@tractorcow/beefup 0.0.0 → 1.0.0

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2025 Damian Mooyman
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,108 @@
+# @tractorcow/beefup
+
+CLI for **staged, pinned, audited** npm/pnpm dependency upgrades. A proposed upgrade is written to `.beefup/staged` for review; nothing is applied to the live project until a later accept step.
+
+## Prerequisites
+
+- Node.js 22+
+- [pnpm](https://pnpm.io/) 11.22.0 (see `packageManager` in `package.json`) or npm 12+
+- Git
+- [Aikido Safe Chain](https://github.com/AikidoSec/safe-chain) wrapping the package manager
+
+Beefup **will not run** unless Safe Chain is enabled. It looks for `aikido-pnpm` / `aikido-npm`, or `safe-chain`, on `PATH`. That keeps lockfile updates and security scans behind Safe Chain’s malware checks and minimum package age.
+
+### Install Safe Chain
+
+Unix / macOS / Linux (pinned release + installer checksum):
+
+```sh
+curl -fsSL https://github.com/AikidoSec/safe-chain/releases/download/1.5.15/install-safe-chain.sh -o /tmp/install-safe-chain.sh \
+  && echo "de0565e3d6346407a604e84e639e95fea8758748063da2216bbfdca5feda5dd2  /tmp/install-safe-chain.sh" | sha256sum -c - \
+  && sh /tmp/install-safe-chain.sh \
+  && rm /tmp/install-safe-chain.sh
+```
+
+On macOS without `sha256sum`, use `shasum -a 256 -c -` instead of `sha256sum -c -`.
+
+Then **restart your shell** and verify:
+
+```sh
+pnpm safe-chain-verify
+# or: npm safe-chain-verify
+```
+
+You should see `OK: Safe-chain works!`.
+
+If `pnpm` is already installed, check that its global bin directory is on `PATH`:
+
+```sh
+pnpm bin -g
+```
+
+If that command reports the directory is missing from `PATH`, run `pnpm setup` and restart the shell.
+
+## Install
+
+```sh
+pnpm add --global @tractorcow/beefup
+# or: npm install --global @tractorcow/beefup
+```
+
+Confirm:
+
+```sh
+beefup --version
+beefup --help
+```
+
+### From a git checkout (development)
+
+```sh
+git clone git@github.com:tractorcow/beefup.git
+cd beefup
+pnpm install --frozen-lockfile
+pnpm run build
+pnpm add --global .
+```
+
+Or from the repo root: `make install && make install-global`.
+
+## Update
+
+```sh
+pnpm add --global @tractorcow/beefup@latest
+# or: npm install --global @tractorcow/beefup@latest
+```
+
+From a git checkout:
+
+```sh
+cd /path/to/beefup
+git pull
+pnpm install --frozen-lockfile
+pnpm run build
+pnpm add --global .
+```
+
+Or: `git pull && make install && make install-global`.
+
+## Uninstall
+
+```sh
+pnpm remove --global @tractorcow/beefup
+# or: npm uninstall --global @tractorcow/beefup
+```
+
+Or: `make uninstall-global`.
+
+## Usage
+
+See [docs/index.md](docs/index.md), [staging](docs/stage.md), and [accept](docs/accept.md).
+
+```sh
+beefup stage
+beefup stage --mode latest --strategy inplace
+beefup stage --format html
+beefup report
+beefup accept
+```

package/dist/__tests__/with-safe-chain-stubs.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Puts stub `aikido-pnpm` / `aikido-npm` binaries on PATH for the duration of `fn`.
+ * Production code only needs `which` to succeed; ProcessRunner mocks handle execution.
+ */
+export declare function withSafeChainStubs<T>(fn: () => Promise<T>): Promise<T>;

