@kybernesis/create 0.24.0 → 0.24.2

package/dist/upgrade.js

@@ -785,6 +785,12 @@ function newestBuildForEve(name, eve) {
     const candidates = [];
     for (const version of ordered) {
         const peer = targetEvePeer(name, version);
+        // A package whose newest build declares no eve peer at all (this CLI,
+        // @kybernesis/create) is not built per eve line: its newest is the answer.
+        // Without this, every agent that keeps kyb in its own package.json could
+        // never plan an upgrade (`kyb upgrade --check` reported it unresolved).
+        if (!peer && candidates.length === 0)
+            return version;
         candidates.push({ version, ...(peer ? { peer } : {}) });
         const hit = newestOnLine(candidates, eve);
         if (hit)
@@ -989,6 +995,10 @@ export async function upgrade(options = {}) {
         installedMajorMinor &&
         targetMajorMinor &&
         (installedMajorMinor[0] !== targetMajorMinor[0] || installedMajorMinor[1] !== targetMajorMinor[1]));
+    // eve already at the pin but saved as a range (an agent scaffolded before
+    // the pin was exact, or installed by hand): pin it in place. The version
+    // does not move, so this is not a change to plan or approve.
+    const loosePin = Boolean(eveTarget && eveInstalled === eveTarget && targets.some((target) => target.name === "eve" && target.currentRange !== eveTarget));
     const changed = [...new Set(targets
             .filter((target) => target.installedVersion !== target.targetVersion && !(target.name === "eve" && versionLt(target.targetVersion, target.installedVersion)))
             .map((target) => `${target.name}@${target.targetVersion}`))];
@@ -1009,6 +1019,15 @@ export async function upgrade(options = {}) {
     }
     repairLocalQueueTimeouts(cwd, deps);
     if (changed.length === 0) {
+        if (loosePin) {
+            const pinned = commandResult("npm", ["install", "--save-exact", `eve@${eveTarget}`], cwd);
+            if (pinned.status !== 0) {
+                console.log(red(`\nCould not pin eve exactly to ${eveTarget}:\n${pinned.stderr.trim()}`));
+                process.exitCode = 1;
+                return;
+            }
+            console.log(`  ${green("✓")} eve pinned exactly to ${eveTarget} ${dim("(was a range)")}`);
+        }
         console.log(`\n${green("Everything is at latest certified versions.")}\n`);
         repairBuzzSetup(cwd, deps);
         repairRemovedDefaultTools(cwd);
@@ -1043,7 +1062,7 @@ export async function upgrade(options = {}) {
     }
     // Outside a clean install, eve goes in with --save-exact for the same
     // reason rewriteManifest pins it: npm would save a caret by default.
-    const eveChange = changed.find((spec) => spec.startsWith("eve@"));
+    const eveChange = changed.find((spec) => spec.startsWith("eve@")) ?? (loosePin ? `eve@${eveTarget}` : undefined);
     const others = changed.filter((spec) => spec !== eveChange);
     /**
      * A third-party extension whose declared peer range trails the certified

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.24.0",
+  "version": "0.24.2",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",