greenbump 0.2.0

package/action.yml

@@ -0,0 +1,76 @@
+name: "greenbump"
+description: "Upgrade a dependency and let an AI agent fix the code it breaks, then open a green PR."
+branding:
+  icon: "arrow-up-circle"
+  color: "green"
+inputs:
+  anthropic-api-key:
+    description: "Your Anthropic API key (uses Claude). You pay for the tokens a fix costs."
+    required: false
+  deepseek-api-key:
+    description: "Your DeepSeek API key (uses DeepSeek, OpenAI-compatible). Provide this OR anthropic-api-key."
+    required: false
+  github-token:
+    description: "Token used to push the branch and open the PR. Use a PAT if you want CI to run on the PR."
+    required: false
+    default: ${{ github.token }}
+  dependency:
+    description: "Dependency to upgrade. Omit to pick the most-outdated one."
+    required: false
+  to:
+    description: "Target version (default: latest)."
+    required: false
+  ecosystem:
+    description: "Dependency ecosystem (npm, poetry, cargo, maven, …). Auto-detected if omitted."
+    required: false
+  build-cmd:
+    description: "Override the build command, e.g. \"make build\"."
+    required: false
+  test-cmd:
+    description: "Override the test command, e.g. \"make test\"."
+    required: false
+  provider:
+    description: "Model provider preset (openai, anthropic, deepseek, groq, …). Auto-detected if omitted."
+    required: false
+  model:
+    description: "Model id for the fix agent (default: per provider)."
+    required: false
+  base-url:
+    description: "Custom OpenAI-compatible endpoint (or override a preset)."
+    required: false
+  api-key:
+    description: "API key for --provider/--base-url. Prefer anthropic-api-key/deepseek-api-key for the built-in presets."
+    required: false
+  max-rounds:
+    description: "Max fix-loop rounds (caps token spend)."
+    required: false
+    default: "15"
+  max-tokens:
+    description: "Hard cap on total tokens spent by the fix loop; stops and flags the PR for review on overrun."
+    required: false
+  base-branch:
+    description: "Base branch for the PR (default: the triggering branch)."
+    required: false
+  review-label:
+    description: "Label added to the PR when it needs a human look (test file touched, or unverifiable). Auto-created if it doesn't exist."
+    required: false
+    default: "needs-review"
+  report-file:
+    description: "Write a JSON report of the run to this path."
+    required: false
+outputs:
+  status:
+    description: "One of: pr-opened, pr-needs-review, no-changes, unfixed, skipped."
+  pr-url:
+    description: "URL of the opened PR, if any."
+  dependency:
+    description: "The dependency that was upgraded."
+  from:
+    description: "Version before the upgrade."
+  to:
+    description: "Version after the upgrade."
+  fixed:
+    description: "Whether build + tests ended up green."
