greenbump 0.2.0

package/dist/engine/git.test.js

@@ -0,0 +1,111 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, writeFile, rm, appendFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { exec } from "./exec.js";
+import { isGitRepo, isTreeClean, currentBranch, createBranch, checkout, commitAll, diffStat, fullDiff, changedFiles, } from "./git.js";
+async function withRepo(fn) {
+    const dir = await mkdtemp(join(tmpdir(), "greenbump-git-"));
+    try {
+        await exec("git", ["init", "-q"], { cwd: dir });
+        // Never touch the machine's global git config — set identity locally only.
+        await exec("git", ["config", "user.email", "test@greenbump.dev"], { cwd: dir });
+        await exec("git", ["config", "user.name", "greenbump test"], { cwd: dir });
+        await fn(dir);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+/** Repo with one committed file, so HEAD is a real ref (not "unborn"). */
+async function withInitializedRepo(fn) {
+    await withRepo(async (dir) => {
+        await writeFile(join(dir, "README.md"), "hello\n", "utf8");
+        await exec("git", ["add", "-A"], { cwd: dir });
+        await exec("git", ["commit", "-q", "-m", "init"], { cwd: dir });
+        await fn(dir);
+    });
+}
+test("isGitRepo: true inside a git repo, false in a plain directory", async () => {
+    await withRepo(async (dir) => {
+        assert.equal(await isGitRepo(dir), true);
+    });
+    const plain = await mkdtemp(join(tmpdir(), "greenbump-plain-"));
+    try {
+        assert.equal(await isGitRepo(plain), false);
+    }
+    finally {
+        await rm(plain, { recursive: true, force: true });
+    }
+});
+test("isTreeClean: true right after commit, false with an untracked or modified file", async () => {
+    await withInitializedRepo(async (dir) => {
+        assert.equal(await isTreeClean(dir), true);
+        await writeFile(join(dir, "untracked.txt"), "x", "utf8");
+        assert.equal(await isTreeClean(dir), false);
+        await exec("git", ["add", "-A"], { cwd: dir });
+        await exec("git", ["commit", "-q", "-m", "add untracked"], { cwd: dir });
+        assert.equal(await isTreeClean(dir), true);
+        await appendFile(join(dir, "README.md"), "more\n");
+        assert.equal(await isTreeClean(dir), false);
+    });
+});
+test("currentBranch + createBranch: creates and switches to a new branch", async () => {
+    await withInitializedRepo(async (dir) => {
+        const before = await currentBranch(dir);
+        assert.ok(before.length > 0);
+        await createBranch(dir, "greenbump/lodash-4.17.21");
+        const after = await currentBranch(dir);
+        assert.equal(after, "greenbump/lodash-4.17.21");
+        assert.notEqual(after, before);
+    });
+});
+test("checkout: switches HEAD back to an existing branch", async () => {
+    await withInitializedRepo(async (dir) => {
+        const original = await currentBranch(dir);
+        await createBranch(dir, "feature-x");
+        assert.equal(await currentBranch(dir), "feature-x");
+        await checkout(dir, original);
+        assert.equal(await currentBranch(dir), original);
+    });
+});
+test("commitAll: stages and commits pending changes, including untracked files", async () => {
+    await withInitializedRepo(async (dir) => {
+        await writeFile(join(dir, "new-file.txt"), "content", "utf8");
+        await appendFile(join(dir, "README.md"), "more\n");
+        assert.equal(await isTreeClean(dir), false);
+        await commitAll(dir, "chore(deps): bump lodash 4.17.20 → 4.17.21");
+        assert.equal(await isTreeClean(dir), true);
+        const log = await exec("git", ["log", "-1", "--pretty=%s"], { cwd: dir });
+        assert.equal(log.stdout.trim(), "chore(deps): bump lodash 4.17.20 → 4.17.21");
+    });
+});
+test("diffStat + fullDiff + changedFiles: report changes made since a ref", async () => {
+    await withInitializedRepo(async (dir) => {
+        const base = (await exec("git", ["rev-parse", "HEAD"], { cwd: dir })).stdout.trim();
+        await writeFile(join(dir, "src.js"), "export const x = 1;\n", "utf8");
+        await appendFile(join(dir, "README.md"), "changed\n");
+        await commitAll(dir, "add src.js and edit README");
+        const files = await changedFiles(dir, base);
+        assert.deepEqual([...files].sort(), ["README.md", "src.js"]);
+        const stat = await diffStat(dir, base);
+        assert.match(stat, /README\.md/);
+        assert.match(stat, /src\.js/);
+        const diff = await fullDiff(dir, base);
+        assert.match(diff, /\+export const x = 1;/);
+        assert.match(diff, /\+changed/);
+    });
+});
+test("commitAll: --no-verify means a failing pre-commit hook does not block the commit", async () => {
+    await withInitializedRepo(async (dir) => {
+        const hooksDir = join(dir, ".git", "hooks");
+        await writeFile(join(hooksDir, "pre-commit"), "#!/bin/sh\nexit 1\n", { mode: 0o755 });
+        await writeFile(join(dir, "another.txt"), "x", "utf8");
+        await commitAll(dir, "should succeed despite failing hook");
+        assert.equal(await isTreeClean(dir), true);
+        const log = await exec("git", ["log", "-1", "--pretty=%s"], { cwd: dir });
+        assert.equal(log.stdout.trim(), "should succeed despite failing hook");
+    });
+});
+//# sourceMappingURL=git.test.js.map

