@mittwald/flow-codemods 1.1.0-next.10

package/dist/flowPackages.generated.js

@@ -0,0 +1,18 @@
+// AUTO-GENERATED by `pnpm nx build codemods` — do not edit.
+//
+// Source: the non-private packages of packages/*
+/** Every package published from the Flow monorepo, which all share one version. */
+export const flowPackages = [
+    "@mittwald/ext-bridge",
+    "@mittwald/flow-design-tokens",
+    "@mittwald/flow-icons",
+    "@mittwald/flow-icons-pro",
+    "@mittwald/flow-react-components",
+    "@mittwald/flow-remote-core",
+    "@mittwald/flow-remote-elements",
+    "@mittwald/flow-remote-react-components",
+    "@mittwald/flow-remote-react-renderer",
+    "@mittwald/flow-stylesheet",
+    "@mittwald/mstudio-ext-react-components",
+    "@mittwald/react-tunnel",
+];

package/dist/git.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Whether the working tree has changes that a codemod run would mix into.
+ *
+ * `upgrade` refuses on a dirty tree unless `--allow-dirty`. This matters most
+ * where nobody is watching: `-y` is implied when stdin is not a TTY, so an
+ * agent or CI run would otherwise blend its own unfinished work into the
+ * codemod diff with no way to separate them afterwards.
+ *
+ * A directory that is not a git repository counts as clean — refusing there
+ * would block a legitimate run for a reason the consumer cannot fix.
+ */
+export declare const hasUncommittedChanges: (cwd: string) => boolean;
+//# sourceMappingURL=git.d.ts.map

package/dist/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../src/git.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,QAAS,MAAM,KAAG,OAkCnD,CAAC"}

package/dist/git.js

@@ -0,0 +1,41 @@
+import { execFileSync } from "node:child_process";
+/**
+ * Whether the working tree has changes that a codemod run would mix into.
+ *
+ * `upgrade` refuses on a dirty tree unless `--allow-dirty`. This matters most
+ * where nobody is watching: `-y` is implied when stdin is not a TTY, so an
+ * agent or CI run would otherwise blend its own unfinished work into the
+ * codemod diff with no way to separate them afterwards.
+ *
+ * A directory that is not a git repository counts as clean — refusing there
+ * would block a legitimate run for a reason the consumer cannot fix.
+ */
+export const hasUncommittedChanges = (cwd) => {
+    try {
+        const status = execFileSync("git", ["status", "--porcelain"], {
+            cwd,
+            encoding: "utf8",
+            // stderr captured, not ignored: exit 128 alone cannot tell "not a
+            // repository" from the other fatals, and the difference decides whether
+            // the guard may report a clean tree. `LC_ALL=C` pins the message this
+            // reads to English — git localises its fatals.
+            stdio: ["ignore", "pipe", "pipe"],
+            env: { ...process.env, LC_ALL: "C" },
+        });
+        return status.trim() !== "";
+    }
+    catch (error) {
+        // Exit 128 is *not* only "not a git repository". `detected dubious
+        // ownership` is 128 too, and that is the minimal CI container this guard
+        // exists for — treating every 128 as clean made it fail open in exactly
+        // the case nobody is watching. So match the message, not the code, and let
+        // every other failure throw. A missing binary throws `ENOENT` with no exit
+        // status and no stderr, and lands in the throw below.
+        const stderr = String(error.stderr ?? "");
+        if (error.status === 128 &&
+            /not a git repository/i.test(stderr)) {
+            return false;
+        }
+        throw new Error(`Could not check the working tree with git: ${error instanceof Error ? error.message : error}`, { cause: error });
+    }
+};

