@rainy-updates/cli 0.6.0 → 0.6.1

package/dist/commands/review/parser.js

@@ -37,6 +37,11 @@ export function parseReviewArgs(args) {
         cooldownDays: undefined,
         prLimit: undefined,
         onlyChanged: false,
+        affected: false,
+        staged: false,
+        baseRef: undefined,
+        headRef: undefined,
+        sinceRef: undefined,
         ciProfile: "minimal",
         lockfileMode: "preserve",
         interactive: false,
@@ -68,6 +73,39 @@ export function parseReviewArgs(args) {
             options.workspace = true;
             continue;
         }
+        if (current === "--only-changed") {
+            options.onlyChanged = true;
+            continue;
+        }
+        if (current === "--affected") {
+            options.affected = true;
+            continue;
+        }
+        if (current === "--staged") {
+            options.staged = true;
+            continue;
+        }
+        if (current === "--base" && next) {
+            options.baseRef = next;
+            i += 1;
+            continue;
+        }
+        if (current === "--base")
+            throw new Error("Missing value for --base");
+        if (current === "--head" && next) {
+            options.headRef = next;
+            i += 1;
+            continue;
+        }
+        if (current === "--head")
+            throw new Error("Missing value for --head");
+        if (current === "--since" && next) {
+            options.sinceRef = next;
+            i += 1;
+            continue;
+        }
+        if (current === "--since")
+            throw new Error("Missing value for --since");
         if (current === "--interactive") {
             options.interactive = true;
             continue;
@@ -224,6 +262,12 @@ Options:
   --test-command <cmd>    Override the command used for test verification
   --show-changelog        Fetch release notes summaries for review output
   --workspace             Scan all workspace packages
+  --only-changed         Limit analysis to changed packages
+  --affected             Include changed packages and their dependents
+  --staged               Limit analysis to staged changes
+  --base <ref>           Compare changes against a base git ref
+  --head <ref>           Compare changes against a head git ref
+  --since <ref>          Compare changes since a git ref
   --policy-file <path>    Load policy overrides
   --json-file <path>      Write JSON review report to file
   --registry-timeout-ms <n>

package/dist/commands/snapshot/parser.js

@@ -3,6 +3,11 @@ export function parseSnapshotArgs(args) {
     const options = {
         cwd: process.cwd(),
         workspace: false,
+        affected: false,
+        staged: false,
+        baseRef: undefined,
+        headRef: undefined,
+        sinceRef: undefined,
         action: "list",
         label: undefined,
         snapshotId: undefined,
@@ -25,6 +30,35 @@ export function parseSnapshotArgs(args) {
             options.workspace = true;
             continue;
         }
+        if (current === "--affected") {
+            options.affected = true;
+            continue;
+        }
+        if (current === "--staged") {
+            options.staged = true;
+            continue;
+        }
+        if (current === "--base" && next) {
+            options.baseRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--base")
+            throw new Error("Missing value for --base");
+        if (current === "--head" && next) {
+            options.headRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--head")
+            throw new Error("Missing value for --head");
+        if (current === "--since" && next) {
+            options.sinceRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--since")
+            throw new Error("Missing value for --since");
         if (current === "--label" && next) {
             options.label = next;
             i++;
@@ -75,6 +109,11 @@ Options:
   --label <name>        Human-readable label for the snapshot
   --store <path>        Custom snapshot store file (default: .rup-snapshots.json)
   --workspace           Include all workspace packages
+  --affected            Include changed workspace packages and dependents
+  --staged              Limit snapshot scope to staged changes
+  --base <ref>          Compare changes against a base git ref
+  --head <ref>          Compare changes against a head git ref
+  --since <ref>         Compare changes since a git ref
   --cwd <path>          Working directory (default: cwd)
   --help                Show this help
 `.trimStart();

package/dist/commands/snapshot/runner.js

@@ -16,7 +16,10 @@ export async function runSnapshot(options) {
         errors: [],
         warnings: [],
     };
-    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace);
+    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace, {
+        git: options,
+        includeDependents: options.affected === true,
+    });
     const store = new SnapshotStore(options.cwd, options.storeFile);
     switch (options.action) {
         // ─ save ──────────────────────────────────────────────────────────────────