package/dist/__tests__/with-safe-chain-stubs.js

@@ -0,0 +1,25 @@
+import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+/**
+ * Puts stub `aikido-pnpm` / `aikido-npm` binaries on PATH for the duration of `fn`.
+ * Production code only needs `which` to succeed; ProcessRunner mocks handle execution.
+ */
+export async function withSafeChainStubs(fn) {
+    const dir = await mkdtemp(path.join(os.tmpdir(), "beefup-sc-stub-"));
+    const previous = process.env.PATH;
+    try {
+        for (const name of ["aikido-pnpm", "aikido-npm", "safe-chain"]) {
+            const stub = path.join(dir, name);
+            await writeFile(stub, "#!/bin/sh\nexit 0\n", "utf8");
+            await chmod(stub, 0o755);
+        }
+        process.env.PATH = `${dir}${path.delimiter}${previous ?? ""}`;
+        return await fn();
+    }
+    finally {
+        process.env.PATH = previous;
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=with-safe-chain-stubs.js.map

package/dist/__tests__/with-safe-chain-stubs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"with-safe-chain-stubs.js","sourceRoot":"","sources":["../../src/__tests__/with-safe-chain-stubs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAI,EAAoB;IAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAU,EAAE,CAAC;YACxE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,SAAS,CAAC,IAAI,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC9D,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/bin.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/bin.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import { main } from "./cli/main.js";
+main().then((code) => {
+    process.exit(code);
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAErC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;IACnB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC"}

package/dist/cli/args.d.ts

@@ -0,0 +1,18 @@
+import { type ReportFormat, type StageStrategyName, type UpgradeMode } from "../config/types.js";
+export interface CliArgs {
+    command?: string;
+    mode?: UpgradeMode;
+    strategy?: StageStrategyName;
+    dir?: string;
+    format: ReportFormat;
+    help: boolean;
+    version: boolean;
+}
+/**
+ * Parses process argv into typed CLI options for stage, report, and accept.
+ */
+export declare function parseCliArgs(argv: string[]): CliArgs;
+/**
+ * Returns the CLI usage help text printed for `--help` or missing commands.
+ */
+export declare function showHelp(): string;

package/dist/cli/args.js

@@ -0,0 +1,88 @@
+import { CliCommands, isReportFormat, isStageStrategy, isUpgradeMode, ReportFormats, StageStrategies, UpgradeModes, } from "../config/types.js";
+import { BeefupError } from "../errors.js";
+/**
+ * Parses process argv into typed CLI options for stage, report, and accept.
+ */
+export function parseCliArgs(argv) {
+    const args = {
+        format: ReportFormats.Color,
+        help: false,
+        version: false,
+    };
+    for (let i = 2; i < argv.length; i += 1) {
+        const arg = argv[i];
+        if (arg === "--help" || arg === "-h") {
+            args.help = true;
+        }
+        else if (arg === "--version" || arg === "-v") {
+            args.version = true;
+        }
+        else if (arg === "--mode") {
+            const value = argv[i + 1];
+            i += 1;
+            if (!isUpgradeMode(value)) {
+                throw new BeefupError(`invalid --mode ${value}; use same-major or latest`);
+            }
+            args.mode = value;
+        }
+        else if (arg === "--strategy") {
+            const value = argv[i + 1];
+            i += 1;
+            if (!isStageStrategy(value)) {
+                throw new BeefupError(`invalid --strategy ${value}; use worktree or inplace`);
+            }
+            args.strategy = value;
+        }
+        else if (arg === "--dir") {
+            args.dir = argv[i + 1];
+            i += 1;
+        }
+        else if (arg === "--format") {
+            const value = argv[i + 1];
+            i += 1;
+            if (!isReportFormat(value)) {
+                throw new BeefupError(`invalid --format ${value}; use ${Object.values(ReportFormats).join(", ")}`);
+            }
+            args.format = value;
+        }
+        else if (!arg.startsWith("-") && !args.command) {
+            args.command = arg;
+        }
+        else {
+            throw new BeefupError(`unknown argument: ${arg}`);
+        }
+    }
+    return args;
+}
+/**
+ * Returns the CLI usage help text printed for `--help` or missing commands.
+ */
+export function showHelp() {
+    return `beefup - staged, pinned, audited dependency upgrades
+
+USAGE:
+    beefup <command> [OPTIONS]
+
+COMMANDS:
+    ${CliCommands.Stage}     Propose an upgrade into .beefup/staged and write a report
+    ${CliCommands.Report}    Regenerate the report for an existing staged upgrade
+    ${CliCommands.Accept}    Apply the staged upgrade to the live project and install from the lockfile
+
+OPTIONS:
+    --mode ${UpgradeModes.SameMajor}|${UpgradeModes.Latest}     Upgrade mode (default: ${UpgradeModes.SameMajor}, or project config)
+    --strategy ${StageStrategies.Worktree}|${StageStrategies.Inplace}  Isolation strategy for ${CliCommands.Stage} (default: ${StageStrategies.Worktree})
+    --dir <path>                 Project directory (default: cwd)
+    --format ${Object.values(ReportFormats).join("|")}  Report format printed to stdout (default: ${ReportFormats.Color})
+    -h, --help                   Show this help
+    -v, --version                Show version
+
+EXAMPLES:
+    beefup ${CliCommands.Stage}
+    beefup ${CliCommands.Stage} --mode ${UpgradeModes.Latest} --strategy ${StageStrategies.Inplace}
+    beefup ${CliCommands.Stage} --format ${ReportFormats.Html}
+    beefup ${CliCommands.Report}
+    beefup ${CliCommands.Report} --format ${ReportFormats.Json}
+    beefup ${CliCommands.Accept}
+`;
+}
+//# sourceMappingURL=args.js.map