+runs:
+  using: "node20"
+  main: "action-dist/index.cjs"

package/dist/action/github.js

@@ -0,0 +1,70 @@
+import { appendFileSync } from "node:fs";
+/** Read a GitHub Action input from its INPUT_* env var (matching @actions/core). */
+export function getInput(name) {
+    const key = `INPUT_${name.replace(/ /g, "_").toUpperCase()}`;
+    return (process.env[key] ?? "").trim();
+}
+/** Write an Action output to $GITHUB_OUTPUT. */
+export function setOutput(name, value) {
+    const file = process.env.GITHUB_OUTPUT;
+    if (!file)
+        return;
+    // multiline-safe heredoc format
+    const delim = `ghadelimiter_${name}`;
+    appendFileSync(file, `${name}<<${delim}\n${value}\n${delim}\n`);
+}
+export function info(msg) {
+    process.stdout.write(msg + "\n");
+}
+export function setFailed(msg) {
+    process.stdout.write(`::error::${msg}\n`);
+    process.exitCode = 1;
+}
+/** Create a PR via the REST API using Node's global fetch. Returns the PR URL, or null on failure. */
+export async function createPullRequest(args) {
+    const res = await fetch(`https://api.github.com/repos/${args.owner}/${args.repo}/pulls`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${args.token}`,
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({
+            title: args.title,
+            body: args.body,
+            head: args.head,
+            base: args.base,
+            draft: args.draft,
+        }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        info(`::warning::could not open PR (${res.status}): ${text}`);
+        return null;
+    }
+    const data = (await res.json());
+    info(`opened PR #${data.number}: ${data.html_url}`);
+    if (args.labels?.length && data.number) {
+        await addLabels(args, data.number, args.labels);
+    }
+    return data.html_url ?? null;
+}
+/** The "create PR" endpoint doesn't accept labels directly — attach them via a follow-up call. */
+async function addLabels(args, prNumber, labels) {
+    const res = await fetch(`https://api.github.com/repos/${args.owner}/${args.repo}/issues/${prNumber}/labels`, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${args.token}`,
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": "2022-11-28",
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ labels }),
+    });
+    if (!res.ok) {
+        const text = await res.text();
+        info(`::warning::could not add label(s) (${res.status}): ${text}`);
+    }
+}
+//# sourceMappingURL=github.js.map

package/dist/action/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/action/github.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEzC,oFAAoF;AACpF,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7D,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,gCAAgC;IAChC,MAAM,KAAK,GAAG,gBAAgB,IAAI,EAAE,CAAC;IACrC,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC;AAeD,sGAAsG;AACtG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAkB;IACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,gCAAgC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,QAAQ,EAC/D;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;KACH,CACF,CAAC;IAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,iCAAiC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;IAC1E,IAAI,CAAC,cAAc,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED,kGAAkG;AAClG,KAAK,UAAU,SAAS,CACtB,IAAoD,EACpD,QAAgB,EAChB,MAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,gCAAgC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,WAAW,QAAQ,SAAS,EACnF;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE;YACrC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,YAAY;YACpC,cAAc,EAAE,kBAAkB;SACnC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CACF,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,sCAAsC,GAAG,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/action/main.js

@@ -0,0 +1,99 @@
+import { run, RunError } from "../engine/run.js";
+import { renderPrBody } from "../pr.js";
+import { exec } from "../engine/exec.js";
+import { buildReport, writeReport } from "../report.js";
+import { getInput, setOutput, info, setFailed, createPullRequest, } from "./github.js";
+async function main() {
+    // Map action inputs onto the env vars the provider factory reads.
+    const anthropicKey = getInput("anthropic-api-key") || process.env.ANTHROPIC_API_KEY || "";
+    const deepseekKey = getInput("deepseek-api-key") || process.env.DEEPSEEK_API_KEY || "";
+    if (anthropicKey)
+        process.env.ANTHROPIC_API_KEY = anthropicKey;
+    if (deepseekKey)
+        process.env.DEEPSEEK_API_KEY = deepseekKey;
+    const token = getInput("github-token") || process.env.GITHUB_TOKEN || "";
+    if (!anthropicKey && !deepseekKey) {
+        setFailed("an API key is required: set anthropic-api-key or deepseek-api-key (you pay for tokens).");
+        return;
+    }
+    if (!token) {
+        setFailed("github-token is required to push a branch and open a PR.");
+        return;
+    }
+    const cwd = process.cwd();
+    const repoSlug = process.env.GITHUB_REPOSITORY ?? "";
+    const [owner, repo] = repoSlug.split("/");
+    const base = getInput("base-branch") || process.env.GITHUB_REF_NAME || "main";
+    let summary;
+    try {
+        summary = await run({
+            cwd,
+            dep: getInput("dependency") || undefined,
+            to: getInput("to") || undefined,
+            ecosystem: getInput("ecosystem") || undefined,
+            buildCmd: getInput("build-cmd") || undefined,
+            testCmd: getInput("test-cmd") || undefined,
+            provider: getInput("provider") || undefined,
+            model: getInput("model") || undefined,
+            baseURL: getInput("base-url") || undefined,
+            apiKey: getInput("api-key") || undefined,
+            maxRounds: parseInt(getInput("max-rounds") || "15", 10),
+            maxTokens: getInput("max-tokens") ? parseInt(getInput("max-tokens"), 10) : undefined,