package/dist/commands/unused/parser.js

@@ -3,6 +3,11 @@ export function parseUnusedArgs(args) {
     const options = {
         cwd: process.cwd(),
         workspace: false,
+        affected: false,
+        staged: false,
+        baseRef: undefined,
+        headRef: undefined,
+        sinceRef: undefined,
         srcDirs: DEFAULT_SRC_DIRS,
         includeDevDependencies: true,
         fix: false,
@@ -24,6 +29,35 @@ export function parseUnusedArgs(args) {
             options.workspace = true;
             continue;
         }
+        if (current === "--affected") {
+            options.affected = true;
+            continue;
+        }
+        if (current === "--staged") {
+            options.staged = true;
+            continue;
+        }
+        if (current === "--base" && next) {
+            options.baseRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--base")
+            throw new Error("Missing value for --base");
+        if (current === "--head" && next) {
+            options.headRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--head")
+            throw new Error("Missing value for --head");
+        if (current === "--since" && next) {
+            options.sinceRef = next;
+            i++;
+            continue;
+        }
+        if (current === "--since")
+            throw new Error("Missing value for --since");
         if (current === "--src" && next) {
             options.srcDirs = next
                 .split(",")
@@ -81,6 +115,11 @@ Usage:
 Options:
   --src <dirs>          Comma-separated source directories to scan (default: src)
   --workspace           Scan all workspace packages
+  --affected            Scan changed workspace packages and their dependents
+  --staged              Limit scanning to staged changes
+  --base <ref>          Compare changes against a base git ref
+  --head <ref>          Compare changes against a head git ref
+  --since <ref>         Compare changes since a git ref
   --no-dev              Exclude devDependencies from unused detection
   --fix                 Remove unused dependencies from package.json
   --dry-run             Preview changes without writing

package/dist/commands/unused/runner.js

@@ -24,7 +24,10 @@ export async function runUnused(options) {
         errors: [],
         warnings: [],
     };
-    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace);
+    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace, {
+        git: options,
+        includeDependents: false,
+    });
     for (const packageDir of packageDirs) {
         // ─ Read manifest ─────────────────────────────────────────────────────────
         let manifest;

package/dist/commands/unused/scanner.d.ts

@@ -1,10 +1,11 @@
 /**
- * Extracts all imported package names from a single source file.
+ * Extracts all imported package names from a single source file using AST.
  *
  * Handles:
  *   - ESM static:  import ... from "pkg"
  *   - ESM dynamic: import("pkg")
  *   - CJS:         require("pkg")
+ *   - ESM re-export: export ... from "pkg"
  *
  * Strips subpath imports (e.g. "lodash/merge" → "lodash"),
  * skips relative imports and node: builtins.

