inup 1.6.6 → 1.6.8

package/dist/shared/terminal/text.js

@@ -0,0 +1,48 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stripAnsi = stripAnsi;
+exports.getVisualLength = getVisualLength;
+exports.truncatePlainText = truncatePlainText;
+exports.wrapPlainText = wrapPlainText;
+const cli_truncate_1 = __importDefault(require("cli-truncate"));
+const string_width_1 = __importDefault(require("string-width"));
+const strip_ansi_1 = __importDefault(require("strip-ansi"));
+const wrap_ansi_1 = __importDefault(require("wrap-ansi"));
+// Thin wrappers over the battle-tested terminal-string stack (string-width,
+// strip-ansi, wrap-ansi, cli-truncate). The previous hand-rolled versions
+// handled emoji but had no East Asian Width tables, so CJK text was counted at
+// width 1 and misaligned every column that contained it.
+function stripAnsi(text) {
+    return (0, strip_ansi_1.default)(text);
+}
+/** Terminal columns `text` occupies: ANSI-aware, emoji- and CJK-correct. */
+function getVisualLength(text) {
+    return (0, string_width_1.default)(text);
+}
+function truncatePlainText(text, maxWidth) {
+    if (maxWidth <= 0) {
+        return '';
+    }
+    if (getVisualLength(text) <= maxWidth) {
+        return text;
+    }
+    if (maxWidth <= 3) {
+        return '.'.repeat(maxWidth);
+    }
+    return (0, cli_truncate_1.default)(text, maxWidth, { truncationCharacter: '...' });
+}
+function wrapPlainText(text, maxWidth) {
+    if (!text) {
+        return [];
+    }
+    if (maxWidth <= 0 || getVisualLength(text) <= maxWidth) {
+        return [text];
+    }
+    // Soft wrap: words longer than maxWidth get their own (overflowing) line,
+    // matching the previous behavior. ANSI codes are re-balanced per line.
+    return (0, wrap_ansi_1.default)(text, maxWidth).split('\n');
+}
+//# sourceMappingURL=text.js.map

package/dist/shared/types/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./domain"), exports);
+__exportStar(require("./streaming"), exports);
+__exportStar(require("./ui"), exports);
+//# sourceMappingURL=index.js.map

