vite-plus 0.2.8 → 0.2.9

package/dist/migration/bin.js

@@ -1,19 +1,19 @@
 import { r as __toESM } from "../rolldown-runtime-CMFfr-1z.js";
-import { a as printHeader, c as renderCliDoc, i as muted, r as log, s as warnMsg, t as accent } from "../terminal-CrqqK8WT.js";
-import { d as isForceOverrideMode, l as VITE_PLUS_VERSION } from "../constants-BppDcRc1.js";
-import { A as isCancel, C as log$1, D as spinner, E as select, M as runCommandSilently, T as outro, c as selectPackageManager, i as promptGitHooks, l as upgradeYarn, n as defaultInteractive, o as runViteFmt, r as downloadPackageManager, s as runViteInstall, t as cancelAndExit, v as PackageManager, x as confirm, y as require_semver } from "../prompts-DYap08te.js";
-import { a as writeJsonFile, i as readJsonFile } from "../json-BU88uu6o.js";
-import { i as hasBaseUrlInTsconfig, r as fixBaseUrlInTsconfig, t as confirmBaseUrlFix } from "../tsconfig-CVUKLfL8.js";
+import { a as muted, c as warnMsg, i as log, l as renderCliDoc, o as printHeader, r as formatDuration, t as accent } from "../terminal-Bz-ps6rJ.js";
+import { f as isForceOverrideMode, u as VITE_PLUS_VERSION } from "../constants-CG513DRa.js";
+import { A as isCancel, C as log$1, D as spinner, E as select, M as runCommandSilently, T as outro, b as require_semver, c as selectPackageManager, i as promptGitHooks, l as upgradeYarn, n as defaultInteractive, o as runViteFmt, r as downloadPackageManager, s as runViteInstall, t as cancelAndExit, x as confirm, y as PackageManager } from "../prompts-CHz_98bJ.js";
+import { a as writeJsonFile, i as readJsonFile } from "../json-qlK6UH0r.js";
+import { i as hasBaseUrlInTsconfig, r as fixBaseUrlInTsconfig, t as confirmBaseUrlFix } from "../tsconfig-7v_BHagU.js";
 import { t as lib_default } from "../lib-L3DWSRQp.js";
-import { a as readNearestPackageJson, i as hasVitePlusDependency } from "../package-hV-77cBb.js";
-import { f as displayRelative, i as selectAgentTargetPaths, n as detectAgentConflicts, r as detectExistingAgentTargetPaths, s as writeAgentInstructions } from "../agent-CI79DuSy.js";
+import { a as readNearestPackageJson, i as hasVitePlusDependency } from "../package-B4T8RGMG.js";
+import { i as selectAgentTargetPaths, l as displayRelative, n as detectAgentConflicts, r as detectExistingAgentTargetPaths, s as writeAgentInstructions } from "../agent-DQU8uS6P.js";
 import { n as addMigrationWarning, r as createMigrationReport } from "../report-BS7ULx7A.js";
-import { A as addFrameworkShim, B as detectIncompatibleEslintIntegration, C as ensureVitePlusBootstrap, E as detectWorkspace, F as migratePrettierToOxfmt, G as warnPackageLevelEslint, K as checkViteVersion, L as warnPackageLevelPrettier, M as hasFrameworkShim, N as confirmPrettierMigration, P as detectPrettierProject, R as confirmEslintMigration, S as detectVitePlusBootstrapPending, T as detectYarnPnpMode, U as warnIncompatibleEslintIntegration, V as migrateEslintToOxlint, W as warnLegacyEslintConfig, _ as shouldSkipStagedMigrationForHooks, a as writeEditorConfigs, b as mergeViteConfigFiles, c as rewriteStandaloneProject, d as detectNodeVersionManagerFile, f as migrateNodeVersionManagerFile, g as preflightGitHooksSetup, h as installGitHooks, j as detectFramework, l as detectPendingCoreMigration, m as detectLegacyGitHooksMigrationCandidate, o as rewriteMonorepo, q as checkVitestVersion, r as selectEditor, t as detectEditorConflicts, u as finalizeCoreMigrationForExistingVitePlus, w as configureYarnNodeModulesMode, x as collectToolchainVersionChanges, y as injectLintTypeCheckDefaults, z as detectEslintProject } from "../editor-CGWdbLgD.js";
