@varlock/bumpy 0.0.2 → 1.0.0

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { n as findRoot } from "./config-BkwIEaQg.mjs";
+import { n as findRoot } from "./config-XZWUL3ma.mjs";
 //#region src/cli.ts
 const args = process.argv.slice(2);
 const command = args[0];
@@ -25,13 +25,13 @@ async function main() {
 		switch (command) {
 			case "init": {
 				const rootDir = await findRoot();
-				const { initCommand } = await import("./init-B0q3wEQW.mjs");
+				const { initCommand } = await import("./init-lA9E5pEc.mjs");
 				await initCommand(rootDir);
 				break;
 			}
 			case "add": {
 				const rootDir = await findRoot();
-				const { addCommand } = await import("./add-BjyVIUlr.mjs");
+				const { addCommand } = await import("./add-CgCjs4d-.mjs");
 				await addCommand(rootDir, {
 					packages: flags.packages,
 					message: flags.message,
@@ -42,7 +42,7 @@ async function main() {
 			}
 			case "status": {
 				const rootDir = await findRoot();
-				const { statusCommand } = await import("./status--Q8yAxQ4.mjs");
+				const { statusCommand } = await import("./status-CfE63ti5.mjs");
 				await statusCommand(rootDir, {
 					json: flags.json === true,
 					packagesOnly: flags.packages === true,
@@ -54,13 +54,13 @@ async function main() {
 			}
 			case "version": {
 				const rootDir = await findRoot();
-				const { versionCommand } = await import("./version-cAUkfYPx.mjs");
+				const { versionCommand } = await import("./version-19vVt9dv.mjs");
 				await versionCommand(rootDir);
 				break;
 			}
 			case "generate": {
 				const rootDir = await findRoot();
-				const { generateCommand } = await import("./generate-Btrsn1qi.mjs");
+				const { generateCommand } = await import("./generate-gYKTpvex.mjs");
 				await generateCommand(rootDir, {
 					from: flags.from,
 					dryRun: flags["dry-run"] === true,
@@ -70,13 +70,13 @@ async function main() {
 			}
 			case "migrate": {
 				const rootDir = await findRoot();
-				const { migrateCommand } = await import("./migrate-CfQNwD0T.mjs");
+				const { migrateCommand } = await import("./migrate-DmOYgmfD.mjs");
 				await migrateCommand(rootDir, { force: flags.force === true });
 				break;
 			}
 			case "check": {
 				const rootDir = await findRoot();
-				const { checkCommand } = await import("./check-jIwike9F.mjs");
+				const { checkCommand } = await import("./check-BOoxpWqk.mjs");
 				await checkCommand(rootDir);
 				break;
 			}
@@ -85,20 +85,22 @@ async function main() {
 				const subcommand = args[1];
 				const ciFlags = parseFlags(args.slice(2));
 				if (subcommand === "check") {
-					const { ciCheckCommand } = await import("./ci-D6LQbR38.mjs");
+					const { ciCheckCommand } = await import("./ci-Bhx--Tj6.mjs");
 					await ciCheckCommand(rootDir, {
 						comment: ciFlags.comment !== void 0 ? ciFlags.comment === true : void 0,
-						failOnMissing: ciFlags["fail-on-missing"] === true
+						failOnMissing: ciFlags["fail-on-missing"] === true,
+						patComments: ciFlags["pat-comments"] === true
 					});
 				} else if (subcommand === "release") {
-					const { ciReleaseCommand } = await import("./ci-D6LQbR38.mjs");
+					const { ciReleaseCommand } = await import("./ci-Bhx--Tj6.mjs");
 					await ciReleaseCommand(rootDir, {
 						mode: ciFlags["auto-publish"] === true ? "auto-publish" : "version-pr",
 						tag: ciFlags.tag,
-						branch: ciFlags.branch
+						branch: ciFlags.branch,
+						patPr: ciFlags["pat-pr"] === true
 					});
 				} else if (subcommand === "setup") {
-					const { ciSetupCommand } = await import("./ci-setup-C6FlOfW5.mjs");
+					const { ciSetupCommand } = await import("./ci-setup-qz4Y3v7T.mjs");
 					await ciSetupCommand(rootDir);
 				} else {
 					log.error(`Unknown ci subcommand: ${subcommand}. Use "ci check", "ci release", or "ci setup".`);
@@ -108,7 +110,7 @@ async function main() {
 			}
 			case "publish": {
 				const rootDir = await findRoot();
-				const { publishCommand } = await import("./publish-D_7RqEYL.mjs");
+				const { publishCommand } = await import("./publish-Cun-zQ1b.mjs");
 				await publishCommand(rootDir, {
 					dryRun: flags["dry-run"] === true,
 					tag: flags.tag,
@@ -122,7 +124,7 @@ async function main() {
 				const subcommand = args[1];
 				const aiFlags = parseFlags(args.slice(2));
 				if (subcommand === "setup") {
-					const { aiSetupCommand } = await import("./ai-CQhUyHAG.mjs");
+					const { aiSetupCommand } = await import("./ai-sMYUf3lP.mjs");
 					await aiSetupCommand(rootDir, { target: aiFlags.target });
 				} else {
 					log.error(`Unknown ai subcommand: ${subcommand}. Use "ai setup".`);
@@ -132,7 +134,7 @@ async function main() {
 			}
 			case "--version":
 			case "-v":
-				console.log(`bumpy 0.0.2`);
+				console.log(`bumpy 1.0.0`);
 				break;
 			case "help":
 			case "--help":
@@ -152,41 +154,41 @@ async function main() {
 }
 function printHelp() {
 	console.log(`
-  ${colorize(`🐸 bumpy v0.0.2`, "bold")} - Modern monorepo versioning
+  ${colorize(`🐸 bumpy v1.0.0`, "bold")} - Modern monorepo versioning
 