+            onLog: info,
+        });
+    }
+    catch (err) {
+        if (err instanceof RunError) {
+            info(`nothing to do: ${err.message}`);
+            setOutput("status", "skipped");
+            return;
+        }
+        setFailed(`greenbump failed: ${err.message}`);
+        return;
+    }
+    setOutput("dependency", summary.dep);
+    setOutput("from", summary.from);
+    setOutput("to", summary.to);
+    setOutput("fixed", String(summary.fixed));
+    const reportFile = getInput("report-file");
+    if (reportFile) {
+        await writeReport(reportFile, buildReport([summary]));
+    }
+    if (!summary.committed || !summary.branch) {
+        info("no committable changes produced — not opening a PR.");
+        setOutput("status", summary.fixed ? "no-changes" : "unfixed");
+        return;
+    }
+    // configure a bot identity and push the branch
+    await exec("git", ["config", "user.name", "greenbump[bot]"], { cwd });
+    await exec("git", ["config", "user.email", "greenbump@users.noreply.github.com"], { cwd });
+    const remote = `https://x-access-token:${token}@github.com/${repoSlug}.git`;
+    const push = await exec("git", ["push", "--force", remote, `HEAD:${summary.branch}`], { cwd });
+    if (push.code !== 0) {
+        setFailed(`failed to push branch:\n${push.combined}`);
+        return;
+    }
+    // Both "flagged for review" and "fix loop exhausted without going green"
+    // are not-safe-to-merge-blindly states — both get a draft PR. Only the
+    // action output/label distinguishes which one it was.
+    const stillBroken = summary.neededFix && !summary.fixed;
+    const draft = summary.needsReview || stillBroken;
+    const reviewLabel = getInput("review-label") || "needs-review";
+    const title = `chore(deps): bump ${summary.dep} ${summary.from} → ${summary.to}`;
+    const url = await createPullRequest({
+        token,
+        owner,
+        repo,
+        head: summary.branch,
+        base,
+        title,
+        body: renderPrBody(summary),
+        draft,
+        labels: summary.needsReview ? [reviewLabel] : undefined,
+    });
+    setOutput("pr-url", url ?? "");
+    setOutput("status", stillBroken ? "unfixed" : summary.needsReview ? "pr-needs-review" : "pr-opened");
+    info(draft ? "opened a draft PR for review." : "opened a PR — build + tests green.");
+}
+main().catch((err) => setFailed(`unexpected: ${err.message}`));
+//# sourceMappingURL=main.js.map

package/dist/action/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/action/main.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACL,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,SAAS,EACT,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAErB,KAAK,UAAU,IAAI;IACjB,kEAAkE;IAClE,MAAM,YAAY,GAAG,QAAQ,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;IAC1F,MAAM,WAAW,GAAG,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC;IACvF,IAAI,YAAY;QAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,YAAY,CAAC;IAC/D,IAAI,WAAW;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,WAAW,CAAC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAEzE,IAAI,CAAC,YAAY,IAAI,CAAC,WAAW,EAAE,CAAC;QAClC,SAAS,CAAC,yFAAyF,CAAC,CAAC;QACrG,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,SAAS,CAAC,0DAA0D,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC;IACrD,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC;IAE9E,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,GAAG,CAAC;YAClB,GAAG;YACH,GAAG,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,SAAS;YACxC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,SAAS;YAC/B,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS;YAC7C,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS;YAC5C,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS;YAC1C,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS;YAC3C,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS;YACrC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,SAAS;YAC1C,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS;YACxC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YACvD,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACpF,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,kBAAkB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,SAAS,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IAED,SAAS,CAAC,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAE1C,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1C,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAC5D,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,+CAA+C;IAC/C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,oCAAoC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,0BAA0B,KAAK,eAAe,QAAQ,MAAM,CAAC;IAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,SAAS,CAAC,2BAA2B,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,yEAAyE;IACzE,uEAAuE;IACvE,sDAAsD;IACtD,MAAM,WAAW,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;IACjD,MAAM,WAAW,GAAG,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC;IAC/D,MAAM,KAAK,GAAG,qBAAqB,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC;IACjF,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;QAClC,KAAK;QACL,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,MAAM;QACpB,IAAI;QACJ,KAAK;QACL,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC;QAC3B,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC,CAAC;IAEH,SAAS,CAAC,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IAC/B,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;AACvF,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,eAAgB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC"}

package/dist/agent/factory.js

@@ -0,0 +1,72 @@
+import { AnthropicProvider } from "./provider-anthropic.js";
+import { OpenAICompatProvider } from "./provider-openai.js";
+// Mainstream providers. Most speak the OpenAI protocol; only Claude is native
+// Anthropic. Add a row here to support a new provider.
