@nifrajs/cli 2.2.0 → 2.4.0

package/dist/scaffold.js

@@ -1,10 +1,10 @@
 /**
- * `nifra_scaffold` — turn a URL path into the correct `routes/` file (the convention an agent most often
+ * `nifra_scaffold` - turn a URL path into the correct `routes/` file (the convention an agent most often
  * gets wrong) + a minimal, contract-correct stub. The mapping is the inverse of @nifrajs/web's
  * `filePathToPatterns`: `:id`/`[id]` → `[id]`, `*rest`/`[...rest]` → `[...rest]`, `[[lang]]` optional,
  * `/` → `index`. The framework (→ file extension) comes from the project's `clientModule`.
  *
- * Page stubs are emitted only for the JSX family (react/preact/solid — one shared, verified shape);
+ * Page stubs are emitted only for the JSX family (react/preact/solid - one shared, verified shape);
  * for vue/svelte/vanilla we return the correct PATH + the route-module contract and point at
  * `nifra_example` for the body, rather than hand-writing an SFC we can't typecheck here.
  */
@@ -49,17 +49,17 @@ export function routePathToFile(urlPath, ext) {
     return `routes/${segments.map(segmentToFile).join("/")}.${ext}`;
 }
 const ROUTE_CONTRACT = `A route module may export:
-- \`export default function Page(props: { data: LoaderData<typeof loader> }) { … }\` — the page component.
-- \`export async function loader({ params, request, api }: LoaderArgs<typeof backend>) { … }\` — server-only; data for SSR. Reach the backend via \`api\` (typed) / DB via the backend, NEVER a top-level server-only import.
-- \`export async function action({ request, api }: ActionArgs<typeof backend>) { … }\` — server-only; handles the form POST.
-- \`export const meta = { title, meta:[…] }\` — head tags.
+- \`export default function Page(props: { data: LoaderData<typeof loader> }) { … }\` - the page component.
+- \`export async function loader({ params, request, api }: LoaderArgs<typeof backend>) { … }\` - server-only; data for SSR. Reach the backend via \`api\` (typed) / DB via the backend, NEVER a top-level server-only import.
+- \`export async function action({ request, api }: ActionArgs<typeof backend>) { … }\` - server-only; handles the form POST.
+- \`export const meta = { title, meta:[…] }\` - head tags.
 Path params are typed on \`params\`.`;
 function jsxStub(file, params) {
     const paramsNote = params.length > 0 ? `params.${params.join(", params.")}` : "no path params on this route";
     const loaderLine = params.length > 0
         ? `// export async function loader({ params, api }: LoaderArgs<typeof backend>) { return { /* fetch by ${params[0]} */ } }`
         : `// export async function loader({ api }: LoaderArgs<typeof backend>) { return {} }`;
-    return `// ${file} — server-only loader/action allowed; never top-level-import server-only code (DB/secrets).
+    return `// ${file} - server-only loader/action allowed; never top-level-import server-only code (DB/secrets).
 // Available here: ${paramsNote}. Fetch data in a loader via the typed \`api\`; see nifra_example("loader").
 ${loaderLine}
 export default function Page() {
@@ -125,7 +125,7 @@ export async function writeScaffoldRoute(cwd, urlPath, framework) {
     }
     return { ...result, written: true };
 }
-/** Render the tool result as markdown — the file path, the stub (if any), and the contract note. */
+/** Render the tool result as markdown - the file path, the stub (if any), and the contract note. */
 export function renderScaffold(urlPath, framework) {
     let r;
     try {

