@fuzdev/fuz_gitops 0.71.0 → 0.73.0

package/dist/publishing_event.js

@@ -0,0 +1,140 @@
+/**
+ * Structured events for multi-repo publishing.
+ *
+ * Publishing emits a stream of tagged events alongside its human-readable logging,
+ * so machine consumers (CI, dashboards) can follow a run step by step. Every run
+ * opens with a `run_started` event carrying `wetrun`: when `false`, the run is a dry
+ * run and every `package_completed` is a prediction (its `commit` is `'simulated'`)
+ * rather than an applied change. A run's `run_finished` summary is derived from the
+ * same event list via `summarize_events`, so the stream and the summary never drift.
+ *
+ * Events are consumed through a `PublishingEventHandler` sink (see
+ * `publishing_event_handler.ts`).
+ *
+ * @module
+ */
+import { z } from 'zod';
+/**
+ * Coarse triage classification for a failed package. Lets consumers branch on
+ * failure kind without parsing the message.
+ */
+export const PublishingErrorCode = z.enum([
+    'publish',
+    'network',
+    'auth',
+    'dependency',
+    'build',
+    // the real published version diverged from the frozen plan's prediction — an
+    // invariant violation, distinct from an ordinary publish failure (see fail-loud
+    // drift detection in `multi_repo_publisher.ts`)
+    'drift',
+    'other',
+]);
+/** Tallied outcome of a publishing run, derived from its events via `summarize_events`. */
+export const PublishingRunSummary = z.strictObject({
+    total: z.number().meta({ description: 'packages in the publishing order (the candidate set)' }),
+    published: z.number().meta({ description: 'packages published (or, in a dry run, predicted)' }),
+    failed: z.number(),
+    skipped: z.number(),
+    duration: z.number().meta({ description: 'wall-clock duration in milliseconds' }),
+});
+/**
+ * A single structured event emitted during a publishing run. Tagged on `event` so the
+ * union serializes as one self-describing JSON object per event (JSON-lines on the wire).
+ */
+export const PublishingEvent = z.discriminatedUnion('event', [
+    z.strictObject({
+        event: z.literal('run_started'),
+        wetrun: z.boolean().meta({ description: 'false means every package_completed is a prediction' }),
+        total: z.number(),
+    }),
+    z.strictObject({
+        event: z.literal('package_skipped'),
+        name: z.string(),
+        reason: z.string(),
+    }),
+    z.strictObject({
+        event: z.literal('package_completed'),
+        name: z.string(),
+        old_version: z.string(),
+        new_version: z.string(),
+        // mirrors `BumpType` from `version_utils.ts`; inline so the event schema is self-contained
+        bump_type: z.enum(['major', 'minor', 'patch']),
+        breaking: z.boolean(),
+        commit: z.string().meta({ description: "'simulated' in a dry run, otherwise the commit hash" }),
+        tag: z.string(),
+    }),
+    z.strictObject({
+        event: z.literal('npm_waited'),
+        name: z.string(),
+        version: z.string().meta({ description: 'the version waited on after publishing' }),
+    }),
+    z.strictObject({
+        event: z.literal('package_failed'),
+        name: z.string(),
+        error: z.string(),
+        code: PublishingErrorCode,
+    }),
+    z.strictObject({
+        event: z.literal('dependency_updated'),
+        dependent: z.string(),
+        dependency: z.string(),
+        version: z.string(),
+        // 'prod'/'peer' updates run inline in the publish pass; 'dev' updates run in the later
+        // dev-dependency pass. Lets a consumer reconstruct which side-effect phase this is.
+        dep_type: z.enum(['prod', 'peer', 'dev']),
+        // true when the update creates an auto-changeset (a publishable dependent republishes);
+        // false for dev-dep updates and update-only leaves (private dependents never publish).
+        creates_changeset: z.boolean(),
+    }),
+    z.strictObject({
+        event: z.literal('deploy_started'),
+        name: z.string(),
+    }),
+    z.strictObject({
+        event: z.literal('deploy_completed'),
+        name: z.string(),
+    }),
+    z.strictObject({
+        event: z.literal('deploy_failed'),
+        name: z.string(),
+        error: z.string(),
+    }),
+    z.strictObject({
+        event: z.literal('run_finished'),
+        summary: PublishingRunSummary,
+    }),
+]);
+/**
+ * Derives a run summary from the captured event list — the single canonical path from
+ * events to summary, so the `run_finished` summary always agrees with the stream.
+ * Call before emitting `run_finished` (which is not itself counted).
+ *
+ * @param events - the events captured so far this run
+ * @param duration - wall-clock duration in milliseconds
+ */
+export const summarize_events = (events, duration) => {
+    let total = 0;
+    let published = 0;
+    let failed = 0;
+    let skipped = 0;
+    for (const event of events) {
+        switch (event.event) {
+            case 'run_started':
+                total = event.total;
+                break;
+            case 'package_completed':
+                published++;
+                break;
+            case 'package_failed':
+                failed++;
+                break;
+            case 'package_skipped':
+                skipped++;
+                break;
+            default:
+                break;
+        }
+    }
+    return { total, published, failed, skipped, duration };
+};

