@electriccitizen/bolt 0.1.0

package/README.md

@@ -0,0 +1,361 @@
+# Bolt
+
+CLI tool for automated Drupal 11+ site testing, updates, and PR creation. Built by [Electric Citizen](https://electriccitizen.com).
+
+Install once per site ("Bolt Certified"), pull updates via npm without re-initializing.
+
+## Principles
+
+These guide every design decision in Bolt:
+
+- **Non-invasive.** You can remove Bolt from any project with no consequence. Bolt doesn't modify your site's code, config, or database beyond its own tracked test content (which it cleans up). Uninstalling the module and removing the Composer entry is a clean exit.
+- **Transparent.** Bolt tells you what it's doing at every step. Progress output, clear error messages, and no hidden side effects. If Bolt changes something, it says so.
+- **Careful.** When a destructive, ambiguous, or unexpected situation arises, Bolt warns you and asks before proceeding. It won't overwrite your database, force-push your code, or modify files outside its scope without explicit confirmation.
+- **Idempotent.** Every command is safe to re-run. `bolt init` skips steps already done. `bolt suppress` regenerates cleanly. `bolt test` leaves the site in the state it found it.
+- **Automation-friendly.** Predictable exit codes (0/1/2), structured output formats (JSON, markdown), no interactive prompts in test/CI paths. Humans and scripts get the same reliability.
+- **Site-agnostic.** Bolt adapts to what it finds. It reads your site's structure and tests accordingly — no hardcoded content types, no assumptions about your setup. Works on any Drupal 11+ site.
+
+## Requirements
+
+- Node.js 20+
+- DDEV
+- A Drupal 11+ site running in DDEV
+
+## Installation
+
+```bash
+# npm global install (recommended)
+npm install -g @electriccitizen/bolt
+npx playwright install chromium
+
+# Verify
+bolt --version
+bolt doctor
+```
+
+**Development install** (for contributors):
+
+```bash
+git clone git@github.com:electriccitizen/bolt.git ~/projects/bolt
+cd ~/projects/bolt
+./scripts/setup.sh
+```
+
+## Quick Start
+
+```bash
+# From your Drupal project directory:
+git checkout -b bolt          # don't run bolt init on main!
+bolt init                     # installs module, creates config
+bolt doctor                   # verify environment
+bolt test                     # full test suite
+
+# Capture known issues as baseline
+bolt suppress                 # creates .boltrc.yml
+bolt test                     # now only NEW regressions cause failures
+
+# Before running updates, sync local environment
+bolt refresh --db             # pull latest code + database
+```
+
+## Commands
+
+### `bolt test`
+
+Run tests against a Drupal site. Auto-discovers what to test based on site structure.
+
+```bash
+bolt test [options]
+  --url <url>             Site URL (auto-detected from DDEV if omitted)
+  --mode <mode>           full | read-only | admin-only (default: full)
+  --plugins <list>        Comma-separated plugin names to run
+  --output <format>       text | json | markdown (default: text, auto-json when piped)
+  --report <path>         Write report to file
+  --exit-code             Non-zero exit on failure (for CI)
+  --fail-on <severity>    Threshold: critical | major | minor (default: major)
+  --headed                Show browser window
+  --screenshots <dir>     Save failure screenshots
+  --vr-baseline <dir>     Visual regression baseline directory
+  --vr-threshold <n>      VR diff threshold percentage (default: 0.1)
+  --content-types <list>  Limit to specific content types
+```
+
+**Exit codes:** 0 = pass, 1 = failure at or above threshold, 2 = error.
+
+**Execution modes:**
+- `full` — generate test content, authenticate, run all plugins, cleanup
+- `read-only` — no auth, no content changes, only anonymous-safe plugins
+- `admin-only` — authenticate but don't generate content
+
+**Auto-JSON:** When stdout is piped (non-TTY), bolt outputs JSON automatically.
