vite-plus 0.2.7 → 0.2.9

package/dist/{tsconfig-Jia2vgMG.js → prompts-CHz_98bJ.js}

@@ -1,12 +1,13 @@
-import { n as __require, r as __toESM, t as __commonJSMin } from "./rolldown-runtime-C7HZzL1F.js";
-import { l as VITE_PLUS_VERSION, t as BASEURL_TSCONFIG_FIX_PACKAGE, u as createBaseUrlTsconfigFixArgs } from "./constants-BsuzPowC.js";
-import { t as accent } from "./terminal-uTv0ZaMr.js";
-import { a as writeJsonFile, c as parse, i as readJsonFile, o as applyEdits, s as modify } from "./json-DiRs8ceZ.js";
-import { t as require_dist } from "./dist-CKz3vcoG.js";
+import { n as __require, r as __toESM, t as __commonJSMin } from "./rolldown-runtime-CMFfr-1z.js";
+import { t as accent } from "./terminal-Bz-ps6rJ.js";
+import { u as VITE_PLUS_VERSION } from "./constants-CG513DRa.js";
+import { a as writeJsonFile, i as readJsonFile } from "./json-qlK6UH0r.js";
+import { t as require_dist } from "./dist-BDYZP12R.js";
 import path from "node:path";
 import { downloadPackageManager } from "../binding/index.js";
-import fs from "node:fs";
 import { stripVTControlCharacters, styleText } from "node:util";
+import fs from "node:fs";
+import { constants as constants$1 } from "node:os";
 import process$1, { stdin, stdout } from "node:process";
 import * as l from "node:readline";
 import l__default from "node:readline";
@@ -123,7 +124,8 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const getNotFoundError = (cmd) => Object.assign(/* @__PURE__ */ new Error(`not found: ${cmd}`), { code: "ENOENT" });
 	const getPathInfo = (cmd, opt) => {
 		const colon = opt.colon || COLON;
-		const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [...isWindows ? [process.cwd()] : [], ...(opt.path || process.env.PATH || "").split(colon)];
+		const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [...isWindows ? [process.cwd()] : [], ...(opt.path || process.env.PATH || 
+		/* istanbul ignore next: very unusual */ "").split(colon)];
 		const pathExtExe = isWindows ? opt.pathExt || process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM" : "";
 		const pathExt = isWindows ? pathExtExe.split(colon) : [""];
 		if (isWindows) {
@@ -155,8 +157,10 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (ii === pathExt.length) return resolve(step(i + 1));
 			const ext = pathExt[ii];
 			isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
-				if (!er && is) if (opt.all) found.push(p + ext);
-				else return resolve(p + ext);
+				if (!er && is) {
+					if (opt.all) found.push(p + ext);
+					else return resolve(p + ext);
+				}
 				return resolve(subStep(p, i, ii + 1));
 			});
 		});
@@ -174,8 +178,10 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			for (let j = 0; j < pathExt.length; j++) {
 				const cur = p + pathExt[j];
 				try {
-					if (isexe.sync(cur, { pathExt: pathExtExe })) if (opt.all) found.push(cur);
-					else return cur;
+					if (isexe.sync(cur, { pathExt: pathExtExe })) {
+						if (opt.all) found.push(cur);
+						else return cur;
+					}
 				} catch (ex) {}
 			}
 		}
@@ -411,6 +417,11 @@ var require_cross_spawn = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 //#endregion
 //#region src/utils/command.ts
 var import_cross_spawn = /* @__PURE__ */ __toESM(require_cross_spawn(), 1);
+function exitCodeFromClose(code, signal) {
+	if (code !== null) return code;
+	const signalNumber = signal && constants$1.signals[signal];
+	return signalNumber ? 128 + signalNumber : 1;
+}
 async function runCommandSilently(options) {
 	const child = (0, import_cross_spawn.default)(options.command, options.args, {
 		stdio: [
@@ -436,14 +447,14 @@ async function runCommandSilently(options) {
 		child.stderr?.on("data", (data) => {
 			stderr.push(data);
 		});
-		child.on("close", (code) => {
+		child.on("close", (code, signal) => {
 			clearTimeout(timer);
 			if (timedOut) {
 				reject(/* @__PURE__ */ new Error(`Command timed out after ${options.timeoutMs}ms: ${options.command}`));
 				return;
 			}
 			resolve({
-				exitCode: code ?? 0,
+				exitCode: exitCodeFromClose(code, signal),
