@uapkg/cli 1.1.8 → 1.1.10

package/dist/commands/PackCommand.js

@@ -0,0 +1,22 @@
+import { pack } from '@uapkg/pack';
+import { DiagnosticReporter } from '../reporting/DiagnosticReporter.js';
+export class PackCommand {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async execute() {
+        const result = await pack({
+            cwd: this.options.cwd,
+            dryRun: this.options.dryRun,
+            allowMissingLfs: this.options.allowMissingLfs,
+            outFile: this.options.outFile,
+        });
+        if (!result.ok) {
+            new DiagnosticReporter().reportAll(result.diagnostics);
+            return 1;
+        }
+        return 0;
+    }
+}
+//# sourceMappingURL=PackCommand.js.map

package/dist/commands/PackCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PackCommand.js","sourceRoot":"","sources":["../../src/commands/PackCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAUxE,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,OAA2B;QAA3B,YAAO,GAAP,OAAO,CAAoB;IAAG,CAAC;IAE5D,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC;YACxB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,kBAAkB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACvD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/commands/PostinstallCandidateBuilder.d.ts

@@ -0,0 +1,25 @@
+import type { InstallPlan } from '@uapkg/installer';
+import type { Lockfile, Manifest } from '@uapkg/package-manifest-schema';
+import type { CompositionRoot } from '../app/CompositionRoot.js';
+import type { PostinstallCandidate } from '../postinstall/runner/PostinstallOrchestrator.js';
+/**
+ * Builds the {@link PostinstallCandidate} list that the postinstall
+ * orchestrator consumes after an installer run.
+ *
+ * Rules:
+ *   * Only `add` and `update` actions produce candidates (unchanged/remove never run postinstall).
+ *   * `pluginRoot` is derived from the action's declared install `path` resolved
+ *     against the manifest root — matching what the extractor wrote to disk.
+ *   * `registry` is sourced from the lockfile entry; if the lockfile lacks the
+ *     package (shouldn't happen post-install, but be defensive), the action is
+ *     dropped.
+ *
+ * This adapter lives in the CLI rather than in `@uapkg/uapkg/postinstall/`
+ * to keep the postinstall subsystem independent of `@uapkg/installer`.
+ */
+export declare class PostinstallCandidateBuilder {
+    build(root: CompositionRoot, plan: InstallPlan, lockfile: Lockfile): PostinstallCandidate[];
+    /** Convenience: returns `'project' | 'plugin'` for the orchestrator's input. */
+    resolveManifestType(manifest: Manifest): 'project' | 'plugin';
+}
+//# sourceMappingURL=PostinstallCandidateBuilder.d.ts.map

package/dist/commands/PostinstallCandidateBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostinstallCandidateBuilder.d.ts","sourceRoot":"","sources":["../../src/commands/PostinstallCandidateBuilder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kDAAkD,CAAC;AAE7F;;;;;;;;;;;;;;GAcG;AACH,qBAAa,2BAA2B;IAC/B,KAAK,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,GAAG,oBAAoB,EAAE;IAiBlG,gFAAgF;IACzE,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ;CAGrE"}