package/dist/install.d.ts

@@ -0,0 +1,37 @@
+export type PackageManager = "pnpm" | "npm" | "yarn" | "bun";
+/**
+ * The package manager a project uses, from the lockfiles present.
+ *
+ * Npm is the fallback: it is the one manager that is always available next to
+ * Node, so a project with no lockfile still gets an install rather than an
+ * error.
+ */
+export declare const detectPackageManager: (present: string[]) => PackageManager;
+export declare const detectPackageManagerIn: (cwd: string) => PackageManager;
+export interface InstallCommand {
+    command: string;
+    args: string[];
+    /** Extra environment for the install. Empty when none is needed. */
+    env: Record<string, string>;
+}
+/**
+ * How to install with a given manager, so that the install actually updates the
+ * lockfile.
+ *
+ * `upgrade` has just rewritten `package.json`, so the lockfile is deliberately
+ * stale. pnpm and Yarn Berry both switch on frozen/immutable installs by
+ * themselves when they detect CI, where an install then _fails_ instead of
+ * updating — and CI is exactly where this runs unattended. pnpm takes a flag;
+ * Yarn's flag differs between Classic and Berry, so it gets the environment
+ * variable instead, which Classic ignores harmlessly.
+ */
+export declare const installCommand: (manager: PackageManager) => InstallCommand;
+/**
+ * Runs the install.
+ *
+ * A named type rather than a bare call so tests can substitute it. There is no
+ * `--no-install` flag: the seam belongs in the code, not in the CLI surface.
+ */
+export type InstallRunner = (manager: PackageManager, cwd: string) => void;
+export declare const runInstall: InstallRunner;
+//# sourceMappingURL=install.d.ts.map

package/dist/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../src/install.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAe7D;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,YAAa,MAAM,EAAE,KAAG,cAOxD,CAAC;AAEF,eAAO,MAAM,sBAAsB,QAAS,MAAM,KAAG,cAKlD,CAAC;AAEJ,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,YAAa,cAAc,KAAG,cAkBxD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;AAE3E,eAAO,MAAM,UAAU,EAAE,aAOxB,CAAC"}

package/dist/install.js

@@ -0,0 +1,71 @@
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+/** Lockfile to manager, in precedence order. */
+const lockfiles = [
+    ["pnpm-lock.yaml", "pnpm"],
+    // Both Bun lockfile names: `bun.lock` (text) is the default only from Bun
+    // 1.2; before that Bun writes the binary `bun.lockb`, which plenty of
+    // projects still have. Missing it would fall through to the npm default and
+    // run `npm install` on a Bun project, leaving a stray package-lock.json.
+    ["bun.lock", "bun"],
+    ["bun.lockb", "bun"],
+    ["yarn.lock", "yarn"],
+    ["package-lock.json", "npm"],
+];
+/**
+ * The package manager a project uses, from the lockfiles present.
+ *
+ * Npm is the fallback: it is the one manager that is always available next to
+ * Node, so a project with no lockfile still gets an install rather than an
+ * error.
+ */
+export const detectPackageManager = (present) => {
+    for (const [lockfile, manager] of lockfiles) {
+        if (present.includes(lockfile)) {
+            return manager;
+        }
+    }
+    return "npm";
+};
+export const detectPackageManagerIn = (cwd) => detectPackageManager(lockfiles
+    .map(([lockfile]) => lockfile)
+    .filter((lockfile) => existsSync(join(cwd, lockfile))));
+/**
+ * How to install with a given manager, so that the install actually updates the
+ * lockfile.
+ *
+ * `upgrade` has just rewritten `package.json`, so the lockfile is deliberately
+ * stale. pnpm and Yarn Berry both switch on frozen/immutable installs by
+ * themselves when they detect CI, where an install then _fails_ instead of
+ * updating — and CI is exactly where this runs unattended. pnpm takes a flag;
+ * Yarn's flag differs between Classic and Berry, so it gets the environment
+ * variable instead, which Classic ignores harmlessly.
+ */
+export const installCommand = (manager) => {
+    switch (manager) {
+        case "pnpm":
+            return {
+                command: "pnpm",
+                args: ["install", "--no-frozen-lockfile"],
+                env: {},
+            };
+        case "yarn":
+            return {
+                command: "yarn",
+                args: ["install"],
+                env: { YARN_ENABLE_IMMUTABLE_INSTALLS: "false" },
+            };
+        case "npm":
+        case "bun":
+            return { command: manager, args: ["install"], env: {} };
+    }
+};
+export const runInstall = (manager, cwd) => {
+    const { command, args, env } = installCommand(manager);
+    execFileSync(command, args, {
+        cwd,
+        stdio: "inherit",
+        env: { ...process.env, ...env },
+    });
+};

