@rainy-updates/cli 0.5.4 → 0.5.6

package/CHANGELOG.md

@@ -2,6 +2,90 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.5.6] - 2026-03-01
+
+GA readiness, shared analysis plumbing, and richer review operations.
+
+### Added
+
+- **New `ga` command** for release and CI readiness auditing:
+  - package manager detection,
+  - workspace discovery,
+  - lockfile presence checks,
+  - cache backend inspection,
+  - dist build verification,
+  - benchmark gate presence,
+  - README / CHANGELOG contract checks.
+- **Artifact run metadata**:
+  - stable `runId`,
+  - generated artifact manifests under `.artifacts/`,
+  - additive JSON / SARIF / GitHub output fields for run and decision metadata.
+- **Review and doctor changelog-aware flags**:
+  - `review --show-changelog`
+  - `doctor --include-changelog`
+- **Interactive review console upgrades**:
+  - filter rail,
+  - grouping and sorting modes,
+  - inline search,
+  - detail tabs,
+  - help overlay,
+  - bulk selection shortcuts,
+  - explicit policy and decision-state rendering.
+
+### Changed
+
+- `review` and `doctor` now consume a single shared analysis bundle across check, audit, resolve, health, licenses, and unused dependency signals.
+- Update records now carry additive operator metadata:
+  - `policyAction`,
+  - `decisionState`,
+  - `releaseNotesSummary`,
+  - `workspaceGroup`,
+  - `groupKey`,
+  - `selectedByDefault`,
+  - `blockedReason`,
+  - `monitorReason`.
+- Summary/output contracts now add:
+  - `runId`,
+  - `artifactManifest`,
+  - `blockedPackages`,
+  - `reviewPackages`,
+  - `monitorPackages`,
+  - `cacheBackend`,
+  - `degradedSources`,
+  - `gaReady`.
+- `check` now records the active cache backend in summary output and attaches workspace grouping metadata to updates.
+- CLI help now documents:
+  - `ga`,
+  - `--show-changelog`,
+  - `--include-changelog`,
+  - `--show-links`.
+
+### Tests
+
+- Added parser coverage for `ga`, `review --show-changelog`, and `doctor --include-changelog`.
+- Added output coverage for new GitHub output fields.
+- Added GA readiness command coverage.
+
+## [0.5.5] - 2026-03-01
+
+Interactive Dashboard TUI overhaul and domain logic integration.
+
+### Added
+
+- **Fully functional Interactive Dashboard TUI** (`dashboard` command):
+  - Built with Ink for a high-performance (60FPS+) CLI experience.
+  - Quick Actions directly bound to core CLI domain logic:
+    - **`[R]esolve`**: Runs peer-conflict resolution in the background and updates the UI with severity levels.
+    - **`[A]udit`**: Runs security audits in the background and surfaces CVE advisories and risk levels inline.
+    - **`<Enter>`**: Applies selected updates and exits the TUI to run the native package manager install.
+  - Zero-dependency atomic state manager (`useSyncExternalStore`) to ensure efficient rendering and avoid React Context cascading updates.
+  - Seamless background task execution with non-blocking modal overlays (`resolving`, `auditing`).
+
+### Changed
+
+- Added `silent: true` flag to `AuditOptions` and `ResolveOptions` to prevent standard stream pollution during background TUI operations.
+- Modified `dashboard` command runner to natively hand-off installation duties to the core `upgrade` flow upon `<Enter>`.
+
 ## [0.5.4] - 2026-03-01
 
 Production hotfix for interactive review stability.

package/README.md

@@ -107,6 +107,7 @@ npx @rainy-updates/cli ci --workspace --mode strict
 - `doctor` — summarize the current dependency situation
 - `review` — decide what to do with security, risk, peer, and policy context
 - `upgrade` — apply the approved change set
+- `ga` — audit GA and CI readiness for the current checkout
 
 ### Supporting workflow
 
@@ -136,6 +137,7 @@ rup doctor --workspace
 # 3) Review and decide
 npx @rainy-updates/cli review --security-only
 rup review --interactive
+rup review --show-changelog
 
 # 4) Apply upgrades with workspace sync
 npx @rainy-updates/cli upgrade --target latest --workspace --sync --install
@@ -181,6 +183,9 @@ rup bisect axios --cmd "bun test"           # if installed
 
