@mr-aftab-ahmad-khan/drift-check 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+## [0.1.0] — 2026-05-15
+
+### Added
+
+- `scan`, `fix`, `report`, and `ignore` commands.
+- Auto-detects pnpm, yarn, and npm workspace layouts.
+- Severity classification (patch / minor / major) with `--dry-run` plan output.
+- `.driftignore` support and JSON output for CI consumption.

package/LICENSE

@@ -0,0 +1,15 @@
+MIT License
+
+Copyright (c) 2026 drift-check contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.

package/README.md

@@ -0,0 +1,293 @@
+# drift-check
+
+[![npm version](https://img.shields.io/npm/v/%40mr-aftab-ahmad-khan%2Fdrift-check.svg)](https://www.npmjs.com/package/@mr-aftab-ahmad-khan/drift-check)
+[![license](https://img.shields.io/npm/l/%40mr-aftab-ahmad-khan%2Fdrift-check.svg)](./LICENSE)
+[![TypeScript](https://img.shields.io/badge/types-TypeScript-blue.svg)](https://www.typescriptlang.org/)
+
+**In a 10-package monorepo, React will be at 3 different versions within 6 months.** `drift-check` catches version drift across **pnpm**, **npm**, and **yarn** workspaces in CI before it becomes a Saturday-night debugging session. Auto-detects workspace format, classifies drift as patch/minor/major, fixes in place, and integrates with GitHub Actions, GitLab CI, Turborepo, and husky.
+
+---
+
+## Installation
+
+```bash
+npm install -g drift-check
+pnpm add -g drift-check
+yarn global add drift-check
+
+# Or one-off:
+npx drift-check
+```
+
+---
+
+## Quick Start
+
+```bash
+$ npx drift-check
+drift-check — 2 drifted package(s) across 3 workspaces
+
+  MINOR  react
+    - ^18.2.0  (apps/web / dependencies)
+    - ^18.3.1  (packages/ui / dependencies)
+    - ^18.3.1  (packages/forms / dependencies)
+
+  MAJOR  zod
+    - ^3.22.4  (apps/web / dependencies)
+    - ^4.0.0   (packages/ui / dependencies)
+```
+
+---
+
+## Core Usage Examples
+
+### 1. Scan and read the report
+
+```bash
+drift-check
+```
+
+### 2. Auto-fix to the highest currently used
+
+```bash
+drift-check fix
+# Then run your package manager's install:
+#   pnpm install   /   npm install   /   yarn install
+```
+
+### 3. Dry-run
+
+```bash
+drift-check fix --dry-run
+```
+
+### 4. Ignore an intentional mismatch
+
+```bash
+drift-check ignore @types/node
+```
+
+### 5. Fix one package across the monorepo
+
+```bash
+drift-check fix --pkg react
+```
+
+### 6. JSON output
+
+```bash
+drift-check report --format json | jq '.drifted[] | select(.severity == "major")'
+```
+
+---
+
+## CI/CD Integration Examples
+
+### GitHub Actions
+
+```yaml
+name: drift
+on: [pull_request]
+jobs:
+  drift:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npx drift-check --fail-on minor
+```
+
+### GitLab CI
+
+```yaml
+drift:
+  stage: test
+  image: node:20
+  script:
+    - npx drift-check --fail-on minor
+```
+
+### Turborepo
+
+```json
+// turbo.json
+{
+  "pipeline": {
+    "drift": { "outputs": [] }
+  }
+}
+```
+
+```json
+// package.json
+{ "scripts": { "drift": "drift-check --fail-on minor" } }
+```
+
+### Pre-push hook (husky)
+
+```bash
+# .husky/pre-push
+#!/bin/sh
+npx drift-check --fail-on major
+```
+
+---
+
+## Configuration Reference
+
+`.driftrc.json`:
+
+```json
+{
+  "failOn": "minor",
+  "ignore": ["@types/node"],
+  "workspaceGlobs": ["packages/*", "apps/*", "tools/*"]
+}
+```
+
+| Option           | Type        | Default                       | Description                              |
+| ---------------- | ----------- | ----------------------------- | ---------------------------------------- |
+| `failOn`         | `Severity`  | `undefined`                   | Exit 1 when any drift ≥ this severity    |
+| `ignore`         | `string[]`  | `[]`                          | Package names to skip                    |
+| `workspaceGlobs` | `string[]`  | `["packages/*","apps/*"]`     | Extra glob patterns to scan              |
+
+---
+
+## `.driftignore` Format
+
+Plain text, one package name per line, with `#` comments:
+
+```
+# Allow intentional mismatch — vue 3 in legacy app
+vue
+
+# Type packages drift independently of runtime versions
+@types/node
+```
+
+---
+
+## TypeScript Types
+
+```ts
+import { scan, planFix, applyFix, type DriftReport, type Severity } from "@mr-aftab-ahmad-khan/drift-check";
+
+const report: DriftReport = scan({ cwd: process.cwd() });
+for (const d of report.drifted) {
+  console.log(d.name, d.severity, d.versions.length, "versions");
+}
+```
+
+---
+
+## CLI Reference
+
+```
+drift-check scan [options]               (default command)
+  --format <fmt>           pretty | json (default pretty)
+  --fail-on <severity>     patch | minor | major
+
+drift-check fix [options]
+  --target <target>        version string or 'latest' (default 'latest')
+  --pkg <name>             limit to a single package
+  --dry-run                preview only
+
+drift-check ignore <name>
+  Append a package name to .driftignore.
+
+drift-check report [options]
+  Alias for `scan --format json`.