package/dist/manifest.d.ts

@@ -0,0 +1,45 @@
+export type DependencyField = "dependencies" | "devDependencies" | "peerDependencies" | "optionalDependencies";
+export interface Manifest {
+    name?: string;
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+    peerDependencies?: Record<string, string>;
+    optionalDependencies?: Record<string, string>;
+}
+export interface FlowDependency {
+    field: DependencyField;
+    name: string;
+    range: string;
+}
+/** Every Flow-line dependency the manifest declares, in field order. */
+export declare const findFlowDependencies: (manifest: Manifest, flowPackages: string[]) => FlowDependency[];
+/**
+ * The range moved onto `target`, keeping whatever operator it had.
+ *
+ * A range this cannot read — `workspace:*`, `*`, a dist-tag, a URL — is
+ * returned unchanged. Rewriting it would replace a deliberate choice with a
+ * guess.
+ */
+export declare const rewriteRange: (range: string, target: string) => string;
+/** Whether `upgrade` may rewrite a dependency, or only report it. */
+export declare const isWritable: (dependency: FlowDependency) => boolean;
+/**
+ * A copy of the manifest with every writable Flow dependency moved onto
+ * `target`. Peer ranges are left as they are — see `writableFields`.
+ */
+export declare const applyTarget: <T extends Manifest>(manifest: T, target: string, flowPackages: string[]) => T;
+/**
+ * The version the consumer is on.
+ *
+ * The installed version is the accurate answer, so it wins. The fallback is the
+ * lowest version the declared range allows, which is deliberately conservative:
+ * being too low can only select _extra_ entries.
+ *
+ * That is safe because a transform must be harmless against code it has nothing
+ * to do with — not because it is idempotent. Idempotency only proves a second
+ * pass over its own output changes nothing; it says nothing about an
+ * era-specific transform meeting code from a later era.
+ * `imports-to-package-root` needed an explicit leave-alone set to earn this.
+ */
+export declare const detectCurrentVersion: (dependencies: FlowDependency[], readInstalledVersion: (name: string) => string | undefined) => string | undefined;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,iBAAiB,GACjB,kBAAkB,GAClB,sBAAsB,CAAC;AAS3B,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,eAAe,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,aACrB,QAAQ,gBACJ,MAAM,EAAE,KACrB,cAAc,EAKd,CAAC;AAKJ;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,UAAW,MAAM,UAAU,MAAM,KAAG,MAQ5D,CAAC;AAgBF,qEAAqE;AACrE,eAAO,MAAM,UAAU,eAAgB,cAAc,KAAG,OACb,CAAC;AAE5C;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,QAAQ,YAClC,CAAC,UACH,MAAM,gBACA,MAAM,EAAE,KACrB,CAcF,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,iBACjB,cAAc,EAAE,wBACR,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,KACzD,MAAM,GAAG,SAgBX,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,88 @@
+import { minVersion, valid } from "semver";
+const dependencyFields = [
+    "dependencies",
+    "devDependencies",
+    "peerDependencies",
+    "optionalDependencies",
+];
+/** Every Flow-line dependency the manifest declares, in field order. */
+export const findFlowDependencies = (manifest, flowPackages) => dependencyFields.flatMap((field) => Object.entries(manifest[field] ?? {})
+    .filter(([name]) => flowPackages.includes(name))
+    .map(([name, range]) => ({ field, name, range })));
+/** A leading range operator, if the range has one. */
+const operatorPattern = /^(\^|~|>=|<=|>|<|=)?\s*(.+)$/;
+/**
+ * The range moved onto `target`, keeping whatever operator it had.
+ *
+ * A range this cannot read — `workspace:*`, `*`, a dist-tag, a URL — is
+ * returned unchanged. Rewriting it would replace a deliberate choice with a
+ * guess.
+ */
+export const rewriteRange = (range, target) => {
+    const match = operatorPattern.exec(range.trim());
+    if (!match) {
+        return range;
+    }
+    const [, operator = "", version = ""] = match;
+    return valid(version) === null ? range : `${operator}${target}`;
+};
+/**
+ * Fields `upgrade` may rewrite. `peerDependencies` is deliberately absent: a
+ * peer range is the author's statement about which versions their package works
+ * with, not a version they install. Moving `^1.0.0` to `^1.0.14` would narrow
+ * what _their_ consumers are allowed to install — a breaking change to someone
+ * else's package, made silently by a command they ran to update their own. Only
+ * they can decide that, so `upgrade` reports the range and leaves it.
+ */
+const writableFields = [
+    "dependencies",
+    "devDependencies",
+    "optionalDependencies",
+];
+/** Whether `upgrade` may rewrite a dependency, or only report it. */
+export const isWritable = (dependency) => writableFields.includes(dependency.field);
+/**
+ * A copy of the manifest with every writable Flow dependency moved onto
+ * `target`. Peer ranges are left as they are — see `writableFields`.
+ */
+export const applyTarget = (manifest, target, flowPackages) => {
+    const updated = structuredClone(manifest);
+    for (const dependency of findFlowDependencies(manifest, flowPackages)) {
+        if (!isWritable(dependency)) {
+            continue;
+        }
+        const entries = updated[dependency.field];
+        if (entries !== undefined) {
+            entries[dependency.name] = rewriteRange(dependency.range, target);
+        }
+    }
+    return updated;
+};
+/**
+ * The version the consumer is on.
+ *
+ * The installed version is the accurate answer, so it wins. The fallback is the
+ * lowest version the declared range allows, which is deliberately conservative:
+ * being too low can only select _extra_ entries.
+ *
+ * That is safe because a transform must be harmless against code it has nothing
+ * to do with — not because it is idempotent. Idempotency only proves a second
+ * pass over its own output changes nothing; it says nothing about an
+ * era-specific transform meeting code from a later era.
+ * `imports-to-package-root` needed an explicit leave-alone set to earn this.
+ */
+export const detectCurrentVersion = (dependencies, readInstalledVersion) => {
+    for (const { name } of dependencies) {
+        const installed = readInstalledVersion(name);
+        if (installed !== undefined && valid(installed) !== null) {
+            return installed;
+        }
+    }
+    for (const { range } of dependencies) {
+        const lowest = minVersion(range);
+        if (lowest !== null) {
+            return lowest.version;
+        }
+    }
+    return undefined;
+};