package/dist/publishing_event_handler.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Composable sinks for the publishing event stream.
+ *
+ * A `PublishingEventHandler` is anything that can receive a `PublishingEvent`. Handlers
+ * compose: `multi_handler` fans out, `masking_handler` redacts secrets then forwards.
+ * Emission is best-effort and synchronous — an observability sink must never fail or
+ * slow a run. The default sink is `null_handler` (drops everything).
+ *
+ * @module
+ */
+import type { PublishingEvent } from './publishing_event.js';
+/** A sink for publishing events. */
+export interface PublishingEventHandler {
+    emit: (event: PublishingEvent) => void;
+}
+/** A `capture_handler` also exposes the events it has collected. */
+export interface CapturingEventHandler extends PublishingEventHandler {
+    readonly events: Array<PublishingEvent>;
+}
+/** Drops every event. The default when no handler is supplied. */
+export declare const null_handler: () => PublishingEventHandler;
+/** Collects events in memory. Used to build the run report and in tests. */
+export declare const capture_handler: () => CapturingEventHandler;
+/**
+ * Writes each event as one JSON object per line (JSON-lines) to `process.stdout`.
+ * Write failures are swallowed — the stream is observability, not control flow.
+ */
+export declare const stdout_handler: () => PublishingEventHandler;
+/** Fans an event out to every handler in order. */
+export declare const multi_handler: (handlers: Array<PublishingEventHandler>) => PublishingEventHandler;
+/**
+ * Wraps a handler, masking secrets in each event's string fields before forwarding.
+ *
+ * @param inner - the handler to forward masked events to
+ * @param mask - the masking function, defaults to `mask_secrets`
+ */
+export declare const masking_handler: (inner: PublishingEventHandler, mask?: (event: PublishingEvent) => PublishingEvent) => PublishingEventHandler;
+/** Redacts known secret shapes from a string. */
+export declare const redact_secrets: (text: string) => string;
+/** Returns a copy of the event with secrets redacted from its string-valued fields. */
+export declare const mask_secrets: (event: PublishingEvent) => PublishingEvent;
+//# sourceMappingURL=publishing_event_handler.d.ts.map

package/dist/publishing_event_handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishing_event_handler.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_event_handler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,uBAAuB,CAAC;AAE3D,oCAAoC;AACpC,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;CACvC;AAED,oEAAoE;AACpE,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACpE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;CACxC;AAED,kEAAkE;AAClE,eAAO,MAAM,YAAY,QAAO,sBAE9B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,eAAe,QAAO,qBAQlC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAO,sBAQhC,CAAC;AAEH,mDAAmD;AACnD,eAAO,MAAM,aAAa,GAAI,UAAU,KAAK,CAAC,sBAAsB,CAAC,KAAG,sBAMtE,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAC3B,OAAO,sBAAsB,EAC7B,OAAM,CAAC,KAAK,EAAE,eAAe,KAAK,eAA8B,KAC9D,sBAID,CAAC;AAWH,iDAAiD;AACjD,eAAO,MAAM,cAAc,GAAI,MAAM,MAAM,KAAG,MACgD,CAAC;AAE/F,uFAAuF;AACvF,eAAO,MAAM,YAAY,GAAI,OAAO,eAAe,KAAG,eAMrD,CAAC"}