+import { B as warnPackageLevelPrettier, C as mergeViteConfigFiles, D as configureYarnNodeModulesMode, E as ensureVitePlusBootstrap, F as hasFrameworkShim, H as detectEslintProject, I as confirmPrettierMigration, J as warnPackageLevelEslint, K as warnIncompatibleEslintIntegration, L as detectPrettierProject, N as addFrameworkShim, O as detectYarnPnpMode, P as detectFramework, R as migratePrettierToOxfmt, S as injectLintTypeCheckDefaults, T as detectVitePlusBootstrapPending, U as detectIncompatibleEslintIntegration, V as confirmEslintMigration, W as migrateEslintToOxlint, X as checkVitestVersion, Y as checkViteVersion, _ as preflightGitHooksSetup, d as finalizeCoreMigrationForExistingVitePlus, f as detectNodeVersionManagerFile, g as installGitHooks, h as detectLegacyGitHooksMigrationCandidate, i as selectEditor, k as detectWorkspace, l as rewriteStandaloneProject, o as writeEditorConfigs, p as migrateNodeVersionManagerFile, q as warnLegacyEslintConfig, r as isJsonLikeFile, s as rewriteMonorepo, t as detectEditorConflicts, u as detectPendingCoreMigration, v as shouldSkipStagedMigrationForHooks, w as collectToolchainVersionChanges } from "../editor-g4PosU99.js";
 import { t as ROLLDOWN_COMPAT_RESULT_PREFIX } from "../protocol-D99W10Qi.js";
 import path from "node:path";
+import { fileURLToPath } from "node:url";
 import { styleText } from "node:util";
 import fs, { existsSync } from "node:fs";
-import { fileURLToPath } from "node:url";
 //#region src/migration/compat/runner.ts
 var import_semver = /* @__PURE__ */ __toESM(require_semver(), 1);
 /**
@@ -362,7 +362,7 @@ async function collectEditorConfigPlan(rootDir, options) {
 		});
 		if (isCancel(action)) cancelAndExit();
 		editorConflictDecisions.set(conflict.fileName, action);
-	} else editorConflictDecisions.set(conflict.fileName, "merge");
+	} else editorConflictDecisions.set(conflict.fileName, isJsonLikeFile(conflict.fileName) ? "merge" : "skip");
 	return {
 		selectedEditor,
 		editorConflictDecisions
@@ -696,12 +696,6 @@ async function collectMigrationPlan(rootDir, detectedPackageManager, detectedPac
 		frameworkShimFrameworks
 	};
 }
-function formatDuration(durationMs) {
-	if (durationMs < 1e3) return `${Math.max(1, durationMs)}ms`;
-	const durationSeconds = durationMs / 1e3;
-	if (durationSeconds < 10) return `${durationSeconds.toFixed(1)}s`;
-	return `${Math.round(durationSeconds)}s`;
-}
 /**
 * Reconcile a CommandRunSummary from `runViteInstall` with the migration's
 * duration counter and exit-code state. `runViteInstall` returns
@@ -888,7 +882,8 @@ async function executeMigrationPlan(workspaceInfoOptional, plan, interactive, pr
 		editorId: plan.selectedEditor,
 		interactive,
 		conflictDecisions: plan.editorConflictDecisions,
-		silent: true
+		silent: true,
+		packageManager: plan.packageManager
 	});
 	addFrameworkShimsForWorkspace(workspaceInfo.rootDir, plan.frameworkShimFrameworks, workspaceInfo.packages, report, updateMigrationProgress);
 	const installArgs = plan.packageManager === PackageManager.npm || plan.packageManager === PackageManager.bun ? ["--force"] : ["--no-frozen-lockfile"];
@@ -921,6 +916,7 @@ async function main() {
 	}
 	printHeader();
 	const workspaceInfoOptional = await detectWorkspace(projectPath);
+	if (workspaceInfoOptional.isMonorepo && path.resolve(projectPath) !== path.resolve(workspaceInfoOptional.rootDir)) cancelAndExit(`Vite+ cannot migrate a workspace member. Run \`vp migrate\` from the workspace root at ${workspaceInfoOptional.rootDir}.`, 1);