+export const PRESETS = {
+    openai: { label: "OpenAI", protocol: "openai", baseURL: "https://api.openai.com/v1", keyEnv: "OPENAI_API_KEY" },
+    anthropic: { label: "Anthropic (Claude)", protocol: "anthropic", keyEnv: "ANTHROPIC_API_KEY", defaultModel: "claude-sonnet-5" },
+    deepseek: { label: "DeepSeek", protocol: "openai", baseURL: "https://api.deepseek.com", keyEnv: "DEEPSEEK_API_KEY", defaultModel: "deepseek-v4-pro" },
+    gemini: { label: "Google Gemini", protocol: "openai", baseURL: "https://generativelanguage.googleapis.com/v1beta/openai", keyEnv: "GEMINI_API_KEY" },
+    groq: { label: "Groq", protocol: "openai", baseURL: "https://api.groq.com/openai/v1", keyEnv: "GROQ_API_KEY" },
+    mistral: { label: "Mistral", protocol: "openai", baseURL: "https://api.mistral.ai/v1", keyEnv: "MISTRAL_API_KEY" },
+    xai: { label: "xAI Grok", protocol: "openai", baseURL: "https://api.x.ai/v1", keyEnv: "XAI_API_KEY" },
+    openrouter: { label: "OpenRouter", protocol: "openai", baseURL: "https://openrouter.ai/api/v1", keyEnv: "OPENROUTER_API_KEY" },
+    moonshot: { label: "Moonshot (Kimi)", protocol: "openai", baseURL: "https://api.moonshot.cn/v1", keyEnv: "MOONSHOT_API_KEY" },
+    qwen: { label: "Qwen (DashScope)", protocol: "openai", baseURL: "https://dashscope.aliyuncs.com/compatible-mode/v1", keyEnv: "DASHSCOPE_API_KEY" },
+    ollama: { label: "Ollama (local)", protocol: "openai", baseURL: "http://localhost:11434/v1", keyEnv: "OLLAMA_API_KEY", keyOptional: true },
+};
+// Order for auto-detection when no --provider is given.
+const DETECT_ORDER = ["anthropic", "deepseek", "openai", "gemini", "groq", "mistral", "xai", "openrouter", "moonshot", "qwen"];
+export function listProviders() {
+    return Object.entries(PRESETS)
+        .map(([k, p]) => `  ${k.padEnd(11)} ${p.label}${p.defaultModel ? ` (default: ${p.defaultModel})` : ""}`)
+        .join("\n");
+}
+/** Which preset to use: explicit --provider, else first one with a key in env. */
+function pickPresetName(choice) {
+    if (choice.provider) {
+        if (!PRESETS[choice.provider]) {
+            throw new Error(`Unknown provider "${choice.provider}". Known:\n${listProviders()}`);
+        }
+        return choice.provider;
+    }
+    return DETECT_ORDER.find((name) => process.env[PRESETS[name].keyEnv]);
+}
+export function createProvider(choice = {}) {
+    // Generic escape hatch: a raw --base-url with no preset => OpenAI-compatible.
