@swarmdo/cli 1.4.8

package/dist/src/update/executor.js

@@ -0,0 +1,217 @@
+/**
+ * Update executor - performs actual package updates
+ * Includes rollback capability
+ */
+import { execFileSync } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import { validateUpdate } from './validator.js';
+/**
+ * audit_1776853149979: package name and version come from npm-view output and
+ * the update-history.json file (writable by anyone with FS access). Both
+ * previously interpolated straight into a shell string for `npm install`.
+ * These regexes pre-flight values so a hostile package name can't slip
+ * shell metacharacters through, even though execFileSync below already
+ * eliminates the shell.
+ */
+// First char of the unscoped name forbids `-` to defang CLI-flag confusion
+// when the spec is passed to npm (npm install -evil@1.0.0 looks flag-shaped).
+const SAFE_PKG_RE = /^(@[a-zA-Z0-9_\-]+\/)?[a-zA-Z0-9_][a-zA-Z0-9_\-.]{0,213}$/;
+// semver / dist-tag / range chars only — no shell metas.
+const SAFE_VERSION_RE = /^[a-zA-Z0-9._\-+~^*xX]{1,64}$/;
+export function isSafePackageSpec(pkg, version) {
+    return SAFE_PKG_RE.test(pkg) && SAFE_VERSION_RE.test(version);
+}
+const HISTORY_FILE = path.join(os.homedir(), '.swarmdo', 'update-history.json');
+const MAX_HISTORY_ENTRIES = 100;
+function ensureDir() {
+    const dir = path.dirname(HISTORY_FILE);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+export function loadHistory() {
+    try {
+        if (fs.existsSync(HISTORY_FILE)) {
+            const content = fs.readFileSync(HISTORY_FILE, 'utf-8');
+            return JSON.parse(content);
+        }
+    }
+    catch {
+        // Corrupted file
+    }
+    return [];
+}
+function saveHistory(history) {
+    ensureDir();
+    // Keep only last N entries
+    const trimmed = history.slice(-MAX_HISTORY_ENTRIES);
+    fs.writeFileSync(HISTORY_FILE, JSON.stringify(trimmed, null, 2));
+}
+function recordUpdate(entry) {
+    const history = loadHistory();
+    history.push(entry);
+    saveHistory(history);
+}
+export async function executeUpdate(update, installedPackages, dryRun = false) {
+    // Validate first
+    const validation = validateUpdate(update.package, update.currentVersion, update.latestVersion, installedPackages);
+    if (!validation.valid) {
+        return {
+            success: false,
+            package: update.package,
+            version: update.latestVersion,
+            error: `Validation failed: ${validation.incompatibilities.join(', ')}`,
+            validation,
+        };
+    }
+    if (dryRun) {
+        return {
+            success: true,
+            package: update.package,
+            version: update.latestVersion,
+            validation,
+        };
+    }
+    // audit_1776853149979: validate package + version regex before any exec.
+    if (!isSafePackageSpec(update.package, update.latestVersion)) {
+        return {
+            success: false,
+            package: update.package,
+            version: update.latestVersion,
+            error: `Refusing to install: package or version contains disallowed characters (pkg="${update.package}", version="${update.latestVersion}")`,
+            validation,
+        };
+    }
+    try {
+        // audit_1776853149979: switched to execFileSync('npm', argv) — no shell,
+        // so even if validation regressed, metas in update.package would stay
+        // literal in the argv slot.