package/dist/{utils/version.js → shared/versions.js}

@@ -40,6 +40,8 @@ exports.parseVersions = parseVersions;
 exports.isVersionOutdated = isVersionOutdated;
 exports.getOptimizedRangeVersion = getOptimizedRangeVersion;
 exports.findClosestMinorVersion = findClosestMinorVersion;
+exports.findHighestPatchVersion = findHighestPatchVersion;
+exports.applyVersionPrefix = applyVersionPrefix;
 const semver = __importStar(require("semver"));
 const manifest_1 = require("./manifest");
 function extractMajorVersion(version) {
@@ -94,15 +96,9 @@ function isVersionOutdated(current, latest) {
  */
 function getOptimizedRangeVersion(_packageName, currentRange, allVersions, latestVersion) {
     try {
-        // Find the highest version that satisfies the current range
-        const satisfyingVersions = allVersions.filter((version) => {
-            try {
-                return semver.satisfies(version, currentRange);
-            }
-            catch {
-                return false;
-            }
-        });
+        // Find the highest version that satisfies the current range. satisfies()
+        // returns false (never throws) for invalid input, so no guard is needed.
+        const satisfyingVersions = allVersions.filter((version) => semver.satisfies(version, currentRange));
         if (satisfyingVersions.length === 0) {
             return latestVersion;
         }
@@ -125,7 +121,6 @@ function findClosestMinorVersion(installedVersion, allVersions) {
         }
         const installedMajor = semver.major(coercedInstalled);
         const installedMinor = semver.minor(coercedInstalled);
-        const installedPatch = semver.patch(coercedInstalled);
         let bestMinorVersion = null;
         let bestMinorValue = -1;
         // Single pass to find best minor version in same major
@@ -145,28 +140,48 @@ function findClosestMinorVersion(installedVersion, allVersions) {
         if (bestMinorVersion) {
             return bestMinorVersion;
         }
-        // Fallback: find highest patch version in same major.minor that's higher than installed
-        let bestPatchVersion = null;
-        for (const version of allVersions) {
-            try {
-                const major = semver.major(version);
-                const minor = semver.minor(version);
-                const patch = semver.patch(version);
-                // Same major and minor, but higher patch
-                if (major === installedMajor && minor === installedMinor && patch > installedPatch) {
-                    if (!bestPatchVersion || semver.gt(version, bestPatchVersion)) {
-                        bestPatchVersion = version;
-                    }
-                }
-            }
-            catch {
-                // Skip invalid versions
-            }
-        }
-        return bestPatchVersion;
+        // Fallback: highest patch version in the same major.minor that's higher than installed
+        return findHighestPatchVersion(installedVersion, allVersions);
     }
     catch {
         return null;
     }
 }
-//# sourceMappingURL=version.js.map
+/**
+ * Find the highest patch version in the installed version's own major.minor line.
+ * This is the `--target patch` policy: never crosses a minor (or major) boundary.
+ */
+function findHighestPatchVersion(installedVersion, allVersions) {
+    const coercedInstalled = semver.coerce(installedVersion);
+    if (!coercedInstalled) {
+        return null;
+    }
+    const installedMajor = semver.major(coercedInstalled);
+    const installedMinor = semver.minor(coercedInstalled);
+    const installedPatch = semver.patch(coercedInstalled);
+    let bestPatchVersion = null;
+    for (const version of allVersions) {
+        try {
+            const major = semver.major(version);
+            const minor = semver.minor(version);
+            const patch = semver.patch(version);
+            // Same major and minor, but higher patch
+            if (major === installedMajor && minor === installedMinor && patch > installedPatch) {
+                if (!bestPatchVersion || semver.gt(version, bestPatchVersion)) {
+                    bestPatchVersion = version;
+                }
+            }
+        }
+        catch {
+            // Skip invalid versions
+        }
+    }
+    return bestPatchVersion;
+}
+/** Re-apply the original specifier's range prefix (^, ~, >=, …) to a new version. */
+function applyVersionPrefix(originalSpecifier, targetVersion) {
+    const prefixMatch = originalSpecifier.match(/^([^\d]+)/);
+    const prefix = prefixMatch ? prefixMatch[1] : '';
+    return prefix + targetVersion;
+}
+//# sourceMappingURL=versions.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "inup",
-  "version": "1.6.6",
+  "version": "1.6.8",
   "description": "Interactive dependency upgrader for npm, yarn, pnpm & bun. Zero-config, monorepo-ready. Upgrade-interactive for every package manager.",
   "main": "dist/index.js",
   "bin": {
@@ -30,7 +30,7 @@
     "ncu"
   ],
   "license": "MIT",
-  "homepage": "https://github.com/donfear/inup#readme",
+  "homepage": "https://donfear.github.io/inup/",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/donfear/inup.git"
@@ -43,20 +43,27 @@
     "README.md"
   ],
   "devDependencies": {
+    "@biomejs/biome": "^2.5.2",
     "@types/node": "^25.9.4",
     "@types/semver": "^7.7.1",
     "@vitest/coverage-v8": "^4.1.9",
-    "prettier": "^3.9.4",
+    "dependency-cruiser": "^18.0.0",
     "typescript": "^6.0.3",
     "vitest": "^4.1.9"
   },
   "dependencies": {
     "chalk": "^5.6.2",
+    "cli-truncate": "^6.1.0",
     "commander": "^15.0.0",
     "env-paths": "^4.0.0",
     "nanospinner": "^1.2.2",
+    "registry-auth-token": "^5.1.1",
     "semver": "^7.8.5",
-    "undici": "^8.5.0"
+    "string-width": "^8.2.1",
+    "strip-ansi": "^7.2.0",
+    "undici": "^8.6.0",
+    "wrap-ansi": "^10.0.0",
+    "yaml": "^2.9.0"
   },
   "engines": {
     "node": ">=22.19.0"
@@ -66,13 +73,19 @@
     "dev": "tsc --watch",
     "start": "node dist/cli.js",
     "link": "pnpm build && pnpm add -g .",
-    "format": "prettier --write src/**/*.ts",
-    "format:check": "prettier --check src/**/*.ts",
+    "check": "biome check --write .",
+    "check:ci": "biome ci .",
+    "typecheck": "tsc --noEmit",
     "demo:record": "bash docs/demo/record-demo.sh",
     "demo:setup": "cd docs/demo-project && pnpm install",
     "test": "vitest run",
     "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    "docs:keys": "UPDATE_README=1 vitest run keymap-readme"
+    "test:coverage": "vitest run --coverage --reporter=default --reporter=json --outputFile.json=coverage/test-results.json",
+    "lint:deps": "depcruise src --config .dependency-cruiser.cjs",
+    "docs:keys": "UPDATE_README=1 vitest run keymap-readme",
+    "docs:badges": "pnpm test:coverage && UPDATE_README=1 vitest run badges-readme",
+    "site:dev": "pnpm --filter @inup/website dev",
+    "site:build": "pnpm --filter @inup/website build",
+    "site:preview": "pnpm --filter @inup/website preview"
   }
 }