 # 12) Focus review on high-risk changes
 rup review --risk high --diff major
+
+# 13) Audit GA / CI readiness
+rup ga --workspace
 ```
 
 ## What it does in production

package/dist/bin/cli.js

@@ -12,6 +12,7 @@ import { initCiWorkflow } from "../core/init-ci.js";
 import { diffBaseline, saveBaseline } from "../core/baseline.js";
 import { applyFixPr } from "../core/fix-pr.js";
 import { applyFixPrBatches } from "../core/fix-pr-batch.js";
+import { createRunId, writeArtifactManifest } from "../core/artifacts.js";
 import { renderResult } from "../output/format.js";
 import { writeGitHubOutput } from "../output/github.js";
 import { createSarifReport } from "../output/sarif.js";
@@ -128,6 +129,18 @@ async function main() {
             process.exitCode = result.verdict === "safe" ? 0 : 1;
             return;
         }
+        if (parsed.command === "dashboard") {
+            const { runDashboard } = await import("../commands/dashboard/runner.js");
+            const result = await runDashboard(parsed.options);
+            process.exitCode = result.errors.length > 0 ? 1 : 0;
+            return;
+        }
+        if (parsed.command === "ga") {
+            const { runGa } = await import("../commands/ga/runner.js");
+            const result = await runGa(parsed.options);
+            process.exitCode = result.ready ? 0 : 1;
+            return;
+        }
         if (parsed.options.interactive &&
             (parsed.command === "check" ||
                 parsed.command === "upgrade" ||
@@ -141,10 +154,13 @@ async function main() {
                 applySelected: parsed.command === "upgrade",
             });
             process.exitCode =
-                result.summary.verdict === "safe" && result.updates.length === 0 ? 0 : 1;
+                result.summary.verdict === "safe" && result.updates.length === 0
+                    ? 0
+                    : 1;
             return;
         }
         const result = await runCommand(parsed);
+        result.summary.runId = createRunId(parsed.command, parsed.options, result);
         if (parsed.options.fixPr &&
             (parsed.command === "check" ||
                 parsed.command === "upgrade" ||
@@ -179,6 +195,10 @@ async function main() {
             const markdown = renderPrReport(result);
             await writeFileAtomic(parsed.options.prReportFile, markdown + "\n");
         }
+        const artifactManifest = await writeArtifactManifest(parsed.command, parsed.options, result);
+        if (artifactManifest) {
+            result.summary.artifactManifest = artifactManifest.artifactManifestPath;
+        }
         result.summary.failReason = resolveFailReason(result.updates, result.errors, parsed.options.failOn, parsed.options.maxUpdates, parsed.options.ci);
         const renderStartedAt = Date.now();
         let rendered = renderResult(result, parsed.options.format, {
@@ -265,6 +285,7 @@ Options:
   --only-changed
   --interactive
   --show-impact
+  --show-links
   --show-homepage
   --lockfile-mode preserve|update|error
   --log-level error|warn|info|debug
@@ -414,6 +435,7 @@ Options:
   --risk critical|high|medium|low
   --diff patch|minor|major|latest
   --apply-selected
+  --show-changelog
   --policy-file <path>
   --json-file <path>
   --concurrency <n>
@@ -428,7 +450,18 @@ Produce a fast summary verdict and point the operator to review when action is n
 Options:
   --workspace
   --verdict-only
+  --include-changelog
   --json-file <path>`;
+    }
+    if (isCommand && command === "ga") {
+        return `rainy-updates ga [options]
+
+Audit release and CI readiness for Rainy Updates.
+
+Options:
+  --workspace
+  --json-file <path>
+  --cwd <path>`;
     }
     return `rainy-updates (rup / rainy-up) <command> [options]
 
@@ -437,6 +470,7 @@ Commands:
   doctor      Summarize what matters
   review      Decide what to do
   upgrade     Apply the approved change set
+  dashboard   Open the interactive DevOps dashboard (Ink TUI)
   ci          Run CI-focused orchestration
   warm-cache  Warm local cache for fast/offline checks
   init-ci     Scaffold GitHub Actions workflow
@@ -448,6 +482,7 @@ Commands:
   resolve     Check peer dependency conflicts (pure-TS, no subprocess)
   licenses    Scan dependency licenses and generate SPDX SBOM
   snapshot    Save, list, restore, and diff dependency state snapshots
+  ga          Audit GA and CI readiness for this checkout
 
 Global options:
   --cwd <path>
@@ -468,6 +503,7 @@ Global options:
   --only-changed
   --interactive
   --show-impact
+  --show-links
   --show-homepage
   --mode minimal|strict|enterprise
   --fix-pr

package/dist/commands/audit/runner.js

@@ -54,7 +54,9 @@ export async function runAudit(options) {
         result.warnings.push("No dependencies found to audit.");
         return result;
     }
-    process.stderr.write(`[audit] Querying ${describeSourceMode(options.sourceMode)} for ${targetResolution.targets.length} dependency version${targetResolution.targets.length === 1 ? "" : "s"}...\n`);
+    if (!options.silent) {
+        process.stderr.write(`[audit] Querying ${describeSourceMode(options.sourceMode)} for ${targetResolution.targets.length} dependency version${targetResolution.targets.length === 1 ? "" : "s"}...\n`);
+    }
     const fetched = await fetchAdvisories(targetResolution.targets, {
         concurrency: options.concurrency,
         registryTimeoutMs: options.registryTimeoutMs,
@@ -77,15 +79,17 @@ export async function runAudit(options) {
     result.advisories = advisories;
     result.packages = summarizeAdvisories(advisories);
     result.autoFixable = advisories.filter((a) => a.patchedVersion !== null).length;
-    if (options.reportFormat === "summary") {
-        process.stdout.write(renderAuditSummary(result.packages) +
-            renderAuditSourceHealth(result.sourceHealth) +
-            "\n");
-    }
-    else if (options.reportFormat === "table" || !options.jsonFile) {
-        process.stdout.write(renderAuditTable(advisories) +
-            renderAuditSourceHealth(result.sourceHealth) +
-            "\n");
+    if (!options.silent) {
+        if (options.reportFormat === "summary") {
+            process.stdout.write(renderAuditSummary(result.packages) +
+                renderAuditSourceHealth(result.sourceHealth) +
+                "\n");
+        }
+        else if (options.reportFormat === "table" || !options.jsonFile) {
+            process.stdout.write(renderAuditTable(advisories) +
+                renderAuditSourceHealth(result.sourceHealth) +
+                "\n");
+        }
     }
     if (options.jsonFile) {
         await writeFileAtomic(options.jsonFile, stableStringify({
@@ -97,7 +101,9 @@ export async function runAudit(options) {
             errors: result.errors,
             warnings: result.warnings,
         }, 2) + "\n");
-        process.stderr.write(`[audit] JSON report written to ${options.jsonFile}\n`);
+        if (!options.silent) {
+            process.stderr.write(`[audit] JSON report written to ${options.jsonFile}\n`);
+        }
     }
     if (options.fix && result.autoFixable > 0) {
         await applyFix(advisories, options);
@@ -120,27 +126,35 @@ async function applyFix(advisories, options) {
     const installArgs = buildInstallArgs(pm, patchMap);
     const installCmd = `${pm} ${installArgs.join(" ")}`;
     if (options.dryRun) {
-        process.stderr.write(`[audit] --dry-run: would execute:\n  ${installCmd}\n`);
-        if (options.commit) {
-            const msg = buildCommitMessage(patchMap);
-            process.stderr.write(`[audit] --dry-run: would commit:\n  git commit -m "${msg}"\n`);
+        if (!options.silent) {
+            process.stderr.write(`[audit] --dry-run: would execute:\n  ${installCmd}\n`);
+            if (options.commit) {
+                const msg = buildCommitMessage(patchMap);
+                process.stderr.write(`[audit] --dry-run: would commit:\n  git commit -m "${msg}"\n`);
+            }
         }
         return;
     }
-    process.stderr.write(`[audit] Applying ${patchMap.size} fix(es)...\n`);
-    process.stderr.write(`  → ${installCmd}\n`);
+    if (!options.silent) {
+        process.stderr.write(`[audit] Applying ${patchMap.size} fix(es)...\n`);
+        process.stderr.write(`  → ${installCmd}\n`);
+    }
     try {
         await runCommand(pm, installArgs, options.cwd);
     }
     catch (err) {
-        process.stderr.write(`[audit] Install failed: ${String(err)}\n`);
+        if (!options.silent) {
+            process.stderr.write(`[audit] Install failed: ${String(err)}\n`);
+        }
         return;
     }
-    process.stderr.write(`[audit] ✔ Patches applied successfully.\n`);
+    if (!options.silent) {
+        process.stderr.write(`[audit] ✔ Patches applied successfully.\n`);
+    }
     if (options.commit) {
-        await commitFix(patchMap, options.cwd);
