greenbump 0.8.0 → 0.9.0

package/dist/engine/scan/impact.test.js

@@ -0,0 +1,217 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, writeFile, rm, mkdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, dirname } from "node:path";
+import { buildScanReport } from "./impact.js";
+import { WORKSPACE_ROOT } from "../workspace.js";
+import { getCache, resetCacheForTests } from "../cache/manager.js";
+const DEFAULT_PKG = { name: "bench", private: true, dependencies: {} };
+function outdated(overrides) {
+    return {
+        name: "zod",
+        current: "3.23.8",
+        wanted: "3.24.0",
+        latest: "4.0.5",
+        workspacePath: WORKSPACE_ROOT,
+        ...overrides,
+    };
+}
+/**
+ * Build a temp project plus an isolated cache dir. Seeds the digest cache via
+ * the same `digest::pkg--from--to` key the real digest writer uses.
+ */
+async function withScanEnv(files, fn, seedDigest) {
+    const dir = await mkdtemp(join(tmpdir(), "greenbump-impact-"));
+    const cacheDir = await mkdtemp(join(tmpdir(), "greenbump-impact-cache-"));
+    const prevCache = process.env.GREENBUMP_CACHE_DIR;
+    process.env.GREENBUMP_CACHE_DIR = cacheDir;
+    resetCacheForTests();
+    for (const [path, content] of Object.entries(files)) {
+        await mkdir(dirname(join(dir, path)), { recursive: true });
+        await writeFile(join(dir, path), content, "utf8");
+    }
+    if (seedDigest) {
+        const cache = getCache();
+        await cache.init();
+        await cache.setLlmFix(`digest::${seedDigest.name}--${seedDigest.from}--${seedDigest.to}`, {
+            edits: { __digest__: JSON.stringify(seedDigest.changes) },
+            hits: 0,
+            model: "stub",
+        });
+    }
+    try {
+        await fn(dir);
+    }
+    finally {
+        if (prevCache === undefined)
+            delete process.env.GREENBUMP_CACHE_DIR;
+        else
+            process.env.GREENBUMP_CACHE_DIR = prevCache;
+        resetCacheForTests();
+        await rm(cacheDir, { recursive: true, force: true });
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+test("buildScanReport: codemod tier reports file/line impact with no cache and no LLM", async () => {
+    await withScanEnv({
+        "package.json": JSON.stringify(DEFAULT_PKG),
+        "src/validate.js": 'const r = schema.safeParse(d);\nreturn r.error.errors[0].message;\n',
+    }, async (dir) => {
+        const report = await buildScanReport(dir, [outdated({})]);
+        assert.equal(report.schemaVersion, 1);
+        assert.equal(report.summary.depsScanned, 1);
+        const det = report.detections[0];
+        assert.equal(det.name, "zod");
+        assert.equal(det.kind, "codemod");
+        assert.equal(det.status, "ok");
+        const errors = det.changes.find((c) => c.description.includes("error.issues"));
+        assert.ok(errors, "expected the error.errors codemod to be reported");
+        assert.equal(errors.matches, 1);
+        assert.equal(errors.fileGroups.length, 1);
+        assert.equal(errors.fileGroups[0].file, join("src", "validate.js"));
+        assert.equal(errors.fileGroups[0].locations[0].line, 2);
+        assert.equal(det.filesMatched, 1);
+        assert.equal(det.locationsMatched, 1);
+    });
+});
+test("buildScanReport: wildcard codemods are not misattributed to an unrelated dep", async () => {
+    await withScanEnv({
+        "package.json": JSON.stringify(DEFAULT_PKG),
+        "test.js": 'assert.equal(a, b);\nconst r = z.safeParse(x);\nr.error.errors;\n',
+    }, async (dir) => {
+        const report = await buildScanReport(dir, [outdated({})]);
+        const det = report.detections[0];
+        // `assert.equal` is a `package: "*"` codemod — it must not appear as a zod change.
