@rainy-updates/cli 0.5.2-rc.2 → 0.5.3

package/dist/commands/doctor/parser.js

@@ -0,0 +1,92 @@
+import path from "node:path";
+import process from "node:process";
+export function parseDoctorArgs(args) {
+    const options = {
+        cwd: process.cwd(),
+        target: "latest",
+        filter: undefined,
+        reject: undefined,
+        cacheTtlSeconds: 3600,
+        includeKinds: ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"],
+        ci: false,
+        format: "table",
+        workspace: false,
+        jsonFile: undefined,
+        githubOutputFile: undefined,
+        sarifFile: undefined,
+        concurrency: 16,
+        registryTimeoutMs: 8000,
+        registryRetries: 3,
+        offline: false,
+        stream: false,
+        policyFile: undefined,
+        prReportFile: undefined,
+        failOn: "none",
+        maxUpdates: undefined,
+        fixPr: false,
+        fixBranch: "chore/rainy-updates",
+        fixCommitMessage: undefined,
+        fixDryRun: false,
+        fixPrNoCheckout: false,
+        fixPrBatchSize: undefined,
+        noPrReport: false,
+        logLevel: "info",
+        groupBy: "risk",
+        groupMax: undefined,
+        cooldownDays: undefined,
+        prLimit: undefined,
+        onlyChanged: false,
+        ciProfile: "minimal",
+        lockfileMode: "preserve",
+        interactive: false,
+        showImpact: true,
+        showHomepage: true,
+        verdictOnly: false,
+    };
+    for (let i = 0; i < args.length; i += 1) {
+        const current = args[i];
+        const next = args[i + 1];
+        if (current === "--cwd" && next) {
+            options.cwd = path.resolve(next);
+            i += 1;
+            continue;
+        }
+        if (current === "--cwd")
+            throw new Error("Missing value for --cwd");
+        if (current === "--workspace") {
+            options.workspace = true;
+            continue;
+        }
+        if (current === "--verdict-only") {
+            options.verdictOnly = true;
+            continue;
+        }
+        if (current === "--json-file" && next) {
+            options.jsonFile = path.resolve(options.cwd, next);
+            i += 1;
+            continue;
+        }
+        if (current === "--json-file")
+            throw new Error("Missing value for --json-file");
+        if (current === "--help" || current === "-h") {
+            process.stdout.write(DOCTOR_HELP);
+            process.exit(0);
+        }
+        if (current.startsWith("-"))
+            throw new Error(`Unknown doctor option: ${current}`);
+        throw new Error(`Unexpected doctor argument: ${current}`);
+    }
+    return options;
+}
+const DOCTOR_HELP = `
+rup doctor — Fast dependency verdict across updates, security, policy, and peer conflicts
+
+Usage:
+  rup doctor [options]
+
+Options:
+  --verdict-only         Print the 3-line quick verdict without counts
+  --workspace            Scan all workspace packages
+  --json-file <path>     Write JSON doctor report to file
+  --cwd <path>
+`.trimStart();

package/dist/commands/doctor/runner.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorOptions, DoctorResult } from "../../types/index.js";
+export declare function runDoctor(options: DoctorOptions): Promise<DoctorResult>;

package/dist/commands/doctor/runner.js

@@ -0,0 +1,13 @@
+import process from "node:process";
+import { buildReviewResult, createDoctorResult, renderDoctorResult } from "../../core/review-model.js";
+import { stableStringify } from "../../utils/stable-json.js";
+import { writeFileAtomic } from "../../utils/io.js";
+export async function runDoctor(options) {
+    const review = await buildReviewResult(options);
+    const doctor = createDoctorResult(review);
+    process.stdout.write(renderDoctorResult(doctor, options.verdictOnly) + "\n");
+    if (options.jsonFile) {
+        await writeFileAtomic(options.jsonFile, stableStringify(doctor, 2) + "\n");
+    }
+    return doctor;
+}

package/dist/commands/resolve/runner.js

@@ -93,6 +93,9 @@ async function fetchProposedVersions(options) {
             onlyChanged: false,
             ciProfile: "minimal",
             lockfileMode: "preserve",
+            interactive: false,
+            showImpact: false,
+            showHomepage: false,
         });
         for (const update of checkResult.updates ?? []) {
             overrides.set(update.name, update.toVersionResolved);