package/dist/publishing_event_handler.js

@@ -0,0 +1,75 @@
+/**
+ * Composable sinks for the publishing event stream.
+ *
+ * A `PublishingEventHandler` is anything that can receive a `PublishingEvent`. Handlers
+ * compose: `multi_handler` fans out, `masking_handler` redacts secrets then forwards.
+ * Emission is best-effort and synchronous — an observability sink must never fail or
+ * slow a run. The default sink is `null_handler` (drops everything).
+ *
+ * @module
+ */
+/** Drops every event. The default when no handler is supplied. */
+export const null_handler = () => ({
+    emit: () => { },
+});
+/** Collects events in memory. Used to build the run report and in tests. */
+export const capture_handler = () => {
+    const events = [];
+    return {
+        events,
+        emit: (event) => {
+            events.push(event);
+        },
+    };
+};
+/**
+ * Writes each event as one JSON object per line (JSON-lines) to `process.stdout`.
+ * Write failures are swallowed — the stream is observability, not control flow.
+ */
+export const stdout_handler = () => ({
+    emit: (event) => {
+        try {
+            process.stdout.write(JSON.stringify(event) + '\n');
+        }
+        catch {
+            // best-effort: a logging sink must never fail a run
+        }
+    },
+});
+/** Fans an event out to every handler in order. */
+export const multi_handler = (handlers) => ({
+    emit: (event) => {
+        for (const handler of handlers) {
+            handler.emit(event);
+        }
+    },
+});
+/**
+ * Wraps a handler, masking secrets in each event's string fields before forwarding.
+ *
+ * @param inner - the handler to forward masked events to
+ * @param mask - the masking function, defaults to `mask_secrets`
+ */
+export const masking_handler = (inner, mask = mask_secrets) => ({
+    emit: (event) => {
+        inner.emit(mask(event));
+    },
+});
+// Minimal redaction rules: npm auth tokens (bare or registry-scoped), `SECRET_*`
+// env-style assignments, and `npm_`-prefixed tokens. Deliberately lean — error
+// strings can carry npm/git output; a fuller secret catalog is deferred.
+const SECRET_RULES = [
+    [/((?:\/\/[^\s:]+:)?_authToken\s*=\s*)\S+/gi, '$1[redacted]'],
+    [/(SECRET_[A-Z0-9_]+\s*[=:]\s*)\S+/g, '$1[redacted]'],
+    [/(npm_[A-Za-z0-9]{4})[A-Za-z0-9]{12,}/g, '$1[redacted]'],
+];
+/** Redacts known secret shapes from a string. */
+export const redact_secrets = (text) => SECRET_RULES.reduce((acc, [pattern, replacement]) => acc.replace(pattern, replacement), text);
+/** Returns a copy of the event with secrets redacted from its string-valued fields. */
+export const mask_secrets = (event) => {
+    const masked = {};
+    for (const [key, value] of Object.entries(event)) {
+        masked[key] = typeof value === 'string' ? redact_secrets(value) : value;
+    }
+    return masked;
+};

package/dist/publishing_plan.d.ts

@@ -1,6 +1,6 @@
 import type { Logger } from '@fuzdev/fuz_util/log.js';
 import type { LocalRepo } from './local_repo.js';
-import type { BumpType } from './semver.js';
+import { type BumpType } from './version_utils.js';
 import type { ChangesetOperations } from './operations.js';
 export { log_publishing_plan, type LogPlanOptions } from './publishing_plan_logging.js';
 export interface VersionChange {
@@ -21,7 +21,6 @@ export interface DependencyUpdate {
     current_version: string;
     new_version: string;
     type: 'dependencies' | 'devDependencies' | 'peerDependencies';
-    causes_republish: boolean;
 }
 export interface VerboseChangesetDetail {
     package_name: string;

