@planu/cli 0.15.2

package/dist/engine/dynamic-migration-detector/manifest-readers.js

@@ -0,0 +1,290 @@
+// Planu — Manifest file readers for each ecosystem (SPEC-054)
+// All file I/O via node:fs/promises — no live API calls.
+import { readFile } from 'node:fs/promises';
+/** Extract major version from a semver-like string (e.g. "^18.2.0" → 18). */
+export function extractMajor(versionStr) {
+    // Strip leading range operators and whitespace
+    const cleaned = versionStr.replace(/^[\^~>=<\s*]+/, '').trim();
+    const parts = cleaned.split('.');
+    const first = parts[0];
+    if (!first) {
+        return null;
+    }
+    const major = parseInt(first, 10);
+    return isNaN(major) ? null : major;
+}
+/** Read package.json and return name→installedMajor for all dependencies. */
+export async function readNpmManifest(projectPath) {
+    const result = new Map();
+    try {
+        const raw = await readFile(`${projectPath}/package.json`, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed === null || typeof parsed !== 'object') {
+            return result;
+        }
+        const pkg = parsed;
+        const depGroups = [pkg.dependencies, pkg.devDependencies, pkg.peerDependencies];
+        for (const group of depGroups) {
+            if (group === null || typeof group !== 'object') {
+                continue;
+            }
+            for (const [name, version] of Object.entries(group)) {
+                if (typeof version !== 'string') {
+                    continue;
+                }
+                const major = extractMajor(version);
+                if (major !== null && !result.has(name)) {
+                    result.set(name, major);
+                }
+            }
+        }
+    }
+    catch {
+        // File missing or invalid — return empty map
+    }
+    return result;
+}
+/** Parse a TOML-like key=value block into a record. Handles [section] markers. */
+function parseTomlDependencies(content) {
+    const deps = {};
+    let inDeps = false;
+    for (const line of content.split('\n')) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('[')) {
+            inDeps = /\[(?:dependencies|dev-dependencies|build-dependencies)\]/i.test(trimmed);
+            continue;
+        }
+        if (!inDeps) {
+            continue;
+        }
+        const eqIdx = trimmed.indexOf('=');
+        if (eqIdx === -1) {
+            continue;
+        }
+        const name = trimmed.slice(0, eqIdx).trim();
+        const value = trimmed
+            .slice(eqIdx + 1)
+            .trim()
+            .replace(/['"{}]/g, '');
+        // Extract "version" key from inline table e.g. { version = "1.0", features = [...] }
+        const versionMatch = /version\s*=\s*["']?([^,}"'\s]+)/.exec(value);
+        /* v8 ignore next */
+        const finalVersion = versionMatch ? (versionMatch[1] ?? '') : value;
+        if (name && finalVersion) {
+            deps[name] = finalVersion;
+        }
+    }
+    return deps;
+}
+/** Read Cargo.toml and return name→installedMajor. */
+export async function readCargoManifest(projectPath) {
+    const result = new Map();
+    try {
+        const raw = await readFile(`${projectPath}/Cargo.toml`, 'utf-8');
+        const deps = parseTomlDependencies(raw);
+        for (const [name, version] of Object.entries(deps)) {
+            const major = extractMajor(version);
+            if (major !== null) {
+                result.set(name, major);
+            }
+        }
+    }
+    catch {
+        // File missing or invalid
+    }
+    return result;
+}
+/** Read go.mod and return module→installedMajor (only v2+ explicit majors). */
+export async function readGoManifest(projectPath) {
+    const result = new Map();
+    try {
+        const raw = await readFile(`${projectPath}/go.mod`, 'utf-8');
+        for (const line of raw.split('\n')) {
+            const trimmed = line.trim();
+            if (!trimmed.startsWith('require') && !/^\S+\s+v\d/.test(trimmed)) {
+                continue;
+            }
+            // Match lines like: github.com/gin-gonic/gin v1.9.0
+            const match = /(\S+)\s+v(\d+)\./.exec(trimmed);
+            if (match) {
+                /* v8 ignore start */
+                const moduleName = match[1] ?? '';
+                const majorStr = match[2] ?? '0';
+                /* v8 ignore stop */
+                const major = parseInt(majorStr, 10);
+                /* v8 ignore next 3 */
+                if (moduleName && !isNaN(major)) {
+                    result.set(moduleName, major);
+                }
+            }
+        }
+    }
+    catch {
+        // File missing or invalid
+    }
+    return result;
+}
+/** Parse pyproject.toml dependency lines into name→version entries. */
+function parsePyprojectDeps(raw) {
+    const deps = {};
+    let inDeps = false;
+    for (const line of raw.split('\n')) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('[')) {
+            inDeps =
+                /\[(?:project\.dependencies|tool\.poetry\.dependencies|tool\.pdm\.dependencies)\]/i.test(trimmed);
+            continue;
+        }
+        if (!inDeps) {
+            continue;
+        }
+        // Handle "django = '>=4.2,<5'" and "django>=4.2"
+        const matchEq = /^([\w-]+)\s*=\s*["']([^"']+)["']/.exec(trimmed);