package/dist/migrations.generated.d.ts

@@ -0,0 +1,4 @@
+import type { MigrationEntry } from "./catalog/types.js";
+/** Every migration, newest first. Bodies live in `src/migrations`. */
+export declare const migrations: Omit<MigrationEntry, "body">[];
+//# sourceMappingURL=migrations.generated.d.ts.map

package/dist/migrations.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.generated.d.ts","sourceRoot":"","sources":["../src/migrations.generated.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,sEAAsE;AACtE,eAAO,MAAM,UAAU,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EAwOpD,CAAC"}

package/dist/migrations.generated.js

@@ -0,0 +1,213 @@
+// AUTO-GENERATED by `pnpm nx build codemods` — do not edit.
+//
+// Source: packages/codemods/src/migrations/<id>/entry.md
+/** Every migration, newest first. Bodies live in `src/migrations`. */
+export const migrations = [
+    {
+        id: "segmented-control-deprecated",
+        since: "0.2.0-alpha.1056",
+        title: "SegmentedControl deprecated",
+        kind: "deprecation",
+        action: "manual",
+        remotePackage: true,
+        apply: "Replace `SegmentedControl` with `Tabs` when the selection switches displayed content, or with `RadioGroup` when it sets a value. Pick per usage — this is a structural change, not a rename.",
+    },
+    {
+        id: "align-to-combine",
+        since: "0.2.0-alpha.1047",
+        title: "Align renamed to Combine",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: true,
+        apply: "Rename `Align` to `Combine` and `AlignProps` to `CombineProps`, for named, aliased and namespace imports from a Flow package.",
+    },
+    {
+        id: "button-color-accent-to-success",
+        since: "0.2.0-alpha.1046",
+        title: "Button: color `accent` renamed to `success`",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: true,
+        apply: 'Rename `color="accent"` to `color="success"` on `Button` and `SubmitButton`. Also update the CSS class `flow--button--accent` to `flow--button--success` and every `--button--accent-{solid,plain,soft,outline}-*` design token to its `success` counterpart if you use `@mittwald/flow-stylesheet` or the token CSS variables directly — those have no fallback.',
+    },
+    {
+        id: "tooltip-trigger-delay-type",
+        since: "0.2.0-alpha.1016",
+        title: "TooltipTrigger changed delay type",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: 'Replace every numeric `delay` value on `TooltipTrigger` with one of the two string literals: `"default"` (400ms) or `"long"` (1500ms). Pick by intent, not by which number is closer — `"default"` is for elements that cannot be understood without the tooltip (icon-only buttons), `"long"` is for supplementary information on elements that are already labeled. A previous numeric value is not a reliable guide: `delay={500}` maps to `"default"` (400ms), not `"long"` (1500ms), if the element still needs the tooltip to be understood.',
+    },
+    {
+        id: "flags-to-component-defaults-provider",
+        since: "0.2.0-alpha.1005",
+        title: "`flags` is replaced by the ComponentDefaultsProvider",
+        kind: "deprecation",
+        action: "manual",
+        remotePackage: false,
+        apply: "Replace assignments to the global `flags` object with an equivalent `<ComponentDefaultsProvider defaults={{ ... }} />` wrapping the app, or the subtree the default should apply to.",
+    },
+    {
+        id: "modal-unsaved-changes-confirmation",
+        since: "0.2.0-alpha.1005",
+        title: "Closing a Modal with unsaved changes is confirmed by default",
+        kind: "migration",
+        action: "none",
+        remotePackage: true,
+        apply: "No code change required — if you had `requireCloseModalConfirmationOnUnsavedChanges` enabled, the new default matches it. To keep the previous behaviour (closing without confirmation), set `Form: { confirmModalCloseOnUnsavedChanges: false }` via `<ComponentDefaultsProvider />`, or its deprecated equivalent, the `flags.requireCloseModalConfirmationOnUnsavedChanges = false` assignment.",