   Usage: bumpy <command> [options]
 
   Commands:
     init                    Initialize .bumpy/ directory
-    add                     Create a new changeset
-    generate                Generate changeset from conventional commits
+    add                     Create a new bump file
+    generate                Generate bump file from conventional commits
     status                  Show pending releases
-    check                   Verify changed packages have changesets (for pre-push hooks)
-    version                 Apply changesets and bump versions
+    check                   Verify changed packages have bump files (for pre-push hooks)
+    version                 Apply bump files and bump versions
     publish                 Publish versioned packages
     ci check                PR check — report pending releases, comment on PR
     ci release              Release — create version PR or auto-publish
     ci setup                Set up a token for triggering CI on version PRs
     migrate                 Migrate from .changeset/ to .bumpy/
-    ai setup                Install AI skill for creating changesets
+    ai setup                Install AI skill for creating bump files
 
   Add options:
     --packages <list>       Package bumps (e.g., "pkg-a:minor,pkg-b:patch")
-    --message <text>        Changeset summary
-    --name <name>           Changeset filename
-    --empty                 Create an empty changeset
+    --message <text>        Bump file summary
+    --name <name>           Bump file filename
+    --empty                 Create an empty bump file
 
   Generate options:
     --from <ref>            Git ref to scan from (default: last version tag)
-    --dry-run               Preview without creating a changeset
-    --name <name>           Changeset filename
+    --dry-run               Preview without creating a bump file
+    --name <name>           Bump file filename
 
   Status options:
-    --json                  Output as JSON (includes dirs, changesets, packageNames)
+    --json                  Output as JSON (includes dirs, bumpFiles, packageNames)
     --packages              Output only package names, one per line
     --bump <types>          Filter by bump type (e.g., "major", "minor,patch")
     --filter <names>        Filter by package name/glob (e.g., "@myorg/*")
-    --verbose               Show changeset details
+    --verbose               Show bump file details
 
   Publish options:
     --dry-run               Preview without publishing
@@ -196,7 +198,7 @@ function printHelp() {
 
   CI check options:
     --comment               Force PR comment on/off (auto-detected in CI)
-    --fail-on-missing       Exit 1 if no changesets found
+    --fail-on-missing       Exit 1 if no bump files found
 
   CI release options:
     --auto-publish          Version + publish directly (default: create version PR)