+    const presetName = pickPresetName(choice);
+    if (!presetName && choice.baseURL) {
+        const key = choice.apiKey || process.env.OPENAI_API_KEY || "none";
+        if (!choice.model)
+            throw new Error("--base-url requires --model (no default known for a custom endpoint).");
+        return new OpenAICompatProvider("custom", key, choice.baseURL, choice.model);
+    }
+    if (!presetName) {
+        throw new Error(`No API key found and no --provider given. Set one of these env vars, or pass --provider:\n${listProviders()}`);
+    }
+    const preset = PRESETS[presetName];
+    const apiKey = choice.apiKey || process.env[preset.keyEnv] || (preset.keyOptional ? "none" : "");
+    if (!apiKey) {
+        throw new Error(`${preset.label} selected but ${preset.keyEnv} is not set.`);
+    }
+    const model = choice.model || preset.defaultModel;
+    if (!model) {
+        throw new Error(`${preset.label} needs an explicit model — pass --model <id> (model ids change often, so no default is baked in).`);
+    }
+    const baseURL = choice.baseURL || preset.baseURL;
+    if (preset.protocol === "anthropic") {
+        return new AnthropicProvider(apiKey, model, baseURL);
+    }
+    return new OpenAICompatProvider(presetName, apiKey, baseURL, model);
+}
+/** True if any provider is usable (a key in env, or an explicit provider/base-url). */
+export function hasAnyKey(choice = {}) {
+    try {
+        createProvider(choice);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=factory.js.map

package/dist/agent/factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"factory.js","sourceRoot":"","sources":["../../src/agent/factory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAiB5D,8EAA8E;AAC9E,uDAAuD;AACvD,MAAM,CAAC,MAAM,OAAO,GAA2B;IAC7C,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,gBAAgB,EAAE;IAC/G,SAAS,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,YAAY,EAAE,iBAAiB,EAAE;IAC/H,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,iBAAiB,EAAE;IACrJ,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE,MAAM,EAAE,gBAAgB,EAAE;IACpJ,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE,MAAM,EAAE,cAAc,EAAE;IAC9G,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,iBAAiB,EAAE;IAClH,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,aAAa,EAAE;IACrG,UAAU,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,oBAAoB,EAAE;IAC9H,QAAQ,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,kBAAkB,EAAE;IAC7H,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,EAAE,MAAM,EAAE,mBAAmB,EAAE;IAClJ,MAAM,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,IAAI,EAAE;CAC3I,CAAC;AAEF,wDAAwD;AACxD,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;AAS/H,MAAM,UAAU,aAAa;IAC3B,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;SACvG,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,MAAsB;IAC5C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,QAAQ,cAAc,aAAa,EAAE,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC;IACzB,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAyB,EAAE;IACxD,8EAA8E;IAC9E,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAE1C,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC5G,OAAO,IAAI,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,6FAA6F,aAAa,EAAE,EAAE,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,iBAAiB,MAAM,CAAC,MAAM,cAAc,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,YAAY,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,CAAC,KAAK,mGAAmG,CACnH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAQ,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,SAAyB,EAAE;IACnD,IAAI,CAAC;QACH,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/agent/fixer.js

@@ -0,0 +1,307 @@
+import { readFile, writeFile, readdir, stat } from "node:fs/promises";
+import { resolve, relative, isAbsolute, join } from "node:path";
+import { runChecks } from "../engine/checks.js";
+import { getAdapter } from "../engine/pm.js";
+function buildSystemPrompt(pm, deps) {
+    const adapter = getAdapter(pm);
+    const protectedFiles = [...adapter.manifestFiles, ...adapter.lockFiles].join(", ");
+    const upgradeLine = deps && deps.length > 1
+        ? `${deps.length} dependencies were just upgraded together and it broke the build or tests:\n${deps
+            .map((d) => `- ${d.dep} ${d.from} → ${d.to}`)
+            .join("\n")}`
+        : "A dependency was just upgraded and it broke the build or tests.";
+    return `You are greenbump's fix agent. ${upgradeLine}
+Your job: edit the project's source code so that build and tests pass again — WITHOUT downgrading any dependency and WITHOUT weakening or deleting tests to make them pass.
