@cogenta/cli 0.3.0 → 0.6.0

package/dist/update/apply.d.ts

@@ -0,0 +1,54 @@
+import { type Logger } from '@cogenta/core';
+import { type PackageUpdateStatus, type UpdateCheckReport } from './check.js';
+import { type UpdateRestorePoint } from './restore-point.js';
+export interface RunPackageInstallInput {
+    readonly cwd: string;
+    /** `@cogenta/core@0.5.0`-shaped specs — one target version per package, pinned exactly (`--save-exact`). */
+    readonly specs: readonly string[];
+}
+export interface RunPackageInstallResult {
+    readonly stdout: string;
+    readonly stderr: string;
+}
+export type RunPackageInstall = (input: RunPackageInstallInput) => Promise<RunPackageInstallResult>;
+/** Real `npm install --save-exact <specs>`, run in the site's own directory. */
+export declare const runNpmInstall: RunPackageInstall;
+export type ApplyUpdateResult = {
+    readonly kind: 'up-to-date';
+    readonly report: UpdateCheckReport;
+} | {
+    readonly kind: 'confirmation-required';
+    readonly report: UpdateCheckReport;
+    readonly risky: readonly PackageUpdateStatus[];
+} | {
+    readonly kind: 'applied';
+    readonly report: UpdateCheckReport;
+    readonly restorePoint: UpdateRestorePoint;
+    readonly installed: readonly {
+        readonly name: string;
+        readonly version: string;
+    }[];
+    readonly installOutput: RunPackageInstallResult;
+};
+export interface ApplyUpdateInput {
+    readonly cwd?: string;
+    readonly env?: Record<string, string | undefined>;
+    readonly logger?: Logger;
+    readonly packages: readonly {
+        readonly name: string;
+        readonly installed: string;
+    }[];
+    /**
+     * Required once `check()` has flagged a contract-risk warning for any
+     * package in scope — the human-in-the-loop half of point 4 ("proposer
+     * d'annuler"). Absent or `false` with a warning present refuses before
+     * touching anything, `kind: 'confirmation-required'`.
+     */
+    readonly confirmBreakingChange?: boolean;
+    readonly fetchImpl?: typeof fetch;
+    readonly now?: () => Date;
+    readonly backupDir?: string;
+    readonly runInstall?: RunPackageInstall;
+}
+export declare function applyUpdate(input: ApplyUpdateInput): Promise<ApplyUpdateResult>;
+//# sourceMappingURL=apply.d.ts.map

package/dist/update/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/update/apply.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAmB,KAAK,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9F,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAoBtF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,4GAA4G;IAC5G,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAInG,gFAAgF;AAChF,eAAO,MAAM,aAAa,EAAE,iBAkB3B,CAAA;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GACnE;IACE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAA;IACtC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAC/C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,QAAQ,CAAC,SAAS,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAClF,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAA;CAChD,CAAA;AAEL,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACnF;;;;;OAKG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;CACxC;AAED,wBAAsB,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAsCrF"}