package/dist/cli/args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/cli/args.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,cAAc,EACd,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAY3C;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,IAAI,GAAY;QACpB,MAAM,EAAE,aAAa,CAAC,KAAK;QAC3B,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;KACf,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,WAAW,CAAC,kBAAkB,KAAK,4BAA4B,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;aAAM,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,WAAW,CAAC,sBAAsB,KAAK,2BAA2B,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,WAAW,CACnB,oBAAoB,KAAK,SAAS,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5E,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACjD,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,WAAW,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO;;;;;;MAMH,WAAW,CAAC,KAAK;MACjB,WAAW,CAAC,MAAM;MAClB,WAAW,CAAC,MAAM;;;aAGX,YAAY,CAAC,SAAS,IAAI,YAAY,CAAC,MAAM,+BAA+B,YAAY,CAAC,SAAS;iBAC9F,eAAe,CAAC,QAAQ,IAAI,eAAe,CAAC,OAAO,4BAA4B,WAAW,CAAC,KAAK,cAAc,eAAe,CAAC,QAAQ;;eAExI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,aAAa,CAAC,KAAK;;;;;aAK1G,WAAW,CAAC,KAAK;aACjB,WAAW,CAAC,KAAK,WAAW,YAAY,CAAC,MAAM,eAAe,eAAe,CAAC,OAAO;aACrF,WAAW,CAAC,KAAK,aAAa,aAAa,CAAC,IAAI;aAChD,WAAW,CAAC,MAAM;aAClB,WAAW,CAAC,MAAM,aAAa,aAAa,CAAC,IAAI;aACjD,WAAW,CAAC,MAAM;CAC9B,CAAC;AACF,CAAC"}

package/dist/cli/main.d.ts

@@ -0,0 +1,4 @@
+/**
+ * CLI entrypoint: parses argv, runs stage, report, or accept, and returns a process exit code.
+ */
+export declare function main(argv?: string[]): Promise<number>;

