@cogenta/cli 0.4.0 → 0.6.0

package/dist/update/check.d.ts

@@ -0,0 +1,60 @@
+import { type ContractRiskAssessment } from './contract-risk.js';
+import { type UpdateBump } from './version-compare.js';
+/**
+ * `cogenta update check` / `GET /api/updates/status` (L22 task 9, point 1):
+ * "compare la version installée à la dernière publiée sur npm —
+ * `@cogenta/core` et `@cogenta/cli` sont déjà la source de vérité de
+ * version."
+ *
+ * "Installed" here means each package's own self-reported version
+ * (`getCoreVersion`/`getCliVersion`, both lazily computed with
+ * `readOwnPackageVersion` in `@cogenta/core` — see that function's own
+ * comment for why this is never a top-level constant) — whichever
+ * `@cogenta/core`/`@cogenta/cli` this very process actually
+ * loaded, not a guess read from `node_modules` by path (which would answer
+ * a different, less certain question on a hoisted or symlinked install).
+ * Scoped to exactly these two packages, deliberately, not every `@cogenta/*`
+ * dependency a site happens to carry (`@cogenta/theme-canonical`, any
+ * installed plugin…) — see this module's caller for why.
+ *
+ * Point 4's contract-risk check ("avant d'appliquer : notifier le risque")
+ * runs here too, not only inside `apply.ts` — an admin (or `cogenta update
+ * check`) needs to see the risk *before* deciding to confirm, so `check()`
+ * already fetches it for every package that actually has an update
+ * available (never for one that does not — no reason to download a tarball
+ * nobody would apply). `includeContractRisk: false` skips it for a caller
+ * that only wants the fast version comparison.
+ */
+export interface PackageUpdateStatus {
+    readonly name: string;
+    readonly installed: string;
+    /** `null` only when the registry check for this specific package failed — never when it simply reports no update. */
+    readonly latest: string | null;
+    readonly bump: UpdateBump;
+    readonly updateAvailable: boolean;
+    /** Set only when `latest` is `null`. */
+    readonly checkError: string | undefined;
+    /** `null` when there is no update to assess, or `includeContractRisk` was `false`. See `contract-risk.ts` for how honestly limited this signal is. */
+    readonly contractRisk: ContractRiskAssessment | null;
+}
+export interface UpdateCheckReport {
+    readonly checkedAt: string;
+    readonly packages: readonly PackageUpdateStatus[];
+    readonly updateAvailable: boolean;
+    readonly highestBump: UpdateBump;
+    /** `true` when any package's `contractRisk` actually found a warning — the one field a "should I click apply" UI decision boils down to. */
+    readonly contractRiskDetected: boolean;
+}
+export interface CheckForUpdatesInput {
+    /** `{ name, installed }` for each package to check — `check.ts` itself has no opinion on which packages that is; `cogenta update`/`update-router.ts` pass `@cogenta/core`/`@cogenta/cli`. */
+    readonly packages: readonly {
+        readonly name: string;
+        readonly installed: string;
+    }[];
+    readonly fetchImpl?: typeof fetch;
+    readonly now?: () => Date;
+    /** Default `true`. `false` skips the tarball fetch/scan entirely — a faster, network-lighter check with no risk signal. */
+    readonly includeContractRisk?: boolean;
+}
+export declare function checkForUpdates(input: CheckForUpdatesInput): Promise<UpdateCheckReport>;
+//# sourceMappingURL=check.d.ts.map

package/dist/update/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/update/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAEpF,OAAO,EAAgC,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAEpF;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,qHAAqH;IACrH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,wCAAwC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,sJAAsJ;IACtJ,QAAQ,CAAC,YAAY,EAAE,sBAAsB,GAAG,IAAI,CAAA;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAA;IACjD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAA;IAChC,4IAA4I;IAC5I,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAA;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,6LAA6L;IAC7L,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;IACzB,2HAA2H;IAC3H,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAA;CACvC;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA0D7F"}