package/dist/sync-routes.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `nifra sync-routes` - regenerate the route-search types (`nifra-routes.d.ts`) from the current `routes/`
+ * tree, so `navigate({ to, search })` is typed against each static route's `searchSchema`. It runs
+ * `@nifrajs/web`'s `generateRouteSearchTypes` over the discovered routes and writes the `.d.ts` at the
+ * project root; include it in your tsconfig's `include`. Because it is regenerated from the route files, a
+ * stale navigate search shape becomes a `tsc` error - run it after adding/renaming a route or changing a
+ * `searchSchema` (a pure file write, no build). A dynamic route (`:param`/catch-all) is omitted, since its
+ * pattern is not a concrete `to`; those keep the loose object form.
+ */
+/** The committed route-types file `sync-routes` writes, so `nifra check` can recognise + drift-check it. */
+export declare const ROUTE_TYPES_FILE = "nifra-routes.d.ts";
+export interface SyncRoutesResult {
+    /** The written `.d.ts` (relative to the project root). */
+    readonly file: string;
+    /** True when the file's content changed and it was rewritten. */
+    readonly changed: boolean;
+    /** How many static routes got a typed entry. */
+    readonly typedRoutes: number;
+}
+/**
+ * Generate the route-search types `.d.ts` from `<cwd>/routes` (the nifra convention). Returns `null` when
+ * there is no `routes/` directory (an API-only project - nothing to type). Never loads `framework.ts`: it
+ * needs only the route tree, so it works before a build and on a broken framework config.
+ */
+export declare function syncRouteTypes(cwd: string): Promise<SyncRoutesResult | null>;
+/** CLI entry: write/refresh the route-types file and print a one-line summary + the tsconfig reminder. */
+export declare function runSyncRoutes(cwd: string): Promise<boolean>;
+//# sourceMappingURL=sync-routes.d.ts.map

package/dist/sync-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-routes.d.ts","sourceRoot":"","sources":["../src/sync-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,4GAA4G;AAC5G,eAAO,MAAM,gBAAgB,sBAAsB,CAAA;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,iEAAiE;IACjE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAkBlF;AAED,0GAA0G;AAC1G,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAiBjE"}

package/dist/sync-routes.js

@@ -0,0 +1,55 @@
+/**
+ * `nifra sync-routes` - regenerate the route-search types (`nifra-routes.d.ts`) from the current `routes/`
+ * tree, so `navigate({ to, search })` is typed against each static route's `searchSchema`. It runs
+ * `@nifrajs/web`'s `generateRouteSearchTypes` over the discovered routes and writes the `.d.ts` at the
+ * project root; include it in your tsconfig's `include`. Because it is regenerated from the route files, a
+ * stale navigate search shape becomes a `tsc` error - run it after adding/renaming a route or changing a
+ * `searchSchema` (a pure file write, no build). A dynamic route (`:param`/catch-all) is omitted, since its
+ * pattern is not a concrete `to`; those keep the loose object form.
+ */
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+/** The committed route-types file `sync-routes` writes, so `nifra check` can recognise + drift-check it. */
+export const ROUTE_TYPES_FILE = "nifra-routes.d.ts";
+/**
+ * Generate the route-search types `.d.ts` from `<cwd>/routes` (the nifra convention). Returns `null` when
+ * there is no `routes/` directory (an API-only project - nothing to type). Never loads `framework.ts`: it
+ * needs only the route tree, so it works before a build and on a broken framework config.
+ */
+export async function syncRouteTypes(cwd) {
+    const routesDir = join(cwd, "routes");
+    if (!existsSync(routesDir))
+        return null;
+    const { discoverRoutes } = await import("@nifrajs/web/fs");
+    const { generateRouteSearchTypes } = await import("@nifrajs/web");
+    const manifest = discoverRoutes(routesDir);
+    const code = generateRouteSearchTypes(manifest, {
+        // A route file is relative to routesDir (`reports.tsx`, `users/index.tsx`); the `.d.ts` sits at the
+        // project root, so the `typeof import(...)` specifier is `./routes/<file без extension>`.
+        resolve: (file) => `./routes/${file.replace(/\.[^./]+$/, "")}`,
+    });
+    const outFile = join(cwd, ROUTE_TYPES_FILE);
+    const existing = await Bun.file(outFile)
+        .text()
+        .catch(() => "");
+    const changed = existing !== code;
+    if (changed)
+        await Bun.write(outFile, code);
+    return { file: ROUTE_TYPES_FILE, changed, typedRoutes: (code.match(/: SearchOf</g) ?? []).length };
+}
+/** CLI entry: write/refresh the route-types file and print a one-line summary + the tsconfig reminder. */
+export async function runSyncRoutes(cwd) {
+    const result = await syncRouteTypes(cwd);
+    if (result === null) {
+        console.log("nifra sync-routes: no routes/ directory found. Run from your project root.");
+        return true;
+    }
+    const n = result.typedRoutes;
+    const routes = `${n} typed route${n === 1 ? "" : "s"}`;
+    console.log(result.changed
+        ? `✓ wrote ${result.file} (${routes})`
+        : `• ${result.file} already in sync (${routes})`);
+    console.log("  Include it in your tsconfig's `include` so `navigate({ to, search })` is typed per route.");
+    return true;
+}
+//# sourceMappingURL=sync-routes.js.map

