oc-pilot 0.5.1 → 0.88.1

package/dist/core/deps-fix.js

@@ -0,0 +1,169 @@
+/**
+ * Dependency fix: turns the safe half of the `deps` audit into edits of
+ * package.json. Only mechanical moves are applied — test-only packages go to
+ * devDependencies, phantom imports get the version npm already installed, and
+ * floating ranges are pinned to the lockfile version. Anything that needs a
+ * human decision (removing a package, picking between duplicates, replacing a
+ * git dependency) is reported as skipped instead of guessed.
+ */
+import { readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { readLockfile } from "./lockfile.js";
+import { isTestFile } from "./slop/source.js";
+function readJson(path) {
+    try {
+        return JSON.parse(readFileSync(path, "utf8").replace(/^\uFEFF/, ""));
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Versions the package manager already resolved: the only versions safe to write back offline. */
+function lockVersions(cwd) {
+    return readLockfile(cwd)?.versions ?? new Map();
+}
+function take(record, name) {
+    if (!record || !(name in record))
+        return undefined;
+    const spec = record[name];
+    delete record[name];
+    return spec;
+}
+function put(manifest, field, name, spec) {
+    const record = manifest[field] ?? {};
+    record[name] = spec;
+    manifest[field] = record;
+}
+/** Produces package.json edits for the issues that have exactly one right answer. */
+export function planDependencyFixes(cwd, audit) {
+    const manifestPath = join(cwd, "package.json");
+    const before = readFileSync(manifestPath, "utf8");
+    const parsed = readJson(manifestPath);
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return { fixes: [], skipped: [], before, after: before };
+    }
+    const manifest = parsed;
+    const versions = lockVersions(cwd);
+    const fixes = [];
+    const skipped = [];
+    const handled = new Set();
+    for (const issue of audit.issues) {
+        if (handled.has(issue.name))
+            continue;
+        if (issue.kind === "misplaced") {
+            const spec = take(manifest.dependencies, issue.name) ?? take(manifest.optionalDependencies, issue.name);
+            if (spec === undefined)
+                continue;
+            put(manifest, "devDependencies", issue.name, spec);
+            handled.add(issue.name);
+            fixes.push({
+                name: issue.name,
+                action: "move-to-dev",
+                from: `dependencies:${spec}`,
+                to: `devDependencies:${spec}`,
+                reason: "используется только в тестах",
+            });
+            continue;
+        }
+        if (issue.kind === "phantom") {
+            const version = versions.get(issue.name);
+            if (!version) {
+                handled.add(issue.name);
+                skipped.push({
+                    name: issue.name,
+                    kind: issue.kind,
+                    reason: "нет версии в lockfile — добавьте зависимость вручную",
+                });
+                continue;
+            }
+            const testOnly = (issue.files ?? []).length > 0 && (issue.files ?? []).every((file) => isTestFile(file));
+            const field = testOnly ? "devDependencies" : "dependencies";
+            put(manifest, field, issue.name, `^${version}`);
+            handled.add(issue.name);
+            fixes.push({
+                name: issue.name,
+                action: testOnly ? "add-dev" : "add-prod",
+                to: `${field}:^${version}`,
+                reason: `импортируется, версия ${version} уже в lockfile`,
+            });
+            continue;
+        }
+        if (issue.kind === "unpinned") {
+            const version = versions.get(issue.name);
+            if (!version) {
+                handled.add(issue.name);
+                skipped.push({
+                    name: issue.name,
+                    kind: issue.kind,
+                    reason: "нет версии в lockfile — зафиксируйте диапазон вручную",
+                });
+                continue;
+            }
+            const fields = ["dependencies", "devDependencies", "optionalDependencies"];
+            const field = fields.find((candidate) => issue.name in (manifest[candidate] ?? {}));
+            if (!field)
+                continue;
+            const previous = manifest[field]?.[issue.name] ?? "";
+            manifest[field][issue.name] = `^${version}`;
+            handled.add(issue.name);
+            fixes.push({
+                name: issue.name,
+                action: "pin",
+                from: previous,
+                to: `^${version}`,
+                reason: "версия взята из lockfile",
+            });
+            continue;
+        }
+        if (issue.kind === "lockfile") {