package/dist/{config-BkwIEaQg.mjs → config-XZWUL3ma.mjs}

@@ -1,5 +1,5 @@
 import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
-import { a as readJson, n as exists } from "./fs-0AtnPUUe.mjs";
+import { a as readJson, n as exists } from "./fs-DYR2XuFE.mjs";
 import { resolve } from "node:path";
 //#region src/types.ts
 const BUMP_LEVELS = {
@@ -10,16 +10,6 @@ const BUMP_LEVELS = {
 function bumpLevel(type) {
 	return BUMP_LEVELS[type];
 }
-function parseIsolatedBump(type) {
-	if (type.endsWith("-isolated")) return {
-		bump: type.replace("-isolated", ""),
-		isolated: true
-	};
-	return {
-		bump: type,
-		isolated: false
-	};
-}
 function maxBump(a, b) {
 	if (!a) return b;
 	return bumpLevel(a) >= bumpLevel(b) ? a : b;
@@ -31,12 +21,9 @@ const DEFAULT_BUMP_RULES = {
 	},
 	peerDependencies: {
 		trigger: "major",
-		bumpAs: "major"
-	},
-	devDependencies: {
-		trigger: "none",
-		bumpAs: "patch"
+		bumpAs: "match"
 	},
+	devDependencies: false,
 	optionalDependencies: {
 		trigger: "minor",
 		bumpAs: "patch"
@@ -69,6 +56,7 @@ const DEFAULT_CONFIG = {
 		version: false,
 		tag: false
 	},
+	allowCustomCommands: false,
 	packages: {},
 	publish: { ...DEFAULT_PUBLISH_CONFIG },
 	aggregateRelease: false,
@@ -82,7 +70,7 @@ const DEFAULT_CONFIG = {
 		preamble: [
 			`<a href="https://github.com/dmno-dev/bumpy"><img src="https://raw.githubusercontent.com/dmno-dev/bumpy/main/images/frog-talking.png" alt="bumpy-frog" width="60" align="left" style="image-rendering: pixelated;" title="Hi! I'm bumpy!" /></a>`,
 			"",
-			`This PR was created and will be kept in sync by [bumpy](https://github.com/dmno-dev/bumpy) based on your .bumpy changeset files. Merge it when you are ready to release the packages listed below:`,
+			`This PR was created and will be kept in sync by [bumpy](https://github.com/dmno-dev/bumpy) based on your .bumpy bump files. Merge it when you are ready to release the packages listed below:`,
 			"<br clear=\"left\" />"
 		].join("\n")
 	}
@@ -131,6 +119,20 @@ async function loadPackageConfig(pkgDir, rootConfig, pkgName) {
 		const pkg = await readJson(resolve(pkgDir, "package.json"));
 		if (pkg.bumpy && typeof pkg.bumpy === "object") pkgJsonConfig = pkg.bumpy;
 	} catch {}
+	const disallowedKeys = [
+		"buildCommand",
+		"publishCommand",
+		"checkPublished"
+	].filter((k) => pkgJsonConfig[k] != null);
+	if (disallowedKeys.length > 0 && !isCustomCommandAllowed(pkgName, rootConfig)) {
+		const fields = disallowedKeys.map((k) => `"${k}"`).join(", ");
+		throw new Error(`Package "${pkgName}" defines custom command(s) (${fields}) in its package.json "bumpy" config, but the root config does not allow this.
+Custom commands execute shell commands during publishing and must be explicitly enabled.
+
+To fix this, either:
+  1. Move the command(s) to .bumpy/_config.json under "packages" (always trusted)
+  2. Add "allowCustomCommands": true (or ["${pkgName}"]) to .bumpy/_config.json`);
+	}
 	return mergePackageConfig(rootPkgConfig, pkgJsonConfig);
 }
 /** Find a package config from the root config, supporting glob patterns */
@@ -175,10 +177,6 @@ function mergePackageConfig(...configs) {
 			...result.dependencyBumpRules,
 			...cfg.dependencyBumpRules
 		};
-		if (cfg.specificDependencyRules) result.specificDependencyRules = {
-			...result.specificDependencyRules,
-			...cfg.specificDependencyRules
-		};
 		if (cfg.cascadeTo) result.cascadeTo = {
 			...result.cascadeTo,
 			...cfg.cascadeTo
@@ -186,6 +184,13 @@ function mergePackageConfig(...configs) {
 	}
 	return result;
 }
+/** Check if a package is allowed to define custom commands via package.json */
+function isCustomCommandAllowed(pkgName, config) {
+	const { allowCustomCommands } = config;
+	if (allowCustomCommands === true) return true;
+	if (Array.isArray(allowCustomCommands)) return allowCustomCommands.some((pattern) => matchGlob(pkgName, pattern));
+	return false;
+}
 function getBumpyDir(rootDir) {
 	return resolve(rootDir, BUMPY_DIR);
 }
@@ -212,4 +217,4 @@ function isPackageManaged(pkgName, isPrivate, config, pkgBumpy) {
 	return true;
 }
 //#endregion
-export { loadConfig as a, BUMP_LEVELS as c, DEFAULT_PUBLISH_CONFIG as d, DEP_TYPES as f, parseIsolatedBump as g, maxBump as h, isPackageManaged as i, DEFAULT_BUMP_RULES as l, hasCascade as m, findRoot as n, loadPackageConfig as o, bumpLevel as p, getBumpyDir as r, matchGlob as s, config_exports as t, DEFAULT_CONFIG as u };
+export { loadConfig as a, BUMP_LEVELS as c, DEFAULT_PUBLISH_CONFIG as d, DEP_TYPES as f, maxBump as h, isPackageManaged as i, DEFAULT_BUMP_RULES as l, hasCascade as m, findRoot as n, loadPackageConfig as o, bumpLevel as p, getBumpyDir as r, matchGlob as s, config_exports as t, DEFAULT_CONFIG as u };