+        const matchInline = /^([\w-]+)\s*([><=!^~]+\s*[\d.]+)/.exec(trimmed);
+        /* v8 ignore start */
+        const [name, versionExpr] = matchEq
+            ? [matchEq[1] ?? '', matchEq[2] ?? '']
+            : matchInline
+                ? [matchInline[1] ?? '', matchInline[2] ?? '']
+                : ['', ''];
+        /* v8 ignore stop */
+        if (!name) {
+            continue;
+        }
+        deps[name.toLowerCase()] = versionExpr;
+    }
+    return deps;
+}
+/** Read pyproject.toml or requirements.txt and return package→installedMajor. */
+export async function readPypiManifest(projectPath) {
+    const result = new Map();
+    // Try pyproject.toml first
+    try {
+        const raw = await readFile(`${projectPath}/pyproject.toml`, 'utf-8');
+        const deps = parsePyprojectDeps(raw);
+        for (const [name, versionExpr] of Object.entries(deps)) {
+            const major = extractMajor(versionExpr);
+            if (major !== null && !result.has(name)) {
+                result.set(name, major);
+            }
+        }
+        if (result.size > 0) {
+            return result;
+        }
+    }
+    catch {
+        // File missing — fall through to requirements.txt
+    }
+    // Fall back to requirements.txt
+    try {
+        const raw = await readFile(`${projectPath}/requirements.txt`, 'utf-8');
+        for (const line of raw.split('\n')) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith('#')) {
+                continue;
+            }
+            // Match "django>=4.2.0" or "django==4.2.0"
+            const match = /^([\w-]+)\s*[><=!^~]+\s*([\d.]+)/.exec(trimmed);
+            if (match) {
+                /* v8 ignore start */
+                const name = match[1] ?? '';
+                const ver = match[2] ?? '';
+                /* v8 ignore stop */
+                const major = extractMajor(ver);
+                if (name && major !== null && !result.has(name.toLowerCase())) {
+                    result.set(name.toLowerCase(), major);
+                }
+            }
+        }
+    }
+    catch {
+        // Neither file exists
+    }
+    return result;
+}
+/** Read pom.xml / build.gradle and return artifactId→installedMajor. */
+export async function readMavenManifest(projectPath) {
+    const result = new Map();
+    // Try pom.xml
+    try {
+        const raw = await readFile(`${projectPath}/pom.xml`, 'utf-8');
+        // Extract <artifactId> + <version> pairs from <dependency> blocks
+        const depBlocks = raw.matchAll(/<dependency>([\s\S]*?)<\/dependency>/g);
+        for (const block of depBlocks) {
+            /* v8 ignore start */
+            const content = block[1] ?? '';
+            /* v8 ignore stop */
+            const artMatch = /<artifactId>([\w-]+)<\/artifactId>/.exec(content);
+            const verMatch = /<version>([\d.]+)/.exec(content);
+            if (artMatch && verMatch) {
+                /* v8 ignore start */
+                const name = artMatch[1] ?? '';
+                const ver = verMatch[1] ?? '';
+                /* v8 ignore stop */
+                const major = extractMajor(ver);
+                /* v8 ignore next 3 */
+                if (name && major !== null) {
+                    result.set(name, major);
+                }
+            }
+        }
+        if (result.size > 0) {
+            return result;
+        }
+    }
+    catch {
+        // Try build.gradle
+    }
+    // Try build.gradle
+    try {
+        const raw = await readFile(`${projectPath}/build.gradle`, 'utf-8');
+        // Match lines like: implementation 'org.springframework.boot:spring-boot-starter:3.0.0'
+        const matches = raw.matchAll(/['"]([\w.-]+):([\w.-]+):([\d.]+)['"]/g);
+        for (const match of matches) {
+            /* v8 ignore start */
+            const name = match[2] ?? '';
+            const ver = match[3] ?? '';
+            /* v8 ignore stop */
+            const major = extractMajor(ver);
+            if (name && major !== null && !result.has(name)) {
+                result.set(name, major);
+            }
+        }
+    }
+    catch {
+        // Neither file exists
+    }
+    return result;
+}
+/** Read composer.json and return package→installedMajor. */
+export async function readComposerManifest(projectPath) {
+    const result = new Map();
+    try {
+        const raw = await readFile(`${projectPath}/composer.json`, 'utf-8');
+        const parsed = JSON.parse(raw);
+        if (parsed === null || typeof parsed !== 'object') {
+            return result;
+        }
+        const pkg = parsed;
+        const depGroups = [pkg.require, pkg['require-dev']];
+        for (const group of depGroups) {
+            if (group === null || typeof group !== 'object') {
+                continue;
+            }
+            for (const [name, version] of Object.entries(group)) {
+                if (typeof version !== 'string' || name === 'php') {
+                    continue;
+                }
+                const major = extractMajor(version);
+                if (major !== null && !result.has(name)) {
+                    result.set(name, major);
+                }
+            }
+        }
+    }
+    catch {
+        // File missing or invalid
+    }
+    return result;
+}
+//# sourceMappingURL=manifest-readers.js.map