 	const initialChangedPaths = await collectChangedFormatPaths(workspaceInfoOptional.rootDir);
 	const preExistingChangedPaths = initialChangedPaths ? new Set(initialChangedPaths) : void 0;
 	const resolvedPackageManager = workspaceInfoOptional.packageManager ?? "unknown";
@@ -1122,7 +1118,8 @@ async function main() {
 				editorId: plan.selectedEditor,
 				interactive: options.interactive,
 				conflictDecisions: plan.editorConflictDecisions,
-				silent: true
+				silent: true,
+				packageManager
 			});
 			didMigrate = true;
 		}

package/dist/{oxlint-plugin-config-BHOzlwMw.js → oxlint-plugin-config-BEZ9IUf7.js}

@@ -1,4 +1,4 @@
-import { s as VITE_PLUS_NAME } from "./constants-BppDcRc1.js";
+import { c as VITE_PLUS_NAME } from "./constants-CG513DRa.js";
 //#region src/oxlint-plugin-config.ts
 const VITE_PLUS_OXLINT_PLUGIN_NAME = VITE_PLUS_NAME;
 const VITE_PLUS_OXLINT_PLUGIN_SPECIFIER = `${VITE_PLUS_NAME}/oxlint-plugin`;

package/dist/oxlint-plugin.js

@@ -1,4 +1,4 @@
-import { n as VITE_PLUS_OXLINT_PLUGIN_NAME, t as PREFER_VITE_PLUS_IMPORTS_RULE_NAME } from "./oxlint-plugin-config-BHOzlwMw.js";
+import { n as VITE_PLUS_OXLINT_PLUGIN_NAME, t as PREFER_VITE_PLUS_IMPORTS_RULE_NAME } from "./oxlint-plugin-config-BEZ9IUf7.js";
 import path from "node:path";
 import fs from "node:fs";
 import { definePlugin, defineRule } from "@oxlint/plugins";

package/dist/pack-bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { a as resolveViteConfig } from "./resolve-vite-config-EWXclqvV.js";
+import { a as resolveViteConfig } from "./resolve-vite-config-Dmeyeyj-.js";
 import module from "node:module";
 import { buildWithConfigs, enableDebug, globalLogger, resolveUserConfig } from "@voidzero-dev/vite-plus-core/pack";
 //#region ../../node_modules/.pnpm/cac@7.0.0/node_modules/cac/dist/index.js

package/dist/{package-hV-77cBb.js → package-B4T8RGMG.js}

@@ -1,5 +1,5 @@
-import "./constants-BppDcRc1.js";
-import { i as readJsonFile } from "./json-BU88uu6o.js";
+import "./constants-CG513DRa.js";
+import { i as readJsonFile } from "./json-qlK6UH0r.js";
 import { createRequire } from "node:module";
 import path from "node:path";
 import fs from "node:fs";

package/dist/{prompts-DYap08te.js → prompts-CHz_98bJ.js}

@@ -1,8 +1,8 @@
 import { n as __require, r as __toESM, t as __commonJSMin } from "./rolldown-runtime-CMFfr-1z.js";
-import { t as accent } from "./terminal-CrqqK8WT.js";
-import { l as VITE_PLUS_VERSION } from "./constants-BppDcRc1.js";
-import { a as writeJsonFile, i as readJsonFile } from "./json-BU88uu6o.js";
-import { t as require_dist } from "./dist-CSQWHI6y.js";
+import { t as accent } from "./terminal-Bz-ps6rJ.js";
+import { u as VITE_PLUS_VERSION } from "./constants-CG513DRa.js";
+import { a as writeJsonFile, i as readJsonFile } from "./json-qlK6UH0r.js";
+import { t as require_dist } from "./dist-BDYZP12R.js";
 import path from "node:path";
 import { downloadPackageManager } from "../binding/index.js";
 import { stripVTControlCharacters, styleText } from "node:util";
@@ -157,8 +157,10 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			if (ii === pathExt.length) return resolve(step(i + 1));
 			const ext = pathExt[ii];
 			isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
-				if (!er && is) if (opt.all) found.push(p + ext);
-				else return resolve(p + ext);
+				if (!er && is) {
+					if (opt.all) found.push(p + ext);
+					else return resolve(p + ext);
+				}
 				return resolve(subStep(p, i, ii + 1));
 			});
 		});
@@ -176,8 +178,10 @@ var require_which = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			for (let j = 0; j < pathExt.length; j++) {