package/dist/fs-DYR2XuFE.mjs

@@ -0,0 +1,81 @@
+import { a as __exportAll } from "./logger-C2dEe5Su.mjs";
+import { access, mkdir, readFile, readdir, unlink, writeFile } from "node:fs/promises";
+//#region src/utils/fs.ts
+var fs_exports = /* @__PURE__ */ __exportAll({
+	ensureDir: () => ensureDir,
+	exists: () => exists,
+	listFiles: () => listFiles,
+	readJson: () => readJson,
+	readText: () => readText,
+	removeFile: () => removeFile,
+	updateJsonFields: () => updateJsonFields,
+	updateJsonNestedField: () => updateJsonNestedField,
+	writeJson: () => writeJson,
+	writeText: () => writeText
+});
+async function readJson(filePath) {
+	const content = await readFile(filePath, "utf-8");
+	return JSON.parse(content);
+}
+async function writeJson(filePath, data, indent = 2) {
+	await writeFile(filePath, JSON.stringify(data, null, indent) + "\n", "utf-8");
+}
+/**
+* Update specific top-level string fields in a JSON file without reformatting.
+* Reads the raw text, does targeted regex replacements, and writes it back.
+*/
+async function updateJsonFields(filePath, updates) {
+	let content = await readFile(filePath, "utf-8");
+	for (const [key, newValue] of Object.entries(updates)) {
+		const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+		const pattern = new RegExp(`("${escaped}"\\s*:\\s*)"[^"]*"`);
+		content = content.replace(pattern, `$1"${newValue}"`);
+	}
+	await writeFile(filePath, content, "utf-8");
+}
+/**
+* Update a nested string field inside a top-level object in a JSON file without reformatting.
+* e.g., updateJsonNestedField(path, 'dependencies', 'core', '^2.0.0')
+*/
+async function updateJsonNestedField(filePath, parentKey, childKey, newValue) {
+	let content = await readFile(filePath, "utf-8");
+	const parentEscaped = parentKey.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	const childEscaped = childKey.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+	const parentPattern = new RegExp(`("${parentEscaped}"\\s*:\\s*\\{)([^}]*)\\}`, "s");
+	content = content.replace(parentPattern, (match, prefix, body) => {
+		const childPattern = new RegExp(`("${childEscaped}"\\s*:\\s*)"[^"]*"`);
+		return `${prefix}${body.replace(childPattern, `$1"${newValue}"`)}}`;
+	});
+	await writeFile(filePath, content, "utf-8");
+}
+async function readText(filePath) {
+	return readFile(filePath, "utf-8");
+}
+async function writeText(filePath, content) {
+	await writeFile(filePath, content, "utf-8");
+}
+async function exists(filePath) {
+	try {
+		await access(filePath);
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function listFiles(dir, ext) {
+	try {
+		const entries = await readdir(dir);
+		if (ext) return entries.filter((e) => e.endsWith(ext));
+		return entries;
+	} catch {
+		return [];
+	}
+}
+async function removeFile(filePath) {
+	await unlink(filePath);
+}
+async function ensureDir(dir) {
+	await mkdir(dir, { recursive: true });
+}
+//#endregion
+export { readJson as a, updateJsonFields as c, writeText as d, listFiles as i, updateJsonNestedField as l, exists as n, readText as o, fs_exports as r, removeFile as s, ensureDir as t, writeJson as u };