+        assert.ok(!det.changes.some((c) => c.description.includes("assert.equal")), "wildcard codemod leaked into the zod detection");
+        assert.ok(!det.changes.some((c) => c.description.includes("util.is")));
+    });
+});
+test("buildScanReport: an upgrade with no matching codemod and no cache is reported unknown", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG), "a.js": "whatever();\n" }, async (dir) => {
+        const report = await buildScanReport(dir, [
+            outdated({ name: "left-pad", current: "1.0.0", latest: "2.0.0" }),
+        ]);
+        const det = report.detections[0];
+        assert.equal(det.status, "unknown");
+        assert.equal(det.changes.length, 0);
+        assert.equal(det.displayedImpact, false);
+        assert.equal(report.summary.depsWithKnownBreaking, 0);
+    });
+});
+test("buildScanReport: no cache hit means no filesystem-wide guessing (never calls an LLM)", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG), "a.js": "err.error.errors;\n" }, async (dir) => {
+        // No cached digest for left-pad: the zod-only codemod must not fire for it,
+        // and nothing else may invent a result.
+        const report = await buildScanReport(dir, [
+            outdated({ name: "left-pad", current: "1.0.0", latest: "2.0.0" }),
+        ]);
+        assert.equal(report.detections[0].status, "unknown");
+        assert.deepEqual(report.detections[0].changes, []);
+    });
+});
+test("buildScanReport: reads a seeded digest from cache and maps it to project locations", async () => {
+    await withScanEnv({
+        "package.json": JSON.stringify(DEFAULT_PKG),
+        "src/api.js": "const r = client.oldMethod();\n",
+    }, async (dir) => {
+        const report = await buildScanReport(dir, [
+            outdated({ name: "some-lib", current: "1.0.0", latest: "2.0.0" }),
+        ]);
+        const det = report.detections[0];
+        assert.equal(det.kind, "digest");
+        assert.equal(det.status, "ok");
+        const change = det.changes.find((c) => c.description.includes("oldMethod"));
+        assert.ok(change, "expected the cached digest change to be reported");
+        assert.equal(change.source, "changelog-cache");
+        assert.equal(change.matches, 1);
+        assert.equal(change.fileGroups[0].file, join("src", "api.js"));
+        assert.equal(change.fileGroups[0].locations[0].line, 1);
+    }, {
+        name: "some-lib",
+        from: "1.0.0",
+        to: "2.0.0",
+        changes: [
+            {
+                description: "oldMethod was replaced by newMethod",
+                oldApi: "client.oldMethod()",
+                newApi: "client.newMethod()",
+                severity: "high",
+            },
+        ],
+    });
+});
+test("buildScanReport: --no-cache ignores a seeded digest and falls back to codemods", async () => {
+    await withScanEnv({
+        "package.json": JSON.stringify(DEFAULT_PKG),
+        "src/api.js": "const r = client.oldMethod();\n",
+    }, async (dir) => {
+        const report = await buildScanReport(dir, [outdated({ name: "some-lib", current: "1.0.0", latest: "2.0.0" })], { noCache: true });
+        const det = report.detections[0];
+        assert.equal(det.status, "unknown");
+        assert.deepEqual(det.changes, []);
+    }, {
+        name: "some-lib",
+        from: "1.0.0",
+        to: "2.0.0",
+        changes: [
+            { description: "oldMethod gone", oldApi: "client.oldMethod()", severity: "high" },
+        ],
+    });
+});
+test("buildScanReport: breaking changes that touch nothing report zero impact, not an error", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG), "src/clean.js": "const x = 1;\n" }, async (dir) => {
+        const report = await buildScanReport(dir, [outdated({})]);
+        const det = report.detections[0];
+        // zod's codemods are known for this upgrade path...
+        assert.ok(det.changes.length > 0);
+        // ...but none of them appear in this codebase.
+        assert.equal(det.filesMatched, 0);
+        assert.equal(det.locationsMatched, 0);
+        assert.equal(det.displayedImpact, false);
+        // Status stays "ok": we *know* the breaking changes, they just don't apply.