package/dist/engine/dynamic-migration-detector/manifest-readers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-readers.js","sourceRoot":"","sources":["../../../src/engine/dynamic-migration-detector/manifest-readers.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,yDAAyD;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAK5C,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,+CAA+C;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB;IACvD,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,eAAe,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,SAAS,GAAc,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,eAAe,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC3F,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC/E,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAChC,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,SAAS,qBAAqB,CAAC,OAAe;IAC5C,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,2DAA2D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO;aAClB,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;aAChB,IAAI,EAAE;aACN,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1B,qFAAqF;QACrF,MAAM,YAAY,GAAG,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,oBAAoB;QACpB,MAAM,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACpE,IAAI,IAAI,IAAI,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,aAAa,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,oDAAoD;YACpD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACV,qBAAqB;gBACrB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;gBACjC,oBAAoB;gBACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACrC,sBAAsB;gBACtB,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM;gBACJ,mFAAmF,CAAC,IAAI,CACtF,OAAO,CACR,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,iDAAiD;QACjD,MAAM,OAAO,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrE,qBAAqB;QACrB,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,OAAO;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,CAAC,CAAC,WAAW;gBACX,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9C,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACf,oBAAoB;QACpB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACxD,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,2BAA2B;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,iBAAiB,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,gCAAgC;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,mBAAmB,EAAE,OAAO,CAAC,CAAC;QACvE,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxC,SAAS;YACX,CAAC;YACD,2CAA2C;YAC3C,MAAM,KAAK,GAAG,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/D,IAAI,KAAK,EAAE,CAAC;gBACV,qBAAqB;gBACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC3B,oBAAoB;gBACpB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC9D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,cAAc;IACd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9D,kEAAkE;QAClE,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;QACxE,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,qBAAqB;YACrB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC/B,oBAAoB;YACpB,MAAM,QAAQ,GAAG,oCAAoC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACzB,qBAAqB;gBACrB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,oBAAoB;gBACpB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;gBAChC,sBAAsB;gBACtB,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;oBAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,mBAAmB;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,eAAe,EAAE,OAAO,CAAC,CAAC;QACnE,wFAAwF;QACxF,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC;QACtE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,qBAAqB;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,oBAAoB;YACpB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sBAAsB;IACxB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,MAAM,GAAoB,IAAI,GAAG,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,WAAW,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,MAAiC,CAAC;QAC9C,MAAM,SAAS,GAAc,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAChD,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAC/E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;oBAClD,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBACpC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0BAA0B;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/engine/dynamic-migration-detector/plan-generator.d.ts

