greenbump 0.2.0

package/dist/engine/ecosystems/pipenv.js

@@ -0,0 +1,37 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+import { guessPythonTestCommand } from "./python-shared.js";
+export function parsePipenvOutdated(data) {
+    if (!data)
+        return [];
+    return data.map((d) => ({ name: d.name, current: d.version, wanted: "", latest: d.latest_version }));
+}
+export const pipenvAdapter = {
+    id: "pipenv",
+    displayName: "Pipenv",
+    manifestFiles: ["Pipfile"],
+    lockFiles: ["Pipfile.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "Pipfile"));
+    },
+    async outdated(cwd) {
+        // `pipenv update --outdated` prints human text; the documented
+        // machine-readable path is asking pip inside pipenv's venv.
+        const r = await exec("pipenv", ["run", "pip", "list", "--outdated", "--format", "json"], {
+            cwd,
+            timeout: 120_000,
+        });
+        const data = safeJson(r.stdout);
+        return parsePipenvOutdated(data);
+    },
+    async install(cwd, name, version) {
+        return exec("pipenv", ["install", `${name}==${version}`], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const test = await guessPythonTestCommand(cwd);
+        return test ? { test: { cmd: "pipenv", args: ["run", test.cmd, ...test.args] } } : {};
+    },
+};
+//# sourceMappingURL=pipenv.js.map

package/dist/engine/ecosystems/pipenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipenv.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/pipenv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,UAAU,mBAAmB,CACjC,IAA6E;IAE7E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,EAAE,EAAE,QAAQ;IACZ,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,CAAC,cAAc,CAAC;IAC3B,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,+DAA+D;QAC/D,4DAA4D;QAC5D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YACvF,GAAG;YACH,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAmE,CAAC,CAAC,MAAM,CAAC,CAAC;QAClG,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/pnpm.js

@@ -0,0 +1,48 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+async function readScripts(cwd) {
+    try {
+        const { readFile } = await import("node:fs/promises");
+        const raw = await readFile(join(cwd, "package.json"), "utf8");
+        const pkg = JSON.parse(raw);
+        return { build: pkg.scripts?.build, test: pkg.scripts?.test };
+    }
+    catch {
+        return {};
+    }
+}
+export function parsePnpmOutdated(data) {
+    if (!data)
+        return [];
+    return Object.entries(data)
+        .map(([name, v]) => ({ name, current: v.current ?? "", wanted: "", latest: v.latest ?? "" }))
+        .filter((o) => o.latest && o.current !== o.latest);
+}
+export const pnpmAdapter = {
+    id: "pnpm",
+    displayName: "pnpm",
+    manifestFiles: ["package.json"],
+    lockFiles: ["pnpm-lock.yaml"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "pnpm-lock.yaml"));
+    },
+    async outdated(cwd) {
+        // pnpm exits non-zero when outdated packages exist; stdout still has the JSON.
+        const r = await exec("pnpm", ["outdated", "--format", "json"], { cwd, timeout: 120_000 });
+        const data = safeJson(r.stdout);
+        return parsePnpmOutdated(data);
+    },
+    async install(cwd, name, version) {
+        return exec("pnpm", ["add", `${name}@${version}`, "--save-exact"], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const scripts = await readScripts(cwd);
+        return {
+            build: scripts.build ? { cmd: "pnpm", args: ["run", "build"] } : undefined,
+            test: scripts.test ? { cmd: "pnpm", args: ["test"] } : undefined,
+        };
+    },
+};
+//# sourceMappingURL=pnpm.js.map

package/dist/engine/ecosystems/pnpm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pnpm.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/pnpm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AAExF,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAkE;IAClG,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;SAC5F,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,EAAE,EAAE,MAAM;IACV,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,gBAAgB,CAAC;IAC7B,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,+EAA+E;QAC/E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,QAAQ,CAAwD,CAAC,CAAC,MAAM,CAAC,CAAC;QACvF,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/poetry.js