package/dist/update/check.js

@@ -0,0 +1,56 @@
+import { assessContractRisk } from './contract-risk.js';
+import { fetchNpmPackageSummary } from './npm-registry.js';
+import { classifyBump, higherRiskBump } from './version-compare.js';
+export async function checkForUpdates(input) {
+    const now = input.now ?? (() => new Date());
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const includeContractRisk = input.includeContractRisk ?? true;
+    const packages = [];
+    for (const { name, installed } of input.packages) {
+        try {
+            const summary = await fetchNpmPackageSummary(name, fetchImpl);
+            const bump = classifyBump(installed, summary.latest);
+            const updateAvailable = bump !== 'none' && bump !== 'unknown';
+            let contractRisk = null;
+            const tarballUrl = summary.tarballUrl[summary.latest];
+            if (includeContractRisk && updateAvailable && tarballUrl !== undefined) {
+                contractRisk = await assessContractRisk({
+                    packageName: name,
+                    fromVersion: installed,
+                    toVersion: summary.latest,
+                    tarballUrl,
+                    fetchImpl,
+                });
+            }
+            packages.push({
+                name,
+                installed,
+                latest: summary.latest,
+                bump,
+                updateAvailable,
+                checkError: undefined,
+                contractRisk,
+            });
+        }
+        catch (error) {
+            packages.push({
+                name,
+                installed,
+                latest: null,
+                bump: 'unknown',
+                updateAvailable: false,
+                checkError: error instanceof Error ? error.message : String(error),
+                contractRisk: null,
+            });
+        }
+    }
+    const highestBump = packages.reduce((highest, pkg) => higherRiskBump(highest, pkg.bump === 'unknown' ? 'none' : pkg.bump), 'none');
+    return {
+        checkedAt: now().toISOString(),
+        packages,
+        updateAvailable: packages.some((pkg) => pkg.updateAvailable),
+        highestBump,
+        contractRiskDetected: packages.some((pkg) => (pkg.contractRisk?.warnings.length ?? 0) > 0),
+    };
+}
+//# sourceMappingURL=check.js.map

package/dist/update/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../src/update/check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA+B,MAAM,oBAAoB,CAAA;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAA;AA2DpF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAA2B;IAC/D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IACjD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,mBAAmB,GAAG,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAA;IAE7D,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,KAAK,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACpD,MAAM,eAAe,GAAG,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS,CAAA;YAE7D,IAAI,YAAY,GAAkC,IAAI,CAAA;YACtD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACrD,IAAI,mBAAmB,IAAI,eAAe,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBACvE,YAAY,GAAG,MAAM,kBAAkB,CAAC;oBACtC,WAAW,EAAE,IAAI;oBACjB,WAAW,EAAE,SAAS;oBACtB,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,UAAU;oBACV,SAAS;iBACV,CAAC,CAAA;YACJ,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,eAAe;gBACf,UAAU,EAAE,SAAS;gBACrB,YAAY;aACb,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,SAAS;gBACT,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,SAAS;gBACf,eAAe,EAAE,KAAK;gBACtB,UAAU,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAClE,YAAY,EAAE,IAAI;aACnB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CACjC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EACrF,MAAM,CACP,CAAA;IAED,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,WAAW,EAAE;QAC9B,QAAQ;QACR,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5D,WAAW;QACX,oBAAoB,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;KAC3F,CAAA;AACH,CAAC"}

package/dist/update/contract-risk.d.ts

@@ -0,0 +1,55 @@
+import { CogentaError } from '@cogenta/core';
+import { type ContractRiskWarning } from './changelog-risk.js';
+/**
+ * "Avant d'appliquer : notifier le risque si la mise à jour touche un
+ * contrat A/B/C/D/E" (L22 task 9, point 4) — read honestly, this is the
+ * hardest, least reliable part of the whole feature, and this module is
+ * built to be honest about that rather than to overclaim.
+ *
+ * **What is actually detectable, and since when.** A changeset's own prose
+ * lives in `.changeset/*.md` only until a release consumes it into the
+ * publishing package's `CHANGELOG.md` — after that, the `.changeset` file is
+ * deleted and `CHANGELOG.md` is the only surviving copy. Nothing about that
+ * text is ever sent to npm's registry API itself (no "breaking: true" field
+ * exists on a package version there); the only way to read it from an
+ * installed site, with no access to this repository's own git history, is to
+ * fetch the target version's own **published tarball** and read
+ * `CHANGELOG.md` out of it directly — which is exactly what this module does
+ * (`tar.ts`'s minimal reader, over `dist.tarball` from the npm registry,
+ * never a third-party CDN).
+ *
+ * **The one honest catch.** Before this task, `@cogenta/core` and
+ * `@cogenta/cli`'s `package.json` `"files"` was `["dist"]` — `CHANGELOG.md`
+ * was never actually included in the published npm tarball at all (verified
+ * with a real `npm pack` during this task). This task adds it to `"files"`
+ * for both packages, but that only takes effect for versions published
+ * **from now on**. Every version already on npm when this ships (`0.1.x`
+ * through `0.4.0` at the time of writing) has no `CHANGELOG.md` in its
+ * tarball, so this reports `available: false` for those, honestly, rather
+ * than inventing a "no risk found" that would really mean "could not look."
+ *
+ * **Even once it can read a CHANGELOG.md, this is a keyword scan of prose,
+ * not a structured signal** (`changelog-risk.ts`'s `FROZEN_CONTRACT_PATTERN`)
+ * — deliberately broad, so it can miss an unusually-worded note and it can
+ * also flag one that turns out to be harmless. It is a strong hint an admin
+ * reviews before confirming, never a guarantee, and the UI/CLI say so.
+ */
+export interface ContractRiskAssessment {
+    readonly packageName: string;
+    /** `false` when no CHANGELOG.md could be read for the target version at all — an honest "could not determine," never treated as "no risk." */
+    readonly available: boolean;
+    readonly reason: string | undefined;
+    /** Every version between the installed one (exclusive) and the target (inclusive) whose changelog section this could actually read. */
+    readonly scannedVersions: readonly string[];
+    readonly warnings: readonly ContractRiskWarning[];
+}
+export interface AssessContractRiskInput {
+    readonly packageName: string;
+    readonly fromVersion: string;
+    readonly toVersion: string;
+    readonly tarballUrl: string;
+    readonly fetchImpl?: typeof fetch;
+}
+export declare function assessContractRisk(input: AssessContractRiskInput): Promise<ContractRiskAssessment>;
+export declare function contractRiskUnknownError(packageName: string, reason: string): CogentaError;
+//# sourceMappingURL=contract-risk.d.ts.map

