greenbump 0.7.0 → 0.9.0

package/dist/engine/scan/indexer.js

@@ -0,0 +1,129 @@
+import { readFile, readdir, stat } from "node:fs/promises";
+import { join, relative } from "node:path";
+import { isSensitivePath } from "../../agent/guard.js";
+import { REQUIRES_IMPORT_PREFIX, escapeRegExpLiteral } from "./probes.js";
+/**
+ * Single-pass file walker for impact analysis.
+ *
+ * Scans the project tree once, checking every line against every probe.
+ * Optimized for "find which files/lines match any of these patterns" —
+ * the inverse of `searchCode` (which is "find lines matching this one pattern").
+ */
+const IGNORE_DIRS = new Set(["node_modules", ".git", "dist", "build", ".next", "coverage", ".turbo"]);
+const SEARCHABLE_EXT = new Set([
+    ".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".mts", ".cts",
+    ".json", ".vue", ".svelte",
+]);
+const MAX_FILE_SIZE = 1_000_000;
+/**
+ * Scan the project once, finding all matches for all probes.
+ *
+ * Returns hits grouped by probe key, plus a set of probe keys that hit the
+ * per-probe cap (indicating their match count is a lower bound).
+ */
+export async function scanOnce(cwd, probes, opts) {
+    const hits = [];
+    const truncatedProbes = new Set();
+    const probeHitsCount = new Map();
+    // Compile each probe's regex once, not once per line per probe. A pattern
+    // that fails to compile falls back to a literal match (same policy as the
+    // fix loop's search_code tool).
+    const compiled = [];
+    for (const probe of probes) {
+        probeHitsCount.set(probe.key, 0);
+        let re;
+        try {
+            re = new RegExp(probe.pattern, "g");
+        }
+        catch {
+            re = new RegExp(escapeRegExpLiteral(probe.pattern), "g");
+        }
+        compiled.push({ probe, re });
+    }
+    async function walk(dir) {
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (IGNORE_DIRS.has(e.name))
+                continue;
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                await walk(abs);
+                continue;
+            }
+            const dot = e.name.lastIndexOf(".");
+            if (dot < 0 || !SEARCHABLE_EXT.has(e.name.slice(dot)))
+                continue;
+            if (isSensitivePath(e.name))
+                continue;
+            let content;
+            try {
+                const s = await stat(abs);
+                if (s.size > MAX_FILE_SIZE)
+                    continue;
+                content = await readFile(abs, "utf8");
+            }
+            catch {
+                continue;
+            }
+            const rel = relative(cwd, abs);
+            // Which packages this file imports — resolves the bare-identifier gate
+            // (`__requiresImport:<pkg>`) for probes in this same file, so the file
+            // is read exactly once.
+            const importsHere = new Set();
+            for (const m of content.matchAll(/(?:from|require\()\s*['"]([^'"]+)['"]/g)) {
+                importsHere.add(m[1]);
+            }
+            const lines = content.split("\n");
+            for (const { probe, re } of compiled) {
+                if ((probeHitsCount.get(probe.key) ?? 0) >= opts.perProbeCap) {
+                    truncatedProbes.add(probe.key);
+                    continue;
+                }
+                // File-level gates: substring filter, or import scope for bare identifiers.
+                if (probe.fileFilter) {
+                    if (probe.fileFilter.startsWith(REQUIRES_IMPORT_PREFIX)) {
+                        const pkg = probe.fileFilter.slice(REQUIRES_IMPORT_PREFIX.length);
+                        if (!importsHere.has(pkg))
+                            continue;
+                    }
+                    else if (!rel.includes(probe.fileFilter)) {
+                        continue;
+                    }
+                }
+                for (let i = 0; i < lines.length; i++) {
+                    const line = lines[i];
+                    re.lastIndex = 0;
+                    let match;
+                    while ((match = re.exec(line)) !== null) {
+                        hits.push({
+                            probeKey: probe.key,
+                            file: rel,
+                            line: i + 1,
+                            excerpt: line.trim().slice(0, 200),
+                        });
+                        const n = (probeHitsCount.get(probe.key) ?? 0) + 1;
+                        probeHitsCount.set(probe.key, n);
+                        if (n >= opts.perProbeCap) {
+                            truncatedProbes.add(probe.key);
+                            break;
+                        }
+                        // Zero-width match guard — otherwise exec() would never advance.
