@zuplo/cli 7.0.2 → 7.1.1

package/node_modules/fast-copy/index.d.ts

@@ -1,55 +1,54 @@
 interface Cache {
-  _keys?: any[];
-  _values?: any[];
-  has: (value: any) => boolean;
-  set: (key: any, value: any) => void;
-  get: (key: any) => any;
-}
-
-export interface CreateCopierOptions {
-  array?: InternalCopier<any[]>;
-  arrayBuffer?: InternalCopier<ArrayBuffer>;
-  blob?: InternalCopier<Blob>;
-  dataView?: InternalCopier<DataView>;
-  date?: InternalCopier<Date>;
-  map?: InternalCopier<Map<any, any>>;
-  object?: InternalCopier<Record<string, any>>;
-  regExp?: InternalCopier<RegExp>;
-  set?: InternalCopier<Set<any>>;
+    has: (value: any) => boolean;
+    set: (key: any, value: any) => void;
+    get: (key: any) => any;
 }
 
 type InternalCopier<Value> = (value: Value, state: State) => Value;
+interface State {
+    Constructor: any;
+    cache: Cache;
+    copier: InternalCopier<any>;
+    prototype: any;
+}
 
-export interface State {
-  Constructor: any;
-  cache: Cache;
-  copier: InternalCopier<any>;
-  prototype: any;
+interface CopierMethods {
+    array?: InternalCopier<any[]>;
+    arrayBuffer?: InternalCopier<ArrayBuffer>;
+    asyncGenerator?: InternalCopier<AsyncGenerator>;
+    blob?: InternalCopier<Blob>;
+    dataView?: InternalCopier<DataView>;
+    date?: InternalCopier<Date>;
+    error?: InternalCopier<Error>;
+    generator?: InternalCopier<Generator>;
+    map?: InternalCopier<Map<any, any>>;
+    object?: InternalCopier<Record<string, any>>;
+    regExp?: InternalCopier<RegExp>;
+    set?: InternalCopier<Set<any>>;
+}
+interface CreateCopierOptions {
+    createCache?: () => Cache;
+    methods?: CopierMethods;
+    strict?: boolean;
 }
 
 /**
- * Copy an value deeply as much as possible.
+ * Create a custom copier based on custom options for any of the following:
+ *   - `createCache` method to create a cache for copied objects
+ *   - custom copier `methods` for specific object types
+ *   - `strict` mode to copy all properties with their descriptors
  */
-export default function copy<Value>(value: Value): Value;
-
+declare function createCopier(options?: CreateCopierOptions): <Value>(value: Value) => Value;
 /**
  * Copy an value deeply as much as possible, where strict recreation of object properties
  * are maintained. All properties (including non-enumerable ones) are copied with their
  * original property descriptors on both objects and arrays.
  */
-export function copyStrict<Value>(value: Value): Value;
-
+declare const copyStrict: <Value>(value: Value) => Value;
 /**
- * Create a custom copier based on the object-specific copy methods passed.
+ * Copy an value deeply as much as possible.
  */
-export function createCopier(
-  options: CreateCopierOptions
-): <Value>(value: Value) => Value;
+declare const copy: <Value>(value: Value) => Value;
 
-/**
- * Create a custom copier based on the object-specific copy methods passed, defaulting to the
- * same internals as `copyStrict`.
- */
-export function createStrictCopier(
-  options: CreateCopierOptions
-): <Value>(value: Value) => Value;
+export { copy, copyStrict, createCopier };
+export type { CreateCopierOptions, State };