package/dist/update/apply.js

@@ -0,0 +1,77 @@
+import { execFile } from 'node:child_process';
+import process from 'node:process';
+import { promisify } from 'node:util';
+import { CogentaError } from '@cogenta/core';
+import { checkForUpdates } from './check.js';
+import { createUpdateRestorePoint } from './restore-point.js';
+/**
+ * "Mise à jour en un clic depuis l'admin (ou `cogenta update` en CLI) — avec
+ * un point de restauration obligatoire avant toute mise à jour... jamais une
+ * mise à jour sans filet" (L22 task 9, point 2).
+ *
+ * The order is deliberate: a package whose update the caller has not
+ * confirmed yet (because `check()` found a contract-risk warning) is refused
+ * with `kind: 'confirmation-required'` **before** anything is backed up or
+ * installed — there is nothing to protect yet. Once every risky package is
+ * confirmed, the restore point is created unconditionally, and only then
+ * does `npm install` run. If the backup step itself fails, this throws
+ * (`UPDATE_RESTORE_POINT_FAILED`, from `restore-point.ts`) and nothing is
+ * installed — a failed safety net cancels the update, it never becomes a
+ * warning that gets ignored.
+ */
+const execFileAsync = promisify(execFile);
+const MAX_INSTALL_OUTPUT_BYTES = 10 * 1024 * 1024;
+/** Real `npm install --save-exact <specs>`, run in the site's own directory. */
+export const runNpmInstall = async ({ cwd, specs }) => {
+    const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm';
+    try {
+        const result = await execFileAsync(npmCommand, ['install', '--save-exact', ...specs], {
+            cwd,
+            maxBuffer: MAX_INSTALL_OUTPUT_BYTES,
+        });
+        return { stdout: result.stdout, stderr: result.stderr };
+    }
+    catch (error) {
+        const withOutput = error;
+        throw new CogentaError({
+            code: 'UPDATE_APPLY_FAILED',
+            message: `npm install failed: ${withOutput.message}`,
+            hint: 'The restore point taken just before this was not touched — restore it with "cogenta restore apply" if the site is now in a broken state, or fix the underlying npm error (check network access and the npm registry) and try again.',
+            cause: error,
+            details: { stdout: withOutput.stdout, stderr: withOutput.stderr },
+        });
+    }
+};
+export async function applyUpdate(input) {
+    const report = await checkForUpdates({
+        packages: input.packages,
+        ...(input.fetchImpl === undefined ? {} : { fetchImpl: input.fetchImpl }),
+        ...(input.now === undefined ? {} : { now: input.now }),
+    });
+    const updatable = report.packages.filter((pkg) => pkg.updateAvailable && pkg.latest !== null);
+    if (updatable.length === 0)
+        return { kind: 'up-to-date', report };
+    const risky = updatable.filter((pkg) => (pkg.contractRisk?.warnings.length ?? 0) > 0);
+    if (risky.length > 0 && input.confirmBreakingChange !== true) {
+        return { kind: 'confirmation-required', report, risky };
+    }
+    // The safety net, unconditional, before anything else changes.
+    const restorePoint = await createUpdateRestorePoint({
+        ...(input.cwd === undefined ? {} : { cwd: input.cwd }),
+        ...(input.env === undefined ? {} : { env: input.env }),
+        ...(input.logger === undefined ? {} : { logger: input.logger }),
+        ...(input.backupDir === undefined ? {} : { dir: input.backupDir }),
+    });
+    const cwd = input.cwd ?? process.cwd();
+    const runInstall = input.runInstall ?? runNpmInstall;
+    const specs = updatable.map((pkg) => `${pkg.name}@${pkg.latest}`);
+    const installOutput = await runInstall({ cwd, specs });
+    return {
+        kind: 'applied',
+        report,
+        restorePoint,
+        installed: updatable.map((pkg) => ({ name: pkg.name, version: pkg.latest })),
+        installOutput,
+    };
+}
+//# sourceMappingURL=apply.js.map

package/dist/update/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/update/apply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAC7C,OAAO,OAAO,MAAM,cAAc,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,EAAE,YAAY,EAAe,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,eAAe,EAAoD,MAAM,YAAY,CAAA;AAC9F,OAAO,EAAE,wBAAwB,EAA2B,MAAM,oBAAoB,CAAA;AAEtF;;;;;;;;;;;;;;GAcG;AAEH,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAA;AAezC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAEjD,gFAAgF;AAChF,MAAM,CAAC,MAAM,aAAa,GAAsB,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,EAAE;YACpF,GAAG;YACH,SAAS,EAAE,wBAAwB;SACpC,CAAC,CAAA;QACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,KAA8D,CAAA;QACjF,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,uBAAuB,UAAU,CAAC,OAAO,EAAE;YACpD,IAAI,EAAE,qOAAqO;YAC3O,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE;SAClE,CAAC,CAAA;IACJ,CAAC;AACH,CAAC,CAAA;AAmCD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAuB;IACvD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;KACvD,CAAC,CAAA;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CACtC,CAAC,GAAG,EAAmD,EAAE,CACvD,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAC7C,CAAA;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAA;IAEjE,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACrF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACzD,CAAC;IAED,+DAA+D;IAC/D,MAAM,YAAY,GAAG,MAAM,wBAAwB,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;KACnE,CAAC,CAAA;IAEF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,aAAa,CAAA;IACpD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACjE,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAEtD,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM;QACN,YAAY;QACZ,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,aAAa;KACd,CAAA;AACH,CAAC"}

package/dist/update/changelog-risk.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Splits a Changesets-generated `CHANGELOG.md` into per-version sections, and
+ * flags the ones that look like they touch a frozen contract (A/B/C/D/E) —
+ * a **heuristic keyword scan of prose**, not a structured signal, and it says
+ * so everywhere it is surfaced. See `contract-risk.ts`'s module comment for
+ * the honest limits of what this can actually detect.
+ */
+export interface ChangelogSection {
+    readonly version: string;
+    readonly body: string;
+}
+export declare function splitChangelogSections(markdown: string): readonly ChangelogSection[];
+export interface ContractRiskWarning {
+    readonly version: string;
+    /** The matched section's own text, trimmed to a readable excerpt — never invented, always a substring of the real changelog. */
+    readonly excerpt: string;
+}
+/** The versions in `sections` whose body matches `FROZEN_CONTRACT_PATTERN`. */
+export declare function sectionsMentioningContractRisk(sections: readonly ChangelogSection[]): readonly ContractRiskWarning[];
+//# sourceMappingURL=changelog-risk.d.ts.map