+```
+
+Sample output:
+
+```bash
+$ drift-check fix --dry-run
+  react: ^18.2.0 → ^18.3.1   /repo/apps/web/package.json
+drift-check: dry-run, no files modified
+```
+
+---
+
+## Real-World Recipe — Turborepo Monorepo with 15 Packages
+
+```bash
+# Initial scan
+$ npx drift-check
+drift-check — 3 drifted package(s) across 15 workspaces
+  MINOR  react        (^18.2.0 vs ^18.3.1 vs ^18.3.1)
+  PATCH  typescript   (5.4.0 vs 5.4.2)
+  MINOR  zod          (^3.22.4 vs ^3.23.0)
+```
+
+```json
+// .driftrc.json
+{
+  "failOn": "minor",
+  "ignore": ["@internal/legacy"]
+}
+```
+
+```yaml
+# .github/workflows/drift.yml
+name: drift
+on: [pull_request]
+jobs:
+  drift:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with: { node-version: 20 }
+      - run: npx drift-check --fail-on minor
+```
+
+```bash
+# Developer locally
+$ npx drift-check fix
+  react:      ^18.2.0 → ^18.3.1   apps/web/package.json
+  typescript: 5.4.0   → 5.4.2     packages/ui/package.json
+  zod:        ^3.22.4 → ^3.23.0   apps/web/package.json
+drift-check: updated 3 file(s). Run your package manager's install.
+$ pnpm install
+$ git commit -am "chore: align drifting deps"
+```
+
+```bash
+# Slack notification on scheduled run
+$ drift-check report --format json > drift.json
+$ curl -X POST -H 'content-type: application/json' \
+       -d "$(jq -c '{text: "Weekly drift: " + (.drifted | length | tostring) + " packages"}' drift.json)" \
+       "$SLACK_WEBHOOK_URL"
+```
+
+---
+
+## How Drift Happens
+
+1. **Lazy package adds.** Someone runs `npm install foo` in a single package; whatever version npm picks today is locked there.
+2. **Bulk updates without a refresh.** `pnpm update --recursive` skips ranges that already satisfy a dependency, so older ranges stay.
+3. **Independent dependabot updates.** Dependabot bumps `apps/web` to `react@18.3.1` but never touches `packages/ui`.
+
+`drift-check`'s CI integration prevents (1) by failing PRs that introduce a new mismatch; the `fix` command resolves (2) and (3) in one commit.
+
+---
+
+## Comparison Table
+
+| Feature                    | Manual review | syncpack | **drift-check** |
+| -------------------------- | :-----------: | :------: | :-------------: |
+| Auto workspace detection   |      ❌       |    ✅    |        ✅       |
+| Severity levels            |      ❌       |    ❌    |        ✅       |
+| Auto-fix                   |      ❌       |    ✅    |        ✅       |
+| CI integration             |      ❌       |    ✅    |        ✅       |
+| Dry-run                    |      ❌       |    ⚠️    |        ✅       |
+| `.driftignore`             |      ❌       |    ⚠️    |        ✅       |
+| JSON output                |      ❌       |    ✅    |        ✅       |
+
+---
+
+## License
+
+MIT

package/dist/chunk-Q6ZBG4TH.js

@@ -0,0 +1,274 @@
+// src/workspace.ts
+import { existsSync, readFileSync, readdirSync, statSync } from "fs";
+import { dirname, join, resolve } from "path";
+import YAML from "yaml";
+function readJson(file) {
+  try {
+    return JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function detectWorkspaces(root, extraGlobs) {
+  root = resolve(root);
+  const candidates = /* @__PURE__ */ new Set();
+  const pnpm = join(root, "pnpm-workspace.yaml");
+  if (existsSync(pnpm)) {
+    try {
+      const doc = YAML.parse(readFileSync(pnpm, "utf8"));
+      for (const g of doc.packages ?? []) expandGlob(root, g, candidates);
+    } catch {
+    }
+  }
+  const rootPkg = readJson(join(root, "package.json"));
+  if (rootPkg) {
+    const ws = rootPkg.workspaces;
+    if (Array.isArray(ws)) {
+      for (const g of ws) if (typeof g === "string") expandGlob(root, g, candidates);
+    } else if (ws && typeof ws === "object" && Array.isArray(ws.packages)) {
+      for (const g of ws.packages) expandGlob(root, g, candidates);
+    }
+  }
+  for (const g of extraGlobs ?? ["packages/*", "apps/*"]) expandGlob(root, g, candidates);
+  if (candidates.size === 0) {
+    candidates.add(join(root, "package.json"));
+  }
+  return [...candidates];
+}
+function expandGlob(root, glob, out) {
+  if (!glob.includes("*")) {
+    const pj = join(root, glob, "package.json");
+    if (existsSync(pj)) out.add(pj);
+    return;
+  }