+    },
+    {
+        id: "password-tools-subpath-renamed",
+        since: "0.2.0-alpha.1000",
+        title: "`password-tools` entry renamed to `mittwald-password-tools-js`",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: false,
+        apply: "Replace the import path `@mittwald/flow-react-components/password-tools` with `@mittwald/flow-react-components/mittwald-password-tools-js`.",
+    },
+    {
+        id: "table-column-width-props",
+        since: "0.2.0-alpha.956",
+        title: "TableColumn: `maxWidth` removed, `width` and `minWidth` retyped",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Remove `maxWidth` from every `TableColumn`. Where `width` or `minWidth` was `null`, omit the prop instead — the type no longer accepts `null`, only `number | string`.",
+    },
+    {
+        id: "table-render-prop-removed",
+        since: "0.2.0-alpha.866",
+        title: "Table: `render` prop removed",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Replace the `render` escape hatch on `Table` with a composition of `TableHeader`, `TableColumn`, `TableBody`, `TableRow` and `TableCell`.",
+    },
+    {
+        id: "color-primary-to-default",
+        since: "0.2.0-alpha.846",
+        title: 'Breadcrumb, HeaderNavigation, Heading, IllustratedMessage, and Link: color property "primary" renamed to "default"',
+        kind: "migration",
+        action: "codemod",
+        remotePackage: true,
+        apply: 'Rewrite `color="primary"` to `color="default"` on `Breadcrumb`, `HeaderNavigation`, `Heading`, `IllustratedMessage`, and `Link` only — leave `Button` (and any other component where `"primary"` is still valid) untouched.',
+    },
+    {
+        id: "table-cell-render-prop-removed",
+        since: "0.2.0-alpha.846",
+        title: "TableCell: `render` prop removed",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Provide the cell content as children of `TableCell` instead of a `render` function.",
+    },
+    {
+        id: "password-tools-rule",
+        since: "0.2.0-alpha.802",
+        title: "password-tools: `AsyncRule` and `SyncRule` replaced by `Rule`",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: false,
+        apply: "Replace `AsyncRule` and `SyncRule` imports from `@mittwald/flow-react-components/mittwald-password-tools-js` with `Rule`. Update custom rule classes to extend `Rule` instead.",
+    },
+    {
+        id: "accent-box-color-to-background-color",
+        since: "0.2.0-alpha.786",
+        title: "AccentBox.color is now a declaration for foreground",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: true,
+        apply: 'Move every `color` value that is not one of `"default" | "dark" | "light" | "dark-static" | "light-static"` to `backgroundColor` instead. Review `color={expression}` and any element that already has `backgroundColor` by hand — neither can be decided from the value alone.',
+    },
+    {
+        id: "cartesian-chart-restructured",
+        since: "0.2.0-alpha.780",
+        title: "CartesianChart",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Add `dataKeyLabel` wherever a `dataKey` is a function — a string `dataKey` already sets it automatically. Where a `tickFormatter` or other callback relied on the argument being `any`, add an explicit type check (for example `instanceof Date`), or switch to `typedCartesianChart<T>()` for a chart whose callbacks are typed from your own data shape.",
+    },
+    {
+        id: "code-block-syntax-highlighter-removed",
+        since: "0.2.0-alpha.756",