package/dist/{generate-Btrsn1qi.mjs → generate-gYKTpvex.mjs}

@@ -1,10 +1,10 @@
 import { n as log, t as colorize } from "./logger-C2dEe5Su.mjs";
-import { t as ensureDir } from "./fs-0AtnPUUe.mjs";
-import { a as loadConfig, r as getBumpyDir } from "./config-BkwIEaQg.mjs";
-import { t as discoverPackages } from "./workspace-CxEKakDm.mjs";
+import { t as ensureDir } from "./fs-DYR2XuFE.mjs";
+import { a as loadConfig, r as getBumpyDir } from "./config-XZWUL3ma.mjs";
+import { t as discoverPackages } from "./workspace-C5ULTyUN.mjs";
 import { o as tryRunArgs } from "./shell-Dj7JRD_q.mjs";
-import { i as writeChangeset } from "./changeset-UCZdSRDv.mjs";
-import { n as slugify, t as randomName } from "./names-Ck8cun7B.mjs";
+import { i as writeBumpFile } from "./bump-file-CCLXMLA8.mjs";
+import { n as slugify, t as randomName } from "./names-9VubBmL0.mjs";
 //#region src/commands/generate.ts
 const BUMP_MAP = {
 	feat: "minor",
@@ -84,7 +84,7 @@ async function generateCommand(rootDir, opts) {
 		for (const msg of info.messages) summaryLines.push(`- ${name}: ${msg}`);
 	}
 	if (opts.dryRun) {
-		log.bold("Would create changeset:");
+		log.bold("Would create bump file:");
 		for (const r of releases) console.log(`  ${r.name}: ${colorize(r.type, r.type === "major" ? "red" : r.type === "minor" ? "yellow" : "green")}`);
 		console.log();
 		log.dim("Summary:");
@@ -93,8 +93,8 @@ async function generateCommand(rootDir, opts) {
 	}
 	await ensureDir(getBumpyDir(rootDir));
 	const filename = opts.name ? slugify(opts.name) : randomName();
-	await writeChangeset(rootDir, filename, releases, summaryLines.join("\n"));
-	log.success(`Created changeset: .bumpy/${filename}.md`);
+	await writeBumpFile(rootDir, filename, releases, summaryLines.join("\n"));
+	log.success(`Created bump file: .bumpy/${filename}.md`);
 	for (const r of releases) log.dim(`  ${r.name}: ${r.type}`);
 }
 /** Parse raw git log output into individual commits */