 				stdout: Buffer.concat(stdout),
 				stderr: Buffer.concat(stderr)
 			});
@@ -461,8 +472,8 @@ async function runCommand$1(options) {
 		env: options.envs
 	});
 	return new Promise((resolve, reject) => {
-		child.on("close", (code) => {
-			resolve({ exitCode: code ?? 0 });
+		child.on("close", (code, signal) => {
+			resolve({ exitCode: exitCodeFromClose(code, signal) });
 		});
 		child.on("error", (err) => {
 			reject(err);
@@ -1162,9 +1173,7 @@ var a = class extends V {
 				case "right":
 					this.cursor = findCursor(this.cursor, 1, this.options);
 					break;
-				case "space":
-					this.toggleValue();
-					break;
+				case "space": this.toggleValue();
 			}
 		});
 	}
@@ -1189,9 +1198,7 @@ let n$1 = class n extends V {
 					this.cursor = findCursor(this.cursor, -1, this.options);
 					break;
 				case "down":
-				case "right":
-					this.cursor = findCursor(this.cursor, 1, this.options);
-					break;
+				case "right": this.cursor = findCursor(this.cursor, 1, this.options);
 			}
 			this.changeValue();
 		});
@@ -1683,7 +1690,7 @@ const limitOptions = (params) => {
 };
 /**
 * Render-milestone markers for the PTY snapshot suite
-* (crates/vite_cli_snapshots): invisible window-title updates the runner
+* (crates/vp_cli_snapshots): invisible window-title updates the runner
 * synchronizes on via `expect-milestone` interactions. Emission is gated on
 * `VP_EMIT_MILESTONES=1`, which only the runner sets; real terminals and
 * piped output never see these markers as content (they only update the
@@ -2024,8 +2031,10 @@ const spinner = ({ indicator = "dots", onCancel, output = process.stdout, cancel
 		const elapsedMs = getElapsedMs();
 		const step = code === 0 ? completeColor(S_STEP_SUBMIT) : code === 1 ? import_picocolors.default.red(S_STEP_CANCEL) : import_picocolors.default.red(S_STEP_ERROR);
 		_message = msg ?? _message;
-		if (!silent) if (indicator === "timer") output.write(`${step} ${_message} ${formatTimer(elapsedMs)}\n\n`);
-		else output.write(`${step} ${_message}\n\n`);
+		if (!silent) {
+			if (indicator === "timer") output.write(`${step} ${_message} ${formatTimer(elapsedMs)}\n\n`);
+			else output.write(`${step} ${_message}\n\n`);
+		}
 		if (!preserveElapsed) _elapsedMs = 0;
 		_prevMessage = void 0;
 		clearHooks();
@@ -2167,14 +2176,12 @@ const text = (opts) => {
 //#endregion
 //#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
-	const SEMVER_SPEC_VERSION = "2.0.0";
-	const MAX_LENGTH = 256;
-	const MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || 9007199254740991;
 	module.exports = {
-		MAX_LENGTH,
+		MAX_LENGTH: 256,
 		MAX_SAFE_COMPONENT_LENGTH: 16,
-		MAX_SAFE_BUILD_LENGTH: MAX_LENGTH - 6,
-		MAX_SAFE_INTEGER,
+		MAX_SAFE_BUILD_LENGTH: 250,
+		MAX_SAFE_INTEGER: Number.MAX_SAFE_INTEGER || 
+		/* istanbul ignore next */ 9007199254740991,
 		RELEASE_TYPES: [
 			"major",
 			"premajor",
@@ -2184,7 +2191,7 @@ var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			"prepatch",
 			"prerelease"
 		],
-		SEMVER_SPEC_VERSION,
+		SEMVER_SPEC_VERSION: "2.0.0",
 		FLAG_INCLUDE_PRERELEASE: 1,
 		FLAG_LOOSE: 2
 	};
@@ -2322,9 +2329,10 @@ var require_semver$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class SemVer {
 		constructor(version, options) {
 			options = parseOptions(options);
-			if (version instanceof SemVer) if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
-			else version = version.version;
-			else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+			if (version instanceof SemVer) {
+				if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
+				else version = version.version;
+			} else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
 			if (version.length > MAX_LENGTH) throw new TypeError(`version is longer than ${MAX_LENGTH} characters`);
 			debug("SemVer", version, options);
 			this.options = options;
@@ -2777,9 +2785,7 @@ var require_truncate = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 				version.minor = 0;
 				version.patch = 0;
 				break;
-			case "minor":