package/dist/sync-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-routes.js","sourceRoot":"","sources":["../src/sync-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,4GAA4G;AAC5G,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAWnD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACvC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAC1D,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAA;IACjE,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,wBAAwB,CAAC,QAAQ,EAAE;QAC9C,oGAAoG;QACpG,0FAA0F;QAC1F,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE;KAC/D,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;IAC3C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;SACrC,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAA;IAClB,MAAM,OAAO,GAAG,QAAQ,KAAK,IAAI,CAAA;IACjC,IAAI,OAAO;QAAE,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC3C,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;AACpG,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAA;QACzF,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAA;IAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA;IACtD,OAAO,CAAC,GAAG,CACT,MAAM,CAAC,OAAO;QACZ,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,KAAK,MAAM,GAAG;QACtC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,qBAAqB,MAAM,GAAG,CACnD,CAAA;IACD,OAAO,CAAC,GAAG,CACT,6FAA6F,CAC9F,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/types-search.d.ts

@@ -1,7 +1,7 @@
 /**
- * `nifra_types` — the EXACT TypeScript of every exported `@nifrajs/*` symbol. The corpus is `types.json`
+ * `nifra_types` - the EXACT TypeScript of every exported `@nifrajs/*` symbol. The corpus is `types.json`
  * (written into this package by `bun run gen:llms`): each entry's `signature` is the literal declaration
- * parsed from the package's BUILT `.d.ts` with the TS compiler — a clean signature, never prose, never
+ * parsed from the package's BUILT `.d.ts` with the TS compiler - a clean signature, never prose, never
  * truncated. So an agent that needs the precise shape of a type (`RateLimitStore`, `RouteSchema`, a
  * function signature) gets the authoritative source here and never has to read a `.d.ts` file.
  *
@@ -12,7 +12,7 @@ export interface TypeEntry {
     readonly name: string;
     readonly kind: "interface" | "type" | "class" | "function" | "enum" | "const";
     readonly package: string;
-    /** The literal declaration text from the `.d.ts` — a clean signature, no implementation. */
+    /** The literal declaration text from the `.d.ts` - a clean signature, no implementation. */
     readonly signature: string;
     /** The declaration's JSDoc block, if any. */
     readonly doc?: string;
@@ -20,7 +20,7 @@ export interface TypeEntry {
 export interface ScoredType extends TypeEntry {
     readonly score: number;
 }
-/** Exact (case-insensitive) name lookup — returns every declaration with that name (a name can exist in
+/** Exact (case-insensitive) name lookup - returns every declaration with that name (a name can exist in
  * more than one package). */
 export declare function lookupType(types: readonly TypeEntry[], name: string): TypeEntry[];
 /** Keyword-score types: a term in the name is worth far more than one in the signature/doc body. */
@@ -28,7 +28,7 @@ export declare function searchTypes(types: readonly TypeEntry[], query: string,
 /**
  * Render the tool result. `name` → the exact declaration(s); else `query` → the top matches; else a
  * per-package index of type names. The signatures are authoritative (generated from the built `.d.ts`),
- * so this is the complete answer — there is no need to read a `.d.ts` file.
+ * so this is the complete answer - there is no need to read a `.d.ts` file.
  */
 export declare function renderTypesResult(types: readonly TypeEntry[], name: string | undefined, query: string | undefined, limit: number, full?: boolean): string;
 /** Load the bundled type corpus (`docs/types.json`), resolved relative to this module so it works from