package/dist/engine/git.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.test.js","sourceRoot":"","sources":["../../src/engine/git.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,SAAS,EACT,WAAW,EACX,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,YAAY,GACb,MAAM,UAAU,CAAC;AAElB,KAAK,UAAU,QAAQ,CAAC,EAAkC;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChD,2EAA2E;QAC3E,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,KAAK,UAAU,mBAAmB,CAAC,EAAkC;IACnE,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;IAC/E,MAAM,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC3B,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAE3C,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAE3C,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE7B,MAAM,YAAY,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;QAEpD,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;IAC1F,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QAE5C,MAAM,SAAS,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;QAEnE,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,4CAA4C,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAEpF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,SAAS,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;QAEnD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,SAAS,CACb,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAC5B,qBAAqB,EACrB,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;QAEF,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC;QAE5D,MAAM,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,qCAAqC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/pm.js

@@ -0,0 +1,14 @@
+import { ADAPTERS, getAdapter, detectEcosystem } from "./ecosystems/index.js";
+/** Detect which ecosystem this project uses; defaults to npm if nothing else matches. */
+export async function detectPackageManager(cwd) {
+    const adapter = await detectEcosystem(cwd);
+    return adapter?.id ?? "npm";
+}
+export async function outdated(pm, cwd) {
+    return getAdapter(pm).outdated(cwd);
+}
+export async function install(pm, cwd, name, version) {
+    return getAdapter(pm).install(cwd, name, version);
+}
+export { ADAPTERS, getAdapter, detectEcosystem };
+//# sourceMappingURL=pm.js.map

package/dist/engine/pm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pm.js","sourceRoot":"","sources":["../../src/engine/pm.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAiB,MAAM,uBAAuB,CAAC;AAU7F,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW;IACpD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC3C,OAAO,OAAO,EAAE,EAAE,IAAI,KAAK,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAkB,EAAE,GAAW;IAC5D,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,EAAkB,EAClB,GAAW,EACX,IAAY,EACZ,OAAe;IAEf,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC"}