package/dist/commands/PostinstallCandidateBuilder.js

@@ -0,0 +1,41 @@
+import * as path from 'node:path';
+/**
+ * Builds the {@link PostinstallCandidate} list that the postinstall
+ * orchestrator consumes after an installer run.
+ *
+ * Rules:
+ *   * Only `add` and `update` actions produce candidates (unchanged/remove never run postinstall).
+ *   * `pluginRoot` is derived from the action's declared install `path` resolved
+ *     against the manifest root — matching what the extractor wrote to disk.
+ *   * `registry` is sourced from the lockfile entry; if the lockfile lacks the
+ *     package (shouldn't happen post-install, but be defensive), the action is
+ *     dropped.
+ *
+ * This adapter lives in the CLI rather than in `@uapkg/uapkg/postinstall/`
+ * to keep the postinstall subsystem independent of `@uapkg/installer`.
+ */
+export class PostinstallCandidateBuilder {
+    build(root, plan, lockfile) {
+        const lockPackages = lockfile.packages;
+        const candidates = [];
+        for (const action of plan.actions) {
+            if (action.type !== 'add' && action.type !== 'update')
+                continue;
+            const locked = lockPackages[action.packageName];
+            const registry = locked?.registry ?? action.registry;
+            if (!registry)
+                continue;
+            candidates.push({
+                packageName: action.packageName,
+                registry: registry,
+                pluginRoot: path.join(root.cwd, action.path),
+            });
+        }
+        return candidates;
+    }
+    /** Convenience: returns `'project' | 'plugin'` for the orchestrator's input. */
+    resolveManifestType(manifest) {
+        return manifest.kind === 'project' ? 'project' : 'plugin';
+    }
+}
+//# sourceMappingURL=PostinstallCandidateBuilder.js.map

package/dist/commands/PostinstallCandidateBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PostinstallCandidateBuilder.js","sourceRoot":"","sources":["../../src/commands/PostinstallCandidateBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAMlC;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,2BAA2B;IAC/B,KAAK,CAAC,IAAqB,EAAE,IAAiB,EAAE,QAAkB;QACvE,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAgD,CAAC;QAC/E,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAChE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;YACrD,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,UAAU,CAAC,IAAI,CAAC;gBACd,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,QAAQ,EAAE,QAAkB;gBAC5B,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,gFAAgF;IACzE,mBAAmB,CAAC,QAAkB;QAC3C,OAAO,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,CAAC;CACF"}

package/dist/commands/ProjectGetNameCommand.d.ts

@@ -0,0 +1,14 @@
+import type { CompositionRoot } from '../app/CompositionRoot.js';
+import type { Command } from './Command.js';
+/**
+ * Options for {@link ProjectGetNameCommand}. Reserved for future expansion
+ * (e.g. alternate output format); today the command is fully parameterized
+ * by {@link CompositionRoot}.
+ */
+export type ProjectGetNameCommandOptions = Record<string, never>;
+export declare class ProjectGetNameCommand implements Command {
+    private readonly root;
+    constructor(root: CompositionRoot);
+    execute(): Promise<number>;
+}
+//# sourceMappingURL=ProjectGetNameCommand.d.ts.map

package/dist/commands/ProjectGetNameCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectGetNameCommand.d.ts","sourceRoot":"","sources":["../../src/commands/ProjectGetNameCommand.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C;;;;GAIG;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAQjE,qBAAa,qBAAsB,YAAW,OAAO;IAChC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAE5C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CAaxC"}

package/dist/commands/ProjectGetNameCommand.js

@@ -0,0 +1,26 @@
+import { ManifestReader } from '@uapkg/package-manifest';
+// ---------------------------------------------------------------------------
+// ProjectGetNameCommand — prints the `name` field of the current project
+// manifest to stdout. Fails with exit code 1 if the manifest is absent, not
+// a project, or invalid. Intended for shell wrapping in CI scripts.
+// ---------------------------------------------------------------------------
+export class ProjectGetNameCommand {
+    root;
+    constructor(root) {
+        this.root = root;
+    }
+    async execute() {
+        const result = await new ManifestReader().read(this.root.cwd);
+        if (!result.ok) {
+            this.root.diagnostics.reportAll(result.diagnostics);
+            return 1;
+        }
+        if (result.value.kind !== 'project') {
+            process.stderr.write(`[uapkg] Expected manifest kind 'project', received '${result.value.kind}'\n`);
+            return 1;
+        }
+        process.stdout.write(`${String(result.value.name)}\n`);
+        return 0;
+    }
+}
+//# sourceMappingURL=ProjectGetNameCommand.js.map

package/dist/commands/ProjectGetNameCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProjectGetNameCommand.js","sourceRoot":"","sources":["../../src/commands/ProjectGetNameCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAWzD,8EAA8E;AAC9E,yEAAyE;AACzE,4EAA4E;AAC5E,oEAAoE;AACpE,8EAA8E;AAE9E,MAAM,OAAO,qBAAqB;IACI;IAApC,YAAoC,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,KAAK,CAAC,OAAO;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,cAAc,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;YACpG,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/commands/RegistryCommand.d.ts