+            handled.add(issue.name);
+            skipped.push({
+                name: issue.name,
+                kind: issue.kind,
+                reason: "исправляется только установкой: запустите npm install",
+            });
+            continue;
+        }
+        if (issue.kind === "unused") {
+            handled.add(issue.name);
+            skipped.push({
+                name: issue.name,
+                kind: issue.kind,
+                reason: "удаление пакета требует решения — уберите вручную, если он не нужен",
+            });
+            continue;
+        }
+        if (issue.kind === "duplicate") {
+            handled.add(issue.name);
+            skipped.push({
+                name: issue.name,
+                kind: issue.kind,
+                reason: "выберите один пакет вручную",
+            });
+            continue;
+        }
+        handled.add(issue.name);
+        skipped.push({
+            name: issue.name,
+            kind: issue.kind,
+            reason: "замените git/URL-зависимость на версию из реестра вручную",
+        });
+    }
+    if (fixes.length > 0) {
+        for (const field of ["dependencies", "devDependencies", "peerDependencies", "optionalDependencies"]) {
+            const record = manifest[field];
+            if (record && Object.keys(record).length === 0)
+                delete manifest[field];
+        }
+    }
+    const after = fixes.length > 0 ? `${JSON.stringify(manifest, null, 2)}\n` : before;
+    return { fixes, skipped, before, after };
+}
+/** Writes the plan; returns false when there was nothing to write. */
+export function applyDependencyFixPlan(cwd, plan) {
+    if (plan.fixes.length === 0)
+        return false;
+    writeFileSync(join(cwd, "package.json"), plan.after, "utf8");
+    return true;
+}
+//# sourceMappingURL=deps-fix.js.map

package/dist/core/deps-fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fix.js","sourceRoot":"","sources":["../../src/core/deps-fix.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAmC9C,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,IAAI,IAAI,GAAG,EAAkB,CAAC;AAClE,CAAC;AAED,SAAS,IAAI,CAAC,MAA0C,EAAE,IAAY;IACpE,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,GAAG,CAAC,QAAkB,EAAE,KAAyC,EAAE,IAAY,EAAE,IAAY;IACpG,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;AAC3B,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,KAAsB;IACrE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAkB,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAEtC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxG,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,GAAG,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,aAAa;gBACrB,IAAI,EAAE,gBAAgB,IAAI,EAAE;gBAC5B,EAAE,EAAE,mBAAmB,IAAI,EAAE;gBAC7B,MAAM,EAAE,8BAA8B;aACvC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,sDAAsD;iBAC/D,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YACzG,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,CAAC;YAC5D,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;gBACzC,EAAE,EAAE,GAAG,KAAK,KAAK,OAAO,EAAE;gBAC1B,MAAM,EAAE,yBAAyB,OAAO,iBAAiB;aAC1D,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,uDAAuD;iBAChE,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAU,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,KAAK,CAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,QAAQ;gBACd,EAAE,EAAE,IAAI,OAAO,EAAE;gBACjB,MAAM,EAAE,0BAA0B;aACnC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,uDAAuD;aAChE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,qEAAqE;aAC9E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,MAAM,EAAE,6BAA6B;aACtC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,2DAA2D;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,EAAE,CAAC;YAC7G,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACnF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,IAAuB;IACzE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/deps-fix.test.js

@@ -0,0 +1,176 @@
+import assert from "node:assert/strict";
+import { spawnSync } from "node:child_process";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import test from "node:test";
+import { applyDependencyFixPlan, planDependencyFixes } from "./deps-fix.js";
+import { auditDependencies } from "./deps-health.js";
+function makeRepo(files) {
+    const dir = mkdtempSync(join(tmpdir(), "oc-pilot-deps-fix-"));
+    spawnSync("git", ["init", "-q"], { cwd: dir });
+    for (const [path, text] of Object.entries(files)) {
+        mkdirSync(dirname(join(dir, path)), { recursive: true });
+        writeFileSync(join(dir, path), text, "utf8");
+    }
+    return dir;
+}
+function manifest(value) {
+    return `${JSON.stringify({ name: "demo", private: true, ...value }, null, 2)}\n`;
+}
+function readManifest(dir) {
+    return JSON.parse(readFileSync(join(dir, "package.json"), "utf8"));