package/dist/commands/unused/scanner.js

@@ -1,37 +1,63 @@
-import { promises as fs } from "node:fs";
 import path from "node:path";
+import { parseSync } from "oxc-parser";
 /**
- * Extracts all imported package names from a single source file.
+ * Extracts all imported package names from a single source file using AST.
  *
  * Handles:
  *   - ESM static:  import ... from "pkg"
  *   - ESM dynamic: import("pkg")
  *   - CJS:         require("pkg")
+ *   - ESM re-export: export ... from "pkg"
  *
  * Strips subpath imports (e.g. "lodash/merge" → "lodash"),
  * skips relative imports and node: builtins.
  */
 export function extractImportsFromSource(source) {
     const names = new Set();
-    // ESM static import: from "pkg" or from 'pkg'
-    const staticImport = /from\s+['"]([^'"]+)['"]/g;
-    for (const match of source.matchAll(staticImport)) {
-        addPackageName(names, match[1]);
-    }
-    // ESM dynamic import: import("pkg") or import('pkg')
-    const dynamicImport = /\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
-    for (const match of source.matchAll(dynamicImport)) {
-        addPackageName(names, match[1]);
-    }
-    // CJS require: require("pkg") or require('pkg')
-    const cjsRequire = /\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g;
-    for (const match of source.matchAll(cjsRequire)) {
-        addPackageName(names, match[1]);
+    try {
+        const parseResult = parseSync("unknown.ts", source, {
+            sourceType: "module",
+        });
+        const walk = (node) => {
+            if (!node)
+                return;
+            if (node.type === "ImportDeclaration" && node.source?.value) {
+                addPackageName(names, node.source.value);
+            }
+            else if (node.type === "ExportNamedDeclaration" && node.source?.value) {
+                addPackageName(names, node.source.value);
+            }
+            else if (node.type === "ExportAllDeclaration" && node.source?.value) {
+                addPackageName(names, node.source.value);
+            }
+            else if (node.type === "ImportExpression" && node.source?.value) {
+                addPackageName(names, node.source.value);
+            }
+            else if (node.type === "CallExpression") {
+                if (node.callee?.type === "Identifier" &&
+                    node.callee.name === "require" &&
+                    node.arguments?.[0]?.type === "StringLiteral") {
+                    addPackageName(names, node.arguments[0].value);
+                }
+            }
+            // Traverse children
+            for (const key in node) {
+                if (node[key] && typeof node[key] === "object") {
+                    if (Array.isArray(node[key])) {
+                        for (const child of node[key]) {
+                            walk(child);
+                        }
+                    }
+                    else {
+                        walk(node[key]);
+                    }
+                }
+            }
+        };
+        walk(parseResult.program);
     }
-    // export ... from "pkg"
-    const reExport = /\bexport\s+(?:\*|\{[^}]*\})\s+from\s+['"]([^'"]+)['"]/g;
-    for (const match of source.matchAll(reExport)) {
-        addPackageName(names, match[1]);
+    catch (err) {
+        // Fallback or ignore parse errors
     }
     return names;
 }
@@ -87,40 +113,30 @@ const IGNORED_DIRS = new Set([
  */
 export async function scanDirectory(dir) {
     const allImports = new Set();
-    await walkDirectory(dir, allImports);
-    return allImports;
-}
-async function walkDirectory(dir, collector) {
-    let entries;
-    try {
-        entries = await fs.readdir(dir, { withFileTypes: true });
-    }
-    catch {
-        return;
-    }
+    const glob = new Bun.Glob("**/*.{ts,tsx,js,jsx,mjs,cjs,mts,cts}");
     const tasks = [];
-    for (const entry of entries) {
-        const entryName = entry.name;
-        if (IGNORED_DIRS.has(entryName))
-            continue;
-        const fullPath = path.join(dir, entryName);
-        if (entry.isDirectory()) {
-            tasks.push(walkDirectory(fullPath, collector));
+    for await (const file of glob.scan(dir)) {
+        // Bun.Glob returns relative paths
+        const fullPath = path.join(dir, file);
+        // Quick check to ignore certain directories in the path
+        if (fullPath.includes("/node_modules/") ||
+            fullPath.includes("/.git/") ||
+            fullPath.includes("/dist/") ||
+            fullPath.includes("/build/") ||
+            fullPath.includes("/out/") ||
+            fullPath.includes("/.next/") ||
+            fullPath.includes("/.nuxt/")) {
             continue;
         }
-        if (!entry.isFile())
-            continue;
-        const ext = path.extname(entryName).toLowerCase();
-        if (!SOURCE_EXTENSIONS.has(ext))
-            continue;
         tasks.push(Bun.file(fullPath)
             .text()
             .then((source) => {
             for (const name of extractImportsFromSource(source)) {
-                collector.add(name);
+                allImports.add(name);
             }
         })
             .catch(() => undefined));
     }
     await Promise.all(tasks);
+    return allImports;
 }