+        await commitFix(patchMap, options.cwd, options.silent);
     }
-    else {
+    else if (!options.silent) {
         process.stderr.write(`[audit] Tip: run with --commit to automatically commit the changes.\n`);
     }
 }
@@ -157,7 +171,7 @@ function buildInstallArgs(pm, patchMap) {
             return ["install", ...packages]; // npm
     }
 }
-async function commitFix(patchMap, cwd) {
+async function commitFix(patchMap, cwd, silent) {
     const msg = buildCommitMessage(patchMap);
     try {
         // Stage all modified files (package.json + lockfiles)
@@ -171,12 +185,15 @@ async function commitFix(patchMap, cwd) {
             "bun.lockb",
         ], cwd, true);
         await runCommand("git", ["commit", "-m", msg], cwd);
-        process.stderr.write(`[audit] ✔ Committed: "${msg}"\n`);
+        if (!silent)
+            process.stderr.write(`[audit] ✔ Committed: "${msg}"\n`);
     }
     catch (err) {
-        process.stderr.write(`[audit] Git commit failed: ${String(err)}\n`);
-        process.stderr.write(`[audit] Changes are applied — commit manually with:\n`);
-        process.stderr.write(`  git add -A && git commit -m "${msg}"\n`);
+        if (!silent) {
+            process.stderr.write(`[audit] Git commit failed: ${String(err)}\n`);
+            process.stderr.write(`[audit] Changes are applied — commit manually with:\n`);
+            process.stderr.write(`  git add -A && git commit -m "${msg}"\n`);
+        }
     }
 }
 function buildCommitMessage(patchMap) {

package/dist/commands/dashboard/parser.d.ts

@@ -0,0 +1,2 @@
+import type { DashboardOptions } from "../../types/index.js";
+export declare function parseDashboardArgs(args: string[]): DashboardOptions;

package/dist/commands/dashboard/parser.js

@@ -0,0 +1,59 @@
+export function parseDashboardArgs(args) {
+    const options = {
+        cwd: process.cwd(),
+        target: "latest",
+        includeKinds: [
+            "dependencies",
+            "devDependencies",
+            "optionalDependencies",
+            "peerDependencies",
+        ],
+        cacheTtlSeconds: 3600,
+        ci: false,
+        format: "table",
+        workspace: false,
+        concurrency: 16,
+        registryTimeoutMs: 8000,
+        registryRetries: 3,
+        offline: false,
+        stream: false,
+        logLevel: "info",
+        groupBy: "none",
+        onlyChanged: false,
+        ciProfile: "minimal",
+        lockfileMode: "preserve",
+        interactive: true,
+        showImpact: false,
+        showHomepage: true,
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const nextArg = args[i + 1];
+        if (arg === "--view" && nextArg) {
+            if (nextArg === "dependencies" ||
+                nextArg === "security" ||
+                nextArg === "health") {
+                options.view = nextArg;
+            }
+            else {
+                throw new Error(`Invalid --view: ${nextArg}`);
+            }
+            i++;
+            continue;
+        }
+        if (arg === "--view") {
+            throw new Error("Missing value for --view");
+        }
+        // Pass through common workspace / cwd args
+        if (arg === "--workspace") {
+            options.workspace = true;
+            continue;
+        }
+        if (arg === "--cwd" && nextArg) {
+            options.cwd = nextArg;
+            i++;
+            continue;
+        }
+    }
+    return options;
+}

package/dist/commands/dashboard/runner.d.ts

@@ -0,0 +1,2 @@
+import type { DashboardOptions, DashboardResult } from "../../types/index.js";
+export declare function runDashboard(options: DashboardOptions): Promise<DashboardResult>;

package/dist/commands/dashboard/runner.js

@@ -0,0 +1,47 @@
+import React from "react";
+import { render } from "ink";
+import { loadConfig } from "../../config/loader.js";
+import { DashboardTUI } from "../../ui/dashboard/DashboardTUI.js";
+// We'll need to load initial state or data before or during the render
+import { check } from "../../core/check.js";
+export async function runDashboard(options) {
+    // Load configuration
+    const resolvedConfig = await loadConfig(options.cwd);
+    // Create an initial check result. In a real scenario, this could run
+    // progressively in the TUI, but for simplicity we fetch initial data first.
+    const checkResult = await check({
+        ...options,
+        // We do not want `check` to exit or log heavily here, the UI will take over.