 				const cur = p + pathExt[j];
 				try {
-					if (isexe.sync(cur, { pathExt: pathExtExe })) if (opt.all) found.push(cur);
-					else return cur;
+					if (isexe.sync(cur, { pathExt: pathExtExe })) {
+						if (opt.all) found.push(cur);
+						else return cur;
+					}
 				} catch (ex) {}
 			}
 		}
@@ -1686,7 +1690,7 @@ const limitOptions = (params) => {
 };
 /**
 * Render-milestone markers for the PTY snapshot suite
-* (crates/vite_cli_snapshots): invisible window-title updates the runner
+* (crates/vp_cli_snapshots): invisible window-title updates the runner
 * synchronizes on via `expect-milestone` interactions. Emission is gated on
 * `VP_EMIT_MILESTONES=1`, which only the runner sets; real terminals and
 * piped output never see these markers as content (they only update the
@@ -2027,8 +2031,10 @@ const spinner = ({ indicator = "dots", onCancel, output = process.stdout, cancel
 		const elapsedMs = getElapsedMs();
 		const step = code === 0 ? completeColor(S_STEP_SUBMIT) : code === 1 ? import_picocolors.default.red(S_STEP_CANCEL) : import_picocolors.default.red(S_STEP_ERROR);
 		_message = msg ?? _message;
-		if (!silent) if (indicator === "timer") output.write(`${step} ${_message} ${formatTimer(elapsedMs)}\n\n`);
-		else output.write(`${step} ${_message}\n\n`);
+		if (!silent) {
+			if (indicator === "timer") output.write(`${step} ${_message} ${formatTimer(elapsedMs)}\n\n`);
+			else output.write(`${step} ${_message}\n\n`);
+		}
 		if (!preserveElapsed) _elapsedMs = 0;
 		_prevMessage = void 0;
 		clearHooks();
@@ -2323,9 +2329,10 @@ var require_semver$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class SemVer {
 		constructor(version, options) {
 			options = parseOptions(options);
-			if (version instanceof SemVer) if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
-			else version = version.version;
-			else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+			if (version instanceof SemVer) {
+				if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) return version;
+				else version = version.version;
+			} else if (typeof version !== "string") throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
 			if (version.length > MAX_LENGTH) throw new TypeError(`version is longer than ${MAX_LENGTH} characters`);
 			debug("SemVer", version, options);
 			this.options = options;
@@ -2827,8 +2834,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = class Range {
 		constructor(range, options) {
 			options = parseOptions(options);
-			if (range instanceof Range) if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
-			else return new Range(range.raw, options);
+			if (range instanceof Range) {
+				if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) return range;
+				else return new Range(range.raw, options);
+			}
 			if (range instanceof Comparator) {
 				this.raw = range.value;
 				this.set = [[range]];
@@ -2998,18 +3007,21 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			let ret;
 			if (isX(M)) ret = "";
 			else if (isX(m)) ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
-			else if (isX(p)) if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
-			else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
-			else if (pr) {
+			else if (isX(p)) {
+				if (M === "0") ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+				else ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+			} else if (pr) {
 				debug("replaceCaret pr", pr);
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
 			} else {
 				debug("no pr");