package/dist/core/index.js

@@ -1,23 +0,0 @@
-"use strict";
-/**
- * Core business logic
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./upgrade-runner"), exports);
-__exportStar(require("./package-detector"), exports);
-__exportStar(require("./upgrader"), exports);
-//# sourceMappingURL=index.js.map

package/dist/features/changelog/types/changelog.types.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=changelog.types.js.map

package/dist/features/debug/types/debug.types.js

@@ -1,3 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=debug.types.js.map

package/dist/services/index.js

@@ -1,25 +0,0 @@
-"use strict";
-/**
- * External service integrations
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./npm-registry"), exports);
-__exportStar(require("../features/changelog"), exports);
-__exportStar(require("./version-checker"), exports);
-__exportStar(require("./vulnerability-checker"), exports);
-__exportStar(require("./background-audit"), exports);
-//# sourceMappingURL=index.js.map

package/dist/ui/controllers/index.js

@@ -1,8 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.PackageInfoModalController = exports.VulnerabilityAuditController = void 0;
-var vulnerability_audit_controller_1 = require("./vulnerability-audit-controller");
-Object.defineProperty(exports, "VulnerabilityAuditController", { enumerable: true, get: function () { return vulnerability_audit_controller_1.VulnerabilityAuditController; } });
-var package_info_modal_controller_1 = require("./package-info-modal-controller");
-Object.defineProperty(exports, "PackageInfoModalController", { enumerable: true, get: function () { return package_info_modal_controller_1.PackageInfoModalController; } });
-//# sourceMappingURL=index.js.map

package/dist/ui/index.js

@@ -1,27 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./utils"), exports);
-__exportStar(require("./state"), exports);
-__exportStar(require("./renderer"), exports);
-__exportStar(require("./modal"), exports);
-__exportStar(require("./presenters"), exports);
-__exportStar(require("./controllers"), exports);
-__exportStar(require("./input-handler"), exports);
-__exportStar(require("./keymap"), exports);
-__exportStar(require("./themes"), exports);
-__exportStar(require("./themes-colors"), exports);
-//# sourceMappingURL=index.js.map

package/dist/ui/presenters/index.js

@@ -1,11 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.selectRepresentativeAdvisory = exports.mergeVulnerabilitySummary = exports.getVulnerabilitySeverityColor = exports.getVulnerabilityLinkLabel = exports.getVulnerabilityBadge = exports.createVulnerabilitySummary = void 0;
-var vulnerability_1 = require("./vulnerability");
-Object.defineProperty(exports, "createVulnerabilitySummary", { enumerable: true, get: function () { return vulnerability_1.createVulnerabilitySummary; } });
-Object.defineProperty(exports, "getVulnerabilityBadge", { enumerable: true, get: function () { return vulnerability_1.getVulnerabilityBadge; } });
-Object.defineProperty(exports, "getVulnerabilityLinkLabel", { enumerable: true, get: function () { return vulnerability_1.getVulnerabilityLinkLabel; } });
-Object.defineProperty(exports, "getVulnerabilitySeverityColor", { enumerable: true, get: function () { return vulnerability_1.getVulnerabilitySeverityColor; } });
-Object.defineProperty(exports, "mergeVulnerabilitySummary", { enumerable: true, get: function () { return vulnerability_1.mergeVulnerabilitySummary; } });
-Object.defineProperty(exports, "selectRepresentativeAdvisory", { enumerable: true, get: function () { return vulnerability_1.selectRepresentativeAdvisory; } });
-//# sourceMappingURL=index.js.map