package/dist/index.d.mts

@@ -1,20 +1,16 @@
 //#region src/types.d.ts
 type BumpType = 'major' | 'minor' | 'patch';
-type BumpTypeWithIsolated = BumpType | 'minor-isolated' | 'patch-isolated';
+type BumpTypeWithNone = BumpType | 'none';
 declare const BUMP_LEVELS: Record<BumpType, number>;
 declare function bumpLevel(type: BumpType): number;
-declare function parseIsolatedBump(type: BumpTypeWithIsolated): {
-  bump: BumpType;
-  isolated: boolean;
-};
 declare function maxBump(a: BumpType | undefined, b: BumpType): BumpType;
 interface DependencyBumpRule {
   /** What bump level in the dependency triggers propagation */
-  trigger: BumpType | 'none';
+  trigger: BumpType;
   /** What bump to apply to the dependent */
   bumpAs: BumpType | 'match';
 }
-declare const DEFAULT_BUMP_RULES: Record<string, DependencyBumpRule>;
+declare const DEFAULT_BUMP_RULES: Record<string, DependencyBumpRule | false>;
 type DepType = 'dependencies' | 'devDependencies' | 'peerDependencies' | 'optionalDependencies';
 declare const DEP_TYPES: DepType[];
 interface PublishConfig {
@@ -44,12 +40,22 @@ interface BumpyConfig {
   ignore: string[];
   /** Package names/globs to explicitly include (overrides private + ignore) */
   include: string[];
-  updateInternalDependencies: 'patch' | 'minor' | 'out-of-range' | 'none';
-  dependencyBumpRules: Partial<Record<DepType, DependencyBumpRule>>;
+  updateInternalDependencies: 'patch' | 'minor' | 'out-of-range';
+  dependencyBumpRules: Partial<Record<DepType, DependencyBumpRule | false>>;
   privatePackages: {
     version: boolean;
     tag: boolean;
   };
+  /**
+   * Allow per-package custom commands (buildCommand, publishCommand, checkPublished)
+   * defined in package.json "bumpy" fields.
+   * Commands defined in the root config's `packages` map are always trusted.
+   *
+   * true = allow all packages to define custom commands
+   * string[] = allow only matching package names/globs
+   * false = only root-config commands are allowed (default)
+   */
+  allowCustomCommands: boolean | string[];
   packages: Record<string, PackageConfig>;
   publish: PublishConfig;
   /**
@@ -84,26 +90,25 @@ interface PackageConfig {
   skipNpmPublish?: boolean;
   /** Command to check if a version is already published. Should output the published version string. */
   checkPublished?: string;
-  dependencyBumpRules?: Partial<Record<DepType, DependencyBumpRule>>;
-  specificDependencyRules?: Record<string, DependencyBumpRule>;
+  dependencyBumpRules?: Partial<Record<DepType, DependencyBumpRule | false>>;
   cascadeTo?: Record<string, DependencyBumpRule>;
 }
 declare const DEFAULT_PUBLISH_CONFIG: PublishConfig;
 declare const DEFAULT_CONFIG: BumpyConfig;
-interface ChangesetReleaseSimple {
+interface BumpFileReleaseSimple {
   name: string;
-  type: BumpTypeWithIsolated;
+  type: BumpTypeWithNone;
 }
-interface ChangesetReleaseCascade {
+interface BumpFileReleaseCascade {
   name: string;
-  type: BumpTypeWithIsolated;
+  type: BumpTypeWithNone;
   cascade: Record<string, BumpType>;
 }
-type ChangesetRelease = ChangesetReleaseSimple | ChangesetReleaseCascade;
-declare function hasCascade(r: ChangesetRelease): r is ChangesetReleaseCascade;
-interface Changeset {
+type BumpFileRelease = BumpFileReleaseSimple | BumpFileReleaseCascade;
+declare function hasCascade(r: BumpFileRelease): r is BumpFileReleaseCascade;
+interface BumpFile {
   id: string;
-  releases: ChangesetRelease[];
+  releases: BumpFileRelease[];
   summary: string;
 }
 interface WorkspacePackage {
@@ -131,13 +136,14 @@ interface PlannedRelease {
   type: BumpType;
   oldVersion: string;
   newVersion: string;
-  changesets: string[];
+  bumpFiles: string[];
   isDependencyBump: boolean;
   isCascadeBump: boolean;
 }
 interface ReleasePlan {
-  changesets: Changeset[];
+  bumpFiles: BumpFile[];
   releases: PlannedRelease[];
+  warnings: string[];
 }
 //#endregion
 //#region src/core/config.d.ts
@@ -175,30 +181,35 @@ declare class DependencyGraph {
   topologicalSort(packages: Map<string, WorkspacePackage>): string[];
 }
 //#endregion
-//#region src/core/changeset.d.ts
-/** Read all changeset files from .bumpy/ directory, sorted by git creation order */
-declare function readChangesets(rootDir: string): Promise<Changeset[]>;
-/** Parse changeset content (for testing) */
-declare function parseChangeset(content: string, id: string): Changeset | null;
-/** Write a changeset file */
-declare function writeChangeset(rootDir: string, filename: string, releases: ChangesetRelease[], summary: string): Promise<string>;
+//#region src/core/bump-file.d.ts
+/** Read all bump files from .bumpy/ directory, sorted by git creation order */
+declare function readBumpFiles(rootDir: string): Promise<BumpFile[]>;
+/** Parse bump file content (for testing) */
+declare function parseBumpFile(content: string, id: string): BumpFile | null;
+/** Write a bump file */
+declare function writeBumpFile(rootDir: string, filename: string, releases: BumpFileRelease[], summary: string): Promise<string>;
 //#endregion
 //#region src/core/release-plan.d.ts
 /**
- * Build a release plan from pending changesets, the dependency graph, and config.