+        execFileSync('npm', ['install', `${update.package}@${update.latestVersion}`, '--save-exact'], {
+            encoding: 'utf-8',
+            stdio: 'pipe',
+            timeout: 60000, // 1 minute timeout
+            shell: false,
+        });
+        // Record successful update
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: update.package,
+            fromVersion: update.currentVersion,
+            toVersion: update.latestVersion,
+            success: true,
+            rollbackAvailable: true,
+        });
+        return {
+            success: true,
+            package: update.package,
+            version: update.latestVersion,
+            validation,
+        };
+    }
+    catch (error) {
+        const err = error;
+        // Record failed update
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: update.package,
+            fromVersion: update.currentVersion,
+            toVersion: update.latestVersion,
+            success: false,
+            error: err.message,
+            rollbackAvailable: false,
+        });
+        return {
+            success: false,
+            package: update.package,
+            version: update.latestVersion,
+            error: err.message,
+            validation,
+        };
+    }
+}
+export async function executeMultipleUpdates(updates, installedPackages, dryRun = false) {
+    const results = [];
+    // Execute updates sequentially to avoid conflicts
+    for (const update of updates) {
+        const result = await executeUpdate(update, installedPackages, dryRun);
+        results.push(result);
+        // Update installed packages for next validation
+        if (result.success) {
+            installedPackages[update.package] = update.latestVersion;
+        }
+        // Stop on critical failures
+        if (!result.success && update.priority === 'critical') {
+            break;
+        }
+    }
+    return results;
+}
+export async function rollbackUpdate(packageName) {
+    const history = loadHistory();
+    if (history.length === 0) {
+        return { success: false, message: 'No update history available' };
+    }
+    // Find the last successful update for this package (or any if not specified)
+    const lastUpdate = packageName
+        ? history
+            .reverse()
+            .find((h) => h.package === packageName && h.success && h.rollbackAvailable)
+        : history.reverse().find((h) => h.success && h.rollbackAvailable);
+    if (!lastUpdate) {
+        return {
+            success: false,
+            message: packageName
+                ? `No rollback available for ${packageName}`
+                : 'No rollback available',
+        };
+    }
+    // audit_1776853149979: history entries can be tampered with by anyone who
+    // can write update-history.json — gate before exec.
+    if (!isSafePackageSpec(lastUpdate.package, lastUpdate.fromVersion)) {
+        return {
+            success: false,
+            message: `Refusing to rollback: package or version contains disallowed characters (pkg="${lastUpdate.package}", version="${lastUpdate.fromVersion}")`,
+        };
+    }
+    try {
+        // execFileSync, no shell.
+        execFileSync('npm', ['install', `${lastUpdate.package}@${lastUpdate.fromVersion}`, '--save-exact'], {
+            encoding: 'utf-8',
+            stdio: 'pipe',
+            timeout: 60000,
+            shell: false,
+        });
+        // Record the rollback
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: lastUpdate.package,
+            fromVersion: lastUpdate.toVersion,
+            toVersion: lastUpdate.fromVersion,
+            success: true,
+            rollbackAvailable: false, // Can't rollback a rollback
+        });
+        return {
+            success: true,
+            message: `Rolled back ${lastUpdate.package} from ${lastUpdate.toVersion} to ${lastUpdate.fromVersion}`,
+        };
+    }
+    catch (error) {
+        const err = error;
+        return {
+            success: false,
+            message: `Rollback failed: ${err.message}`,
+        };
+    }
+}
+export function getUpdateHistory(limit = 20) {
+    const history = loadHistory();
+    return history.slice(-limit).reverse();
+}
+export function clearHistory() {
+    if (fs.existsSync(HISTORY_FILE)) {
+        fs.unlinkSync(HISTORY_FILE);