@@ -0,0 +1,4 @@
+import type { PendingMigration, DynamicMigrationPlan, MigrationPoliciesCatalog } from '../../types/index.js';
+/** Generate a full DynamicMigrationPlan for a PendingMigration. */
+export declare function generateMigrationPlan(migration: PendingMigration, catalog: MigrationPoliciesCatalog): DynamicMigrationPlan;
+//# sourceMappingURL=plan-generator.d.ts.map

package/dist/engine/dynamic-migration-detector/plan-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-generator.d.ts","sourceRoot":"","sources":["../../../src/engine/dynamic-migration-detector/plan-generator.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EAGzB,MAAM,sBAAsB,CAAC;AAiL9B,mEAAmE;AACnE,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,wBAAwB,GAChC,oBAAoB,CAOtB"}

package/dist/engine/dynamic-migration-detector/plan-generator.js

@@ -0,0 +1,168 @@
+/** Map risk → estimated effort. */
+function estimateEffort(migration) {
+    if (migration.risk === 'critical' || migration.risk === 'high') {
+        return 'days';
+    }
+    const gap = migration.latestMajor - migration.currentMajor;
+    if (gap >= 3) {
+        return 'weeks';
+    }
+    return 'hours';
+}
+/** Generic steps applicable to any ecosystem upgrade. */
+function baseSteps(migration) {
+    const { package: pkg, currentMajor, latestMajor } = migration;
+    return [
+        `Review ${pkg} v${String(latestMajor)} migration guide / changelog`,
+        `Create a dedicated branch: upgrade/${pkg}-v${String(latestMajor)}`,
+        `Update ${pkg} from v${String(currentMajor)} to v${String(latestMajor)} in the manifest`,
+        `Run the test suite — fix all failures before merging`,
+        `Update CI/CD pipelines if needed`,
+        `Perform smoke testing in a staging environment`,
+        `Merge and monitor for regressions`,
+    ];
+}
+/** npm-specific steps. */
+function npmSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Run \`npm audit\` after upgrading to check for new advisories`,
+        `Check for deprecated APIs using \`npx depcheck\``,
+    ];
+}
+/** pypi-specific steps. */
+function pypiSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update pyproject.toml / requirements.txt constraints`,
+        `Run \`pip-audit\` to verify no new security issues`,
+        `Check type stubs (py.typed) compatibility`,
+    ];
+}
+/** cargo-specific steps. */
+function cargoSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Run \`cargo update ${migration.package}\` to bump Cargo.lock`,
+        `Run \`cargo clippy\` and fix all new warnings`,
+        `Run \`cargo audit\` to check for advisories`,
+    ];
+}
+/** go-specific steps. */
+function goSteps(migration) {
+    const { package: pkg, latestMajor } = migration;
+    return [
+        ...baseSteps(migration),
+        `Update import paths to include /v${String(latestMajor)} suffix if required by the module`,
+        `Run \`go mod tidy\` after updating go.mod`,
+        `Run \`go vet ./...\` and fix all issues`,
+        `Verify compatibility with \`govulncheck\` for module: ${pkg}`,
+    ];
+}
+/** maven-specific steps. */
+function mavenSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update version in pom.xml / build.gradle`,
+        `Run \`mvn dependency:analyze\` to check for unused or missing deps`,
+        `Run \`./gradlew dependencyInsight\` for transitive conflicts`,
+    ];
+}
+/** composer-specific steps. */
+function composerSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Run \`composer update ${migration.package}\``,
+        `Run \`composer audit\` to check for security advisories`,