package/dist/update/changelog-risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"changelog-risk.d.ts","sourceRoot":"","sources":["../../src/update/changelog-risk.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAKD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAmBpF;AAaD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,gIAAgI;IAChI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,+EAA+E;AAC/E,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,SAAS,gBAAgB,EAAE,GACpC,SAAS,mBAAmB,EAAE,CAOhC"}

package/dist/update/changelog-risk.js

@@ -0,0 +1,55 @@
+/**
+ * Splits a Changesets-generated `CHANGELOG.md` into per-version sections, and
+ * flags the ones that look like they touch a frozen contract (A/B/C/D/E) —
+ * a **heuristic keyword scan of prose**, not a structured signal, and it says
+ * so everywhere it is surfaced. See `contract-risk.ts`'s module comment for
+ * the honest limits of what this can actually detect.
+ */
+/** `## 0.5.0` — Changesets' own heading format (`@changesets/changelog-github` and the default changelog both use it). */
+const VERSION_HEADING = /^##\s+(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)\s*$/u;
+export function splitChangelogSections(markdown) {
+    const lines = markdown.split(/\r\n|\r|\n/u);
+    const sections = [];
+    let current = null;
+    for (const line of lines) {
+        const match = VERSION_HEADING.exec(line);
+        if (match?.[1] !== undefined) {
+            if (current !== null)
+                sections.push({ version: current.version, body: current.lines.join('\n').trim() });
+            current = { version: match[1], lines: [] };
+            continue;
+        }
+        if (current !== null)
+            current.lines.push(line);
+    }
+    if (current !== null)
+        sections.push({ version: current.version, body: current.lines.join('\n').trim() });
+    return sections;
+}
+/**
+ * Deliberately broad rather than precise: this is a warning, not a
+ * certification, and a missed keyword is worse than a false positive here
+ * (a human reviews every flagged version before an update is applied). Covers
+ * both languages this codebase's own changesets are written in (English,
+ * per AGENTS.md) and the French vocabulary this project's own design docs
+ * use for the same idea, in case a changeset note quotes one.
+ */
+const FROZEN_CONTRACT_PATTERN = /\bcontract\s+[a-e]\b|\bcontrat\s+[a-e]\b|schema@\d|tools@\d|blocks?@\d|theme@\d|breaking change|changement cassant|frozen contract|contrat\s+fig[eé]|\badr-\d{4}\b/iu;
+/** The versions in `sections` whose body matches `FROZEN_CONTRACT_PATTERN`. */
+export function sectionsMentioningContractRisk(sections) {
+    const warnings = [];
+    for (const section of sections) {
+        if (!FROZEN_CONTRACT_PATTERN.test(section.body))
+            continue;
+        warnings.push({ version: section.version, excerpt: excerptOf(section.body) });
+    }
+    return warnings;
+}
+const MAX_EXCERPT_LENGTH = 400;
+function excerptOf(body) {
+    const collapsed = body.replace(/\s+/gu, ' ').trim();
+    return collapsed.length > MAX_EXCERPT_LENGTH
+        ? `${collapsed.slice(0, MAX_EXCERPT_LENGTH)}…`
+        : collapsed;
+}
+//# sourceMappingURL=changelog-risk.js.map

package/dist/update/changelog-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changelog-risk.js","sourceRoot":"","sources":["../../src/update/changelog-risk.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,0HAA0H;AAC1H,MAAM,eAAe,GAAG,gDAAgD,CAAA;AAExE,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,IAAI,OAAO,GAAgD,IAAI,CAAA;IAE/D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,IAAI;gBAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;YACpF,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;YAC1C,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAClB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAEpF,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAC3B,sKAAsK,CAAA;AAQxK,+EAA+E;AAC/E,MAAM,UAAU,8BAA8B,CAC5C,QAAqC;IAErC,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAQ;QACzD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,MAAM,kBAAkB,GAAG,GAAG,CAAA;AAE9B,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACnD,OAAO,SAAS,CAAC,MAAM,GAAG,kBAAkB;QAC1C,CAAC,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG;QAC9C,CAAC,CAAC,SAAS,CAAA;AACf,CAAC"}