package/dist/engine/run.js

@@ -0,0 +1,167 @@
+import { detectOutdated } from "./detect.js";
+import { runChecks } from "./checks.js";
+import { upgradeDependency } from "./upgrade.js";
+import { detectPackageManager } from "./pm.js";
+import { fetchChangelog } from "./changelog.js";
+import { isGitRepo, isTreeClean, currentBranch, createBranch, commitAll, diffStat, fullDiff, } from "./git.js";
+import { runFixLoop } from "../agent/fixer.js";
+import { createProvider } from "../agent/factory.js";
+export class RunError extends Error {
+}
+/**
+ * Pure decision logic for `needsReview`, split out so it's directly
+ * testable without spinning up a real npm/fix-loop run. `fixed`/`neededFix`
+ * are the fix loop's own outcome; `unverifiable` and `testFilesTouched` are
+ * the two independent triggers (see the `needsReview` field doc above).
+ */
+export function computeNeedsReview(input) {
+    if (input.unverifiable)
+        return true;
+    if (input.budgetExceeded)
+        return true;
+    if (!input.neededFix)
+        return false;
+    return input.fixed && input.testFilesTouched.length > 0;
+}
+export async function run(opts) {
+    const log = opts.onLog ?? (() => { });
+    const { cwd } = opts;
+    const startedAt = Date.now();
+    const pm = opts.ecosystem ?? (await detectPackageManager(cwd));
+    const checkOverrides = { buildCmd: opts.buildCmd, testCmd: opts.testCmd };
+    log(`ecosystem: ${pm}`);
+    // 1. detect
+    log("detecting outdated dependencies…");
+    const outdated = await detectOutdated(pm, cwd);
+    if (outdated.length === 0) {
+        throw new RunError("No outdated dependencies found — nothing to upgrade.");
+    }
+    // 2. select target
+    const target = opts.dep
+        ? outdated.find((o) => o.name === opts.dep)
+        : outdated[0];
+    if (!target) {
+        throw new RunError(`\`${opts.dep}\` is not outdated (or not a direct dependency). Available: ${outdated
+            .map((o) => o.name)
+            .join(", ")}`);
+    }
+    const from = target.current;
+    const to = opts.to ?? target.latest;
+    log(`target: ${target.name} ${from} → ${to}`);
+    // 3. git isolation
+    let branch;
+    const gitRepo = await isGitRepo(cwd);
+    if (gitRepo && !opts.noGit) {
+        if (!(await isTreeClean(cwd))) {
+            throw new RunError("Working tree is dirty. Commit or stash your changes first (or pass --no-git).");
+        }
+        await currentBranch(cwd); // ensure HEAD resolves
+        branch = `greenbump/${target.name.replace(/[^a-zA-Z0-9._-]/g, "-")}-${to}`;
+        await createBranch(cwd, branch);
+        log(`created branch ${branch}`);
+    }
+    // 4. baseline — refuse to run if it's already broken, so we never chase
+    //    failures that predate the upgrade.
+    log("running baseline build + tests…");
+    const baseline = await runChecks(pm, cwd, checkOverrides);
+    if (!baseline.ok && !baseline.unverifiable) {
+        throw new RunError(`Baseline is already failing (${baseline.failedStep}) before any upgrade. ` +
+            `Fix that first — greenbump can't tell your pre-existing failures from upgrade breakage.`);
+    }
+    const baselineGreen = baseline.ok && !baseline.unverifiable;
+    // 5. upgrade
+    log(`installing ${target.name}@${to}…`);
+    const up = await upgradeDependency(pm, cwd, target.name, to);
+    if (!up.ok) {
+        throw new RunError(`${pm} failed to install ${target.name}@${to}:\n${up.output}`);
+    }
+    // 6. verify
+    const post = await runChecks(pm, cwd, checkOverrides);
+    const summary = {
+        dep: target.name,
+        from,
+        to,
+        packageManager: pm,
+        branch,
+        baselineGreen,
+        neededFix: false,
+        fixed: post.ok,
+        unverifiable: post.unverifiable,
+        needsReview: false,
+        committed: false,
+        rounds: 0,
+        usage: { inputTokens: 0, outputTokens: 0 },
+        editedFiles: [],
+        testFilesTouched: [],
+        durationMs: 0,
+    };
+    if (post.unverifiable) {
+        // no way to verify — still a valid PR, just flagged
+        log("no build/test scripts — upgrade applied but UNVERIFIED");
+        summary.needsReview = true;
+        await maybeCommit(cwd, summary, true);
+        summary.durationMs = Date.now() - startedAt;
+        return summary;
+    }
+    if (post.ok) {
+        // clean upgrade, nothing broke
+        log("clean upgrade — build + tests green with no code changes");
+        await maybeCommit(cwd, summary, true);
+        summary.durationMs = Date.now() - startedAt;
+        return summary;
+    }
+    // 7. broke — fetch changelog context, then run the fix agent
+    summary.neededFix = true;
+    const changelog = await fetchChangelog(target.name, from, to);
+    if (changelog)
+        log(`found changelog/release notes for ${target.name}`);
+    const provider = createProvider({
+        provider: opts.provider,
+        model: opts.model,
+        baseURL: opts.baseURL,
+        apiKey: opts.apiKey,
+    });
+    log(`upgrade broke ${post.failedStep} — starting fix loop via ${provider.name} (${provider.model})`);
+    const fix = await runFixLoop({
+        cwd,
+        pm,
+        checkOverrides,
+        provider,
+        maxRounds: opts.maxRounds,
+        maxTokens: opts.maxTokens,
+        dep: target.name,
+        from,
+        to,
+        failureOutput: post.output,
+        changelog,
+        onLog: log,
+    });
+    summary.fixed = fix.fixed;
+    summary.rounds = fix.rounds;
+    summary.usage = fix.usage;
+    summary.editedFiles = fix.editedFiles;
+    summary.testFilesTouched = fix.editedFiles.filter((f) => /(^|\/)(test|tests|__tests__|spec)(\/|\.)|\.(test|spec)\./i.test(f));
+    summary.needsReview = computeNeedsReview({
+        unverifiable: false,
+        neededFix: true,
+        fixed: fix.fixed,
+        testFilesTouched: summary.testFilesTouched,
+        budgetExceeded: fix.budgetExceeded,
+    });
+    await maybeCommit(cwd, summary, fix.fixed);
+    summary.durationMs = Date.now() - startedAt;
+    return summary;
+}
+async function maybeCommit(cwd, summary, shouldCommit) {
+    if (!summary.branch || !shouldCommit)
+        return;
+    const note = summary.neededFix
+        ? ` and fix ${summary.editedFiles.length} file(s)`
+        : "";
+    await commitAll(cwd, `chore(deps): bump ${summary.dep} ${summary.from} → ${summary.to}${note}\n\nAutomated by greenbump.`);
+    summary.committed = true;
+    summary.diffStat = await diffStat(cwd, "HEAD~1");
+    if (summary.neededFix)
+        summary.fullDiff = await fullDiff(cwd, "HEAD~1");
+}
+//# sourceMappingURL=run.js.map