package/dist/update/contract-risk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-risk.d.ts","sourceRoot":"","sources":["../../src/update/contract-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EACL,KAAK,mBAAmB,EAGzB,MAAM,qBAAqB,CAAA;AAG5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,8IAA8I;IAC9I,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,uIAAuI;IACvI,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3C,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAClD;AAQD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAClC;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,sBAAsB,CAAC,CAmDjC;AAWD,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,CAO1F"}

package/dist/update/contract-risk.js

@@ -0,0 +1,75 @@
+import { CogentaError } from '@cogenta/core';
+import { compareVersions, parseVersion } from '@cogenta/plugins';
+import { sectionsMentioningContractRisk, splitChangelogSections, } from './changelog-risk.js';
+import { findPackageFile, readTarGz } from './tar.js';
+const MAX_TARBALL_BYTES = 20 * 1024 * 1024;
+function unavailable(packageName, reason) {
+    return { packageName, available: false, reason, scannedVersions: [], warnings: [] };
+}
+export async function assessContractRisk(input) {
+    const { packageName, fromVersion, toVersion, tarballUrl } = input;
+    const fetchImpl = input.fetchImpl ?? fetch;
+    let response;
+    try {
+        response = await fetchImpl(tarballUrl, { signal: AbortSignal.timeout(15_000) });
+    }
+    catch (error) {
+        return unavailable(packageName, `could not download the package tarball: ${String(error)}`);
+    }
+    if (!response.ok) {
+        return unavailable(packageName, `the package tarball responded with HTTP ${response.status}`);
+    }
+    const contentLength = response.headers.get('content-length');
+    if (contentLength !== null && Number(contentLength) > MAX_TARBALL_BYTES) {
+        return unavailable(packageName, 'the package tarball is larger than this check accepts');
+    }
+    let bytes;
+    try {
+        bytes = await response.arrayBuffer();
+    }
+    catch (error) {
+        return unavailable(packageName, `could not read the package tarball: ${String(error)}`);
+    }
+    if (bytes.byteLength > MAX_TARBALL_BYTES) {
+        return unavailable(packageName, 'the package tarball is larger than this check accepts');
+    }
+    let changelog;
+    try {
+        const entries = readTarGz(Buffer.from(bytes));
+        changelog = findPackageFile(entries, 'CHANGELOG.md');
+    }
+    catch (error) {
+        return unavailable(packageName, `could not read the package tarball: ${String(error)}`);
+    }
+    if (changelog === null) {
+        return unavailable(packageName, 'this version carries no CHANGELOG.md in its published tarball');
+    }
+    const sections = splitChangelogSections(changelog.toString('utf8'));
+    const inRange = sections.filter((section) => isInRange(section.version, fromVersion, toVersion));
+    const warnings = sectionsMentioningContractRisk(inRange);
+    return {
+        packageName,
+        available: true,
+        reason: undefined,
+        scannedVersions: inRange.map((section) => section.version),
+        warnings,
+    };
+}
+/** `fromVersion < version <= toVersion`, via `@cogenta/plugins`'s own comparator — unparseable versions (a pre-release tag this parser does not understand) are excluded rather than guessed at. */
+function isInRange(version, fromVersion, toVersion) {
+    const v = parseVersion(version);
+    const from = parseVersion(fromVersion);
+    const to = parseVersion(toVersion);
+    if (v === null || from === null || to === null)
+        return false;
+    return compareVersions(v, from) > 0 && compareVersions(v, to) <= 0;
+}
+export function contractRiskUnknownError(packageName, reason) {
+    return new CogentaError({
+        code: 'UPDATE_CHECK_FAILED',
+        message: `Could not determine whether updating "${packageName}" touches a frozen contract: ${reason}`,
+        hint: 'Review the target version manually before applying, or retry once network access to registry.npmjs.org is available.',
+        details: { packageName, reason },
+    });
+}
+//# sourceMappingURL=contract-risk.js.map