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/src/update/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../../src/update/executor.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAoB,MAAM,gBAAgB,CAAC;AAElE;;;;;;;GAOG;AACH,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,WAAW,GAAG,2DAA2D,CAAC;AAChF,yDAAyD;AACzD,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAExD,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAe;IAC5D,OAAO,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChE,CAAC;AAoBD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;AAChF,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACvD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAyB,CAAC;QACrD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,OAA6B;IAChD,SAAS,EAAE,CAAC;IACZ,2BAA2B;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB;IAC7C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,WAAW,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAyB,EACzB,iBAAyC,EACzC,MAAM,GAAG,KAAK;IAEd,iBAAiB;IACjB,MAAM,UAAU,GAAG,cAAc,CAC/B,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,aAAa,EACpB,iBAAiB,CAClB,CAAC;IAEF,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACtB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,KAAK,EAAE,sBAAsB,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtE,UAAU;SACX,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,UAAU;SACX,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,KAAK,EAAE,gFAAgF,MAAM,CAAC,OAAO,eAAe,MAAM,CAAC,aAAa,IAAI;YAC5I,UAAU;SACX,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,yEAAyE;QACzE,sEAAsE;QACtE,4BAA4B;QAC5B,YAAY,CACV,KAAK,EACL,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,cAAc,CAAC,EACxE;YACE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,KAAK,EAAE,mBAAmB;YACnC,KAAK,EAAE,KAAK;SACb,CACF,CAAC;QAEF,2BAA2B;QAC3B,YAAY,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,cAAc;YAClC,SAAS,EAAE,MAAM,CAAC,aAAa;YAC/B,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,UAAU;SACX,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAE3B,uBAAuB;QACvB,YAAY,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,cAAc;YAClC,SAAS,EAAE,MAAM,CAAC,aAAa;YAC/B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,iBAAiB,EAAE,KAAK;SACzB,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,OAAO,EAAE,MAAM,CAAC,aAAa;YAC7B,KAAK,EAAE,GAAG,CAAC,OAAO;YAClB,UAAU;SACX,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAA4B,EAC5B,iBAAyC,EACzC,MAAM,GAAG,KAAK;IAEd,MAAM,OAAO,GAA4B,EAAE,CAAC;IAE5C,kDAAkD;IAClD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAErB,gDAAgD;QAChD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3D,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM;QACR,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAE9B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IACpE,CAAC;IAED,6EAA6E;IAC7E,MAAM,UAAU,GAAG,WAAW;QAC5B,CAAC,CAAC,OAAO;aACJ,OAAO,EAAE;aACT,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC;QAC/E,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAEpE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,WAAW;gBAClB,CAAC,CAAC,6BAA6B,WAAW,EAAE;gBAC5C,CAAC,CAAC,uBAAuB;SAC5B,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,iFAAiF,UAAU,CAAC,OAAO,eAAe,UAAU,CAAC,WAAW,IAAI;SACtJ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,0BAA0B;QAC1B,YAAY,CACV,KAAK,EACL,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,OAAO,IAAI,UAAU,CAAC,WAAW,EAAE,EAAE,cAAc,CAAC,EAC9E;YACE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK;SACb,CACF,CAAC;QAEF,sBAAsB;QACtB,YAAY,CAAC;YACX,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,WAAW,EAAE,UAAU,CAAC,SAAS;YACjC,SAAS,EAAE,UAAU,CAAC,WAAW;YACjC,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,KAAK,EAAE,4BAA4B;SACvD,CAAC,CAAC;QAEH,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,eAAe,UAAU,CAAC,OAAO,SAAS,UAAU,CAAC,SAAS,OAAO,UAAU,CAAC,WAAW,EAAE;SACvG,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,oBAAoB,GAAG,CAAC,OAAO,EAAE;SAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAK,GAAG,EAAE;IACzC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/src/update/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Auto-update system for @swarmdo packages
+ *
+ * Features:
+ * - Rate-limited update checks (24h default)
+ * - Automatic patch updates for security packages
+ * - Compatibility validation before updates
+ * - Rollback capability
+ * - Update history logging
+ */
+export { checkForUpdates, checkSinglePackage, getInstalledVersion, DEFAULT_CONFIG, } from './checker.js';