package/dist/publishing_plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publishing_plan.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAGpD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAG1C,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAUzD,OAAO,EAAC,mBAAmB,EAAE,KAAK,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,QAAQ,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB,aAAa,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;IAC9D,gBAAgB,EAAE,OAAO,CAAC;CAC1B;AAGD,MAAM,WAAW,sBAAsB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtC,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,YAAY,GAAG,MAAM,CAAC;IAC7D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC,CAAC;IAC1E,SAAS,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC3B,iBAAiB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjD,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,kBAAkB,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACnD,aAAa,EAAE,mBAAmB,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC9B,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,YAAY,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GACpC,OAAO,KAAK,CAAC,SAAS,CAAC,EACvB,UAAS,mBAAwB,KAC/B,OAAO,CAAC,cAAc,CAmaxB,CAAC"}
+{"version":3,"file":"publishing_plan.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAGpD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EACN,KAAK,QAAQ,EAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AAUzD,OAAO,EAAC,mBAAmB,EAAE,KAAK,cAAc,EAAC,MAAM,8BAA8B,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,QAAQ,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,QAAQ,CAAC;IACzB,aAAa,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,cAAc,GAAG,iBAAiB,GAAG,kBAAkB,CAAC;CAC9D;AAGD,MAAM,WAAW,sBAAsB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,QAAQ,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtC,aAAa,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,YAAY,GAAG,MAAM,CAAC;IAC7D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC,CAAC;IAC1E,SAAS,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC3B,iBAAiB,EAAE,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjD,UAAU,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,kBAAkB,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACnD,aAAa,EAAE,mBAAmB,CAAC;IACnC,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC9B,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,eAAe,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACtC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9C,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACtB,YAAY,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,mBAAmB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,mBAAmB,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,GACpC,OAAO,KAAK,CAAC,SAAS,CAAC,EACvB,UAAS,mBAAwB,KAC/B,OAAO,CAAC,cAAc,CAobxB,CAAC"}

package/dist/publishing_plan.js

@@ -1,6 +1,6 @@
 import { styleText as st } from 'node:util';
 import { validate_dependency_graph } from './graph_validation.js';
-import { is_breaking_change, compare_bump_types, calculate_next_version } from './version_utils.js';
+import { is_breaking_change, compare_bump_types, calculate_next_version, } from './version_utils.js';
 import { default_changeset_operations } from './operations_defaults.js';
 import { GITOPS_MAX_ITERATIONS_DEFAULT } from './gitops_constants.js';
 import { calculate_dependency_updates, get_required_bump_for_dependencies, } from './publishing_plan_helpers.js';
@@ -70,6 +70,17 @@ export const generate_publishing_plan = async (repos, options = {}) => {
         const repo = repos.find((r) => r.library.name === pkg_name);
         if (!repo)
             continue;
+        // Private packages never publish — exclude them from version changes entirely (no
+        // publish step, npm-wait, bump escalation, or auto-changeset). They keep their slot in
+        // the topological order. Flag a private package that carries a changeset, since that
+        // changeset can't be published.
+        if (repo.library.package_json.private) {
+            const private_has_changesets = await ops.has_changesets({ repo });
+            if (private_has_changesets.ok && private_has_changesets.value) {
+                warnings.push(`${pkg_name} is private — its changeset(s) will not be published`);
+            }
+            continue;
+        }
         // Check for changesets
         const has_result = await ops.has_changesets({ repo });
         if (!has_result.ok) {
@@ -140,6 +151,10 @@ export const generate_publishing_plan = async (repos, options = {}) => {
         // Process packages to check for bump escalation and auto-generated changesets
         for (const repo of repos) {
             const pkg_name = repo.library.name;
+            // Private packages are excluded from version changes (they never publish), so they
+            // never escalate or auto-generate a changeset.
+            if (repo.library.package_json.private)
+                continue;
             // Get required bump from dependencies
             const required_bump = get_required_bump_for_dependencies(repo, dependency_updates, breaking_packages);
             // Find triggering dependency for verbose output
@@ -248,6 +263,8 @@ export const generate_publishing_plan = async (repos, options = {}) => {
         const { dependency_updates: pending_updates } = calculate_dependency_updates(repos, predicted_versions, breaking_packages);
         for (const repo of repos) {
             const pkg_name = repo.library.name;
+            if (repo.library.package_json.private)
+                continue; // private packages never publish
             const required_bump = get_required_bump_for_dependencies(repo, pending_updates, breaking_packages);
             // Check if this package would need processing
             const existing_entry = version_changes.find((vc) => vc.package_name === pkg_name);

package/dist/publishing_plan_helpers.d.ts

@@ -6,7 +6,7 @@
  * @module
  */
 import type { LocalRepo } from './local_repo.js';
-import type { BumpType } from './semver.js';
+import { type BumpType } from './version_utils.js';
 import type { DependencyUpdate } from './publishing_plan.js';
 /**
  * Calculates all dependency updates between packages based on predicted versions.