+        assert.equal(det.status, "ok");
+    });
+});
+test("buildScanReport: aggregates a multi-dependency summary", async () => {
+    await withScanEnv({
+        "package.json": JSON.stringify(DEFAULT_PKG),
+        "src/a.js": "r.error.errors;\n",
+        "src/b.js": "<Switch>\n",
+    }, async (dir) => {
+        const report = await buildScanReport(dir, [
+            outdated({}),
+            outdated({ name: "react-router-dom", current: "5.3.4", latest: "6.30.0" }),
+            outdated({ name: "left-pad", current: "1.0.0", latest: "2.0.0" }),
+        ]);
+        assert.equal(report.summary.depsScanned, 3);
+        assert.equal(report.summary.depsWithKnownBreaking, 2); // zod + react-router-dom
+        assert.equal(report.summary.filesAffected, 2);
+        assert.equal(report.summary.locationsAffected, 2);
+        assert.equal(report.detections.length, 3);
+    });
+});
+test("buildScanReport: lists file creations for a scaffolding codemod", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG), ".eslintrc.js": "module.exports = {};\n" }, async (dir) => {
+        const report = await buildScanReport(dir, [
+            outdated({ name: "eslint", current: "8.57.0", latest: "9.0.0" }),
+        ]);
+        const det = report.detections[0];
+        assert.ok(det.fileCreations?.some((f) => f.path === "eslint.config.js"));
+    });
+});
+test("buildScanReport: workspace path is carried through to the detection", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG), "src/a.js": "r.error.errors;\n" }, async (dir) => {
+        const report = await buildScanReport(dir, [outdated({ workspacePath: "packages/api" })]);
+        assert.equal(report.detections[0].workspacePath, "packages/api");
+    });
+});
+test("buildScanReport: empty outdated list produces an empty, well-formed report", async () => {
+    await withScanEnv({ "package.json": JSON.stringify(DEFAULT_PKG) }, async (dir) => {
+        const report = await buildScanReport(dir, []);
+        assert.equal(report.summary.depsScanned, 0);
+        assert.equal(report.summary.filesAffected, 0);
+        assert.deepEqual(report.detections, []);
+    });
+});
+//# sourceMappingURL=impact.test.js.map

package/dist/engine/scan/impact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.test.js","sourceRoot":"","sources":["../../../src/engine/scan/impact.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,cAAc,EAA0B,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEnE,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAEvE,SAAS,QAAQ,CAAC,SAAqC;IACrD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,OAAO;QACf,aAAa,EAAE,cAAc;QAC7B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,KAA6B,EAC7B,EAAkC,EAClC,UAA2E;IAE3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IAC3C,kBAAkB,EAAE,CAAC;IAErB,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,EAAE,EAAE;YACxF,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;YACzD,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;;YAC/D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACjD,kBAAkB,EAAE,CAAC;QACrB,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;IACjG,MAAM,WAAW,CACf;QACE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,iBAAiB,EAAE,qEAAqE;KACzF,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,WAAW,CACf;QACE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,SAAS,EAAE,mEAAmE;KAC/E,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,mFAAmF;QACnF,MAAM,CAAC,EAAE,CACP,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,EAChE,gDAAgD,CACjD,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,WAAW,CACf,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,EACxE,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,MAAM,WAAW,CACf,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAC9E,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,4EAA4E;QAC5E,wCAAwC;QACxC,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;IACpG,MAAM,WAAW,CACf;QACE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,YAAY,EAAE,iCAAiC;KAChD,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,MAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3D,CAAC,EACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,OAAO,EAAE;YACP;gBACE,WAAW,EAAE,qCAAqC;gBAClD,MAAM,EAAE,oBAAoB;gBAC5B,MAAM,EAAE,oBAAoB;gBAC5B,QAAQ,EAAE,MAAM;aACjB;SACF;KACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,WAAW,CACf;QACE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,YAAY,EAAE,iCAAiC;KAChD,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,EACH,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EACnE,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACpC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC,EACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,OAAO;QACX,OAAO,EAAE;YACP,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE;SAClF;KACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,WAAW,CACf,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,cAAc,EAAE,gBAAgB,EAAE,EACjF,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,oDAAoD;QACpD,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClC,+CAA+C;QAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACzC,4EAA4E;QAC5E,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,WAAW,CACf;QACE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;QAC3C,UAAU,EAAE,mBAAmB;QAC/B,UAAU,EAAE,YAAY;KACzB,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,QAAQ,CAAC,EAAE,CAAC;YACZ,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC1E,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,yBAAyB;QAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,WAAW,CACf,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,cAAc,EAAE,wBAAwB,EAAE,EACzF,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE;YACxC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC;IAC3E,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,WAAW,CACf,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,EAChF,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;IAC5F,MAAM,WAAW,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC/E,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/scan/indexer.js

@@ -0,0 +1,129 @@
+import { readFile, readdir, stat } from "node:fs/promises";
+import { join, relative } from "node:path";
+import { isSensitivePath } from "../../agent/guard.js";
+import { REQUIRES_IMPORT_PREFIX, escapeRegExpLiteral } from "./probes.js";
+/**
+ * Single-pass file walker for impact analysis.