+        title: "Removed the underlying react-syntax-highlighter library from CodeBlock",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Check every `CodeBlock` usage against the current props (see the [CodeBlock documentation](https://flow.mittwald.de/04-components/content/code-block/overview)) and remove or replace props the new implementation does not support.",
+    },
+    {
+        id: "muted-action-error-to-abort-action-error",
+        since: "0.2.0-alpha.712",
+        title: "`MutedActionError` renamed to `AbortActionError`",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: false,
+        apply: 'Rename `MutedActionError` to `AbortActionError`, `isMutedActionError` to `isAbortActionError`, and `rethrowIfNotMuted` to `rethrowIfNotAborted`. Update any `error.name === "MutedActionError"` comparison to `"AbortActionError"`.',
+    },
+    {
+        id: "overlay-controller-add-on-close-return-type",
+        since: "0.2.0-alpha.696",
+        title: "OverlayController.addOnClose / addOnOpen return type changed",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "No type change needed: the return type widened from `() => void` to `() => unknown`, and a `() => void` callback stays assignable. Instead, check every callback passed to `addOnClose`/`addOnOpen` for one that can return `false` — for example an arrow function whose body is an expression evaluating to `false`. `executeHandlers` now treats any handler returning `false` as a veto and cancels the close/open. A callback that returned `false` incidentally, with no intent to block anything, now silently cancels closes.",
+    },
+    {
+        id: "form-resets-after-modal-close",
+        since: "0.2.0-alpha.694",
+        title: "Form: resets itself after the surrounding modal closes",
+        kind: "migration",
+        action: "none",
+        remotePackage: false,
+        apply: "No code change required. To keep the previous behaviour (the form keeping what the user entered), pass `autoReset={false}` (or `autoReset={{ onAfterModalClose: false }}`) to `Form`.",
+    },
+    {
+        id: "cartesian-chart-empty-view",
+        since: "0.2.0-alpha.676",
+        title: "CartesianChart.emptyView changed",
+        kind: "migration",
+        action: "manual",
+        remotePackage: true,
+        apply: "Wrap the `emptyView` value in JSX — `emptyView={<EmptyState />}` instead of `emptyView={EmptyState}`.",
+    },
+    {
+        id: "action-prop-to-on-action",
+        since: "0.2.0-alpha.646",
+        title: "Action: `action` renamed to `onAction`",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: true,
+        apply: "Rename the `action` prop on `Action` to `onAction`.",
+    },
+    {
+        id: "button-props-interfaces",
+        since: "0.2.0-alpha.646",
+        title: "Removed ResetButton and SubmitButton Interfaces",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: false,
+        apply: "Replace `ResetButtonProps`/`SubmitButtonProps` imports from `@mittwald/flow-react-components/react-hook-form` with `ButtonProps` from the package root. Leave `RemoteButtonElementProps` (from `@mittwald/flow-remote-elements`) alone.",
+    },
+    {
+        id: "imports-to-package-root",
+        since: "0.2.0-alpha.28",
+        title: "Subpath imports moved to the package root",
+        kind: "migration",
+        action: "codemod",
+        remotePackage: false,
+        apply: 'Rewrite every subdirectory import from `@mittwald/flow-react-components` to the package root, except `react-hook-form` and `nextjs`, which move to `@mittwald/flow-react-components/react-hook-form` and `@mittwald/flow-react-components/nextjs`. If you hit missing module errors, set `"module": "esnext"` in `tsconfig.json`.',
+    },
+    {
+        id: "renamed-css-export",
+        since: "0.1.0-alpha.292",
+        title: "Renamed CSS export",
+        kind: "migration",
+        action: "manual",
+        remotePackage: false,
+        apply: "Replace the import `@mittwald/flow-react-components/styles` with `@mittwald/flow-react-components/all.css`.",
+    },
+];