package/dist/commands/review/parser.d.ts

@@ -0,0 +1,2 @@
+import type { ReviewOptions } from "../../types/index.js";
+export declare function parseReviewArgs(args: string[]): ReviewOptions;

package/dist/commands/review/parser.js

@@ -0,0 +1,174 @@
+import path from "node:path";
+import process from "node:process";
+import { ensureRiskLevel } from "../../core/options.js";
+export function parseReviewArgs(args) {
+    const options = {
+        cwd: process.cwd(),
+        target: "latest",
+        filter: undefined,
+        reject: undefined,
+        cacheTtlSeconds: 3600,
+        includeKinds: ["dependencies", "devDependencies", "optionalDependencies", "peerDependencies"],
+        ci: false,
+        format: "table",
+        workspace: false,
+        jsonFile: undefined,
+        githubOutputFile: undefined,
+        sarifFile: undefined,
+        concurrency: 16,
+        registryTimeoutMs: 8000,
+        registryRetries: 3,
+        offline: false,
+        stream: false,
+        policyFile: undefined,
+        prReportFile: undefined,
+        failOn: "none",
+        maxUpdates: undefined,
+        fixPr: false,
+        fixBranch: "chore/rainy-updates",
+        fixCommitMessage: undefined,
+        fixDryRun: false,
+        fixPrNoCheckout: false,
+        fixPrBatchSize: undefined,
+        noPrReport: false,
+        logLevel: "info",
+        groupBy: "risk",
+        groupMax: undefined,
+        cooldownDays: undefined,
+        prLimit: undefined,
+        onlyChanged: false,
+        ciProfile: "minimal",
+        lockfileMode: "preserve",
+        interactive: false,
+        showImpact: true,
+        showHomepage: true,
+        securityOnly: false,
+        risk: undefined,
+        diff: undefined,
+        applySelected: false,
+    };
+    for (let i = 0; i < args.length; i += 1) {
+        const current = args[i];
+        const next = args[i + 1];
+        if (current === "--cwd" && next) {
+            options.cwd = path.resolve(next);
+            i += 1;
+            continue;
+        }
+        if (current === "--cwd")
+            throw new Error("Missing value for --cwd");
+        if (current === "--workspace") {
+            options.workspace = true;
+            continue;
+        }
+        if (current === "--interactive") {
+            options.interactive = true;
+            continue;
+        }
+        if (current === "--security-only") {
+            options.securityOnly = true;
+            continue;
+        }
+        if (current === "--risk" && next) {
+            options.risk = ensureRiskLevel(next);
+            i += 1;
+            continue;
+        }
+        if (current === "--risk")
+            throw new Error("Missing value for --risk");
+        if (current === "--diff" && next) {
+            if (next === "patch" ||
+                next === "minor" ||
+                next === "major" ||
+                next === "latest") {
+                options.diff = next;
+                i += 1;
+                continue;
+            }
+            throw new Error("--diff must be patch, minor, major or latest");
+        }
+        if (current === "--diff")
+            throw new Error("Missing value for --diff");
+        if (current === "--apply-selected") {
+            options.applySelected = true;
+            continue;
+        }
+        if (current === "--json-file" && next) {
+            options.jsonFile = path.resolve(options.cwd, next);
+            i += 1;
+            continue;
+        }
+        if (current === "--json-file")
+            throw new Error("Missing value for --json-file");
+        if (current === "--policy-file" && next) {
+            options.policyFile = path.resolve(options.cwd, next);
+            i += 1;
+            continue;
+        }
+        if (current === "--policy-file")
+            throw new Error("Missing value for --policy-file");
+        if (current === "--concurrency" && next) {
+            const parsed = Number(next);
+            if (!Number.isInteger(parsed) || parsed <= 0) {
+                throw new Error("--concurrency must be a positive integer");
+            }
+            options.concurrency = parsed;
+            i += 1;
+            continue;
+        }
+        if (current === "--concurrency")
+            throw new Error("Missing value for --concurrency");
+        if (current === "--registry-timeout-ms" && next) {
+            const parsed = Number(next);
+            if (!Number.isInteger(parsed) || parsed <= 0) {
+                throw new Error("--registry-timeout-ms must be a positive integer");
+            }
+            options.registryTimeoutMs = parsed;
+            i += 1;
+            continue;
+        }
+        if (current === "--registry-timeout-ms") {
+            throw new Error("Missing value for --registry-timeout-ms");
+        }
+        if (current === "--registry-retries" && next) {
+            const parsed = Number(next);
+            if (!Number.isInteger(parsed) || parsed <= 0) {
+                throw new Error("--registry-retries must be a positive integer");
+            }
+            options.registryRetries = parsed;
+            i += 1;
+            continue;
+        }
+        if (current === "--registry-retries") {
+            throw new Error("Missing value for --registry-retries");
+        }
+        if (current === "--help" || current === "-h") {
+            process.stdout.write(REVIEW_HELP);
+            process.exit(0);
+        }
+        if (current.startsWith("-"))
+            throw new Error(`Unknown review option: ${current}`);
+        throw new Error(`Unexpected review argument: ${current}`);
+    }
+    return options;
+}
+const REVIEW_HELP = `
+rup review — Guided dependency review across updates, security, peer conflicts, and policy
+
+Usage:
+  rup review [options]
+
+Options:
+  --interactive           Launch the interactive review TUI
+  --security-only         Show only packages with advisories
+  --risk <level>          Minimum risk: critical, high, medium, low
+  --diff <level>          Filter by patch, minor, major, latest
+  --apply-selected        Apply all filtered updates after review
+  --workspace             Scan all workspace packages
+  --policy-file <path>    Load policy overrides
+  --json-file <path>      Write JSON review report to file
+  --registry-timeout-ms <n>
+  --registry-retries <n>
+  --concurrency <n>
+  --cwd <path>
+`.trimStart();

