@rainy-updates/cli 0.5.7 → 0.6.1

package/dist/registry/npm.js

@@ -1,8 +1,7 @@
-import { promises as fs } from "node:fs";
-import os from "node:os";
 import path from "node:path";
-import process from "node:process";
 import { asyncPool } from "../utils/async-pool.js";
+import { getHomeDir } from "../utils/runtime-paths.js";
+import { getRuntimeCwd, readEnv } from "../utils/runtime.js";
 const DEFAULT_TIMEOUT_MS = 8000;
 const USER_AGENT = "@rainy-updates/cli";
 const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
@@ -52,7 +51,9 @@ export class NpmRegistryClient {
             catch (error) {
                 lastError = String(error);
                 if (attempt < retries) {
-                    const backoffMs = error instanceof RetryableRegistryError ? error.waitMs : computeBackoffMs(attempt);
+                    const backoffMs = error instanceof RetryableRegistryError
+                        ? error.waitMs
+                        : computeBackoffMs(attempt);
                     await sleep(backoffMs);
                 }
             }
@@ -136,10 +137,7 @@ class RetryableRegistryError extends Error {
     }
 }
 async function createRequester(cwd) {
-    const registryConfig = await loadRegistryConfig(cwd ?? process.cwd());
-    const undiciRequester = await tryCreateUndiciRequester(registryConfig);
-    if (undiciRequester)
-        return undiciRequester;
+    const registryConfig = await loadRegistryConfig(cwd ?? getRuntimeCwd());
     return async (packageName, timeoutMs) => {
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), timeoutMs);
@@ -158,7 +156,9 @@ async function createRequester(cwd) {
                 headers,
                 signal: controller.signal,
             });
-            const data = (await response.json().catch(() => null));
+            const data = (await response
+                .json()
+                .catch(() => null));
             return {
                 status: response.status,
                 data,
@@ -170,74 +170,17 @@ async function createRequester(cwd) {
         }
     };
 }
-async function tryCreateUndiciRequester(registryConfig) {
-    try {
-        const dynamicImport = Function("specifier", "return import(specifier)");
-        const undici = await dynamicImport("undici");
-        return async (packageName, timeoutMs) => {
-            const controller = new AbortController();
-            const timeout = setTimeout(() => controller.abort(), timeoutMs);
-            const registry = resolveRegistryForPackage(packageName, registryConfig);
-            const url = buildRegistryUrl(registry, packageName);
-            const authHeader = resolveAuthHeader(registry, registryConfig);
-            const headers = {
-                accept: "application/json",
-                "user-agent": USER_AGENT,
-            };
-            if (authHeader) {
-                headers.authorization = authHeader;
-            }
-            try {
-                const res = await undici.request(url, {
-                    method: "GET",
-                    headers,
-                    signal: controller.signal,
-                });
-                const bodyText = await res.body.text();
-                let data = null;
-                try {
-                    data = JSON.parse(bodyText);
-                }
-                catch {
-                    data = null;
-                }
-                const retryAfter = (() => {
-                    const header = res.headers["retry-after"];
-                    if (Array.isArray(header))
-                        return header[0] ?? null;
-                    if (typeof header === "string")
-                        return header;
-                    return null;
-                })();
-                return {
-                    status: res.statusCode,
-                    data,
-                    retryAfterMs: parseRetryAfterHeader(retryAfter),