package/dist/engine/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/engine/run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAuB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAuB,MAAM,SAAS,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EACL,SAAS,EACT,WAAW,EACX,aAAa,EACb,YAAY,EACZ,SAAS,EACT,QAAQ,EACR,QAAQ,GACT,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAyDrD,MAAM,OAAO,QAAS,SAAQ,KAAK;CAAG;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAMlC;IACC,IAAI,KAAK,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;AAC1D,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAgB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAC1F,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAExB,YAAY;IACZ,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,sDAAsD,CAAC,CAAC;IAC7E,CAAC;IAED,mBAAmB;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG;QACrB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,GAAG,CAAC;QAC3C,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAChB,KAAK,IAAI,CAAC,GAAG,+DAA+D,QAAQ;aACjF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC;IACpC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;IAE9C,mBAAmB;IACnB,IAAI,MAA0B,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,QAAQ,CAChB,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,uBAAuB;QACjD,MAAM,GAAG,aAAa,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3E,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,GAAG,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,wEAAwE;IACxE,wCAAwC;IACxC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAChB,gCAAgC,QAAQ,CAAC,UAAU,wBAAwB;YACzE,yFAAyF,CAC5F,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;IAE5D,aAAa;IACb,GAAG,CAAC,cAAc,MAAM,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACX,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,sBAAsB,MAAM,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,YAAY;IACZ,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;IAEtD,MAAM,OAAO,GAAe;QAC1B,GAAG,EAAE,MAAM,CAAC,IAAI;QAChB,IAAI;QACJ,EAAE;QACF,cAAc,EAAE,EAAE;QAClB,MAAM;QACN,aAAa;QACb,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,WAAW,EAAE,KAAK;QAClB,SAAS,EAAE,KAAK;QAChB,MAAM,EAAE,CAAC;QACT,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE;QAC1C,WAAW,EAAE,EAAE;QACf,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,CAAC;KACd,CAAC;IAEF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,oDAAoD;QACpD,GAAG,CAAC,wDAAwD,CAAC,CAAC;QAC9D,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;QAC3B,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,+BAA+B;QAC/B,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAChE,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC5C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,6DAA6D;IAC7D,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IACzB,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,SAAS;QAAE,GAAG,CAAC,qCAAqC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,GAAG,CAAC,iBAAiB,IAAI,CAAC,UAAU,4BAA4B,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC;QAC3B,GAAG;QACH,EAAE;QACF,cAAc;QACd,QAAQ;QACR,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,GAAG,EAAE,MAAM,CAAC,IAAI;QAChB,IAAI;QACJ,EAAE;QACF,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,SAAS;QACT,KAAK,EAAE,GAAG;KACX,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC1B,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC5B,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IAC1B,OAAO,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACtC,OAAO,CAAC,gBAAgB,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,2DAA2D,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,OAAO,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACvC,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,cAAc,EAAE,GAAG,CAAC,cAAc;KACnC,CAAC,CAAC;IAEH,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3C,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC5C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAW,EACX,OAAmB,EACnB,YAAqB;IAErB,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,YAAY;QAAE,OAAO;IAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS;QAC5B,CAAC,CAAC,YAAY,OAAO,CAAC,WAAW,CAAC,MAAM,UAAU;QAClD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,CACb,GAAG,EACH,qBAAqB,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,EAAE,GAAG,IAAI,6BAA6B,CACrG,CAAC;IACF,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC1E,CAAC"}