-				if (M === "0") if (m === "0") ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
-				else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
-				else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+				if (M === "0") {
+					if (m === "0") ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+					else ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+				} else ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
 			}
 			debug("caret return", ret);
 			return ret;
@@ -3031,9 +3043,10 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 			const anyX = xp;
 			if (gtlt === "=" && anyX) gtlt = "";
 			pr = options.includePrerelease ? "-0" : "";
-			if (xM) if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
-			else ret = "*";
-			else if (gtlt && anyX) {
+			if (xM) {
+				if (gtlt === ">" || gtlt === "<") ret = "<0.0.0-0";
+				else ret = "*";
+			} else if (gtlt && anyX) {
 				if (xm) m = 0;
 				p = 0;
 				if (gtlt === ">") {
@@ -3107,8 +3120,10 @@ var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 		constructor(comp, options) {
 			options = parseOptions(options);
-			if (comp instanceof Comparator) if (comp.loose === !!options.loose) return comp;
-			else comp = comp.value;
+			if (comp instanceof Comparator) {
+				if (comp.loose === !!options.loose) return comp;
+				else comp = comp.value;
+			}
 			comp = comp.trim().split(/\s+/).join(" ");
 			debug("comparator", comp, options);
 			this.options = options;
@@ -3428,11 +3443,15 @@ var require_subset = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const minimumVersion = [new Comparator(">=0.0.0")];
 	const simpleSubset = (sub, dom, options) => {
 		if (sub === dom) return true;
-		if (sub.length === 1 && sub[0].semver === ANY) if (dom.length === 1 && dom[0].semver === ANY) return true;
-		else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
-		else sub = minimumVersion;
-		if (dom.length === 1 && dom[0].semver === ANY) if (options.includePrerelease) return true;
-		else dom = minimumVersion;
+		if (sub.length === 1 && sub[0].semver === ANY) {
+			if (dom.length === 1 && dom[0].semver === ANY) return true;
+			else if (options.includePrerelease) sub = minimumVersionWithPreRelease;
+			else sub = minimumVersion;
+		}
+		if (dom.length === 1 && dom[0].semver === ANY) {
+			if (options.includePrerelease) return true;
+			else dom = minimumVersion;
+		}
 		const eqSet = /* @__PURE__ */ new Set();
 		let gt, lt;
 		for (const c of sub) if (c.operator === ">" || c.operator === ">=") gt = higherGT(gt, c, options);
@@ -3676,6 +3695,42 @@ function parseBunUntrusted(output) {
 		return match ? match[1] : null;
 	});
 }
+/**
+* npm >= 12 skips dependency install scripts that the `allowScripts` allowlist
+* in package.json does not cover, and reports them on stderr:
+*
+* ```
+* npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts:
+* npm warn install-scripts   core-js@3.49.0 (postinstall: node -e "try{require('./postinstall')}catch(e){}")
+* npm warn install-scripts   esbuild@0.28.1 (postinstall: node install.js)
+* ```
+*
+* npm 11.16 - 11.x print a similar warning ("install scripts not yet covered by
+* allowScripts") but still run the scripts, so only the npm 12 "blocked" wording
+* is parsed.
+*/
+const NPM_BLOCKED_SCRIPTS_MARKER = "install scripts blocked because they are not covered by allowScripts";
+/**
+* A blocked-package entry line: `npm warn install-scripts   <spec> (<lifecycle>:
+* <command>)`. Anchoring on the lifecycle name keeps the count line ("2 packages
+* had install scripts blocked ...") and the trailing hint line from matching.