-				version.patch = 0;
-				break;
+			case "minor": version.patch = 0;
 		}
 		return version.format();
 	};
@@ -2828,8 +2834,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class Range {
 		constructor(range, options) {
 			options = parseOptions(options);
-			if (range instanceof Range) if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
-			else return new Range(range.raw, options);
+			if (range instanceof Range) {
+				if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
+				else return new Range(range.raw, options);
+			}
 			if (range instanceof Comparator) {
 				this.raw = range.value;
 				this.set = [[range]];
@@ -2999,18 +3007,21 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			let ret;
 			if (isX(M)) ret = "";
 			else if (isX(m)) ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
-			else if (isX(p)) if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
-			else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
-			else if (pr) {
+			else if (isX(p)) {
+				if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+			} else if (pr) {
 				debug("replaceCaret pr", pr);
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
 			} else {
 				debug("no pr");
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
 			}
 			debug("caret return", ret);
 			return ret;
@@ -3032,9 +3043,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			const anyX = xp;
 			if (gtlt === "=" && anyX) gtlt = "";
 			pr = options.includePrerelease ? "-0" : "";
-			if (xM) if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
-			else ret = "*";
-			else if (gtlt && anyX) {
+			if (xM) {
+				if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
+				else ret = "*";
+			} else if (gtlt && anyX) {
 				if (xm) m = 0;
 				p = 0;
 				if (gtlt === ">") {
@@ -3108,8 +3120,10 @@ var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		constructor(comp, options) {
 			options = parseOptions(options);
-			if (comp instanceof Comparator) if (comp.loose === !!options.loose) return comp;
-			else comp = comp.value;
+			if (comp instanceof Comparator) {
+				if (comp.loose === !!options.loose) return comp;
+				else comp = comp.value;
+			}
 			comp = comp.trim().split(/\s+/).join(" ");
 			debug("comparator", comp, options);
 			this.options = options;
@@ -3429,11 +3443,15 @@ var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const minimumVersion = [new Comparator(">=0.0.0")];
 	const simpleSubset = (sub, dom, options) => {
 		if (sub === dom) return true;
-		if (sub.length === 1 && sub[0].semver === ANY) if (dom.length === 1 && dom[0].semver === ANY) return true;
-		else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
-		else sub = minimumVersion;
-		if (dom.length === 1 && dom[0].semver === ANY) if (options.includePrerelease) return true;
-		else dom = minimumVersion;
+		if (sub.length === 1 && sub[0].semver === ANY) {
+			if (dom.length === 1 && dom[0].semver === ANY) return true;
+			else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
+			else sub = minimumVersion;
+		}
+		if (dom.length === 1 && dom[0].semver === ANY) {
+			if (options.includePrerelease) return true;
+			else dom = minimumVersion;
+		}
 		const eqSet = /* @__PURE__ */ new Set();
 		let gt, lt;
 		for (const c of sub) if (c.operator === ">" || c.operator === ">=") gt = higherGT(gt, c, options);
@@ -3677,6 +3695,42 @@ function parseBunUntrusted(output) {
 		return match ? match[1] : null;
 	});
 }
+/**
+* npm >= 12 skips dependency install scripts that the `allowScripts` allowlist
+* in package.json does not cover, and reports them on stderr:
+*
+* ```
+* npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts:
+* npm warn install-scripts   core-js@3.49.0 (postinstall: node -e "try{require('./postinstall')}catch(e){}")
+* npm warn install-scripts   esbuild@0.28.1 (postinstall: node install.js)
+* ```
+*
+* npm 11.16 - 11.x print a similar warning ("install scripts not yet covered by
+* allowScripts") but still run the scripts, so only the npm 12 "blocked" wording
+* is parsed.