+  const segments = glob.split("/");
+  expand(root, segments, 0, out);
+}
+function expand(dir, segments, idx, out) {
+  if (idx === segments.length) {
+    const pj = join(dir, "package.json");
+    if (existsSync(pj)) out.add(pj);
+    return;
+  }
+  const seg = segments[idx];
+  if (seg === "*") {
+    if (!existsSync(dir)) return;
+    for (const entry of readdirSync(dir)) {
+      const sub = join(dir, entry);
+      try {
+        if (!statSync(sub).isDirectory()) continue;
+      } catch {
+        continue;
+      }
+      expand(sub, segments, idx + 1, out);
+    }
+  } else if (seg === "**") {
+    walk(dir, (d) => expand(d, segments, idx + 1, out));
+  } else {
+    expand(join(dir, seg), segments, idx + 1, out);
+  }
+}
+function walk(dir, visit) {
+  if (!existsSync(dir)) return;
+  visit(dir);
+  for (const entry of readdirSync(dir)) {
+    if (entry === "node_modules" || entry.startsWith(".")) continue;
+    const sub = join(dir, entry);
+    try {
+      if (statSync(sub).isDirectory()) walk(sub, visit);
+    } catch {
+    }
+  }
+}
+function loadWorkspaces(root, extraGlobs) {
+  return detectWorkspaces(root, extraGlobs).map((file) => {
+    const pj = readJson(file);
+    if (!pj) return void 0;
+    return {
+      name: pj.name ?? dirname(file),
+      version: pj.version ?? "0.0.0",
+      packageJsonPath: file,
+      dependencies: pj.dependencies ?? {},
+      devDependencies: pj.devDependencies ?? {},
+      peerDependencies: pj.peerDependencies ?? {},
+      optionalDependencies: pj.optionalDependencies ?? {}
+    };
+  }).filter((p) => Boolean(p));
+}
+function readDriftIgnore(root) {
+  const file = join(root, ".driftignore");
+  if (!existsSync(file)) return [];
+  return readFileSync(file, "utf8").split(/\r?\n/).map((s) => s.trim()).filter((s) => s && !s.startsWith("#"));
+}
+
+// src/semver.ts
+var SEMVER_RE = /(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z-.]+))?/;
+function extractVersion(range) {
+  const m = SEMVER_RE.exec(range);
+  if (!m) return void 0;
+  return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]) };
+}
+function severity(a, b) {
+  const va = extractVersion(a);
+  const vb = extractVersion(b);
+  if (!va || !vb) return a === b ? "none" : "patch";
+  if (va.major !== vb.major) return "major";
+  if (va.minor !== vb.minor) return "minor";
+  if (va.patch !== vb.patch) return "patch";
+  if (a !== b) return "patch";
+  return "none";
+}
+function highestRange(ranges) {
+  let best = ranges[0];
+  let bestVer = extractVersion(best);
+  for (const r of ranges) {
+    const v = extractVersion(r);
+    if (!v) continue;
+    if (!bestVer || compare(v, bestVer) > 0) {
+      best = r;
+      bestVer = v;
+    }
+  }
+  return best;
+}
+function compare(a, b) {
+  if (a.major !== b.major) return a.major - b.major;
+  if (a.minor !== b.minor) return a.minor - b.minor;
+  return a.patch - b.patch;
+}
+var SEVERITY_RANK = { patch: 0, minor: 1, major: 2 };
+function maxSeverity(values) {
+  let max = "patch";
+  for (const v of values) if (SEVERITY_RANK[v] > SEVERITY_RANK[max]) max = v;
+  return max;
+}
+
+// src/scan.ts
+import { readFileSync as readFileSync2, writeFileSync } from "fs";
+var FIELDS = ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"];
+function scan(options = {}) {
+  const cwd = options.cwd ?? process.cwd();
+  const workspaces = loadWorkspaces(cwd, options.workspaceGlobs);
+  const ignore = /* @__PURE__ */ new Set([...options.ignore ?? [], ...readDriftIgnore(cwd)]);
+  const byDep = /* @__PURE__ */ new Map();
+  for (const ws of workspaces) {
+    for (const field of FIELDS) {
+      for (const [name, version] of Object.entries(ws[field])) {
+        if (ignore.has(name)) continue;
+        const list = byDep.get(name) ?? [];
+        list.push({ workspace: ws.name, version, field, path: ws.packageJsonPath });
+        byDep.set(name, list);
+      }
+    }
+  }
+  const drifted = [];
+  for (const [name, occurrences] of byDep) {
+    const unique = [...new Set(occurrences.map((o) => o.version))];
+    if (unique.length <= 1) continue;
+    const severities = [];
+    for (let i = 0; i < unique.length; i++) {
+      for (let j = i + 1; j < unique.length; j++) {
