@varlock/bumpy 0.0.1 → 1.0.0

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { n as log, t as colorize } from "./logger-ZqggsyGZ.mjs";
-import { n as findRoot } from "./config-CJ2orhTL.mjs";
+import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
+import { n as findRoot } from "./config-XZWUL3ma.mjs";
 //#region src/cli.ts
 const args = process.argv.slice(2);
 const command = args[0];
@@ -25,13 +25,13 @@ async function main() {
 		switch (command) {
 			case "init": {
 				const rootDir = await findRoot();
-				const { initCommand } = await import("./init-Blw2GfC_.mjs");
+				const { initCommand } = await import("./init-lA9E5pEc.mjs");
 				await initCommand(rootDir);
 				break;
 			}
 			case "add": {
 				const rootDir = await findRoot();
-				const { addCommand } = await import("./add-u5V9V3L7.mjs");
+				const { addCommand } = await import("./add-CgCjs4d-.mjs");
 				await addCommand(rootDir, {
 					packages: flags.packages,
 					message: flags.message,
@@ -42,7 +42,7 @@ async function main() {
 			}
 			case "status": {
 				const rootDir = await findRoot();
-				const { statusCommand } = await import("./status-DRpq_Mha.mjs");
+				const { statusCommand } = await import("./status-CfE63ti5.mjs");
 				await statusCommand(rootDir, {
 					json: flags.json === true,
 					packagesOnly: flags.packages === true,
@@ -54,13 +54,13 @@ async function main() {
 			}
 			case "version": {
 				const rootDir = await findRoot();
-				const { versionCommand } = await import("./version-CJwf8XIA.mjs");
+				const { versionCommand } = await import("./version-19vVt9dv.mjs");
 				await versionCommand(rootDir);
 				break;
 			}
 			case "generate": {
 				const rootDir = await findRoot();
-				const { generateCommand } = await import("./generate-oOFD9ABC.mjs");
+				const { generateCommand } = await import("./generate-gYKTpvex.mjs");
 				await generateCommand(rootDir, {
 					from: flags.from,
 					dryRun: flags["dry-run"] === true,
@@ -70,13 +70,13 @@ async function main() {
 			}
 			case "migrate": {
 				const rootDir = await findRoot();
-				const { migrateCommand } = await import("./migrate-DvOrXSw0.mjs");
+				const { migrateCommand } = await import("./migrate-DmOYgmfD.mjs");
 				await migrateCommand(rootDir, { force: flags.force === true });
 				break;
 			}
 			case "check": {
 				const rootDir = await findRoot();
-				const { checkCommand } = await import("./check-CkRubvuk.mjs");
+				const { checkCommand } = await import("./check-BOoxpWqk.mjs");
 				await checkCommand(rootDir);
 				break;
 			}
@@ -85,27 +85,32 @@ async function main() {
 				const subcommand = args[1];
 				const ciFlags = parseFlags(args.slice(2));
 				if (subcommand === "check") {
-					const { ciCheckCommand } = await import("./ci-8KWWhjXl.mjs");
+					const { ciCheckCommand } = await import("./ci-Bhx--Tj6.mjs");
 					await ciCheckCommand(rootDir, {
 						comment: ciFlags.comment !== void 0 ? ciFlags.comment === true : void 0,
-						failOnMissing: ciFlags["fail-on-missing"] === true
+						failOnMissing: ciFlags["fail-on-missing"] === true,
+						patComments: ciFlags["pat-comments"] === true
 					});
 				} else if (subcommand === "release") {
-					const { ciReleaseCommand } = await import("./ci-8KWWhjXl.mjs");
+					const { ciReleaseCommand } = await import("./ci-Bhx--Tj6.mjs");
 					await ciReleaseCommand(rootDir, {
 						mode: ciFlags["auto-publish"] === true ? "auto-publish" : "version-pr",
 						tag: ciFlags.tag,
-						branch: ciFlags.branch
+						branch: ciFlags.branch,
+						patPr: ciFlags["pat-pr"] === true
 					});
+				} else if (subcommand === "setup") {
+					const { ciSetupCommand } = await import("./ci-setup-qz4Y3v7T.mjs");
+					await ciSetupCommand(rootDir);
 				} else {
-					log.error(`Unknown ci subcommand: ${subcommand}. Use "ci check" or "ci release".`);
+					log.error(`Unknown ci subcommand: ${subcommand}. Use "ci check", "ci release", or "ci setup".`);
 					process.exit(1);
 				}
 				break;
 			}
 			case "publish": {
 				const rootDir = await findRoot();
-				const { publishCommand } = await import("./publish-DZ3m7qkX.mjs");
+				const { publishCommand } = await import("./publish-Cun-zQ1b.mjs");
 				await publishCommand(rootDir, {
 					dryRun: flags["dry-run"] === true,
 					tag: flags.tag,
@@ -119,7 +124,7 @@ async function main() {
 				const subcommand = args[1];
 				const aiFlags = parseFlags(args.slice(2));
 				if (subcommand === "setup") {
-					const { aiSetupCommand } = await import("./ai-B8ZL2x8z.mjs");
+					const { aiSetupCommand } = await import("./ai-sMYUf3lP.mjs");
 					await aiSetupCommand(rootDir, { target: aiFlags.target });
 				} else {
 					log.error(`Unknown ai subcommand: ${subcommand}. Use "ai setup".`);
@@ -129,7 +134,7 @@ async function main() {
 			}
 			case "--version":
 			case "-v":
-				console.log(`bumpy 0.0.1`);
+				console.log(`bumpy 1.0.0`);
 				break;
 			case "help":
 			case "--help":
@@ -149,40 +154,41 @@ async function main() {
 }
 function printHelp() {
 	console.log(`
-  ${colorize(`🐸 bumpy v0.0.1`, "bold")} - Modern monorepo versioning
+  ${colorize(`🐸 bumpy v1.0.0`, "bold")} - Modern monorepo versioning
 