+ *
+ * Scans the project tree once, checking every line against every probe.
+ * Optimized for "find which files/lines match any of these patterns" —
+ * the inverse of `searchCode` (which is "find lines matching this one pattern").
+ */
+const IGNORE_DIRS = new Set(["node_modules", ".git", "dist", "build", ".next", "coverage", ".turbo"]);
+const SEARCHABLE_EXT = new Set([
+    ".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx", ".mts", ".cts",
+    ".json", ".vue", ".svelte",
+]);
+const MAX_FILE_SIZE = 1_000_000;
+/**
+ * Scan the project once, finding all matches for all probes.
+ *
+ * Returns hits grouped by probe key, plus a set of probe keys that hit the
+ * per-probe cap (indicating their match count is a lower bound).
+ */
+export async function scanOnce(cwd, probes, opts) {
+    const hits = [];
+    const truncatedProbes = new Set();
+    const probeHitsCount = new Map();
+    // Compile each probe's regex once, not once per line per probe. A pattern
+    // that fails to compile falls back to a literal match (same policy as the
+    // fix loop's search_code tool).
+    const compiled = [];
+    for (const probe of probes) {
+        probeHitsCount.set(probe.key, 0);
+        let re;
+        try {
+            re = new RegExp(probe.pattern, "g");
+        }
+        catch {
+            re = new RegExp(escapeRegExpLiteral(probe.pattern), "g");
+        }
+        compiled.push({ probe, re });
+    }
+    async function walk(dir) {
+        let entries;
+        try {
+            entries = await readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const e of entries) {
+            if (IGNORE_DIRS.has(e.name))
+                continue;
+            const abs = join(dir, e.name);
+            if (e.isDirectory()) {
+                await walk(abs);
+                continue;
+            }
+            const dot = e.name.lastIndexOf(".");
+            if (dot < 0 || !SEARCHABLE_EXT.has(e.name.slice(dot)))
+                continue;
+            if (isSensitivePath(e.name))
+                continue;
+            let content;
+            try {
+                const s = await stat(abs);
+                if (s.size > MAX_FILE_SIZE)
+                    continue;
+                content = await readFile(abs, "utf8");
+            }
+            catch {
+                continue;
+            }
+            const rel = relative(cwd, abs);
+            // Which packages this file imports — resolves the bare-identifier gate
+            // (`__requiresImport:<pkg>`) for probes in this same file, so the file
+            // is read exactly once.
+            const importsHere = new Set();
+            for (const m of content.matchAll(/(?:from|require\()\s*['"]([^'"]+)['"]/g)) {
+                importsHere.add(m[1]);
+            }
+            const lines = content.split("\n");
+            for (const { probe, re } of compiled) {
+                if ((probeHitsCount.get(probe.key) ?? 0) >= opts.perProbeCap) {
+                    truncatedProbes.add(probe.key);
+                    continue;
+                }
+                // File-level gates: substring filter, or import scope for bare identifiers.
+                if (probe.fileFilter) {
+                    if (probe.fileFilter.startsWith(REQUIRES_IMPORT_PREFIX)) {
+                        const pkg = probe.fileFilter.slice(REQUIRES_IMPORT_PREFIX.length);
+                        if (!importsHere.has(pkg))
+                            continue;
+                    }
+                    else if (!rel.includes(probe.fileFilter)) {
+                        continue;
+                    }
+                }
+                for (let i = 0; i < lines.length; i++) {
+                    const line = lines[i];
+                    re.lastIndex = 0;
+                    let match;
+                    while ((match = re.exec(line)) !== null) {
+                        hits.push({
+                            probeKey: probe.key,
+                            file: rel,
+                            line: i + 1,
+                            excerpt: line.trim().slice(0, 200),
+                        });
+                        const n = (probeHitsCount.get(probe.key) ?? 0) + 1;
+                        probeHitsCount.set(probe.key, n);
+                        if (n >= opts.perProbeCap) {
+                            truncatedProbes.add(probe.key);
+                            break;
+                        }
+                        // Zero-width match guard — otherwise exec() would never advance.