+
+**Examples:**
+
+```bash
+bolt test --screenshots=./screenshots            # full suite with failure screenshots
+bolt test --mode=read-only                       # anonymous-only tests
+bolt test --plugins=accessibility                # single plugin
+bolt test --content-types=page,blog              # specific content types
+bolt test --exit-code --fail-on=major            # CI mode
+bolt test --output=markdown --report=report.md   # markdown report for a PR
+```
+
+### `bolt suppress`
+
+Capture current test failures as a suppression baseline. Creates `.boltrc.yml`.
+
+```bash
+bolt suppress [options]
+  --url <url>             Site URL (auto-detected from DDEV)
+  --dry-run               Preview without writing file
+  --mode <mode>           Execution mode (default: full)
+```
+
+Suppressed results appear in output but don't affect exit codes. Only *new* regressions cause failures. Safe to re-run — always captures the full current state.
+
+### `bolt refresh`
+
+Sync local environment to match production before running updates.
+
+```bash
+bolt refresh [options]
+  --db                Pull fresh database (prompted if omitted)
+  --skip-db           Skip database pull entirely
+  --source <env>      Database source environment (default: live)
+  --yes               Skip confirmation prompts
+  --branch <name>     Base branch to checkout (default: main)
+```
+
+What it does:
+1. Checks for uncommitted changes (warns, prompts to continue)
+2. Checks out base branch and pulls latest
+3. Starts DDEV if not running
+4. Runs `composer install` (sync to lockfile)
+5. Optionally pulls database from hosting provider
+6. Runs `drush cr`, `drush updb`, `drush cim`, `drush cr`
+
+Each step logs its duration. Exits early on failure.
+
+**Examples:**
+
+```bash
+bolt refresh --db                    # full refresh with database
+bolt refresh --skip-db               # code-only refresh
+bolt refresh --db --yes              # non-interactive (for scripting)
+bolt refresh --branch=develop --db   # refresh from a different branch
+```
+
+### `bolt update`
+
+Run Drupal module/core updates with per-module testing and rollback.
+
+```bash
+bolt update [options]
+  --module <name>       Update a specific module (Composer package name)
+  --all                 Update all outdated packages
+  --security-only       Only security updates
+  --dry-run             Show what would be updated without doing it
+  --skip-refresh        Skip the pre-update refresh step
+  --skip-test           Skip the baseline test
+  --yes                 Skip confirmation prompts
+```
+
+What it does:
+1. Pre-flight: refreshes local state, runs baseline test, gets outdated packages
+2. Per-module loop: creates branch, updates via Composer, runs `drush updb`, runs full test suite
+3. If tests pass: exports config, commits on update branch
+4. If tests fail: rolls back changes, deletes branch, continues to next module
+5. Produces summary report with per-module results
+
+Each update gets its own branch (`update/<package>-<version>`) off the base branch for clean per-module PRs.
+
+**Exit codes:** 0 = at least one update succeeded, 1 = all failed, 2 = error.
+
+**Examples:**
+
+```bash
+bolt update --dry-run --all                # see what would be updated
+bolt update --module=drupal/token          # update a single module
+bolt update --all --security-only          # only security updates
+bolt update --all --yes                    # non-interactive, all updates
+bolt update --all --skip-refresh           # skip the git pull / composer install step
+```
+
+### `bolt pr`
+
+Create GitHub PRs from update branches produced by `bolt update`. Requires [GitHub CLI](https://cli.github.com).
+
+```bash
+bolt pr [options]
+  --base <branch>       Base branch for PR (default: main)
+  --reviewers <list>    Comma-separated GitHub usernames
+  --draft               Create as draft PR
+  --all                 Create PRs for all update/* branches
+```
+
+What it does:
+1. Finds update branches (current branch or `--all` for all `update/*` branches)
+2. Parses commit messages for update details (package, versions, test results)
+3. Pushes branch to remote
+4. Creates PR with structured body via `gh pr create`
+5. Checks for existing PRs to avoid duplicates
+
+**Examples:**
+
+```bash
+bolt update --module=drupal/token      # creates update/drupal-token-1.15.0
+bolt pr --reviewers=broeker            # creates PR for current branch
+
+bolt update --all                      # creates multiple update branches
+bolt pr --all --draft                  # creates draft PRs for all of them
+```
+
+### `bolt init`
+
+Connect bolt to a client site. Run from the site's project root.