-                };
-            }
-            finally {
-                clearTimeout(timeout);
-            }
-        };
-    }
-    catch {
-        return null;
-    }
-}
 export async function loadRegistryConfig(cwd) {
-    const homeNpmrc = path.join(os.homedir(), ".npmrc");
+    const homeNpmrc = path.join(getHomeDir(), ".npmrc");
     const projectNpmrc = path.join(cwd, ".npmrc");
     const merged = new Map();
     for (const filePath of [homeNpmrc, projectNpmrc]) {
-        try {
-            const content = await fs.readFile(filePath, "utf8");
-            const parsed = parseNpmrc(content);
-            for (const [key, value] of parsed) {
-                merged.set(key, value);
-            }
-        }
-        catch {
-            // ignore missing/unreadable file
+        const content = await readOptionalTextFile(filePath);
+        if (!content)
+            continue;
+        const parsed = parseNpmrc(content);
+        for (const [key, value] of parsed) {
+            merged.set(key, value);
         }
     }
     const defaultRegistry = normalizeRegistryUrl(merged.get("registry") ?? DEFAULT_REGISTRY);
@@ -272,18 +215,33 @@ export async function loadRegistryConfig(cwd) {
         authByRegistry.set(registry, current);
     }
     if (merged.get("always-auth") === "true") {
-        const current = authByRegistry.get(defaultRegistry) ?? { alwaysAuth: false };
+        const current = authByRegistry.get(defaultRegistry) ?? {
+            alwaysAuth: false,
+        };
         current.alwaysAuth = true;
         authByRegistry.set(defaultRegistry, current);
     }
     return { defaultRegistry, scopedRegistries, authByRegistry };
 }
+async function readOptionalTextFile(filePath) {
+    try {
+        const file = Bun.file(filePath);
+        if (!(await file.exists()))
+            return null;
+        return await file.text();
+    }
+    catch {
+        return null;
+    }
+}
 function parseNpmrc(content) {
     const values = new Map();
     const lines = content.split(/\r?\n/);
     for (const line of lines) {
         const trimmed = line.trim();
-        if (trimmed.length === 0 || trimmed.startsWith("#") || trimmed.startsWith(";"))
+        if (trimmed.length === 0 ||
+            trimmed.startsWith("#") ||
+            trimmed.startsWith(";"))
             continue;
         const separator = trimmed.indexOf("=");
         if (separator <= 0)
@@ -297,7 +255,7 @@ function parseNpmrc(content) {
     return values;
 }
 function substituteEnvValue(value) {
-    return value.replace(/\$\{([^}]+)\}/g, (_match, name) => process.env[name] ?? "");
+    return value.replace(/\$\{([^}]+)\}/g, (_match, name) => readEnv(name) ?? "");
 }
 function normalizeRegistryUrl(value) {
     const normalized = value.endsWith("/") ? value : `${value}/`;

package/dist/types/index.d.ts

@@ -1,10 +1,19 @@
 export type DependencyKind = "dependencies" | "devDependencies" | "optionalDependencies" | "peerDependencies";
+export type SupportedPackageManager = "bun" | "npm" | "pnpm" | "yarn";
+export type DetectedPackageManager = SupportedPackageManager | "unknown";
+export type SelectedPackageManager = "auto" | SupportedPackageManager;
 export type TargetLevel = "patch" | "minor" | "major" | "latest";
 export type GroupBy = "none" | "name" | "scope" | "kind" | "risk";
 export type CiProfile = "minimal" | "strict" | "enterprise";
 export type LockfileMode = "preserve" | "update" | "error";
 export type Verdict = "safe" | "review" | "blocked" | "actionable";
 export type RiskLevel = "critical" | "high" | "medium" | "low";
+export type DashboardMode = "check" | "review" | "upgrade";
+export type QueueFocus = "all" | "security" | "risk" | "major" | "blocked" | "workspace";
+export type InteractiveSurface = "dashboard";
+export type VerificationState = "not-run" | "passed" | "failed";
+export type VerificationMode = "none" | "install" | "test" | "install,test";