+        const s = severity(unique[i], unique[j]);
+        if (s !== "none") severities.push(s);
+      }
+    }
+    drifted.push({
+      name,
+      severity: maxSeverity(severities),
+      versions: occurrences
+    });
+  }
+  drifted.sort((a, b) => a.name.localeCompare(b.name));
+  return { workspaces, drifted, generatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+}
+function planFix(report, options = {}) {
+  const changes = [];
+  for (const d of report.drifted) {
+    if (options.only && d.name !== options.only) continue;
+    const target = options.target && options.target !== "latest" ? options.target : highestRange(d.versions.map((v) => v.version));
+    for (const v of d.versions) {
+      if (v.version !== target) {
+        changes.push({ path: v.path, field: v.field, name: d.name, from: v.version, to: target });
+      }
+    }
+  }
+  return { changes };
+}
+function applyFix(plan) {
+  const grouped = /* @__PURE__ */ new Map();
+  for (const c of plan.changes) {
+    const arr = grouped.get(c.path) ?? [];
+    arr.push(c);
+    grouped.set(c.path, arr);
+  }
+  for (const [file, changes] of grouped) {
+    const src = readFileSync2(file, "utf8");
+    let next = src;
+    for (const c of changes) {
+      const re = new RegExp(`("${escape(c.name)}"\\s*:\\s*")${escape(c.from)}(")`);
+      next = next.replace(re, (_m, p1, p2) => `${p1}${c.to}${p2}`);
+    }
+    writeFileSync(file, next, "utf8");
+  }
+  return { filesChanged: grouped.size };
+}
+function escape(s) {
+  return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// src/format.ts
+import pc from "picocolors";
+var sevColor = {
+  patch: pc.gray,
+  minor: pc.yellow,
+  major: pc.red
+};
+function formatPretty(report) {
+  if (report.drifted.length === 0) {
+    return pc.green(`drift-check: no drift across ${report.workspaces.length} workspaces`);
+  }
+  const lines = [];
+  lines.push(pc.bold(`drift-check \u2014 ${report.drifted.length} drifted package(s) across ${report.workspaces.length} workspaces`));
+  for (const d of report.drifted) {
+    lines.push("");
+    lines.push(`  ${sevColor[d.severity](d.severity.toUpperCase())}  ${pc.bold(d.name)}`);
+    for (const v of d.versions) {
+      lines.push(`    - ${v.version}  ${pc.gray(`(${v.workspace} / ${v.field})`)}`);
+    }
+  }
+  return lines.join("\n");
+}
+function formatJson(report) {
+  return JSON.stringify(report, null, 2);
+}
+
+// src/config.ts
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "fs";
+import { join as join2 } from "path";
+function loadConfig(cwd) {
+  const f = join2(cwd, ".driftrc.json");
+  if (!existsSync2(f)) return {};
+  try {
+    return JSON.parse(readFileSync3(f, "utf8"));
+  } catch {
+    return {};
+  }
+}
+
+export {
+  detectWorkspaces,
+  loadWorkspaces,
+  readDriftIgnore,
+  extractVersion,
+  severity,
+  highestRange,
+  SEVERITY_RANK,
+  maxSeverity,
+  scan,
+  planFix,
+  applyFix,
+  formatPretty,
+  formatJson,
+  loadConfig
+};
+//# sourceMappingURL=chunk-Q6ZBG4TH.js.map

package/dist/chunk-Q6ZBG4TH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workspace.ts","../src/semver.ts","../src/scan.ts","../src/format.ts","../src/config.ts"],"sourcesContent":["import { existsSync, readFileSync, readdirSync, statSync } from \"node:fs\";\nimport { dirname, join, resolve } from \"node:path\";\nimport YAML from \"yaml\";\nimport type { WorkspacePackage } from \"./types.js\";\n\nfunction readJson(file: string): Record<string, unknown> | undefined {\n  try {\n    return JSON.parse(readFileSync(file, \"utf8\")) as Record<string, unknown>;\n  } catch {\n    return undefined;\n  }\n}\n\n/** Detect workspace format and return absolute paths to every workspace `package.json`. */\nexport function detectWorkspaces(root: string, extraGlobs?: string[]): string[] {\n  root = resolve(root);\n  const candidates = new Set<string>();\n  const pnpm = join(root, \"pnpm-workspace.yaml\");\n  if (existsSync(pnpm)) {\n    try {\n      const doc = YAML.parse(readFileSync(pnpm, \"utf8\")) as { packages?: string[] };\n      for (const g of doc.packages ?? []) expandGlob(root, g, candidates);\n    } catch {\n      // ignore\n    }\n  }\n  const rootPkg = readJson(join(root, \"package.json\"));\n  