@@ -0,0 +1,29 @@
+import type { UAPKGConfigScope, UAPKGOutputFormat, UAPKGRegistryAction } from '../cli/UAPKGCommandLine.js';
+import type { Command } from './Command.js';
+export interface RegistryCommandOptions {
+    cwd: string;
+    action: UAPKGRegistryAction;
+    name?: string;
+    url?: string;
+    refType?: 'branch' | 'tag' | 'rev';
+    refValue?: string;
+    scope?: UAPKGConfigScope;
+    output: UAPKGOutputFormat;
+}
+export declare class RegistryCommand implements Command {
+    private readonly options;
+    private readonly reporter;
+    constructor(options: RegistryCommandOptions);
+    execute(): Promise<number>;
+    private executeList;
+    private executeAdd;
+    private executeRemove;
+    private executeUse;
+    private resolveRef;
+    private scopeOptions;
+    private persistPlan;
+    private fail;
+    private reportIfText;
+    private print;
+}
+//# sourceMappingURL=RegistryCommand.d.ts.map

package/dist/commands/RegistryCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegistryCommand.d.ts","sourceRoot":"","sources":["../../src/commands/RegistryCommand.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAE3G,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,qBAAa,eAAgB,YAAW,OAAO;IAGjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA4B;gBAExB,OAAO,EAAE,sBAAsB;IAE/C,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAoBvC,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,UAAU;IA6BlB,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,UAAU;IAgBlB,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,YAAY;IAIpB,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,YAAY;IAMpB,OAAO,CAAC,KAAK;CAOd"}