+                        if (match.index === re.lastIndex)
+                            re.lastIndex++;
+                    }
+                    if ((probeHitsCount.get(probe.key) ?? 0) >= opts.perProbeCap)
+                        break;
+                }
+            }
+        }
+    }
+    await walk(cwd);
+    return { hits, truncatedProbes };
+}
+//# sourceMappingURL=indexer.js.map

package/dist/engine/scan/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../../src/engine/scan/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAc,MAAM,aAAa,CAAC;AAEtF;;;;;;GAMG;AAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC5D,OAAO,EAAE,MAAM,EAAE,SAAS;CAC3B,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,SAAS,CAAC;AAShC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAW,EACX,MAAe,EACf,IAA6B;IAE7B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,0EAA0E;IAC1E,0EAA0E;IAC1E,gCAAgC;IAChC,MAAM,QAAQ,GAAwC,EAAE,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,EAAE,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,GAAW;QAC7B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YAChE,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEtC,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,CAAC,IAAI,GAAG,aAAa;oBAAE,SAAS;gBACrC,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAE/B,uEAAuE;YACvE,uEAAuE;YACvE,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,wCAAwC,CAAC,EAAE,CAAC;gBAC3E,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC7D,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBAED,4EAA4E;gBAC5E,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;oBACrB,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;wBACxD,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;wBAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;4BAAE,SAAS;oBACtC,CAAC;yBAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC3C,SAAS;oBACX,CAAC;gBACH,CAAC;gBAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;oBACjB,IAAI,KAA6B,CAAC;oBAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACxC,IAAI,CAAC,IAAI,CAAC;4BACR,QAAQ,EAAE,KAAK,CAAC,GAAG;4BACnB,IAAI,EAAE,GAAG;4BACT,IAAI,EAAE,CAAC,GAAG,CAAC;4BACX,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACnC,CAAC,CAAC;wBACH,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACnD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;wBACjC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;4BAC1B,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAC/B,MAAM;wBACR,CAAC;wBACD,iEAAiE;wBACjE,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC,SAAS;4BAAE,EAAE,CAAC,SAAS,EAAE,CAAC;oBACnD,CAAC;oBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW;wBAAE,MAAM;gBACtE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhB,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC"}

package/dist/engine/scan/indexer.test.js

@@ -0,0 +1,149 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { mkdtemp, writeFile, rm, mkdir } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, dirname } from "node:path";
+import { scanOnce } from "./indexer.js";
+import { REQUIRES_IMPORT_PREFIX } from "./probes.js";
+async function withProject(files, fn) {
+    const dir = await mkdtemp(join(tmpdir(), "greenbump-scan-"));
+    for (const [path, content] of Object.entries(files)) {
+        await mkdir(dirname(join(dir, path)), { recursive: true });
+        await writeFile(join(dir, path), content, "utf8");
+    }
+    try {
+        await fn(dir);
+    }
+    finally {
+        await rm(dir, { recursive: true, force: true });
+    }
+}
+function probe(pattern, key = "k0", fileFilter) {
+    return { key, pattern, refs: [{ depName: "pkg", changeIndex: 0 }], ...(fileFilter ? { fileFilter } : {}) };
+}
+test("scanOnce: reports file and 1-based line for each match", async () => {
+    await withProject({ "src/a.js": "line one\noldApi()\nline three\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+        assert.equal(hits[0].line, 2);
+        assert.equal(hits[0].excerpt, "oldApi()");
+    });
+});
+test("scanOnce: finds multiple matches across files", async () => {
+    await withProject({
+        "src/a.js": "oldApi()\n",
+        "src/nested/b.ts": "const x = oldApi;\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        const files = hits.map((h) => h.file).sort();