+*/
+const NPM_BLOCKED_SCRIPTS_MARKER = "install scripts blocked because they are not covered by allowScripts";
+/**
+* A blocked-package entry line: `npm warn install-scripts   <spec> (<lifecycle>:
+* <command>)`. Anchoring on the lifecycle name keeps the count line ("2 packages
+* had install scripts blocked ...") and the trailing hint line from matching.
+*/
+const NPM_BLOCKED_ENTRY = /^npm warn install-scripts\s+(\S+) \((?:pre|post)?install:/u;
+/**
+* Parse the package names npm >= 12 reports as having blocked install scripts
+* from captured `npm install` / `npm ci` output. Strips version suffixes and
+* dedupes while preserving first-seen order. Returns `[]` when the warning is
+* absent (including the npm 11.x advisory variant, where scripts still run).
+*/
+function parseNpmBlockedScripts(output) {
+	if (!output) return [];
+	const clean = stripVTControlCharacters(output);
+	if (!clean.includes(NPM_BLOCKED_SCRIPTS_MARKER)) return [];
+	return dedupeNames(clean.split("\n"), (rawLine) => {
+		const match = rawLine.trim().match(NPM_BLOCKED_ENTRY);
+		return match ? stripPackageVersion(match[1]) : null;
+	});
+}
 const YARN_DISABLED_BUILDS_MARKER = "lists build scripts, but all build scripts have been disabled";
 /**
 * Yarn (Berry) gates build scripts when `enableScripts` is false: each gated
@@ -3705,12 +3759,14 @@ function yarnDescriptorName(descriptor) {
 /**
 * Parse the gated build-script package names from an install log, dispatching on
 * the package manager: pnpm prints `Ignored build scripts:`, yarn prints
-* `... build scripts have been disabled`. bun is not parsed here (its blocked
-* packages are queried separately via `bun pm untrusted`).
+* `... build scripts have been disabled`, npm >= 12 prints `... install scripts
+* blocked ...`. bun is not parsed here (its blocked packages are queried
+* separately via `bun pm untrusted`).
 */
 function parseInstallGatedBuilds(output, packageManager) {
 	if (packageManager === PackageManager.pnpm) return parseIgnoredBuilds(output);
 	if (packageManager === PackageManager.yarn) return parseYarnDisabledBuilds(output);
+	if (packageManager === PackageManager.npm) return parseNpmBlockedScripts(output);
 	return [];
 }
 /**
@@ -3755,14 +3811,15 @@ function pnpmSupportsPositionalApprove(version) {
 const GATED_BUILD_PACKAGE_MANAGERS = /* @__PURE__ */ new Set([
 	PackageManager.pnpm,
 	PackageManager.bun,
-	PackageManager.yarn
+	PackageManager.yarn,
+	PackageManager.npm
 ]);
 /**
 * Narrow a package manager's gated builds down to the ones worth surfacing
 * during `vp create`: packages the generated project depends on directly.
 * Transitive gated builds (e.g. `esbuild` pulled in by Vite) are noise the user
 * did not choose, so they are dropped. Returns `[]` for package managers that
-* do not gate build scripts (npm, yarn classic), since there is nothing to
+* do not gate build scripts (npm < 12, yarn classic), since there is nothing to
 * approve.
 */
 function resolveApproveBuildTargets(projectDir, pendingBuilds, packageManager) {
@@ -3780,15 +3837,15 @@ function resolveApproveBuildTargets(projectDir, pendingBuilds, packageManager) {
 * Enumerate the packages whose build scripts a package manager gated during the
 * install, as raw names (still unfiltered by direct dependency).
 *
-* - pnpm and yarn report them in their install output, so the names are parsed
-*   there (see {@link parseInstallGatedBuilds}) and passed in via
+* - pnpm, yarn, and npm >= 12 report them in their install output, so the names
+*   are parsed there (see {@link parseInstallGatedBuilds}) and passed in via
 *   `pendingBuildsFromInstall`.
 * - bun exits 0 and only prints a count, so `bun pm untrusted` is queried here.