package/dist/commands/review/runner.d.ts

@@ -0,0 +1,2 @@
+import type { ReviewOptions, ReviewResult } from "../../types/index.js";
+export declare function runReview(options: ReviewOptions): Promise<ReviewResult>;

package/dist/commands/review/runner.js

@@ -0,0 +1,30 @@
+import process from "node:process";
+import { runTui } from "../../ui/tui.js";
+import { buildReviewResult, renderReviewResult } from "../../core/review-model.js";
+import { applySelectedUpdates } from "../../core/upgrade.js";
+import { stableStringify } from "../../utils/stable-json.js";
+import { writeFileAtomic } from "../../utils/io.js";
+export async function runReview(options) {
+    const review = await buildReviewResult(options);
+    let selectedUpdates = review.updates;
+    if (options.interactive && review.updates.length > 0) {
+        selectedUpdates = await runTui(review.updates);
+    }
+    if (options.applySelected && selectedUpdates.length > 0) {
+        await applySelectedUpdates({
+            ...options,
+            install: false,
+            packageManager: "auto",
+            sync: false,
+        }, selectedUpdates);
+    }
+    process.stdout.write(renderReviewResult({
+        ...review,
+        updates: selectedUpdates,
+        items: review.items.filter((item) => selectedUpdates.some((selected) => selected.name === item.update.name && selected.packagePath === item.update.packagePath)),
+    }) + "\n");
+    if (options.jsonFile) {
+        await writeFileAtomic(options.jsonFile, stableStringify(review, 2) + "\n");
+    }
+    return review;
+}

package/dist/config/loader.d.ts

@@ -35,6 +35,9 @@ export interface FileConfig {
     onlyChanged?: boolean;
     ciProfile?: CiProfile;
     lockfileMode?: LockfileMode;
+    interactive?: boolean;
+    showImpact?: boolean;
+    showHomepage?: boolean;
     install?: boolean;
     packageManager?: "auto" | "npm" | "pnpm";
     sync?: boolean;