+        assert.deepEqual(files, [join("src", "a.js"), join("src", "nested", "b.ts")]);
+    });
+});
+test("scanOnce: counts every occurrence on one line", async () => {
+    await withProject({ "a.js": "oldApi(); oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 2);
+    });
+});
+test("scanOnce: caps matches per probe and flags the probe as truncated", async () => {
+    const manyLines = Array.from({ length: 50 }, () => "oldApi();").join("\n");
+    await withProject({ "a.js": manyLines }, async (dir) => {
+        const { hits, truncatedProbes } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 10 });
+        assert.equal(hits.length, 10);
+        assert.ok(truncatedProbes.has("k0"));
+    });
+});
+test("scanOnce: a probe under its cap is not marked truncated", async () => {
+    await withProject({ "a.js": "oldApi();\n" }, async (dir) => {
+        const { truncatedProbes } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 10 });
+        assert.equal(truncatedProbes.size, 0);
+    });
+});
+test("scanOnce: matches are attributed to the right probe when several are active", async () => {
+    await withProject({ "a.js": "alpha();\nbeta();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("alpha", "k-alpha"), probe("beta", "k-beta")], { perProbeCap: 200 });
+        assert.equal(hits.length, 2);
+        const alpha = hits.find((h) => h.excerpt.startsWith("alpha"));
+        const beta = hits.find((h) => h.excerpt.startsWith("beta"));
+        assert.equal(alpha?.probeKey, "k-alpha");
+        assert.equal(beta?.probeKey, "k-beta");
+    });
+});
+test("scanOnce: skips node_modules and other ignored directories", async () => {
+    await withProject({
+        "src/a.js": "oldApi();\n",
+        "node_modules/dep/index.js": "oldApi();\n",
+        "dist/bundle.js": "oldApi();\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+    });
+});
+test("scanOnce: never reports matches from secrets files", async () => {
+    await withProject({
+        "src/a.js": "oldApi();\n",
+        ".env": "SECRET=oldApi\n",
+        "secrets.json": '{"k":"oldApi"}\n',
+        "credentials.json": '{"k":"oldApi"}\n',
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+        assert.equal(hits[0].file, join("src", "a.js"));
+    });
+});
+test("scanOnce: only searches known source extensions", async () => {
+    await withProject({ "a.js": "oldApi();\n", "notes.txt": "oldApi();\n", "image.bin": "oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.deepEqual(hits.map((h) => h.file), ["a.js"]);
+    });
+});
+test("scanOnce: fileFilter restricts matches to matching paths", async () => {
+    await withProject({ "src/a.js": "oldApi();\n", "test/b.js": "oldApi();\n" }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi", "k0", "test")], { perProbeCap: 200 });
+        assert.deepEqual(hits.map((h) => h.file), [join("test", "b.js")]);
+    });
+});
+test("scanOnce: import gate limits bare-identifier probes to importing files", async () => {
+    await withProject({
+        "imports.js": "const { describe } = require('vitest');\ndescribe('x', () => {});\n",
+        "unrelated.js": "describe('this is not vitest');\n",
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("describe", "k0", `${REQUIRES_IMPORT_PREFIX}vitest`)], { perProbeCap: 200 });
+        // Both occurrences live in imports.js; unrelated.js must contribute none.
+        assert.deepEqual(hits.map((h) => h.file), ["imports.js", "imports.js"]);
+        assert.deepEqual(hits.map((h) => h.line), [1, 2]);
+    });
+});
+test("scanOnce: import gate also matches ESM import statements", async () => {
+    await withProject({
+        "esm.mjs": 'import { describe } from "vitest";\ndescribe("x");\n',
+        "other.mjs": 'describe("nope");\n',
+    }, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("describe", "k0", `${REQUIRES_IMPORT_PREFIX}vitest`)], { perProbeCap: 200 });
+        assert.ok(hits.every((h) => h.file === "esm.mjs"));
+        assert.equal(hits.length, 2);
+    });
+});
+test("scanOnce: an invalid regex falls back to a literal match instead of throwing", async () => {
+    await withProject({ "a.js": "a[b\n" }, async (dir) => {
+        // Unbalanced bracket is not a valid regex — must not throw.