package/dist/update/contract-risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-risk.js","sourceRoot":"","sources":["../../src/update/contract-risk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAChE,OAAO,EAEL,8BAA8B,EAC9B,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AA+CrD,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAE1C,SAAS,WAAW,CAAC,WAAmB,EAAE,MAAc;IACtD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AACrF,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;IACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;IAE1C,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,2CAA2C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC,WAAW,EAAE,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC5D,IAAI,aAAa,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,iBAAiB,EAAE,CAAC;QACxE,OAAO,WAAW,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,KAAkB,CAAA;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAA;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,GAAG,iBAAiB,EAAE,CAAC;QACzC,OAAO,WAAW,CAAC,WAAW,EAAE,uDAAuD,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,SAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7C,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,WAAW,CAAC,WAAW,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,WAAW,CAAC,WAAW,EAAE,+DAA+D,CAAC,CAAA;IAClG,CAAC;IAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAA;IAChG,MAAM,QAAQ,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAA;IAExD,OAAO;QACL,WAAW;QACX,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,SAAS;QACjB,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1D,QAAQ;KACT,CAAA;AACH,CAAC;AAED,oMAAoM;AACpM,SAAS,SAAS,CAAC,OAAe,EAAE,WAAmB,EAAE,SAAiB;IACxE,MAAM,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,CAAA;IAC/B,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAA;IACtC,MAAM,EAAE,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IAClC,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC5D,OAAO,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,WAAmB,EAAE,MAAc;IAC1E,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,yCAAyC,WAAW,gCAAgC,MAAM,EAAE;QACrG,IAAI,EAAE,sHAAsH;QAC5H,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;KACjC,CAAC,CAAA;AACJ,CAAC"}

package/dist/update/history.d.ts

@@ -0,0 +1,30 @@
+import type { AuditEntry, AuditLog } from '@cogenta/auth';
+/**
+ * "Historique des mises à jour et des points de restauration, consultable
+ * depuis le même écran" (L22 task 9, point 5).
+ *
+ * Never a new table: an update check/apply is one more kind of entry in the
+ * audit log every other administrative action already writes to — same
+ * pattern `scheduled_task.run` uses in `serve.ts`. The *restore point* half
+ * of the history is not duplicated here either — it is exactly `cogenta
+ * backup list`'s own answer (`@cogenta/export`'s `readBackupManifest` over
+ * the `.cogenta/backups` directory), since `restore-point.ts` writes restore
+ * points through the very same `createSiteBackup` function backups already
+ * use, just tagged with an `update-` filename prefix. The router/CLI layer
+ * that serves "history" to the admin screen combines both reads; this module
+ * only owns the audit half.
+ */
+export declare const UPDATE_CHECKED_ACTION = "system.update.checked";
+export declare const UPDATE_APPLIED_ACTION = "system.update.applied";
+export declare const UPDATE_APPLY_FAILED_ACTION = "system.update.apply_failed";
+export interface UpdateHistoryEntryInput {
+    readonly actorId: string | null;
+    readonly actorRoles: readonly string[];
+    readonly action: typeof UPDATE_CHECKED_ACTION | typeof UPDATE_APPLIED_ACTION | typeof UPDATE_APPLY_FAILED_ACTION;
+    /** Never a secret, never a full npm install log — package names, versions, bump, restore point path, whether contract risk was flagged. */
+    readonly diff: Record<string, unknown>;
+}
+export declare function recordUpdateHistory(auditLog: AuditLog, entry: UpdateHistoryEntryInput): Promise<AuditEntry>;
+/** Every update-related audit entry, most recent first — the update-system slice of `AuditLog.list()`. */
+export declare function listUpdateHistory(auditLog: AuditLog, limit?: number): Promise<readonly AuditEntry[]>;
+//# sourceMappingURL=history.d.ts.map