package/dist/core/check.js

@@ -18,7 +18,11 @@ export async function check(options) {
     let registryMs = 0;
     const discoveryStartedAt = Date.now();
     const packageManager = await detectPackageManager(options.cwd);
-    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace);
+    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace, {
+        git: options,
+        includeKinds: options.includeKinds,
+        includeDependents: options.affected === true,
+    });
     discoveryMs += Date.now() - discoveryStartedAt;
     const cache = await VersionCache.create();
     const registryClient = new NpmRegistryClient(options.cwd, {

package/dist/core/init-ci.js

@@ -1,6 +1,6 @@
 import { mkdir } from "node:fs/promises";
 import path from "node:path";
-import { detectPackageManager } from "../pm/detect.js";
+import { buildInstallInvocation, buildTestCommand, createPackageManagerProfile, detectPackageManagerDetails, } from "../pm/detect.js";
 export async function initCiWorkflow(cwd, force, options) {
     const workflowPath = path.join(cwd, ".github", "workflows", "rainy-updates.yml");
     try {
@@ -13,8 +13,8 @@ export async function initCiWorkflow(cwd, force, options) {
     catch {
         // missing file, continue create
     }
-    const detected = await detectPackageManager(cwd);
-    const packageManager = detected === "unknown" || detected === "yarn" ? "npm" : detected;
+    const detected = await detectPackageManagerDetails(cwd);
+    const packageManager = createPackageManagerProfile("auto", detected);
     const scheduleBlock = renderScheduleBlock(options.schedule);
     const workflow = options.mode === "minimal"
         ? minimalWorkflowTemplate(scheduleBlock, packageManager)
@@ -32,32 +32,34 @@ function renderScheduleBlock(schedule) {
     const cron = schedule === "daily" ? "0 8 * * *" : "0 8 * * 1";
     return `  schedule:\n    - cron: '${cron}'\n  workflow_dispatch:`;
 }
-function installStep(packageManager) {
-    if (packageManager === "bun") {
-        return `      - name: Install dependencies\n        run: bun install`;
+function installStep(profile) {
+    const install = buildInstallInvocation(profile, { frozen: true, ci: true });
+    return `      - name: Install dependencies\n        run: ${install.display}`;
+}
+function runtimeSetupSteps(profile) {
+    const lines = [
+        `      - name: Checkout\n        uses: actions/checkout@v4`,
+    ];
+    if (profile.manager !== "bun") {
+        lines.push(`      - name: Setup Node\n        uses: actions/setup-node@v4\n        with:\n          node-version: 22`);
+    }
+    lines.push(`      - name: Setup Bun\n        uses: oven-sh/setup-bun@v1`);
+    if (profile.manager === "pnpm" || profile.manager === "yarn") {
+        lines.push(`      - name: Enable Corepack\n        run: corepack enable`);
     }
-    if (packageManager === "pnpm") {
-        return `      - name: Setup pnpm\n        uses: pnpm/action-setup@v4\n        with:\n          version: 9\n\n      - name: Install dependencies\n        run: pnpm install --frozen-lockfile`;
+    if (profile.manager === "pnpm") {
+        lines.push(`      - name: Prepare pnpm\n        run: corepack prepare pnpm@9 --activate`);
     }
-    return `      - name: Install dependencies\n        run: npm ci`;
+    return lines.join("\n\n");
 }
-function minimalWorkflowTemplate(scheduleBlock, packageManager) {
-    return `name: Rainy Updates\n\non:\n${scheduleBlock}\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout\n        uses: actions/checkout@v4\n\n      - name: Setup Bun\n        uses: oven-sh/setup-bun@v1\n\n${installStep(packageManager)}\n\n      - name: Run dependency check\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode minimal \\\n            --gate check \\\n            --ci \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --format table\n`;
+function minimalWorkflowTemplate(scheduleBlock, profile) {
+    return `name: Rainy Updates\n\non:\n${scheduleBlock}\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    steps:\n${runtimeSetupSteps(profile)}\n\n${installStep(profile)}\n\n      - name: Run dependency check\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode minimal \\\n            --gate check \\\n            --ci \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --format table\n`;