+*/
+const NPM_BLOCKED_ENTRY = /^npm warn install-scripts\s+(\S+) \((?:pre|post)?install:/u;
+/**
+* Parse the package names npm >= 12 reports as having blocked install scripts
+* from captured `npm install` / `npm ci` output. Strips version suffixes and
+* dedupes while preserving first-seen order. Returns `[]` when the warning is
+* absent (including the npm 11.x advisory variant, where scripts still run).
+*/
+function parseNpmBlockedScripts(output) {
+	if (!output) return [];
+	const clean = stripVTControlCharacters(output);
+	if (!clean.includes(NPM_BLOCKED_SCRIPTS_MARKER)) return [];
+	return dedupeNames(clean.split("\n"), (rawLine) => {
+		const match = rawLine.trim().match(NPM_BLOCKED_ENTRY);
+		return match ? stripPackageVersion(match[1]) : null;
+	});
+}
 const YARN_DISABLED_BUILDS_MARKER = "lists build scripts, but all build scripts have been disabled";
 /**
 * Yarn (Berry) gates build scripts when `enableScripts` is false: each gated
@@ -3704,12 +3759,14 @@ function yarnDescriptorName(descriptor) {
 /**
 * Parse the gated build-script package names from an install log, dispatching on
 * the package manager: pnpm prints `Ignored build scripts:`, yarn prints
-* `... build scripts have been disabled`. bun is not parsed here (its blocked
-* packages are queried separately via `bun pm untrusted`).
+* `... build scripts have been disabled`, npm >= 12 prints `... install scripts
+* blocked ...`. bun is not parsed here (its blocked packages are queried
+* separately via `bun pm untrusted`).
 */
 function parseInstallGatedBuilds(output, packageManager) {
 	if (packageManager === PackageManager.pnpm) return parseIgnoredBuilds(output);
 	if (packageManager === PackageManager.yarn) return parseYarnDisabledBuilds(output);
+	if (packageManager === PackageManager.npm) return parseNpmBlockedScripts(output);
 	return [];
 }
 /**
@@ -3754,14 +3811,15 @@ function pnpmSupportsPositionalApprove(version) {
 const GATED_BUILD_PACKAGE_MANAGERS = /* @__PURE__ */ new Set([
 	PackageManager.pnpm,
 	PackageManager.bun,
-	PackageManager.yarn
+	PackageManager.yarn,
+	PackageManager.npm
 ]);
 /**
 * Narrow a package manager's gated builds down to the ones worth surfacing
 * during `vp create`: packages the generated project depends on directly.
 * Transitive gated builds (e.g. `esbuild` pulled in by Vite) are noise the user
 * did not choose, so they are dropped. Returns `[]` for package managers that
-* do not gate build scripts (npm, yarn classic), since there is nothing to
+* do not gate build scripts (npm < 12, yarn classic), since there is nothing to
 * approve.
 */
 function resolveApproveBuildTargets(projectDir, pendingBuilds, packageManager) {
@@ -3779,15 +3837,15 @@ function resolveApproveBuildTargets(projectDir, pendingBuilds, packageManager) {
 * Enumerate the packages whose build scripts a package manager gated during the
 * install, as raw names (still unfiltered by direct dependency).
 *
-* - pnpm and yarn report them in their install output, so the names are parsed
-*   there (see {@link parseInstallGatedBuilds}) and passed in via
+* - pnpm, yarn, and npm >= 12 report them in their install output, so the names
+*   are parsed there (see {@link parseInstallGatedBuilds}) and passed in via
 *   `pendingBuildsFromInstall`.
 * - bun exits 0 and only prints a count, so `bun pm untrusted` is queried here.
 *
 * Other package managers run build scripts by default and return `[]`.