package/dist/update/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/update/history.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAEzD;;;;;;;;;;;;;;GAcG;AAEH,eAAO,MAAM,qBAAqB,0BAA0B,CAAA;AAC5D,eAAO,MAAM,qBAAqB,0BAA0B,CAAA;AAC5D,eAAO,MAAM,0BAA0B,+BAA+B,CAAA;AAEtE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,MAAM,EACX,OAAO,qBAAqB,GAC5B,OAAO,qBAAqB,GAC5B,OAAO,0BAA0B,CAAA;IACrC,2IAA2I;IAC3I,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACvC;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAOrB;AAED,0GAA0G;AAC1G,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,QAAQ,EAClB,KAAK,SAAK,GACT,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAShC"}

package/dist/update/history.js

@@ -0,0 +1,38 @@
+/**
+ * "Historique des mises à jour et des points de restauration, consultable
+ * depuis le même écran" (L22 task 9, point 5).
+ *
+ * Never a new table: an update check/apply is one more kind of entry in the
+ * audit log every other administrative action already writes to — same
+ * pattern `scheduled_task.run` uses in `serve.ts`. The *restore point* half
+ * of the history is not duplicated here either — it is exactly `cogenta
+ * backup list`'s own answer (`@cogenta/export`'s `readBackupManifest` over
+ * the `.cogenta/backups` directory), since `restore-point.ts` writes restore
+ * points through the very same `createSiteBackup` function backups already
+ * use, just tagged with an `update-` filename prefix. The router/CLI layer
+ * that serves "history" to the admin screen combines both reads; this module
+ * only owns the audit half.
+ */
+export const UPDATE_CHECKED_ACTION = 'system.update.checked';
+export const UPDATE_APPLIED_ACTION = 'system.update.applied';
+export const UPDATE_APPLY_FAILED_ACTION = 'system.update.apply_failed';
+export function recordUpdateHistory(auditLog, entry) {
+    return auditLog.record({
+        actorId: entry.actorId,
+        actorRoles: entry.actorRoles,
+        action: entry.action,
+        diff: entry.diff,
+    });
+}
+/** Every update-related audit entry, most recent first — the update-system slice of `AuditLog.list()`. */
+export async function listUpdateHistory(auditLog, limit = 50) {
+    const [checked, applied, failed] = await Promise.all([
+        auditLog.list({ action: UPDATE_CHECKED_ACTION, limit }),
+        auditLog.list({ action: UPDATE_APPLIED_ACTION, limit }),
+        auditLog.list({ action: UPDATE_APPLY_FAILED_ACTION, limit }),
+    ]);
+    return [...checked, ...applied, ...failed]
+        .sort((a, b) => (a.at < b.at ? 1 : a.at > b.at ? -1 : 0))
+        .slice(0, limit);
+}
+//# sourceMappingURL=history.js.map

package/dist/update/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/update/history.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,uBAAuB,CAAA;AAC5D,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAA;AAatE,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,KAA8B;IAE9B,OAAO,QAAQ,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC,CAAA;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkB,EAClB,KAAK,GAAG,EAAE;IAEV,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC;QACvD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC;KAC7D,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SACxD,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;AACpB,CAAC"}

package/dist/update/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The update system (L22 task 9) — checking npm for a newer
+ * `@cogenta/core`/`@cogenta/cli`, applying one with a mandatory restore
+ * point first, and the honest, best-effort contract-risk warning that goes
+ * with it. See each module's own doc comment for the reasoning; this file
+ * is only the barrel.
+ */
+export type { ApplyUpdateInput, ApplyUpdateResult, RunPackageInstall, RunPackageInstallInput, RunPackageInstallResult, } from './apply.js';
+export { applyUpdate, runNpmInstall } from './apply.js';
+export type { ChangelogSection, ContractRiskWarning } from './changelog-risk.js';
+export { sectionsMentioningContractRisk, splitChangelogSections } from './changelog-risk.js';
+export type { CheckForUpdatesInput, PackageUpdateStatus, UpdateCheckReport } from './check.js';
+export { checkForUpdates } from './check.js';
+export type { AssessContractRiskInput, ContractRiskAssessment } from './contract-risk.js';
+export { assessContractRisk, contractRiskUnknownError } from './contract-risk.js';
+export type { UpdateHistoryEntryInput } from './history.js';
+export { listUpdateHistory, recordUpdateHistory, UPDATE_APPLIED_ACTION, UPDATE_APPLY_FAILED_ACTION, UPDATE_CHECKED_ACTION, } from './history.js';
+export type { RestorePointSummary } from './list-restore-points.js';
+export { listRestorePoints } from './list-restore-points.js';
+export type { NpmPackageSummary } from './npm-registry.js';
+export { fetchNpmPackageSummary } from './npm-registry.js';
+export type { CreateUpdateRestorePointOptions, UpdateRestorePoint } from './restore-point.js';
+export { createUpdateRestorePoint } from './restore-point.js';
+export type { TarEntry } from './tar.js';
+export { findPackageFile, readTarEntries, readTarGz } from './tar.js';
+export type { AutoUpdatePolicy, UpdateBump } from './version-compare.js';
+export { AUTO_UPDATE_POLICIES, classifyBump, higherRiskBump, policyAllows, } from './version-compare.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/update/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/update/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACvD,YAAY,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAChF,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5F,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AACzF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AACjF,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,cAAc,CAAA;AACrB,YAAY,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAC5D,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,YAAY,EAAE,+BAA+B,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAC7D,YAAY,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AACrE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,sBAAsB,CAAA"}