package/dist/resolve/range.d.ts

@@ -0,0 +1,50 @@
+import { type FlowDependency, type Manifest } from "../manifest.js";
+import { fetchVersions } from "./registry.js";
+/**
+ * The installed version of `name`, read from `cwd`'s `node_modules`.
+ *
+ * Lives here rather than in `upgrade.ts` (where it used to) because `list` now
+ * resolves a range too, and both commands need the identical "what's actually
+ * installed" answer — this is `resolveRange`'s default reader.
+ */
+export declare const readInstalledVersion: (cwd: string, name: string) => string | undefined;
+export interface RangeDeps {
+    cwd: string;
+    fetchVersions: typeof fetchVersions;
+    readInstalledVersion: (cwd: string, name: string) => string | undefined;
+}
+export declare const defaultRangeDeps: (cwd: string) => RangeDeps;
+export interface ResolvedRange {
+    ok: true;
+    manifestPath: string;
+    manifestRaw: string;
+    manifest: Manifest;
+    dependencies: FlowDependency[];
+    current: string;
+    target: string;
+    versions: string[];
+}
+export interface UnresolvedRange {
+    ok: false;
+    /** Human-readable, ready to print as-is. */
+    reason: string;
+}
+export type RangeResult = ResolvedRange | UnresolvedRange;
+/**
+ * What `revision` resolves to for the project at `cwd`.
+ *
+ * Reads the manifest, finds its Flow dependencies, detects the current version,
+ * fetches what every dependency has actually published, and resolves `revision`
+ * against the intersection — the same sequence `upgrade` always needed, now
+ * shared with `list <revision>`, which uses it to answer "what would `upgrade
+ * <revision>` touch?" without writing anything.
+ *
+ * Reports the resolution rather than judging it: an exact version or a stale
+ * dist-tag can resolve at or below `current`, and this function returns that
+ * target just the same. Whether that is a refusal (`upgrade`, about to write
+ * files) or a legitimate answer ("nothing between here and there" — `list`) is
+ * for the caller to decide. Two callers judging the same fact differently is
+ * fine; two callers computing the fact differently is how they drift.
+ */
+export declare const resolveRange: (revision: string, deps: RangeDeps) => Promise<RangeResult>;
+//# sourceMappingURL=range.d.ts.map

package/dist/resolve/range.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"range.d.ts","sourceRoot":"","sources":["../../src/resolve/range.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,QAAQ,EACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,aAAa,EAEd,MAAM,eAAe,CAAC;AAGvB;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,QAC1B,MAAM,QACL,MAAM,KACX,MAAM,GAAG,SASX,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,oBAAoB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;CACzE;AAED,eAAO,MAAM,gBAAgB,QAAS,MAAM,KAAG,SAI7C,CAAC;AAEH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,IAAI,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,QAAQ,CAAC;IACnB,YAAY,EAAE,cAAc,EAAE,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,KAAK,CAAC;IACV,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,eAAe,CAAC;AA2C1D;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,YAAY,aACb,MAAM,QACV,SAAS,KACd,OAAO,CAAC,WAAW,CAuHrB,CAAC"}