package/dist/update/check.d.ts

@@ -0,0 +1,60 @@
+import { type ContractRiskAssessment } from './contract-risk.js';
+import { type UpdateBump } from './version-compare.js';
+/**
+ * `cogenta update check` / `GET /api/updates/status` (L22 task 9, point 1):
+ * "compare la version installée à la dernière publiée sur npm —
+ * `@cogenta/core` et `@cogenta/cli` sont déjà la source de vérité de
+ * version."
+ *
+ * "Installed" here means each package's own self-reported version
+ * (`getCoreVersion`/`getCliVersion`, both lazily computed with
+ * `readOwnPackageVersion` in `@cogenta/core` — see that function's own
+ * comment for why this is never a top-level constant) — whichever
+ * `@cogenta/core`/`@cogenta/cli` this very process actually
+ * loaded, not a guess read from `node_modules` by path (which would answer
+ * a different, less certain question on a hoisted or symlinked install).
+ * Scoped to exactly these two packages, deliberately, not every `@cogenta/*`
+ * dependency a site happens to carry (`@cogenta/theme-canonical`, any
+ * installed plugin…) — see this module's caller for why.
+ *
+ * Point 4's contract-risk check ("avant d'appliquer : notifier le risque")
+ * runs here too, not only inside `apply.ts` — an admin (or `cogenta update
+ * check`) needs to see the risk *before* deciding to confirm, so `check()`
+ * already fetches it for every package that actually has an update
+ * available (never for one that does not — no reason to download a tarball
+ * nobody would apply). `includeContractRisk: false` skips it for a caller
+ * that only wants the fast version comparison.
+ */
+export interface PackageUpdateStatus {
+    readonly name: string;
+    readonly installed: string;
+    /** `null` only when the registry check for this specific package failed — never when it simply reports no update. */
+    readonly latest: string | null;
+    readonly bump: UpdateBump;
+    readonly updateAvailable: boolean;
+    /** Set only when `latest` is `null`. */
+    readonly checkError: string | undefined;
+    /** `null` when there is no update to assess, or `includeContractRisk` was `false`. See `contract-risk.ts` for how honestly limited this signal is. */
+    readonly contractRisk: ContractRiskAssessment | null;
+}
+export interface UpdateCheckReport {
+    readonly checkedAt: string;
+    readonly packages: readonly PackageUpdateStatus[];
+    readonly updateAvailable: boolean;
+    readonly highestBump: UpdateBump;
+    /** `true` when any package's `contractRisk` actually found a warning — the one field a "should I click apply" UI decision boils down to. */
+    readonly contractRiskDetected: boolean;
+}
+export interface CheckForUpdatesInput {
+    /** `{ name, installed }` for each package to check — `check.ts` itself has no opinion on which packages that is; `cogenta update`/`update-router.ts` pass `@cogenta/core`/`@cogenta/cli`. */
+    readonly packages: readonly {
+        readonly name: string;
+        readonly installed: string;
+    }[];
+    readonly fetchImpl?: typeof fetch;
+    readonly now?: () => Date;
+    /** Default `true`. `false` skips the tarball fetch/scan entirely — a faster, network-lighter check with no risk signal. */
+    readonly includeContractRisk?: boolean;
+}
+export declare function checkForUpdates(input: CheckForUpdatesInput): Promise<UpdateCheckReport>;
+//# sourceMappingURL=check.d.ts.map

package/dist/update/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/update/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAEpF,OAAO,EAAgC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,qHAAqH;IACrH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,sJAAsJ;IACtJ,QAAQ,CAAC,YAAY,EAAE,sBAAsB,GAAG,IAAI,CAAA;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACjD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAA;IAChC,4IAA4I;IAC5I,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,6LAA6L;IAC7L,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,2HAA2H;IAC3H,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;CACvC;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA0D7F"}