package/node_modules/fast-copy/package.json

@@ -1,65 +1,64 @@
 {
-  "author": "tony_quetano@planttheidea.com",
-  "contributors": [
-    "Dariusz Rzepka <rzepkadarek@gmail.com>"
-  ],
-  "browser": "dist/umd/index.js",
+  "author": {
+    "email": "tony.quetano@planttheidea.com",
+    "name": "Tony Quetano",
+    "url": "https://www.planttheidea.com/"
+  },
+  "browser": "./dist/umd/index.js",
   "bugs": {
     "url": "https://github.com/planttheidea/fast-copy/issues"
   },
+  "contributors": [
+    "Dariusz Rzepka <rzepkadarek@gmail.com>"
+  ],
   "description": "A blazing fast deep object copier",
   "devDependencies": {
-    "@rollup/plugin-node-resolve": "^15.0.1",
-    "@rollup/plugin-typescript": "^11.0.0",
-    "@types/eslint": "^8.21.1",
-    "@types/jest": "^29.4.0",
-    "@types/lodash": "^4.14.191",
-    "@types/node": "^18.14.0",
-    "@types/ramda": "^0.28.23",
-    "@types/react": "^18.0.28",
-    "@typescript-eslint/eslint-plugin": "^5.52.0",
-    "@typescript-eslint/parser": "^5.52.0",
-    "benchee": "^1.0.3",
-    "cli-table3": "^0.6.3",
+    "@planttheidea/build-tools": "^2.0.2",
+    "@types/lodash": "^4.17.24",
+    "@types/node": "^24.13.3",
+    "@types/ramda": "^0.32.0",
+    "@types/react": "^19.2.17",
+    "@vitest/coverage-v8": "^4.1.10",
+    "cli-table3": "^0.6.5",
     "clone": "^2.1.2",
     "deepclone": "^1.0.2",
-    "eslint": "^8.34.0",
-    "eslint-webpack-plugin": "^4.0.0",
-    "fast-clone": "^1.5.3",
-    "html-webpack-plugin": "^5.5.0",
-    "in-publish": "^2.0.1",
-    "jest": "^29.4.3",
-    "lodash": "^4.17.11",
-    "nyc": "^15.1.0",
-    "ramda": "^0.28.0",
-    "react": "^18.2.0",
-    "react-dom": "^18.2.0",
-    "release-it": "15.6.0",
-    "rollup": "^3.16.0",
-    "rollup-plugin-terser": "^7.0.2",
-    "ts-jest": "^29.0.5",
-    "ts-loader": "^9.4.2",
-    "typescript": "^4.9.5",
-    "webpack": "^5.75.0",
-    "webpack-cli": "^5.0.1",
-    "webpack-dev-server": "^4.11.1"
+    "eslint": "^9.39.4",
+    "fast-clone": "^1.5.13",
+    "lodash": "^4.18.1",
+    "prettier": "^3.9.4",
+    "ramda": "^0.32.0",
+    "react": "^19.2.7",
+    "react-dom": "^19.2.7",
+    "release-it": "^20.2.1",
+    "rollup": "^4.62.2",
+    "tinybench": "^6.0.2",
+    "typescript": "^5.9.3",
+    "vite": "^8.1.3",
+    "vitest": "^4.1.10"
   },
   "exports": {
     ".": {
       "import": {
-        "types": "./dist/esm/types/index.d.ts",
-        "default": "./dist/esm/index.mjs"
+        "types": "./dist/es/index.d.mts",
+        "default": "./dist/es/index.mjs"
       },
       "require": {
-        "types": "./dist/cjs/types/index.d.ts",
+        "types": "./dist/cjs/index.d.cts",
         "default": "./dist/cjs/index.cjs"
       },
       "default": {
-        "types": "./dist/umd/types/index.d.ts",
+        "types": "./dist/umd/index.d.ts",
         "default": "./dist/umd/index.js"
       }
     }
   },
+  "files": [
+    "dist",
+    "LICENSE",
+    "README.md",
+    "index.d.ts",
+    "package.json"
+  ],
   "homepage": "https://github.com/planttheidea/fast-copy#readme",
   "keywords": [
     "clone",
@@ -68,36 +67,44 @@
     "fast"
   ],
   "license": "MIT",
-  "main": "dist/cjs/index.cjs",
-  "module": "dist/esm/index.mjs",
+  "main": "./dist/cjs/index.cjs",
+  "module": "./dist/es/index.mjs",
   "name": "fast-copy",
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/planttheidea/fast-copy.git"
   },
   "scripts": {
-    "benchmark": "npm run clean && npm run build:cjs && node benchmark/index.cjs",
-    "build": "npm run build:esm && npm run build:cjs && npm run build:umd && npm run build:min",
-    "build:cjs": "NODE_ENV=production rollup -c rollup/config.cjs.js && tsc -p ./tsconfig/cjs.json",
-    "build:esm": "NODE_ENV=production rollup -c rollup/config.esm.js && tsc -p ./tsconfig/esm.json",
-    "build:min": "NODE_ENV=production rollup -c rollup/config.min.js && tsc -p ./tsconfig/min.json",
-    "build:umd": "NODE_ENV=production rollup -c rollup/config.umd.js && tsc -p ./tsconfig/umd.json",
-    "clean": "rimraf dist",
-    "dev": "NODE_ENV=development webpack-dev-server --config=webpack/webpack.config.js",
-    "dist": "npm run clean && npm run build",
-    "lint": "eslint 'src/*.ts' '__tests__/*.ts' 'DEV_ONLY/*.ts'",
+    "benchmark": "npm run build && node benchmark/index.js",
+    "build": "npm run clean && npm run build:dist",
+    "build:dist": "NODE_ENV=production rollup -c config/rollup.config.js",
+    "build:types": "pti fix-types -l dist",
+    "clean": "rm -rf dist",
+    "clean:cjs": "rm -rf dist/cjs",
+    "clean:es": "rm -rf dist/es",
+    "clean:esm": "rm -rf dist/esm",
+    "clean:min": "rm -rf dist/min",
+    "clean:umd": "rm -rf dist/umd",
+    "dev": "vite --config=config/vite.config.ts",
+    "format": "prettier . --log-level=warn --write",
+    "format:check": "prettier . --log-level=warn --check",
+    "lint": "eslint --max-warnings=0",
     "lint:fix": "npm run lint -- --fix",
-    "prepublishOnly": "npm run lint && npm run typecheck && npm run test && npm run dist",
-    "release": "release-it",
-    "release:beta": "release-it --config=.release-it.beta.json",
+    "release:alpha": "release-it --config=config/release-it/alpha.json",
+    "release:beta": "release-it --config=config/release-it/beta.json",
     "release:dry": "release-it --dry-run",
+    "release:rc": "release-it --config=config/release-it/rc.json",
+    "release:scripts": "npm run format:check && npm run typecheck && npm run lint && npm run test && npm run build",
+    "release:stable": "release-it --config=config/release-it/stable.json",
     "start": "npm run dev",
-    "test": "NODE_PATH=. jest",
-    "test:coverage": "npm run test -- --coverage",
-    "test:watch": "npm run test -- --watch",
+    "test": "vitest run --config=config/vitest.config.ts",
     "typecheck": "tsc --noEmit"
   },
+  "sideEffects": false,
   "type": "module",
-  "types": "index.d.ts",
-  "version": "3.0.2"
+  "types": "./index.d.ts",
+  "version": "4.0.4"
 }