+
+```bash
+bolt init [options]
+  --skip-composer         Skip Composer setup
+  --skip-module           Skip module enable
+  --upgrade               Update bolt_inspect module only (no config changes)
+```
+
+What it does:
+1. Warns if on `main`/`master` branch (bolt changes should go on a dedicated branch)
+2. Creates DDEV volume mount for `bolt_inspect` module
+3. Adds Composer path repository
+4. Installs and enables `bolt_inspect`
+5. Creates `.bolt.yml` config template
+6. Adds bolt artifacts to `.gitignore`
+
+Idempotent — safe to re-run.
+
+### `bolt doctor`
+
+Validate the environment.
+
+```bash
+bolt doctor
+```
+
+Checks: bolt version, Node.js, Playwright, DDEV, module status, CLI/module version compatibility, `.bolt.yml` validity.
+
+## Test Plugins
+
+| Plugin | What it tests | Mode |
+|--------|--------------|------|
+| `structural-smoke` | Create + render nodes for every content type via Drush | full |
+| `browser-smoke` | Visit URLs, check HTTP status, JS errors, broken images | all |
+| `accessibility` | axe-core WCAG 2.0 AA scan on all representative URLs | all |
+| `visual-regression` | Screenshot comparison across 3 viewports per URL | all |
+| `field-interaction` | Fill and submit admin forms for each content type | full, admin |
+| `media-browser` | Upload media via library interface | full, admin |
+| `wysiwyg` | CKEditor 5 toolbar, formatting, media embed | full, admin |
+| `linkit` | LinkIt autocomplete in CKEditor | full, admin |
+
+Plugins skip gracefully when their required modules aren't installed.
+
+## Configuration
+
+### `.bolt.yml`
+
+Per-site test configuration, created by `bolt init`.
+
+```yaml
+adapter: ddev
+
+plugins:
+  skip:
+    - visual-regression
+  config:
+    accessibility:
+      rules_to_skip: [color-contrast]
+    visual-regression:
+      threshold: 0.5
+      mask:
+        - selector: ".block-current-date"
+
+custom_routes:
+  - /products
+  - /about
+
+refresh:
+  base_branch: main
+  db:
+    source: pantheon          # pantheon | file (or any ddev pull provider)
+    pantheon_site: mysite     # Terminus site name
+    pantheon_env: live        # Environment to pull from
+    # source: file
+    # file_path: /path/to/dump.sql.gz
+
+update:
+  ignore:
+    - drupal/core-*          # Update core manually
+  priority:
+    - drupal/core-recommended
+
+pr:
+  base_branch: main
+  default_reviewers:
+    - broeker
+  draft: false
+  remote: origin
+```
+
+### `.boltrc.yml`
+
+Per-site suppression rules, created by `bolt suppress`.
+
+```yaml
+suppress:
+  js_errors:
+    - pattern: "Siteimprove"
+      reason: "Analytics script, fails locally"
+  urls:
+    - path: "/admin/orphan"
+      reason: "Known 403, will be removed"
+  accessibility:
+    - rule: "color-contrast"
+      reason: "Design fix scheduled Q2"
+  plugins:
+    - name: "visual-regression"
+      reason: "Baselines not captured yet"
+```
+
+## Severity Levels
+
+| Severity | Meaning | Example |
+|----------|---------|---------|
+| `critical` | Site broken | CKEditor toolbar missing, node creation fails |
+| `major` | Significant functionality broken | Media upload fails, form validation errors |
+| `minor` | Cosmetic or edge-case issue | Broken image on one page, minor a11y violation |
+| `info` | Informational | Test passed, baseline captured |
+
+`--fail-on` controls which severities trigger non-zero exit. Default is `major`.
+
+## Upgrading
+
+```bash
+# Update bolt CLI
+npm update -g @electriccitizen/bolt
+
+# Update the Drupal module on each site
+cd ~/projects/client-acme
+bolt init --upgrade
+bolt doctor    # verify versions match
+```
+
+`bolt init --upgrade` updates the volume mount and module only — no config changes, no re-init.