package/dist/update/check.js

@@ -0,0 +1,56 @@
+import { assessContractRisk } from './contract-risk.js';
+import { fetchNpmPackageSummary } from './npm-registry.js';
+import { classifyBump, higherRiskBump } from './version-compare.js';
+export async function checkForUpdates(input) {
+    const now = input.now ?? (() => new Date());
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const includeContractRisk = input.includeContractRisk ?? true;
+    const packages = [];
+    for (const { name, installed } of input.packages) {
+        try {
+            const summary = await fetchNpmPackageSummary(name, fetchImpl);
+            const bump = classifyBump(installed, summary.latest);
+            const updateAvailable = bump !== 'none' && bump !== 'unknown';
+            let contractRisk = null;
+            const tarballUrl = summary.tarballUrl[summary.latest];
+            if (includeContractRisk && updateAvailable && tarballUrl !== undefined) {
+                contractRisk = await assessContractRisk({
+                    packageName: name,
+                    fromVersion: installed,
+                    toVersion: summary.latest,
+                    tarballUrl,
+                    fetchImpl,
+                });
+            }
+            packages.push({
+                name,
+                installed,
+                latest: summary.latest,
+                bump,
+                updateAvailable,
+                checkError: undefined,
+                contractRisk,
+            });
+        }
+        catch (error) {
+            packages.push({
+                name,
+                installed,
+                latest: null,
+                bump: 'unknown',
+                updateAvailable: false,
+                checkError: error instanceof Error ? error.message : String(error),
+                contractRisk: null,
+            });
+        }
+    }
+    const highestBump = packages.reduce((highest, pkg) => higherRiskBump(highest, pkg.bump === 'unknown' ? 'none' : pkg.bump), 'none');
+    return {
+        checkedAt: now().toISOString(),
+        packages,
+        updateAvailable: packages.some((pkg) => pkg.updateAvailable),
+        highestBump,
+        contractRiskDetected: packages.some((pkg) => (pkg.contractRisk?.warnings.length ?? 0) > 0),
+    };
+}
+//# sourceMappingURL=check.js.map

package/dist/update/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/update/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA+B,MAAM,oBAAoB,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAA;AA2DpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAA;IAE7D,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,CAAA;YAE7D,IAAI,YAAY,GAAkC,IAAI,CAAA;YACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACrD,IAAI,mBAAmB,IAAI,eAAe,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBACvE,YAAY,GAAG,MAAM,kBAAkB,CAAC;oBACtC,WAAW,EAAE,IAAI;oBACjB,WAAW,EAAE,SAAS;oBACtB,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,UAAU;oBACV,SAAS;iBACV,CAAC,CAAA;YACJ,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,eAAe;gBACf,UAAU,EAAE,SAAS;gBACrB,YAAY;aACb,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,SAAS;gBACf,eAAe,EAAE,KAAK;gBACtB,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClE,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CACjC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EACrF,MAAM,CACP,CAAA;IAED,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC9B,QAAQ;QACR,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5D,WAAW;QACX,oBAAoB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;KAC3F,CAAA;AACH,CAAC"}

package/dist/update/contract-risk.d.ts

@@ -0,0 +1,55 @@
+import { CogentaError } from '@cogenta/core';
+import { type ContractRiskWarning } from './changelog-risk.js';
+/**
+ * "Avant d'appliquer : notifier le risque si la mise à jour touche un
+ * contrat A/B/C/D/E" (L22 task 9, point 4) — read honestly, this is the
+ * hardest, least reliable part of the whole feature, and this module is
+ * built to be honest about that rather than to overclaim.
+ *
+ * **What is actually detectable, and since when.** A changeset's own prose
+ * lives in `.changeset/*.md` only until a release consumes it into the
+ * publishing package's `CHANGELOG.md` — after that, the `.changeset` file is
+ * deleted and `CHANGELOG.md` is the only surviving copy. Nothing about that
+ * text is ever sent to npm's registry API itself (no "breaking: true" field
+ * exists on a package version there); the only way to read it from an
+ * installed site, with no access to this repository's own git history, is to
+ * fetch the target version's own **published tarball** and read
+ * `CHANGELOG.md` out of it directly — which is exactly what this module does
+ * (`tar.ts`'s minimal reader, over `dist.tarball` from the npm registry,
+ * never a third-party CDN).
+ *
+ * **The one honest catch.** Before this task, `@cogenta/core` and
+ * `@cogenta/cli`'s `package.json` `"files"` was `["dist"]` — `CHANGELOG.md`
+ * was never actually included in the published npm tarball at all (verified
+ * with a real `npm pack` during this task). This task adds it to `"files"`
+ * for both packages, but that only takes effect for versions published
+ * **from now on**. Every version already on npm when this ships (`0.1.x`
+ * through `0.4.0` at the time of writing) has no `CHANGELOG.md` in its
+ * tarball, so this reports `available: false` for those, honestly, rather
+ * than inventing a "no risk found" that would really mean "could not look."
+ *
+ * **Even once it can read a CHANGELOG.md, this is a keyword scan of prose,
+ * not a structured signal** (`changelog-risk.ts`'s `FROZEN_CONTRACT_PATTERN`)
+ * — deliberately broad, so it can miss an unusually-worded note and it can
+ * also flag one that turns out to be harmless. It is a strong hint an admin
+ * reviews before confirming, never a guarantee, and the UI/CLI say so.
+ */
+export interface ContractRiskAssessment {
+    readonly packageName: string;
+    /** `false` when no CHANGELOG.md could be read for the target version at all — an honest "could not determine," never treated as "no risk." */
+    readonly available: boolean;
+    readonly reason: string | undefined;
+    /** Every version between the installed one (exclusive) and the target (inclusive) whose changelog section this could actually read. */
+    readonly scannedVersions: readonly string[];
+    readonly warnings: readonly ContractRiskWarning[];
+}
+export interface AssessContractRiskInput {
+    readonly packageName: string;
+    readonly fromVersion: string;
+    readonly toVersion: string;
+    readonly tarballUrl: string;
+    readonly fetchImpl?: typeof fetch;
+}
+export declare function assessContractRisk(input: AssessContractRiskInput): Promise<ContractRiskAssessment>;
+export declare function contractRiskUnknownError(packageName: string, reason: string): CogentaError;
+//# sourceMappingURL=contract-risk.d.ts.map