+        `Verify PHP version compatibility for the new major`,
+    ];
+}
+/** rubygems-specific steps. */
+function rubygemsSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update version constraint in Gemfile for ${migration.package}`,
+        `Run \`bundle update ${migration.package}\` to resolve dependencies`,
+        `Run \`bundle exec rubocop\` and fix new offenses`,
+        `Check for deprecation warnings in the test output`,
+    ];
+}
+/** nuget-specific steps. */
+function nugetSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update <PackageReference> Version in .csproj for ${migration.package}`,
+        `Run \`dotnet restore\` to fetch the new version`,
+        `Run \`dotnet build\` and fix compilation errors`,
+        `Run \`dotnet test\` — fix all broken tests before merging`,
+    ];
+}
+/** pub-specific steps (Dart/Flutter). */
+function pubSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update version constraint in pubspec.yaml for ${migration.package}`,
+        `Run \`flutter pub upgrade ${migration.package}\``,
+        `Run \`dart analyze\` and fix all warnings`,
+        `Run \`flutter test\` to verify no widget regressions`,
+    ];
+}
+/** swiftpm-specific steps. */
+function swiftpmSteps(migration) {
+    return [
+        ...baseSteps(migration),
+        `Update .package(url:, from:) or .upToNextMajor in Package.swift for ${migration.package}`,
+        `Run \`swift package update\` to resolve dependencies`,
+        `Run \`swift build\` and fix compilation errors`,
+        `Run \`swift test\` — fix all failing tests before merging`,
+    ];
+}
+/** Generate ecosystem-appropriate checklist steps. */
+function generateSteps(migration) {
+    const ecosystem = migration.ecosystem;
+    switch (ecosystem) {
+        case 'npm':
+            return npmSteps(migration);
+        case 'pypi':
+            return pypiSteps(migration);
+        case 'cargo':
+            return cargoSteps(migration);
+        case 'go':
+            return goSteps(migration);
+        case 'maven':
+            return mavenSteps(migration);
+        case 'composer':
+            return composerSteps(migration);
+        case 'rubygems':
+            return rubygemsSteps(migration);
+        case 'nuget':
+            return nugetSteps(migration);
+        case 'pub':
+            return pubSteps(migration);
+        case 'swiftpm':
+            return swiftpmSteps(migration);
+    }
+}
+/** Find direct dependents in catalog that reference the same package. */
+function findTransitiveDependents(catalog, migration) {
+    // Scan all customPolicies for entries that depend on the same package
+    const dependents = [];
+    for (const policy of catalog.customPolicies) {
+        if (policy.package !== migration.package && policy.ecosystem === migration.ecosystem) {
+            // In a real implementation this would parse lock files; for now surface custom policy packages
+            // that are in the same ecosystem as potential peers requiring attention.
+            dependents.push(`${policy.ecosystem}/${policy.package}`);
+        }
+    }
+    return dependents;
+}
+/** Generate a full DynamicMigrationPlan for a PendingMigration. */
+export function generateMigrationPlan(migration, catalog) {
+    return {
+        migration,
+        steps: generateSteps(migration),
+        transitiveDependents: findTransitiveDependents(catalog, migration),
+        estimatedEffort: estimateEffort(migration),
+    };
+}
+//# sourceMappingURL=plan-generator.js.map