+export type { UpdateCheckResult, UpdateConfig } from './checker.js';
+export { shouldCheckForUpdates, recordCheck, getCachedVersions, clearCache, loadState, } from './rate-limiter.js';
+export type { RateLimitState } from './rate-limiter.js';
+export { validateUpdate, validateBulkUpdate } from './validator.js';
+export type { ValidationResult } from './validator.js';
+export { executeUpdate, executeMultipleUpdates, rollbackUpdate, getUpdateHistory, clearHistory, loadHistory, } from './executor.js';
+export type { UpdateHistoryEntry, UpdateExecutionResult } from './executor.js';
+import type { UpdateCheckResult } from './checker.js';
+/**
+ * Run auto-update check on startup
+ * This is the main entry point for the auto-update system
+ */
+export declare function runStartupUpdateCheck(options: {
+    verbose?: boolean;
+    autoUpdate?: boolean;
+}): Promise<{
+    checked: boolean;
+    updatesAvailable: UpdateCheckResult[];
+    updatesApplied: string[];
+    skippedReason?: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/update/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/update/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAI/E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAItD;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,EAAE,iBAAiB,EAAE,CAAC;IACtC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAkDD"}

package/dist/src/update/index.js

@@ -0,0 +1,64 @@
+/**
+ * Auto-update system for @swarmdo packages
+ *
+ * Features:
+ * - Rate-limited update checks (24h default)
+ * - Automatic patch updates for security packages
+ * - Compatibility validation before updates
+ * - Rollback capability
+ * - Update history logging
+ */
+export { checkForUpdates, checkSinglePackage, getInstalledVersion, DEFAULT_CONFIG, } from './checker.js';
+export { shouldCheckForUpdates, recordCheck, getCachedVersions, clearCache, loadState, } from './rate-limiter.js';
+export { validateUpdate, validateBulkUpdate } from './validator.js';
+export { executeUpdate, executeMultipleUpdates, rollbackUpdate, getUpdateHistory, clearHistory, loadHistory, } from './executor.js';
+// Re-export a convenience function for startup
+import { checkForUpdates, DEFAULT_CONFIG } from './checker.js';
+import { executeMultipleUpdates } from './executor.js';
+import { getInstalledVersion } from './checker.js';
+/**
+ * Run auto-update check on startup
+ * This is the main entry point for the auto-update system
+ */
+export async function runStartupUpdateCheck(options) {
+    const result = {
+        checked: false,
+        updatesAvailable: [],
+        updatesApplied: [],
+        skippedReason: undefined,
+    };
+    try {
+        const { results, skipped, reason } = await checkForUpdates(DEFAULT_CONFIG);
+        if (skipped) {
+            result.skippedReason = reason;
+            return result;
+        }
+        result.checked = true;
+        result.updatesAvailable = results;
+        // Auto-update if enabled
+        if (options.autoUpdate !== false) {
+            const autoUpdateable = results.filter((r) => r.shouldAutoUpdate);
+            if (autoUpdateable.length > 0) {
+                // Get current installed packages
+                const installedPackages = {};
+                for (const update of autoUpdateable) {
+                    const version = getInstalledVersion(update.package);
+                    if (version) {
+                        installedPackages[update.package] = version;
+                    }
+                }
+                // Execute updates
+                const updateResults = await executeMultipleUpdates(autoUpdateable, installedPackages);
+                result.updatesApplied = updateResults
+                    .filter((r) => r.success)
+                    .map((r) => `${r.package}@${r.version}`);
+            }
+        }
+        return result;
+    }
+    catch {
+        // Silently fail on startup - don't block CLI usage