+
+## Roadmap
+
+See [docs/PLAN-MVP.md](docs/PLAN-MVP.md) for the post-MVP roadmap.
+
+## Development
+
+See [docs/CONTRIBUTING.md](docs/CONTRIBUTING.md) for architecture, dev setup, and how to add plugins.
+
+## License
+
+Proprietary - Electric Citizen

package/dist/adapters/ddev.d.ts

@@ -0,0 +1,16 @@
+/**
+ * DDEV hosting adapter — executes Drush/Composer commands via `ddev`.
+ */
+import type { CommandResult, HostingAdapter } from '../types.js';
+export declare class DdevAdapter implements HostingAdapter {
+    name: string;
+    canConnect(): Promise<boolean>;
+    /**
+     * Get the primary site URL from DDEV's own config.
+     */
+    getSiteUrl(): Promise<string | null>;
+    drush(command: string, args?: string[]): Promise<CommandResult>;
+    composer(command: string, args?: string[]): Promise<CommandResult>;
+    getLoginUrl(siteUrl: string): Promise<string>;
+    private exec;
+}

package/dist/adapters/ddev.js

@@ -0,0 +1,75 @@
+/**
+ * DDEV hosting adapter — executes Drush/Composer commands via `ddev`.
+ */
+import { execFile } from 'child_process';
+import { promisify } from 'util';
+const execFileAsync = promisify(execFile);
+export class DdevAdapter {
+    name = 'ddev';
+    async canConnect() {
+        try {
+            const result = await this.exec('ddev', ['describe', '-j']);
+            return result.exitCode === 0;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Get the primary site URL from DDEV's own config.
+     */
+    async getSiteUrl() {
+        try {
+            const result = await this.exec('ddev', ['describe', '-j']);
+            if (result.exitCode !== 0)
+                return null;
+            const data = JSON.parse(result.stdout);
+            // ddev describe -j returns { raw: { ... } } with httpurl/httpsurl
+            const raw = data.raw ?? data;
+            return raw.httpsurl ?? raw.httpurl ?? null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async drush(command, args = []) {
+        return this.exec('ddev', ['drush', command, ...args]);
+    }
+    async composer(command, args = []) {
+        return this.exec('ddev', ['composer', command, ...args]);
+    }
+    async getLoginUrl(siteUrl) {
+        const result = await this.drush('uli', ['--uri=' + siteUrl, '--no-browser']);
+        const url = result.stdout.trim();
+        if (!url || result.exitCode !== 0) {
+            throw new Error(`Failed to get login URL: ${result.stderr}`);
+        }
+        return url;
+    }
+    async exec(command, args) {
+        try {
+            const { stdout, stderr } = await execFileAsync(command, args, {
+                maxBuffer: 10 * 1024 * 1024,
+                timeout: 120_000,
+            });
+            return { stdout, stderr, exitCode: 0 };
+        }
+        catch (err) {
+            // Node's execFile throws an augmented Error with stdout/stderr/code.