package/dist/commands/RegistryCommand.js

@@ -0,0 +1,121 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { createConfig } from '@uapkg/config';
+import { createParseErrorDiagnostic } from '@uapkg/diagnostics';
+import Log from '@uapkg/log';
+import { DiagnosticReporter } from '../reporting/DiagnosticReporter.js';
+export class RegistryCommand {
+    options;
+    reporter = new DiagnosticReporter();
+    constructor(options) {
+        this.options = options;
+    }
+    async execute() {
+        const config = createConfig({ cwd: this.options.cwd });
+        this.reportIfText(config.getDiagnostics());
+        switch (this.options.action) {
+            case 'list':
+                return this.executeList(config);
+            case 'add':
+                return this.executeAdd(config);
+            case 'remove':
+                return this.executeRemove(config);
+            case 'use':
+                return this.executeUse(config);
+            default:
+                return this.fail([
+                    createParseErrorDiagnostic(`Unsupported registry action: ${this.options.action}`),
+                ]);
+        }
+    }
+    executeList(config) {
+        const registries = this.options.scope
+            ? config.get('registries', { scope: this.options.scope })
+            : config.get('registries');
+        this.print(registries ?? {});
+        return 0;
+    }
+    executeAdd(config) {
+        const name = this.options.name;
+        const url = this.options.url;
+        if (!name || !url) {
+            return this.fail([createParseErrorDiagnostic('registry add requires <name> and <url>.')]);
+        }
+        const ref = this.resolveRef();
+        const setUrl = config.set(`registries.${name}.url`, url, this.scopeOptions());
+        if (!setUrl.ok)
+            return this.fail(setUrl.diagnostics);
+        this.persistPlan(setUrl.value.file, setUrl.value.values);
+        const setRef = config.set(`registries.${name}.ref`, ref, this.scopeOptions());
+        if (!setRef.ok)
+            return this.fail(setRef.diagnostics);
+        this.persistPlan(setRef.value.file, setRef.value.values);
+        config.reload({ cwd: this.options.cwd });
+        this.reportIfText(config.getDiagnostics());
+        this.print({
+            action: 'add',
+            name,
+            url,
+            ref,
+            scope: this.options.scope ?? 'auto',
+        });
+        return 0;
+    }
+    executeRemove(config) {
+        const name = this.options.name;
+        if (!name) {
+            return this.fail([createParseErrorDiagnostic('registry remove requires <name>.')]);
+        }
+        const plan = config.delete(`registries.${name}`, this.scopeOptions());
+        if (!plan.ok)
+            return this.fail(plan.diagnostics);
+        this.persistPlan(plan.value.file, plan.value.values);
+        config.reload({ cwd: this.options.cwd });
+        this.reportIfText(config.getDiagnostics());
+        this.print({ action: 'remove', name, scope: this.options.scope ?? 'auto' });
+        return 0;
+    }
+    executeUse(config) {
+        const name = this.options.name;
+        if (!name) {
+            return this.fail([createParseErrorDiagnostic('registry use requires <name>.')]);
+        }
+        const plan = config.set('registry', name, this.scopeOptions());
+        if (!plan.ok)
+            return this.fail(plan.diagnostics);
+        this.persistPlan(plan.value.file, plan.value.values);
+        config.reload({ cwd: this.options.cwd });
+        this.reportIfText(config.getDiagnostics());
+        this.print({ action: 'use', name, scope: this.options.scope ?? 'auto' });
+        return 0;
+    }
+    resolveRef() {
+        const type = this.options.refType ?? 'branch';
+        const value = this.options.refValue ?? 'main';
+        return { type, value };
+    }
+    scopeOptions() {
+        return this.options.scope ? { scope: this.options.scope } : {};
+    }
+    persistPlan(filePath, values) {
+        fs.mkdirSync(path.dirname(filePath), { recursive: true });
+        fs.writeFileSync(filePath, `${JSON.stringify(values, null, 2)}\n`, 'utf8');
+    }
+    fail(diagnostics) {
+        this.reporter.reportAll(diagnostics);
+        return 1;
+    }
+    reportIfText(diagnostics) {
+        if (this.options.output === 'text') {
+            this.reporter.reportAll(diagnostics);
+        }
+    }
+    print(value) {
+        if (this.options.output === 'json' || typeof value === 'object') {
+            Log.info(JSON.stringify(value, null, 2));
+            return;
+        }
+        Log.info(JSON.stringify(value));
+    }
+}
+//# sourceMappingURL=RegistryCommand.js.map

package/dist/commands/RegistryCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RegistryCommand.js","sourceRoot":"","sources":["../../src/commands/RegistryCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAuB,YAAY,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,0BAA0B,EAAmB,MAAM,oBAAoB,CAAC;AACjF,OAAO,GAAG,MAAM,YAAY,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAcxE,MAAM,OAAO,eAAe;IAGG;IAFZ,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAErD,YAA6B,OAA+B;QAA/B,YAAO,GAAP,OAAO,CAAwB;IAAG,CAAC;IAEzD,KAAK,CAAC,OAAO;QAClB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAE3C,QAAQ,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5B,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAClC,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACpC,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC;gBACE,OAAO,IAAI,CAAC,IAAI,CAAC;oBACf,0BAA0B,CAAC,gCAAgC,IAAI,CAAC,OAAO,CAAC,MAAsB,EAAE,CAAC;iBAClG,CAAC,CAAC;QACP,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,MAAsB;QACxC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK;YACnC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzD,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,UAAU,CAAC,MAAsB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7B,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,yCAAyC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEzD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC;YACT,MAAM,EAAE,KAAK;YACb,IAAI;YACJ,GAAG;YACH,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM;SACpC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,aAAa,CAAC,MAAsB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,kCAAkC,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,UAAU,CAAC,MAAsB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,+BAA+B,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAErD,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,UAAU;QAChB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACzB,CAAC;IAEO,YAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,CAAC;IAEO,WAAW,CAAC,QAAgB,EAAE,MAA+B;QACnE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAEO,IAAI,CAAC,WAAkC;QAC7C,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IAEO,YAAY,CAAC,WAAkC;QACrD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAc;QAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/commands/RemoveCommand.d.ts