package/dist/types-search.js

@@ -1,7 +1,7 @@
 /**
- * `nifra_types` — the EXACT TypeScript of every exported `@nifrajs/*` symbol. The corpus is `types.json`
+ * `nifra_types` - the EXACT TypeScript of every exported `@nifrajs/*` symbol. The corpus is `types.json`
  * (written into this package by `bun run gen:llms`): each entry's `signature` is the literal declaration
- * parsed from the package's BUILT `.d.ts` with the TS compiler — a clean signature, never prose, never
+ * parsed from the package's BUILT `.d.ts` with the TS compiler - a clean signature, never prose, never
  * truncated. So an agent that needs the precise shape of a type (`RateLimitStore`, `RouteSchema`, a
  * function signature) gets the authoritative source here and never has to read a `.d.ts` file.
  *
@@ -9,7 +9,7 @@
  * signature/doc body; no args → a per-package index of the available type names.
  */
 import { countBodyHits, queryTermGroups, tokenize, tokenSetHas } from "./search-terms.js";
-/** Exact (case-insensitive) name lookup — returns every declaration with that name (a name can exist in
+/** Exact (case-insensitive) name lookup - returns every declaration with that name (a name can exist in
  * more than one package). */
 export function lookupType(types, name) {
     const wanted = name.trim().toLowerCase();
@@ -36,7 +36,7 @@ export function searchTypes(types, query, limit) {
     return scored.sort((a, b) => b.score - a.score || a.name.localeCompare(b.name)).slice(0, limit);
 }
 function renderEntry(t) {
-    const head = `## ${t.name} — ${t.kind}, \`${t.package}\``;
+    const head = `## ${t.name} - ${t.kind}, \`${t.package}\``;
     const doc = t.doc ? `${t.doc}\n` : "";
     return `${head}\n\n\`\`\`ts\n${doc}${t.signature}\n\`\`\``;
 }
@@ -76,7 +76,7 @@ function collapseSignature(signature) {
 }
 /** A search hit: enough to choose, not the whole declaration. */
 function renderSearchHit(t) {
-    const head = `## ${t.name} — ${t.kind}, \`${t.package}\``;
+    const head = `## ${t.name} - ${t.kind}, \`${t.package}\``;
     const summary = summarize(t.doc);
     const signature = t.signature.length <= SEARCH_SIGNATURE_MAX ? t.signature : collapseSignature(t.signature);
     const note = t.signature.length <= SEARCH_SIGNATURE_MAX
@@ -87,7 +87,7 @@ function renderSearchHit(t) {
 /**
  * Render the tool result. `name` → the exact declaration(s); else `query` → the top matches; else a
  * per-package index of type names. The signatures are authoritative (generated from the built `.d.ts`),
- * so this is the complete answer — there is no need to read a `.d.ts` file.
+ * so this is the complete answer - there is no need to read a `.d.ts` file.
  */
 export function renderTypesResult(types, name, query, limit, full = false) {
     if (name !== undefined && name.trim() !== "") {
@@ -115,7 +115,7 @@ export function renderTypesResult(types, name, query, limit, full = false) {
         .sort(([a], [b]) => a.localeCompare(b))
         .map(([pkg, names]) => `- **${pkg}**: ${names.sort().join(", ")}`)
         .join("\n");
-    return `# nifra types — index (${types.length} exported symbols; pass \`name\` for the exact declaration, or \`query\` to search)\n\nSignatures are generated from the built \`.d.ts\` — authoritative + complete. Use this instead of reading any \`.d.ts\` file.\n\n${index}`;
+    return `# nifra types - index (${types.length} exported symbols; pass \`name\` for the exact declaration, or \`query\` to search)\n\nSignatures are generated from the built \`.d.ts\` - authoritative + complete. Use this instead of reading any \`.d.ts\` file.\n\n${index}`;
 }
 /** Load the bundled type corpus (`docs/types.json`), resolved relative to this module so it works from
  * `src/` (dev) and `dist/` (published) alike. */