+                        if (match.index === re.lastIndex)
+                            re.lastIndex++;
+                    }
+                    if ((probeHitsCount.get(probe.key) ?? 0) >= opts.perProbeCap)
+                        break;
+                }
+            }
+        }
+    }
+    await walk(cwd);
+    return { hits, truncatedProbes };
+}
+//# sourceMappingURL=indexer.js.map

package/dist/engine/scan/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../../src/engine/scan/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAc,MAAM,aAAa,CAAC;AAEtF;;;;;;GAMG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5D,OAAO,EAAE,MAAM,EAAE,SAAS;CAC3B,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,SAAS,CAAC;AAShC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,MAAe,EACf,IAA6B;IAE7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,0EAA0E;IAC1E,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,QAAQ,GAAwC,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YAChE,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEtC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,CAAC,IAAI,GAAG,aAAa;oBAAE,SAAS;gBACrC,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAE/B,uEAAuE;YACvE,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;gBAC3E,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC7D,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBAED,4EAA4E;gBAC5E,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBACrB,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;wBACxD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;wBAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,SAAS;oBACtC,CAAC;yBAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC3C,SAAS;oBACX,CAAC;gBACH,CAAC;gBAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;oBACjB,IAAI,KAA6B,CAAC;oBAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACxC,IAAI,CAAC,IAAI,CAAC;4BACR,QAAQ,EAAE,KAAK,CAAC,GAAG;4BACnB,IAAI,EAAE,GAAG;4BACT,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACnC,CAAC,CAAC;wBACH,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACnD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;wBACjC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;4BAC1B,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAC/B,MAAM;wBACR,CAAC;wBACD,iEAAiE;wBACjE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;4BAAE,EAAE,CAAC,SAAS,EAAE,CAAC;oBACnD,CAAC;oBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW;wBAAE,MAAM;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC"}

package/dist/engine/scan/indexer.test.js

@@ -0,0 +1,149 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, writeFile, rm, mkdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, dirname } from "node:path";
+import { scanOnce } from "./indexer.js";
+import { REQUIRES_IMPORT_PREFIX } from "./probes.js";
+async function withProject(files, fn) {
+    const dir = await mkdtemp(join(tmpdir(), "greenbump-scan-"));
+    for (const [path, content] of Object.entries(files)) {
+        await mkdir(dirname(join(dir, path)), { recursive: true });
+        await writeFile(join(dir, path), content, "utf8");
+    }
+    try {
+        await fn(dir);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+function probe(pattern, key = "k0", fileFilter) {
+    return { key, pattern, refs: [{ depName: "pkg", changeIndex: 0 }], ...(fileFilter ? { fileFilter } : {}) };
+}
+test("scanOnce: reports file and 1-based line for each match", async () => {
+    await withProject({ "src/a.js": "line one\noldApi()\nline three\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+        assert.equal(hits[0].line, 2);
+        assert.equal(hits[0].excerpt, "oldApi()");
+    });
+});
+test("scanOnce: finds multiple matches across files", async () => {
+    await withProject({
+        "src/a.js": "oldApi()\n",
+        "src/nested/b.ts": "const x = oldApi;\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        const files = hits.map((h) => h.file).sort();
+        assert.deepEqual(files, [join("src", "a.js"), join("src", "nested", "b.ts")]);
+    });
+});
+test("scanOnce: counts every occurrence on one line", async () => {
+    await withProject({ "a.js": "oldApi(); oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 2);
+    });
+});
+test("scanOnce: caps matches per probe and flags the probe as truncated", async () => {
+    const manyLines = Array.from({ length: 50 }, () => "oldApi();").join("\n");
+    await withProject({ "a.js": manyLines }, async (dir) => {
+        const { hits, truncatedProbes } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 10 });
+        assert.equal(hits.length, 10);
+        assert.ok(truncatedProbes.has("k0"));
+    });
+});
+test("scanOnce: a probe under its cap is not marked truncated", async () => {
+    await withProject({ "a.js": "oldApi();\n" }, async (dir) => {
+        const { truncatedProbes } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 10 });
+        assert.equal(truncatedProbes.size, 0);
+    });
+});
+test("scanOnce: matches are attributed to the right probe when several are active", async () => {
+    await withProject({ "a.js": "alpha();\nbeta();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("alpha", "k-alpha"), probe("beta", "k-beta")], { perProbeCap: 200 });
+        assert.equal(hits.length, 2);
+        const alpha = hits.find((h) => h.excerpt.startsWith("alpha"));