package/dist/update/index.js

@@ -0,0 +1,11 @@
+export { applyUpdate, runNpmInstall } from './apply.js';
+export { sectionsMentioningContractRisk, splitChangelogSections } from './changelog-risk.js';
+export { checkForUpdates } from './check.js';
+export { assessContractRisk, contractRiskUnknownError } from './contract-risk.js';
+export { listUpdateHistory, recordUpdateHistory, UPDATE_APPLIED_ACTION, UPDATE_APPLY_FAILED_ACTION, UPDATE_CHECKED_ACTION, } from './history.js';
+export { listRestorePoints } from './list-restore-points.js';
+export { fetchNpmPackageSummary } from './npm-registry.js';
+export { createUpdateRestorePoint } from './restore-point.js';
+export { findPackageFile, readTarEntries, readTarGz } from './tar.js';
+export { AUTO_UPDATE_POLICIES, classifyBump, higherRiskBump, policyAllows, } from './version-compare.js';
+//# sourceMappingURL=index.js.map

package/dist/update/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/update/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAEvD,OAAO,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAE5F,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAEjF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,cAAc,CAAA;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAA;AAE5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAE7D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAErE,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,sBAAsB,CAAA"}

package/dist/update/list-restore-points.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The restore-point half of "historique des mises à jour et des points de
+ * restauration" (L22 task 9, point 5) — exactly `cogenta backup list`'s own
+ * directory scan (`.cogenta/backups`), reused rather than re-implemented,
+ * with one addition: `triggeredByUpdate` is read straight off the filename
+ * prefix `restore-point.ts` writes (`update-…zip` vs. `backup-…zip`), so the
+ * admin's history view can show *which* restore points exist because an
+ * update took them automatically, without a second manifest field.
+ */
+export interface RestorePointSummary {
+    readonly path: string;
+    readonly createdAt: string;
+    readonly rows: number;
+    readonly tables: number;
+    readonly checksum: string;
+    readonly encrypted: boolean;
+    readonly triggeredByUpdate: boolean;
+}
+export declare function listRestorePoints(dir: string): Promise<readonly RestorePointSummary[]>;
+//# sourceMappingURL=list-restore-points.d.ts.map

package/dist/update/list-restore-points.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-restore-points.d.ts","sourceRoot":"","sources":["../../src/update/list-restore-points.ts"],"names":[],"mappings":"AAIA;;;;;;;;GAQG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAA;CACpC;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CA6B5F"}

package/dist/update/list-restore-points.js

@@ -0,0 +1,35 @@
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { readBackupManifest } from '@cogenta/export';
+export async function listRestorePoints(dir) {
+    let files;
+    try {
+        files = (await readdir(dir)).filter((name) => name.endsWith('.zip'));
+    }
+    catch {
+        // No backup directory yet — nothing has ever been backed up.
+        return [];
+    }
+    const summaries = [];
+    for (const file of files) {
+        try {
+            const manifest = await readBackupManifest(join(dir, file));
+            summaries.push({
+                path: join(dir, file),
+                createdAt: manifest.createdAt,
+                rows: manifest.tables.reduce((sum, table) => sum + table.rows, 0),
+                tables: manifest.tables.length,
+                checksum: manifest.checksum,
+                encrypted: manifest.encrypted,
+                triggeredByUpdate: file.startsWith('update-'),
+            });
+        }
+        catch {
+            // A manifest that fails to read (corrupted, mid-write) is skipped
+            // rather than crashing the whole history view — `cogenta backup list`
+            // makes the same choice for the same reason.
+        }
+    }
+    return summaries.sort((a, b) => (a.createdAt < b.createdAt ? 1 : -1));
+}
+//# sourceMappingURL=list-restore-points.js.map