if (rootPkg) {\n    const ws = rootPkg.workspaces;\n    if (Array.isArray(ws)) {\n      for (const g of ws) if (typeof g === \"string\") expandGlob(root, g, candidates);\n    } else if (ws && typeof ws === \"object\" && Array.isArray((ws as { packages?: string[] }).packages)) {\n      for (const g of (ws as { packages: string[] }).packages) expandGlob(root, g, candidates);\n    }\n  }\n  for (const g of extraGlobs ?? [\"packages/*\", \"apps/*\"]) expandGlob(root, g, candidates);\n\n  if (candidates.size === 0) {\n    candidates.add(join(root, \"package.json\"));\n  }\n  return [...candidates];\n}\n\nfunction expandGlob(root: string, glob: string, out: Set<string>): void {\n  if (!glob.includes(\"*\")) {\n    const pj = join(root, glob, \"package.json\");\n    if (existsSync(pj)) out.add(pj);\n    return;\n  }\n  const segments = glob.split(\"/\");\n  expand(root, segments, 0, out);\n}\n\nfunction expand(dir: string, segments: string[], idx: number, out: Set<string>): void {\n  if (idx === segments.length) {\n    const pj = join(dir, \"package.json\");\n    if (existsSync(pj)) out.add(pj);\n    return;\n  }\n  const seg = segments[idx]!;\n  if (seg === \"*\") {\n    if (!existsSync(dir)) return;\n    for (const entry of readdirSync(dir)) {\n      const sub = join(dir, entry);\n      try { if (!statSync(sub).isDirectory()) continue; } catch { continue; }\n      expand(sub, segments, idx + 1, out);\n    }\n  } else if (seg === \"**\") {\n    walk(dir, (d) => expand(d, segments, idx + 1, out));\n  } else {\n    expand(join(dir, seg), segments, idx + 1, out);\n  }\n}\n\nfunction walk(dir: string, visit: (d: string) => void): void {\n  if (!existsSync(dir)) return;\n  visit(dir);\n  for (const entry of readdirSync(dir)) {\n    if (entry === \"node_modules\" || entry.startsWith(\".\")) continue;\n    const sub = join(dir, entry);\n    try { if (statSync(sub).isDirectory()) walk(sub, visit); } catch { /* skip */ }\n  }\n}\n\nexport function loadWorkspaces(root: string, extraGlobs?: string[]): WorkspacePackage[] {\n  return detectWorkspaces(root, extraGlobs)\n    .map((file) => {\n      const pj = readJson(file);\n      if (!pj) return undefined;\n      return {\n        name: (pj.name as string) ?? dirname(file),\n        version: (pj.version as string) ?? \"0.0.0\",\n        packageJsonPath: file,\n        dependencies: (pj.dependencies as Record<string, string>) ?? {},\n        devDependencies: (pj.devDependencies as Record<string, string>) ?? {},\n        peerDependencies: (pj.peerDependencies as Record<string, string>) ?? {},\n        optionalDependencies: (pj.optionalDependencies as Record<string, string>) ?? {},\n      };\n    })\n    .filter((p): p is WorkspacePackage => Boolean(p));\n}\n\nexport function readDriftIgnore(root: string): string[] {\n  const file = join(root, \".driftignore\");\n  if (!existsSync(file)) return [];\n  return readFileSync(file, \"utf8\")\n    .split(/\\r?\\n/)\n    .map((s) => s.trim())\n    .filter((s) => s && !s.startsWith(\"#\"));\n}\n","import type { Severity } from \"./types.js\";\n\nconst SEMVER_RE = /(\\d+)\\.(\\d+)\\.(\\d+)(?:-([0-9A-Za-z-.]+))?/;\n\nexport function extractVersion(range: string): { major: number; minor: number; patch: number } | undefined {\n  const m = SEMVER_RE.exec(range);\n  if (!m) return undefined;\n  return { major: Number(m[1]), minor: Number(m[2]), patch: Number(m[3]) };\n}\n\nexport function severity(a: string, b: string): Severity | \"none\" {\n  const va = extractVersion(a);\n  const vb = extractVersion(b);\n  if (!va || !vb) return a === b ? \"none\" : \"patch\";\n  if (va.major !== vb.major) return \"major\";\n  if (va.minor !== vb.minor) return \"minor\";\n  if (va.patch !== vb.patch) return \"patch\";\n  if (a !== b) return \"patch\";\n  return \"none\";\n}\n\nexport function highestRange(ranges: string[]): string {\n  let best = ranges[0]!;\n  let bestVer = extractVersion(best);\n  for (const r of ranges) {\n    const v = extractVersion(r);\n    if (!v) continue;\n    if (!bestVer || compare(v, bestVer) > 0) {\n      best = r;\n      bestVer = v;\n    }\n  }\n  return best;\n}\n\nfunction compare(a: { major: number; minor: number; patch: number }, b: { major: number; minor: number; patch: number }): number {\n  if (a.major !