(n)}catch{return!1}try{return h(q(t,e))}catch{return!1}},de=t=>{if(h(t))try{return b(t)}catch{return}},Je=t=>{const e=de(g(t,"package.json"));return!!(e?.workspaces?.catalog||e?.workspaces?.catalogs)},He=t=>{const e=new Map;if(t.workspaces?.catalog&&typeof t.workspaces.catalog=="object"&&e.set("default",new Map(Object.entries(t.workspaces.catalog))),t.workspaces?.catalogs&&typeof t.workspaces.catalogs=="object")for(const[n,s]of Object.entries(t.workspaces.catalogs))s&&typeof s=="object"&&e.set(n,new Map(Object.entries(s)));return e},Ye=t=>{const e=de(g(t,"package.json"));return e?He(e):new Map},qe=(t,e,n)=>{const s=g(t,"package.json"),a=b(s);for(const r of e)if(r.catalogName==="default")a.workspaces?.catalog&&(a.workspaces.catalog[r.packageName]=r.newRange);else{const o=a.workspaces?.catalogs?.[r.catalogName];o&&(o[r.packageName]=r.newRange)}X(s,a,{indent:oe(s,{useEditorconfig:n}),overwrite:!0})},ze=/\*+/g,Qe=/[.+^${}()|[\]\\]/g,ee=new Map,E=(t,e)=>{let n=ee.get(e);if(!n){const a=e.replaceAll(ze,"*").replaceAll(Qe,String.raw`\$&`);n=new RegExp(`^${a.replaceAll("*",".*").replaceAll("?",".")}$`),ee.set(e,n)}return n.test(t)},me=(t,e,n)=>n.some(s=>E(t,s))?!1:e.length>0?e.some(s=>E(t,s)):!0,te=new Map,he=(t,e,n)=>{if(!n)return e;const s=n[t];if(s!==void 0)return s;for(const[a,r]of Object.entries(n))if(a!==t){if(a.startsWith("/")&&a.endsWith("/")){let o=te.get(a);if(o||(o=new RegExp(a.slice(1,-1)),te.set(a,o)),o.test(t))return r}else if(E(t,a))return r}return e},Ze=/^(?:'([^']+)'|"([^"]+)"|([^:\s]+)):\s*(?:'([^']+)'|"([^"]+)"|(\S+))/,Ke=/^catalog:/m,et=/^catalogs:/m,ke=/^['"]|['"]$/g,we=t=>{const e=Ze.exec(t);if(!e)return;const n=e[1]??e[2]??e[3],s=e[4]??e[5]??e[6];if(!(!n||!s))return[n,s]},ye=(t,e,n,s)=>{t.has(e)||t.set(e,new Map);const a=t.get(e);a&&a.set(n,s)},tt=(t,e,n)=>{if(n<2)return;const s=we(e);s&&ye(t,"default",s[0],s[1])},nt=(t,e,n,s)=>{if(n===2&&e.endsWith(":"))return e.slice(0,-1).trim().replaceAll(ke,"");if(n>=4&&s){const a=we(e);a&&ye(t,s,a[0],a[1])}return s},$e=t=>t==="catalog:"||t.startsWith("catalog:")?"catalog":t==="catalogs:"||t.startsWith("catalogs:")?"catalogs":"none",st=t=>{const e=new Map;let n="none",s="";for(const a of t.split(`
+`)){const r=a.trimStart(),o=a.length-r.length;if(o===0&&r.length>0&&!r.startsWith("#")){n=$e(r),n==="catalogs"&&(s="");continue}r.length===0||r.startsWith("#")||(n==="catalog"&&tt(e,r,o),n==="catalogs"&&(s=nt(e,r,o,s)))}return e},at=t=>{const e=g(t,"pnpm-workspace.yaml");if(!h(e))return!1;const n=N(e);return Ke.test(n)||et.test(n)},rt=t=>{const e=g(t,"pnpm-workspace.yaml");if(!h(e))return new Map;const n=N(e);return st(n)},ne=/[.*+?^${}()|[\]\\]/g,ot=(t,e)=>{const n=t.replaceAll(ne,String.raw`\$&`),s=e.replaceAll(ne,String.raw`\$&`);return new RegExp(String.raw`^(?:'${n}'|"${n}"|${n}):\s*['"]?${s}['"]?`)},ct=(t,e,n)=>ot(e,n).test(t),it=t=>{const e=new Map;for(const n of t){e.has(n.catalogName)||e.set(n.catalogName,new Map);const s=e.get(n.catalogName);s&&s.set(n.packageName,{newRange:n.newRange,oldRange:n.currentRange})}return e},se=(t,e,n)=>{if(!n)return t;for(const[s,{newRange:a,oldRange:r}]of n)if(ct(e,s,r))return t.replace(r,a);return t},lt=(t,e,n,s)=>{const a=t.trimStart(),r=t.length-a.length;return a.length===0||a.startsWith("#")?t:e==="catalog"&&r>=2?se(t,a,s.get("default")):e==="catalogs"&&r>=4&&n?se(t,a,s.get(n)):t},ut=(t,e)=>{const n=g(t,"pnpm-workspace.yaml"),a=N(n).split(`
+`),r=it(e);let o="none",c="";const i=[];for(const l of a){const u=l.trimStart(),p=l.length-u.length;p===0&&u.length>0&&!u.startsWith("#")&&(o=$e(u),o==="catalogs"&&(c="")),o==="catalogs"&&p===2&&u.endsWith(":")&&(c=u.slice(0,-1).trim().replaceAll(ke,"")),i.push(lt(l,o,c,r))}A(n,i.join(`