+        const { hits } = await scanOnce(dir, [probe("a[b")], { perProbeCap: 200 });
+        assert.equal(hits.length, 1);
+    });
+});
+test("scanOnce: no probes means no hits (and no crash)", async () => {
+    await withProject({ "a.js": "anything\n" }, async (dir) => {
+        const { hits, truncatedProbes } = await scanOnce(dir, [], { perProbeCap: 200 });
+        assert.deepEqual(hits, []);
+        assert.equal(truncatedProbes.size, 0);
+    });
+});
+test("scanOnce: empty directory yields no hits", async () => {
+    await withProject({}, async (dir) => {
+        const { hits } = await scanOnce(dir, [probe("oldApi")], { perProbeCap: 200 });
+        assert.deepEqual(hits, []);
+    });
+});
+//# sourceMappingURL=indexer.test.js.map

package/dist/engine/scan/indexer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.test.js","sourceRoot":"","sources":["../../../src/engine/scan/indexer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAAc,MAAM,aAAa,CAAC;AAEjE,KAAK,UAAU,WAAW,CACxB,KAA6B,EAC7B,EAAkC;IAElC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,OAAe,EAAE,GAAG,GAAG,IAAI,EAAE,UAAmB;IAC7D,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACxE,MAAM,WAAW,CACf,EAAE,UAAU,EAAE,kCAAkC,EAAE,EAClD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC5C,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,WAAW,CACf;QACE,UAAU,EAAE,YAAY;QACxB,iBAAiB,EAAE,qBAAqB;KACzC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC/D,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACnF,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;IACzE,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACzD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACjE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EACpD,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;IAC5E,MAAM,WAAW,CACf;QACE,UAAU,EAAE,aAAa;QACzB,2BAA2B,EAAE,aAAa;QAC1C,gBAAgB,EAAE,aAAa;KAChC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;IACpE,MAAM,WAAW,CACf;QACE,UAAU,EAAE,aAAa;QACzB,MAAM,EAAE,iBAAiB;QACzB,cAAc,EAAE,kBAAkB;QAClC,kBAAkB,EAAE,kBAAkB;KACvC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;IACjE,MAAM,WAAW,CACf,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,EACjF,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,WAAW,CACf,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,EACzD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5F,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;IACxF,MAAM,WAAW,CACf;QACE,YAAY,EAAE,qEAAqE;QACnF,cAAc,EAAE,mCAAmC;KACpD,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,sBAAsB,QAAQ,CAAC,CAAC,EAC5D,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,0EAA0E;QAC1E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;IAC1E,MAAM,WAAW,CACf;QACE,SAAS,EAAE,sDAAsD;QACjE,WAAW,EAAE,qBAAqB;KACnC,EACD,KAAK,EAAE,GAAG,EAAE,EAAE;QACZ,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAC7B,GAAG,EACH,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,sBAAsB,QAAQ,CAAC,CAAC,EAC5D,EAAE,WAAW,EAAE,GAAG,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;IAC9F,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnD,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACxD,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;IAC1D,MAAM,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/scan/probes.js

@@ -0,0 +1,92 @@
+import { builtinCodemods, codemodMatchesRange, parseMajor } from "../fixer/patterns.js";
+/**
+ * Prefix marking a probe whose matches are only valid inside files that
+ * import a given package. Carried in `Probe.fileFilter` so the indexer can
+ * resolve it per file without a second pass.
+ */
+export const REQUIRES_IMPORT_PREFIX = "__requiresImport:";
+/**
+ * Generate search probes from a breaking change.
+ *
+ * Strategy:
+ * 1. Primary probe = oldApi.split("(")[0].trim(), if length >= 4
+ * 2. If primary is a bare identifier (no `.`, `(`, quotes), mark for import-scoped search
+ * 3. If primary too short, extract longest `.identifier` member and mark approx
+ */
+export function probesFromChange(change, depName, changeIndex) {
+    const probes = [];
+    const oldApi = change.oldApi;
+    // Primary probe: everything before the first `(`
+    const primary = oldApi.split("(")[0].trim();
+    if (primary.length >= 4) {
+        // Check if it's a bare identifier (no dots, parens, quotes, spaces)
+        const isBareIdentifier = /^[a-zA-Z_$][\w$]*$/.test(primary);
+        probes.push({
+            key: `${depName}:${changeIndex}:primary`,
+            pattern: escapeRegExpLiteral(primary),
+            approx: false,
+            refs: [{ depName, changeIndex }],
+            // Bare identifiers like `describe` are too noisy — only search in files
+            // that import the package (resolved per file by the indexer).