+            if (err instanceof Error) {
+                const execErr = err;
+                return {
+                    stdout: execErr.stdout ?? '',
+                    stderr: execErr.stderr ?? err.message,
+                    exitCode: typeof execErr.code === 'number' ? execErr.code : 1,
+                };
+            }
+            return {
+                stdout: '',
+                stderr: String(err),
+                exitCode: 1,
+            };
+        }
+    }
+}
+//# sourceMappingURL=ddev.js.map

package/dist/adapters/ddev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ddev.js","sourceRoot":"","sources":["../../src/adapters/ddev.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAA0B,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAGjC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,OAAO,WAAW;IACtB,IAAI,GAAG,MAAM,CAAC;IAEd,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACvC,kEAAkE;YAClE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC;YAC7B,OAAO,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAe,EAAE,OAAiB,EAAE;QAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAiB,EAAE;QACjD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAe;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,QAAQ,GAAG,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,IAAc;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE;gBAC5D,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;gBAC3B,OAAO,EAAE,OAAO;aACjB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,qEAAqE;YACrE,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,GAA+D,CAAC;gBAChF,OAAO;oBACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO;oBACrC,QAAQ,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAC9D,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;gBACnB,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/adapters/index.d.ts

@@ -0,0 +1 @@
+export { DdevAdapter } from './ddev.js';

package/dist/adapters/index.js

@@ -0,0 +1,2 @@
+export { DdevAdapter } from './ddev.js';
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/cli.js

@@ -0,0 +1,167 @@
+#!/usr/bin/env node
+import { Command } from 'commander';
+import { readFileSync } from 'fs';
+import { fileURLToPath } from 'url';
+import { dirname, join } from 'path';
+import { testCommand } from './commands/test.js';
+import { initCommand } from './commands/init.js';
+import { doctorCommand } from './commands/doctor.js';
+import { suppressCommand } from './commands/suppress.js';
+import { refreshCommand } from './commands/refresh.js';
+import { updateCommand } from './commands/update.js';
+import { prCommand } from './commands/pr.js';
+import { loadConfig } from './config.js';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+const pkg = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf-8'));
+const program = new Command();
+program
+    .name('bolt')
+    .description('CLI tool for Drupal 11+ site testing and operations')
+    .version(pkg.version);
+program
+    .command('test')
+    .description('Run tests against a Drupal site')
+    .option('--url <url>', 'Site URL (auto-detected from DDEV if omitted)')
+    .option('--mode <mode>', 'Execution mode: full, read-only, admin-only', 'full')
+    .option('--plugins <list>', 'Comma-separated plugin names')
+    .option('--output <format>', 'Output format: text, json, markdown')
+    .option('--report <path>', 'Write report to file')
+    .option('--exit-code', 'Non-zero exit on failure', false)
+    .option('--fail-on <severity>', 'Minimum severity to trigger non-zero exit: critical, major, minor', 'major')
+    .option('--headed', 'Run Playwright in headed mode', false)
+    .option('--screenshots <dir>', 'Save failure screenshots to directory')
+    .option('--vr-baseline <dir>', 'Visual regression baseline directory')
+    .option('--vr-threshold <n>', 'Visual regression diff threshold percentage (default: 0.1)', parseFloat)
+    .option('--content-types <list>', 'Comma-separated content types to test (limits structural-smoke, field-interaction)')
+    .action(async (opts) => {
+    const validSeverities = ['critical', 'major', 'minor'];
+    if (!validSeverities.includes(opts.failOn)) {
+        process.stderr.write(`Error: --fail-on must be one of: ${validSeverities.join(', ')}\n`);