 *
 * Other package managers run build scripts by default and return `[]`.
 */
 async function detectGatedBuilds(installCwd, packageManager, pendingBuildsFromInstall) {
-	if (packageManager === PackageManager.pnpm || packageManager === PackageManager.yarn) return pendingBuildsFromInstall ?? [];
+	if (packageManager === PackageManager.pnpm || packageManager === PackageManager.yarn || packageManager === PackageManager.npm) return pendingBuildsFromInstall ?? [];
 	if (packageManager === PackageManager.bun) {
 		const { exitCode, stdout, stderr } = await runCommandSilently({
 			command: process.env.VP_CLI_BIN ?? "vp",
@@ -3815,16 +3872,17 @@ function printApproveBuildsGuidance(targets, packageManager) {
 		log.info(`These dependencies may not work until built. Enable them in the workspace root package.json (${accent("dependenciesMeta.<pkg>.built: true")}) and reinstall, or re-create with ${accent("--approve-builds")}.`);
 		return;
 	}
-	const command = packageManager === PackageManager.bun ? `vp pm approve-builds ${targets.join(" ")}` : "vp pm approve-builds";
+	const command = packageManager === PackageManager.bun || packageManager === PackageManager.npm ? `vp pm approve-builds ${targets.join(" ")}` : "vp pm approve-builds";
 	log.info(`These dependencies may not work until built. Run ${accent(command)} in the project to approve them, or re-create with ${accent("--approve-builds")}.`);
 }
 /**
 * Run a `vp` build/approval command and report the outcome through a spinner.
-* On failure the approval has still been recorded (pnpm/bun config or yarn's
-* `dependenciesMeta`), so the retry hint points back at `vp install`. Returns
+* On failure the approval has still been recorded (pnpm/bun/npm config or
+* yarn's `dependenciesMeta`), so the retry hint points back at `retryCommand`
+* (`vp install` unless the package manager needs an explicit rebuild). Returns
 * `true` when the command succeeded, `false` when the build exited non-zero.
 */
-async function runBuildAndReport(args, cwd, packages, interactive, silent, extraEnv) {
+async function runBuildAndReport(args, cwd, packages, interactive, silent, extraEnv, retryCommand = "vp install") {
 	const spinner = silent ? getSilentSpinner() : getSpinner(interactive);
 	spinner.start(`Building ${packages.join(", ")}...`);
 	const { exitCode, stdout, stderr } = await runCommandSilently({
@@ -3843,10 +3901,42 @@ async function runBuildAndReport(args, cwd, packages, interactive, silent, extra
 	spinner.stop(`Build failed for ${packages.join(", ")}`);
 	const output = `${stdout.toString()}\n${stderr.toString()}`.trim();
 	if (output) log.info(lastLines(output, 20));
-	log.warn(`Build scripts failed for ${accent(packages.join(", "))}. They were approved; fix the build toolchain and run ${accent("vp install")} to retry.`);
+	log.warn(`Build scripts failed for ${accent(packages.join(", "))}. They were approved; fix the build toolchain and run ${accent(retryCommand)} to retry.`);
 	return false;
 }
 /**
+* Approve gated install scripts for npm >= 12, then run them. npm's approval
+* (`npm approve-scripts`, via `vp pm approve-builds`) only records the
+* `allowScripts` allowlist in package.json: scripts the install already skipped
+* do not run on approval, and a plain reinstall short-circuits on the
+* up-to-date tree without running them either. `npm rebuild` is what executes
+* the newly approved scripts, so approval and rebuild are two steps.
+*/
+async function approveNpmScripts(installCwd, packages, interactive, silent) {
+	const approveCommand = `vp pm approve-builds ${packages.join(" ")}`;
+	const { exitCode, stdout, stderr } = await runCommandSilently({
+		command: process.env.VP_CLI_BIN ?? "vp",
+		args: [
+			"pm",
+			"approve-builds",
+			...packages
+		],
+		cwd: installCwd,
+		envs: process.env
+	});
+	if (exitCode !== 0) {
+		const output = `${stdout.toString()}\n${stderr.toString()}`.trim();
+		if (output) log.info(lastLines(output, 20));
+		log.warn(`Approving build scripts failed for ${accent(packages.join(", "))}. Run ${accent(approveCommand)} in the project to retry.`);
+		return false;
+	}
+	return runBuildAndReport([
+		"pm",
+		"rebuild",
+		...packages
+	], installCwd, packages, interactive, silent, void 0, `vp pm rebuild ${packages.join(" ")}`);
+}
+/**
 * Mark each package as build-allowed in yarn's `dependenciesMeta[<pkg>].built`,
 * preserving existing metadata. Guards against a non-object container or
 * per-package value so a hand-authored scalar doesn't corrupt package.json.