@@ -0,0 +1,42 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists } from "./types.js";
+import { guessPythonTestCommand } from "./python-shared.js";
+const OUTDATED_LINE = /^(\S+)\s+(\S+)\s+(\S+)/;
+export function parsePoetryOutdated(stdout) {
+    const out = [];
+    for (const line of stdout.split("\n")) {
+        const m = OUTDATED_LINE.exec(line.trim());
+        if (!m)
+            continue;
+        const [, name, current, latest] = m;
+        if (current !== latest)
+            out.push({ name, current, wanted: "", latest });
+    }
+    return out;
+}
+export const poetryAdapter = {
+    id: "poetry",
+    displayName: "Poetry",
+    manifestFiles: ["pyproject.toml"],
+    lockFiles: ["poetry.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "poetry.lock"));
+    },
+    async outdated(cwd) {
+        // `poetry show -o` prints "name  current  latest  description" as plain
+        // text (no --json flag exists for this subcommand).
+        const r = await exec("poetry", ["show", "-o", "--no-ansi"], { cwd, timeout: 120_000 });
+        return parsePoetryOutdated(r.stdout);
+    },
+    async install(cwd, name, version) {
+        return exec("poetry", ["add", `${name}==${version}`], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const test = await guessPythonTestCommand(cwd);
+        // poetry-managed projects run their tests through the poetry venv.
+        return test ? { test: { cmd: "poetry", args: ["run", test.cmd, ...test.args] } } : {};
+    },
+};
+//# sourceMappingURL=poetry.js.map

package/dist/engine/ecosystems/poetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poetry.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/poetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAwC,MAAM,YAAY,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,aAAa,GAAG,wBAAwB,CAAC;AAE/C,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAqB;IAC7C,EAAE,EAAE,QAAQ;IACZ,WAAW,EAAE,QAAQ;IACrB,aAAa,EAAE,CAAC,gBAAgB,CAAC;IACjC,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,wEAAwE;QACxE,oDAAoD;QACpD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,mEAAmE;QACnE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/pub.js

@@ -0,0 +1,32 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+export function parsePubOutdated(stdout) {
+    const data = safeJson(stdout);
+    if (!data?.packages)
+        return [];
+    return data.packages
+        .filter((p) => p.current?.version && p.latest?.version && p.current.version !== p.latest.version)
+        .map((p) => ({ name: p.package, current: p.current.version, wanted: "", latest: p.latest.version }));
+}
+export const pubAdapter = {
+    id: "pub",
+    displayName: "Pub (Dart/Flutter)",
+    manifestFiles: ["pubspec.yaml"],
+    lockFiles: ["pubspec.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "pubspec.yaml"));
+    },
+    async outdated(cwd) {
+        const r = await exec("dart", ["pub", "outdated", "--json"], { cwd, timeout: 120_000 });
+        return parsePubOutdated(r.stdout);
+    },
+    async install(cwd, name, version) {
+        return exec("dart", ["pub", "add", `${name}:${version}`], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands() {
+        return { test: { cmd: "dart", args: ["test"] } };
+    },
+};
+//# sourceMappingURL=pub.js.map

package/dist/engine/ecosystems/pub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pub.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/pub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AAQxF,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,IAAI,GAAG,QAAQ,CAAkC,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,QAAQ;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SAChG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,EAAE,EAAE,KAAK;IACT,WAAW,EAAE,oBAAoB;IACjC,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,cAAc,CAAC;IAC3B,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,OAAO,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;IACnD,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/python-shared.js