package/dist/upgrade.d.ts

@@ -1,20 +1,20 @@
 /**
- * `nifra upgrade <version>` — an executable, per-release upgrade runner. Framework and shared-package
+ * `nifra upgrade <version>` - an executable, per-release upgrade runner. Framework and shared-package
  * bumps otherwise spread the same mechanical edits across every consuming app by hand; a recipe turns
  * them into `detect → transform → verify`:
  *
- *   1. **pin sweep** — set every matching dependency to the target version across the workspace's
+ *   1. **pin sweep** - set every matching dependency to the target version across the workspace's
  *      package.json files, preserving the caret/tilde/exact style and skipping `workspace:`/`link:` specs.
- *   2. **dependency moves** — replace removed packages with their supported successor without
+ *   2. **dependency moves** - replace removed packages with their supported successor without
  *      reserializing package.json or leaving duplicate dependency keys.
- *   3. **import moves** — rewrite exact import specifiers to their updated module paths.
- *   4. **verify** — reuse the existing `nifra check` gate; no new verification surface.
+ *   3. **import moves** - rewrite exact import specifiers to their updated module paths.
+ *   4. **verify** - reuse the existing `nifra check` gate; no new verification surface.
  *
  * Dry-run by default (prints the plan, writes nothing); `--write` applies. Fail-closed on an unknown
  * target version or a missing package.json, and deterministic (same repo + target → same edits).
  *
  * Deliberately NOT a codemod engine: transforms are string/specifier-level only. Structural (AST)
- * transforms are a future addition — a recipe that needs one is the signal to add the engine, not before.
+ * transforms are a future addition - a recipe that needs one is the signal to add the engine, not before.
  */
 import { type UpgradeRecipe } from "./recipes/index.js";
 export interface UpgradeOptions {
@@ -28,6 +28,8 @@ export interface UpgradeOptions {
     readonly list?: boolean;
     /** After `--write`, run `nifra check` and fail the command if it fails. Default true. */
     readonly verify?: boolean;
+    /** Permit a target BELOW the installed version (a rollback). Default false → fail-closed. */
+    readonly allowDowngrade?: boolean;
 }
 export interface PinChange {
     readonly file: string;
@@ -56,6 +58,8 @@ export interface UpgradePlan {
     readonly pins: readonly PinChange[];
     readonly dependencyMoves: readonly DependencyMoveChange[];
     readonly importMoves: readonly ImportChange[];
+    /** Pins refused because the target is BELOW the installed version (a rollback). Empty when allowed. */
+    readonly downgrades: readonly PinChange[];
     readonly notes: readonly string[];
 }
 /**
@@ -63,17 +67,24 @@ export interface UpgradePlan {
  * Returns null when the spec is not a plain semver spec (→ skip it) or already equals the target.
  */
 export declare function rewriteVersionSpec(spec: string, toVersion: string): string | null;
+/** Numeric core (major, minor, patch) of a semver spec, ignoring the range operator + prerelease/build. */
+export declare function specVersionTuple(spec: string): readonly [number, number, number] | null;
+/** Compare two semver cores: <0 when a<b, 0 equal, >0 when a>b. */
+export declare function compareSemverCore(a: readonly [number, number, number], b: readonly [number, number, number]): number;
+/** Compare full semver precedence, including prereleases (`2.3.0-beta` < `2.3.0`). */
+export declare function compareSemverSpec(a: string, b: string): number;
 /**
- * Apply pin rules to one package.json's TEXT (format-preserving — targeted string replaces, never a
+ * Apply pin rules to one package.json's TEXT (format-preserving - targeted string replaces, never a
  * JSON re-serialize that would reorder keys or drop comments-as-formatting). Returns the new text and
  * the changes made.
  */
 export declare function pinSweepText(text: string, rules: readonly {
     match: string;
     to: string;
-}[]): {
+}[], allowDowngrade?: boolean): {
     text: string;
     changes: Array<Omit<PinChange, "file">>;
+    downgrades: Array<Omit<PinChange, "file">>;
 };
 /** Move removed package dependencies without reserializing or reordering package.json. */
 export declare function moveDependenciesText(text: string, moves: readonly {
@@ -97,7 +108,7 @@ export declare function applyImportMoves(text: string, moves: readonly {
     }>;
 };
 /** Compute the plan (and, when `write`, apply it) for a target recipe against `cwd`. */
-export declare function computeUpgrade(cwd: string, recipe: UpgradeRecipe, write: boolean): UpgradePlan;
+export declare function computeUpgrade(cwd: string, recipe: UpgradeRecipe, write: boolean, allowDowngrade?: boolean): UpgradePlan;
 /** CLI entry. Returns false (→ non-zero exit) on an unknown version, no project, or a failed verify. */
 export declare function runUpgrade(cwd: string, options: UpgradeOptions): Promise<boolean>;
 //# sourceMappingURL=upgrade.d.ts.map