+        return result;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/src/update/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/update/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,cAAc,GACf,MAAM,cAAc,CAAC;AAItB,OAAO,EACL,qBAAqB,EACrB,WAAW,EACX,iBAAiB,EACjB,UAAU,EACV,SAAS,GACV,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAIpE,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACZ,MAAM,eAAe,CAAC;AAIvB,+CAA+C;AAC/C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAG3C;IAMC,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,EAAyB;QAC3C,cAAc,EAAE,EAAc;QAC9B,aAAa,EAAE,SAA+B;KAC/C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;QAE3E,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,MAAM,CAAC,gBAAgB,GAAG,OAAO,CAAC;QAElC,yBAAyB;QACzB,IAAI,OAAO,CAAC,UAAU,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAEjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,iCAAiC;gBACjC,MAAM,iBAAiB,GAA2B,EAAE,CAAC;gBACrD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpD,IAAI,OAAO,EAAE,CAAC;wBACZ,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;oBAC9C,CAAC;gBACH,CAAC;gBAED,kBAAkB;gBAClB,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAChD,cAAc,EACd,iBAAiB,CAClB,CAAC;gBAEF,MAAM,CAAC,cAAc,GAAG,aAAa;qBAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;qBACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/src/update/rate-limiter.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Rate limiter for update checks
+ * Prevents excessive npm registry queries
+ */
+export interface RateLimitState {
+    lastCheck: string;
+    checksToday: number;
+    date: string;
+    packageVersions: Record<string, string>;
+}
+export declare function loadState(): RateLimitState;
+export declare function saveState(state: RateLimitState): void;
+export declare function shouldCheckForUpdates(intervalHours?: number): {
+    allowed: boolean;
+    reason?: string;
+};
+export declare function recordCheck(packageVersions: Record<string, string>): void;
+export declare function getCachedVersions(): Record<string, string>;
+export declare function clearCache(): void;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/dist/src/update/rate-limiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.d.ts","sourceRoot":"","sources":["../../../src/update/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAsBD,wBAAgB,SAAS,IAAI,cAAc,CAmB1C;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAGrD;AAED,wBAAgB,qBAAqB,CACnC,aAAa,GAAE,MAA+B,GAC7C;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAuCvC;AAED,wBAAgB,WAAW,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAMzE;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE1D;AAED,wBAAgB,UAAU,IAAI,IAAI,CAIjC"}

package/dist/src/update/rate-limiter.js

@@ -0,0 +1,96 @@
+/**
+ * Rate limiter for update checks
+ * Prevents excessive npm registry queries
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+const STATE_FILE = path.join(os.homedir(), '.swarmdo', 'update-state.json');
+const DEFAULT_INTERVAL_HOURS = 24;
+const MAX_CHECKS_PER_DAY = 10;
+function ensureDir() {
+    const dir = path.dirname(STATE_FILE);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+function getDefaultState() {
+    return {
+        lastCheck: '',
+        checksToday: 0,
+        date: new Date().toISOString().split('T')[0],
+        packageVersions: {},
+    };
+}
+export function loadState() {
+    try {
+        if (fs.existsSync(STATE_FILE)) {
+            const content = fs.readFileSync(STATE_FILE, 'utf-8');
+            const state = JSON.parse(content);
+            // Reset counter if new day
+            const today = new Date().toISOString().split('T')[0];
+            if (state.date !== today) {
+                state.date = today;
+                state.checksToday = 0;
+            }
+            return state;
+        }
+    }
+    catch {
+        // Corrupted file, reset
+    }
+    return getDefaultState();
+}
+export function saveState(state) {
+    ensureDir();
+    fs.writeFileSync(STATE_FILE, JSON.stringify(state, null, 2));
+}
+export function shouldCheckForUpdates(intervalHours = DEFAULT_INTERVAL_HOURS) {
+    // Skip in CI environments
+    if (process.env.CI === 'true' || process.env.CONTINUOUS_INTEGRATION === 'true') {
+        return { allowed: false, reason: 'CI environment detected' };
+    }
+    // Skip if explicitly disabled
+    if (process.env.SWARMDO_AUTO_UPDATE === 'false') {
+        return { allowed: false, reason: 'Auto-update disabled via environment' };
+    }
+    // Force update if requested
+    if (process.env.SWARMDO_FORCE_UPDATE === 'true') {
+        return { allowed: true };
+    }
+    const state = loadState();
+    // Check daily limit
+    if (state.checksToday >= MAX_CHECKS_PER_DAY) {
+        return { allowed: false, reason: `Daily check limit (${MAX_CHECKS_PER_DAY}) reached` };
+    }
+    // Check time interval
+    if (state.lastCheck) {