@@ -0,0 +1,29 @@
+import { join } from "node:path";
+import { readFile } from "node:fs/promises";
+import { pathExists } from "./types.js";
+/**
+ * Python has no universal test runner the way `npm test` is universal, so we
+ * guess: pytest config or a tests/ dir → pytest; tox.ini → tox; otherwise
+ * fall back to stdlib unittest discovery. `--test-cmd` overrides this.
+ */
+export async function guessPythonTestCommand(cwd) {
+    if (await pathExists(join(cwd, "pytest.ini")))
+        return { cmd: "pytest", args: [] };
+    if (await pathExists(join(cwd, "tests")))
+        return { cmd: "pytest", args: [] };
+    if (await hasPytestConfig(cwd))
+        return { cmd: "pytest", args: [] };
+    if (await pathExists(join(cwd, "tox.ini")))
+        return { cmd: "tox", args: [] };
+    return { cmd: "python3", args: ["-m", "unittest", "discover"] };
+}
+async function hasPytestConfig(cwd) {
+    try {
+        const raw = await readFile(join(cwd, "pyproject.toml"), "utf8");
+        return raw.includes("[tool.pytest");
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=python-shared.js.map

package/dist/engine/ecosystems/python-shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"python-shared.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/python-shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAqB,MAAM,YAAY,CAAC;AAE3D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW;IACtD,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAClF,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC7E,IAAI,MAAM,eAAe,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACnE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5E,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/engine/ecosystems/swiftpm.js

@@ -0,0 +1,102 @@
+import { join } from "node:path";
+import { readFile, writeFile } from "node:fs/promises";
+import { exec } from "../exec.js";
+import { pathExists } from "./types.js";
+// Matches: .package(url: "https://github.com/org/repo", from: "1.2.3")
+const PKG_LINE = /\.package\(\s*url:\s*"([^"]+)"\s*,\s*from:\s*"([^"]+)"\s*\)/g;
+function repoNameFromUrl(url) {
+    return url.replace(/\.git$/, "").split("/").pop() ?? url;
+}
+/**
+ * SwiftPM has no built-in "outdated" concept and Package.swift is Swift
+ * source code, not a data format — we regex out `.package(url:, from:)`
+ * declarations rather than truly parsing it. This is the highest-risk
+ * adapter in the set: works for the common declaration style, not
+ * exhaustive.
+ */
+export function parsePackageResolved(raw) {
+    const resolved = {};
+    const data = JSON.parse(raw);
+    for (const pin of data.pins ?? []) {
+        if (pin.identity && pin.state?.version)
+            resolved[pin.identity] = pin.state.version;
+    }
+    return resolved;
+}
+export function parsePackageSwiftDeps(manifest, resolved) {
+    const out = [];
+    for (const m of manifest.matchAll(PKG_LINE)) {
+        const name = repoNameFromUrl(m[1]).toLowerCase();
+        const current = resolved[name];
+        if (!current)
+            continue;
+        out.push({ name, current, url: m[1] });
+    }
+    return out;
+}
+export const swiftpmAdapter = {
+    id: "swiftpm",
+    displayName: "Swift Package Manager",
+    manifestFiles: ["Package.swift"],
+    lockFiles: ["Package.resolved"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "Package.swift"));
+    },
+    async outdated(cwd) {
+        let resolved = {};
+        try {
+            const raw = await readFile(join(cwd, "Package.resolved"), "utf8");
+            resolved = parsePackageResolved(raw);
+        }
+        catch {
+            return [];
+        }
+        const manifest = await readFile(join(cwd, "Package.swift"), "utf8");
+        const deps = parsePackageSwiftDeps(manifest, resolved);
+        const out = [];
+        for (const dep of deps) {
+            const latest = await latestGitHubTag(dep.url);
+            if (latest && latest !== dep.current)
+                out.push({ name: dep.name, current: dep.current, wanted: "", latest });
+        }
+        return out;
+    },
+    async install(cwd, name, version) {
+        const path = join(cwd, "Package.swift");
+        const raw = await readFile(path, "utf8");
+        const re = new RegExp(`(\\.package\\(\\s*url:\\s*"[^"]*${escapeRegExp(name)}[^"]*"\\s*,\\s*from:\\s*")[^"]+(")`, "i");
+        if (!re.test(raw)) {
+            return { code: 1, stdout: "", stderr: `could not find package ${name} in Package.swift`, combined: `could not find package ${name} in Package.swift` };
+        }
+        await writeFile(path, raw.replace(re, `$1${version}$2`), "utf8");
+        return exec("swift", ["package", "resolve"], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands() {
+        return {
+            build: { cmd: "swift", args: ["build"] },
+            test: { cmd: "swift", args: ["test"] },
+        };
+    },
+};
+async function latestGitHubTag(repoUrl) {
+    const m = /github\.com\/([^/]+)\/([^/.]+)/.exec(repoUrl);
+    if (!m)
+        return null;
+    try {
+        const res = await fetch(`https://api.github.com/repos/${m[1]}/${m[2]}/tags`, {
+            headers: { "User-Agent": "greenbump" },
+        });
+        if (!res.ok)
+            return null;
+        const tags = (await res.json());
+        return tags[0]?.name.replace(/^v/, "") ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=swiftpm.js.map