package/dist/engine/run.test.js

@@ -0,0 +1,47 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { computeNeedsReview } from "./run.js";
+test("computeNeedsReview: unverifiable always needs review, regardless of anything else", () => {
+    assert.equal(computeNeedsReview({ unverifiable: true, neededFix: false, fixed: true, testFilesTouched: [] }), true);
+});
+test("computeNeedsReview: clean upgrade (no fix needed) never needs review", () => {
+    assert.equal(computeNeedsReview({ unverifiable: false, neededFix: false, fixed: true, testFilesTouched: [] }), false);
+});
+test("computeNeedsReview: fixed with a test file touched needs review", () => {
+    assert.equal(computeNeedsReview({
+        unverifiable: false,
+        neededFix: true,
+        fixed: true,
+        testFilesTouched: ["src/foo.test.ts"],
+    }), true);
+});
+test("computeNeedsReview: fixed with no test file touched does not need review", () => {
+    assert.equal(computeNeedsReview({ unverifiable: false, neededFix: true, fixed: true, testFilesTouched: [] }), false);
+});
+test("computeNeedsReview: fix loop failed (unfixed) never needs review — that's exit code 2's job, not 3's", () => {
+    assert.equal(computeNeedsReview({
+        unverifiable: false,
+        neededFix: true,
+        fixed: false,
+        testFilesTouched: ["src/foo.test.ts"],
+    }), false);
+});
+test("computeNeedsReview: budgetExceeded always needs review, even on a clean/no-fix-needed run", () => {
+    assert.equal(computeNeedsReview({
+        unverifiable: false,
+        neededFix: false,
+        fixed: true,
+        testFilesTouched: [],
+        budgetExceeded: true,
+    }), true);
+});
+test("computeNeedsReview: budgetExceeded still needs review even when fixed with no test file touched", () => {
+    assert.equal(computeNeedsReview({
+        unverifiable: false,
+        neededFix: true,
+        fixed: true,
+        testFilesTouched: [],
+        budgetExceeded: true,
+    }), true);
+});
+//# sourceMappingURL=run.test.js.map

package/dist/engine/run.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.test.js","sourceRoot":"","sources":["../../src/engine/run.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAC/F,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAChG,KAAK,CACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,GAAG,EAAE;IAC3E,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC;QACjB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,CAAC,iBAAiB,CAAC;KACtC,CAAC,EACF,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAC/F,KAAK,CACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sGAAsG,EAAE,GAAG,EAAE;IAChH,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC;QACjB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,KAAK;QACZ,gBAAgB,EAAE,CAAC,iBAAiB,CAAC;KACtC,CAAC,EACF,KAAK,CACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC;QACjB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,KAAK;QAChB,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,EAAE;QACpB,cAAc,EAAE,IAAI;KACrB,CAAC,EACF,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iGAAiG,EAAE,GAAG,EAAE;IAC3G,MAAM,CAAC,KAAK,CACV,kBAAkB,CAAC;QACjB,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,IAAI;QACX,gBAAgB,EAAE,EAAE;QACpB,cAAc,EAAE,IAAI;KACrB,CAAC,EACF,IAAI,CACL,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/engine/upgrade.js