package/dist/engine/dynamic-migration-detector/plan-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-generator.js","sourceRoot":"","sources":["../../../src/engine/dynamic-migration-detector/plan-generator.ts"],"names":[],"mappings":"AAUA,mCAAmC;AACnC,SAAS,cAAc,CAAC,SAA2B;IACjD,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC;IAC3D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,yDAAyD;AACzD,SAAS,SAAS,CAAC,SAA2B;IAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAC9D,OAAO;QACL,UAAU,GAAG,KAAK,MAAM,CAAC,WAAW,CAAC,8BAA8B;QACnE,sCAAsC,GAAG,KAAK,MAAM,CAAC,WAAW,CAAC,EAAE;QACnE,UAAU,GAAG,UAAU,MAAM,CAAC,YAAY,CAAC,QAAQ,MAAM,CAAC,WAAW,CAAC,kBAAkB;QACxF,sDAAsD;QACtD,kCAAkC;QAClC,gDAAgD;QAChD,mCAAmC;KACpC,CAAC;AACJ,CAAC;AAED,0BAA0B;AAC1B,SAAS,QAAQ,CAAC,SAA2B;IAC3C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,+DAA+D;QAC/D,kDAAkD;KACnD,CAAC;AACJ,CAAC;AAED,2BAA2B;AAC3B,SAAS,SAAS,CAAC,SAA2B;IAC5C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,sDAAsD;QACtD,oDAAoD;QACpD,2CAA2C;KAC5C,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,SAAS,UAAU,CAAC,SAA2B;IAC7C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,sBAAsB,SAAS,CAAC,OAAO,uBAAuB;QAC9D,+CAA+C;QAC/C,6CAA6C;KAC9C,CAAC;AACJ,CAAC;AAED,yBAAyB;AACzB,SAAS,OAAO,CAAC,SAA2B;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAChD,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,oCAAoC,MAAM,CAAC,WAAW,CAAC,mCAAmC;QAC1F,2CAA2C;QAC3C,yCAAyC;QACzC,yDAAyD,GAAG,EAAE;KAC/D,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,SAAS,UAAU,CAAC,SAA2B;IAC7C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,0CAA0C;QAC1C,oEAAoE;QACpE,8DAA8D;KAC/D,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,SAAS,aAAa,CAAC,SAA2B;IAChD,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,yBAAyB,SAAS,CAAC,OAAO,IAAI;QAC9C,yDAAyD;QACzD,oDAAoD;KACrD,CAAC;AACJ,CAAC;AAED,+BAA+B;AAC/B,SAAS,aAAa,CAAC,SAA2B;IAChD,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,4CAA4C,SAAS,CAAC,OAAO,EAAE;QAC/D,uBAAuB,SAAS,CAAC,OAAO,4BAA4B;QACpE,kDAAkD;QAClD,mDAAmD;KACpD,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,SAAS,UAAU,CAAC,SAA2B;IAC7C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,oDAAoD,SAAS,CAAC,OAAO,EAAE;QACvE,iDAAiD;QACjD,iDAAiD;QACjD,2DAA2D;KAC5D,CAAC;AACJ,CAAC;AAED,yCAAyC;AACzC,SAAS,QAAQ,CAAC,SAA2B;IAC3C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,iDAAiD,SAAS,CAAC,OAAO,EAAE;QACpE,6BAA6B,SAAS,CAAC,OAAO,IAAI;QAClD,2CAA2C;QAC3C,sDAAsD;KACvD,CAAC;AACJ,CAAC;AAED,8BAA8B;AAC9B,SAAS,YAAY,CAAC,SAA2B;IAC/C,OAAO;QACL,GAAG,SAAS,CAAC,SAAS,CAAC;QACvB,uEAAuE,SAAS,CAAC,OAAO,EAAE;QAC1F,sDAAsD;QACtD,gDAAgD;QAChD,2DAA2D;KAC5D,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,aAAa,CAAC,SAA2B;IAChD,MAAM,SAAS,GAAuB,SAAS,CAAC,SAAS,CAAC;IAC1D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;QAC9B,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,IAAI;YACP,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5B,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,UAAU;YACb,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,UAAU;YACb,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;QAClC,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,KAAK;YACR,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,KAAK,SAAS;YACZ,OAAO,YAAY,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,wBAAwB,CAC/B,OAAiC,EACjC,SAA2B;IAE3B,sEAAsE;IACtE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,EAAE,CAAC;YACrF,+FAA+F;YAC/F,yEAAyE;YACzE,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CACnC,SAA2B,EAC3B,OAAiC;IAEjC,OAAO;QACL,SAAS;QACT,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC;QAC/B,oBAAoB,EAAE,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC;QAClE,eAAe,EAAE,cAAc,CAAC,SAAS,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/engine/dynamic-migration-detector/risk-assessor.d.ts