 }
-function strictWorkflowTemplate(scheduleBlock, packageManager) {
-    return `name: Rainy Updates\n\non:\n${scheduleBlock}\n\npermissions:\n  contents: read\n  security-events: write\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    steps:\n      - name: Checkout\n        uses: actions/checkout@v4\n\n      - name: Setup Bun\n        uses: oven-sh/setup-bun@v1\n\n${installStep(packageManager)}\n\n      - name: Warm cache\n        run: bunx --bun @rainy-updates/cli warm-cache --workspace --concurrency 32 --registry-timeout-ms 12000 --registry-retries 4\n\n      - name: Generate reviewed decision plan\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode strict \\\n            --gate review \\\n            --plan-file .artifacts/decision-plan.json \\\n            --ci \\\n            --concurrency 32 \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --format github \\\n            --json-file .artifacts/deps-report.json \\\n            --pr-report-file .artifacts/deps-report.md \\\n            --sarif-file .artifacts/deps-report.sarif \\\n            --github-output $GITHUB_OUTPUT\n\n      - name: Upload report artifacts\n        uses: actions/upload-artifact@v4\n        with:\n          name: rainy-updates-report\n          path: .artifacts/\n\n      - name: Upload SARIF\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: .artifacts/deps-report.sarif\n`;
+function strictWorkflowTemplate(scheduleBlock, profile) {
+    return `name: Rainy Updates\n\non:\n${scheduleBlock}\n\npermissions:\n  contents: read\n  security-events: write\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    steps:\n${runtimeSetupSteps(profile)}\n\n${installStep(profile)}\n\n      - name: Warm cache\n        run: bunx --bun @rainy-updates/cli warm-cache --workspace --concurrency 32 --registry-timeout-ms 12000 --registry-retries 4\n\n      - name: Generate reviewed decision plan\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode strict \\\n            --gate review \\\n            --plan-file .artifacts/decision-plan.json \\\n            --ci \\\n            --concurrency 32 \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --format github \\\n            --json-file .artifacts/deps-report.json \\\n            --pr-report-file .artifacts/deps-report.md \\\n            --sarif-file .artifacts/deps-report.sarif \\\n            --github-output $GITHUB_OUTPUT\n\n      - name: Upload report artifacts\n        uses: actions/upload-artifact@v4\n        with:\n          name: rainy-updates-report\n          path: .artifacts/\n\n      - name: Upload SARIF\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: .artifacts/deps-report.sarif\n`;
 }
-function enterpriseWorkflowTemplate(scheduleBlock, packageManager) {
-    let detectedPmInstall = "npm ci";
-    let testCmd = "npm test";
-    if (packageManager === "pnpm") {
-        detectedPmInstall =
-            "corepack enable && corepack prepare pnpm@9 --activate && pnpm install --frozen-lockfile";
-        testCmd = "pnpm test";
-    }
-    else if (packageManager === "bun") {
-        detectedPmInstall = "bun install";
-        testCmd = "bun test";
-    }
-    return `name: Rainy Updates Enterprise\n\non:\n${scheduleBlock}\n\npermissions:\n  contents: read\n  security-events: write\n  actions: read\n\nconcurrency:\n  group: rainy-updates-\${{ github.ref }}\n  cancel-in-progress: false\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    strategy:\n      fail-fast: false\n      matrix:\n        node: [20, 22]\n    steps:\n      - name: Checkout\n        uses: actions/checkout@v4\n\n      - name: Setup Node\n        uses: actions/setup-node@v4\n        with:\n          node-version: \${{ matrix.node }}\n\n      - name: Setup Bun\n        uses: oven-sh/setup-bun@v1\n\n      - name: Install dependencies\n        run: ${detectedPmInstall}\n\n      - name: Warm cache\n        run: bunx --bun @rainy-updates/cli warm-cache --workspace --concurrency 32 --registry-timeout-ms 12000 --registry-retries 4\n\n      - name: Generate reviewed decision plan\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode enterprise \\\n            --gate review \\\n            --plan-file .artifacts/decision-plan.json \\\n            --concurrency 32 \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --lockfile-mode preserve \\\n            --format github \\\n            --fail-on minor \\\n            --max-updates 50 \\\n            --json-file .artifacts/deps-report-node-\${{ matrix.node }}.json \\\n            --pr-report-file .artifacts/deps-report-node-\${{ matrix.node }}.md \\\n            --sarif-file .artifacts/deps-report-node-\${{ matrix.node }}.sarif \\\n            --github-output $GITHUB_OUTPUT\n\n      - name: Replay approved plan with verification\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode enterprise \\\n            --gate upgrade \\\n            --from-plan .artifacts/decision-plan.json \\\n            --verify test \\\n            --test-command "${testCmd}" \\\n            --verification-report-file .artifacts/verification-node-\${{ matrix.node }}.json\n\n      - name: Upload report artifacts\n        uses: actions/upload-artifact@v4\n        with:\n          name: rainy-updates-report-node-\${{ matrix.node }}\n          path: .artifacts/\n          retention-days: 14\n\n      - name: Upload SARIF\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: .artifacts/deps-report-node-\${{ matrix.node }}.sarif\n`;
+function enterpriseWorkflowTemplate(scheduleBlock, profile) {
+    const install = buildInstallInvocation(profile, { frozen: true, ci: true });
+    const testCmd = buildTestCommand(profile);
+    return `name: Rainy Updates Enterprise\n\non:\n${scheduleBlock}\n\npermissions:\n  contents: read\n  security-events: write\n  actions: read\n\nconcurrency:\n  group: rainy-updates-\${{ github.ref }}\n  cancel-in-progress: false\n\njobs:\n  dependency-check:\n    runs-on: ubuntu-latest\n    strategy:\n      fail-fast: false\n      matrix:\n        node: [20, 22]\n    steps:\n      - name: Checkout\n        uses: actions/checkout@v4\n\n      - name: Setup Node\n        uses: actions/setup-node@v4\n        with:\n          node-version: \${{ matrix.node }}\n\n      - name: Setup Bun\n        uses: oven-sh/setup-bun@v1\n\n${profile.manager === "pnpm" || profile.manager === "yarn" ? '      - name: Enable Corepack\n        run: corepack enable\n\n' : ""}${profile.manager === "pnpm" ? '      - name: Prepare pnpm\n        run: corepack prepare pnpm@9 --activate\n\n' : ""}      - name: Install dependencies\n        run: ${install.display}\n\n      - name: Warm cache\n        run: bunx --bun @rainy-updates/cli warm-cache --workspace --concurrency 32 --registry-timeout-ms 12000 --registry-retries 4\n\n      - name: Generate reviewed decision plan\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode enterprise \\\n            --gate review \\\n            --plan-file .artifacts/decision-plan.json \\\n            --concurrency 32 \\\n            --stream \\\n            --registry-timeout-ms 12000 \\\n            --registry-retries 4 \\\n            --lockfile-mode preserve \\\n            --format github \\\n            --fail-on minor \\\n            --max-updates 50 \\\n            --json-file .artifacts/deps-report-node-\${{ matrix.node }}.json \\\n            --pr-report-file .artifacts/deps-report-node-\${{ matrix.node }}.md \\\n            --sarif-file .artifacts/deps-report-node-\${{ matrix.node }}.sarif \\\n            --github-output $GITHUB_OUTPUT\n\n      - name: Replay approved plan with verification\n        run: |\n          bunx --bun @rainy-updates/cli ci \\\n            --workspace \\\n            --mode enterprise \\\n            --gate upgrade \\\n            --from-plan .artifacts/decision-plan.json \\\n            --verify test \\\n            --test-command "${testCmd}" \\\n            --verification-report-file .artifacts/verification-node-\${{ matrix.node }}.json\n\n      - name: Upload report artifacts\n        uses: actions/upload-artifact@v4\n        with:\n          name: rainy-updates-report-node-\${{ matrix.node }}\n          path: .artifacts/\n          retention-days: 14\n\n      - name: Upload SARIF\n        uses: github/codeql-action/upload-sarif@v3\n        with:\n          sarif_file: .artifacts/deps-report-node-\${{ matrix.node }}.sarif\n`;
 }