+        process.exit(2);
+    }
+    // Determine output format: explicit flag > auto-JSON for non-TTY > text.
+    let outputFormat;
+    if (opts.output) {
+        outputFormat = opts.output;
+    }
+    else if (!process.stdout.isTTY) {
+        outputFormat = 'json';
+    }
+    else {
+        outputFormat = 'text';
+    }
+    const options = {
+        url: opts.url ?? '',
+        mode: opts.mode,
+        plugins: opts.plugins ? opts.plugins.split(',').map((s) => s.trim()) : undefined,
+        output: outputFormat,
+        report: opts.report,
+        exitCode: opts.exitCode,
+        failOn: opts.failOn,
+        headed: opts.headed,
+        screenshots: opts.screenshots,
+        vrBaseline: opts.vrBaseline,
+        vrThreshold: opts.vrThreshold,
+        contentTypes: opts.contentTypes ? opts.contentTypes.split(',').map((s) => s.trim()) : undefined,
+    };
+    await testCommand(options);
+});
+program
+    .command('init')
+    .description('Connect bolt to a client site (run from site root)')
+    .option('--skip-composer', 'Skip Composer path repo and require', false)
+    .option('--skip-module', 'Skip enabling the bolt_inspect module', false)
+    .option('--upgrade', 'Update bolt_inspect module only (no config changes)', false)
+    .action(async (opts) => {
+    await initCommand({
+        skipComposer: opts.skipComposer,
+        skipModule: opts.skipModule,
+        upgrade: opts.upgrade,
+    });
+});
+program
+    .command('doctor')
+    .description('Validate the developer environment')
+    .action(async () => {
+    await doctorCommand();
+});
+program
+    .command('suppress')
+    .description('Capture current test failures as suppression baseline (.boltrc.yml)')
+    .option('--url <url>', 'Site URL (auto-detected from DDEV if omitted)')
+    .option('--dry-run', 'Preview suppressions without writing .boltrc.yml', false)
+    .option('--mode <mode>', 'Execution mode: full, read-only, admin-only', 'full')
+    .action(async (opts) => {
+    await suppressCommand({
+        url: opts.url,
+        dryRun: opts.dryRun,
+        mode: opts.mode,
+    });
+});
+program
+    .command('refresh')
+    .description('Sync local environment to match production (git pull, composer install, optional DB)')
+    .option('--db', 'Pull fresh database', false)
+    .option('--skip-db', 'Skip database pull entirely (no prompt)', false)
+    .option('--source <env>', 'Database source environment (default: live)')
+    .option('--yes', 'Skip all confirmation prompts', false)
+    .option('--branch <name>', 'Base branch to checkout (default: main)')
+    .action(async (opts) => {
+    const config = loadConfig();
+    await refreshCommand({
+        db: opts.db,
+        skipDb: opts.skipDb,
+        source: opts.source ?? '',
+        yes: opts.yes,
+        branch: opts.branch ?? '',
+        boltConfig: config,
+    });
+});
+program
+    .command('update')
+    .description('Run Drupal module/core updates with per-module testing and rollback')
+    .option('--module <name>', 'Update a specific module (Composer package name)')
+    .option('--all', 'Update all outdated packages', false)
+    .option('--security-only', 'Only security updates', false)
+    .option('--dry-run', 'Show what would be updated without doing it', false)
+    .option('--skip-refresh', 'Skip the pre-update refresh step', false)
+    .option('--skip-test', 'Skip the baseline test', false)
+    .option('--yes', 'Skip confirmation prompts', false)
+    .action(async (opts) => {
+    if (!opts.module && !opts.all) {
+        process.stderr.write('Error: specify --module <name> or --all\n' +
+            'Run `bolt update --dry-run --all` to see available updates.\n');
+        process.exit(2);
+    }
+    const config = loadConfig();
+    await updateCommand({
+        module: opts.module,
+        all: opts.all,
+        securityOnly: opts.securityOnly,
+        dryRun: opts.dryRun,
+        skipRefresh: opts.skipRefresh,
+        skipTest: opts.skipTest,
+        yes: opts.yes,
+        boltConfig: config,
+    });
+});
+program
+    .command('pr')
+    .description('Create GitHub PRs from update branches')
+    .option('--base <branch>', 'Base branch for PR (default: main)')