package/dist/upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAAiC,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEtF,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,yFAAyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACzD,QAAQ,CAAC,WAAW,EAAE,SAAS,YAAY,EAAE,CAAA;IAC7C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAcD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMjF;AAID;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,GAC9C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CA8B3D;AAmED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,GAChE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CA2CtE;AAQD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,GAC7C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAa/E;AAiBD,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAmC9F;AA0CD,wGAAwG;AACxG,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAmDvF"}
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../src/upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH,OAAO,EAAiC,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEtF,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;IACxB,uEAAuE;IACvE,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,yFAAyF;IACzF,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,6FAA6F;IAC7F,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAClC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;CACvC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,SAAS,EAAE,CAAA;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,oBAAoB,EAAE,CAAA;IACzD,QAAQ,CAAC,WAAW,EAAE,SAAS,YAAY,EAAE,CAAA;IAC7C,uGAAuG;IACvG,QAAQ,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,CAAA;IACzC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAcD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMjF;AAED,2GAA2G;AAC3G,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAIvF;AAoBD,mEAAmE;AACnE,wBAAgB,iBAAiB,CAC/B,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EACpC,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GACnC,MAAM,CAER;AAED,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAyB9D;AAID;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,EAC/C,cAAc,UAAQ,GACrB;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IACvC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;CAC3C,CA4CA;AAmED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,GAChE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAA;CAAE,CA2CtE;AAQD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EAAE,GAC7C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,CAa/E;AAiBD,wFAAwF;AACxF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,OAAO,EACd,cAAc,UAAQ,GACrB,WAAW,CAsCb;AAuDD,wGAAwG;AACxG,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAgEvF"}