package/dist/publishing_plan_helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publishing_plan_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACxC,OAAO,KAAK,CAAC,SAAS,CAAC,EACvB,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,mBAAmB,GAAG,CAAC,MAAM,CAAC,KAC5B;IACF,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;CA2E9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kCAAkC,GAC9C,MAAM,SAAS,EACf,oBAAoB,KAAK,CAAC,gBAAgB,CAAC,EAC3C,mBAAmB,GAAG,CAAC,MAAM,CAAC,KAC5B,QAAQ,GAAG,IA8Bb,CAAC"}
+{"version":3,"file":"publishing_plan_helpers.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan_helpers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAoD,KAAK,QAAQ,EAAC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,sBAAsB,CAAC;AAE3D;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,GACxC,OAAO,KAAK,CAAC,SAAS,CAAC,EACvB,oBAAoB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,mBAAmB,GAAG,CAAC,MAAM,CAAC,KAC5B;IACF,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5C,iBAAiB,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;CAwE9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,kCAAkC,GAC9C,MAAM,SAAS,EACf,oBAAoB,KAAK,CAAC,gBAAgB,CAAC,EAC3C,mBAAmB,GAAG,CAAC,MAAM,CAAC,KAC5B,QAAQ,GAAG,IAqBb,CAAC"}

package/dist/publishing_plan_helpers.js

@@ -5,7 +5,7 @@
  *
  * @module
  */
-import { needs_update } from './version_utils.js';
+import { needs_update, required_bump_for_dependency_update } from './version_utils.js';
 /**
  * Calculates all dependency updates between packages based on predicted versions.
  *
@@ -29,7 +29,6 @@ export const calculate_dependency_updates = (repos, predicted_versions, breaking
                         current_version,
                         new_version,
                         type: 'dependencies',
-                        causes_republish: true,
                     });
                     if (breaking_packages.has(dep_name)) {
                         const cascades = breaking_cascades.get(dep_name) || [];
@@ -52,7 +51,6 @@ export const calculate_dependency_updates = (repos, predicted_versions, breaking
                         current_version,
                         new_version,
                         type: 'peerDependencies',
-                        causes_republish: true,
                     });
                     if (breaking_packages.has(dep_name)) {
                         const cascades = breaking_cascades.get(dep_name) || [];
@@ -75,7 +73,6 @@ export const calculate_dependency_updates = (repos, predicted_versions, breaking
                         current_version,
                         new_version,
                         type: 'devDependencies',
-                        causes_republish: false,
                     });
                 }
             }
@@ -100,15 +97,5 @@ export const get_required_bump_for_dependencies = (repo, dependency_updates, bre
     }
     // Check if any of these dependencies have breaking changes
     const has_breaking_deps = relevant_updates.some((update) => breaking_packages.has(update.updated_dependency));
-    const current_version = repo.library.package_json.version || '0.0.0';
-    const [major] = current_version.split('.').map(Number);
-    const is_pre_1_0 = major === 0;
-    if (has_breaking_deps) {
-        // Breaking changes propagate
-        // Pre-1.0: use minor for breaking changes
-        // 1.0+: use major for breaking changes
-        return is_pre_1_0 ? 'minor' : 'major';
-    }
-    // For non-breaking dependency updates, use patch
-    return 'patch';
+    return required_bump_for_dependency_update(repo.library.package_json.version || '0.0.0', has_breaking_deps);
 };

package/dist/publishing_plan_logging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publishing_plan_logging.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan_logging.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAGpD,OAAO,KAAK,EACX,cAAc,EAQd,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AA2GD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,cAAc,EACpB,KAAK,MAAM,EACX,UAAS,cAAmB,KAC1B,IAiKF,CAAC"}
+{"version":3,"file":"publishing_plan_logging.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/publishing_plan_logging.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAC,MAAM,EAAC,MAAM,yBAAyB,CAAC;AAGpD,OAAO,KAAK,EACX,cAAc,EAQd,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,cAAc;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;CAClB;AA2GD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,cAAc,EACpB,KAAK,MAAM,EACX,UAAS,cAAmB,KAC1B,IA6IF,CAAC"}