package/dist/update/contract-risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-risk.d.ts","sourceRoot":"","sources":["../../src/update/contract-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,qBAAqB,CAAA;AAG5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,8IAA8I;IAC9I,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,uIAAuI;IACvI,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAClD;AAQD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAmDjC;AAWD,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAO1F"}

package/dist/update/contract-risk.js

@@ -0,0 +1,75 @@
+import { CogentaError } from '@cogenta/core';
+import { compareVersions, parseVersion } from '@cogenta/plugins';
+import { sectionsMentioningContractRisk, splitChangelogSections, } from './changelog-risk.js';
+import { findPackageFile, readTarGz } from './tar.js';
+const MAX_TARBALL_BYTES = 20 * 1024 * 1024;
+function unavailable(packageName, reason) {
+    return { packageName, available: false, reason, scannedVersions: [], warnings: [] };
+}
+export async function assessContractRisk(input) {
+    const { packageName, fromVersion, toVersion, tarballUrl } = input;
+    const fetchImpl = input.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await fetchImpl(tarballUrl, { signal: AbortSignal.timeout(15_000) });
+    }
+    catch (error) {
+        return unavailable(packageName, `could not download the package tarball: ${String(error)}`);
+    }
+    if (!response.ok) {
+        return unavailable(packageName, `the package tarball responded with HTTP ${response.status}`);
+    }
+    const contentLength = response.headers.get('content-length');
+    if (contentLength !== null && Number(contentLength) > MAX_TARBALL_BYTES) {
+        return unavailable(packageName, 'the package tarball is larger than this check accepts');
+    }
+    let bytes;
+    try {
+        bytes = await response.arrayBuffer();
+    }
+    catch (error) {
+        return unavailable(packageName, `could not read the package tarball: ${String(error)}`);
+    }
+    if (bytes.byteLength > MAX_TARBALL_BYTES) {
+        return unavailable(packageName, 'the package tarball is larger than this check accepts');
+    }
+    let changelog;
+    try {
+        const entries = readTarGz(Buffer.from(bytes));
+        changelog = findPackageFile(entries, 'CHANGELOG.md');
+    }
+    catch (error) {
+        return unavailable(packageName, `could not read the package tarball: ${String(error)}`);
+    }
+    if (changelog === null) {
+        return unavailable(packageName, 'this version carries no CHANGELOG.md in its published tarball');
+    }
+    const sections = splitChangelogSections(changelog.toString('utf8'));
+    const inRange = sections.filter((section) => isInRange(section.version, fromVersion, toVersion));
+    const warnings = sectionsMentioningContractRisk(inRange);
+    return {
+        packageName,
+        available: true,
+        reason: undefined,
+        scannedVersions: inRange.map((section) => section.version),
+        warnings,
+    };
+}
+/** `fromVersion < version <= toVersion`, via `@cogenta/plugins`'s own comparator — unparseable versions (a pre-release tag this parser does not understand) are excluded rather than guessed at. */
+function isInRange(version, fromVersion, toVersion) {
+    const v = parseVersion(version);
+    const from = parseVersion(fromVersion);
+    const to = parseVersion(toVersion);
+    if (v === null || from === null || to === null)
+        return false;
+    return compareVersions(v, from) > 0 && compareVersions(v, to) <= 0;
+}
+export function contractRiskUnknownError(packageName, reason) {
+    return new CogentaError({
+        code: 'UPDATE_CHECK_FAILED',
+        message: `Could not determine whether updating "${packageName}" touches a frozen contract: ${reason}`,
+        hint: 'Review the target version manually before applying, or retry once network access to registry.npmjs.org is available.',
+        details: { packageName, reason },
+    });
+}
+//# sourceMappingURL=contract-risk.js.map