+
+Rules:
+- Make the smallest correct change that adapts the code to the new version's API.
+- Prefer following each dependency's documented migration path (renamed exports, changed signatures, moved modules, new required options). If release notes are provided below, treat them as authoritative over guessing.
+- Use search_code to find ALL call sites of the breaking API across the repo before editing — a partial fix that leaves other files broken wastes rounds.
+- Never edit ${protectedFiles}. The upgrade is intentional.
+- Never delete or trivially rewrite a test just to make it green. Fix the real cause.
+- Use run_check to verify. When run_check reports ok, you are done — stop.
+- You have a limited number of rounds. If you're running low, prioritize verifying your current fix over continuing to explore.
+- Work efficiently: read only the files you need.`;
+}
+const tools = [
+    {
+        name: "list_dir",
+        description: "List files and subdirectories at a project-relative path.",
+        parameters: {
+            type: "object",
+            properties: { path: { type: "string", description: "project-relative dir, '.' for root" } },
+            required: ["path"],
+        },
+    },
+    {
+        name: "search_code",
+        description: "Search the repo's source files for a literal string or regex (case-insensitive substring match per line). Use this to find every call site of a breaking API before editing.",
+        parameters: {
+            type: "object",
+            properties: {
+                query: { type: "string", description: "text or regex to search for" },
+                path: { type: "string", description: "project-relative dir to search under (default: '.')" },
+            },
+            required: ["query"],
+        },
+    },
+    {
+        name: "read_file",
+        description: "Read a project-relative file's contents.",
+        parameters: {
+            type: "object",
+            properties: { path: { type: "string" } },
+            required: ["path"],
+        },
+    },
+    {
+        name: "write_file",
+        description: "Overwrite a project-relative file with new contents.",
+        parameters: {
+            type: "object",
+            properties: { path: { type: "string" }, content: { type: "string" } },
+            required: ["path", "content"],
+        },
+    },
+    {
+        name: "run_check",
+        description: "Run build + tests. Returns whether they pass and any failure output.",
+        parameters: { type: "object", properties: {}, required: [] },
+    },
+];
+/** Resolve a project-relative path and refuse anything escaping cwd. */
+function safePath(cwd, p) {
+    const abs = isAbsolute(p) ? p : resolve(cwd, p);
+    const rel = relative(cwd, abs);
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+        throw new Error(`path escapes project root: ${p}`);
+    }
+    return abs;
+}
+const IGNORE_DIRS = new Set(["node_modules", ".git", "dist", "build", ".next", "coverage", ".turbo"]);
+const SEARCHABLE_EXT = new Set([
+    ".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".mts", ".cts",
+    ".json", ".vue", ".svelte", ".md", ".yml", ".yaml",
+]);
+const MAX_SEARCH_RESULTS = 200;
+const MAX_SEARCH_FILE_SIZE = 1_000_000;
+async function searchCode(cwd, root, query) {
+    let re;
+    try {
+        re = new RegExp(query, "i");
+    }
+    catch {
+        re = new RegExp(query.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "i");
+    }
+    const results = [];
+    async function walk(dir) {
+        if (results.length >= MAX_SEARCH_RESULTS)
+            return;
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (results.length >= MAX_SEARCH_RESULTS)
+                return;
+            if (IGNORE_DIRS.has(e.name))
+                continue;
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                await walk(abs);
+                continue;
+            }
+            const dot = e.name.lastIndexOf(".");
+            if (dot < 0 || !SEARCHABLE_EXT.has(e.name.slice(dot)))
+                continue;
+            let s;
+            try {
+                s = await stat(abs);
+            }
+            catch {
+                continue;
+            }
+            if (s.size > MAX_SEARCH_FILE_SIZE)
+                continue;
+            let content;
+            try {
+                content = await readFile(abs, "utf8");
+            }
+            catch {