package/dist/publishing_plan_logging.js

@@ -120,31 +120,23 @@ export const log_publishing_plan = (plan, log, options = {}) => {
         const with_changesets = ordered_changes.filter((vc) => vc.has_changesets && !vc.needs_bump_escalation);
         const with_escalation = ordered_changes.filter((vc) => vc.needs_bump_escalation);
         const with_auto_changesets = ordered_changes.filter((vc) => vc.will_generate_changeset);
-        // Log each group with diff-style output
-        if (with_changesets.length > 0) {
-            log.info(st('cyan', 'Version Changes (from changesets):'));
-            for (const change of with_changesets) {
-                const idx = ordered_changes.indexOf(change);
-                log_version_change_with_diffs(change, idx, ordered_changes.length, dependency_updates, breaking_cascades, log);
+        // A single running counter across all groups so positions read 1..N with no
+        // gaps. (Numbering per-group index would make the first group skip the numbers
+        // that land in a later group, e.g. jump from `[9/12]` to `[11/12]`.)
+        const total = with_changesets.length + with_escalation.length + with_auto_changesets.length;
+        let position = 0;
+        const log_change_group = (title, color, changes) => {
+            if (changes.length === 0)
+                return;
+            log.info(st(color, title));
+            for (const change of changes) {
+                log_version_change_with_diffs(change, position++, total, dependency_updates, breaking_cascades, log);
             }
             log.info('');
-        }
-        if (with_escalation.length > 0) {
-            log.info(st('yellow', 'Version Changes (bump escalation):'));
-            for (const change of with_escalation) {
-                const idx = ordered_changes.indexOf(change);
-                log_version_change_with_diffs(change, idx, ordered_changes.length, dependency_updates, breaking_cascades, log);
-            }
-            log.info('');
-        }
-        if (with_auto_changesets.length > 0) {
-            log.info(st('cyan', 'Version Changes (auto-generated):'));
-            for (const change of with_auto_changesets) {
-                const idx = ordered_changes.indexOf(change);
-                log_version_change_with_diffs(change, idx, ordered_changes.length, dependency_updates, breaking_cascades, log);
-            }
-            log.info('');
-        }
+        };
+        log_change_group('Version Changes (from changesets):', 'cyan', with_changesets);
+        log_change_group('Version Changes (bump escalation):', 'yellow', with_escalation);
+        log_change_group('Version Changes (auto-generated):', 'cyan', with_auto_changesets);
     }
     else {
         log.info(st('dim', 'No packages to publish'));

package/dist/repo_ops.d.ts

@@ -35,7 +35,7 @@ export interface RepoPath {
  * Get repo paths from gitops config without full git sync.
  * Lighter weight than `get_gitops_ready()` - just resolves paths.
  *
- * @param config_path - path to `gitops.config.ts` (defaults to `./gitops.config.ts`)
+ * @param config_path - path to the gitops config file (defaults to `gitops.config.ts`)
  * @returns array of repo info with name, path, and url
  */
 export declare const get_repo_paths: (config_path?: string) => Promise<Array<RepoPath>>;

package/dist/repo_ops.js

@@ -59,7 +59,7 @@ export const DEFAULT_EXCLUDE_EXTENSIONS = [
  * Get repo paths from gitops config without full git sync.
  * Lighter weight than `get_gitops_ready()` - just resolves paths.
  *
- * @param config_path - path to `gitops.config.ts` (defaults to `./gitops.config.ts`)
+ * @param config_path - path to the gitops config file (defaults to `gitops.config.ts`)
  * @returns array of repo info with name, path, and url
  */
 export const get_repo_paths = async (config_path) => {

package/dist/version_utils.d.ts

@@ -1,4 +1,5 @@
-import type { BumpType } from './semver.js';
+/** A semver bump kind: `major`, `minor`, or `patch`. */
+export type BumpType = 'major' | 'minor' | 'patch';
 export declare const is_wildcard: (version: string) => boolean;
 /**
  * Strips version prefix (^, ~, >=, <=, etc) from a version string.
@@ -47,8 +48,21 @@ export declare const get_update_prefix: (current_version: string, default_strate
  * Pre-1.0: minor bumps are breaking
  * 1.0+: major bumps are breaking
  */
-export declare const is_breaking_change: (old_version: string, bump_type: "major" | "minor" | "patch") => boolean;
-export declare const detect_bump_type: (old_version: string, new_version: string) => "major" | "minor" | "patch";
+export declare const is_breaking_change: (old_version: string, bump_type: BumpType) => boolean;
+/**
+ * The bump a package must take when one of its prod/peer dependencies updates.
+ * Pre-1.0: `minor` for a breaking dependency, otherwise `patch`.
+ * 1.0+: `major` for a breaking dependency, otherwise `patch`.
+ *
+ * Single source of truth for the dependency-driven bump rule, shared by the plan
+ * (`get_required_bump_for_dependencies`) and the auto-changeset generator
+ * (`calculate_required_bump`) so the two never drift.
+ *
+ * @param current_version - the package's current version, used to detect the pre-1.0 regime
+ * @param has_breaking_deps - whether any updated dependency is a breaking change
+ */
+export declare const required_bump_for_dependency_update: (current_version: string, has_breaking_deps: boolean) => BumpType;
+export declare const detect_bump_type: (old_version: string, new_version: string) => BumpType;
 /**
  * Compares bump types. Returns positive if a > b, negative if a < b, 0 if equal.
  */