package/dist/update/list-restore-points.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-restore-points.js","sourceRoot":"","sources":["../../src/update/list-restore-points.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAsBpD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW;IACjD,IAAI,KAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;QAC7D,OAAO,EAAE,CAAA;IACX,CAAC;IAED,MAAM,SAAS,GAA0B,EAAE,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAA;YAC1D,SAAS,CAAC,IAAI,CAAC;gBACb,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;gBACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;gBACjE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;gBAC9B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;aAC9C,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,sEAAsE;YACtE,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvE,CAAC"}

package/dist/update/npm-registry.d.ts

@@ -0,0 +1,11 @@
+export interface NpmPackageSummary {
+    readonly name: string;
+    /** `dist-tags.latest` — the version `npm install <name>` would resolve to today. */
+    readonly latest: string;
+    /** Every version the registry lists, in whatever order it returned them (usually publish order). */
+    readonly versions: readonly string[];
+    /** `dist.tarball` per version — only present for a version this response actually described. */
+    readonly tarballUrl: Readonly<Record<string, string>>;
+}
+export declare function fetchNpmPackageSummary(packageName: string, fetchImpl?: typeof fetch): Promise<NpmPackageSummary>;
+//# sourceMappingURL=npm-registry.d.ts.map

package/dist/update/npm-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.d.ts","sourceRoot":"","sources":["../../src/update/npm-registry.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,oGAAoG;IACpG,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,gGAAgG;IAChG,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CACtD;AAoBD,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CA0C5B"}

package/dist/update/npm-registry.js

@@ -0,0 +1,74 @@
+import { CogentaError } from '@cogenta/core';
+/**
+ * The one piece of real network access `cogenta update` needs: "what is the
+ * newest published version of this package, and where is its tarball" — the
+ * npm registry's own abbreviated packument
+ * (`Accept: application/vnd.npm.install-v1+json`), which is a small fraction
+ * of the full packument (no per-version readme, no full dependency graph)
+ * but still carries `dist-tags.latest` and, per version, `dist.tarball` —
+ * exactly what `contract-risk.ts` needs to fetch one tarball and read its
+ * `CHANGELOG.md`.
+ *
+ * `registry.npmjs.org` only — never a CDN mirror (unpkg, jsdelivr…), which
+ * would be a second external host this optional feature depends on for no
+ * real gain. Every caller degrades to "could not check" on failure (R1's
+ * spirit: checking for an update is optional infrastructure, never something
+ * the rest of the CMS needs to run).
+ */
+const REGISTRY_BASE = 'https://registry.npmjs.org';
+const FETCH_TIMEOUT_MS = 10_000;
+function registryUrl(packageName) {
+    // A scoped name (`@cogenta/core`) needs the whole name percent-encoded as
+    // one segment — `encodeURIComponent` turns `/` into `%2F`, which is what
+    // the registry expects for a scoped package's single-segment route.
+    return `${REGISTRY_BASE}/${encodeURIComponent(packageName)}`;
+}
+function checkFailed(packageName, reason, cause) {
+    const npmPage = `https://www.npmjs.com/package/${packageName}`;
+    return new CogentaError({
+        code: 'UPDATE_CHECK_FAILED',
+        message: `Could not check npm for the latest version of "${packageName}": ${reason}`,
+        hint: `This needs outbound network access to registry.npmjs.org. Everything else in this admin works without it (R1) — try again later, or check manually at ${npmPage}.`,
+        cause,
+        details: { packageName },
+    });
+}
+export async function fetchNpmPackageSummary(packageName, fetchImpl = fetch) {
+    let response;
+    try {
+        response = await fetchImpl(registryUrl(packageName), {
+            headers: { accept: 'application/vnd.npm.install-v1+json' },
+            signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+        });
+    }
+    catch (error) {
+        throw checkFailed(packageName, 'the request failed', error);
+    }
+    if (response.status === 404) {
+        throw checkFailed(packageName, 'npm has no package by this name');
+    }
+    if (!response.ok) {
+        throw checkFailed(packageName, `npm responded with HTTP ${response.status}`);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch (error) {
+        throw checkFailed(packageName, 'the response was not valid JSON', error);
+    }
+    const record = body;
+    const latest = record['dist-tags']?.latest;
+    if (typeof latest !== 'string' || latest === '') {
+        throw checkFailed(packageName, 'the response carried no "dist-tags.latest"');
+    }
+    const versions = record.versions ?? {};
+    const tarballUrl = {};
+    for (const [version, meta] of Object.entries(versions)) {
+        const tarball = meta.dist?.tarball;
+        if (typeof tarball === 'string' && tarball !== '')
+            tarballUrl[version] = tarball;
+    }
+    return { name: packageName, latest, versions: Object.keys(versions), tarballUrl };
+}
+//# sourceMappingURL=npm-registry.js.map