+`))},pt=/github\.com[/:]([\w.-]+)\/([\w.-]+?)(?:\.git|\/|$)/,Ht=async(t,e=1e4,n)=>{const s=[],a=new AbortController,r=setTimeout(()=>{a.abort()},e),o=async u=>{const p=`https://www.npmjs.com/package/${u.packageName}`;try{const f=n?pe(u.packageName,n):{url:"https://registry.npmjs.org"},w=f.url.replace(fe,""),y={Accept:"application/json"};f.token&&(y.Authorization=`Bearer ${f.token}`);const m=await fetch(`${w}/${u.packageName}/latest`,{headers:y,signal:a.signal});if(!m.ok)return{npmUrl:p,packageName:u.packageName};const $=(await m.json()).repository?.url;if(!$)return{npmUrl:p,packageName:u.packageName};const d=pt.exec($);if(!d)return{npmUrl:p,packageName:u.packageName,repoUrl:$};const v=d[1],T=d[2],k=`https://github.com/${v}/${T}/releases/tag/v${u.targetVersion}`;return{npmUrl:p,packageName:u.packageName,releaseUrl:k,repoUrl:`https://github.com/${v}/${T}`}}catch{return{npmUrl:p,packageName:u.packageName}}},c=Math.min(8,t.length);let i=0;const l=async()=>{for(;i<t.length;){const u=i;i+=1,s[u]=await o(t[u])}};try{await Promise.all(Array.from({length:c},()=>l()))}finally{clearTimeout(r)}return s},Yt=t=>JSON.stringify(t,void 0,2),qt=t=>t.map(e=>`${e.packageName}  ${e.currentRange} → ${e.newRange}`).join(`
+`),ft=t=>{const e=new Map;for(const n of t){e.has(n.catalogName)||e.set(n.catalogName,[]);const s=e.get(n.catalogName);s&&s.push(n)}return e},gt=t=>{const e=x(t);return e?`${e.relativePath==="."?"root":e.relativePath} (${e.depType})`:`Catalog: ${t}`},zt=(t,e)=>{const n=ft(t),s=process.stdout.columns||80,a=t.some(r=>r.socketReport);for(const[r,o]of n){const c=o.flatMap(u=>{const p=u.vulnerabilities&&u.vulnerabilities.length>0,f=u.socketReport&&u.socketReport.alerts.length>0,y=`${p||f?"[SEC] ":""}${u.packageName}`,m=u.socketReport?`${String(Math.round(u.socketReport.score.overall*100))}%`:"",S={current:u.currentRange,package:y,target:u.newRange,type:u.updateType};a&&(S.score=m);const $=[S];if(u.vulnerabilities)for(const d of u.vulnerabilities){const v={current:d.summary,package:`  ${d.severity} ${d.id}`,target:"",type:""};a&&(v.score=""),$.push(v)}if(u.socketReport)for(const d of u.socketReport.alerts){const v={current:d.category,package:`  [${d.severity.toUpperCase()}] ${d.type}`,target:"",type:""};a&&(v.score=""),$.push(v)}return $}),i=gt(r),l=ge(C.createElement(We,{data:c}),{columns:s});e.info(`${i}
 ${l}
-`)}},Zt=(t,e=Ue)=>{let n=0,s=0,a=0,r=0,o=0,c=0;for(const f of t)f.updateType==="major"?n++:f.updateType==="minor"?s++:a++,f.vulnerabilities&&f.vulnerabilities.length>0&&r++,f.socketReport?.alerts.length&&o++,f.socketReport&&f.socketReport.score.overall<e&&c++;const i=[];n&&i.push(`${String(n)} major`),s&&i.push(`${String(s)} minor`),a&&i.push(`${String(a)} patch`),r&&i.push(`${String(r)} with vulnerabilities`),o&&i.push(`${String(o)} with Socket.dev alerts`);const l=`Found ${String(t.length)} outdated (${i.join(", ")})`,p=process.stdout.columns||80,u=[C.createElement(W,{bold:!0},"─ Summary"),C.createElement(W,null,`  ${l}`)];return c>0&&u.push(C.createElement(W,{color:"yellow"},`  ${String(c)} package${c===1?"":"s"} with low Socket.dev score (<${String(Math.round(e*100))}%)`)),ge(C.createElement(Re,{flexDirection:"column",paddingX:1},...u),{columns:p})},ve=15e3,dt=async(t,e,n=ve,s=!1)=>{const r=`${(e?.url??"https://registry.npmjs.org").replace(fe,"")}/${t}`,o=s?{Accept:"application/json"}:{Accept:"application/vnd.npm.install-v1+json"};e?.authToken&&(o.Authorization=`Bearer ${e.authToken}`);const c=new AbortController,i=setTimeout(()=>{c.abort()},n);try{const l=await fetch(r,{headers:o,signal:c.signal});if(!l.ok)throw new Error(`Failed to fetch ${t}: ${String(l.status)} ${l.statusText}`);const p=await l.json(),u={latest:p["dist-tags"]?.latest??"",versions:Object.keys(p.versions??