+ * Build a release plan from pending bump files, the dependency graph, and config.
  * This is the core algorithm of bumpy.
+ *
+ * The propagation loop runs three phases until stable:
+ *   Phase A — fix out-of-range dependencies (always runs)
+ *   Phase B — enforce fixed/linked group constraints
+ *   Phase C — apply cascades and proactive propagation rules
  */
-declare function assembleReleasePlan(changesets: Changeset[], packages: Map<string, WorkspacePackage>, depGraph: DependencyGraph, config: BumpyConfig): ReleasePlan;
+declare function assembleReleasePlan(bumpFiles: BumpFile[], packages: Map<string, WorkspacePackage>, depGraph: DependencyGraph, config: BumpyConfig): ReleasePlan;
 //#endregion
 //#region src/core/apply-release-plan.d.ts
-/** Apply the release plan: bump versions, update changelogs, delete changesets */
+/** Apply the release plan: bump versions, update changelogs, delete bump files */
 declare function applyReleasePlan(releasePlan: ReleasePlan, packages: Map<string, WorkspacePackage>, rootDir: string, config: BumpyConfig): Promise<void>;
 //#endregion
 //#region src/core/changelog.d.ts
 interface ChangelogContext {
   release: PlannedRelease;
-  /** Changesets that contributed to this release */
-  changesets: Changeset[];
+  /** Bump files that contributed to this release */
+  bumpFiles: BumpFile[];
   /** ISO date string (YYYY-MM-DD) */
   date: string;
 }
@@ -215,7 +226,7 @@ declare const defaultFormatter: ChangelogFormatter;
  */
 declare function loadFormatter(changelog: BumpyConfig['changelog'], rootDir: string): Promise<ChangelogFormatter>;
 /** Generate a changelog entry using the configured formatter */
-declare function generateChangelogEntry(release: PlannedRelease, changesets: Changeset[], formatter?: ChangelogFormatter, date?: string): Promise<string>;
+declare function generateChangelogEntry(release: PlannedRelease, bumpFiles: BumpFile[], formatter?: ChangelogFormatter, date?: string): Promise<string>;
 /** Prepend a new entry to an existing CHANGELOG.md content */
 declare function prependToChangelog(existingContent: string, newEntry: string): string;
 //#endregion
@@ -223,14 +234,21 @@ declare function prependToChangelog(existingContent: string, newEntry: string):
 interface GithubChangelogOptions {
   /** "owner/repo" — auto-detected from gh CLI if not provided */
   repo?: string;
+  /** Whether to include "Thanks @user" messages for contributors (default: true) */
+  thankContributors?: boolean;
   /** GitHub usernames (without @) to skip "Thanks" messages for (e.g. internal team members) */
   internalAuthors?: string[];
 }
 //#endregion
 //#region src/core/semver.d.ts
 declare function bumpVersion(version: string, type: BumpType): string;
-/** Check if a version satisfies a range */
-declare function satisfies(version: string, range: string): boolean;
+/**
+ * Check if a version satisfies a range.
+ * @param version - The version to check
+ * @param range - The version range (may include workspace: or catalog: protocol)
+ * @param currentVersion - The dependency's current version, used to resolve workspace:^ and workspace:~
+ */
+declare function satisfies(version: string, range: string, currentVersion?: string): boolean;
 /** Strip workspace: protocol from version ranges */
 declare function stripProtocol(range: string): string;
 //#endregion
@@ -259,4 +277,4 @@ interface PublishResult {
  */
 declare function publishPackages(releasePlan: ReleasePlan, packages: Map<string, WorkspacePackage>, depGraph: DependencyGraph, config: BumpyConfig, rootDir: string, opts?: PublishOptions, catalogs?: CatalogMap, detectedPm?: PackageManager): Promise<PublishResult>;
 //#endregion
-export { BUMP_LEVELS, BumpType, BumpTypeWithIsolated, BumpyConfig, type ChangelogContext, type ChangelogFormatter, Changeset, ChangesetRelease, ChangesetReleaseCascade, ChangesetReleaseSimple, DEFAULT_BUMP_RULES, DEFAULT_CONFIG, DEFAULT_PUBLISH_CONFIG, DEP_TYPES, DepType, DependencyBumpRule, DependencyGraph, DependentInfo, type GithubChangelogOptions, PackageConfig, PackageManager, PlannedRelease, PublishConfig, ReleasePlan, WorkspacePackage, applyReleasePlan, assembleReleasePlan, bumpLevel, bumpVersion, defaultFormatter, discoverPackages, findRoot, generateChangelogEntry, getBumpyDir, hasCascade, loadConfig, loadFormatter, matchGlob, maxBump, parseChangeset, parseIsolatedBump, prependToChangelog, publishPackages, readChangesets, satisfies, stripProtocol, writeChangeset };
+export { BUMP_LEVELS, BumpFile, BumpFileRelease, BumpFileReleaseCascade, BumpFileReleaseSimple, BumpType, BumpTypeWithNone, BumpyConfig, type ChangelogContext, type ChangelogFormatter, DEFAULT_BUMP_RULES, DEFAULT_CONFIG, DEFAULT_PUBLISH_CONFIG, DEP_TYPES, DepType, DependencyBumpRule, DependencyGraph, DependentInfo, type GithubChangelogOptions, PackageConfig, PackageManager, PlannedRelease, PublishConfig, ReleasePlan, WorkspacePackage, applyReleasePlan, assembleReleasePlan, bumpLevel, bumpVersion, defaultFormatter, discoverPackages, findRoot, generateChangelogEntry, getBumpyDir, hasCascade, loadConfig, loadFormatter, matchGlob, maxBump, parseBumpFile, prependToChangelog, publishPackages, readBumpFiles, satisfies, stripProtocol, writeBumpFile };