+    .option('--reviewers <list>', 'Comma-separated GitHub usernames')
+    .option('--draft', 'Create as draft PR', false)
+    .option('--all', 'Create PRs for all update/* branches', false)
+    .action(async (opts) => {
+    const config = loadConfig();
+    await prCommand({
+        base: opts.base,
+        reviewers: opts.reviewers,
+        draft: opts.draft,
+        all: opts.all,
+        boltConfig: config,
+    });
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAErC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACtC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAErF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,qDAAqD,CAAC;KAClE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAExB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,iCAAiC,CAAC;KAC9C,MAAM,CAAC,aAAa,EAAE,+CAA+C,CAAC;KACtE,MAAM,CAAC,eAAe,EAAE,6CAA6C,EAAE,MAAM,CAAC;KAC9E,MAAM,CAAC,kBAAkB,EAAE,8BAA8B,CAAC;KAC1D,MAAM,CAAC,mBAAmB,EAAE,qCAAqC,CAAC;KAClE,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC;KACjD,MAAM,CAAC,aAAa,EAAE,0BAA0B,EAAE,KAAK,CAAC;KACxD,MAAM,CAAC,sBAAsB,EAAE,mEAAmE,EAAE,OAAO,CAAC;KAC5G,MAAM,CAAC,UAAU,EAAE,+BAA+B,EAAE,KAAK,CAAC;KAC1D,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,CAAC;KACtE,MAAM,CAAC,qBAAqB,EAAE,sCAAsC,CAAC;KACrE,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,EAAE,UAAU,CAAC;KACtG,MAAM,CAAC,wBAAwB,EAAE,oFAAoF,CAAC;KACtH,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACnE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,yEAAyE;IACzE,IAAI,YAAoB,CAAC;IACzB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,YAAY,GAAG,MAAM,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,YAAY,GAAG,MAAM,CAAC;IACxB,CAAC;IAED,MAAM,OAAO,GAAgB;QAC3B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,EAAE;QACnB,IAAI,EAAE,IAAI,CAAC,IAAqB;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACxF,MAAM,EAAE,YAA4C;QACpD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,MAAM,EAAE,IAAI,CAAC,MAAkB;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACxG,CAAC;IAEF,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,oDAAoD,CAAC;KACjE,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,EAAE,KAAK,CAAC;KACvE,MAAM,CAAC,eAAe,EAAE,uCAAuC,EAAE,KAAK,CAAC;KACvE,MAAM,CAAC,WAAW,EAAE,qDAAqD,EAAE,KAAK,CAAC;KACjF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,WAAW,CAAC;QAChB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,oCAAoC,CAAC;KACjD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,aAAa,EAAE,CAAC;AACxB,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,aAAa,EAAE,+CAA+C,CAAC;KACtE,MAAM,CAAC,WAAW,EAAE,kDAAkD,EAAE,KAAK,CAAC;KAC9E,MAAM,CAAC,eAAe,EAAE,6CAA6C,EAAE,MAAM,CAAC;KAC9E,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,eAAe,CAAC;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI,EAAE,IAAI,CAAC,IAA0C;KACtD,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,sFAAsF,CAAC;KACnG,MAAM,CAAC,MAAM,EAAE,qBAAqB,EAAE,KAAK,CAAC;KAC5C,MAAM,CAAC,WAAW,EAAE,yCAAyC,EAAE,KAAK,CAAC;KACrE,MAAM,CAAC,gBAAgB,EAAE,6CAA6C,CAAC;KACvE,MAAM,CAAC,OAAO,EAAE,+BAA+B,EAAE,KAAK,CAAC;KACvD,MAAM,CAAC,iBAAiB,EAAE,yCAAyC,CAAC;KACpE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,cAAc,CAAC;QACnB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;QACzB,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qEAAqE,CAAC;KAClF,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;KAC7E,MAAM,CAAC,OAAO,EAAE,8BAA8B,EAAE,KAAK,CAAC;KACtD,MAAM,CAAC,iBAAiB,EAAE,uBAAuB,EAAE,KAAK,CAAC;KACzD,MAAM,CAAC,WAAW,EAAE,6CAA6C,EAAE,KAAK,CAAC;KACzE,MAAM,CAAC,gBAAgB,EAAE,kCAAkC,EAAE,KAAK,CAAC;KACnE,MAAM,CAAC,aAAa,EAAE,wBAAwB,EAAE,KAAK,CAAC;KACtD,MAAM,CAAC,OAAO,EAAE,2BAA2B,EAAE,KAAK,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C;YAC3C,+DAA+D,CAChE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,aAAa,CAAC;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,IAAI,CAAC;KACb,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,CAAC;KAC/D,MAAM,CAAC,oBAAoB,EAAE,kCAAkC,CAAC;KAChE,MAAM,CAAC,SAAS,EAAE,oBAAoB,EAAE,KAAK,CAAC;KAC9C,MAAM,CAAC,OAAO,EAAE,sCAAsC,EAAE,KAAK,CAAC;KAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,SAAS,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,4 @@
+/**
+ * bolt doctor — validate the developer environment.
+ */
+export declare function doctorCommand(): Promise<void>;