package/dist/update/contract-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-risk.js","sourceRoot":"","sources":["../../src/update/contract-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAEL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AA+CrD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAE1C,SAAS,WAAW,CAAC,WAAmB,EAAE,MAAc;IACtD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AACrF,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;IACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;IAE1C,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,2CAA2C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,WAAW,EAAE,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC5D,IAAI,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,iBAAiB,EAAE,CAAC;QACxE,OAAO,WAAW,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,KAAkB,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,WAAW,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,SAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7C,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,WAAW,EAAE,+DAA+D,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;IAChG,MAAM,QAAQ,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAA;IAExD,OAAO;QACL,WAAW;QACX,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,SAAS;QACjB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1D,QAAQ;KACT,CAAA;AACH,CAAC;AAED,oMAAoM;AACpM,SAAS,SAAS,CAAC,OAAe,EAAE,WAAmB,EAAE,SAAiB;IACxE,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC5D,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,MAAc;IAC1E,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,yCAAyC,WAAW,gCAAgC,MAAM,EAAE;QACrG,IAAI,EAAE,sHAAsH;QAC5H,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;KACjC,CAAC,CAAA;AACJ,CAAC"}

package/dist/update/history.d.ts

@@ -0,0 +1,30 @@
+import type { AuditEntry, AuditLog } from '@cogenta/auth';
+/**
+ * "Historique des mises à jour et des points de restauration, consultable
+ * depuis le même écran" (L22 task 9, point 5).
+ *
+ * Never a new table: an update check/apply is one more kind of entry in the
+ * audit log every other administrative action already writes to — same
+ * pattern `scheduled_task.run` uses in `serve.ts`. The *restore point* half
+ * of the history is not duplicated here either — it is exactly `cogenta
+ * backup list`'s own answer (`@cogenta/export`'s `readBackupManifest` over
+ * the `.cogenta/backups` directory), since `restore-point.ts` writes restore
+ * points through the very same `createSiteBackup` function backups already
+ * use, just tagged with an `update-` filename prefix. The router/CLI layer
+ * that serves "history" to the admin screen combines both reads; this module
+ * only owns the audit half.
+ */
+export declare const UPDATE_CHECKED_ACTION = "system.update.checked";
+export declare const UPDATE_APPLIED_ACTION = "system.update.applied";
+export declare const UPDATE_APPLY_FAILED_ACTION = "system.update.apply_failed";
+export interface UpdateHistoryEntryInput {
+    readonly actorId: string | null;
+    readonly actorRoles: readonly string[];
+    readonly action: typeof UPDATE_CHECKED_ACTION | typeof UPDATE_APPLIED_ACTION | typeof UPDATE_APPLY_FAILED_ACTION;
+    /** Never a secret, never a full npm install log — package names, versions, bump, restore point path, whether contract risk was flagged. */
+    readonly diff: Record<string, unknown>;
+}
+export declare function recordUpdateHistory(auditLog: AuditLog, entry: UpdateHistoryEntryInput): Promise<AuditEntry>;
+/** Every update-related audit entry, most recent first — the update-system slice of `AuditLog.list()`. */
+export declare function listUpdateHistory(auditLog: AuditLog, limit?: number): Promise<readonly AuditEntry[]>;
+//# sourceMappingURL=history.d.ts.map

package/dist/update/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/update/history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAEzD;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,qBAAqB,0BAA0B,CAAA;AAC5D,eAAO,MAAM,qBAAqB,0BAA0B,CAAA;AAC5D,eAAO,MAAM,0BAA0B,+BAA+B,CAAA;AAEtE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EACX,OAAO,qBAAqB,GAC5B,OAAO,qBAAqB,GAC5B,OAAO,0BAA0B,CAAA;IACrC,2IAA2I;IAC3I,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,0GAA0G;AAC1G,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,EAClB,KAAK,SAAK,GACT,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAShC"}