package/dist/cli/main.js

@@ -0,0 +1,81 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { runAccept } from "../commands/accept.js";
+import { printReport, runReport } from "../commands/report.js";
+import { runStage } from "../commands/stage.js";
+import { CliCommands, StageStrategies, } from "../config/types.js";
+import { BeefupError } from "../errors.js";
+import { parseCliArgs, showHelp } from "./args.js";
+/**
+ * Reads the package version from the nearest package.json for `--version`.
+ */
+async function readVersion() {
+    const pkgPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../package.json");
+    const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+    return pkg.version ?? "0.0.0";
+}
+/**
+ * Writes a stage/report result to stdout and warns if new CVEs were introduced.
+ */
+function emitReport(report, format) {
+    process.stdout.write(printReport(report, format));
+    if (report.security.introduced.length > 0) {
+        console.error(`warning: ${report.security.introduced.length} CVE(s) introduced; review .beefup/staged before accept`);
+    }
+}
+/**
+ * CLI entrypoint: parses argv, runs stage, report, or accept, and returns a process exit code.
+ */
+export async function main(argv = process.argv) {
+    try {
+        const args = parseCliArgs(argv);
+        if (args.version) {
+            console.log(await readVersion());
+            return 0;
+        }
+        if (args.help || !args.command) {
+            console.log(showHelp());
+            return 0;
+        }
+        const projectRoot = args.dir ?? process.cwd();
+        if (args.command === CliCommands.Stage) {
+            const report = await runStage({
+                projectRoot,
+                mode: args.mode,
+                strategy: args.strategy ?? StageStrategies.Worktree,
+                format: args.format,
+            });
+            emitReport(report, args.format);
+            return 0;
+        }
+        if (args.command === CliCommands.Report) {
+            const report = await runReport({
+                projectRoot,
+                mode: args.mode,
+                strategy: args.strategy,
+                format: args.format,
+            });
+            emitReport(report, args.format);
+            return 0;
+        }
+        if (args.command === CliCommands.Accept) {
+            const result = await runAccept({ projectRoot });
+            process.stdout.write(`Accepted staged upgrade. Applied ${result.copied.join(", ")} and installed from the frozen lockfile (${result.packageManager}).\n`);
+            for (const warning of result.warnings) {
+                console.error(`warning: ${warning}`);
+            }
+            return 0;
+        }
+        throw new BeefupError(`unknown command: ${args.command}`);
+    }
+    catch (error) {
+        if (error instanceof BeefupError) {
+            console.error(`error: ${error.message}`);
+            return error.exitCode;
+        }
+        console.error(`error: ${error instanceof Error ? error.message : String(error)}`);
+        return 1;
+    }
+}
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,WAAW,EACX,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEnD;;GAEG;AACH,KAAK,UAAU,WAAW;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,oBAAoB,CACrB,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;IAChF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,MAAmB,EAAE,MAAoB;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC,KAAK,CACX,YAAY,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,yDAAyD,CACvG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI;IAC5C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;YACjC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACxB,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC;gBAC5B,WAAW;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC,QAAQ;gBACnD,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC;gBAC7B,WAAW;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,WAAW,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,oCAAoC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,MAAM,CAAC,cAAc,MAAM,CACpI,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,IAAI,WAAW,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzC,OAAO,KAAK,CAAC,QAAQ,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/commands/accept.d.ts

@@ -0,0 +1,16 @@
+import { type ProcessRunner } from "../pm/runner.js";
+import { type PackageManager } from "../project/types.js";
+export interface AcceptOptions {
+    projectRoot: string;
+    runner?: ProcessRunner;
+}
+export interface AcceptResult {
+    packageManager: PackageManager;
+    copied: string[];
+    warnings: string[];
+}
+/**
+ * Applies `.beefup/staged` manifests and lockfile to the live project, then
+ * installs from that reviewed lockfile via Safe Chain (`npm ci` / frozen pnpm).
+ */
+export declare function runAccept(options: AcceptOptions): Promise<AcceptResult>;