package/dist/upgrade.js

@@ -1,20 +1,20 @@
 /**
- * `nifra upgrade <version>` — an executable, per-release upgrade runner. Framework and shared-package
+ * `nifra upgrade <version>` - an executable, per-release upgrade runner. Framework and shared-package
  * bumps otherwise spread the same mechanical edits across every consuming app by hand; a recipe turns
  * them into `detect → transform → verify`:
  *
- *   1. **pin sweep** — set every matching dependency to the target version across the workspace's
+ *   1. **pin sweep** - set every matching dependency to the target version across the workspace's
  *      package.json files, preserving the caret/tilde/exact style and skipping `workspace:`/`link:` specs.
- *   2. **dependency moves** — replace removed packages with their supported successor without
+ *   2. **dependency moves** - replace removed packages with their supported successor without
  *      reserializing package.json or leaving duplicate dependency keys.
- *   3. **import moves** — rewrite exact import specifiers to their updated module paths.
- *   4. **verify** — reuse the existing `nifra check` gate; no new verification surface.
+ *   3. **import moves** - rewrite exact import specifiers to their updated module paths.
+ *   4. **verify** - reuse the existing `nifra check` gate; no new verification surface.
  *
  * Dry-run by default (prints the plan, writes nothing); `--write` applies. Fail-closed on an unknown
  * target version or a missing package.json, and deterministic (same repo + target → same edits).
  *
  * Deliberately NOT a codemod engine: transforms are string/specifier-level only. Structural (AST)
- * transforms are a future addition — a recipe that needs one is the signal to add the engine, not before.
+ * transforms are a future addition - a recipe that needs one is the signal to add the engine, not before.
  */
 import { readFileSync, writeFileSync } from "node:fs";
 import { join, relative } from "node:path";
@@ -26,9 +26,9 @@ const DEP_FIELDS = [
     "peerDependencies",
     "optionalDependencies",
 ];
-// Only a bare semver spec is rewritten. Anything else — workspace:*, link:/file:, npm: aliases, git
-// urls, "*", "latest", or a multi-part range — is intentionally left untouched (skipped, not guessed).
-const SEMVER_SPEC = /^([\^~]|>=|<=|>|<|=)?\s*(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+// Only a bare semver spec is rewritten. Anything else - workspace:*, link:/file:, npm: aliases, git
+// urls, "*", "latest", or a multi-part range - is intentionally left untouched (skipped, not guessed).
+const SEMVER_SPEC = /^([\^~]|>=|<=|>|<|=)?\s*(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/;
 /**
  * Rewrite a dependency version spec to `toVersion`, preserving the range operator (`^`, `~`, …).
  * Returns null when the spec is not a plain semver spec (→ skip it) or already equals the target.
@@ -41,22 +41,81 @@ export function rewriteVersionSpec(spec, toVersion) {
     const next = `${operator}${toVersion}`;
     return next === spec ? null : next;
 }
+/** Numeric core (major, minor, patch) of a semver spec, ignoring the range operator + prerelease/build. */
+export function specVersionTuple(spec) {
+    const match = SEMVER_SPEC.exec(spec.trim());
+    if (!match)
+        return null;
+    return [Number(match[2]), Number(match[3]), Number(match[4])];
+}
+function parseSpecVersion(spec) {
+    const match = SEMVER_SPEC.exec(spec.trim());
+    if (!match)
+        return null;
+    const prerelease = (match[5] ?? "").split(".");
+    return {
+        core: [Number(match[2]), Number(match[3]), Number(match[4])],
+        prerelease: match[5] === undefined
+            ? []
+            : prerelease.map((part) => (/^\d+$/.test(part) ? Number(part) : part)),
+    };
+}
+/** Compare two semver cores: <0 when a<b, 0 equal, >0 when a>b. */
+export function compareSemverCore(a, b) {
+    return a[0] - b[0] || a[1] - b[1] || a[2] - b[2];
+}
+/** Compare full semver precedence, including prereleases (`2.3.0-beta` < `2.3.0`). */
+export function compareSemverSpec(a, b) {
+    const left = parseSpecVersion(a);
+    const right = parseSpecVersion(b);
+    if (left === null || right === null)
+        return 0;
+    const core = compareSemverCore(left.core, right.core);
+    if (core !== 0)
+        return core;
+    if (left.prerelease.length === 0 || right.prerelease.length === 0) {
+        return left.prerelease.length === right.prerelease.length
+            ? 0
+            : left.prerelease.length === 0
+                ? 1
+                : -1;
+    }
+    const length = Math.max(left.prerelease.length, right.prerelease.length);
+    for (let i = 0; i < length; i++) {
+        const x = left.prerelease[i];
+        const y = right.prerelease[i];
+        if (x === undefined || y === undefined)
+            return x === undefined ? -1 : 1;
+        if (typeof x === "number" && typeof y === "number") {
+            if (x !== y)
+                return x - y;
+        }
+        else if (typeof x === "number")
+            return -1;
+        else if (typeof y === "number")
+            return 1;
+        else if (x !== y)
+            return x < y ? -1 : 1;
+    }
+    return 0;
+}
 const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 /**
- * Apply pin rules to one package.json's TEXT (format-preserving — targeted string replaces, never a
+ * Apply pin rules to one package.json's TEXT (format-preserving - targeted string replaces, never a
  * JSON re-serialize that would reorder keys or drop comments-as-formatting). Returns the new text and
  * the changes made.
  */
-export function pinSweepText(text, rules) {
+export function pinSweepText(text, rules, allowDowngrade = false) {
     let parsed;
     try {
         parsed = JSON.parse(text);
     }
     catch {
-        return { text, changes: [] };
+        return { text, changes: [], downgrades: [] };
     }
     let out = text;
     const changes = [];
+    const downgrades = [];
     for (const field of DEP_FIELDS) {
         const deps = parsed[field];
         if (typeof deps !== "object" || deps === null)