package/node_modules/pino/CONTRIBUTING.md

@@ -12,10 +12,10 @@ Notice that as long as you don't have commit-access to the project, you have to
 
 There are a few basic ground-rules for contributors:
 
-1. **No `--force` pushes** on `master` or modifying the Git history in any way after a PR has been merged.
-1. **Non-master branches** ought to be used for ongoing work.
+1. **No `--force` pushes** on `main` or modifying the Git history in any way after a PR has been merged.
+1. **Non-main branches** ought to be used for ongoing work.
 1. **Non-trivial changes** ought to be subject to an **internal pull-request** to solicit feedback from other contributors.
-1. All pull-requests for new features **must** target the `master` branch. PRs to fix bugs in LTS releases are also allowed.
+1. All pull-requests for new features **must** target the `main` branch. PRs to fix bugs in LTS releases are also allowed.
 1. Contributors should attempt to adhere to the prevailing code-style.
 1. 100% code coverage
 
@@ -27,4 +27,4 @@ Declaring formal releases remains the prerogative of the project maintainer.
 
 This is an experiment and feedback is welcome! This document may also be subject to pull-requests or changes by contributors where you believe you have something valuable to add or change.
 
------------------------------------------
+-----------------------------------------

package/node_modules/pino/LICENSE

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2016-2024 Matteo Collina, David Mark Clements and the Pino contributors listed at https://github.com/pinojs/pino#the-team and in the README file.
+Copyright (c) 2016-2025 Matteo Collina, David Mark Clements and the Pino contributors listed at <https://github.com/pinojs/pino#the-team> and in the README file.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/node_modules/pino/README.md

@@ -5,7 +5,7 @@
 [![Build Status](https://img.shields.io/github/actions/workflow/status/pinojs/pino/ci.yml)](https://github.com/pinojs/pino/actions)
 [![js-standard-style](https://img.shields.io/badge/code%20style-standard-brightgreen.svg?style=flat)](https://standardjs.com/)
 
-[Very low overhead](#low-overhead) Node.js logger.
+[Very low overhead](#low-overhead) JavaScript logger.
 