@@ -0,0 +1,8 @@
+import type { DynamicMigrationRisk, DynamicMigrationWindow, MigrationEcosystem, MigrationPoliciesCatalog } from '../../types/index.js';
+/** Assess risk for a pending migration. Returns risk, reason, and migration window. */
+export declare function assessMigrationRisk(catalog: MigrationPoliciesCatalog, ecosystem: MigrationEcosystem, pkg: string, currentMajor: number, latestMajor: number, now?: Date): {
+    risk: DynamicMigrationRisk;
+    reason: string;
+    migrationWindow: DynamicMigrationWindow;
+};
+//# sourceMappingURL=risk-assessor.d.ts.map

package/dist/engine/dynamic-migration-detector/risk-assessor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-assessor.d.ts","sourceRoot":"","sources":["../../../src/engine/dynamic-migration-detector/risk-assessor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,sBAAsB,CAAC;AA2D9B,uFAAuF;AACvF,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,wBAAwB,EACjC,SAAS,EAAE,kBAAkB,EAC7B,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,GAAG,GAAE,IAAiB,GACrB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,sBAAsB,CAAA;CAAE,CAuDzF"}

package/dist/engine/dynamic-migration-detector/risk-assessor.js

@@ -0,0 +1,91 @@
+/** Number of milliseconds in one month (approximate). */
+const MS_PER_MONTH = 30 * 24 * 60 * 60 * 1000;
+/** Check if a package major is EOL per catalog. */
+function isEol(catalog, ecosystem, pkg, major) {
+    const ecoEntry = catalog.ecosystems[ecosystem];
+    if (!ecoEntry?.eolPackages) {
+        return false;
+    }
+    return ecoEntry.eolPackages.some((e) => e.name === pkg && e.major === major);
+}
+/** Check if a package has known security CVEs in catalog. */
+function hasSecurityRisk(catalog, ecosystem, pkg) {
+    const ecoEntry = catalog.ecosystems[ecosystem];
+    if (!ecoEntry?.securityRiskPackages) {
+        return false;
+    }
+    return ecoEntry.securityRiskPackages.includes(pkg);
+}
+/** Determine how many months ago a stable release date occurred. Returns null if no date given. */
+function monthsAgo(isoDate, now) {
+    if (!isoDate) {
+        return null;
+    }
+    const releaseDate = new Date(isoDate);
+    if (isNaN(releaseDate.getTime())) {
+        return null;
+    }
+    return (now.getTime() - releaseDate.getTime()) / MS_PER_MONTH;
+}
+/** Get the EOL date string for a specific package major, if present. */
+function getEolDate(catalog, ecosystem, pkg, major) {
+    const ecoEntry = catalog.ecosystems[ecosystem];
+    if (!ecoEntry?.eolPackages) {
+        return undefined;
+    }
+    const found = ecoEntry.eolPackages.find((e) => e.name === pkg && e.major === major);
+    return found?.eolDate;
+}
+/** Assess risk for a pending migration. Returns risk, reason, and migration window. */
+export function assessMigrationRisk(catalog, ecosystem, pkg, currentMajor, latestMajor, now = new Date()) {
+    const thresholds = catalog.riskThresholds;
+    // C6: security risk → critical
+    if (hasSecurityRisk(catalog, ecosystem, pkg)) {
+        return {
+            risk: 'critical',
+            reason: `${pkg} v${String(currentMajor)} has known security CVEs — upgrade to v${String(latestMajor)} immediately`,
+            migrationWindow: 'immediate',
+        };
+    }
+    // C7: current major is EOL → high
+    if (isEol(catalog, ecosystem, pkg, currentMajor)) {
+        const eolDate = getEolDate(catalog, ecosystem, pkg, currentMajor);
+        const dateLabel = eolDate ? ` (EOL since ${eolDate})` : '';
+        return {
+            risk: 'high',
+            reason: `${pkg} v${String(currentMajor)} is end-of-life${dateLabel} — no security patches`,
+            migrationWindow: 'next-sprint',
+        };
+    }
+    // C8/C9: use latest-major EOL date as proxy for stable release date
+    // We use the EOL date of (latestMajor-1) as the rough release window for latestMajor
+    // If no date info, default to medium
+    const prevMajorEolDate = getEolDate(catalog, ecosystem, pkg, latestMajor - 1);
+    const age = monthsAgo(prevMajorEolDate, now);
+    if (age !== null) {
+        // C9: latest major released <3 months ago → low (wait-and-see)
+        if (age < thresholds.newReleaseMonthsForLow) {
+            return {
+                risk: 'low',
+                reason: `${pkg} v${String(latestMajor)} was released recently — wait for ecosystem to stabilise`,
+                migrationWindow: 'backlog',
+            };
+        }
+        // C8: latest major has been stable >6 months → medium
+        if (age >= thresholds.stableMonthsForMedium) {
+            return {
+                risk: 'medium',
+                reason: `${pkg} v${String(latestMajor)} has been stable for ${Math.floor(age)} months — plan upgrade`,
+                migrationWindow: 'backlog',
+            };
+        }
+    }
+    // Default: medium when version gap exists but no date metadata
+    const gap = latestMajor - currentMajor;
+    return {
+        risk: 'medium',
+        reason: `${pkg} is ${String(gap)} major version(s) behind (v${String(currentMajor)} → v${String(latestMajor)})`,
+        migrationWindow: 'backlog',
+    };
+}
+//# sourceMappingURL=risk-assessor.js.map