== b.major) return a.major - b.major;\n  if (a.minor !== b.minor) return a.minor - b.minor;\n  return a.patch - b.patch;\n}\n\nexport const SEVERITY_RANK: Record<Severity, number> = { patch: 0, minor: 1, major: 2 };\n\nexport function maxSeverity(values: Severity[]): Severity {\n  let max: Severity = \"patch\";\n  for (const v of values) if (SEVERITY_RANK[v] > SEVERITY_RANK[max]) max = v;\n  return max;\n}\n","import { loadWorkspaces, readDriftIgnore } from \"./workspace.js\";\nimport { highestRange, maxSeverity, severity } from \"./semver.js\";\nimport type { DepField, DriftReport, DriftedDependency, ScanOptions, Severity } from \"./types.js\";\n\nconst FIELDS: DepField[] = [\"dependencies\", \"devDependencies\", \"peerDependencies\", \"optionalDependencies\"];\n\nexport function scan(options: ScanOptions = {}): DriftReport {\n  const cwd = options.cwd ?? process.cwd();\n  const workspaces = loadWorkspaces(cwd, options.workspaceGlobs);\n  const ignore = new Set([...(options.ignore ?? []), ...readDriftIgnore(cwd)]);\n\n  const byDep = new Map<string, DriftedDependency[\"versions\"]>();\n  for (const ws of workspaces) {\n    for (const field of FIELDS) {\n      for (const [name, version] of Object.entries(ws[field])) {\n        if (ignore.has(name)) continue;\n        const list = byDep.get(name) ?? [];\n        list.push({ workspace: ws.name, version, field, path: ws.packageJsonPath });\n        byDep.set(name, list);\n      }\n    }\n  }\n\n  const drifted: DriftedDependency[] = [];\n  for (const [name, occurrences] of byDep) {\n    const unique = [...new Set(occurrences.map((o) => o.version))];\n    if (unique.length <= 1) continue;\n    const severities: Severity[] = [];\n    for (let i = 0; i < unique.length; i++) {\n      for (let j = i + 1; j < unique.length; j++) {\n        const s = severity(unique[i]!, unique[j]!);\n        if (s !== \"none\") severities.push(s);\n      }\n    }\n    drifted.push({\n      name,\n      severity: maxSeverity(severities),\n      versions: occurrences,\n    });\n  }\n\n  drifted.sort((a, b) => a.name.localeCompare(b.name));\n  return { workspaces, drifted, generatedAt: new Date().toISOString() };\n}\n\nexport interface FixPlan {\n  changes: {\n    path: string;\n    field: DepField;\n    name: string;\n    from: string;\n    to: string;\n  }[];\n}\n\nexport function planFix(report: DriftReport, options: { only?: string; target?: \"latest\" | string } = {}): FixPlan {\n  const changes: FixPlan[\"changes\"] = [];\n  for (const d of report.drifted) {\n    if (options.only && d.name !== options.only) continue;\n    const target = options.target && options.target !== \"latest\" ? options.target : highestRange(d.versions.map((v) => v.version));\n    for (const v of d.versions) {\n      if (v.version !== target) {\n        changes.push({ path: v.path, field: v.field, name: d.name, from: v.version, to: target });\n      }\n    }\n  }\n  return { changes };\n}\n\nimport { readFileSync, writeFileSync } from \"node:fs\";\n\nexport function applyFix(plan: FixPlan): { filesChanged: number } {\n  const grouped = new Map<string, FixPlan[\"changes\"]>();\n  for (const c of plan.changes) {\n    const arr = grouped.get(c.path) ?? [];\n    arr.push(c);\n    grouped.set(c.path, arr);\n  }\n  for (const [file, changes] of grouped) {\n    const src = readFileSync(file, \"utf8\");\n    let next = src;\n    for (const c of changes) {\n      const re = new RegExp(`(\"${escape(c.name)}\"\\\\s*:\\\\s*\")${escape(c.from)}(\")`);\n      next = next.replace(re, (_m, p1: string, p2: string) => `${p1}${c.to}${p2}`);\n    }\n    writeFileSync(file, next, \"utf8\");\n  }\n  return { filesChanged: grouped.size };\n}\n\nfunction escape(s: string): string {\n  return s.