+                continue;
+            }
+            const rel = relative(cwd, abs);
+            const lines = content.split("\n");
+            for (let i = 0; i < lines.length; i++) {
+                if (re.test(lines[i])) {
+                    results.push(`${rel}:${i + 1}: ${lines[i].trim().slice(0, 200)}`);
+                    if (results.length >= MAX_SEARCH_RESULTS)
+                        break;
+                }
+            }
+        }
+    }
+    await walk(safePath(cwd, root));
+    if (results.length === 0)
+        return "(no matches)";
+    const suffix = results.length >= MAX_SEARCH_RESULTS ? "\n...(truncated, refine your query)" : "";
+    return results.join("\n") + suffix;
+}
+async function toolResult(cwd, pm, checkOverrides, name, input) {
+    switch (name) {
+        case "list_dir": {
+            const abs = safePath(cwd, input.path ?? ".");
+            const entries = await readdir(abs, { withFileTypes: true });
+            const lines = entries
+                .filter((e) => !IGNORE_DIRS.has(e.name))
+                .map((e) => (e.isDirectory() ? `${e.name}/` : e.name));
+            return { text: lines.join("\n") || "(empty)" };
+        }
+        case "search_code": {
+            const text = await searchCode(cwd, input.path ?? ".", input.query);
+            return { text };
+        }
+        case "read_file": {
+            const abs = safePath(cwd, input.path);
+            const s = await stat(abs);
+            if (s.size > 200_000)
+                return { text: "(file too large to read)" };
+            return { text: await readFile(abs, "utf8") };
+        }
+        case "write_file": {
+            const abs = safePath(cwd, input.path);
+            await writeFile(abs, input.content, "utf8");
+            return { text: `wrote ${input.path}` };
+        }
+        case "run_check": {
+            const r = await runChecks(pm, cwd, checkOverrides);
+            if (r.ok)
+                return { text: "PASS: build and tests are green.", checkOk: true };
+            return {
+                text: `FAIL (${r.failedStep}):\n${r.output}`,
+                checkOk: false,
+            };
+        }
+        default:
+            return { text: `unknown tool ${name}` };
+    }
+}
+const MAX_RETRIES = 3;
+const RETRY_BASE_DELAY_MS = 1_000;
+function isRetryable(err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return /connection error|ECONNRESET|ETIMEDOUT|EAI_AGAIN|fetch failed|network|429|500|502|503|504/i.test(msg);
+}
+/** Call the provider with retry/backoff for transient network or server errors. */
+async function sendWithRetry(provider, system, messages, toolSpecs, log) {
+    let lastErr;
+    for (let attempt = 1; attempt <= MAX_RETRIES; attempt++) {
+        try {
+            return await provider.send(system, messages, toolSpecs);
+        }
+        catch (err) {
+            lastErr = err;
+            if (attempt === MAX_RETRIES || !isRetryable(err))
+                throw err;
+            const delay = RETRY_BASE_DELAY_MS * 2 ** (attempt - 1);
+            log(`provider request failed (${err.message}) — retrying in ${delay}ms (attempt ${attempt}/${MAX_RETRIES})`);
+            await new Promise((r) => setTimeout(r, delay));
+        }
+    }
+    throw lastErr;
+}
+export async function runFixLoop(opts) {
+    const { provider, pm, checkOverrides } = opts;
+    const log = opts.onLog ?? (() => { });
+    const usage = { inputTokens: 0, outputTokens: 0 };
+    const editedFiles = new Set();
+    const SYSTEM = buildSystemPrompt(pm, opts.deps);
+    const upgradeSummary = opts.deps && opts.deps.length > 1
+        ? opts.deps.map((d) => `\`${d.dep}\` from ${d.from} to ${d.to}`).join(", ")
+        : `\`${opts.dep}\` from ${opts.from} to ${opts.to}`;
+    const changelogBlock = opts.deps && opts.deps.length > 1
+        ? opts.deps
+            .filter((d) => d.changelog)
+            .map((d) => `\n\nRelease notes for ${d.dep}@${d.to}:\n\n${d.changelog}`)
+            .join("")
+        : opts.changelog
+            ? `\n\nHere are the release notes for ${opts.dep}@${opts.to} — use them to find the correct migration:\n\n${opts.changelog}`
+            : "";
+    const messages = [
+        {
+            role: "user",
+            text: `The dependenc${opts.deps && opts.deps.length > 1 ? "ies" : "y"} ${upgradeSummary} ${opts.deps && opts.deps.length > 1 ? "were" : "was"} upgraded.