package/dist/ui/utils/text.js

@@ -1,76 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.stripAnsi = stripAnsi;
-exports.getVisualLength = getVisualLength;
-exports.truncatePlainText = truncatePlainText;
-exports.wrapPlainText = wrapPlainText;
-const ANSI_PATTERN = /\[[0-9;?]*[ -/]*[@-~]/g;
-const OSC8_PATTERN = /]8;;.*?(?:|\\)|]8;;(?:|\\)/g;
-function stripAnsi(text) {
-    return text.replace(OSC8_PATTERN, '').replace(ANSI_PATTERN, '');
-}
-function getVisualLength(text) {
-    const cleaned = stripAnsi(text);
-    const SegmenterCtor = Intl.Segmenter;
-    let length = 0;
-    const segments = SegmenterCtor
-        ? SegmenterCtor.prototype.segment.call(new SegmenterCtor(undefined, { granularity: 'grapheme' }), cleaned)
-        : cleaned;
-    for (const item of segments) {
-        const segment = typeof item === 'string' ? item : item.segment;
-        if (/\p{Extended_Pictographic}/u.test(segment) || segment.includes('\uFE0F')) {
-            length += 2;
-        }
-        else {
-            for (const char of segment) {
-                const codePoint = char.codePointAt(0) ?? 0;
-                if ((codePoint >= 0xfe00 && codePoint <= 0xfe0f) ||
-                    (codePoint >= 0x0300 && codePoint <= 0x036f)) {
-                    continue;
-                }
-                length += 1;
-            }
-        }
-    }
-    return length;
-}
-function truncatePlainText(text, maxWidth) {
-    if (maxWidth <= 0) {
-        return '';
-    }
-    if (getVisualLength(text) <= maxWidth) {
-        return text;
-    }
-    if (maxWidth <= 3) {
-        return '.'.repeat(maxWidth);
-    }
-    return text.substring(0, maxWidth - 3) + '...';
-}
-function wrapPlainText(text, maxWidth) {
-    if (!text) {
-        return [];
-    }
-    if (maxWidth <= 0 || getVisualLength(text) <= maxWidth) {
-        return [text];
-    }
-    const lines = [];
-    let current = '';
-    const words = text.split(' ');
-    for (const word of words) {
-        const candidate = (current + ' ' + word).trim();
-        if (getVisualLength(candidate) > maxWidth) {
-            if (current) {
-                lines.push(current);
-            }
-            current = word;
-        }
-        else {
-            current = current ? `${current} ${word}` : word;
-        }
-    }
-    if (current) {
-        lines.push(current);
-    }
-    return lines;
-}
-//# sourceMappingURL=text.js.map

package/dist/utils/filesystem/paths.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.findPackageJson = findPackageJson;
-exports.findWorkspaceRoot = findWorkspaceRoot;
-const fs_1 = require("fs");
-const path_1 = require("path");
-const package_manager_detector_1 = require("../../services/package-manager-detector");
-function findPackageJson(cwd = process.cwd()) {
-    const packageJsonPath = (0, path_1.join)(cwd, 'package.json');
-    return (0, fs_1.existsSync)(packageJsonPath) ? packageJsonPath : null;
-}
-function findWorkspaceRoot(cwd = process.cwd(), packageManager) {
-    if (!packageManager) {
-        const detected = package_manager_detector_1.PackageManagerDetector.detect(cwd);
-        packageManager = detected.name;
-    }
-    return package_manager_detector_1.PackageManagerDetector.findWorkspaceRoot(cwd, packageManager);
-}
-//# sourceMappingURL=paths.js.map

package/dist/utils/filesystem.js

@@ -1,20 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./filesystem/paths"), exports);
-__exportStar(require("./filesystem/io"), exports);
-__exportStar(require("./filesystem/scan"), exports);
-//# sourceMappingURL=filesystem.js.map

package/dist/utils/index.js

@@ -1,34 +0,0 @@
-"use strict";
-/**
- * Shared utilities
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.collectAllDependenciesAsync = exports.readPackageJsonAsync = void 0;
-__exportStar(require("./filesystem"), exports);
-__exportStar(require("./exec"), exports);
-__exportStar(require("./git"), exports);
-__exportStar(require("./version"), exports);
-__exportStar(require("./debug-logger"), exports);
-__exportStar(require("./local-env"), exports);
-__exportStar(require("./color"), exports);
-__exportStar(require("./engines"), exports);
-__exportStar(require("./manifest"), exports);
-// Re-export async functions for convenience
-var filesystem_1 = require("./filesystem");
-Object.defineProperty(exports, "readPackageJsonAsync", { enumerable: true, get: function () { return filesystem_1.readPackageJsonAsync; } });
-Object.defineProperty(exports, "collectAllDependenciesAsync", { enumerable: true, get: function () { return filesystem_1.collectAllDependenciesAsync; } });
-//# sourceMappingURL=index.js.map