@@ -0,0 +1,14 @@
+import type { CompositionRoot } from '../app/CompositionRoot.js';
+import type { Command } from './Command.js';
+export interface RemoveCommandOptions {
+    readonly packageName: string;
+    readonly outputFormat: 'text' | 'json';
+    readonly dryRun?: boolean;
+}
+export declare class RemoveCommand implements Command {
+    private readonly root;
+    private readonly options;
+    constructor(root: CompositionRoot, options: RemoveCommandOptions);
+    execute(): Promise<number>;
+}
+//# sourceMappingURL=RemoveCommand.d.ts.map

package/dist/commands/RemoveCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveCommand.d.ts","sourceRoot":"","sources":["../../src/commands/RemoveCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AASD,qBAAa,aAAc,YAAW,OAAO;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,oBAAoB;IAGnC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CA2CxC"}

package/dist/commands/RemoveCommand.js

@@ -0,0 +1,55 @@
+import { InstallCommand } from './InstallCommand.js';
+// ---------------------------------------------------------------------------
+// RemoveCommand — removes a dependency from every bucket in the manifest and
+// then immediately re-runs `InstallCommand` so on-disk state is reconciled.
+//
+// The installer's plan diff is what actually deletes the installed plugin —
+// RemoveCommand's job is (1) mutate the manifest, (2) trigger the install.
+// ---------------------------------------------------------------------------
+export class RemoveCommand {
+    root;
+    options;
+    constructor(root, options) {
+        this.root = root;
+        this.options = options;
+    }
+    async execute() {
+        const result = await this.root.packageManifest.removeDependency(this.options.packageName);
+        if (!result.ok) {
+            if (this.options.outputFormat === 'json') {
+                this.root.json.emit({ status: 'error', command: 'remove', diagnostics: result.diagnostics });
+            }
+            else {
+                this.root.diagnostics.reportAll(result.diagnostics);
+            }
+            return 1;
+        }
+        const missing = result.diagnostics.some((d) => d.code === 'DEPENDENCY_NOT_FOUND');
+        if (result.diagnostics.length > 0 && this.options.outputFormat === 'text') {
+            this.root.diagnostics.reportAll(result.diagnostics);
+        }
+        if (missing) {
+            if (this.options.outputFormat === 'json') {
+                this.root.json.emit({
+                    status: 'ok',
+                    command: 'remove',
+                    data: { removed: false, packageName: this.options.packageName },
+                    diagnostics: result.diagnostics,
+                });
+            }
+            return 0;
+        }
+        if (this.options.outputFormat === 'text') {
+            process.stdout.write(`Removed "${this.options.packageName}" from uapkg.json\n`);
+        }
+        // Reconcile on-disk state by delegating to the installer pipeline.
+        const install = new InstallCommand(this.root, {
+            force: false,
+            frozen: false,
+            dryRun: this.options.dryRun === true,
+            outputFormat: this.options.outputFormat,
+        });
+        return install.execute();
+    }
+}
+//# sourceMappingURL=RemoveCommand.js.map

package/dist/commands/RemoveCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RemoveCommand.js","sourceRoot":"","sources":["../../src/commands/RemoveCommand.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQrD,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,IAAqB,EACrB,OAA6B;QAD7B,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAEG,KAAK,CAAC,OAAO;QAClB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE1F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/F,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;QAElF,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAClB,MAAM,EAAE,IAAI;oBACZ,OAAO,EAAE,QAAQ;oBACjB,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE;oBAC/D,WAAW,EAAE,MAAM,CAAC,WAAW;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,WAAW,qBAAqB,CAAC,CAAC;QAClF,CAAC;QAED,mEAAmE;QACnE,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE;YAC5C,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;YACpC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;SACxC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/commands/UpdateCommand.d.ts