+        const lastCheckTime = new Date(state.lastCheck).getTime();
+        const now = Date.now();
+        const hoursSinceLastCheck = (now - lastCheckTime) / (1000 * 60 * 60);
+        if (hoursSinceLastCheck < intervalHours) {
+            const nextCheck = Math.ceil(intervalHours - hoursSinceLastCheck);
+            return {
+                allowed: false,
+                reason: `Last check was ${Math.floor(hoursSinceLastCheck)}h ago (next check in ~${nextCheck}h)`
+            };
+        }
+    }
+    return { allowed: true };
+}
+export function recordCheck(packageVersions) {
+    const state = loadState();
+    state.lastCheck = new Date().toISOString();
+    state.checksToday += 1;
+    state.packageVersions = { ...state.packageVersions, ...packageVersions };
+    saveState(state);
+}
+export function getCachedVersions() {
+    return loadState().packageVersions;
+}
+export function clearCache() {
+    if (fs.existsSync(STATE_FILE)) {
+        fs.unlinkSync(STATE_FILE);
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map

package/dist/src/update/rate-limiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.js","sourceRoot":"","sources":["../../../src/update/rate-limiter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AASzB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,mBAAmB,CAAC,CAAC;AAC5E,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,SAAS;IAChB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,CAAC;QACd,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5C,eAAe,EAAE,EAAE;KACpB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC;YAEpD,2BAA2B;YAC3B,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACzB,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;gBACnB,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wBAAwB;IAC1B,CAAC;IACD,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAqB;IAC7C,SAAS,EAAE,CAAC;IACZ,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,gBAAwB,sBAAsB;IAE9C,0BAA0B;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,MAAM,EAAE,CAAC;QAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC/D,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,OAAO,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;IAC5E,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAE1B,oBAAoB;IACpB,IAAI,KAAK,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,kBAAkB,WAAW,EAAE,CAAC;IACzF,CAAC;IAED,sBAAsB;IACtB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,mBAAmB,GAAG,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAErE,IAAI,mBAAmB,GAAG,aAAa,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,GAAG,mBAAmB,CAAC,CAAC;YACjE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,kBAAkB,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,yBAAyB,SAAS,IAAI;aAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,eAAuC;IACjE,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,KAAK,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;IACvB,KAAK,CAAC,eAAe,GAAG,EAAE,GAAG,KAAK,CAAC,eAAe,EAAE,GAAG,eAAe,EAAE,CAAC;IACzE,SAAS,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,SAAS,EAAE,CAAC,eAAe,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/src/update/validator.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Package validator for update compatibility
+ * Ensures updates don't break the ecosystem
+ */
+export interface ValidationResult {
+    valid: boolean;
+    incompatibilities: string[];
+    warnings: string[];
+    requiredPeerUpdates: string[];
+}
+export declare function validateUpdate(packageName: string, fromVersion: string, toVersion: string, installedPackages: Record<string, string>): ValidationResult;
+export declare function validateBulkUpdate(updates: Array<{
+    package: string;
+    from: string;
+    to: string;
+}>, currentPackages: Record<string, string>): ValidationResult;
+//# sourceMappingURL=validator.d.ts.map

package/dist/src/update/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../../src/update/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAyCD,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACxC,gBAAgB,CA6ElB;AAED,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,EAC7D,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACtC,gBAAgB,CAsClB"}

package/dist/src/update/validator.js

@@ -0,0 +1,123 @@
+/**
+ * Package validator for update compatibility
+ * Ensures updates don't break the ecosystem
+ */
+import * as semver from 'semver';
+// Known compatibility matrix between @swarmdo packages