package/dist/version_utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version_utils.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/version_utils.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,QAAQ,EAAC,MAAM,aAAa,CAAC;AAE1C,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,OAE7C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAEtD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG,MAGpD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,MAAM,KAAG,MAWlE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,EAAE,aAAa,MAAM,KAAG,OASnE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,GAC7B,iBAAiB,MAAM,EACvB,mBAAkB,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,IAAU,KAC3C,MAcF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAC9B,aAAa,MAAM,EACnB,WAAW,OAAO,GAAG,OAAO,GAAG,OAAO,KACpC,OAWF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAC5B,aAAa,MAAM,EACnB,aAAa,MAAM,KACjB,OAAO,GAAG,OAAO,GAAG,OAOtB,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,GAAG,QAAQ,EAAE,GAAG,QAAQ,KAAG,MAO7D,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,iBAAiB,MAAM,EAAE,WAAW,QAAQ,KAAG,MAkBrF,CAAC"}
+{"version":3,"file":"version_utils.d.ts","sourceRoot":"../src/lib/","sources":["../src/lib/version_utils.ts"],"names":[],"mappings":"AAEA,wDAAwD;AACxD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEnD,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,OAE7C,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,oBAAoB,GAAI,SAAS,MAAM,KAAG,MAEtD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,SAAS,MAAM,KAAG,MAGpD,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,gCAAgC,GAAI,SAAS,MAAM,KAAG,MAWlE,CAAC;AAEF,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,EAAE,aAAa,MAAM,KAAG,OASnE,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,GAC7B,iBAAiB,MAAM,EACvB,mBAAkB,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,IAAU,KAC3C,MAcF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,GAAI,aAAa,MAAM,EAAE,WAAW,QAAQ,KAAG,OAW7E,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,mCAAmC,GAC/C,iBAAiB,MAAM,EACvB,mBAAmB,OAAO,KACxB,QASF,CAAC;AAEF,eAAO,MAAM,gBAAgB,GAAI,aAAa,MAAM,EAAE,aAAa,MAAM,KAAG,QAO3E,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,GAAI,GAAG,QAAQ,EAAE,GAAG,QAAQ,KAAG,MAO7D,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,iBAAiB,MAAM,EAAE,WAAW,QAAQ,KAAG,MAkBrF,CAAC"}