package/dist/engine/dynamic-migration-detector/risk-assessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-assessor.js","sourceRoot":"","sources":["../../../src/engine/dynamic-migration-detector/risk-assessor.ts"],"names":[],"mappings":"AASA,yDAAyD;AACzD,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C,mDAAmD;AACnD,SAAS,KAAK,CACZ,OAAiC,EACjC,SAA6B,EAC7B,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,SAAmB,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,6DAA6D;AAC7D,SAAS,eAAe,CACtB,OAAiC,EACjC,SAA6B,EAC7B,GAAW;IAEX,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,SAAmB,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,oBAAoB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS,CAAC,OAA2B,EAAE,GAAS;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,YAAY,CAAC;AAChE,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CACjB,OAAiC,EACjC,SAA6B,EAC7B,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,SAAmB,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACpF,OAAO,KAAK,EAAE,OAAO,CAAC;AACxB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CACjC,OAAiC,EACjC,SAA6B,EAC7B,GAAW,EACX,YAAoB,EACpB,WAAmB,EACnB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC;IAE1C,+BAA+B;IAC/B,IAAI,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,YAAY,CAAC,0CAA0C,MAAM,CAAC,WAAW,CAAC,cAAc;YAClH,eAAe,EAAE,WAAW;SAC7B,CAAC;IACJ,CAAC;IAED,kCAAkC;IAClC,IAAI,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,YAAY,CAAC,kBAAkB,SAAS,wBAAwB;YAC1F,eAAe,EAAE,aAAa;SAC/B,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,qFAAqF;IACrF,qCAAqC;IACrC,MAAM,gBAAgB,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAG,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAE7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,+DAA+D;QAC/D,IAAI,GAAG,GAAG,UAAU,CAAC,sBAAsB,EAAE,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,WAAW,CAAC,0DAA0D;gBAChG,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;QACD,sDAAsD;QACtD,IAAI,GAAG,IAAI,UAAU,CAAC,qBAAqB,EAAE,CAAC;YAC5C,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,GAAG,GAAG,KAAK,MAAM,CAAC,WAAW,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB;gBACrG,eAAe,EAAE,SAAS;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,GAAG,GAAG,WAAW,GAAG,YAAY,CAAC;IACvC,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,GAAG,GAAG,OAAO,MAAM,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,YAAY,CAAC,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG;QAC/G,eAAe,EAAE,SAAS;KAC3B,CAAC;AACJ,CAAC"}

package/dist/engine/dynamic-migration-detector.d.ts

@@ -0,0 +1,9 @@
+import type { PendingMigration, DynamicMigrationPlan, DynamicMigrationResult } from '../types/index.js';
+export type { PendingMigration, DynamicMigrationPlan, DynamicMigrationResult };
+export { generateMigrationPlan } from './dynamic-migration-detector/plan-generator.js';
+/**
+ * Detect all pending major version migrations across all supported ecosystems.
+ * Uses the bundled migration-policies-catalog.json — no live API calls.
+ */
+export declare function detectPendingMajorMigrations(projectPath: string): Promise<DynamicMigrationResult>;
+//# sourceMappingURL=dynamic-migration-detector.d.ts.map

package/dist/engine/dynamic-migration-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-migration-detector.d.ts","sourceRoot":"","sources":["../../src/engine/dynamic-migration-detector.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,sBAAsB,EAGvB,MAAM,mBAAmB,CAAC;AAuB3B,YAAY,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,CAAC;AAG/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AAmFvF;;;GAGG;AACH,wBAAsB,4BAA4B,CAChD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAgCjC"}