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n}\n","import pc from \"picocolors\";\nimport type { DriftReport, Severity } from \"./types.js\";\n\nconst sevColor: Record<Severity, (s: string) => string> = {\n  patch: pc.gray,\n  minor: pc.yellow,\n  major: pc.red,\n};\n\nexport function formatPretty(report: DriftReport): string {\n  if (report.drifted.length === 0) {\n    return pc.green(`drift-check: no drift across ${report.workspaces.length} workspaces`);\n  }\n  const lines: string[] = [];\n  lines.push(pc.bold(`drift-check — ${report.drifted.length} drifted package(s) across ${report.workspaces.length} workspaces`));\n  for (const d of report.drifted) {\n    lines.push(\"\");\n    lines.push(`  ${sevColor[d.severity](d.severity.toUpperCase())}  ${pc.bold(d.name)}`);\n    for (const v of d.versions) {\n      lines.push(`    - ${v.version}  ${pc.gray(`(${v.workspace} / ${v.field})`)}`);\n    }\n  }\n  return lines.join(\"\\n\");\n}\n\nexport function formatJson(report: DriftReport): string {\n  return JSON.stringify(report, null, 2);\n}\n","import { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { Severity } from \"./types.js\";\n\nexport interface DriftConfig {\n  failOn?: Severity;\n  ignore?: string[];\n  workspaceGlobs?: string[];\n}\n\nexport function loadConfig(cwd: string): DriftConfig {\n  const f = join(cwd, \".driftrc.json\");\n  if (!existsSync(f)) return {};\n  try {\n    return JSON.parse(readFileSync(f, \"utf8\")) as DriftConfig;\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";AAAA,SAAS,YAAY,cAAc,aAAa,gBAAgB;AAChE,SAAS,SAAS,MAAM,eAAe;AACvC,OAAO,UAAU;AAGjB,SAAS,SAAS,MAAmD;AACnE,MAAI;AACF,WAAO,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AAAA,EAC9C,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,iBAAiB,MAAc,YAAiC;AAC9E,SAAO,QAAQ,IAAI;AACnB,QAAM,aAAa,oBAAI,IAAY;AACnC,QAAM,OAAO,KAAK,MAAM,qBAAqB;AAC7C,MAAI,WAAW,IAAI,GAAG;AACpB,QAAI;AACF,YAAM,MAAM,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC;AACjD,iBAAW,KAAK,IAAI,YAAY,CAAC,EAAG,YAAW,MAAM,GAAG,UAAU;AAAA,IACpE,QAAQ;AAAA,IAER;AAAA,EACF;AACA,QAAM,UAAU,SAAS,KAAK,MAAM,cAAc,CAAC;AACnD,MAAI,SAAS;AACX,UAAM,KAAK,QAAQ;AACnB,QAAI,MAAM,QAAQ,EAAE,GAAG;AACrB,iBAAW,KAAK,GAAI,KAAI,OAAO,MAAM,SAAU,YAAW,MAAM,GAAG,UAAU;AAAA,IAC/E,WAAW,MAAM,OAAO,OAAO,YAAY,MAAM,QAAS,GAA+B,QAAQ,GAAG;AAClG,iBAAW,KAAM,GAA8B,SAAU,YAAW,MAAM,GAAG,UAAU;AAAA,IACzF;AAAA,EACF;AACA,aAAW,KAAK,cAAc,CAAC,cAAc,QAAQ,EAAG,YAAW,MAAM,GAAG,UAAU;AAEtF,MAAI,WAAW,SAAS,GAAG;AACzB,eAAW,IAAI,KAAK,MAAM,cAAc,CAAC;AAAA,EAC3C;AACA,SAAO,CAAC,GAAG,UAAU;AACvB;AAEA,SAAS,WAAW,MAAc,MAAc,KAAwB;AACtE,MAAI,CAAC,KAAK,SAAS,GAAG,GAAG;AACvB,UAAM,KAAK,KAAK,MAAM,MAAM,cAAc;AAC1C,QAAI,WAAW,EAAE,EAAG,KAAI,IAAI,EAAE;AAC9B;AAAA,EACF;AACA,QAAM,WAAW,KAAK,MAAM,GAAG;AAC/B,SAAO,MAAM,UAAU,GAAG,GAAG;AAC/B;AAEA,SAAS,OAAO,KAAa,UAAoB,KAAa,KAAwB;AACpF,MAAI,QAAQ,SAAS,QAAQ;AAC3B,UAAM,KAAK,KAAK,KAAK,cAAc;AACnC,QAAI,WAAW,EAAE,EAAG,KAAI,IAAI,EAAE;AAC9B;AAAA,EACF;AACA,QAAM,MAAM,SAAS,GAAG;AACxB,MAAI,QAAQ,KAAK;AACf,QAAI,CAAC,WAAW,GAAG,EAAG;AACtB,eAAW,SAAS,YAAY,GAAG,GAAG;AACpC,YAAM,MAAM,KAAK,KAAK,KAAK;AAC3B,UAAI;AAAE,YAAI,CAAC,SAAS,GAAG,EAAE,YAAY,EAAG;AAAA,MAAU,QAAQ;AAAE;AAAA,MAAU;AACtE,aAAO,KAAK,UAAU,MAAM,GAAG,GAAG;AAAA,IACpC;AAAA,EACF,WAAW,QAAQ,MAAM;AACvB,SAAK,KAAK,CAAC,MAAM,OAAO,GAAG,UAAU,MAAM,GAAG,GAAG,CAAC;AAAA,EACpD,OAAO;AACL,WAAO,KAAK,KAAK,GAAG,GAAG,UAAU,MAAM,GAAG,GAAG;AAAA,EAC/C;AACF;AAEA,SAAS,KAAK,KAAa,OAAkC;AAC3D,MAAI,CAAC,WAAW,GAAG,EAAG;AACtB,QAAM,GAAG;AACT,aAAW,SAAS,YAAY,GAAG,GAAG;AACpC,QAAI,UAAU,kBAAkB,MAAM,WAAW,GAAG,EAAG;AACvD,UAAM,MAAM,KAAK,KAAK,KAAK;AAC3B,QAAI;AAAE,UAAI,SAAS,GAAG,EAAE,YAAY,EAAG,MAAK,KAAK,KAAK;AAAA,IAAG,QAAQ;AAAA,IAAa;AAAA,EAChF;AACF;AAEO,SAAS,eAAe,MAAc,YAA2C;AACtF,SAAO,iBAAiB,MAAM,UAAU,EACrC,IAAI,CAAC,SAAS;AACb,UAAM,KAAK,SAAS,IAAI;AACxB,QAAI,CAAC,GAAI,QAAO;AAChB,WAAO;AAAA,MACL,MAAO,GAAG,QAAmB,QAAQ,IAAI;AAAA,MACzC,SAAU,GAAG,WAAsB;AAAA,MACnC,iBAAiB;AAAA,MACjB,cAAe,GAAG,gBAA2C,CAAC;AAAA,MAC9D,iBAAkB,GAAG,mBAA8C,CAAC;AAAA,MACpE,kBAAmB,GAAG,oBAA+C,CAAC;AAAA,MACtE,sBAAuB,GAAG,wBAAmD,CAAC;AAAA,IAChF;AAAA,EACF,CAAC,EACA,OAAO,CAAC,MAA6B,QAAQ,CAAC,CAAC;AACpD;AAEO,SAAS,gBAAgB,MAAwB;AACtD,QAAM,OAAO,KAAK,MAAM,cAAc;AACtC,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO,CAAC;AAC/B,SAAO,aAAa,MAAM,MAAM,EAC7B,MAAM,OAAO,EACb,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,WAAW,GAAG,CAAC;AAC1C;;;AC3GA,IAAM,YAAY;AAEX,SAAS,eAAe,OAA4E;AACzG,QAAM,IAAI,UAAU,KAAK,KAAK;AAC9B,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,EAAE,OAAO,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,OAAO,EAAE,CAAC,CAAC,EAAE;AACzE;AAEO,SAAS,SAAS,GAAW,GAA8B;AAChE,QAAM,KAAK,eAAe,CAAC;AAC3B,QAAM,KAAK,eAAe,CAAC;AAC3B,MAAI,CAAC,MAAM,CAAC,GAAI,QAAO,MAAM,