+export type CiGate = "check" | "doctor" | "review" | "upgrade";
 export type DoctorFindingSeverity = "error" | "warning";
 export type DoctorScoreLabel = "Strong" | "Needs Review" | "Action Needed" | "Blocked / Critical";
 export type DoctorFindingCategory = "Security" | "Compatibility" | "Policy" | "Operational Health" | "Licensing" | "Unused / Cleanup" | "Release Risk" | "Registry / Execution" | "Workspace Integrity";
@@ -51,18 +60,29 @@ export interface RunOptions {
     cooldownDays?: number;
     prLimit?: number;
     onlyChanged: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     ciProfile: CiProfile;
     lockfileMode: LockfileMode;
     interactive: boolean;
     showImpact: boolean;
     showHomepage: boolean;
+    decisionPlanFile?: string;
+    verify: VerificationMode;
+    testCommand?: string;
+    verificationReportFile?: string;
+    ciGate: CiGate;
 }
 export interface CheckOptions extends RunOptions {
 }
 export interface UpgradeOptions extends RunOptions {
     install: boolean;
-    packageManager: "auto" | "npm" | "pnpm";
+    packageManager: SelectedPackageManager;
     sync: boolean;
+    fromPlanFile?: string;
 }
 export interface BaselineOptions {
     cwd: string;
@@ -146,8 +166,51 @@ export interface ArtifactManifest {
         githubOutputFile?: string;
         sarifFile?: string;
         prReportFile?: string;
+        verificationReportFile?: string;
     };
 }
+export interface VerificationCheck {
+    name: "install" | "test";
+    command: string;
+    passed: boolean;
+    exitCode: number;
+    durationMs: number;
+    error?: string;
+}
+export interface VerificationResult {
+    mode: VerificationMode;
+    passed: boolean;
+    checks: VerificationCheck[];
+}
+export interface DecisionPlanItem {
+    packagePath: string;
+    name: string;
+    kind: DependencyKind;
+    fromRange: string;
+    toRange: string;
+    toVersionResolved: string;
+    diffType: TargetLevel;
+    riskLevel?: RiskLevel;
+    riskScore?: number;
+    policyAction?: PolicyAction;
+    decisionState?: DecisionState;
+    selected: boolean;
+}
+export interface DecisionPlan {
+    contractVersion: "1";
+    createdAt: string;
+    sourceCommand: string;
+    mode: DashboardMode;
+    focus: QueueFocus;
+    projectPath: string;
+    target: TargetLevel;
+    interactiveSurface: InteractiveSurface;
+    summary: {
+        totalItems: number;
+        selectedItems: number;
+    };
+    items: DecisionPlanItem[];
+}
 export interface Summary {
     contractVersion: "2";
     scannedPackages: number;
@@ -213,11 +276,17 @@ export interface Summary {
     primaryFindingCode?: string;
     primaryFindingCategory?: DoctorFindingCategory;
     nextActionReason?: string;
+    suggestedCommand?: string;
+    decisionPlan?: string;
+    interactiveSurface?: InteractiveSurface;
+    queueFocus?: QueueFocus;
+    verificationState?: VerificationState;
+    verificationFailures?: number;
 }
 export interface CheckResult {
     projectPath: string;
     packagePaths: string[];
-    packageManager: "npm" | "pnpm" | "unknown";
+    packageManager: DetectedPackageManager;
     target: TargetLevel;
     timestamp: string;
     summary: Summary;
@@ -231,6 +300,7 @@ export interface UpgradeResult extends CheckResult {
 export interface PackageManifest {
     name?: string;
     version?: string;
+    packageManager?: string;
     dependencies?: Record<string, string>;
     devDependencies?: Record<string, string>;
     optionalDependencies?: Record<string, string>;
@@ -256,11 +326,16 @@ export type AuditSourceStatusLevel = "ok" | "partial" | "failed";
 export interface AuditOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     severity?: AuditSeverity;
     fix: boolean;
     dryRun: boolean;
     commit: boolean;
-    packageManager: "auto" | "npm" | "pnpm" | "bun" | "yarn";
+    packageManager: SelectedPackageManager;
     reportFormat: AuditReportFormat;