+        const beta = hits.find((h) => h.excerpt.startsWith("beta"));
+        assert.equal(alpha?.probeKey, "k-alpha");
+        assert.equal(beta?.probeKey, "k-beta");
+    });
+});
+test("scanOnce: skips node_modules and other ignored directories", async () => {
+    await withProject({
+        "src/a.js": "oldApi();\n",
+        "node_modules/dep/index.js": "oldApi();\n",
+        "dist/bundle.js": "oldApi();\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+    });
+});
+test("scanOnce: never reports matches from secrets files", async () => {
+    await withProject({
+        "src/a.js": "oldApi();\n",
+        ".env": "SECRET=oldApi\n",
+        "secrets.json": '{"k":"oldApi"}\n',
+        "credentials.json": '{"k":"oldApi"}\n',
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+    });
+});
+test("scanOnce: only searches known source extensions", async () => {
+    await withProject({ "a.js": "oldApi();\n", "notes.txt": "oldApi();\n", "image.bin": "oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.deepEqual(hits.map((h) => h.file), ["a.js"]);
+    });
+});
+test("scanOnce: fileFilter restricts matches to matching paths", async () => {
+    await withProject({ "src/a.js": "oldApi();\n", "test/b.js": "oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi", "k0", "test")], { perProbeCap: 200 });
+        assert.deepEqual(hits.map((h) => h.file), [join("test", "b.js")]);
+    });
+});
+test("scanOnce: import gate limits bare-identifier probes to importing files", async () => {
+    await withProject({
+        "imports.js": "const { describe } = require('vitest');\ndescribe('x', () => {});\n",
+        "unrelated.js": "describe('this is not vitest');\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("describe", "k0", `${REQUIRES_IMPORT_PREFIX}vitest`)], { perProbeCap: 200 });
+        // Both occurrences live in imports.js; unrelated.js must contribute none.
+        assert.deepEqual(hits.map((h) => h.file), ["imports.js", "imports.js"]);
+        assert.deepEqual(hits.map((h) => h.line), [1, 2]);
+    });
+});
+test("scanOnce: import gate also matches ESM import statements", async () => {
+    await withProject({
+        "esm.mjs": 'import { describe } from "vitest";\ndescribe("x");\n',
+        "other.mjs": 'describe("nope");\n',
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("describe", "k0", `${REQUIRES_IMPORT_PREFIX}vitest`)], { perProbeCap: 200 });
+        assert.ok(hits.every((h) => h.file === "esm.mjs"));
+        assert.equal(hits.length, 2);
+    });
+});
+test("scanOnce: an invalid regex falls back to a literal match instead of throwing", async () => {
+    await withProject({ "a.js": "a[b\n" }, async (dir) => {
+        // Unbalanced bracket is not a valid regex — must not throw.
+        const { hits } = await scanOnce(dir, [probe("a[b")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+    });
+});
+test("scanOnce: no probes means no hits (and no crash)", async () => {
+    await withProject({ "a.js": "anything\n" }, async (dir) => {
+        const { hits, truncatedProbes } = await scanOnce(dir, [], { perProbeCap: 200 });
+        assert.deepEqual(hits, []);
+        assert.equal(truncatedProbes.size, 0);
+    });
+});
+test("scanOnce: empty directory yields no hits", async () => {
+    await withProject({}, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.deepEqual(hits, []);
+    });
+});
+//# sourceMappingURL=indexer.test.js.map

package/dist/engine/scan/indexer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.test.js","sourceRoot":"","sources":["../../../src/engine/scan/indexer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAc,MAAM,aAAa,CAAC;AAEjE,KAAK,UAAU,WAAW,CACxB,KAA6B,EAC7B,EAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,OAAe,EAAE,GAAG,GAAG,IAAI,EAAE,UAAmB;IAC7D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,WAAW,CACf,EAAE,UAAU,EAAE,kCAAkC,EAAE,EAClD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,WAAW,CACf;QACE,UAAU,EAAE,YAAY;QACxB,iBAAiB,EAAE,qBAAqB;KACzC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EACpD,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,WAAW,CACf;QACE,UAAU,EAAE,aAAa;QACzB,2BAA2B,EAAE,aAAa;QAC1C,gBAAgB,EAAE,aAAa;KAChC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,WAAW,CACf;QACE,UAAU,EAAE,aAAa;QACzB,MAAM,EAAE,iBAAiB;QACzB,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,kBAAkB;KACvC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;IACjE,MAAM,WAAW,CACf,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,EACjF,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,WAAW,CACf,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,EACzD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,WAAW,CACf;QACE,YAAY,EAAE,qEAAqE;QACnF,cAAc,EAAE,mCAAmC;KACpD,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,sBAAsB,QAAQ,CAAC,CAAC,EAC5D,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,0EAA0E;QAC1E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,WAAW,CACf;QACE,SAAS,EAAE,sDAAsD;QACjE,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,sBAAsB,QAAQ,CAAC,CAAC,EAC5D,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/scan/probes.js

@@ -0,0 +1,92 @@
+import { builtinCodemods, codemodMatchesRange, parseMajor } from "../fixer/patterns.js";
+/**
+ * Prefix marking a probe whose matches are only valid inside files that
+ * import a given package. Carried in `Probe.fileFilter` so the indexer can
+ * resolve it per file without a second pass.