@@ -3887,8 +3977,8 @@ async function approveYarnBuilds(installCwd, packages, interactive, silent) {
 	return runBuildAndReport(["install"], installCwd, packages, interactive, silent, { YARN_ENABLE_IMMUTABLE_INSTALLS: "false" });
 }
 /**
-* Surface pnpm's gated build scripts after a `vp create` install and let the
-* user act on them:
+* Surface the package manager's gated build scripts after a `vp create` install
+* and let the user act on them:
 * - `--approve-builds`: approve + build every target, no prompt.
 * - interactive: a default-off multiselect so each package is approved
 *   individually (pnpm gates them for security, so nothing is opt-in by
@@ -3921,6 +4011,7 @@ async function approveBuilds(options) {
 		return true;
 	}
 	if (packageManager === PackageManager.yarn) return approveYarnBuilds(cwd, selected, interactive, silent);
+	if (packageManager === PackageManager.npm) return approveNpmScripts(cwd, selected, interactive, silent);
 	if (packageManager === PackageManager.pnpm && !pnpmSupportsPositionalApprove(packageManagerVersion)) {
 		printApproveBuildsGuidance(selected, packageManager);
 		return !(autoApprove && !interactive);
@@ -3935,10 +4026,12 @@ async function approveBuilds(options) {
 //#region src/utils/yaml.ts
 var import_dist = require_dist();
 function readYamlFile(file) {
-	return (0, import_dist.parse)(fs.readFileSync(file, "utf-8"));
+	const content = fs.readFileSync(file, "utf-8");
+	return (0, import_dist.parse)(content);
 }
 function editYamlFile(file, callback) {
-	const doc = (0, import_dist.parseDocument)(fs.readFileSync(file, "utf-8"));
+	const content = fs.readFileSync(file, "utf-8");
+	const doc = (0, import_dist.parseDocument)(content);
 	callback(doc);
 	fs.writeFileSync(file, doc.toString({ singleQuote: true }), "utf-8");
 }
@@ -4226,7 +4319,7 @@ async function promptGitHooks(options) {
 	if (options.hooks === true) return true;
 	if (options.interactive) {
 		const selected = await confirm({
-			message: "Set up pre-commit hooks to run formatting, linting, and type checking with auto-fixes?",
+			message: options.message ?? "Set up pre-commit hooks to run formatting, linting, and type checking with auto-fixes?",
 			initialValue: true
 		});
 		if (isCancel(selected)) {
@@ -4261,147 +4354,4 @@ function defaultInteractive() {
 	return !process.env.CI && process.stdin.isTTY;
 }
 //#endregion
-//#region src/utils/tsconfig.ts
-/**
-* Check if tsconfig.json has compilerOptions.baseUrl set.
-* oxlint's TypeScript checker (tsgolint) does not support baseUrl,
-* so typeAware/typeCheck must be disabled when it is present.