package/dist/version_utils.js

@@ -96,6 +96,28 @@ export const is_breaking_change = (old_version, bump_type) => {
         return bump_type === 'major';
     }
 };
+/**
+ * The bump a package must take when one of its prod/peer dependencies updates.
+ * Pre-1.0: `minor` for a breaking dependency, otherwise `patch`.
+ * 1.0+: `major` for a breaking dependency, otherwise `patch`.
+ *
+ * Single source of truth for the dependency-driven bump rule, shared by the plan
+ * (`get_required_bump_for_dependencies`) and the auto-changeset generator
+ * (`calculate_required_bump`) so the two never drift.
+ *
+ * @param current_version - the package's current version, used to detect the pre-1.0 regime
+ * @param has_breaking_deps - whether any updated dependency is a breaking change
+ */
+export const required_bump_for_dependency_update = (current_version, has_breaking_deps) => {
+    const [major] = current_version.split('.').map(Number);
+    const is_pre_1_0 = major === 0;
+    if (has_breaking_deps) {
+        // Breaking changes propagate: pre-1.0 uses minor, 1.0+ uses major
+        return is_pre_1_0 ? 'minor' : 'major';
+    }
+    // Non-breaking dependency updates only need a patch
+    return 'patch';
+};
 export const detect_bump_type = (old_version, new_version) => {
     const old_parts = old_version.split('.').map(Number);
     const new_parts = new_version.split('.').map(Number);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fuzdev/fuz_gitops",
-  "version": "0.71.0",
+  "version": "0.73.0",
   "description": "a tool for managing many repos",
   "glyph": "🪄",
   "logo": "logo.svg",
@@ -31,7 +31,7 @@
   "peerDependencies": {
     "@fuzdev/fuz_css": ">=0.61.0",
     "@fuzdev/fuz_ui": ">=0.198.0",
-    "@fuzdev/fuz_util": ">=0.63.0",
+    "@fuzdev/fuz_util": ">=0.63.1",
     "@fuzdev/gro": ">=0.200.0",
     "@sveltejs/kit": "^2",
     "svelte": "^5",
@@ -42,10 +42,9 @@
     "@fuzdev/blake3_wasm": "^0.1.1",
     "@fuzdev/fuz_code": "^0.45.1",
     "@fuzdev/fuz_css": "^0.61.1",
-    "@fuzdev/fuz_ui": "^0.198.0",
-    "@fuzdev/fuz_util": "^0.63.0",
-    "@fuzdev/gro": "^0.200.0",
-    "@jridgewell/trace-mapping": "^0.3.31",
+    "@fuzdev/fuz_ui": "^0.198.1",
+    "@fuzdev/fuz_util": "^0.63.2",
+    "@fuzdev/gro": "^0.202.0",
     "@ryanatkn/eslint-config": "^0.12.1",
     "@sveltejs/acorn-typescript": "^1.0.9",
     "@sveltejs/adapter-static": "^3.0.10",
@@ -63,7 +62,7 @@
     "prettier-plugin-svelte": "^3.5.1",
     "svelte": "^5.56.0",
     "svelte-check": "^4.4.6",
-    "svelte-docinfo": "^0.2.1",
+    "svelte-docinfo": "^0.4.0",
     "svelte2tsx": "^0.7.52",
     "tslib": "^2.8.1",
     "typescript": "^5.9.3",

package/src/lib/changeset_generator.ts

@@ -11,7 +11,11 @@ import {join} from 'node:path';
 import type {Logger} from '@fuzdev/fuz_util/log.js';
 import type {LocalRepo} from './local_repo.js';
 import type {PublishedVersion} from './multi_repo_publisher.js';
-import {strip_version_prefix} from './version_utils.js';
+import {
+	strip_version_prefix,
+	required_bump_for_dependency_update,
+	type BumpType,
+} from './version_utils.js';
 import type {FsOperations} from './operations.js';
 import {default_fs_operations} from './operations_defaults.js';
 
@@ -69,24 +73,11 @@ export const create_changeset_for_dependency_updates = async (
 const calculate_required_bump = (
 	repo: LocalRepo,
 	updates: Array<DependencyVersionChange>,
-): 'major' | 'minor' | 'patch' => {
-	const current_version = repo.library.package_json.version || '0.0.0';
-	const [major] = current_version.split('.').map(Number);
-	const is_pre_1_0 = major === 0;
-
-	// Check if any dependency had breaking changes
-	const has_breaking = updates.some((u) => u.breaking);
-
-	if (has_breaking) {
-		// Breaking changes propagate
-		// Pre-1.0: use minor for breaking changes
-		// 1.0+: use major for breaking changes
-		return is_pre_1_0 ? 'minor' : 'major';
-	}
-
-	// For non-breaking dependency updates, always use patch
-	return 'patch';
-};
+): BumpType =>
+	required_bump_for_dependency_update(
+		repo.library.package_json.version || '0.0.0',
+		updates.some((u) => u.breaking),
+	);
 
 /**
  * Generates markdown changeset content for dependency updates.

package/src/lib/changeset_reader.ts

@@ -13,8 +13,7 @@ import {readdir, readFile} from 'node:fs/promises';
 import {join} from 'node:path';
 
 import type {LocalRepo} from './local_repo.js';
-import type {BumpType} from './semver.js';
-import {compare_bump_types, calculate_next_version} from './version_utils.js';
+import {compare_bump_types, calculate_next_version, type BumpType} from './version_utils.js';
 
 export interface ChangesetInfo {
 	filename: string;