package/dist/core/options.d.ts

@@ -1,4 +1,4 @@
-import type { BaselineOptions, CheckOptions, UpgradeOptions, AuditOptions, BisectOptions, HealthOptions, UnusedOptions, ResolveOptions, LicenseOptions, SnapshotOptions, ReviewOptions, DoctorOptions, RiskLevel, DashboardOptions, GaOptions } from "../types/index.js";
+import type { BaselineOptions, CheckOptions, UpgradeOptions, AuditOptions, BisectOptions, HealthOptions, UnusedOptions, ResolveOptions, LicenseOptions, SnapshotOptions, ReviewOptions, DoctorOptions, RiskLevel, DashboardOptions, GaOptions, HookOptions } from "../types/index.js";
 import type { InitCiMode, InitCiSchedule } from "./init-ci.js";
 export type ParsedCliArgs = {
     command: "check";
@@ -58,6 +58,9 @@ export type ParsedCliArgs = {
 } | {
     command: "ga";
     options: GaOptions;
+} | {
+    command: "hook";
+    options: HookOptions;
 };
 export declare function parseCliArgs(argv: string[]): Promise<ParsedCliArgs>;
 export declare function ensureRiskLevel(value: string): RiskLevel;

package/dist/core/options.js

@@ -25,6 +25,7 @@ const KNOWN_COMMANDS = [
     "doctor",
     "dashboard",
     "ga",
+    "hook",
 ];
 export async function parseCliArgs(argv) {
     const firstArg = argv[0];
@@ -82,6 +83,10 @@ export async function parseCliArgs(argv) {
         const { parseGaArgs } = await import("../commands/ga/parser.js");
         return { command, options: parseGaArgs(args) };
     }
+    if (command === "hook") {
+        const { parseHookArgs } = await import("../commands/hook/parser.js");
+        return { command, options: parseHookArgs(args) };
+    }
     const base = {
         cwd: getRuntimeCwd(),
         target: "latest",
@@ -117,6 +122,11 @@ export async function parseCliArgs(argv) {
         cooldownDays: undefined,
         prLimit: undefined,
         onlyChanged: false,
+        affected: false,
+        staged: false,
+        baseRef: undefined,
+        headRef: undefined,
+        sinceRef: undefined,
         ciProfile: "minimal",
         lockfileMode: "preserve",
         interactive: false,
@@ -457,6 +467,38 @@ export async function parseCliArgs(argv) {
             base.onlyChanged = true;
             continue;
         }
+        if (current === "--affected") {
+            base.affected = true;
+            continue;
+        }
+        if (current === "--staged") {
+            base.staged = true;
+            continue;
+        }
+        if (current === "--base" && next) {
+            base.baseRef = next;
+            index += 1;
+            continue;
+        }
+        if (current === "--base") {
+            throw new Error("Missing value for --base");
+        }
+        if (current === "--head" && next) {
+            base.headRef = next;
+            index += 1;
+            continue;
+        }
+        if (current === "--head") {
+            throw new Error("Missing value for --head");
+        }
+        if (current === "--since" && next) {
+            base.sinceRef = next;
+            index += 1;
+            continue;
+        }
+        if (current === "--since") {
+            throw new Error("Missing value for --since");
+        }
         if (current === "--interactive") {
             base.interactive = true;
             continue;
@@ -726,6 +768,21 @@ function applyConfig(base, config) {
     if (typeof config.onlyChanged === "boolean") {
         base.onlyChanged = config.onlyChanged;
     }
+    if (typeof config.affected === "boolean") {
+        base.affected = config.affected;
+    }
+    if (typeof config.staged === "boolean") {
+        base.staged = config.staged;
+    }
+    if (typeof config.baseRef === "string" && config.baseRef.length > 0) {
+        base.baseRef = config.baseRef;
+    }
+    if (typeof config.headRef === "string" && config.headRef.length > 0) {
+        base.headRef = config.headRef;
+    }
+    if (typeof config.sinceRef === "string" && config.sinceRef.length > 0) {
+        base.sinceRef = config.sinceRef;
+    }
     if (typeof config.ciProfile === "string") {
         base.ciProfile = ensureCiProfile(config.ciProfile);
     }