{})};return s&&p.time&&(u.publishTimes=new Map(Object.entries(p.time))),u}finally{clearTimeout(i)}},mt=async(t,e,n,s=!1,a)=>{const r=new Map,o=[],c=Math.max(1,Math.min(64,Math.floor(a??8)||8));let i=0,l=0;const p=async w=>{try{const y=e?ue(w,e):void 0,m=await dt(w,y?{authToken:y.token,url:y.url}:void 0,ve,s);r.set(w,m)}catch{o.push(w)}finally{i+=1,n&&n(i,t.length)}},u=async()=>{for(;l<t.length;){const w=t[l];l+=1,await p(w)}},f=Math.min(c,t.length);return await Promise.all(Array.from({length:f},()=>u())),{failed:o,versionCache:r}},Se=(t,e,n)=>{const s=e?.get(t);return s?Date.now()-new Date(s).getTime()<n:!1},ht=t=>t?.minimumReleaseAge?t.packageName&&t.minimumReleaseAgeExclude?.some(n=>N(t.packageName,n))?0:t.minimumReleaseAge*60*1e3:0,be=(t,e)=>e??(t?"any":"stable"),B=(t,e,n,s,a,r,o)=>{const c=be(n,o);return t.map(l=>({parsed:P(l),raw:l})).filter(l=>!l.parsed||!ie(l.parsed,e,c)||!J(e,l.parsed)||s&&Se(l.raw,a,s)?!1:r?r(l.parsed):!0).toSorted((l,p)=>Be.rcompare(l.raw,p.raw))[0]?.raw},kt=(t,e,n,s,a,r,o)=>{const c=P(n);if(!c)return;const i=ht(r),l=be(a,o);if(s==="latest"){const u=P(e);return u?ie(u,c,l)?J(c,u)?!i||!Se(e,r?.publishTimes,i)?e:B(t,c,a,i,r?.publishTimes,void 0,l):void 0:B(t,c,a,i,r?.publishTimes,void 0,l):void 0}const p=s==="patch"?u=>u.major===c.major&&u.minor===c.minor:u=>u.major===c.major;return B(t,c,a,i,r?.publishTimes,p,l)},wt=(t,e)=>{const n=[],s=new Set;for(const[a,r]of t)for(const[o,c]of r)if(!(c.startsWith("workspace:")||c.startsWith("file:")||c.startsWith("link:")||c==="*")&&!(!e.includeLocked&&!X(c))){if(e.ignore.some(i=>N(o,i))){s.add(o);continue}me(o,e.include,e.exclude)&&n.push({catalogName:a,packageName:o,range:c})}return{entries:n,ignored:[...s]}},ae=(t,e,n)=>{const s=[];for(const a of t){const r=e.get(a.packageName);if(!r)continue;const o=he(a.packageName,n.target,n.packageMode),c=kt(r.versions,r.latest,a.range,o,n.includePrerelease,{minimumReleaseAge:n.minimumReleaseAge,minimumReleaseAgeExclude:n.minimumReleaseAgeExclude,packageName:a.packageName,publishTimes:r.publishTimes},n.releaseChannel);if(!c)continue;const i=P(a.range),l=P(c);if(!i||!l)continue;const p=ce(i,l);if(p==="none")continue;const u=X(a.range);s.push({catalogName:a.catalogName,currentRange:a.range,newRange:`${u}${c}`,packageName:a.packageName,targetVersion:c,updateType:p})}return s},yt=async(t,e,n,s)=>{const a=[...new Map(e.map(i=>{const l=I(P(i.range));return[Z(i.packageName,l),{name:i.packageName,version:l}]})).values()].filter(i=>i.version),r=n&&n.length>0?Oe(n,a):void 0,[o,c]=await Promise.all([Ie(a),r]);for(const i of t){const l=o.get(Z(i.packageName,I(P(i.currentRange))));l&&l.length>0&&(i.vulnerabilities=l);const p=P(i.currentRange),u=I(p);if(c){const f=c.get(`${i.packageName}@${u}`);f&&(i.socketReport={alerts:f.alerts,license:f.license,score:f.score})}if(s){const f=We(i.packageName,u,s);f&&(i.acceptedRisk=f)}}},$t=6e4,vt=(t,e,n,s)=>{const a=[];for(const[c,i]of t)for(const[l,p]of i)a.push(`${c}:${l}=${p}`);if(a.push(`target=${e.target},pre=${String(e.includePrerelease)},chan=${e.releaseChannel??"_"},sec=${String(e.security??!1)}`),a.push(`in=${e.include.join(",")},ex=${e.exclude.join(",")},ig=${e.ignore.join(",")}`),a.push(`locked=${String(e.includeLocked)}`),a.push(`mra=${String(e.minimumReleaseAge??0)}`),e.packageMode){const c=Object.entries(e.packageMode).map(([i,l])=>`${i}=${l}`).toSorted().join(",");a.push(`pkgMode=${c}`)}a.push(`socket=${String(n??!1)}`),s&&s.length>0&&a.push(`risks=${s.toSorted().join(",")}`);let r=5381;const o=a.join("|");for(let c=0;c<o.length;c++)r=(r<<5)+r+o.charCodeAt(c)|0;return String(r)},Te=t=>{const e=pe("vis",{create:!0,cwd:t});return e?g(e,"outdated-cache.json"):void 0},St=(t,e)=>{const n=Te(t);if(!(!n||!h(n)))try{const s=b(n);if(s.hash===e&&Date.now()-s.timestamp<$t)return s.result}catch{}},bt=(t,e,n)=>{const s=Te(t);if(s)try{O(V(s)),H(s,{hash:e,result:n,timestamp:Date.now()})}catch{}},Kt=async(t,e,n,s,a,r,o)=>{const c=!!