+        logLevel: "error",
+    });
+    // Render the interactive Ink Dashboard
+    const { waitUntilExit } = render(React.createElement(DashboardTUI, {
+        options,
+        initialResult: checkResult,
+    }));
+    await waitUntilExit();
+    const finalStore = await import("../../ui/dashboard/store.js");
+    const finalState = finalStore.getStore()?.getState();
+    if (finalState?.shouldApply) {
+        process.stderr.write("[dashboard] Applying updates...\n");
+        const { applySelectedUpdates } = await import("../../core/upgrade.js");
+        const { detectPackageManager } = await import("../../pm/detect.js");
+        const { installDependencies } = await import("../../pm/install.js");
+        await applySelectedUpdates({
+            ...options,
+            install: false, // We handle installation explicitly below
+            packageManager: "auto",
+            sync: true,
+            lockfileMode: options.lockfileMode || "preserve",
+        }, finalState.updates);
+        // Install using the correct package manager if desired
+        const detected = await detectPackageManager(options.cwd);
+        await installDependencies(options.cwd, "auto", detected);
+        process.stderr.write("[dashboard] Successfully applied updates and installed dependencies.\n");
+    }
+    return {
+        completed: true,
+        errors: [],
+        warnings: [],
+    };
+}

package/dist/commands/doctor/parser.js

@@ -42,6 +42,7 @@ export function parseDoctorArgs(args) {
         showImpact: true,
         showHomepage: true,
         verdictOnly: false,
+        includeChangelog: false,
     };
     for (let i = 0; i < args.length; i += 1) {
         const current = args[i];
@@ -61,6 +62,10 @@ export function parseDoctorArgs(args) {
             options.verdictOnly = true;
             continue;
         }
+        if (current === "--include-changelog") {
+            options.includeChangelog = true;
+            continue;
+        }
         if (current === "--json-file" && next) {
             options.jsonFile = path.resolve(options.cwd, next);
             i += 1;
@@ -86,6 +91,7 @@ Usage:
 
 Options:
   --verdict-only         Print the 3-line quick verdict without counts
+  --include-changelog    Include release note summaries in the aggregated review data
   --workspace            Scan all workspace packages
   --json-file <path>     Write JSON doctor report to file
   --cwd <path>

package/dist/commands/ga/parser.d.ts

@@ -0,0 +1,2 @@
+import type { GaOptions } from "../../types/index.js";
+export declare function parseGaArgs(args: string[]): GaOptions;

package/dist/commands/ga/parser.js

@@ -0,0 +1,50 @@
+import path from "node:path";
+import process from "node:process";
+export function parseGaArgs(args) {
+    const options = {
+        cwd: process.cwd(),
+        workspace: false,
+        jsonFile: undefined,
+    };
+    for (let i = 0; i < args.length; i += 1) {
+        const current = args[i];
+        const next = args[i + 1];
+        if (current === "--cwd" && next) {
+            options.cwd = path.resolve(next);
+            i += 1;
+            continue;
+        }
+        if (current === "--cwd")
+            throw new Error("Missing value for --cwd");
+        if (current === "--workspace") {
+            options.workspace = true;
+            continue;
+        }
+        if (current === "--json-file" && next) {
+            options.jsonFile = path.resolve(options.cwd, next);
+            i += 1;
+            continue;
+        }
+        if (current === "--json-file")
+            throw new Error("Missing value for --json-file");
+        if (current === "--help" || current === "-h") {
+            process.stdout.write(GA_HELP);
+            process.exit(0);
+        }
+        if (current.startsWith("-"))
+            throw new Error(`Unknown ga option: ${current}`);
+        throw new Error(`Unexpected ga argument: ${current}`);
+    }
+    return options;
+}
+const GA_HELP = `
+rup ga — Audit release and CI readiness for Rainy Updates
+
+Usage:
+  rup ga [options]
+
+Options:
+  --workspace            Evaluate workspace package coverage
+  --json-file <path>     Write JSON GA report to file
+  --cwd <path>
+`.trimStart();

package/dist/commands/ga/runner.d.ts

@@ -0,0 +1,2 @@
+import type { GaOptions, GaResult } from "../../types/index.js";
+export declare function runGa(options: GaOptions): Promise<GaResult>;