@@ -0,0 +1,10 @@
+import { install } from "./pm.js";
+/**
+ * Install a specific version of a dependency, pinned exactly, so the
+ * resulting PR is reproducible.
+ */
+export async function upgradeDependency(pm, cwd, name, version) {
+    const r = await install(pm, cwd, name, version);
+    return { ok: r.code === 0, output: r.combined };
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/engine/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../src/engine/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAuB,MAAM,SAAS,CAAC;AAOvD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkB,EAClB,GAAW,EACX,IAAY,EACZ,OAAe;IAEf,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChD,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClD,CAAC"}

package/dist/engine/workspace.js

@@ -0,0 +1,155 @@
+import { join, relative } from "node:path";
+import { readdir, readFile } from "node:fs/promises";
+import { pathExists, safeJson } from "./ecosystems/types.js";
+import { getAdapter } from "./ecosystems/index.js";
+/** Sentinel workspacePath meaning "the repo root itself", distinct from any real member path. */
+export const WORKSPACE_ROOT = ".";
+async function readPackageJson(dir) {
+    try {
+        const raw = await readFile(join(dir, "package.json"), "utf8");
+        return safeJson(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Minimal `packages:` list reader for pnpm-workspace.yaml — no full YAML
+ * parser dependency, just the one shape pnpm actually emits:
+ *   packages:
+ *     - "packages/*"
+ *     - "apps/*"
+ */
+async function readPnpmWorkspaceGlobs(cwd) {
+    let raw;
+    try {
+        raw = await readFile(join(cwd, "pnpm-workspace.yaml"), "utf8");
+    }
+    catch {
+        return [];
+    }
+    const globs = [];
+    let inPackages = false;
+    for (const line of raw.split("\n")) {
+        const trimmed = line.trim();
+        if (/^packages\s*:/.test(trimmed)) {
+            inPackages = true;
+            continue;
+        }
+        if (!inPackages)
+            continue;
+        const m = /^-\s*["']?([^"'#]+)["']?/.exec(trimmed);
+        if (m) {
+            globs.push(m[1].trim());
+        }
+        else if (trimmed && !trimmed.startsWith("#")) {
+            // a non-list, non-comment line ends the packages block
+            inPackages = false;
+        }
+    }
+    return globs;
+}
+/** Expand a glob with at most one trailing `*` segment (e.g. "packages/*") into real subdirectories. */
+async function expandGlob(cwd, glob) {
+    const star = glob.indexOf("*");
+    if (star === -1) {
+        return (await pathExists(join(cwd, glob))) ? [glob] : [];
+    }
+    const base = glob.slice(0, star).replace(/\/$/, "");
+    const baseDir = join(cwd, base);
+    let entries;
+    try {
+        entries = (await readdir(baseDir, { withFileTypes: true }))
+            .filter((e) => e.isDirectory())
+            .map((e) => e.name);
+    }
+    catch {
+        return [];
+    }
+    return entries.map((name) => (base ? `${base}/${name}` : name));
+}
+async function globsToMembers(cwd, globs) {
+    const members = [];
+    const seen = new Set();
+    for (const glob of globs) {
+        for (const relPath of await expandGlob(cwd, glob)) {
+            if (seen.has(relPath))
+                continue;
+            const pkg = await readPackageJson(join(cwd, relPath));
+            if (!pkg)
+                continue; // not an actual package (e.g. an empty scaffold dir)
+            seen.add(relPath);
+            members.push({ path: relPath, name: pkg.name ?? relPath });
+        }
+    }
+    return members;
+}
+/**
+ * Detect workspace members for npm/yarn (`workspaces` field) or pnpm
+ * (`pnpm-workspace.yaml`). Returns `[]` for non-monorepo projects — this is
+ * intentionally JS-ecosystem-only; other ecosystems' own workspace/module
+ * conventions (Cargo workspaces, Go modules, Gradle multi-project, …) are out
+ * of scope for this pass.
+ */
+export async function detectWorkspaceMembers(cwd) {
+    const pnpmGlobs = await readPnpmWorkspaceGlobs(cwd);
+    if (pnpmGlobs.length > 0)
+        return globsToMembers(cwd, pnpmGlobs);
+    const root = await readPackageJson(cwd);
+    const raw = root?.workspaces;