(r&&r.length>0),i=vt(t,e,c,o?Object.keys(o):void 0);if(a){const d=St(a,i);if(d)return d}const{entries:l,ignored:p}=wt(t,e),u=[...new Set(l.map(d=>d.packageName))],f=!!(e.minimumReleaseAge&&e.minimumReleaseAge>0),{failed:w,versionCache:y}=await mt(u,n,s,f,e.maxConcurrentRequests),m=ae(l,y,e);let S=[];if(e.target!=="latest"){const d=new Set(m.map(k=>k.packageName)),v={...e,packageMode:void 0,target:"latest"};S=ae(l,y,v).filter(k=>!d.has(k.packageName))}(e.security||c)&&m.length>0&&await yt(m,l,r,o);const $={checkedCount:u.length,failed:w,filteredByTarget:S,ignored:p,outdated:m};return a&&bt(a,i,$),$},en=async t=>{const e=Fe({input:process.stdin,output:process.stdout}),n=a=>new Promise(r=>{e.question(a,o=>{r(o.trim())})});process.stdout.write(`
+`)}},Qt=(t,e=Le)=>{let n=0,s=0,a=0,r=0,o=0,c=0;for(const f of t)f.updateType==="major"?n++:f.updateType==="minor"?s++:a++,f.vulnerabilities&&f.vulnerabilities.length>0&&r++,f.socketReport?.alerts.length&&o++,f.socketReport&&f.socketReport.score.overall<e&&c++;const i=[];n&&i.push(`${String(n)} major`),s&&i.push(`${String(s)} minor`),a&&i.push(`${String(a)} patch`),r&&i.push(`${String(r)} with vulnerabilities`),o&&i.push(`${String(o)} with Socket.dev alerts`);const l=`Found ${String(t.length)} outdated (${i.join(", ")})`,u=process.stdout.columns||80,p=[C.createElement(W,{bold:!0},"─ Summary"),C.createElement(W,null,`  ${l}`)];return c>0&&p.push(C.createElement(W,{color:"yellow"},`  ${String(c)} package${c===1?"":"s"} with low Socket.dev score (<${String(Math.round(e*100))}%)`)),ge(C.createElement(De,{flexDirection:"column",paddingX:1},...p),{columns:u})},ve=15e3,dt=async(t,e,n=ve,s=!1)=>{const r=`${(e?.url??"https://registry.npmjs.org").replace(fe,"")}/${t}`,o=s?{Accept:"application/json"}:{Accept:"application/vnd.npm.install-v1+json"};e?.authToken&&(o.Authorization=`Bearer ${e.authToken}`);const c=new AbortController,i=setTimeout(()=>{c.abort()},n);try{const l=await fetch(r,{headers:o,signal:c.signal});if(!l.ok)throw new Error(`Failed to fetch ${t}: ${String(l.status)} ${l.statusText}`);const u=await l.json(),p={latest:u["dist-tags"]?.latest??"",versions:Object.keys(u.versions??{})};return s&&u.time&&(p.publishTimes=new Map(Object.entries(u.time))),p}finally{clearTimeout(i)}},mt=async(t,e,n,s=!1,a)=>{const r=new Map,o=[],c=Math.max(1,Math.min(64,Math.floor(a??8)||8));let i=0,l=0;const u=async w=>{try{const y=e?pe(w,e):void 0,m=await dt(w,y?{authToken:y.token,url:y.url}:void 0,ve,s);r.set(w,m)}catch{o.push(w)}finally{i+=1,n&&n(i,t.length)}},p=async()=>{for(;l<t.length;){const w=t[l];l+=1,await u(w)}},f=Math.min(c,t.length);return await Promise.all(Array.from({length:f},()=>p())),{failed:o,versionCache:r}},Se=(t,e,n)=>{const s=e?.get(t);return s?Date.now()-new Date(s).getTime()<n:!1},ht=t=>t?.minimumReleaseAge?t.packageName&&t.minimumReleaseAgeExclude?.some(n=>E(t.packageName,n))?0:t.minimumReleaseAge*60*1e3:0,be=(t,e)=>e??(t?"any":"stable"),B=(t,e,n,s,a,r,o)=>{const c=be(n,o);return t.map(l=>({parsed:P(l),raw:l})).filter(l=>!l.parsed||!ie(l.parsed,e,c)||!H(e,l.parsed)||s&&Se(l.raw,a,s)?!1:r?r(l.parsed):!0).toSorted((l,u)=>Be.rcompare(l.raw,u.raw))[0]?.raw},kt=(t,e,n,s,a,r,o)=>{const c=P(n);if(!c)return;const i=ht(r),l=be(a,o);if(s==="latest"){const p=P(e);return p?ie(p,c,l)?H(c,p)?!i||!Se(e,r?.publishTimes,i)?e:B(t,c,a,i,r?.publishTimes,void 0,l):void 0:B(t,c,a,i,r?.publishTimes,void 0,l):void 0}const u=s==="patch"?p=>p.major===c.major&&p.minor===c.minor:p=>p.major===c.major;return B(t,c,a,i,r?.publishTimes,u,l)},wt=(t,e)=>{const n=[],s=new Set;for(const[a,r]of t)for(const[o,c]of r)if(!(c.startsWith("workspace:")||c.startsWith("file:")||c.startsWith("link:")||c==="*")&&!