 */
 async function detectGatedBuilds(installCwd, packageManager, pendingBuildsFromInstall) {
-	if (packageManager === PackageManager.pnpm || packageManager === PackageManager.yarn) return pendingBuildsFromInstall ?? [];
+	if (packageManager === PackageManager.pnpm || packageManager === PackageManager.yarn || packageManager === PackageManager.npm) return pendingBuildsFromInstall ?? [];
 	if (packageManager === PackageManager.bun) {
 		const { exitCode, stdout, stderr } = await runCommandSilently({
 			command: process.env.VP_CLI_BIN ?? "vp",
@@ -3814,16 +3872,17 @@ function printApproveBuildsGuidance(targets, packageManager) {
 		log.info(`These dependencies may not work until built. Enable them in the workspace root package.json (${accent("dependenciesMeta.<pkg>.built: true")}) and reinstall, or re-create with ${accent("--approve-builds")}.`);
 		return;
 	}
-	const command = packageManager === PackageManager.bun ? `vp pm approve-builds ${targets.join(" ")}` : "vp pm approve-builds";
+	const command = packageManager === PackageManager.bun || packageManager === PackageManager.npm ? `vp pm approve-builds ${targets.join(" ")}` : "vp pm approve-builds";
 	log.info(`These dependencies may not work until built. Run ${accent(command)} in the project to approve them, or re-create with ${accent("--approve-builds")}.`);
 }
 /**
 * Run a `vp` build/approval command and report the outcome through a spinner.
-* On failure the approval has still been recorded (pnpm/bun config or yarn's
-* `dependenciesMeta`), so the retry hint points back at `vp install`. Returns
+* On failure the approval has still been recorded (pnpm/bun/npm config or
+* yarn's `dependenciesMeta`), so the retry hint points back at `retryCommand`
+* (`vp install` unless the package manager needs an explicit rebuild). Returns
 * `true` when the command succeeded, `false` when the build exited non-zero.
 */
-async function runBuildAndReport(args, cwd, packages, interactive, silent, extraEnv) {
+async function runBuildAndReport(args, cwd, packages, interactive, silent, extraEnv, retryCommand = "vp install") {
 	const spinner = silent ? getSilentSpinner() : getSpinner(interactive);
 	spinner.start(`Building ${packages.join(", ")}...`);
 	const { exitCode, stdout, stderr } = await runCommandSilently({
@@ -3842,10 +3901,42 @@ async function runBuildAndReport(args, cwd, packages, interactive, silent, extra
 	spinner.stop(`Build failed for ${packages.join(", ")}`);
 	const output = `${stdout.toString()}\n${stderr.toString()}`.trim();
 	if (output) log.info(lastLines(output, 20));
-	log.warn(`Build scripts failed for ${accent(packages.join(", "))}. They were approved; fix the build toolchain and run ${accent("vp install")} to retry.`);
+	log.warn(`Build scripts failed for ${accent(packages.join(", "))}. They were approved; fix the build toolchain and run ${accent(retryCommand)} to retry.`);
 	return false;
 }
 /**
+* Approve gated install scripts for npm >= 12, then run them. npm's approval
+* (`npm approve-scripts`, via `vp pm approve-builds`) only records the
+* `allowScripts` allowlist in package.json: scripts the install already skipped
+* do not run on approval, and a plain reinstall short-circuits on the
+* up-to-date tree without running them either. `npm rebuild` is what executes
+* the newly approved scripts, so approval and rebuild are two steps.
+*/
+async function approveNpmScripts(installCwd, packages, interactive, silent) {
+	const approveCommand = `vp pm approve-builds ${packages.join(" ")}`;
+	const { exitCode, stdout, stderr } = await runCommandSilently({
+		command: process.env.VP_CLI_BIN ?? "vp",
+		args: [
+			"pm",
+			"approve-builds",
+			...packages
+		],
+		cwd: installCwd,
+		envs: process.env
+	});
+	if (exitCode !== 0) {
+		const output = `${stdout.toString()}\n${stderr.toString()}`.trim();
+		if (output) log.info(lastLines(output, 20));
+		log.warn(`Approving build scripts failed for ${accent(packages.join(", "))}. Run ${accent(approveCommand)} in the project to retry.`);
+		return false;
+	}
+	return runBuildAndReport([
+		"pm",
+		"rebuild",
+		...packages
+	], installCwd, packages, interactive, silent, void 0, `vp pm rebuild ${packages.join(" ")}`);
+}
+/**
 * Mark each package as build-allowed in yarn's `dependenciesMeta[<pkg>].built`,
 * preserving existing metadata. Guards against a non-object container or
 * per-package value so a hand-authored scalar doesn't corrupt package.json.