+            ...(isBareIdentifier ? { fileFilter: `${REQUIRES_IMPORT_PREFIX}${depName}` } : {}),
+        });
+        return probes;
+    }
+    // Fallback: extract the longest `.identifier` member
+    const members = oldApi.match(/\.[a-zA-Z_$][\w$]*/g) || [];
+    if (members.length > 0) {
+        const longest = members.reduce((a, b) => (a.length > b.length ? a : b));
+        probes.push({
+            key: `${depName}:${changeIndex}:member`,
+            pattern: escapeRegExpLiteral(longest),
+            approx: true,
+            refs: [{ depName, changeIndex }],
+        });
+    }
+    return probes;
+}
+/** Generate probes from a codemod (uses its transform.find pattern). */
+export function probesFromCodemod(codemod, depName, changeIndex) {
+    if (!codemod.transform)
+        return [];
+    return [
+        {
+            key: `${depName}:${changeIndex}:codemod`,
+            pattern: codemod.transform.find,
+            fileFilter: codemod.transform.fileFilter,
+            approx: false,
+            refs: [{ depName, changeIndex }],
+        },
+    ];
+}
+/**
+ * Packages whose upgrades can plausibly break the generic Node-runtime
+ * codemods (`package: "*"` in the registry, e.g. `util.isArray` removal).
+ * Those codemods are error-gated in the fix loop — they only fire when the
+ * failure output matches — but `--scan` has no error output, so without this
+ * gate they would be attributed to *every* outdated dependency (a zod bump
+ * reported as breaking `assert.equal`, which is simply wrong).
+ */
+const NODE_RUNTIME_PACKAGES = new Set(["node", "nodejs", "@types/node"]);
+/** Find codemods that apply to a given package upgrade path. */
+export function codemodsForUpgrade(packageName, fromVersion, toVersion) {
+    const fromMajor = parseMajor(fromVersion);
+    const toMajor = parseMajor(toVersion);
+    return builtinCodemods().filter((c) => {
+        if (c.package === "*") {
+            // Generic runtime codemods only apply to Node-runtime upgrades.
+            if (!NODE_RUNTIME_PACKAGES.has(packageName))
+                return false;
+        }
+        else if (c.package !== packageName) {
+            return false;
+        }
+        // Shared with the fix loop so the two can't drift.
+        return codemodMatchesRange(c.versionRange, fromMajor, toMajor);
+    });
+}
+/** Escape a string for use as a literal in a RegExp. */
+export function escapeRegExpLiteral(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//# sourceMappingURL=probes.js.map

package/dist/engine/scan/probes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.js","sourceRoot":"","sources":["../../../src/engine/scan/probes.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,eAAe,EAAE,mBAAmB,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEtG;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAmB1D;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAsB,EACtB,OAAe,EACf,WAAmB;IAEnB,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7B,iDAAiD;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACxB,oEAAoE;QACpE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,UAAU;YACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;YAChC,wEAAwE;YACxE,8DAA8D;YAC9D,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,sBAAsB,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnF,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,SAAS;YACvC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;YACrC,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,OAAgB,EAChB,OAAe,EACf,WAAmB;IAEnB,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC;IAClC,OAAO;QACL;YACE,GAAG,EAAE,GAAG,OAAO,IAAI,WAAW,UAAU;YACxC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI;YAC/B,UAAU,EAAE,OAAO,CAAC,SAAS,CAAC,UAAU;YACxC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;SACjC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzE,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAChC,WAAmB,EACnB,WAAmB,EACnB,SAAiB;IAEjB,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAEtC,OAAO,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;YACtB,gEAAgE;YAChE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC5D,CAAC;aAAM,IAAI,CAAC,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,mDAAmD;QACnD,OAAO,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,mBAAmB,CAAC,CAAS;IAC3C,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAClD,CAAC"}