@@ -0,0 +1,45 @@
+import type { CompositionRoot } from '../app/CompositionRoot.js';
+import type { Command } from './Command.js';
+export interface UpdateCommandOptions {
+    readonly specs: readonly string[];
+    readonly force: boolean;
+    readonly dryRun: boolean;
+    readonly outputFormat: 'text' | 'json';
+}
+/**
+ * `uapkg update [specs...]` — re-resolve and re-install.
+ *
+ * Modes:
+ *
+ *   * `uapkg update`                             — full update (all packages).
+ *   * `uapkg update foo`                         — re-resolve `foo` via the
+ *     normal install flow; lockfile diff skips untouched packages.
+ *   * `uapkg update foo@^2.0.0`                  — rewrite `foo`'s range in the
+ *     manifest (preserving its bucket + registry) then re-install.
+ *   * `uapkg update foo@^2 @scope/bar@~1.5`      — array form; each spec is
+ *     processed in order before a single install pass.
+ *
+ * Never throws — errors become diagnostics. Specs that reference unknown
+ * packages produce `PACKAGE_NOT_FOUND` against the local manifest.
+ */
+export declare class UpdateCommand implements Command {
+    private readonly root;
+    private readonly options;
+    constructor(root: CompositionRoot, options: UpdateCommandOptions);
+    execute(): Promise<number>;
+    /**
+     * Parse a single `<name>[@range]` spec and, if a range is supplied, rewrite
+     * the manifest entry preserving its existing bucket + registry. Bare-name
+     * specs are a no-op at the manifest level — the subsequent install pass
+     * handles the re-resolve.
+     */
+    private applySpec;
+    /**
+     * Find `name` in the manifest buckets, preserving the source-of-truth
+     * bucket + registry so `applySpec` doesn't move the dep between buckets.
+     */
+    private locateDependency;
+    private delegateToInstall;
+    private fail;
+}
+//# sourceMappingURL=UpdateCommand.d.ts.map

package/dist/commands/UpdateCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateCommand.d.ts","sourceRoot":"","sources":["../../src/commands/UpdateCommand.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAG5C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CACxC;AASD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,aAAc,YAAW,OAAO;IAEzC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,oBAAoB;IAGnC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAmBvC;;;;;OAKG;YACW,SAAS;IA0CvB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,iBAAiB;IAUzB,OAAO,CAAC,IAAI;CAQb"}

