@4da/mcp-server 6.0.2 → 6.2.0

package/dist/tools/upgrade-impact-literals.js

@@ -74,7 +74,7 @@ export async function flagOldSyntax(sections, files, root) {
     const candidates = sections
         .flatMap((s) => s.entries)
         .filter((e) => e.kind === "breaking" || e.kind === "deprecation")
-        .map((entry) => ({ entry, shapes: oldSyntaxShapes(entry.text) }))
+        .map((entry) => ({ entry, shapes: [entry.text, ...(entry.details ?? [])].flatMap(oldSyntaxShapes) }))
         .filter((c) => c.shapes.length > 0);
     if (!root || candidates.length === 0 || files.length === 0)
         return { newlyTouching: 0, examples: [] };

package/dist/tools/upgrade-impact-report.d.ts

@@ -24,6 +24,8 @@ export interface ReportEntry {
     text: string;
     /** The changelog heading or parent bullet the entry sits under ("Removed", "Breaking Changes"). */
     under?: string;
+    /** Bullets nested under the entry: part of it, not counted as entries of their own. */
+    details?: string[];
     touches_your_code?: boolean;
     matched_symbols?: string[];
     /** String literals in your code that use the syntax this entry retires (route patterns and the like). */
@@ -62,6 +64,14 @@ export type UpgradeType = "patch" | "minor" | "major" | "prerelease" | "unknown"
 export declare function upgradeType(from: string, to: string): UpgradeType;
 /** Major versions crossed (0.x minors count as majors, matching `upgradeType`). */
 export declare function majorsCrossed(from: string, to: string): number;
+/**
+ * `majorsCrossed` for versions as a task names them: "0.13", "7.x", "v2",
+ * "1.4.0". A partial version is read as the start of its line (0.13 ->
+ * 0.13.0, 7.x -> 7.0.0). Null when either side is unreadable. A plain
+ * major-number compare read reqwest 0.12 -> 0.13 as 0 majors crossed, and
+ * the briefing called a breaking upgrade safe to delegate.
+ */
+export declare function majorsCrossedLoose(from: string | null, to: string | null): number | null;
 /** Up to `count` published versions nearest to `wanted` by precedence, for "version not found" errors. */
 export declare function nearestVersions(published: string[], requested: string, count?: number): string[];
 export interface SummaryInput {
@@ -75,6 +85,19 @@ export interface SummaryInput {
     /** missing = no changelog file; no_entries = a file with no section for these releases; partial = some of them. */
     changelog: "missing" | "no_entries" | "partial" | "complete";
     advisoriesFixed: number | null;
+    /** Versions as the ecosystem writes them (`v1.2.3`, `3.0rc1`); `from`/`to` are their semver reading. */
+    fromLabel?: string;
+    toLabel?: string;
+    /** Where the entries came from when not the archive ("GitHub release notes"). */
+    changelogFrom?: string | null;
+    /** How to get a changelog that is missing (the opt-in GitHub fallback), when it would help. */
+    githubHint?: string | null;
+    /** Go: the upgrade moves to another module path. */
+    pathChange?: {
+        from: string;
+        to: string;
+        files: number;
+    } | null;
 }
 /** The one sentence a human or agent reads first. */
 export declare function summarize(input: SummaryInput): string;