package/dist/engine/ecosystems/swiftpm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swiftpm.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/swiftpm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAwC,MAAM,YAAY,CAAC;AAE9E,uEAAuE;AACvE,MAAM,QAAQ,GAAG,8DAA8D,CAAC;AAEhF,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0E,CAAC;IACtG,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,QAAgB,EAChB,QAAgC;IAEhC,MAAM,GAAG,GAA0D,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,EAAE,EAAE,SAAS;IACb,WAAW,EAAE,uBAAuB;IACpC,aAAa,EAAE,CAAC,eAAe,CAAC;IAChC,SAAS,EAAE,CAAC,kBAAkB,CAAC;IAC/B,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,IAAI,QAAQ,GAA2B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;YAClE,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,qBAAqB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,GAAG,GAAe,EAAE,CAAC;QAC3B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,OAAO;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,mCAAmC,YAAY,CAAC,IAAI,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QACtH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,0BAA0B,IAAI,mBAAmB,EAAE,QAAQ,EAAE,0BAA0B,IAAI,mBAAmB,EAAE,CAAC;QACzJ,CAAC;QACD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,OAAO,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,OAAO;YACL,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;YACxC,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;SACvC,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,KAAK,UAAU,eAAe,CAAC,OAAe;IAC5C,MAAM,CAAC,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;YAC3E,OAAO,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/engine/ecosystems/types.js

@@ -0,0 +1,19 @@
+export function safeJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+}
+export async function pathExists(p) {
+    try {
+        const { access } = await import("node:fs/promises");
+        await access(p);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/engine/ecosystems/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/types.ts"],"names":[],"mappings":"AAmDA,MAAM,UAAU,QAAQ,CAAI,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAS;IACxC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/engine/ecosystems/uv.js

@@ -0,0 +1,36 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+import { guessPythonTestCommand } from "./python-shared.js";
+export function parseUvOutdated(data) {
+    if (!data)
+        return [];
+    return data.map((d) => ({ name: d.name, current: d.version, wanted: "", latest: d.latest_version }));
+}
+export const uvAdapter = {
+    id: "uv",
+    displayName: "uv",
+    manifestFiles: ["pyproject.toml"],
+    lockFiles: ["uv.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "uv.lock"));
+    },
+    async outdated(cwd) {
+        const r = await exec("uv", ["tree", "--outdated", "--depth", "1"], { cwd, timeout: 120_000 });
+        // `uv tree --outdated` has no stable JSON output; fall back to `uv pip list --outdated --format json`
+        // against the project's venv, which is the documented machine-readable path.
+        const r2 = await exec("uv", ["pip", "list", "--outdated", "--format", "json"], { cwd, timeout: 120_000 });
+        const data = safeJson(r2.stdout);
+        void r;
+        return parseUvOutdated(data);
+    },
+    async install(cwd, name, version) {
+        return exec("uv", ["add", `${name}==${version}`], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const test = await guessPythonTestCommand(cwd);
+        return test ? { test: { cmd: "uv", args: ["run", test.cmd, ...test.args] } } : {};
+    },
+};
+//# sourceMappingURL=uv.js.map