package/dist/commands/UpdateCommand.js

@@ -0,0 +1,113 @@
+import { parsePackageSpec } from '@uapkg/common';
+import { createInvalidPackageSpecDiagnostic, createPackageNotFoundDiagnostic, } from '@uapkg/diagnostics';
+import { InstallCommand } from './InstallCommand.js';
+/**
+ * `uapkg update [specs...]` — re-resolve and re-install.
+ *
+ * Modes:
+ *
+ *   * `uapkg update`                             — full update (all packages).
+ *   * `uapkg update foo`                         — re-resolve `foo` via the
+ *     normal install flow; lockfile diff skips untouched packages.
+ *   * `uapkg update foo@^2.0.0`                  — rewrite `foo`'s range in the
+ *     manifest (preserving its bucket + registry) then re-install.
+ *   * `uapkg update foo@^2 @scope/bar@~1.5`      — array form; each spec is
+ *     processed in order before a single install pass.
+ *
+ * Never throws — errors become diagnostics. Specs that reference unknown
+ * packages produce `PACKAGE_NOT_FOUND` against the local manifest.
+ */
+export class UpdateCommand {
+    root;
+    options;
+    constructor(root, options) {
+        this.root = root;
+        this.options = options;
+    }
+    async execute() {
+        if (this.options.specs.length === 0) {
+            return this.delegateToInstall();
+        }
+        const manifestResult = await this.root.packageManifest.readManifest();
+        if (!manifestResult.ok)
+            return this.fail(manifestResult.diagnostics);
+        const diagnostics = [];
+        for (const rawSpec of this.options.specs) {
+            const applyResult = await this.applySpec(rawSpec, manifestResult.value);
+            if (!applyResult.ok)
+                diagnostics.push(...applyResult.diagnostics);
+        }
+        if (diagnostics.length > 0)
+            return this.fail(diagnostics);
+        return this.delegateToInstall();
+    }
+    /**
+     * Parse a single `<name>[@range]` spec and, if a range is supplied, rewrite
+     * the manifest entry preserving its existing bucket + registry. Bare-name
+     * specs are a no-op at the manifest level — the subsequent install pass
+     * handles the re-resolve.
+     */
+    async applySpec(rawSpec, manifest) {
+        const specResult = parsePackageSpec(rawSpec);
+        if (!specResult.ok)
+            return { ok: false, diagnostics: [...specResult.diagnostics] };
+        const spec = specResult.value;
+        if (spec.org) {
+            return {
+                ok: false,
+                diagnostics: [
+                    createInvalidPackageSpecDiagnostic(rawSpec, 'scoped specifiers (@org/name) are reserved for a future registry iteration'),
+                ],
+            };
+        }
+        const located = this.locateDependency(manifest, spec.name);
+        if (!located) {
+            return {
+                ok: false,
+                diagnostics: [createPackageNotFoundDiagnostic(spec.name, String(manifest.name))],
+            };
+        }
+        if (!spec.range)
+            return { ok: true };
+        const addResult = await this.root.packageManifest.addDependency(spec.name, {
+            version: spec.range,
+            registry: located.registry,
+        }, { bucket: located.bucket });
+        if (!addResult.ok)
+            return { ok: false, diagnostics: [...addResult.diagnostics] };
+        return { ok: true };
+    }
+    /**
+     * Find `name` in the manifest buckets, preserving the source-of-truth
+     * bucket + registry so `applySpec` doesn't move the dep between buckets.
+     */
+    locateDependency(manifest, name) {
+        const order = ['dependencies', 'devDependencies', 'peerDependencies'];
+        for (const bucket of order) {
+            const entries = manifest[bucket];
+            if (entries && name in entries) {
+                return { bucket, registry: entries[name].registry };
+            }
+        }
+        return null;
+    }
+    delegateToInstall() {
+        const install = new InstallCommand(this.root, {
+            force: this.options.force,
+            frozen: false,
+            dryRun: this.options.dryRun,
+            outputFormat: this.options.outputFormat,
+        });
+        return install.execute();
+    }
+    fail(diagnostics) {
+        if (this.options.outputFormat === 'json') {
+            this.root.json.emit({ status: 'error', command: 'update', diagnostics });
+        }
+        else {
+            this.root.diagnostics.reportAll(diagnostics);
+        }
+        return 1;
+    }
+}
+//# sourceMappingURL=UpdateCommand.js.map