package/dist/tools/upgrade-impact-report.js

@@ -50,9 +50,15 @@ export function shapeChangelog(sections, symbols, format) {
             return true;
         });
         const entries = unique.map((e) => {
-            const entry = { kind: e.kind, text: e.text, ...(e.under ? { under: e.under } : {}) };
+            const entry = {
+                kind: e.kind,
+                text: e.text,
+                ...(e.under ? { under: e.under } : {}),
+                ...(e.details?.length ? { details: e.details } : {}),
+            };
             if (e.kind === "breaking" || e.kind === "deprecation") {
-                const matched = matchSymbols(e.text, symbols);
+                // The nested points name the affected functions (date-fns 3.0) as often as the entry does.
+                const matched = matchSymbols([e.text, ...(e.details ?? [])].join(" "), symbols);
                 if (matched.length > 0) {
                     entry.touches_your_code = true;
                     entry.matched_symbols = matched;
@@ -78,7 +84,10 @@ export function shapeChangelog(sections, symbols, format) {
         if (format === "concise") {
             const important = entries.filter((e) => e.kind !== "change");
             const others = entries.filter((e) => e.kind === "change");
-            const additive = (e) => (e.under ? classifyHeading(e.under) === "additive" : false);
+            const additive = (e) => {
+                const ctx = e.under ? classifyHeading(e.under) : null;
+                return ctx === "additive" || ctx === "fixes";
+            };
             const neutral = others.filter((e) => !additive(e)).slice(0, CONCISE_NEUTRAL_PER_VERSION);
             const minor = others.filter(additive).slice(0, CONCISE_ADDITIVE_PER_VERSION);
             // Keep document order among the kept plain changes.
@@ -120,6 +129,9 @@ export function upgradeType(from, to) {
         return "major";
     if (a.major === 0 && a.minor !== b.minor)
         return "major";
+    // ^0.0.3 admits only 0.0.3: any 0.0.x change is breaking (dependency_health and dependency_check agree).
+    if (a.major === 0 && a.minor === 0 && a.patch !== b.patch)
+        return "major";
     if (a.minor !== b.minor)
         return "minor";
     return "patch";
@@ -134,6 +146,27 @@ export function majorsCrossed(from, to) {
         return Math.max(0, b.minor - a.minor);
     return Math.max(0, b.major - a.major);
 }
+/**
+ * `majorsCrossed` for versions as a task names them: "0.13", "7.x", "v2",
+ * "1.4.0". A partial version is read as the start of its line (0.13 ->
+ * 0.13.0, 7.x -> 7.0.0). Null when either side is unreadable. A plain
+ * major-number compare read reqwest 0.12 -> 0.13 as 0 majors crossed, and
+ * the briefing called a breaking upgrade safe to delegate.
+ */
+export function majorsCrossedLoose(from, to) {
+    const pad = (v) => {
+        const m = v ? /^v?(\d+)(?:\.(\d+|[x*]))?(?:\.(\d+|[x*]))?/i.exec(v.trim()) : null;
+        if (!m)
+            return null;
+        const num = (s) => (s === undefined || /[x*]/i.test(s) ? "0" : s);
+        return `${m[1]}.${num(m[2])}.${num(m[3])}`;
+    };
+    const a = pad(from);
+    const b = pad(to);
+    if (!a || !b)
+        return null;
+    return majorsCrossed(a, b);
+}
 /** Up to `count` published versions nearest to `wanted` by precedence, for "version not found" errors. */
 export function nearestVersions(published, requested, count = 5) {
     // "7" / "7.x" / "7.1" are not semver: read them as the start of that line,
@@ -156,10 +189,11 @@ export function summarize(input) {
     ].filter(Boolean);
     let breaking;
     const atLeast = input.changelog === "partial" ? "at least " : "";
+    const hint = input.githubHint ? `; ${input.githubHint}` : "";
     if (input.changelog === "missing")
-        breaking = "no changelog in the package archive (see release_notes_url)";
+        breaking = `no changelog in the package archive, so breaking changes are unknown (see release_notes_url${hint})`;
     else if (input.changelog === "no_entries") {
-        breaking = "the package's changelog has no entries for these releases, so breaking changes are unknown (see release_notes_url)";
+        breaking = `the package's changelog has no entries for these releases, so breaking changes are unknown (see release_notes_url${hint})`;
     }
     else {
         // "flagged", not "N breaking changes": the flags come from headings and
@@ -172,7 +206,12 @@ export function summarize(input) {
         }
         else
             breaking = flagged;
+        if (input.changelogFrom)
+            breaking += ` (from ${input.changelogFrom})`;
     }
     const advisories = input.advisoriesFixed === null ? "advisories unknown (OSV unreachable)" : `${input.advisoriesFixed} advisories fixed`;
-    return `${input.pkg} ${input.from} -> ${input.to}: ${parts.join(", ")}, ${breaking}, ${advisories}.`;
+    const path = input.pathChange
+        ? `, module path changes to ${input.pathChange.to} (${input.pathChange.files} ${input.pathChange.files === 1 ? "file imports" : "files import"} ${input.pathChange.from})`
+        : "";
+    return `${input.pkg} ${input.fromLabel ?? input.from} -> ${input.toLabel ?? input.to}: ${parts.join(", ")}${path}, ${breaking}, ${advisories}.`;
 }

package/dist/tools/upgrade-impact.d.ts

@@ -8,12 +8,19 @@
  * (breaking / deprecation / security), and cross-references the breaking
  * ones against the symbols this project actually imports from the package.
  *
- * Why the changelog comes from the archive and nowhere else: an agent asked
- * to bump fastembed 5 -> 7 otherwise reads GitHub release pages one by one, or
+ * Why the changelog comes from the archive first: an agent asked to bump
+ * fastembed 5 -> 7 otherwise reads GitHub release pages one by one, or
  * guesses from the version number. The archive is on the registry the
  * package manager already trusts, so reading it discloses nothing new
- * (Decision 1, option A). When the archive has no changelog the report says
- * so and gives `release_notes_url`; it never fetches that page itself.
+ * (Decision 1, option A). When the archive has no changelog for the range,
+ * GitHub release notes are read only if the user opted in
+ * (FOURDA_GITHUB_CHANGELOG, Decision 1 option B); otherwise the report says
+ * the changelog is unavailable, how to enable the fallback, and gives
+ * `release_notes_url`. It never fetches a docs page itself.
+ *
+ * Ecosystems: npm, crates.io, PyPI (PEP 440 versions, sdist changelogs,
+ * distribution -> import-name mapping) and Go (module proxy, module-zip
+ * changelogs, major versions as separate module paths).
  *
  * Changelog text is third-party input: entries are sanitised (control and
  * bidi characters stripped, 400-char cap) and `_meta.untrusted_text` tells
@@ -46,6 +53,8 @@ export interface UpgradeImpactContext {
     projectRoot: string | null;
     installed: InstalledDep[];
     offline: boolean;
+    /** FOURDA_GITHUB_CHANGELOG: read GitHub release notes when the archive has none (opt-in, default off). */
+    githubChangelog?: boolean;
 }
 export declare const upgradeImpactTool: {
     name: string;