+const COMPATIBILITY_MATRIX = {
+    '@swarmdo/cli': {
+        '@swarmdo/embeddings': { minVersion: '3.0.0-alpha.1' },
+        '@swarmdo/security': { minVersion: '3.0.0-alpha.1' },
+        '@swarmdo/integration': { minVersion: '3.0.0-alpha.1' },
+    },
+    '@swarmdo/embeddings': {
+        '@swarmdo/cli': { minVersion: '3.0.0-alpha.50' },
+    },
+    '@swarmdo/integration': {
+        '@swarmdo/cli': { minVersion: '3.0.0-alpha.70' },
+        'agentic-flow': { minVersion: '3.0.0-alpha.1' },
+    },
+};
+// Known breaking changes by version
+const BREAKING_CHANGES = {
+    '@swarmdo/cli': {
+        '3.0.0': [
+            'Memory API changed from key-value to vector-based',
+            'Hooks system completely redesigned',
+            'Agent spawning now requires type parameter',
+        ],
+    },
+    '@swarmdo/embeddings': {
+        '3.0.0': [
+            'Switched from better-sqlite3 to sql.js',
+            'New initialization required with initEmbeddings()',
+        ],
+    },
+};
+export function validateUpdate(packageName, fromVersion, toVersion, installedPackages) {
+    const result = {
+        valid: true,
+        incompatibilities: [],
+        warnings: [],
+        requiredPeerUpdates: [],
+    };
+    // Check if this is a major version bump
+    if (semver.valid(fromVersion) && semver.valid(toVersion)) {
+        const fromMajor = semver.major(fromVersion);
+        const toMajor = semver.major(toVersion);
+        if (toMajor > fromMajor) {
+            result.warnings.push(`Major version update (${fromMajor} → ${toMajor}) may contain breaking changes`);
+            // Check for known breaking changes
+            const changes = BREAKING_CHANGES[packageName]?.[`${toMajor}.0.0`];
+            if (changes) {
+                result.warnings.push(`Known breaking changes in v${toMajor}:`);
+                changes.forEach((change) => result.warnings.push(`  - ${change}`));
+            }
+        }
+    }
+    // Check compatibility with installed packages
+    const compatibility = COMPATIBILITY_MATRIX[packageName];
+    if (compatibility) {
+        for (const [depName, depReq] of Object.entries(compatibility)) {
+            const installedVersion = installedPackages[depName];
+            if (installedVersion) {
+                // Check minimum version
+                if (semver.valid(installedVersion) &&
+                    semver.lt(installedVersion, depReq.minVersion)) {
+                    result.incompatibilities.push(`${packageName}@${toVersion} requires ${depName} >= ${depReq.minVersion} (installed: ${installedVersion})`);
+                    result.requiredPeerUpdates.push(`${depName}@>=${depReq.minVersion}`);
+                    result.valid = false;
+                }
+                // Check maximum version
+                if (depReq.maxVersion &&
+                    semver.valid(installedVersion) &&
+                    semver.gt(installedVersion, depReq.maxVersion)) {
+                    result.warnings.push(`${packageName}@${toVersion} may not be compatible with ${depName}@${installedVersion} (max: ${depReq.maxVersion})`);
+                }
+            }
+        }
+    }
+    // Check reverse compatibility - other packages that depend on this one
+    for (const [pkgName, deps] of Object.entries(COMPATIBILITY_MATRIX)) {
+        if (pkgName === packageName)
+            continue;
+        const depInfo = deps[packageName];
+        if (depInfo && installedPackages[pkgName]) {
+            // If the target version is below what the installed package needs
+            if (semver.valid(toVersion) && semver.lt(toVersion, depInfo.minVersion)) {
+                result.incompatibilities.push(`${pkgName}@${installedPackages[pkgName]} requires ${packageName} >= ${depInfo.minVersion}`);
+                result.valid = false;
+            }
+        }
+    }
+    return result;
+}
+export function validateBulkUpdate(updates, currentPackages) {
+    const combinedResult = {
+        valid: true,
+        incompatibilities: [],
+        warnings: [],
+        requiredPeerUpdates: [],
+    };
+    // Create a simulated state after all updates
+    const simulatedPackages = { ...currentPackages };
+    for (const update of updates) {
+        simulatedPackages[update.package] = update.to;
+    }
+    // Validate each update against the final state
+    for (const update of updates) {