package/dist/update/history.js

@@ -0,0 +1,38 @@
+/**
+ * "Historique des mises à jour et des points de restauration, consultable
+ * depuis le même écran" (L22 task 9, point 5).
+ *
+ * Never a new table: an update check/apply is one more kind of entry in the
+ * audit log every other administrative action already writes to — same
+ * pattern `scheduled_task.run` uses in `serve.ts`. The *restore point* half
+ * of the history is not duplicated here either — it is exactly `cogenta
+ * backup list`'s own answer (`@cogenta/export`'s `readBackupManifest` over
+ * the `.cogenta/backups` directory), since `restore-point.ts` writes restore
+ * points through the very same `createSiteBackup` function backups already
+ * use, just tagged with an `update-` filename prefix. The router/CLI layer
+ * that serves "history" to the admin screen combines both reads; this module
+ * only owns the audit half.
+ */
+export const UPDATE_CHECKED_ACTION = 'system.update.checked';
+export const UPDATE_APPLIED_ACTION = 'system.update.applied';
+export const UPDATE_APPLY_FAILED_ACTION = 'system.update.apply_failed';
+export function recordUpdateHistory(auditLog, entry) {
+    return auditLog.record({
+        actorId: entry.actorId,
+        actorRoles: entry.actorRoles,
+        action: entry.action,
+        diff: entry.diff,
+    });
+}
+/** Every update-related audit entry, most recent first — the update-system slice of `AuditLog.list()`. */
+export async function listUpdateHistory(auditLog, limit = 50) {
+    const [checked, applied, failed] = await Promise.all([
+        auditLog.list({ action: UPDATE_CHECKED_ACTION, limit }),
+        auditLog.list({ action: UPDATE_APPLIED_ACTION, limit }),
+        auditLog.list({ action: UPDATE_APPLY_FAILED_ACTION, limit }),
+    ]);
+    return [...checked, ...applied, ...failed]
+        .sort((a, b) => (a.at < b.at ? 1 : a.at > b.at ? -1 : 0))
+        .slice(0, limit);
+}
+//# sourceMappingURL=history.js.map

package/dist/update/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/update/history.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAA;AAatE,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,KAA8B;IAE9B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkB,EAClB,KAAK,GAAG,EAAE;IAEV,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxD,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACpB,CAAC"}

package/dist/update/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The update system (L22 task 9) — checking npm for a newer
+ * `@cogenta/core`/`@cogenta/cli`, applying one with a mandatory restore
+ * point first, and the honest, best-effort contract-risk warning that goes
+ * with it. See each module's own doc comment for the reasoning; this file
+ * is only the barrel.
+ */
+export type { ApplyUpdateInput, ApplyUpdateResult, RunPackageInstall, RunPackageInstallInput, RunPackageInstallResult, } from './apply.js';
+export { applyUpdate, runNpmInstall } from './apply.js';
+export type { ChangelogSection, ContractRiskWarning } from './changelog-risk.js';
+export { sectionsMentioningContractRisk, splitChangelogSections } from './changelog-risk.js';
+export type { CheckForUpdatesInput, PackageUpdateStatus, UpdateCheckReport } from './check.js';
+export { checkForUpdates } from './check.js';
+export type { AssessContractRiskInput, ContractRiskAssessment } from './contract-risk.js';
+export { assessContractRisk, contractRiskUnknownError } from './contract-risk.js';
+export type { UpdateHistoryEntryInput } from './history.js';
+export { listUpdateHistory, recordUpdateHistory, UPDATE_APPLIED_ACTION, UPDATE_APPLY_FAILED_ACTION, UPDATE_CHECKED_ACTION, } from './history.js';
+export type { RestorePointSummary } from './list-restore-points.js';
+export { listRestorePoints } from './list-restore-points.js';
+export type { NpmPackageSummary } from './npm-registry.js';
+export { fetchNpmPackageSummary } from './npm-registry.js';
+export type { CreateUpdateRestorePointOptions, UpdateRestorePoint } from './restore-point.js';
+export { createUpdateRestorePoint } from './restore-point.js';
+export type { TarEntry } from './tar.js';
+export { findPackageFile, readTarEntries, readTarGz } from './tar.js';
+export type { AutoUpdatePolicy, UpdateBump } from './version-compare.js';
+export { AUTO_UPDATE_POLICIES, classifyBump, higherRiskBump, policyAllows, } from './version-compare.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/update/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/update/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACvD,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AACzF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AACjF,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,YAAY,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACrE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,sBAAsB,CAAA"}

package/dist/update/index.js

@@ -0,0 +1,11 @@
+export { applyUpdate, runNpmInstall } from './apply.js';
+export { sectionsMentioningContractRisk, splitChangelogSections } from './changelog-risk.js';
+export { checkForUpdates } from './check.js';
+export { assessContractRisk, contractRiskUnknownError } from './contract-risk.js';
+export { listUpdateHistory, recordUpdateHistory, UPDATE_APPLIED_ACTION, UPDATE_APPLY_FAILED_ACTION, UPDATE_CHECKED_ACTION, } from './history.js';
+export { listRestorePoints } from './list-restore-points.js';
+export { fetchNpmPackageSummary } from './npm-registry.js';
+export { createUpdateRestorePoint } from './restore-point.js';
+export { findPackageFile, readTarEntries, readTarGz } from './tar.js';
+export { AUTO_UPDATE_POLICIES, classifyBump, higherRiskBump, policyAllows, } from './version-compare.js';
+//# sourceMappingURL=index.js.map