IAAI,SAAS;AAC1C,MAAI,GAAG,UAAU,GAAG,MAAO,QAAO;AAClC,MAAI,GAAG,UAAU,GAAG,MAAO,QAAO;AAClC,MAAI,GAAG,UAAU,GAAG,MAAO,QAAO;AAClC,MAAI,MAAM,EAAG,QAAO;AACpB,SAAO;AACT;AAEO,SAAS,aAAa,QAA0B;AACrD,MAAI,OAAO,OAAO,CAAC;AACnB,MAAI,UAAU,eAAe,IAAI;AACjC,aAAW,KAAK,QAAQ;AACtB,UAAM,IAAI,eAAe,CAAC;AAC1B,QAAI,CAAC,EAAG;AACR,QAAI,CAAC,WAAW,QAAQ,GAAG,OAAO,IAAI,GAAG;AACvC,aAAO;AACP,gBAAU;AAAA,IACZ;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,QAAQ,GAAoD,GAA4D;AAC/H,MAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,MAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,SAAO,EAAE,QAAQ,EAAE;AACrB;AAEO,IAAM,gBAA0C,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,EAAE;AAE/E,SAAS,YAAY,QAA8B;AACxD,MAAI,MAAgB;AACpB,aAAW,KAAK,OAAQ,KAAI,cAAc,CAAC,IAAI,cAAc,GAAG,EAAG,OAAM;AACzE,SAAO;AACT;;;ACsBA,SAAS,gBAAAA,eAAc,qBAAqB;AAjE5C,IAAM,SAAqB,CAAC,gBAAgB,mBAAmB,oBAAoB,sBAAsB;AAElG,SAAS,KAAK,UAAuB,CAAC,GAAgB;AAC3D,QAAM,MAAM,QAAQ,OAAO,QAAQ,IAAI;AACvC,QAAM,aAAa,eAAe,KAAK,QAAQ,cAAc;AAC7D,QAAM,SAAS,oBAAI,IAAI,CAAC,GAAI,QAAQ,UAAU,CAAC,GAAI,GAAG,gBAAgB,GAAG,CAAC,CAAC;AAE3E,QAAM,QAAQ,oBAAI,IAA2C;AAC7D,aAAW,MAAM,YAAY;AAC3B,eAAW,SAAS,QAAQ;AAC1B,iBAAW,CAAC,MAAM,OAAO,KAAK,OAAO,QAAQ,GAAG,KAAK,CAAC,GAAG;AACvD,YAAI,OAAO,IAAI,IAAI,EAAG;AACtB,cAAM,OAAO,MAAM,IAAI,IAAI,KAAK,CAAC;AACjC,aAAK,KAAK,EAAE,WAAW,GAAG,MAAM,SAAS,OAAO,MAAM,GAAG,gBAAgB,CAAC;AAC1E,cAAM,IAAI,MAAM,IAAI;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAA+B,CAAC;AACtC,aAAW,CAAC,MAAM,WAAW,KAAK,OAAO;AACvC,UAAM,SAAS,CAAC,GAAG,IAAI,IAAI,YAAY,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC7D,QAAI,OAAO,UAAU,EAAG;AACxB,UAAM,aAAyB,CAAC;AAChC,aAAS,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AACtC,eAAS,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;AAC1C,cAAM,IAAI,SAAS,OAAO,CAAC,GAAI,OAAO,CAAC,CAAE;AACzC,YAAI,MAAM,OAAQ,YAAW,KAAK,CAAC;AAAA,MACrC;AAAA,IACF;AACA,YAAQ,KAAK;AAAA,MACX;AAAA,MACA,UAAU,YAAY,UAAU;AAAA,MAChC,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAEA,UAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AACnD,SAAO,EAAE,YAAY,SAAS,cAAa,oBAAI,KAAK,GAAE,YAAY,EAAE;AACtE;AAYO,SAAS,QAAQ,QAAqB,UAAyD,CAAC,GAAY;AACjH,QAAM,UAA8B,CAAC;AACrC,aAAW,KAAK,OAAO,SAAS;AAC9B,QAAI,QAAQ,QAAQ,EAAE,SAAS,QAAQ,KAAM;AAC7C,UAAM,SAAS,QAAQ,UAAU,QAAQ,WAAW,WAAW,QAAQ,SAAS,aAAa,EAAE,SAAS,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC;AAC7H,eAAW,KAAK,EAAE,UAAU;AAC1B,UAAI,EAAE,YAAY,QAAQ;AACxB,gBAAQ,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,MAAM,EAAE,MAAM,MAAM,EAAE,SAAS,IAAI,OAAO,CAAC;AAAA,MAC1F;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,QAAQ;AACnB;AAIO,SAAS,SAAS,MAAyC;AAChE,QAAM,UAAU,oBAAI,IAAgC;AACpD,aAAW,KAAK,KAAK,SAAS;AAC5B,UAAM,MAAM,QAAQ,IAAI,EAAE,IAAI,KAAK,CAAC;AACpC,QAAI,KAAK,CAAC;AACV,YAAQ,IAAI,EAAE,MAAM,GAAG;AAAA,EACzB;AACA,aAAW,CAAC,MAAM,OAAO,KAAK,SAAS;AACrC,UAAM,MAAMA,cAAa,MAAM,MAAM;AACrC,QAAI,OAAO;AACX,eAAW,KAAK,SAAS;AACvB,YAAM,KAAK,IAAI,OAAO,KAAK,OAAO,EAAE,IAAI,CAAC,eAAe,OAAO,EAAE,IAAI,CAAC,KAAK;AAC3E,aAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAY,OAAe,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE;AAAA,IAC7E;AACA,kBAAc,MAAM,MAAM,MAAM;AAAA,EAClC;AACA,SAAO,EAAE,cAAc,QAAQ,KAAK;AACtC;AAEA,SAAS,OAAO,GAAmB;AACjC,SAAO,EAAE,QAAQ,uBAAuB,MAAM;AAChD;;;AC5FA,OAAO,QAAQ;AAGf,IAAM,WAAoD;AAAA,EACxD,OAAO,GAAG;AAAA,EACV,OAAO,GAAG;AAAA,EACV,OAAO,GAAG;AACZ;AAEO,SAAS,aAAa,QAA6B;AACxD,MAAI,OAAO,QAAQ,WAAW,GAAG;AAC/B,WAAO,GAAG,MAAM,gCAAgC,OAAO,WAAW,MAAM,aAAa;AAAA,EACvF;AACA,QAAM,QAAkB,CAAC;AACzB,QAAM,KAAK,GAAG,KAAK,sBAAiB,OAAO,QAAQ,MAAM,8BAA8B,OAAO,WAAW,MAAM,aAAa,CAAC;AAC7H,aAAW,KAAK,OAAO,SAAS;AAC9B,UAAM,KAAK,EAAE;AACb,UAAM,KAAK,KAAK,SAAS,EAAE,QAAQ,EAAE,EAAE,SAAS,YAAY,CAAC,CAAC,KAAK,GAAG,KAAK,EAAE,IAAI,CAAC,EAAE;AACpF,eAAW,KAAK,EAAE,UAAU;AAC1B,YAAM,KAAK,SAAS,EAAE,OAAO,KAAK,GAAG,KAAK,IAAI,EAAE,SAAS,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE;AAAA,IAC9E;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,WAAW,QAA6B;AACtD,SAAO,KAAK,UAAU,QAAQ,MAAM,CAAC;AACvC;;;AC3BA,SAAS,cAAAC,aAAY,gBAAAC,qBAAoB;AACzC,SAAS,QAAAC,aAAY;AASd,SAAS,WAAW,KAA0B;AACnD,QAAM,IAAIA,MAAK,KAAK,eAAe;AACnC,MAAI,CAACF,YAAW,CAAC,EAAG,QAAO,CAAC;AAC5B,MAAI;AACF,WAAO,KAAK,MAAMC,cAAa,GAAG,MAAM,CAAC;AAAA,EAC3C,QAAQ;AACN,WAAO,CAAC;AAAA,EACV;AACF;","names":["readFileSync","existsSync","readFileSync","join"]}