   Usage: bumpy <command> [options]
 
   Commands:
     init                    Initialize .bumpy/ directory
-    add                     Create a new changeset
-    generate                Generate changeset from conventional commits
+    add                     Create a new bump file
+    generate                Generate bump file from conventional commits
     status                  Show pending releases
-    check                   Verify changed packages have changesets (for pre-push hooks)
-    version                 Apply changesets and bump versions
+    check                   Verify changed packages have bump files (for pre-push hooks)
+    version                 Apply bump files and bump versions
     publish                 Publish versioned packages
     ci check                PR check — report pending releases, comment on PR
     ci release              Release — create version PR or auto-publish
+    ci setup                Set up a token for triggering CI on version PRs
     migrate                 Migrate from .changeset/ to .bumpy/
-    ai setup                Install AI skill for creating changesets
+    ai setup                Install AI skill for creating bump files
 
   Add options:
     --packages <list>       Package bumps (e.g., "pkg-a:minor,pkg-b:patch")
-    --message <text>        Changeset summary
-    --name <name>           Changeset filename
-    --empty                 Create an empty changeset
+    --message <text>        Bump file summary
+    --name <name>           Bump file filename
+    --empty                 Create an empty bump file
 
   Generate options:
     --from <ref>            Git ref to scan from (default: last version tag)
-    --dry-run               Preview without creating a changeset
-    --name <name>           Changeset filename
+    --dry-run               Preview without creating a bump file
+    --name <name>           Bump file filename
 
   Status options:
-    --json                  Output as JSON (includes dirs, changesets, packageNames)
+    --json                  Output as JSON (includes dirs, bumpFiles, packageNames)
     --packages              Output only package names, one per line
     --bump <types>          Filter by bump type (e.g., "major", "minor,patch")
     --filter <names>        Filter by package name/glob (e.g., "@myorg/*")
-    --verbose               Show changeset details
+    --verbose               Show bump file details
 
   Publish options:
     --dry-run               Preview without publishing
@@ -192,7 +198,7 @@ function printHelp() {
 