+This broke the project. Here is the failing output:
+
+\`\`\`
+${opts.failureOutput}
+\`\`\`${changelogBlock}
+
+Fix the source code so build and tests pass. Call run_check to verify before finishing.`,
+        },
+    ];
+    let fixed = false;
+    let budgetExceeded = false;
+    let round = 0;
+    for (round = 1; round <= opts.maxRounds; round++) {
+        const remaining = opts.maxRounds - round + 1;
+        const system = remaining <= 2 ? `${SYSTEM}\n\nYou have ${remaining} round(s) left. Wrap up and verify now.` : SYSTEM;
+        const turn = await sendWithRetry(provider, system, messages, tools, log);
+        usage.inputTokens += turn.usage.inputTokens;
+        usage.outputTokens += turn.usage.outputTokens;
+        messages.push({ role: "assistant", text: turn.text, toolCalls: turn.toolCalls });
+        if (opts.maxTokens !== undefined && usage.inputTokens + usage.outputTokens >= opts.maxTokens) {
+            log(`round ${round}: hit token budget (${usage.inputTokens + usage.outputTokens}/${opts.maxTokens}) — stopping without a final fix, flagging for review`);
+            budgetExceeded = true;
+            break;
+        }
+        if (turn.toolCalls.length === 0) {
+            // Model stopped without a tool call — verify once and finish.
+            const r = await runChecks(pm, opts.cwd, checkOverrides);
+            fixed = r.ok;
+            log(`round ${round}: agent stopped, final check ${r.ok ? "PASS" : "FAIL"}`);
+            break;
+        }
+        const results = [];
+        for (const tc of turn.toolCalls) {
+            if (tc.name === "write_file") {
+                editedFiles.add(tc.input.path);
+            }
+            let out;
+            try {
+                out = await toolResult(opts.cwd, pm, checkOverrides, tc.name, tc.input);
+            }
+            catch (err) {
+                out = { text: `error: ${err.message}` };
+            }
+            log(`round ${round}: ${tc.name} ${tc.input.path ?? tc.input.query ?? ""}`.trim());
+            if (out.checkOk)
+                fixed = true;
+            results.push({
+                id: tc.id,
+                content: out.text,
+                isError: out.text.startsWith("error:") || undefined,
+            });
+        }
+        messages.push({ role: "tool", results });
+        if (fixed) {
+            log(`round ${round}: check passed — fixed`);
+            break;
+        }
+    }
+    return {
+        fixed,
+        // `round` overshoots by 1 when the for-loop exhausts naturally (its
+        // increment runs once more before the loop condition fails) — clamp so
+        // callers never see e.g. "16 rounds" for a --max-rounds 15 run.
+        rounds: Math.min(round, opts.maxRounds),
+        unverifiable: false,
+        usage,
+        editedFiles: [...editedFiles],
+        budgetExceeded,
+    };
+}
+//# sourceMappingURL=fixer.js.map