+ */
+export const REQUIRES_IMPORT_PREFIX = "__requiresImport:";
+/**
+ * Generate search probes from a breaking change.
+ *
+ * Strategy:
+ * 1. Primary probe = oldApi.split("(")[0].trim(), if length >= 4
+ * 2. If primary is a bare identifier (no `.`, `(`, quotes), mark for import-scoped search
+ * 3. If primary too short, extract longest `.identifier` member and mark approx
+ */
+export function probesFromChange(change, depName, changeIndex) {
+    const probes = [];
+    const oldApi = change.oldApi;
+    // Primary probe: everything before the first `(`
+    const primary = oldApi.split("(")[0].trim();
+    if (primary.length >= 4) {
+        // Check if it's a bare identifier (no dots, parens, quotes, spaces)
+        const isBareIdentifier = /^[a-zA-Z_$][\w$]*$/.test(primary);
+        probes.push({
+            key: `${depName}:${changeIndex}:primary`,
+            pattern: escapeRegExpLiteral(primary),
+            approx: false,
+            refs: [{ depName, changeIndex }],
+            // Bare identifiers like `describe` are too noisy — only search in files
+            // that import the package (resolved per file by the indexer).
+            ...(isBareIdentifier ? { fileFilter: `${REQUIRES_IMPORT_PREFIX}${depName}` } : {}),
+        });
+        return probes;
+    }
+    // Fallback: extract the longest `.identifier` member
+    const members = oldApi.match(/\.[a-zA-Z_$][\w$]*/g) || [];
+    if (members.length > 0) {
+        const longest = members.reduce((a, b) => (a.length > b.length ? a : b));
+        probes.push({
+            key: `${depName}:${changeIndex}:member`,
+            pattern: escapeRegExpLiteral(longest),
+            approx: true,
+            refs: [{ depName, changeIndex }],
+        });
+    }
+    return probes;
+}
+/** Generate probes from a codemod (uses its transform.find pattern). */
+export function probesFromCodemod(codemod, depName, changeIndex) {
+    if (!codemod.transform)
+        return [];
+    return [
+        {
+            key: `${depName}:${changeIndex}:codemod`,
+            pattern: codemod.transform.find,
+            fileFilter: codemod.transform.fileFilter,
+            approx: false,
+            refs: [{ depName, changeIndex }],
+        },
+    ];
+}
+/**
+ * Packages whose upgrades can plausibly break the generic Node-runtime
+ * codemods (`package: "*"` in the registry, e.g. `util.isArray` removal).
+ * Those codemods are error-gated in the fix loop — they only fire when the
+ * failure output matches — but `--scan` has no error output, so without this
+ * gate they would be attributed to *every* outdated dependency (a zod bump
+ * reported as breaking `assert.equal`, which is simply wrong).
+ */
+const NODE_RUNTIME_PACKAGES = new Set(["node", "nodejs", "@types/node"]);
+/** Find codemods that apply to a given package upgrade path. */
+export function codemodsForUpgrade(packageName, fromVersion, toVersion) {
+    const fromMajor = parseMajor(fromVersion);
+    const toMajor = parseMajor(toVersion);
+    return builtinCodemods().filter((c) => {
+        if (c.package === "*") {
+            // Generic runtime codemods only apply to Node-runtime upgrades.