@@ -70,6 +129,17 @@ export function pinSweepText(text, rules) {
             const next = rewriteVersionSpec(rawSpec, rule.to);
             if (next === null)
                 continue;
+            // Refuse a rollback: `upgrade <version>` pins an exact target, so an OLD target on a newer install
+            // walks dependencies backward (e.g. ^2.3.0 → ^2.0.0) and can break a shared-package peer range.
+            const current = specVersionTuple(rawSpec);
+            const target = specVersionTuple(rule.to);
+            if (!allowDowngrade &&
+                current !== null &&
+                target !== null &&
+                compareSemverSpec(rawSpec, rule.to) > 0) {
+                downgrades.push({ field, name, from: rawSpec, to: next });
+                continue;
+            }
             // Replace exactly `"name"<ws>:<ws>"spec"`, preserving the surrounding whitespace.
             const pattern = new RegExp(`("${escapeRegExp(name)}"\\s*:\\s*")${escapeRegExp(rawSpec)}(")`);
             const replaced = out.replace(pattern, `$1${next}$2`);
@@ -79,7 +149,7 @@ export function pinSweepText(text, rules) {
             }
         }
     }
-    return { text: out, changes };
+    return { text: out, changes, downgrades };
 }
 function dependencyObjectRange(text, field) {
     const match = new RegExp(`"${field}"\\s*:\\s*\\{`).exec(text);
@@ -221,10 +291,11 @@ function scan(cwd, pattern) {
     return out.sort(); // deterministic order
 }
 /** Compute the plan (and, when `write`, apply it) for a target recipe against `cwd`. */
-export function computeUpgrade(cwd, recipe, write) {
+export function computeUpgrade(cwd, recipe, write, allowDowngrade = false) {
     const pins = [];
     const dependencyMoves = [];
     const importMoves = [];
+    const downgrades = [];
     if ((recipe.dependencyMoves?.length ?? 0) > 0 || recipe.pins.length > 0) {
         for (const rel of scan(cwd, "**/package.json")) {
             const abs = join(cwd, rel);
@@ -232,9 +303,11 @@ export function computeUpgrade(cwd, recipe, write) {
             const moved = moveDependenciesText(original, recipe.dependencyMoves ?? []);
             for (const change of moved.changes)
                 dependencyMoves.push({ file: rel, ...change });
-            const pinned = pinSweepText(moved.text, recipe.pins);
+            const pinned = pinSweepText(moved.text, recipe.pins, allowDowngrade);
             for (const change of pinned.changes)
                 pins.push({ file: rel, ...change });
+            for (const d of pinned.downgrades)
+                downgrades.push({ file: rel, ...d });
             if (write && pinned.text !== original)
                 writeFileSync(abs, pinned.text);
         }
@@ -257,6 +330,7 @@ export function computeUpgrade(cwd, recipe, write) {
         pins,
         dependencyMoves,
         importMoves,
+        downgrades,
         notes: recipe.notes ?? [],
     };
 }
@@ -268,7 +342,7 @@ function renderPlan(plan, write) {
     if (plan.pins.length === 0 &&
         plan.dependencyMoves.length === 0 &&
         plan.importMoves.length === 0) {
-        lines.push("Already up to date — no changes.");
+        lines.push("Already up to date - no changes.");
         return lines.join("\n");
     }
     if (plan.dependencyMoves.length > 0) {
@@ -300,6 +374,18 @@ function renderPlan(plan, write) {
         lines.push("\nRe-run with --write to apply, then nifra check verifies.");
     return lines.join("\n").trimEnd();
 }
+/** Explain a refused rollback: which pins would roll back, why it's blocked, and the escape hatch. */
+function renderDowngradeRefusal(version, downgrades) {
+    return [
+        `nifra upgrade → ${version}: refusing to DOWNGRADE ${downgrades.length} pin(s) below what's installed.`,
+        "",
+        ...downgrades.map((d) => `  ${d.file}  ${d.name}: ${d.from} → ${d.to}  (would roll back)`),
+        "",
+        "`nifra upgrade <version>` sets each pin to exactly <version>; an older target on a newer install",
+        "rolls dependencies backward and can violate a shared-package peer range. Target a version >= the",
+        "installed one, or pass --allow-downgrade if the rollback is intended.",
+    ].join("\n");
+}
 /** CLI entry. Returns false (→ non-zero exit) on an unknown version, no project, or a failed verify. */
 export async function runUpgrade(cwd, options) {
     if (options.list) {
@@ -325,11 +411,23 @@ export async function runUpgrade(cwd, options) {
         readFileSync(join(cwd, "package.json"), "utf8");
     }
     catch {
-        console.error(`[nifra] no package.json in ${relative(process.cwd(), cwd) || "."} — run from a project root`);
+        console.error(`[nifra] no package.json in ${relative(process.cwd(), cwd) || "."} - run from a project root`);
         return false;
     }
     const write = options.write === true;
-    const plan = computeUpgrade(cwd, recipe, write);
+    const allowDowngrade = options.allowDowngrade === true;
+    // Fail-closed on rollback: a dry pass writes nothing, so we can refuse before any package.json is touched.
+    const preview = computeUpgrade(cwd, recipe, false, allowDowngrade);
+    if (preview.downgrades.length > 0) {
+        if (options.json) {
+            console.log(JSON.stringify({ ...preview, write: false, refused: "downgrade" }, null, 2));
+        }
+        else {
+            console.error(renderDowngradeRefusal(recipe.version, preview.downgrades));
+        }
+        return false;
+    }
+    const plan = write ? computeUpgrade(cwd, recipe, true, allowDowngrade) : preview;
     if (options.json) {
         console.log(JSON.stringify({ ...plan, write }, null, 2));
     }
@@ -342,7 +440,7 @@ export async function runUpgrade(cwd, options) {
         const ok = await runCheck(cwd, { json: false });
         if (!ok) {
             if (!options.json)
-                console.error("\n[nifra] upgrade applied but `nifra check` failed — review above.");
+                console.error("\n[nifra] upgrade applied but `nifra check` failed - review above.");
             return false;
         }
     }