   CI check options:
     --comment               Force PR comment on/off (auto-detected in CI)
-    --fail-on-missing       Exit 1 if no changesets found
+    --fail-on-missing       Exit 1 if no bump files found
 
   CI release options:
     --auto-publish          Version + publish directly (default: create version PR)

package/dist/{config-CJ2orhTL.mjs → config-XZWUL3ma.mjs}

@@ -1,5 +1,5 @@
-import { i as __exportAll } from "./logger-ZqggsyGZ.mjs";
-import { a as readJson, n as exists } from "./fs-DbNNEyzq.mjs";
+import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
+import { a as readJson, n as exists } from "./fs-DYR2XuFE.mjs";
 import { resolve } from "node:path";
 //#region src/types.ts
 const BUMP_LEVELS = {
@@ -10,16 +10,6 @@ const BUMP_LEVELS = {
 function bumpLevel(type) {
 	return BUMP_LEVELS[type];
 }
-function parseIsolatedBump(type) {
-	if (type.endsWith("-isolated")) return {
-		bump: type.replace("-isolated", ""),
-		isolated: true
-	};
-	return {
-		bump: type,
-		isolated: false
-	};
-}
 function maxBump(a, b) {
 	if (!a) return b;
 	return bumpLevel(a) >= bumpLevel(b) ? a : b;
@@ -31,12 +21,9 @@ const DEFAULT_BUMP_RULES = {
 	},
 	peerDependencies: {
 		trigger: "major",
-		bumpAs: "major"
-	},
-	devDependencies: {
-		trigger: "none",
-		bumpAs: "patch"
+		bumpAs: "match"
 	},
+	devDependencies: false,
 	optionalDependencies: {
 		trigger: "minor",
 		bumpAs: "patch"
@@ -69,6 +56,7 @@ const DEFAULT_CONFIG = {
 		version: false,
 		tag: false
 	},
+	allowCustomCommands: false,
 	packages: {},
 	publish: { ...DEFAULT_PUBLISH_CONFIG },
 	aggregateRelease: false,
@@ -82,7 +70,7 @@ const DEFAULT_CONFIG = {
 		preamble: [
 			`<a href="https://github.com/dmno-dev/bumpy"><img src="https://raw.githubusercontent.com/dmno-dev/bumpy/main/images/frog-talking.png" alt="bumpy-frog" width="60" align="left" style="image-rendering: pixelated;" title="Hi! I'm bumpy!" /></a>`,
 			"",
-			`This PR was created and will be kept in sync by [bumpy](https://github.com/dmno-dev/bumpy) based on your .bumpy changeset files. Merge it when you are ready to release the packages listed below:`,
+			`This PR was created and will be kept in sync by [bumpy](https://github.com/dmno-dev/bumpy) based on your .bumpy bump files. Merge it when you are ready to release the packages listed below:`,
 			"<br clear=\"left\" />"
 		].join("\n")
 	}
@@ -131,6 +119,20 @@ async function loadPackageConfig(pkgDir, rootConfig, pkgName) {
 		const pkg = await readJson(resolve(pkgDir, "package.json"));
 		if (pkg.bumpy && typeof pkg.bumpy === "object") pkgJsonConfig = pkg.bumpy;
 	} catch {}
+	const disallowedKeys = [
+		"buildCommand",
+		"publishCommand",
+		"checkPublished"
+	].filter((k) => pkgJsonConfig[k] != null);
+	if (disallowedKeys.length > 0 && !isCustomCommandAllowed(pkgName, rootConfig)) {
+		const fields = disallowedKeys.map((k) => `"${k}"`).join(", ");
+		throw new Error(`Package "${pkgName}" defines custom command(s) (${fields}) in its package.json "bumpy" config, but the root config does not allow this.
+Custom commands execute shell commands during publishing and must be explicitly enabled.
+
+To fix this, either:
+  1. Move the command(s) to .bumpy/_config.json under "packages" (always trusted)
+  2. Add "allowCustomCommands": true (or ["${pkgName}"]) to .bumpy/_config.json`);
+	}
 	return mergePackageConfig(rootPkgConfig, pkgJsonConfig);
 }
 /** Find a package config from the root config, supporting glob patterns */
@@ -175,10 +177,6 @@ function mergePackageConfig(...configs) {
 			...result.dependencyBumpRules,
 			...cfg.dependencyBumpRules
 		};
-		if (cfg.specificDependencyRules) result.specificDependencyRules = {
-			...result.specificDependencyRules,
-			...cfg.specificDependencyRules
-		};
 		if (cfg.cascadeTo) result.cascadeTo = {
 			...result.cascadeTo,
 			...cfg.cascadeTo
@@ -186,6 +184,13 @@ function mergePackageConfig(...configs) {
 	}
 	return result;
 }
+/** Check if a package is allowed to define custom commands via package.json */
+function isCustomCommandAllowed(pkgName, config) {
+	const { allowCustomCommands } = config;
+	if (allowCustomCommands === true) return true;
+	if (Array.isArray(allowCustomCommands)) return allowCustomCommands.some((pattern) => matchGlob(pkgName, pattern));
+	return false;
+}
 function getBumpyDir(rootDir) {
 	return resolve(rootDir, BUMPY_DIR);
 }
@@ -212,4 +217,4 @@ function isPackageManaged(pkgName, isPrivate, config, pkgBumpy) {
 	return true;
 }
 //#endregion
-export { loadConfig as a, BUMP_LEVELS as c, DEFAULT_PUBLISH_CONFIG as d, DEP_TYPES as f, parseIsolatedBump as g, maxBump as h, isPackageManaged as i, DEFAULT_BUMP_RULES as l, hasCascade as m, findRoot as n, loadPackageConfig as o, bumpLevel as p, getBumpyDir as r, matchGlob as s, config_exports as t, DEFAULT_CONFIG as u };
+export { loadConfig as a, BUMP_LEVELS as c, DEFAULT_PUBLISH_CONFIG as d, DEP_TYPES as f, maxBump as h, isPackageManaged as i, DEFAULT_BUMP_RULES as l, hasCascade as m, findRoot as n, loadPackageConfig as o, bumpLevel as p, getBumpyDir as r, matchGlob as s, config_exports as t, DEFAULT_CONFIG as u };