 ## Documentation
 
@@ -15,6 +15,7 @@
 * [Redaction ⇗](/docs/redaction.md)
 * [Child Loggers ⇗](/docs/child-loggers.md)
 * [Transports ⇗](/docs/transports.md)
+* [Diagnostics ⇗](/docs/diagnostics.md)
 * [Web Frameworks ⇗](/docs/web.md)
 * [Pretty Printing ⇗](/docs/pretty.md)
 * [Asynchronous Logging ⇗](/docs/asynchronous.md)
@@ -22,6 +23,21 @@
 * [Help ⇗](/docs/help.md)
 * [Long Term Support Policy ⇗](/docs/lts.md)
 
+## Runtimes
+
+### Node.js
+
+Pino is built to run on [Node.js](http://nodejs.org).
+
+### Bare
+
+Pino works on [Bare](https://github.com/holepunchto/bare) with the [`pino-bare`](https://github.com/pinojs/pino-bare) compatability module.
+
+### Pear
+
+Pino works on [Pear](https://docs.pears.com), which is built on [Bare](https://github.com/holepunchto/bare), with the [`pino-bare`](https://github.com/pinojs/pino-bare) compatibility module.
+
+
 ## Install
 
 Using NPM:
@@ -63,7 +79,7 @@ For using Pino with a web framework see:
 * [Pino with Koa](docs/web.md#koa)
 * [Pino with Node core `http`](docs/web.md#http)
 * [Pino with Nest](docs/web.md#nest)
-
+* [Pino with Hono](docs/web.md#hono)
 
 <a name="essentials"></a>
 ## Essentials

package/node_modules/pino/SECURITY.md

@@ -3,6 +3,25 @@
 This document describes the management of vulnerabilities for the
 Pino project and all modules within the Pino organization.
 
+## The Pino Threat Model
+
+Pino is a fast JSON logger for Node.js. Understanding what Pino considers
+a security vulnerability requires understanding its trust boundaries.
+
+Pino's threat model builds upon the
+[Node.js threat model](https://github.com/nodejs/node/blob/main/SECURITY.md#the-nodejs-threat-model).
+We recommend reading that document first, as Pino inherits its trust assumptions.
+
+Pino trusts the applications using it and the environment that it is running in.
+This includes all the application code, the transport, the filesystem and all
+non-externally provided input.
+
+Pino assumes all objects being logged, `logger.info(obj, message)`, are json-serializable.
+Use the `serializers` and `redact` features to sanitize them.
+
+Pino is not hardened against external prototype pollution attacks, but we
+will accept a vulnerability if Pino can be misused to cause a prototype pollution.
+
 ## Reporting vulnerabilities
 
 Individuals who find potential vulnerabilities in Pino are invited

package/node_modules/pino/browser.js

@@ -109,7 +109,9 @@ function pino (opts) {
     transmit,
     serialize,
     asObject: opts.browser.asObject,
+    asObjectBindingsOnly: opts.browser.asObjectBindingsOnly,
     formatters: opts.browser.formatters,
+    reportCaller: opts.browser.reportCaller,
     levels,
     timestamp: getTimeFunction(opts),
     messageKey: opts.messageKey || 'msg',
@@ -118,6 +120,13 @@ function pino (opts) {
   logger.levels = getLevels(opts)
   logger.level = level
 
+  logger.isLevelEnabled = function (level) {
+    if (!this.levels.values[level]) {
+      return false
+    }
+
+    return this.levels.values[level] >= this.levels.values[this.level]
+  }
   logger.setMaxListeners = logger.getMaxListeners =
   logger.emit = logger.addListener = logger.on =
   logger.prependListener = logger.once =
@@ -317,8 +326,23 @@ function createWrap (self, opts, rootLogger, level) {
         argsIsSerialized = true
       }
       if (opts.asObject || opts.formatters) {
-        write.call(proto, asObject(this, level, args, ts, opts))
-      } else write.apply(proto, args)
+        const out = asObject(this, level, args, ts, opts)
+        if (opts.reportCaller && out && out.length > 0 && out[0] && typeof out[0] === 'object') {
+          try {
+            const caller = getCallerLocation()
+            if (caller) out[0].caller = caller
+          } catch (e) {}
+        }
+        write.call(proto, ...out)
+      } else {
+        if (opts.reportCaller) {
+          try {
+            const caller = getCallerLocation()
+            if (caller) args.push(caller)
+          } catch (e) {}
+        }
+        write.apply(proto, args)
+      }
 
       if (opts.transmit) {
         const transmitLevel = opts.transmit.level || self._level
@@ -347,6 +371,10 @@ function asObject (logger, level, args, ts, opts) {
   const argsCloned = args.slice()
   let msg = argsCloned[0]
   const logObject = {}
+
+  let lvl = (logger._childLevel | 0) + 1
+  if (lvl < 1) lvl = 1
+
   if (ts) {
     logObject.time = ts
   }
@@ -358,19 +386,28 @@ function asObject (logger, level, args, ts, opts) {
     logObject.level = logger.levels.values[level]
   }
 