package/dist/commands/accept.js

@@ -0,0 +1,47 @@
+import path from "node:path";
+import { loadConfig } from "../config/load.js";
+import { CliCommands } from "../config/types.js";
+import { BeefupError } from "../errors.js";
+import { pathExists } from "../fsutil.js";
+import { installFromLockfile } from "../pm/install.js";
+import { defaultProcessRunner } from "../pm/runner.js";
+import { assertNpmVersion, resolveProtectedPm } from "../pm/safe-chain.js";
+import { assertPolicy, evaluatePolicy } from "../policy/evaluate.js";
+import { applyStagedOutputs, requireStagedUpgrade } from "../project/collect.js";
+import { detectProject } from "../project/detect.js";
+import { inProgressPath } from "../project/paths.js";
+import { PackageManagers } from "../project/types.js";
+/**
+ * Applies `.beefup/staged` manifests and lockfile to the live project, then
+ * installs from that reviewed lockfile via Safe Chain (`npm ci` / frozen pnpm).
+ */
+export async function runAccept(options) {
+    const projectRoot = path.resolve(options.projectRoot);
+    const runner = options.runner ?? defaultProcessRunner;
+    const project = await detectProject(projectRoot);
+    const staged = await requireStagedUpgrade(projectRoot, project.lockfileName);
+    const inProgress = inProgressPath(projectRoot);
+    if (await pathExists(inProgress)) {
+        throw new BeefupError(`cannot accept while an in-place ${CliCommands.Stage} is in progress (${path.relative(projectRoot, inProgress) || inProgress}); run beefup ${CliCommands.Stage} to restore the live tree first`);
+    }
+    const protectedPm = await resolveProtectedPm(project.packageManager);
+    if (project.packageManager === PackageManagers.Npm) {
+        await assertNpmVersion(protectedPm);
+    }
+    const config = await loadConfig(projectRoot);
+    const policy = await evaluatePolicy(staged, project.packageManager, project.lockfileName, config);
+    assertPolicy(policy);
+    const copied = await applyStagedOutputs(projectRoot, project.lockfileName);
+    await installFromLockfile({
+        pm: protectedPm,
+        packageManager: project.packageManager,
+        cwd: projectRoot,
+        runner,
+    });
+    return {
+        packageManager: project.packageManager,
+        copied,
+        warnings: policy.warnings,
+    };
+}
+//# sourceMappingURL=accept.js.map

package/dist/commands/accept.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accept.js","sourceRoot":"","sources":["../../src/commands/accept.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAuB,MAAM,qBAAqB,CAAC;AAa3E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAE7E,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,MAAM,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,WAAW,CACnB,mCAAmC,WAAW,CAAC,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC,IAAI,UAAU,iBAAiB,WAAW,CAAC,KAAK,iCAAiC,CAChM,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,cAAc,KAAK,eAAe,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,YAAY,EACpB,MAAM,CACP,CAAC;IACF,YAAY,CAAC,MAAM,CAAC,CAAC;IAErB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,mBAAmB,CAAC;QACxB,EAAE,EAAE,WAAW;QACf,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,GAAG,EAAE,WAAW;QAChB,MAAM;KACP,CAAC,CAAC;IAEH,OAAO;QACL,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC"}

package/dist/commands/report.d.ts

@@ -0,0 +1,19 @@
+import { type ReportFormat, type StageStrategyName, type UpgradeMode } from "../config/types.js";
+import { type ProcessRunner } from "../pm/runner.js";
+import type { StageReport } from "../report/types.js";
+export interface ReportOptions {
+    projectRoot: string;
+    mode?: UpgradeMode;
+    strategy?: StageStrategyName;
+    format: ReportFormat;
+    runner?: ProcessRunner;
+}
+/**
+ * Regenerates the upgrade report for an existing `.beefup/staged` proposal.
+ * Writes HTML and JSON under `.beefup/report`.
+ */
+export declare function runReport(options: ReportOptions): Promise<StageReport>;
+/**
+ * Formats a stage report for stdout as color, text, markdown, JSON, or HTML.
+ */
+export declare function printReport(report: StageReport, format: ReportFormat): string;