(!e.includeLocked&&!J(c))){if(e.ignore.some(i=>E(o,i))){s.add(o);continue}me(o,e.include,e.exclude)&&n.push({catalogName:a,packageName:o,range:c})}return{entries:n,ignored:[...s]}},ae=(t,e,n)=>{const s=[];for(const a of t){const r=e.get(a.packageName);if(!r)continue;const o=he(a.packageName,n.target,n.packageMode),c=kt(r.versions,r.latest,a.range,o,n.includePrerelease,{minimumReleaseAge:n.minimumReleaseAge,minimumReleaseAgeExclude:n.minimumReleaseAgeExclude,packageName:a.packageName,publishTimes:r.publishTimes},n.releaseChannel);if(!c)continue;const i=P(a.range),l=P(c);if(!i||!l)continue;const u=ce(i,l);if(u==="none")continue;const p=J(a.range);s.push({catalogName:a.catalogName,currentRange:a.range,newRange:`${p}${c}`,packageName:a.packageName,targetVersion:c,updateType:u})}return s},yt=async(t,e,n,s)=>{const a=[...new Map(e.map(i=>{const l=I(P(i.range));return[Z(i.packageName,l),{name:i.packageName,version:l}]})).values()].filter(i=>i.version),r=n&&n.length>0?Oe(n,a):void 0,[o,c]=await Promise.all([Ie(a),r]);for(const i of t){const l=o.get(Z(i.packageName,I(P(i.currentRange))));l&&l.length>0&&(i.vulnerabilities=l);const u=P(i.currentRange),p=I(u);if(c){const f=c.get(`${i.packageName}@${p}`);f&&(i.socketReport={alerts:f.alerts,license:f.license,score:f.score})}if(s){const f=Me(i.packageName,p,s);f&&(i.acceptedRisk=f)}}},$t=6e4,vt=(t,e,n,s)=>{const a=[];for(const[c,i]of t)for(const[l,u]of i)a.push(`${c}:${l}=${u}`);if(a.push(`target=${e.target},pre=${String(e.includePrerelease)},chan=${e.releaseChannel??"_"},sec=${String(e.security??!1)}`),a.push(`in=${e.include.join(",")},ex=${e.exclude.join(",")},ig=${e.ignore.join(",")}`),a.push(`locked=${String(e.includeLocked)}`),a.push(`mra=${String(e.minimumReleaseAge??0)}`),e.packageMode){const c=Object.entries(e.packageMode).map(([i,l])=>`${i}=${l}`).toSorted().join(",");a.push(`pkgMode=${c}`)}a.push(`socket=${String(n??!1)}`),s&&s.length>0&&a.push(`risks=${s.toSorted().join(",")}`);let r=5381;const o=a.join("|");for(let c=0;c<o.length;c++)r=(r<<5)+r+o.charCodeAt(c)|0;return String(r)},Te=t=>{const e=ue("vis",{create:!0,cwd:t});return e?g(e,"outdated-cache.json"):void 0},St=(t,e)=>{const n=Te(t);if(!(!n||!h(n)))try{const s=b(n);if(s.hash===e&&Date.now()-s.timestamp<$t)return s.result}catch{}},bt=(t,e,n)=>{const s=Te(t);if(s)try{O(V(s)),X(s,{hash:e,result:n,timestamp:Date.now()})}catch{}},Zt=async(t,e,n,s,a,r,o)=>{const c=!!(r&&r.length>0),i=vt(t,e,c,o?Object.keys(o):void 0);if(a){const d=St(a,i);if(d)return d}const{entries:l,ignored:u}=wt(t,e),p=[...new Set(l.map(d=>d.packageName))],f=!!(e.minimumReleaseAge&&e.minimumReleaseAge>0),{failed:w,versionCache:y}=await mt(p,n,s,f,e.maxConcurrentRequests),m=ae(l,y,e);let S=[];if(e.target!=="latest"){const d=new Set(m.map(k=>k.packageName)),v={...e,packageMode:void 0,target:"latest"};S=ae(l,y,v).filter(k=>!d.has(k.packageName))}(e.security||c)&&m.length>0&&await yt(m,l,r,o);const $={checkedCount:p.length,failed:w,filteredByTarget:S,ignored:u,outdated:m};return a&&bt(a,i,$),$},Kt=async t=>{const e=Fe({input:process.stdin,output:process.stdout}),n=a=>new Promise(r=>{e.question(a,o=>{r(o.trim())})});process.stdout.write(`
 Outdated catalog dependencies:
 `);for(const[a,r]of t.entries())r&&process.stdout.write(`  ${String(a+1)}. ${r.packageName}: ${r.currentRange} → ${r.newRange} (${r.updateType})
 `);process.stdout.write(`