package/dist/fs-DYR2XuFE.mjs

@@ -0,0 +1,81 @@
+import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
+import { access, mkdir, readFile, readdir, unlink, writeFile } from "node:fs/promises";
+//#region src/utils/fs.ts
+var fs_exports = /* @__PURE__ */ __exportAll({
+	ensureDir: () => ensureDir,
+	exists: () => exists,
+	listFiles: () => listFiles,
+	readJson: () => readJson,
+	readText: () => readText,
+	removeFile: () => removeFile,
+	updateJsonFields: () => updateJsonFields,
+	updateJsonNestedField: () => updateJsonNestedField,
+	writeJson: () => writeJson,
+	writeText: () => writeText
+});
+async function readJson(filePath) {
+	const content = await readFile(filePath, "utf-8");
+	return JSON.parse(content);
+}
+async function writeJson(filePath, data, indent = 2) {
+	await writeFile(filePath, JSON.stringify(data, null, indent) + "\n", "utf-8");
+}
+/**
+* Update specific top-level string fields in a JSON file without reformatting.
+* Reads the raw text, does targeted regex replacements, and writes it back.
+*/
+async function updateJsonFields(filePath, updates) {
+	let content = await readFile(filePath, "utf-8");
+	for (const [key, newValue] of Object.entries(updates)) {
+		const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		const pattern = new RegExp(`("${escaped}"\\s*:\\s*)"[^"]*"`);
+		content = content.replace(pattern, `$1"${newValue}"`);
+	}
+	await writeFile(filePath, content, "utf-8");
+}
+/**
+* Update a nested string field inside a top-level object in a JSON file without reformatting.
+* e.g., updateJsonNestedField(path, 'dependencies', 'core', '^2.0.0')
+*/
+async function updateJsonNestedField(filePath, parentKey, childKey, newValue) {
+	let content = await readFile(filePath, "utf-8");
+	const parentEscaped = parentKey.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	const childEscaped = childKey.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	const parentPattern = new RegExp(`("${parentEscaped}"\\s*:\\s*\\{)([^}]*)\\}`, "s");
+	content = content.replace(parentPattern, (match, prefix, body) => {
+		const childPattern = new RegExp(`("${childEscaped}"\\s*:\\s*)"[^"]*"`);
+		return `${prefix}${body.replace(childPattern, `$1"${newValue}"`)}}`;
+	});
+	await writeFile(filePath, content, "utf-8");
+}
+async function readText(filePath) {
+	return readFile(filePath, "utf-8");
+}
+async function writeText(filePath, content) {
+	await writeFile(filePath, content, "utf-8");
+}
+async function exists(filePath) {
+	try {
+		await access(filePath);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function listFiles(dir, ext) {
+	try {
+		const entries = await readdir(dir);
+		if (ext) return entries.filter((e) => e.endsWith(ext));
+		return entries;
+	} catch {
+		return [];
+	}
+}
+async function removeFile(filePath) {
+	await unlink(filePath);
+}
+async function ensureDir(dir) {
+	await mkdir(dir, { recursive: true });
+}
+//#endregion
+export { readJson as a, updateJsonFields as c, writeText as d, listFiles as i, updateJsonNestedField as l, exists as n, readText as o, fs_exports as r, removeFile as s, ensureDir as t, writeJson as u };