-*/
-function hasBaseUrlInTsconfigFile(filePath) {
-	try {
-		return parse(fs.readFileSync(filePath, "utf-8"))?.compilerOptions?.baseUrl != null;
-	} catch {
-		return false;
-	}
-}
-const TSCONFIG_FILE_RE = /^tsconfig(\.[\w-]+)?\.json$/i;
-function findTsconfigFiles(projectPath) {
-	try {
-		return fs.readdirSync(projectPath).filter((name) => TSCONFIG_FILE_RE.test(name)).map((name) => path.join(projectPath, name));
-	} catch {
-		return [];
-	}
-}
-function hasBaseUrlInTsconfig(projectPath) {
-	return findTsconfigFiles(projectPath).some((filePath) => hasBaseUrlInTsconfigFile(filePath));
-}
-function findTsconfigFilesWithBaseUrl(projectPath) {
-	return findTsconfigFiles(projectPath).filter((filePath) => hasBaseUrlInTsconfigFile(filePath));
-}
-async function confirmBaseUrlFix(interactive) {
-	if (!interactive) return true;
-	const command = [BASEURL_TSCONFIG_FIX_PACKAGE, ...createBaseUrlTsconfigFixArgs("<tsconfig path>")].join(" ");
-	const confirmed = await confirm({
-		message: "Your tsconfig contains `baseUrl`, which prevents enabling type-aware linting.\n  " + styleText("gray", "`baseUrl` is deprecated in TypeScript 6.0 and removed in TypeScript 7.0.") + `\n  Download and run the external \`${BASEURL_TSCONFIG_FIX_PACKAGE}\` fixer now?\n  ` + styleText("gray", `Equivalent command: \`vp dlx ${command}\``),
-		initialValue: true
-	});
-	if (isCancel(confirmed)) cancelAndExit();
-	return confirmed;
-}
-async function fixBaseUrlInTsconfig(projectPath, options) {
-	const files = findTsconfigFilesWithBaseUrl(projectPath);
-	if (files.length === 0) return "not-needed";
-	if (!(options?.confirmed ?? await confirmBaseUrlFix(options?.interactive ?? false))) {
-		options?.onStatus?.("declined", projectPath);
-		return "declined";
-	}
-	try {
-		for (const filePath of files) {
-			const fixArgs = createBaseUrlTsconfigFixArgs(path.relative(projectPath, filePath) || filePath);
-			if (!options?.silent) log.info(`Running vp dlx ${BASEURL_TSCONFIG_FIX_PACKAGE} ${fixArgs.join(" ")}`);
-			const result = await runCommandSilently({
-				command: process.env.VP_CLI_BIN ?? "vp",
-				args: [
-					"dlx",
-					BASEURL_TSCONFIG_FIX_PACKAGE,
-					...fixArgs
-				],
-				cwd: projectPath,
-				envs: process.env
-			});
-			if (result.exitCode !== 0) {
-				if (!options?.silent) {
-					const output = `${result.stdout.toString()}${result.stderr.toString()}`.trim();
-					if (output) log.warn(output);
-				}
-				options?.onStatus?.("failed", projectPath);
-				return "failed";
-			}
-		}
-		if (hasBaseUrlInTsconfig(projectPath)) {
-			if (!options?.silent) log.warn("tsconfig still contains baseUrl after running the fixer.");
-			options?.onStatus?.("failed", projectPath);
-			return "failed";
-		}
-	} catch (error) {
-		if (!options?.silent && error instanceof Error) log.warn(error.message);
-		options?.onStatus?.("failed", projectPath);
-		return "failed";
-	}
-	options?.onStatus?.("fixed", projectPath);
-	return "fixed";
-}
-function removeDeprecatedTsconfigFalseOption(filePath, optionName) {
-	let text;
-	try {
-		text = fs.readFileSync(filePath, "utf-8");
-	} catch {
-		return false;
-	}
-	if (parse(text)?.compilerOptions?.[optionName] !== false) return false;
-	const edits = modify(text, ["compilerOptions", optionName], void 0, {});
-	if (edits.length === 0) return false;
-	const newText = applyEdits(text, edits);
-	fs.writeFileSync(filePath, newText);
-	return true;
-}
-const TSCONFIG_TYPE_REPLACEMENTS = { "tsdown/client": "vite-plus/pack/client" };
-function hasTypesToRewriteInTsconfig(filePath) {
-	let text;
-	try {
-		text = fs.readFileSync(filePath, "utf-8");
-	} catch {
-		return false;
-	}
-	const types = parse(text)?.compilerOptions?.types;
-	return Array.isArray(types) && types.some((t) => typeof t === "string" && t in TSCONFIG_TYPE_REPLACEMENTS);