package/dist/core/check.js

@@ -9,6 +9,8 @@ import { detectPackageManager } from "../pm/detect.js";
 import { discoverPackageDirs } from "../workspace/discover.js";
 import { loadPolicy, resolvePolicyRule } from "../config/policy.js";
 import { createSummary, finalizeSummary } from "./summary.js";
+import { applyImpactScores } from "./impact.js";
+import { formatClassifiedMessage } from "./errors.js";
 export async function check(options) {
     const startedAt = Date.now();
     let discoveryMs = 0;
@@ -28,7 +30,13 @@ export async function check(options) {
     const errors = [];
     const warnings = [];
     if (cache.degraded) {
-        warnings.push("SQLite cache backend unavailable in Bun runtime. Falling back to file cache backend.");
+        warnings.push(formatClassifiedMessage({
+            code: "CACHE_BACKEND_FALLBACK",
+            whatFailed: cache.fallbackReason ?? "Preferred SQLite cache backend is unavailable.",
+            intact: "Dependency analysis continues with the file cache backend.",
+            validity: "partial",
+            next: "Run `rup warm-cache` after restoring SQLite support if you want the preferred backend again.",
+        }));
     }
     let totalDependencies = 0;
     const tasks = [];
@@ -85,6 +93,8 @@ export async function check(options) {
                 latestVersion: cached.latestVersion,
                 availableVersions: cached.availableVersions,
                 publishedAtByVersion: {},
+                installScriptByVersion: {},
+                maintainerCount: null,
             });
         }
         else {
@@ -102,11 +112,19 @@ export async function check(options) {
                         latestVersion: stale.latestVersion,
                         availableVersions: stale.availableVersions,
                         publishedAtByVersion: {},
+                        installScriptByVersion: {},
+                        maintainerCount: null,
                     });
                     warnings.push(`Using stale cache for ${packageName} because --offline is enabled.`);
                 }
                 else {
-                    errors.push(`Offline cache miss for ${packageName}. Run once without --offline to warm cache.`);
+                    errors.push(formatClassifiedMessage({
+                        code: "REGISTRY_ERROR",
+                        whatFailed: `Offline cache miss for ${packageName}.`,
+                        intact: "Local manifests and previously cached packages remain unchanged.",
+                        validity: "invalid",
+                        next: `Run \`rup warm-cache --cwd ${options.cwd}\` or retry without --offline.`,
+                    }));
                 }
             }
             cacheMs += Date.now() - cacheFallbackStartedAt;
@@ -125,6 +143,10 @@ export async function check(options) {
                     latestVersion: metadata.latestVersion,
                     availableVersions: metadata.versions,
                     publishedAtByVersion: metadata.publishedAtByVersion,
+                    homepage: metadata.homepage,
+                    repository: metadata.repository,
+                    installScriptByVersion: metadata.installScriptByVersion,
+                    maintainerCount: metadata.maintainerCount,
                 });
                 if (metadata.latestVersion) {
                     await cache.set(packageName, options.target, metadata.latestVersion, metadata.versions, options.cacheTtlSeconds);
@@ -139,12 +161,25 @@ export async function check(options) {
                         latestVersion: stale.latestVersion,
                         availableVersions: stale.availableVersions,
                         publishedAtByVersion: {},
+                        installScriptByVersion: {},
+                        maintainerCount: null,