package/dist/{generate-oOFD9ABC.mjs → generate-gYKTpvex.mjs}

@@ -1,10 +1,10 @@
-import { n as log, t as colorize } from "./logger-ZqggsyGZ.mjs";
-import { t as ensureDir } from "./fs-DbNNEyzq.mjs";
-import { a as loadConfig, r as getBumpyDir } from "./config-CJ2orhTL.mjs";
-import { t as discoverPackages } from "./workspace-mVjawG8g.mjs";
-import { i as writeChangeset } from "./changeset-ClCYsChu.mjs";
-import { i as tryRun } from "./shell-DPlltpzb.mjs";
-import { n as slugify, t as randomName } from "./names-C-u50ofE.mjs";
+import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
+import { t as ensureDir } from "./fs-DYR2XuFE.mjs";
+import { a as loadConfig, r as getBumpyDir } from "./config-XZWUL3ma.mjs";
+import { t as discoverPackages } from "./workspace-C5ULTyUN.mjs";
+import { o as tryRunArgs } from "./shell-Dj7JRD_q.mjs";
+import { i as writeBumpFile } from "./bump-file-CCLXMLA8.mjs";
+import { n as slugify, t as randomName } from "./names-9VubBmL0.mjs";
 //#region src/commands/generate.ts
 const BUMP_MAP = {
 	feat: "minor",
@@ -27,7 +27,12 @@ async function generateCommand(rootDir, opts) {
 		process.exit(1);
 	}
 	log.step(`Scanning commits from ${colorize(from, "cyan")}...`);
-	const rawLog = tryRun(`git log ${from}..HEAD --format="%H%n%s%n%b%n---END---"`, { cwd: rootDir });
+	const rawLog = tryRunArgs([
+		"git",
+		"log",
+		`${from}..HEAD`,
+		"--format=%H%n%s%n%b%n---END---"
+	], { cwd: rootDir });
 	if (!rawLog) {
 		log.info("No commits found since " + from);
 		return;
@@ -79,7 +84,7 @@ async function generateCommand(rootDir, opts) {
 		for (const msg of info.messages) summaryLines.push(`- ${name}: ${msg}`);
 	}
 	if (opts.dryRun) {
-		log.bold("Would create changeset:");
+		log.bold("Would create bump file:");
 		for (const r of releases) console.log(`  ${r.name}: ${colorize(r.type, r.type === "major" ? "red" : r.type === "minor" ? "yellow" : "green")}`);
 		console.log();
 		log.dim("Summary:");
@@ -88,8 +93,8 @@ async function generateCommand(rootDir, opts) {
 	}
 	await ensureDir(getBumpyDir(rootDir));
 	const filename = opts.name ? slugify(opts.name) : randomName();
-	await writeChangeset(rootDir, filename, releases, summaryLines.join("\n"));
-	log.success(`Created changeset: .bumpy/${filename}.md`);
+	await writeBumpFile(rootDir, filename, releases, summaryLines.join("\n"));
+	log.success(`Created bump file: .bumpy/${filename}.md`);
 	for (const r of releases) log.dim(`  ${r.name}: ${r.type}`);
 }
 /** Parse raw git log output into individual commits */
@@ -152,7 +157,21 @@ function bumpPriority(type) {
 }
 /** Find the most recent version tag in the repo */
 function findLastVersionTag(rootDir) {
-	return tryRun("git describe --tags --abbrev=0 --match \"v*\" 2>/dev/null || git describe --tags --abbrev=0 --match \"*@*\" 2>/dev/null", { cwd: rootDir }) || null;
+	return tryRunArgs([
+		"git",
+		"describe",
+		"--tags",
+		"--abbrev=0",
+		"--match",
+		"v*"
+	], { cwd: rootDir }) || tryRunArgs([
+		"git",
+		"describe",
+		"--tags",
+		"--abbrev=0",
+		"--match",
+		"*@*"
+	], { cwd: rootDir }) || null;
 }
 //#endregion
 export { generateCommand };