package/dist/commands/report.js

@@ -0,0 +1,151 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { loadConfig } from "../config/load.js";
+import { isStageStrategy, isUpgradeMode, ReportFormats, StageStrategies, } from "../config/types.js";
+import { annotatePackageChanges, diffResolutions } from "../diff/diff.js";
+import { pathExists, readJsonFile } from "../fsutil.js";
+import { resolveLockfile } from "../lockfile/resolve.js";
+import { defaultProcessRunner } from "../pm/runner.js";
+import { assertNpmVersion, resolveProtectedPm } from "../pm/safe-chain.js";
+import { assertPolicy, evaluatePolicy } from "../policy/evaluate.js";
+import { requireStagedUpgrade } from "../project/collect.js";
+import { detectProject } from "../project/detect.js";
+import { collectDirectDependencyNames } from "../project/direct-deps.js";
+import { reportDir, ReportFileNames } from "../project/paths.js";
+import { PackageManagers } from "../project/types.js";
+import { ansiColorEnabled } from "../report/ansi.js";
+import { renderHtml } from "../report/html.js";
+import { renderMarkdown } from "../report/markdown.js";
+import { renderText } from "../report/text.js";
+import { classifyFindings } from "../security/classify.js";
+import { scanProject } from "../security/scan.js";
+/**
+ * Regenerates the upgrade report for an existing `.beefup/staged` proposal.
+ * Writes HTML and JSON under `.beefup/report`.
+ */
+export async function runReport(options) {
+    const projectRoot = path.resolve(options.projectRoot);
+    const runner = options.runner ?? defaultProcessRunner;
+    const project = await detectProject(projectRoot);
+    const staged = await requireStagedUpgrade(projectRoot, project.lockfileName);
+    const reports = reportDir(projectRoot);
+    const stagedLock = path.join(staged, project.lockfileName);
+    const previous = await readPreviousReport(reports);
+    const config = await loadConfig(projectRoot, options.mode ?? parseUpgradeMode(previous?.mode));
+    const strategy = options.strategy ??
+        parseStrategy(previous?.strategy) ??
+        StageStrategies.Worktree;
+    const protectedPm = await resolveProtectedPm(project.packageManager);
+    if (project.packageManager === PackageManagers.Npm) {
+        await assertNpmVersion(protectedPm);
+    }
+    const before = await resolveLockfile(project.lockfilePath, project.packageManager);
+    const after = await resolveLockfile(stagedLock, project.packageManager);
+    const { directNames, optionalDeclaredNames } = await collectDirectDependencyNames(projectRoot);
+    const diff = annotatePackageChanges(diffResolutions(before, after), {
+        directNames,
+        optionalDeclaredNames,
+        before,
+        after,
+    });
+    const policy = await evaluatePolicy(staged, project.packageManager, project.lockfileName, config);
+    const beforeFindings = await scanProject({
+        root: projectRoot,
+        packageManager: project.packageManager,
+        pmBin: protectedPm.bin,
+        prefixArgs: protectedPm.prefixArgs,
+        runner,
+    });
+    const afterFindings = await scanProject({
+        root: staged,
+        packageManager: project.packageManager,
+        pmBin: protectedPm.bin,
+        prefixArgs: protectedPm.prefixArgs,
+        runner,
+    });
+    const security = classifyFindings(beforeFindings, afterFindings);
+    const report = {
+        mode: config.mode,
+        strategy,
+        packageManager: project.packageManager,
+        generatedAt: new Date().toISOString(),
+        beefupVersion: await readBeefupVersion(),
+        diff,
+        ranges: policy.ranges,
+        overrides: policy.overrides,
+        alignment: policy.alignment,
+        security,
+        warnings: policy.warnings,
+    };
+    await mkdir(reports, { recursive: true });
+    await writeFile(path.join(reports, ReportFileNames.Html), renderHtml(report), "utf8");
+    await writeFile(path.join(reports, ReportFileNames.Json), `${JSON.stringify(report, null, 2)}\n`, "utf8");
+    assertPolicy(policy);
+    return report;
+}
+/**
+ * Formats a stage report for stdout as color, text, markdown, JSON, or HTML.
+ */
+export function printReport(report, format) {
+    if (format === ReportFormats.Json) {
+        return `${JSON.stringify(report, null, 2)}\n`;
+    }
+    if (format === ReportFormats.Markdown) {
+        return renderMarkdown(report);
+    }
+    if (format === ReportFormats.Html) {
+        return renderHtml(report);
+    }
+    if (format === ReportFormats.Color) {
+        return renderText(report, { color: ansiColorEnabled() });
+    }
+    return renderText(report);
+}
+/**
+ * Loads the previous report.json if present, otherwise returns undefined.
+ */
+async function readPreviousReport(reports) {
+    const reportPath = path.join(reports, ReportFileNames.Json);
+    if (!(await pathExists(reportPath))) {
+        return undefined;
+    }
+    try {
+        return await readJsonFile(reportPath);
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Parses a stored upgrade mode string into a typed mode, or undefined if unknown.
+ */
+function parseUpgradeMode(value) {
+    if (isUpgradeMode(value)) {
+        return value;
+    }
+    return undefined;
+}
+/**
+ * Parses a stored strategy string into a typed strategy, or undefined if unknown.
+ */
+function parseStrategy(value) {
+    if (isStageStrategy(value)) {
+        return value;
+    }
+    return undefined;
+}
+/**
+ * Reads this package's version from beefup's own package.json.
+ */
+async function readBeefupVersion() {
+    const pkgPath = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../package.json");
+    try {
+        const pkg = JSON.parse(await readFile(pkgPath, "utf8"));
+        return pkg.version ?? "0.0.0";
+    }
+    catch {
+        return "0.0.0";
+    }
+}
+//# sourceMappingURL=report.js.map