package/dist/engine/ecosystems/uv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uv.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/uv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,UAAU,eAAe,CAC7B,IAA6E;IAE7E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAqB;IACzC,EAAE,EAAE,IAAI;IACR,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,CAAC,gBAAgB,CAAC;IACjC,SAAS,EAAE,CAAC,SAAS,CAAC;IACtB,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9F,sGAAsG;QACtG,6EAA6E;QAC7E,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,QAAQ,CAAmE,EAAE,CAAC,MAAM,CAAC,CAAC;QACnG,KAAK,CAAC,CAAC;QACP,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,CAAC;CACF,CAAC"}

package/dist/engine/ecosystems/yarn.js

@@ -0,0 +1,62 @@
+import { join } from "node:path";
+import { exec } from "../exec.js";
+import { pathExists, safeJson } from "./types.js";
+async function readScripts(cwd) {
+    try {
+        const { readFile } = await import("node:fs/promises");
+        const raw = await readFile(join(cwd, "package.json"), "utf8");
+        const pkg = JSON.parse(raw);
+        return { build: pkg.scripts?.build, test: pkg.scripts?.test };
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Yarn classic prints newline-delimited JSON; the row we want has type
+ * "table" with data.head = ["Package", "Current", "Wanted", "Latest", …].
+ * Exported standalone so it can be unit-tested against a fixture without
+ * shelling out to yarn.
+ */
+export function parseYarnOutdated(stdout) {
+    for (const line of stdout.split("\n")) {
+        const obj = safeJson(line);
+        if (obj?.type !== "table" || !obj.data)
+            continue;
+        const head = obj.data.head.map((h) => h.toLowerCase());
+        const iName = head.indexOf("package");
+        const iCurrent = head.indexOf("current");
+        const iLatest = head.indexOf("latest");
+        if (iName < 0 || iCurrent < 0 || iLatest < 0)
+            continue;
+        return obj.data.body
+            .map((row) => ({ name: row[iName], current: row[iCurrent], wanted: "", latest: row[iLatest] }))
+            .filter((o) => o.name && o.latest && o.current !== o.latest);
+    }
+    return [];
+}
+export const yarnAdapter = {
+    id: "yarn",
+    displayName: "Yarn",
+    manifestFiles: ["package.json"],
+    lockFiles: ["yarn.lock"],
+    verified: true,
+    async detect(cwd) {
+        return pathExists(join(cwd, "yarn.lock"));
+    },
+    async outdated(cwd) {
+        const r = await exec("yarn", ["outdated", "--json"], { cwd, timeout: 120_000 });
+        return parseYarnOutdated(r.stdout);
+    },
+    async install(cwd, name, version) {
+        return exec("yarn", ["add", `${name}@${version}`, "--exact"], { cwd, timeout: 300_000 });
+    },
+    async defaultCheckCommands(cwd) {
+        const scripts = await readScripts(cwd);
+        return {
+            build: scripts.build ? { cmd: "yarn", args: ["run", "build"] } : undefined,
+            test: scripts.test ? { cmd: "yarn", args: ["test"] } : undefined,
+        };
+    },
+};
+//# sourceMappingURL=yarn.js.map

package/dist/engine/ecosystems/yarn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"yarn.js","sourceRoot":"","sources":["../../../src/engine/ecosystems/yarn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAwC,MAAM,YAAY,CAAC;AAExF,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,QAAQ,CAAiE,IAAI,CAAC,CAAC;QAC3F,IAAI,GAAG,EAAE,IAAI,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,SAAS;QACjD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,SAAS;QACvD,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI;aACjB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC9F,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,EAAE,EAAE,MAAM;IACV,WAAW,EAAE,MAAM;IACnB,aAAa,EAAE,CAAC,cAAc,CAAC;IAC/B,SAAS,EAAE,CAAC,WAAW,CAAC;IACxB,QAAQ,EAAE,IAAI;IAEd,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAG;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,OAAO,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO;QAC9B,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,GAAG;QAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1E,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SACjE,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/engine/exec.js