-`);const s=await n("Apply updates? [a]ll / [n]one / [s]elect: ");if(s.toLowerCase()==="a"||s.toLowerCase()==="all")return e.close(),t;if(s.toLowerCase()==="n"||s.toLowerCase()==="none")return e.close(),[];if(s.toLowerCase()==="s"||s.toLowerCase()==="select"){const a=await n("Enter numbers to apply (comma-separated): ");return e.close(),a.split(",").map(o=>Number.parseInt(o.trim(),10)-1).filter(o=>o>=0&&o<t.length).map(o=>t[o]).filter(o=>o!==void 0)}return e.close(),[]},Pe=t=>t?.dev?["devDependencies"]:t?.prod?["dependencies"]:t?.depFields&&t.depFields.length>0?t.depFields:t?.peer?[...G,"peerDependencies"]:G,Tt=(t,e,n)=>{const s=new Set;e&&s.add(e);for(const a of n){const r=g(t,a,"package.json");if(h(r))try{const o=b(r);o.name&&s.add(o.name)}catch{}}return s},z=(t,e)=>{const n=e.split(".");let s=t;for(const a of n)if(s&&typeof s=="object")s=s[a];else return;return typeof s=="object"&&s!==null?s:void 0},Pt=(t,e,n,s)=>{const a=e.split(".");let r=t;for(const c of a.slice(0,-1))(!r[c]||typeof r[c]!="object")&&(r[c]={}),r=r[c];const o=a.at(-1);(!r[o]||typeof r[o]!="object")&&(r[o]={}),r[o][n]=s},Et=(t,e)=>{const n=new Map;for(const[s,a]of Object.entries(t))e.has(s)||a.startsWith("workspace:")||a.startsWith("file:")||a.startsWith("link:")||a.startsWith("catalog:")||a.startsWith("$")||n.set(s,a);return n},Nt=(t,e,n,s,a,r)=>{const o=e==="."?n:g(t,e,"package.json");if(!h(o))return;let c;try{c=b(o)}catch{return}for(const i of s){const l=i.includes(".")?z(c,i):c[i];if(!l||typeof l!="object")continue;const p=Et(l,a);p.size>0&&r.set(`${e}:${i}`,p)}},jt=(t,e)=>{const n=new Map,s=g(t,"package.json");if(!h(s))return n;const a=b(s);let r=[];const o=le(t);if(o)r=R(t,o);else{const p=a.workspaces;if(p){const u=Array.isArray(p)?p:p.packages;u&&(r=R(t,u))}}const c=e?.includeInternal?new Set:Tt(t,a.name,r),i=Pe(e),l=[".",...r];for(const p of l)Nt(t,p,s,i,c,n);return n},F=t=>{const e=g(t,"package.json");if(!h(e))return!1;try{const n=b(e);return!!(n.dependencies||n.devDependencies||n.peerDependencies||n.optionalDependencies||n.overrides||n.resolutions||z(n,"pnpm.overrides"))}catch{return!1}},re=(t,e,n)=>{const s=new Map;for(const a of e){const r=x(a.catalogName);if(!r)continue;const o=r.relativePath==="."?g(t,"package.json"):g(t,r.relativePath,"package.json");s.has(o)||s.set(o,[]);const c=s.get(o);c&&c.push({depType:r.depType,newRange:a.newRange,packageName:a.packageName})}for(const[a,r]of s){const o=b(a);for(const{depType:c,newRange:i,packageName:l}of r)c.includes(".")?Pt(o,c,l,i):o[c]&&(o[c][l]=i);H(a,o,{indent:oe(a,{useEditorconfig:n}),overwrite:!0})}},tn=(t,e)=>e==="bun"?Je(t)||F(t):e==="npm"||e==="yarn"?F(t):at(t)||F(t),nn=(t,e,n)=>{let s;e==="bun"?s=Ye(t):e==="npm"||e==="yarn"?s=new Map:s=rt(t);const a=jt(t,n);for(const[r,o]of a)s.has(r)||s.set(r,o);return s},Ct=(t,e)=>{const n=new Map;for(const s of e){const a=g(t,s,"package.json");if(h(a))try{const r=b(a);r.name&&r.version&&n.set(r.name,r.version)}catch{}}return n},sn=(t,e)=>{const n=g(t,"package.json");if(!h(n))return{ignored:[],outdated:[]};const s=b(n);let a=[];const r=le(t);if(r)a=R(t,r);else{const m=s.workspaces;if(m){const S=Array.isArray(m)?m:m.packages;S&&(a=R(t,S))}}const o=Ct(t,a);if(o.size===0)return{ignored:[],outdated:[]};const c=Pe(e),i=[".",...a],l=e?.include??[],p=e?.exclude??[],u=e?.ignore??[],f=e?.target??"latest",w=new Set,y=[];for(const m of i){const S=m==="."?n:g(t,m,"package.json");if(!h(S))continue;let $;try{$=b(S)}catch{continue}for(const d of c){const v=d.includes(".")?z($,d):$[d];if(!(!v||typeof v!="object"))for(const[T,k]of Object.entries(v)){const _=o.get(T);if(!_||k.startsWith("workspace:")||k.startsWith("file:")||k.startsWith("link:")||k.startsWith("catalog:")||k.startsWith("$")||k==="*")continue;if(u.some(Ne=>N(T,Ne))){w.add(T);continue}if(!me(T,l,p))continue;const M=P(k),U=P(_);if(!M||!U||!J(M,U))continue;const D=ce(M,U);if(D==="none")continue;const Q=he(T,f,e?.packageMode);if(Q==="patch"&&D!