package/dist/update/npm-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry.js","sourceRoot":"","sources":["../../src/update/npm-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,aAAa,GAAG,4BAA4B,CAAA;AAClD,MAAM,gBAAgB,GAAG,MAAM,CAAA;AAY/B,SAAS,WAAW,CAAC,WAAmB;IACtC,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,GAAG,aAAa,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAA;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,MAAc,EAAE,KAAe;IACvE,MAAM,OAAO,GAAG,iCAAiC,WAAW,EAAE,CAAA;IAC9D,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,kDAAkD,WAAW,MAAM,MAAM,EAAE;QACpF,IAAI,EAAE,yJAAyJ,OAAO,GAAG;QACzK,KAAK;QACL,OAAO,EAAE,EAAE,WAAW,EAAE;KACzB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,WAAmB,EACnB,SAAS,GAAiB,KAAK;IAE/B,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE;YACnD,OAAO,EAAE,EAAE,MAAM,EAAE,qCAAqC,EAAE;YAC1D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAA;IAC7D,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,WAAW,CAAC,WAAW,EAAE,2BAA2B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,WAAW,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,MAAM,GAAG,IAGd,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,WAAW,CAAC,WAAW,EAAE,4CAA4C,CAAC,CAAA;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;IACtC,MAAM,UAAU,GAA2B,EAAE,CAAA;IAC7C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAA;QAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE;YAAE,UAAU,CAAC,OAAO,CAAC,GAAG,OAAO,CAAA;IAClF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAA;AACnF,CAAC"}

package/dist/update/restore-point.d.ts

@@ -0,0 +1,26 @@
+import { type Logger } from '@cogenta/core';
+/**
+ * "Un point de restauration obligatoire avant toute mise à jour" (L22 task
+ * 9, point 2) — this is the *entire* implementation: one call into
+ * `createSiteBackup`, the exact function `cogenta backup create` itself
+ * calls, tagged with the `update-` filename prefix so it shows up
+ * identifiably in `cogenta backup list` and in the admin's own history view
+ * without a second backup format or a second directory. Never a smaller,
+ * update-specific backup — a restore point has to be able to put the whole
+ * site back, and `createSiteBackup` already is that.
+ */
+export interface CreateUpdateRestorePointOptions {
+    readonly cwd?: string;
+    readonly env?: Record<string, string | undefined>;
+    readonly logger?: Logger;
+    readonly dir?: string;
+}
+export interface UpdateRestorePoint {
+    readonly path: string;
+    readonly createdAt: string;
+    readonly tableCount: number;
+    readonly rowCount: number;
+    readonly checksum: string;
+}
+export declare function createUpdateRestorePoint(options: CreateUpdateRestorePointOptions): Promise<UpdateRestorePoint>;
+//# sourceMappingURL=restore-point.d.ts.map

package/dist/update/restore-point.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-point.d.ts","sourceRoot":"","sources":["../../src/update/restore-point.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAGzD;;;;;;;;;GASG;AAEH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAkB7B"}

package/dist/update/restore-point.js

@@ -0,0 +1,23 @@
+import { CogentaError } from '@cogenta/core';
+import { createSiteBackup } from '../commands/backup.js';
+export async function createUpdateRestorePoint(options) {
+    try {
+        const { path, manifest } = await createSiteBackup({ ...options, filenamePrefix: 'update-' });
+        return {
+            path,
+            createdAt: manifest.createdAt,
+            tableCount: manifest.tables.length,
+            rowCount: manifest.tables.reduce((sum, table) => sum + table.rows, 0),
+            checksum: manifest.checksum,
+        };
+    }
+    catch (error) {
+        throw new CogentaError({
+            code: 'UPDATE_RESTORE_POINT_FAILED',
+            message: 'Could not create a restore point before the update — nothing was changed.',
+            hint: 'This update was refused rather than applied without a safety net. Check the underlying error, free up disk space if that is the cause, and try again.',
+            cause: error,
+        });
+    }
+}
+//# sourceMappingURL=restore-point.js.map

package/dist/update/restore-point.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore-point.js","sourceRoot":"","sources":["../../src/update/restore-point.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AA4BxD,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAwC;IAExC,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAA;QAC5F,OAAO;YACL,IAAI;YACJ,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM;YAClC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,6BAA6B;YACnC,OAAO,EAAE,2EAA2E;YACpF,IAAI,EAAE,uJAAuJ;YAC7J,KAAK,EAAE,KAAK;SACb,CAAC,CAAA;IACJ,CAAC;AACH,CAAC"}