+            if (!NODE_RUNTIME_PACKAGES.has(packageName))
+                return false;
+        }
+        else if (c.package !== packageName) {
+            return false;
+        }
+        // Shared with the fix loop so the two can't drift.
+        return codemodMatchesRange(c.versionRange, fromMajor, toMajor);
+    });
+}
+/** Escape a string for use as a literal in a RegExp. */
+export function escapeRegExpLiteral(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=probes.js.map

package/dist/engine/scan/probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.js","sourceRoot":"","sources":["../../../src/engine/scan/probes.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAmB1D;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAsB,EACtB,OAAe,EACf,WAAmB;IAEnB,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACxB,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,UAAU;YACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;YAChC,wEAAwE;YACxE,8DAA8D;YAC9D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,sBAAsB,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,SAAS;YACvC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO;QACL;YACE,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,UAAU;YACxC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;YACxC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACjC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzE,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAEtC,OAAO,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YACtB,gEAAgE;YAChE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC5D,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,mDAAmD;QACnD,OAAO,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/engine/scan/probes.test.js

@@ -0,0 +1,100 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { probesFromChange, probesFromCodemod, codemodsForUpgrade, escapeRegExpLiteral, REQUIRES_IMPORT_PREFIX, } from "./probes.js";
+function change(partial) {
+    return {
+        description: "some change",
+        oldApi: "ReactDOM.render",
+        newApi: "createRoot",
+        severity: "high",
+        ...partial,
+    };
+}
+test("probesFromChange: dotted API call produces a literal pattern, not a regex", () => {
+    const probes = probesFromChange(change({ oldApi: "ReactDOM.render(el, root)" }), "react-dom", 0);
+    assert.equal(probes.length, 1);
+    assert.equal(probes[0].pattern, escapeRegExpLiteral("ReactDOM.render"));
+    assert.equal(probes[0].approx, false);
+    assert.deepEqual(probes[0].refs, [{ depName: "react-dom", changeIndex: 0 }]);
+});
+test("probesFromChange: dots and parens in the API are escaped so '.' matches literally", () => {
+    const probes = probesFromChange(change({ oldApi: "err.error.errors" }), "zod", 0);
+    assert.equal(probes[0].pattern, "err\\.error\\.errors");
+    // A literal match must not treat '.' as any-char
+    assert.ok(new RegExp(probes[0].pattern).test("err.error.errors"));
+    assert.ok(!new RegExp(probes[0].pattern).test("errXerrorXerrors"));
+});
+test("probesFromChange: bare identifier is gated to files importing the package", () => {
+    const probes = probesFromChange(change({ oldApi: "describe" }), "vitest", 2);
+    assert.equal(probes.length, 1);
+    assert.equal(probes[0].fileFilter, `${REQUIRES_IMPORT_PREFIX}vitest`);
+    assert.equal(probes[0].approx, false);
+});
+test("probesFromChange: short head before the paren falls back to longest member, marked approx", () => {
+    // Primary = "fn" (2 chars, below the length floor) → fall back to the
+    // longest `.member` path found anywhere in the full oldApi string.