=="patch"||Q==="minor"&&D==="major")continue;const Ee=X(k);y.push({catalogName:`${m}:${d}`,currentRange:k,newRange:`${Ee}${_}`,packageName:T,targetVersion:_,updateType:D})}}}return{ignored:[...w],outdated:y}},an=t=>t?Array.isArray(t)?t:[t]:[],rn=(t,e,n,s=!0,a={})=>{const{useEditorconfig:r}=a;let o;s&&(o=Ve(t,n,e));const c=[],i=[];for(const l of e)x(l.catalogName)?i.push(l):c.push(l);return c.length>0&&(n==="npm"||n==="yarn"?re(t,c,r):n==="bun"?qe(t,c,r):pt(t,c)),i.length>0&&re(t,i,r),o};export{rn as applyCatalogUpdates,re as applyPackageJsonUpdates,Kt as checkOutdated,sn as collectInternalOutdated,Ve as createBackup,X as extractPrefix,Yt as fetchChangelogInfo,dt as fetchPackageVersions,Ie as fetchVulnerabilities,kt as findTargetVersion,qt as formatOutdatedJson,zt as formatOutdatedMinimal,Qt as formatOutdatedTable,Zt as formatSummary,ue as getRegistryForPackage,ce as getUpdateType,ft as groupByCatalog,Ht as hasBackup,tn as hasCatalogs,F as hasPackageJsonDeps,J as isNewer,Wt as loadNpmrc,me as matchesFilters,N as matchesPattern,He as parseBunCatalogs,st as parseCatalogsFromYaml,x as parseCompositeCatalogName,ln as parseNpmrc,P as parseVersion,en as promptPackageSelection,nn as readCatalogs,jt as readPackageJsonDeps,he as resolvePackageTarget,Jt as restoreFromBackup,an as toFilterArray};
+`);const s=await n("Apply updates? [a]ll / [n]one / [s]elect: ");if(s.toLowerCase()==="a"||s.toLowerCase()==="all")return e.close(),t;if(s.toLowerCase()==="n"||s.toLowerCase()==="none")return e.close(),[];if(s.toLowerCase()==="s"||s.toLowerCase()==="select"){const a=await n("Enter numbers to apply (comma-separated): ");return e.close(),a.split(",").map(o=>Number.parseInt(o.trim(),10)-1).filter(o=>o>=0&&o<t.length).map(o=>t[o]).filter(o=>o!==void 0)}return e.close(),[]},Pe=t=>t?.dev?["devDependencies"]:t?.prod?["dependencies"]:t?.depFields&&t.depFields.length>0?t.depFields:t?.peer?[...G,"peerDependencies"]:G,Tt=(t,e,n)=>{const s=new Set;e&&s.add(e);for(const a of n){const r=g(t,a,"package.json");if(h(r))try{const o=b(r);o.name&&s.add(o.name)}catch{}}return s},z=(t,e)=>{const n=e.split(".");let s=t;for(const a of n)if(s&&typeof s=="object")s=s[a];else return;return typeof s=="object"&&s!==null?s:void 0},Pt=(t,e,n,s)=>{const a=e.split(".");let r=t;for(const c of a.slice(0,-1))(!r[c]||typeof r[c]!="object")&&(r[c]={}),r=r[c];const o=a.at(-1);(!r[o]||typeof r[o]!="object")&&(r[o]={}),r[o][n]=s},Nt=(t,e)=>{const n=new Map;for(const[s,a]of Object.entries(t))e.has(s)||a.startsWith("workspace:")||a.startsWith("file:")||a.startsWith("link:")||a.startsWith("catalog:")||a.startsWith("$")||n.set(s,a);return n},Et=(t,e,n,s,a,r)=>{const o=e==="."?n:g(t,e,"package.json");if(!h(o))return;let c;try{c=b(o)}catch{return}for(const i of s){const l=i.includes(".")?z(c,i):c[i];if(!l||typeof l!="object")continue;const u=Nt(l,a);u.size>0&&r.set(`${e}:${i}`,u)}},jt=(t,e)=>{const n=new Map,s=g(t,"package.json");if(!h(s))return n;const a=b(s);let r=[];const o=le(t);if(o)r=D(t,o);else{const u=a.workspaces;if(u){const p=Array.isArray(u)?u:u.packages;p&&(r=D(t,p))}}const c=e?.includeInternal?new Set:Tt(t,a.name,r),i=Pe(e),l=[".",...r];for(const u of l)Et(t,u,s,i,c,n);return n},F=t=>{const e=g(t,"package.json");if(!h(e))return!1;try{const n=b(e);return!!(n.dependencies||n.devDependencies||n.peerDependencies||n.optionalDependencies||n.overrides||n.resolutions||z(n,"pnpm.overrides"))}catch{return!1}},re=(t,e,n)=>{const s=new Map;for(const a of e){const r=x(a.catalogName);if(!r)continue;const o=r.relativePath==="."?g(t,"package.json"):g(t,r.relativePath,"package.json");s.has(o)||s.set(o,[]);const c=s.get(o);c&&c.push({depType:r.depType,newRange:a.newRange,packageName:a.packageName})}for(const[a,r]of s){const o=b(a);for(const{depType:c,newRange:i,packageName:l}of r)c.includes(".")