-  let lvl = (logger._childLevel | 0) + 1
-  if (lvl < 1) lvl = 1
-  // deliberate, catching objects, arrays
-  if (msg !== null && typeof msg === 'object') {
-    while (lvl-- && typeof argsCloned[0] === 'object') {
-      Object.assign(logObject, argsCloned.shift())
+  if (opts.asObjectBindingsOnly) {
+    if (msg !== null && typeof msg === 'object') {
+      while (lvl-- && typeof argsCloned[0] === 'object') {
+        Object.assign(logObject, argsCloned.shift())
+      }
     }
-    msg = argsCloned.length ? format(argsCloned.shift(), argsCloned) : undefined
-  } else if (typeof msg === 'string') msg = format(argsCloned.shift(), argsCloned)
-  if (msg !== undefined) logObject[opts.messageKey] = msg
 
-  const formattedLogObject = logObjectFormatter(logObject)
-  return formattedLogObject
+    const formattedLogObject = logObjectFormatter(logObject)
+    return [formattedLogObject, ...argsCloned]
+  } else {
+    // deliberate, catching objects, arrays
+    if (msg !== null && typeof msg === 'object') {
+      while (lvl-- && typeof argsCloned[0] === 'object') {
+        Object.assign(logObject, argsCloned.shift())
+      }
+      msg = argsCloned.length ? format(argsCloned.shift(), argsCloned) : undefined
+    } else if (typeof msg === 'string') msg = format(argsCloned.shift(), argsCloned)
+    if (msg !== undefined) logObject[opts.messageKey] = msg
+
+    const formattedLogObject = logObjectFormatter(logObject)
+    return [formattedLogObject]
+  }
 }
 
 function applySerializers (args, serialize, serializers, stdErrSerialize) {
@@ -482,3 +519,29 @@ function pfGlobalThisOrFallback () {
 
 module.exports.default = pino
 module.exports.pino = pino
+
+// Attempt to extract the user callsite (file:line:column)
+/* istanbul ignore next */
+function getCallerLocation () {
+  const stack = (new Error()).stack
+  if (!stack) return null
+  const lines = stack.split('\n')
+  for (let i = 1; i < lines.length; i++) {
+    const l = lines[i].trim()
+    // skip frames from this file and internals
+    if (/(^at\s+)?(createWrap|LOG|set\s*\(|asObject|Object\.apply|Function\.apply)/.test(l)) continue
+    if (l.indexOf('browser.js') !== -1) continue
+    if (l.indexOf('node:internal') !== -1) continue
+    if (l.indexOf('node_modules') !== -1) continue
+    // try formats like: at func (file:line:col) or at file:line:col
+    let m = l.match(/\((.*?):(\d+):(\d+)\)/)
+    if (!m) m = l.match(/at\s+(.*?):(\d+):(\d+)/)
+    if (m) {
+      const file = m[1]
+      const line = m[2]
+      const col = m[3]
+      return file + ':' + line + ':' + col
+    }
+  }
+  return null
+}

package/node_modules/pino/build/sync-version.js

@@ -1,6 +1,21 @@
+'use strict'
+
 const fs = require('node:fs')
 const path = require('node:path')
-const { version } = require('../package.json')
+let { version } = require('../package.json')
+
+let passedVersion = process.argv[2]
+
+if (passedVersion) {
+  passedVersion = passedVersion.trim().replace(/^v/, '')
+  if (version !== passedVersion) {
+    console.log(`Syncing version from ${version} to ${passedVersion}`)
+    version = passedVersion
+    const packageJson = require('../package.json')
+    packageJson.version = version
+    fs.writeFileSync(path.resolve('./package.json'), JSON.stringify(packageJson, null, 2) + '\n', { encoding: 'utf-8' })
+  }
+}
 
 const metaContent = `'use strict'