package/dist/git-CGHVXXKw.mjs

@@ -0,0 +1,78 @@
+import { o as tryRunArgs, t as runArgs } from "./shell-Dj7JRD_q.mjs";
+//#region src/core/git.ts
+/** Create a git tag */
+function createTag(tag, opts) {
+	runArgs([
+		"git",
+		"tag",
+		tag
+	], opts);
+}
+/** Push commits and tags to remote */
+function pushWithTags(opts) {
+	runArgs(["git", "push"], opts);
+	runArgs([
+		"git",
+		"push",
+		"--tags"
+	], opts);
+}
+/** Check if there are uncommitted changes */
+function hasUncommittedChanges(opts) {
+	const result = tryRunArgs([
+		"git",
+		"status",
+		"--porcelain"
+	], opts);
+	return result !== null && result.length > 0;
+}
+/** Check if a tag already exists */
+function tagExists(tag, opts) {
+	return tryRunArgs([
+		"git",
+		"tag",
+		"-l",
+		tag
+	], opts) === tag;
+}
+/** Get files changed on this branch compared to a base branch */
+function getChangedFiles(rootDir, baseBranch) {
+	if (!tryRunArgs([
+		"git",
+		"rev-parse",
+		"--verify",
+		`origin/${baseBranch}`
+	], { cwd: rootDir })) tryRunArgs([
+		"git",
+		"fetch",
+		"origin",
+		baseBranch,
+		"--depth=1"
+	], { cwd: rootDir });
+	const diff = tryRunArgs([
+		"git",
+		"diff",
+		"--name-only",
+		tryRunArgs([
+			"git",
+			"merge-base",
+			"HEAD",
+			`origin/${baseBranch}`
+		], { cwd: rootDir }) || `origin/${baseBranch}`
+	], { cwd: rootDir });
+	if (!diff) return [];
+	return diff.split("\n").filter(Boolean);
+}
+/** Get all tags matching a pattern */
+function listTags(pattern, opts) {
+	const result = tryRunArgs([
+		"git",
+		"tag",
+		"-l",
+		pattern
+	], opts);
+	if (!result) return [];
+	return result.split("\n").filter(Boolean);
+}
+//#endregion
+export { pushWithTags as a, listTags as i, getChangedFiles as n, tagExists as o, hasUncommittedChanges as r, createTag as t };