     sourceMode: AuditSourceMode;
     jsonFile?: string;
@@ -332,6 +407,11 @@ export type HealthFlag = "stale" | "deprecated" | "archived" | "unmaintained";
 export interface HealthOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     staleDays: number;
     includeDeprecated: boolean;
     includeAlternatives: boolean;
@@ -377,6 +457,11 @@ export interface PeerConflict {
 export interface ResolveOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     afterUpdate: boolean;
     safe: boolean;
     jsonFile?: string;
@@ -432,6 +517,7 @@ export interface ReviewResult {
     updates: PackageUpdate[];
     errors: string[];
     warnings: string[];
+    decisionPlan?: DecisionPlan;
 }
 export interface ReviewOptions extends CheckOptions {
     securityOnly: boolean;
@@ -439,6 +525,7 @@ export interface ReviewOptions extends CheckOptions {
     diff?: TargetLevel;
     applySelected: boolean;
     showChangelog?: boolean;
+    queueFocus?: QueueFocus;
 }
 export interface DoctorOptions extends CheckOptions {
     verdictOnly: boolean;
@@ -482,11 +569,16 @@ export interface AnalysisBundle {
 }
 export interface DashboardOptions extends CheckOptions {
     view?: "dependencies" | "security" | "health";
+    mode: DashboardMode;
+    focus: QueueFocus;
+    applySelected: boolean;
 }
 export interface DashboardResult {
     completed: boolean;
     errors: string[];
     warnings: string[];
+    selectedUpdates: number;
+    decisionPlanFile?: string;
 }
 export type UnusedKind = "declared-not-imported" | "imported-not-declared";
 export interface UnusedDependency {
@@ -498,6 +590,11 @@ export interface UnusedDependency {
 export interface UnusedOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     srcDirs: string[];
     includeDevDependencies: boolean;
     fix: boolean;
@@ -546,6 +643,11 @@ export interface SbomRelationship {
 export interface LicenseOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     allow?: string[];
     deny?: string[];
     sbomFile?: string;
@@ -573,6 +675,11 @@ export type SnapshotAction = "save" | "list" | "restore" | "diff";
 export interface SnapshotOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     action: SnapshotAction;
     label?: string;
     snapshotId?: string;
@@ -595,20 +702,42 @@ export interface SnapshotResult {
     errors: string[];
     warnings: string[];
 }
+export type HookAction = "install" | "uninstall" | "doctor";
+export interface HookOptions {
+    cwd: string;
+    action: HookAction;
+}
+export interface HookResult {
+    action: HookAction;
+    hookDir?: string;
+    installed: string[];
+    removed: string[];
+    checked: Array<{
+        name: "pre-commit" | "pre-push";
+        status: "managed" | "missing" | "foreign";
+    }>;
+    errors: string[];
+    warnings: string[];
+}
 export interface GaOptions {
     cwd: string;
     workspace: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
     jsonFile?: string;
 }
 export interface GaCheck {
-    name: "package-manager" | "workspace-discovery" | "lockfile" | "cache-backend" | "dist-build" | "benchmark-gates" | "docs-contract";
+    name: "package-manager" | "workspace-discovery" | "lockfile" | "cache-backend" | "dist-build" | "runtime-artifacts" | "benchmark-gates" | "docs-contract";
     status: "pass" | "warn" | "fail";
     detail: string;
 }
 export interface GaResult {
     ready: boolean;
     projectPath: string;
-    packageManager: "npm" | "pnpm" | "unknown";
+    packageManager: DetectedPackageManager;
     workspacePackages: number;
     cacheBackend: "sqlite" | "file";
     checks: GaCheck[];

package/dist/ui/tui.d.ts

@@ -1,2 +1,5 @@
 import type { ReviewItem } from "../types/index.js";
-export declare function runTui(items: ReviewItem[]): Promise<ReviewItem[]>;
+export declare function runTui(items: ReviewItem[], options?: {
+    title?: string;
+    subtitle?: string;
+}): Promise<ReviewItem[]>;