+    const probes = probesFromChange(change({ oldApi: "fn(obj.someLongMemberName)" }), "pkg", 0);
+    assert.equal(probes.length, 1);
+    assert.equal(probes[0].approx, true);
+    assert.equal(probes[0].pattern, escapeRegExpLiteral(".someLongMemberName"));
+});
+test("probesFromChange: a usable head is preferred over the member fallback", () => {
+    const probes = probesFromChange(change({ oldApi: "client.oldMethod()" }), "pkg", 0);
+    assert.equal(probes[0].approx, false);
+    assert.equal(probes[0].pattern, escapeRegExpLiteral("client.oldMethod"));
+});
+test("probesFromChange: prose with no dots and no usable head yields no probes", () => {
+    const probes = probesFromChange(change({ oldApi: "" }), "pkg", 0);
+    assert.deepEqual(probes, []);
+});
+test("probesFromCodemod: uses the transform pattern and carries its fileFilter", () => {
+    const probes = probesFromCodemod({
+        package: "lodash",
+        errorMatch: "_",
+        description: "_.pluck → _.map",
+        transform: { find: "_\\.pluck\\(", replace: "_.map(", fileFilter: "src" },
+    }, "lodash", 0);
+    assert.equal(probes.length, 1);
+    assert.equal(probes[0].pattern, "_\\.pluck\\(");
+    assert.equal(probes[0].fileFilter, "src");
+});
+test("probesFromCodemod: guidance-only codemod (no transform) yields no probes", () => {
+    const probes = probesFromCodemod({ package: "eslint", errorMatch: "eslintrc", description: "flat config migration" }, "eslint", 0);
+    assert.deepEqual(probes, []);
+});
+test("codemodsForUpgrade: matches by package and major range (zod 3→4)", () => {
+    const found = codemodsForUpgrade("zod", "3.23.8", "4.0.5");
+    assert.ok(found.length > 0);
+    assert.ok(found.every((c) => c.package === "zod"));
+});
+test("codemodsForUpgrade: does not match a minor bump inside the same major", () => {
+    const found = codemodsForUpgrade("zod", "3.22.0", "3.23.8");
+    assert.equal(found.length, 0);
+});
+test("codemodsForUpgrade: a later major than the range is excluded (react-dom 18→20)", () => {
+    const found = codemodsForUpgrade("react-dom", "18.3.1", "20.0.0");
+    assert.equal(found.length, 0);
+});
+test("codemodsForUpgrade: multi-major range still matches (mongoose 6→8)", () => {
+    const found = codemodsForUpgrade("mongoose", "6.5.0", "8.0.0");
+    assert.ok(found.some((c) => c.description.includes("deleteOne")));
+});
+test("codemodsForUpgrade: wildcard codemods are NOT attributed to an unrelated package", () => {
+    // The generic `assert.equal` / `util.is*` codemods are `package: "*"` and
+    // error-gated. Before this gate they were reported as breaking changes of
+    // every outdated dependency (a zod bump "breaking" assert.equal).
+    const zodCodemods = codemodsForUpgrade("zod", "3.23.8", "4.0.5");
+    assert.ok(!zodCodemods.some((c) => c.package === "*"), "wildcard codemod leaked into zod");
+    const expressCodemods = codemodsForUpgrade("express", "4.19.2", "5.0.1");
+    assert.ok(!expressCodemods.some((c) => c.package === "*"), "wildcard codemod leaked into express");
+});
+test("codemodsForUpgrade: wildcard codemods DO apply to a Node runtime upgrade", () => {
+    const found = codemodsForUpgrade("@types/node", "20.0.0", "22.0.0");
+    assert.ok(found.some((c) => c.package === "*"));
+});
+test("escapeRegExpLiteral: neutralizes regex metacharacters", () => {
+    const escaped = escapeRegExpLiteral("a.b(c)[d]*");
+    assert.ok(new RegExp(escaped).test("a.b(c)[d]*"));
+    assert.ok(!new RegExp(escaped).test("axbxcxd"));
+});
+//# sourceMappingURL=probes.test.js.map

package/dist/engine/scan/probes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.test.js","sourceRoot":"","sources":["../../../src/engine/scan/probes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAGrB,SAAS,MAAM,CAAC,OAAgC;IAC9C,OAAO;QACL,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,iBAAiB;QACzB,MAAM,EAAE,YAAY;QACpB,QAAQ,EAAE,MAAM;QAChB,GAAG,OAAO;KACX,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IACjG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,GAAG,EAAE;IAC7F,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACxD,iDAAiD;IACjD,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2EAA2E,EAAE,GAAG,EAAE;IACrF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,sBAAsB,QAAQ,CAAC,CAAC;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,2FAA2F,EAAE,GAAG,EAAE;IACrG,sEAAsE;IACtE,mEAAmE;IACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC9E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,MAAM,GAAG,iBAAiB,CAC9B;QACE,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,GAAG;QACf,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE;KAC1E,EACD,QAAQ,EACR,CAAC,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,MAAM,GAAG,iBAAiB,CAC9B,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,uBAAuB,EAAE,EACnF,QAAQ,EACR,CAAC,CACF,CAAC;IACF,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;IAC5E,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uEAAuE,EAAE,GAAG,EAAE;IACjF,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,KAAK,GAAG,kBAAkB,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAC9E,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/D,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,0EAA0E;IAC1E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAE3F,MAAM,eAAe,GAAG,kBAAkB,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzE,MAAM,CAAC,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,EAAE,sCAAsC,CAAC,CAAC;AACrG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,KAAK,GAAG,kBAAkB,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,OAAO,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC"}