package/dist/index.mjs

@@ -1,9 +1,9 @@
-import { a as loadConfig, c as BUMP_LEVELS, d as DEFAULT_PUBLISH_CONFIG, f as DEP_TYPES, g as parseIsolatedBump, h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, n as findRoot, p as bumpLevel, r as getBumpyDir, s as matchGlob, u as DEFAULT_CONFIG } from "./config-BkwIEaQg.mjs";
-import { t as discoverPackages } from "./workspace-CxEKakDm.mjs";
+import { a as loadConfig, c as BUMP_LEVELS, d as DEFAULT_PUBLISH_CONFIG, f as DEP_TYPES, h as maxBump, l as DEFAULT_BUMP_RULES, m as hasCascade, n as findRoot, p as bumpLevel, r as getBumpyDir, s as matchGlob, u as DEFAULT_CONFIG } from "./config-XZWUL3ma.mjs";
+import { t as discoverPackages } from "./workspace-C5ULTyUN.mjs";
 import { t as DependencyGraph } from "./dep-graph-E-9-eQ2J.mjs";
-import { i as writeChangeset, n as parseChangeset, r as readChangesets } from "./changeset-UCZdSRDv.mjs";
-import { n as satisfies, r as stripProtocol, t as bumpVersion } from "./semver-BTzYh8vc.mjs";
-import { t as assembleReleasePlan } from "./release-plan-BEzwApuK.mjs";
-import { a as prependToChangelog, i as loadFormatter, n as defaultFormatter, r as generateChangelogEntry, t as applyReleasePlan } from "./apply-release-plan-D6TSrcwX.mjs";
-import { t as publishPackages } from "./publish-pipeline-ChnqW8nR.mjs";
-export { BUMP_LEVELS, DEFAULT_BUMP_RULES, DEFAULT_CONFIG, DEFAULT_PUBLISH_CONFIG, DEP_TYPES, DependencyGraph, applyReleasePlan, assembleReleasePlan, bumpLevel, bumpVersion, defaultFormatter, discoverPackages, findRoot, generateChangelogEntry, getBumpyDir, hasCascade, loadConfig, loadFormatter, matchGlob, maxBump, parseChangeset, parseIsolatedBump, prependToChangelog, publishPackages, readChangesets, satisfies, stripProtocol, writeChangeset };
+import { i as writeBumpFile, n as parseBumpFile, r as readBumpFiles } from "./bump-file-CCLXMLA8.mjs";
+import { n as satisfies, r as stripProtocol, t as bumpVersion } from "./semver-DfQyVLM_.mjs";
+import { t as assembleReleasePlan } from "./release-plan-Bi5QNSEo.mjs";
+import { a as prependToChangelog, i as loadFormatter, n as defaultFormatter, r as generateChangelogEntry, t as applyReleasePlan } from "./apply-release-plan-CczGWJTk.mjs";
+import { t as publishPackages } from "./publish-pipeline-BwBuKCIk.mjs";
+export { BUMP_LEVELS, DEFAULT_BUMP_RULES, DEFAULT_CONFIG, DEFAULT_PUBLISH_CONFIG, DEP_TYPES, DependencyGraph, applyReleasePlan, assembleReleasePlan, bumpLevel, bumpVersion, defaultFormatter, discoverPackages, findRoot, generateChangelogEntry, getBumpyDir, hasCascade, loadConfig, loadFormatter, matchGlob, maxBump, parseBumpFile, prependToChangelog, publishPackages, readBumpFiles, satisfies, stripProtocol, writeBumpFile };

package/dist/{init-B0q3wEQW.mjs → init-lA9E5pEc.mjs}

@@ -1,5 +1,5 @@
 import { n as log } from "./logger-C2dEe5Su.mjs";
-import { c as writeJson, l as writeText, n as exists, t as ensureDir } from "./fs-0AtnPUUe.mjs";
+import { d as writeText, n as exists, t as ensureDir, u as writeJson } from "./fs-DYR2XuFE.mjs";
 import { resolve } from "node:path";
 //#region src/commands/init.ts
 async function initCommand(rootDir) {
@@ -13,7 +13,7 @@ async function initCommand(rootDir) {
 		baseBranch: "main",
 		changelog: "default"
 	});
-	await writeText(resolve(bumpyDir, "README.md"), `# 🐸 Bumpy\n\nThis directory is used by [bumpy](https://github.com/dmno-dev/bumpy) to manage versioning.\n\nChangeset files (\`.md\`) in this directory describe pending version bumps.\nRun \`bumpy add\` to create a new changeset.\n`);
+	await writeText(resolve(bumpyDir, "README.md"), `# 🐸 Bumpy\n\nThis directory is used by [bumpy](https://github.com/dmno-dev/bumpy) to manage versioning.\n\nBump files (\`.md\`) in this directory describe pending version bumps.\nRun \`bumpy add\` to create a new bump file.\n`);
 	log.success("Initialized .bumpy/ directory");
 	log.dim("  Created .bumpy/_config.json");
 	log.dim("  Created .bumpy/README.md");