@@ -0,0 +1,47 @@
+import { spawn } from "node:child_process";
+/**
+ * Run a command and capture its output. Never rejects on a non-zero exit —
+ * callers inspect `code` themselves, because tools like `npm outdated` use
+ * non-zero exits to signal "found something", not failure.
+ */
+export function exec(cmd, args, opts) {
+    return new Promise((resolve) => {
+        const child = spawn(cmd, args, {
+            cwd: opts.cwd,
+            env: opts.env ?? process.env,
+            shell: false,
+        });
+        let stdout = "";
+        let stderr = "";
+        let combined = "";
+        child.stdout.on("data", (d) => {
+            const s = d.toString();
+            stdout += s;
+            combined += s;
+        });
+        child.stderr.on("data", (d) => {
+            const s = d.toString();
+            stderr += s;
+            combined += s;
+        });
+        let timer;
+        if (opts.timeout) {
+            timer = setTimeout(() => {
+                child.kill("SIGKILL");
+                combined += `\n[greenbump] command timed out after ${opts.timeout}ms\n`;
+            }, opts.timeout);
+        }
+        child.on("close", (code) => {
+            if (timer)
+                clearTimeout(timer);
+            resolve({ code: code ?? 1, stdout, stderr, combined });
+        });
+        child.on("error", (err) => {
+            if (timer)
+                clearTimeout(timer);
+            combined += `\n[greenbump] failed to spawn ${cmd}: ${err.message}\n`;
+            resolve({ code: 1, stdout, stderr: String(err), combined });
+        });
+    });
+}
+//# sourceMappingURL=exec.js.map

package/dist/engine/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../../src/engine/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAiB3C;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAClB,GAAW,EACX,IAAc,EACd,IAAiB;IAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC5B,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAElB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,CAAC;YACZ,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,CAAC;YACZ,QAAQ,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,IAAI,KAAiC,CAAC;QACtC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,QAAQ,IAAI,yCAAyC,IAAI,CAAC,OAAO,MAAM,CAAC;YAC1E,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,QAAQ,IAAI,iCAAiC,GAAG,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC;YACrE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/engine/git.js

@@ -0,0 +1,42 @@
+import { exec } from "./exec.js";
+export async function isGitRepo(cwd) {
+    const r = await exec("git", ["rev-parse", "--is-inside-work-tree"], { cwd });
+    return r.code === 0 && r.stdout.trim() === "true";
+}
+export async function isTreeClean(cwd) {
+    const r = await exec("git", ["status", "--porcelain"], { cwd });
+    return r.code === 0 && r.stdout.trim() === "";
+}
+export async function currentBranch(cwd) {
+    const r = await exec("git", ["rev-parse", "--abbrev-ref", "HEAD"], { cwd });
+    return r.stdout.trim();
+}
+export async function createBranch(cwd, name) {
+    await exec("git", ["checkout", "-b", name], { cwd });
+}
+export async function checkout(cwd, ref) {
+    await exec("git", ["checkout", ref], { cwd });
+}
+export async function commitAll(cwd, message) {
+    await exec("git", ["add", "-A"], { cwd });
+    await exec("git", ["commit", "-m", message, "--no-verify"], { cwd });
+}
+/** `git diff --stat` against a ref, for the PR summary. */
+export async function diffStat(cwd, ref) {
+    const r = await exec("git", ["diff", "--stat", ref], { cwd });
+    return r.stdout.trim();
+}
+/** Full unified diff against a ref, for the PR body. */
+export async function fullDiff(cwd, ref) {
+    const r = await exec("git", ["diff", ref], { cwd });
+    return r.stdout;
+}
+/** List files changed since a ref. */
+export async function changedFiles(cwd, ref) {
+    const r = await exec("git", ["diff", "--name-only", ref], { cwd });
+    return r.stdout
+        .split("\n")
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+//# sourceMappingURL=git.js.map

package/dist/engine/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/engine/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,uBAAuB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW;IAC3C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,IAAY;IAC1D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IACrD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,OAAe;IAC1D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IACrD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,GAAW;IACrD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC,MAAM,CAAC;AAClB,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,GAAW;IACzD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,MAAM;SACZ,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC"}