                     });
                     warnings.push(`Using stale cache for ${packageName} due to registry error: ${error}`);
                 }
                 else {
-                    errors.push(`Unable to resolve ${packageName}: ${error}`);
-                    emitStream(`[error] Unable to resolve ${packageName}: ${error}`);
+                    const classified = formatClassifiedMessage({
+                        code: error.includes("401") || error.includes("403")
+                            ? "AUTH_ERROR"
+                            : "REGISTRY_ERROR",
+                        whatFailed: `Unable to resolve ${packageName}: ${error}.`,
+                        intact: "Other package results and local files remain intact.",
+                        validity: "partial",
+                        next: error.includes("401") || error.includes("403")
+                            ? "Check .npmrc scoped registry credentials and retry."
+                            : "Retry `rup check` or warm the cache before offline runs.",
+                    });
+                    errors.push(classified);
+                    emitStream(`[error] ${classified}`);
                 }
             }
             cacheMs += Date.now() - cacheStaleStartedAt;
@@ -182,10 +217,23 @@ export async function check(options) {
             filtered: false,
             autofix: rule?.autofix !== false,
             reason: rule?.maxTarget ? `policy maxTarget=${rule.maxTarget}` : undefined,
+            homepage: metadata.homepage,
+            repository: metadata.repository,
+            publishedAt: metadata.publishedAtByVersion[picked]
+                ? new Date(metadata.publishedAtByVersion[picked]).toISOString()
+                : undefined,
+            publishAgeDays: metadata.publishedAtByVersion[picked]
+                ? Math.max(0, Math.floor((Date.now() - metadata.publishedAtByVersion[picked]) /
+                    (1000 * 60 * 60 * 24)))
+                : null,
+            hasInstallScript: metadata.installScriptByVersion[picked] ?? false,
+            maintainerCount: metadata.maintainerCount,
+            maintainerChurn: deriveMaintainerChurn(metadata.maintainerCount, metadata.publishedAtByVersion[picked]),
         });
         emitStream(`[update] ${task.dependency.name} ${task.dependency.range} -> ${nextRange} (${classifyDiff(task.dependency.range, picked)})`);
     }
-    const grouped = groupUpdates(updates, options.groupBy);
+    const scoredUpdates = applyImpactScores(updates);
+    const grouped = groupUpdates(scoredUpdates, options.groupBy);
     const groupedUpdates = grouped.length;
     const groupedSorted = sortUpdates(grouped.flatMap((group) => group.items));
     const groupedCapped = typeof options.groupMax === "number" ? groupedSorted.slice(0, options.groupMax) : groupedSorted;
@@ -219,6 +267,7 @@ export async function check(options) {
         policyOverridesApplied,
     }));
     summary.streamedEvents = streamedEvents;
+    summary.riskPackages = limitedUpdates.filter((item) => item.impactScore?.rank === "critical" || item.impactScore?.rank === "high").length;
     return {
         projectPath: options.cwd,
         packagePaths: packageDirs,
@@ -231,6 +280,16 @@ export async function check(options) {
         warnings: sortedWarnings,
     };
 }
+function deriveMaintainerChurn(maintainerCount, publishedAt) {
+    if (maintainerCount === null || publishedAt === undefined) {
+        return "unknown";
+    }
+    const ageDays = Math.max(0, Math.floor((Date.now() - publishedAt) / (1000 * 60 * 60 * 24)));
+    if (maintainerCount <= 1 && ageDays <= 30) {
+        return "elevated-change";
+    }
+    return "stable";
+}
 function groupUpdates(updates, groupBy) {
     if (updates.length === 0) {
         return [];