@@ -3886,8 +3977,8 @@ async function approveYarnBuilds(installCwd, packages, interactive, silent) {
 	return runBuildAndReport(["install"], installCwd, packages, interactive, silent, { YARN_ENABLE_IMMUTABLE_INSTALLS: "false" });
 }
 /**
-* Surface pnpm's gated build scripts after a `vp create` install and let the
-* user act on them:
+* Surface the package manager's gated build scripts after a `vp create` install
+* and let the user act on them:
 * - `--approve-builds`: approve + build every target, no prompt.
 * - interactive: a default-off multiselect so each package is approved
 *   individually (pnpm gates them for security, so nothing is opt-in by
@@ -3920,6 +4011,7 @@ async function approveBuilds(options) {
 		return true;
 	}
 	if (packageManager === PackageManager.yarn) return approveYarnBuilds(cwd, selected, interactive, silent);
+	if (packageManager === PackageManager.npm) return approveNpmScripts(cwd, selected, interactive, silent);
 	if (packageManager === PackageManager.pnpm && !pnpmSupportsPositionalApprove(packageManagerVersion)) {
 		printApproveBuildsGuidance(selected, packageManager);
 		return !(autoApprove && !interactive);
@@ -4262,4 +4354,4 @@ function defaultInteractive() {
 	return !process.env.CI && process.stdin.isTTY;
 }
 //#endregion
-export { isCancel as A, log as C, spinner as D, select as E, runCommandSilently as M, require_cross_spawn as N, text as O, intro as S, outro as T, DependencyType as _, resolveGitInit as a, cancel as b, selectPackageManager as c, readYamlFile as d, scalarString as f, getSpinner as g, resolveApproveBuildTargets as h, promptGitHooks as i, runCommand$1 as j, require_picocolors as k, upgradeYarn as l, detectGatedBuilds as m, defaultInteractive as n, runViteFmt as o, approveBuilds as p, downloadPackageManager$1 as r, runViteInstall as s, cancelAndExit as t, editYamlFile as u, PackageManager as v, multiselect as w, confirm as x, require_semver as y };
+export { isCancel as A, log as C, spinner as D, select as E, runCommandSilently as M, require_cross_spawn as N, text as O, intro as S, outro as T, getSpinner as _, resolveGitInit as a, require_semver as b, selectPackageManager as c, readYamlFile as d, scalarString as f, getSilentSpinner as g, resolveApproveBuildTargets as h, promptGitHooks as i, runCommand$1 as j, require_picocolors as k, upgradeYarn as l, detectGatedBuilds as m, defaultInteractive as n, runViteFmt as o, approveBuilds as p, downloadPackageManager$1 as r, runViteInstall as s, cancelAndExit as t, editYamlFile as u, DependencyType as v, multiselect as w, confirm as x, PackageManager as y };

package/dist/{resolve-vite-config-EWXclqvV.js → resolve-vite-config-Dmeyeyj-.js}

@@ -1,15 +1,8 @@
-import { u as withConfigMetadataResolution } from "./define-config-DPnHe1Mx.js";
+import { s as VITE_CONFIG_FILES } from "./constants-CG513DRa.js";
+import { u as withConfigMetadataResolution } from "./define-config-CV4bQG_8.js";
 import path from "node:path";
 import fs from "node:fs";
 //#region src/resolve-vite-config.ts
-const VITE_CONFIG_FILES = [
-	"vite.config.js",
-	"vite.config.mjs",
-	"vite.config.ts",
-	"vite.config.cjs",
-	"vite.config.mts",
-	"vite.config.cts"
-];
 /**
 * Find a vite config file by walking up from `startDir` to `stopDir`.
 * Returns the absolute path of the first config file found, or undefined.