+    const globs = Array.isArray(raw) ? raw : raw?.packages ?? [];
+    if (globs.length === 0)
+        return [];
+    return globsToMembers(cwd, globs);
+}
+/**
+ * Outdated deps across the repo root and every workspace member, flattened
+ * into one list. Each entry is tagged with the package.json it came from so
+ * batch/monorepo targets can disambiguate same-named deps at different
+ * versions in different packages.
+ */
+export async function detectOutdatedAll(pm, cwd) {
+    const adapter = getAdapter(pm);
+    const members = await detectWorkspaceMembers(cwd);
+    const scopes = [
+        { workspacePath: WORKSPACE_ROOT, dir: cwd },
+        ...members.map((m) => ({ workspacePath: m.path, dir: join(cwd, m.path) })),
+    ];
+    const results = [];
+    for (const scope of scopes) {
+        const outdated = await adapter.outdated(scope.dir);
+        for (const o of outdated) {
+            results.push({ ...o, workspacePath: scope.workspacePath });
+        }
+    }
+    return results;
+}
+export class WorkspaceAmbiguityError extends Error {
+    constructor(dep, candidates) {
+        const list = candidates
+            .map((c) => `  - ${c.workspacePath === WORKSPACE_ROOT ? "(root)" : c.workspacePath}: ${c.current} → ${c.latest}`)
+            .join("\n");
+        super(`\`${dep}\` is outdated at different versions in multiple workspace packages — ` +
+            `pass --workspace <path> to disambiguate:\n${list}`);
+    }
+}
+/**
+ * Resolve a dependency name to exactly one (dep, workspace) target across
+ * the flattened outdated list. Throws WorkspaceAmbiguityError if the name
+ * appears in 2+ packages at different current versions and no `workspace`
+ * hint was given; picks the matching one if `workspace` is given.
+ */
+export function resolveWorkspaceTarget(dep, candidates, workspace) {
+    const matches = candidates.filter((c) => c.name === dep);
+    if (matches.length === 0)
+        return undefined;
+    if (workspace !== undefined) {
+        return matches.find((c) => c.workspacePath === workspace || relative(workspace, c.workspacePath) === "");
+    }
+    const distinctVersions = new Set(matches.map((c) => c.current));
+    if (matches.length > 1 && distinctVersions.size > 1) {
+        throw new WorkspaceAmbiguityError(dep, matches);
+    }
+    return matches[0];
+}
+//# sourceMappingURL=workspace.js.map

package/dist/engine/workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/engine/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAiB,MAAM,uBAAuB,CAAC;AASlE,iGAAiG;AACjG,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAC;AAOlC,KAAK,UAAU,eAAe,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9D,OAAO,QAAQ,CAAmB,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,sBAAsB,CAAC,GAAW;IAC/C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,UAAU,GAAG,IAAI,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,EAAE,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,uDAAuD;YACvD,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,IAAY;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;aACxD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,KAAe;IACxD,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YAChC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;YACtD,IAAI,CAAC,GAAG;gBAAE,SAAS,CAAC,qDAAqD;YACzE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW;IACtD,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAEhE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAOD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAkB,EAClB,GAAW;IAEX,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAElD,MAAM,MAAM,GAAkD;QAC5D,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,EAAE;QAC3C,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAC3E,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,GAAW,EAAE,UAA+B;QACtD,MAAM,IAAI,GAAG,UAAU;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;aAChH,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,KAAK,CACH,KAAK,GAAG,wEAAwE;YAC9E,6CAA6C,IAAI,EAAE,CACtD,CAAC;IACJ,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAW,EACX,UAA+B,EAC/B,SAAkB;IAElB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,gBAAgB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC"}