?Pt(o,c,l,i):o[c]&&(o[c][l]=i);X(a,o,{indent:oe(a,{useEditorconfig:n}),overwrite:!0})}},en=(t,e)=>e==="bun"?Je(t)||F(t):e==="npm"||e==="yarn"?F(t):at(t)||F(t),tn=(t,e,n)=>{let s;e==="bun"?s=Ye(t):e==="npm"||e==="yarn"?s=new Map:s=rt(t);const a=jt(t,n);for(const[r,o]of a)s.has(r)||s.set(r,o);return s},Ct=(t,e)=>{const n=new Map;for(const s of e){const a=g(t,s,"package.json");if(h(a))try{const r=b(a);r.name&&r.version&&n.set(r.name,r.version)}catch{}}return n},nn=(t,e)=>{const n=g(t,"package.json");if(!h(n))return{ignored:[],outdated:[]};const s=b(n);let a=[];const r=le(t);if(r)a=D(t,r);else{const m=s.workspaces;if(m){const S=Array.isArray(m)?m:m.packages;S&&(a=D(t,S))}}const o=Ct(t,a);if(o.size===0)return{ignored:[],outdated:[]};const c=Pe(e),i=[".",...a],l=e?.include??[],u=e?.exclude??[],p=e?.ignore??[],f=e?.target??"latest",w=new Set,y=[];for(const m of i){const S=m==="."?n:g(t,m,"package.json");if(!h(S))continue;let $;try{$=b(S)}catch{continue}for(const d of c){const v=d.includes(".")?z($,d):$[d];if(!(!v||typeof v!="object"))for(const[T,k]of Object.entries(v)){const _=o.get(T);if(!_||k.startsWith("workspace:")||k.startsWith("file:")||k.startsWith("link:")||k.startsWith("catalog:")||k.startsWith("$")||k==="*")continue;if(p.some(Ee=>E(T,Ee))){w.add(T);continue}if(!me(T,l,u))continue;const M=P(k),U=P(_);if(!M||!U||!H(M,U))continue;const R=ce(M,U);if(R==="none")continue;const Q=he(T,f,e?.packageMode);if(Q==="patch"&&R!=="patch"||Q==="minor"&&R==="major")continue;const Ne=J(k);y.push({catalogName:`${m}:${d}`,currentRange:k,newRange:`${Ne}${_}`,packageName:T,targetVersion:_,updateType:R})}}}return{ignored:[...w],outdated:y}},sn=t=>t?Array.isArray(t)?t:[t]:[],an=(t,e,n,s=!0,a={})=>{const{useEditorconfig:r}=a;let o;s&&(o=Ve(t,n,e));const c=[],i=[];for(const l of e)x(l.catalogName)?i.push(l):c.push(l);return c.length>0&&(n==="npm"||n==="yarn"?re(t,c,r):n==="bun"?qe(t,c,r):ut(t,c)),i.length>0&&re(t,i,r),o};export{an as applyCatalogUpdates,re as applyPackageJsonUpdates,Zt as checkOutdated,nn as collectInternalOutdated,Ve as createBackup,J as extractPrefix,Ht as fetchChangelogInfo,dt as fetchPackageVersions,Ie as fetchVulnerabilities,kt as findTargetVersion,Yt as formatOutdatedJson,qt as formatOutdatedMinimal,zt as formatOutdatedTable,Qt as formatSummary,pe as getRegistryForPackage,ce as getUpdateType,ft as groupByCatalog,Jt as hasBackup,en as hasCatalogs,F as hasPackageJsonDeps,H as isNewer,Wt as loadNpmrc,me as matchesFilters,E as matchesPattern,He as parseBunCatalogs,st as parseCatalogsFromYaml,x as parseCompositeCatalogName,cn as parseNpmrc,P as parseVersion,Kt as promptPackageSelection,tn as readCatalogs,jt as readPackageJsonDeps,he as resolvePackageTarget,Xt as restoreFromBackup,sn as toFilterArray};

package/dist/packem_chunks/cli-exec.js

@@ -1 +1 @@
-import{a as r,x as o,d as i,r as n,i as s}from"../packem_shared/vis-user-error-3YS7sPYy.js";import{e as t}from"../packem_shared/index-9Ot7jTd4.js";import{g as d}from"../packem_shared/package-version-Bq6Cne_7.js";const g=async()=>{const e=r("vis",{packageName:"vis",packageVersion:d()}),a=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(o({concise:s,detailed:a,exitOnError:!1})),e.addGlobalOption({description:"Target JS runtime: node (default) or bun. Overrides VIS_RUNTIME; falls back to lockfile detection.",name:"runtime",type:String}),e.addCommand(t),e.addCommand(i),await n(e)};export{g as runExecCli};
+import{a as r,x as o,d as i,r as n,i as s}from"../packem_shared/vis-user-error-BivZDkQD.js";import{e as t}from"../packem_shared/index-Cwxbl_pY.js";import{g as d}from"../packem_shared/package-version-x7sPg2TM.js";const g=async()=>{const e=r("vis",{packageName:"vis",packageVersion:d()}),a=process.argv.includes("--debug")||!!process.env.DEBUG;e.addPlugin(o({concise:s,detailed:a,exitOnError:!1})),e.addGlobalOption({description:"Target JS runtime: node (default) or bun. Overrides VIS_RUNTIME; falls back to lockfile detection.",name:"runtime",type:String}),e.addCommand(t),e.addCommand(i),await n(e)};export{g as runExecCli};