package/dist/commands/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,GAIhB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAsB,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAUlD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,WAAW,EACX,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjD,CAAC;IACF,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ;QAChB,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC;QACjC,eAAe,CAAC,QAAQ,CAAC;IAE3B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,cAAc,KAAK,eAAe,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACxE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAC1C,MAAM,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,sBAAsB,CAAC,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;QAClE,WAAW;QACX,qBAAqB;QACrB,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,MAAM,EACN,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,YAAY,EACpB,MAAM,CACP,CAAC;IAEF,MAAM,cAAc,GAAG,MAAM,WAAW,CAAC;QACvC,IAAI,EAAE,WAAW;QACjB,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,KAAK,EAAE,WAAW,CAAC,GAAG;QACtB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,MAAM;KACP,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,MAAM,WAAW,CAAC;QACtC,IAAI,EAAE,MAAM;QACZ,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,KAAK,EAAE,WAAW,CAAC,GAAG;QACtB,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,MAAM;KACP,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAgB;QAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ;QACR,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,aAAa,EAAE,MAAM,iBAAiB,EAAE;QACxC,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;IAEF,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EACxC,UAAU,CAAC,MAAM,CAAC,EAClB,MAAM,CACP,CAAC;IACF,MAAM,SAAS,CACb,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,EACxC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtC,MAAM,CACP,CAAC;IAEF,YAAY,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAAmB,EAAE,MAAoB;IACnE,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,MAAM,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;QACnC,OAAO,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,YAAY,CAAc,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,oBAAoB,CACrB,CAAC;IACF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAyB,CAAC;QAChF,OAAO,GAAG,CAAC,OAAO,IAAI,OAAO,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/commands/stage.d.ts

@@ -0,0 +1,16 @@
+import type { ReportFormat, StageStrategyName, UpgradeMode } from "../config/types.js";
+import { type ProcessRunner } from "../pm/runner.js";
+import type { StageReport } from "../report/types.js";
+export interface StageOptions {
+    projectRoot: string;
+    mode?: UpgradeMode;
+    strategy: StageStrategyName;
+    format: ReportFormat;
+    runner?: ProcessRunner;
+}
+/**
+ * Stages a dependency upgrade into `.beefup/staged`, then regenerates the report.
+ * Uses the selected isolation strategy and restores the workspace on exit or signal.
+ */
+export declare function runStage(options: StageOptions): Promise<StageReport>;
+export { printReport } from "./report.js";