+        const result = validateUpdate(update.package, update.from, update.to, simulatedPackages);
+        if (!result.valid) {
+            combinedResult.valid = false;
+        }
+        combinedResult.incompatibilities.push(...result.incompatibilities);
+        combinedResult.warnings.push(...result.warnings);
+        combinedResult.requiredPeerUpdates.push(...result.requiredPeerUpdates);
+    }
+    // Deduplicate
+    combinedResult.incompatibilities = [...new Set(combinedResult.incompatibilities)];
+    combinedResult.warnings = [...new Set(combinedResult.warnings)];
+    combinedResult.requiredPeerUpdates = [...new Set(combinedResult.requiredPeerUpdates)];
+    return combinedResult;
+}
+//# sourceMappingURL=validator.js.map

package/dist/src/update/validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/update/validator.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAejC,uDAAuD;AACvD,MAAM,oBAAoB,GAAyD;IACjF,cAAc,EAAE;QACd,qBAAqB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;QACtD,mBAAmB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;QACpD,sBAAsB,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;KACxD;IACD,qBAAqB,EAAE;QACrB,cAAc,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;KACjD;IACD,sBAAsB,EAAE;QACtB,cAAc,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE;QAChD,cAAc,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE;KAChD;CACF,CAAC;AAEF,oCAAoC;AACpC,MAAM,gBAAgB,GAA6C;IACjE,cAAc,EAAE;QACd,OAAO,EAAE;YACP,mDAAmD;YACnD,oCAAoC;YACpC,4CAA4C;SAC7C;KACF;IACD,qBAAqB,EAAE;QACrB,OAAO,EAAE;YACP,wCAAwC;YACxC,mDAAmD;SACpD;KACF;CACF,CAAC;AAEF,MAAM,UAAU,cAAc,CAC5B,WAAmB,EACnB,WAAmB,EACnB,SAAiB,EACjB,iBAAyC;IAEzC,MAAM,MAAM,GAAqB;QAC/B,KAAK,EAAE,IAAI;QACX,iBAAiB,EAAE,EAAE;QACrB,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,EAAE;KACxB,CAAC;IAEF,wCAAwC;IACxC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAExC,IAAI,OAAO,GAAG,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,yBAAyB,SAAS,MAAM,OAAO,gCAAgC,CAChF,CAAC;YAEF,mCAAmC;YACnC,MAAM,OAAO,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,OAAO,MAAM,CAAC,CAAC;YAClE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,8BAA8B,OAAO,GAAG,CAAC,CAAC;gBAC/D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,aAAa,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC9D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;YAEpD,IAAI,gBAAgB,EAAE,CAAC;gBACrB,wBAAwB;gBACxB,IACE,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBAC9B,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAC9C,CAAC;oBACD,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC3B,GAAG,WAAW,IAAI,SAAS,aAAa,OAAO,OAAO,MAAM,CAAC,UAAU,gBAAgB,gBAAgB,GAAG,CAC3G,CAAC;oBACF,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBACrE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;gBACvB,CAAC;gBAED,wBAAwB;gBACxB,IACE,MAAM,CAAC,UAAU;oBACjB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBAC9B,MAAM,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,EAC9C,CAAC;oBACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAClB,GAAG,WAAW,IAAI,SAAS,+BAA+B,OAAO,IAAI,gBAAgB,UAAU,MAAM,CAAC,UAAU,GAAG,CACpH,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACnE,IAAI,OAAO,KAAK,WAAW;YAAE,SAAS;QAEtC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,IAAI,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,kEAAkE;YAClE,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAC3B,GAAG,OAAO,IAAI,iBAAiB,CAAC,OAAO,CAAC,aAAa,WAAW,OAAO,OAAO,CAAC,UAAU,EAAE,CAC5F,CAAC;gBACF,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,OAA6D,EAC7D,eAAuC;IAEvC,MAAM,cAAc,GAAqB;QACvC,KAAK,EAAE,IAAI;QACX,iBAAiB,EAAE,EAAE;QACrB,QAAQ,EAAE,EAAE;QACZ,mBAAmB,EAAE,EAAE;KACxB,CAAC;IAEF,6CAA6C;IAC7C,MAAM,iBAAiB,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;IAChD,CAAC;IAED,+CAA+C;IAC/C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,cAAc,CAC3B,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,EAAE,EACT,iBAAiB,CAClB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,cAAc,CAAC,KAAK,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,cAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACnE,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,cAAc,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC;IAED,cAAc;IACd,cAAc,CAAC,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClF,cAAc,CAAC,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,cAAc,CAAC,mBAAmB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAEtF,OAAO,cAAc,CAAC;AACxB,CAAC"}