-}
-function hasVitestTypesInTsconfig(filePath) {
-	let text;
-	try {
-		text = fs.readFileSync(filePath, "utf-8");
-	} catch {
-		return false;
-	}
-	const types = parse(text)?.compilerOptions?.types;
-	return Array.isArray(types) && types.some((type) => typeof type === "string" ? type === "vitest" || type.startsWith("vitest/") : false);
-}
-function rewriteTypesInTsconfig(filePath) {
-	let text;
-	try {
-		text = fs.readFileSync(filePath, "utf-8");
-	} catch {
-		return false;
-	}
-	const types = parse(text)?.compilerOptions?.types;
-	if (!Array.isArray(types)) return false;
-	const toReplace = types.map((t, i) => typeof t === "string" && t in TSCONFIG_TYPE_REPLACEMENTS ? {
-		i,
-		newVal: TSCONFIG_TYPE_REPLACEMENTS[t]
-	} : null).filter((x) => x !== null);
-	if (toReplace.length === 0) return false;
-	let currentText = text;
-	for (let j = toReplace.length - 1; j >= 0; j--) {
-		const { i, newVal } = toReplace[j];
-		const edits = modify(currentText, [
-			"compilerOptions",
-			"types",
-			i
-		], newVal, {});
-		if (edits.length > 0) currentText = applyEdits(currentText, edits);
-	}
-	fs.writeFileSync(filePath, currentText);
-	return true;
-}
-//#endregion
-export { intro as A, runCommandSilently as B, resolveApproveBuildTargets as C, require_semver as D, PackageManager as E, spinner as F, text as I, require_picocolors as L, multiselect as M, outro as N, cancel as O, select as P, isCancel as R, detectGatedBuilds as S, DependencyType as T, require_cross_spawn as V, upgradeYarn as _, hasTypesToRewriteInTsconfig as a, scalarString as b, rewriteTypesInTsconfig as c, downloadPackageManager$1 as d, promptGitHooks as f, selectPackageManager as g, runViteInstall as h, hasBaseUrlInTsconfig as i, log as j, confirm as k, cancelAndExit as l, runViteFmt as m, findTsconfigFiles as n, hasVitestTypesInTsconfig as o, resolveGitInit as p, fixBaseUrlInTsconfig as r, removeDeprecatedTsconfigFalseOption as s, confirmBaseUrlFix as t, defaultInteractive as u, editYamlFile as v, getSpinner as w, approveBuilds as x, readYamlFile as y, runCommand$1 as z };
+export { isCancel as A, log as C, spinner as D, select as E, runCommandSilently as M, require_cross_spawn as N, text as O, intro as S, outro as T, getSpinner as _, resolveGitInit as a, require_semver as b, selectPackageManager as c, readYamlFile as d, scalarString as f, getSilentSpinner as g, resolveApproveBuildTargets as h, promptGitHooks as i, runCommand$1 as j, require_picocolors as k, upgradeYarn as l, detectGatedBuilds as m, defaultInteractive as n, runViteFmt as o, approveBuilds as p, downloadPackageManager$1 as r, runViteInstall as s, cancelAndExit as t, editYamlFile as u, DependencyType as v, multiselect as w, confirm as x, PackageManager as y };

package/dist/{resolve-vite-config-BiuLZnn8.js → resolve-vite-config-Dmeyeyj-.js}

@@ -1,15 +1,8 @@
-import { u as withConfigMetadataResolution } from "./define-config-C2KfLHpC.js";
+import { s as VITE_CONFIG_FILES } from "./constants-CG513DRa.js";
+import { u as withConfigMetadataResolution } from "./define-config-CV4bQG_8.js";
 import path from "node:path";
 import fs from "node:fs";
 //#region src/resolve-vite-config.ts
-const VITE_CONFIG_FILES = [
-	"vite.config.js",
-	"vite.config.mjs",
-	"vite.config.ts",
-	"vite.config.cjs",
-	"vite.config.mts",
-	"vite.config.cts"
-];
 /**
 * Find a vite config file by walking up from `startDir` to `stopDir`.
 * Returns the absolute path of the first config file found, or undefined.

package/dist/{rolldown-runtime-C7HZzL1F.js → rolldown-runtime-CMFfr-1z.js}

@@ -17,7 +17,7 @@ var __copyProps = (to, from, except, desc) => {
 	}
 	return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
 	value: mod,
 	enumerable: true
 }) : target, mod));