package/dist/commands/UpdateCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"UpdateCommand.js","sourceRoot":"","sources":["../../src/commands/UpdateCommand.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EACL,kCAAkC,EAClC,+BAA+B,GAEhC,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgBrD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,IAAqB,EACrB,OAA6B;QAD7B,SAAI,GAAJ,IAAI,CAAiB;QACrB,YAAO,GAAP,OAAO,CAAsB;IAC7C,CAAC;IAEG,KAAK,CAAC,OAAO;QAClB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,EAAE,CAAC;QACtE,IAAI,CAAC,cAAc,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAErE,MAAM,WAAW,GAAiB,EAAE,CAAC;QACrC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YACxE,IAAI,CAAC,WAAW,CAAC,EAAE;gBAAE,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1D,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,SAAS,CACrB,OAAe,EACf,QAAkB;QAElB,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;QAE9B,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,WAAW,EAAE;oBACX,kCAAkC,CAChC,OAAO,EACP,4EAA4E,CAC7E;iBACF;aACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAyB,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,WAAW,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,IAA8B,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;aAC3G,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAErC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,aAAa,CAC7D,IAAI,CAAC,IAAyB,EAC9B;YACE,OAAO,EAAE,IAAI,CAAC,KAAgC;YAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,EACD,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,QAAkB,EAAE,IAAY;QACvD,MAAM,KAAK,GAAa,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;QAChF,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,iBAAiB;QACvB,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE;YAC5C,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;SACxC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAEO,IAAI,CAAC,WAAkC;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/commands/WhyCommand.d.ts

@@ -0,0 +1,21 @@
+import type { CompositionRoot } from '../app/CompositionRoot.js';
+import type { Command } from './Command.js';
+export interface WhyCommandOptions {
+    readonly target: string;
+    readonly outputFormat: 'text' | 'json';
+}
+/**
+ * `uapkg why <name>` — prints every dependency path from a graph root to the
+ * target package. Implemented as a pure consumer of
+ * {@link PackageManifest.explainWhy}.
+ *
+ * Exit code 0 when the target is present, 3 when not found, 1 on any
+ * resolver error.
+ */
+export declare class WhyCommand implements Command {
+    private readonly root;
+    private readonly options;
+    constructor(root: CompositionRoot, options: WhyCommandOptions);
+    execute(): Promise<number>;
+}
+//# sourceMappingURL=WhyCommand.d.ts.map

package/dist/commands/WhyCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WhyCommand.d.ts","sourceRoot":"","sources":["../../src/commands/WhyCommand.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,qBAAa,UAAW,YAAW,OAAO;IAEtC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,iBAAiB;IAGhC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;CA+BxC"}

package/dist/commands/WhyCommand.js

@@ -0,0 +1,46 @@
+/**
+ * `uapkg why <name>` — prints every dependency path from a graph root to the
+ * target package. Implemented as a pure consumer of
+ * {@link PackageManifest.explainWhy}.
+ *
+ * Exit code 0 when the target is present, 3 when not found, 1 on any
+ * resolver error.
+ */
+export class WhyCommand {
+    root;
+    options;
+    constructor(root, options) {
+        this.root = root;
+        this.options = options;
+    }
+    async execute() {
+        const target = this.options.target;
+        const result = await this.root.packageManifest.explainWhy(target);
+        if (this.options.outputFormat === 'json') {
+            this.root.json.emit({
+                status: result.ok ? 'ok' : 'error',
+                command: 'why',
+                data: result.ok ? result.value : undefined,
+                diagnostics: result.diagnostics,
+            });
+            return result.ok ? (result.value.paths.length === 0 && !result.value.foundAsRoot ? 3 : 0) : 1;
+        }
+        this.root.diagnostics.reportAll(result.diagnostics);
+        if (!result.ok)
+            return 1;
+        const { paths, foundAsRoot } = result.value;
+        if (paths.length === 0 && !foundAsRoot) {
+            process.stdout.write(`No installation of "${target}" in the resolved graph.\n`);
+            return 3;
+        }
+        if (foundAsRoot) {
+            process.stdout.write(`${target} (declared at root)\n`);
+        }
+        for (const p of paths) {
+            const rendered = p.path.map((e) => `${e.name}@${e.version}`).join(' → ');
+            process.stdout.write(`  ${rendered}\n`);
+        }
+        return 0;
+    }
+}
+//# sourceMappingURL=WhyCommand.js.map