package/dist/core/errors.d.ts

@@ -0,0 +1,11 @@
+export type ErrorCode = "REGISTRY_ERROR" | "AUTH_ERROR" | "ADVISORY_SOURCE_DEGRADED" | "ADVISORY_SOURCE_DOWN" | "CACHE_BACKEND_FALLBACK";
+export type ErrorValidity = "partial" | "invalid" | "intact";
+export interface ClassifiedMessageInput {
+    code: ErrorCode;
+    whatFailed: string;
+    intact: string;
+    validity: ErrorValidity;
+    next: string;
+}
+export declare function formatClassifiedMessage(input: ClassifiedMessageInput): string;
+export declare function hasErrorCode(value: string, code: ErrorCode): boolean;

package/dist/core/errors.js

@@ -0,0 +1,6 @@
+export function formatClassifiedMessage(input) {
+    return `[${input.code}] ${input.whatFailed} Intact: ${input.intact} Result: ${input.validity}. Next: ${input.next}`;
+}
+export function hasErrorCode(value, code) {
+    return value.startsWith(`[${code}]`);
+}

package/dist/core/options.d.ts

@@ -1,4 +1,4 @@
-import type { BaselineOptions, CheckOptions, UpgradeOptions, AuditOptions, BisectOptions, HealthOptions, UnusedOptions, ResolveOptions, LicenseOptions, SnapshotOptions } from "../types/index.js";
+import type { BaselineOptions, CheckOptions, UpgradeOptions, AuditOptions, BisectOptions, HealthOptions, UnusedOptions, ResolveOptions, LicenseOptions, SnapshotOptions, ReviewOptions, DoctorOptions, RiskLevel } from "../types/index.js";
 import type { InitCiMode, InitCiSchedule } from "./init-ci.js";
 export type ParsedCliArgs = {
     command: "check";
@@ -46,5 +46,12 @@ export type ParsedCliArgs = {
 } | {
     command: "snapshot";
     options: SnapshotOptions;
+} | {
+    command: "review";
+    options: ReviewOptions;
+} | {
+    command: "doctor";
+    options: DoctorOptions;
 };
 export declare function parseCliArgs(argv: string[]): Promise<ParsedCliArgs>;
+export declare function ensureRiskLevel(value: string): RiskLevel;

package/dist/core/options.js

@@ -21,6 +21,8 @@ const KNOWN_COMMANDS = [
     "resolve",
     "licenses",
     "snapshot",
+    "review",
+    "doctor",
 ];
 export async function parseCliArgs(argv) {
     const firstArg = argv[0];
@@ -62,6 +64,14 @@ export async function parseCliArgs(argv) {
         const { parseSnapshotArgs } = await import("../commands/snapshot/parser.js");
         return { command, options: parseSnapshotArgs(args) };
     }
+    if (command === "review") {
+        const { parseReviewArgs } = await import("../commands/review/parser.js");
+        return { command, options: parseReviewArgs(args) };
+    }
+    if (command === "doctor") {
+        const { parseDoctorArgs } = await import("../commands/doctor/parser.js");
+        return { command, options: parseDoctorArgs(args) };
+    }
     const base = {
         cwd: process.cwd(),
         target: "latest",
@@ -99,6 +109,9 @@ export async function parseCliArgs(argv) {
         onlyChanged: false,
         ciProfile: "minimal",
         lockfileMode: "preserve",
+        interactive: false,
+        showImpact: false,
+        showHomepage: false,
     };
     let force = false;
     let initCiMode = "enterprise";
@@ -429,6 +442,18 @@ export async function parseCliArgs(argv) {
             base.onlyChanged = true;
             continue;
         }
+        if (current === "--interactive") {
+            base.interactive = true;
+            continue;
+        }
+        if (current === "--show-impact") {
+            base.showImpact = true;
+            continue;
+        }
+        if (current === "--show-homepage") {
+            base.showHomepage = true;
+            continue;
+        }
         if (current === "--lockfile-mode" && next) {
             base.lockfileMode = ensureLockfileMode(next);
             index += 1;
@@ -639,6 +664,15 @@ function applyConfig(base, config) {
     if (typeof config.lockfileMode === "string") {
         base.lockfileMode = ensureLockfileMode(config.lockfileMode);
     }
+    if (typeof config.interactive === "boolean") {
+        base.interactive = config.interactive;
+    }
+    if (typeof config.showImpact === "boolean") {
+        base.showImpact = config.showImpact;
+    }
+    if (typeof config.showHomepage === "boolean") {
+        base.showHomepage = config.showHomepage;
+    }
 }
 function parsePackageManager(args) {
     const index = args.indexOf("--pm");
@@ -743,3 +777,12 @@ function ensureLockfileMode(value) {
     }
     throw new Error("--lockfile-mode must be preserve, update or error");
 }
+export function ensureRiskLevel(value) {
+    if (value === "critical" ||
+        value === "high" ||
+        value === "medium" ||
+        value === "low") {
+        return value;
+    }
+    throw new Error("--risk must be critical, high, medium or low");
+}

package/dist/core/review-model.d.ts

@@ -0,0 +1,5 @@
+import type { CheckOptions, DoctorOptions, DoctorResult, ReviewOptions, ReviewResult } from "../types/index.js";
+export declare function buildReviewResult(options: ReviewOptions | DoctorOptions | CheckOptions): Promise<ReviewResult>;
+export declare function createDoctorResult(review: ReviewResult): DoctorResult;
+export declare function renderReviewResult(review: ReviewResult): string;
+export declare function renderDoctorResult(result: DoctorResult, verdictOnly?: boolean): string;