package/dist/core/verification.js

@@ -1,4 +1,4 @@
-import { detectPackageManager, resolvePackageManager } from "../pm/detect.js";
+import { buildInstallInvocation, buildTestCommand, createPackageManagerProfile, detectPackageManagerDetails, } from "../pm/detect.js";
 import { installDependencies } from "../pm/install.js";
 import { stableStringify } from "../utils/stable-json.js";
 import { writeFileAtomic } from "../utils/io.js";
@@ -15,15 +15,17 @@ export async function runVerification(options) {
         return result;
     }
     const checks = [];
-    const detected = await detectPackageManager(options.cwd);
+    const detected = await detectPackageManagerDetails(options.cwd);
+    const profile = createPackageManagerProfile(options.packageManager, detected, "bun");
     if (includesInstall(mode)) {
-        checks.push(await runCheck("install", `${resolvePackageManager(options.packageManager, detected)} install`, async () => {
+        const installInvocation = buildInstallInvocation(profile);
+        checks.push(await runCheck("install", installInvocation.display, async () => {
             await installDependencies(options.cwd, options.packageManager, detected);
         }));
     }
     if (includesTest(mode)) {
         const command = options.testCommand ??
-            defaultTestCommand(options.packageManager, detected);
+            defaultTestCommand(profile);
         checks.push(await runShellCheck(options.cwd, command));
     }
     const result = {
@@ -40,8 +42,8 @@ function includesInstall(mode) {
 function includesTest(mode) {
     return mode === "test" || mode === "install,test";
 }
-function defaultTestCommand(packageManager, detected) {
-    return `${resolvePackageManager(packageManager, detected, "bun")} test`;
+function defaultTestCommand(profile) {
+    return buildTestCommand(profile);
 }
 async function runShellCheck(cwd, command) {
     const startedAt = Date.now();

package/dist/core/warm-cache.js

@@ -14,7 +14,11 @@ export async function warmCache(options) {
     let registryMs = 0;
     const discoveryStartedAt = Date.now();
     const packageManager = await detectPackageManager(options.cwd);
-    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace);
+    const packageDirs = await discoverPackageDirs(options.cwd, options.workspace, {
+        git: options,
+        includeKinds: options.includeKinds,
+        includeDependents: options.affected === true,
+    });
     discoveryMs += Date.now() - discoveryStartedAt;
     const cache = await VersionCache.create();
     const registryClient = new NpmRegistryClient(options.cwd, {

package/dist/generated/version.d.ts

@@ -0,0 +1 @@
+export declare const CLI_VERSION = "0.6.1";

package/dist/generated/version.js

@@ -0,0 +1,2 @@
+// This file is generated by scripts/sync-version.mjs.
+export const CLI_VERSION = "0.6.1";

package/dist/git/scope.d.ts

@@ -0,0 +1,19 @@
+import type { DependencyKind } from "../types/index.js";
+export interface GitScopeOptions {
+    onlyChanged?: boolean;
+    affected?: boolean;
+    staged?: boolean;
+    baseRef?: string;
+    headRef?: string;
+    sinceRef?: string;
+}
+export interface ScopedPackageDirsResult {
+    packageDirs: string[];
+    warnings: string[];
+    changedFiles: string[];
+}
+export declare function hasGitScope(options: GitScopeOptions): boolean;
+export declare function scopePackageDirsByGit(cwd: string, packageDirs: string[], options: GitScopeOptions, config?: {
+    includeKinds?: DependencyKind[];
+    includeDependents?: boolean;
+}): Promise<ScopedPackageDirsResult>;