+}
+test("moves a test-only dependency to devDependencies", () => {
+    const dir = makeRepo({
+        "package.json": manifest({ dependencies: { zod: "^3.23.0" } }),
+        "src/app.test.ts": 'import { z } from "zod";\n',
+    });
+    try {
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.equal(plan.fixes.length, 1);
+        assert.deepEqual(plan.fixes[0], {
+            name: "zod",
+            action: "move-to-dev",
+            from: "dependencies:^3.23.0",
+            to: "devDependencies:^3.23.0",
+            reason: "используется только в тестах",
+        });
+        assert.equal(applyDependencyFixPlan(dir, plan), true);
+        const updated = readManifest(dir);
+        assert.deepEqual(updated.dependencies, undefined);
+        assert.deepEqual(updated.devDependencies, { zod: "^3.23.0" });
+        assert.deepEqual(auditDependencies(dir).issues, []);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("adds a phantom import using the lockfile version", () => {
+    const dir = makeRepo({
+        "package.json": manifest({}),
+        "app.ts": 'import axios from "axios";\n',
+        "package-lock.json": JSON.stringify({
+            lockfileVersion: 3,
+            packages: { "": {}, "node_modules/axios": { version: "1.7.2" } },
+        }),
+    });
+    try {
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.deepEqual(plan.fixes, [
+            {
+                name: "axios",
+                action: "add-prod",
+                to: "dependencies:^1.7.2",
+                reason: "импортируется, версия 1.7.2 уже в lockfile",
+            },
+        ]);
+        applyDependencyFixPlan(dir, plan);
+        assert.deepEqual(readManifest(dir).dependencies, { axios: "^1.7.2" });
+        assert.deepEqual(auditDependencies(dir).issues, []);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("adds a phantom import used only by tests to devDependencies", () => {
+    const dir = makeRepo({
+        "package.json": manifest({}),
+        "src/app.test.ts": 'import { render } from "@testing-library/react";\n',
+        "package-lock.json": JSON.stringify({
+            lockfileVersion: 3,
+            packages: { "": {}, "node_modules/@testing-library/react": { version: "16.0.0" } },
+        }),
+    });
+    try {
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.equal(plan.fixes[0]?.action, "add-dev");
+        applyDependencyFixPlan(dir, plan);
+        assert.deepEqual(readManifest(dir).devDependencies, { "@testing-library/react": "^16.0.0" });
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("skips a phantom import without a lockfile version", () => {
+    const dir = makeRepo({
+        "package.json": manifest({}),
+        "app.ts": 'import axios from "axios";\n',
+    });
+    try {
+        const before = readFileSync(join(dir, "package.json"), "utf8");
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.deepEqual(plan.fixes, []);
+        assert.equal(plan.skipped.length, 1);
+        assert.equal(plan.skipped[0]?.name, "axios");
+        assert.match(plan.skipped[0]?.reason ?? "", /lockfile/);
+        assert.equal(plan.after, before);
+        assert.equal(applyDependencyFixPlan(dir, plan), false);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("pins a floating range to the lockfile version", () => {
+    const dir = makeRepo({
+        "package.json": manifest({ dependencies: { lodash: "*" } }),
+        "app.ts": 'import lodash from "lodash";\n',
+        "package-lock.json": JSON.stringify({
+            lockfileVersion: 3,
+            packages: { "": {}, "node_modules/lodash": { version: "4.17.21" } },
+        }),
+    });
+    try {
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.deepEqual(plan.fixes, [
+            {
+                name: "lodash",
+                action: "pin",
+                from: "*",
+                to: "^4.17.21",
+                reason: "версия взята из lockfile",
+            },
+        ]);
+        applyDependencyFixPlan(dir, plan);
+        assert.deepEqual(readManifest(dir).dependencies, { lodash: "^4.17.21" });
+        assert.deepEqual(auditDependencies(dir).issues, []);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("leaves removals, duplicates and vcs specs to the user", () => {
+    const dir = makeRepo({
+        "package.json": manifest({
+            dependencies: { "left-pad": "^1.3.0", moment: "^2.30.0", dayjs: "^1.11.0" },
+            devDependencies: { "local-lib": "file:../local" },
+        }),
+        "app.ts": 'import moment from "moment";\nimport dayjs from "dayjs";\nimport lib from "local-lib";\n',
+    });
+    try {
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.deepEqual(plan.fixes, []);
+        const kinds = plan.skipped.map((item) => item.kind).sort();
+        assert.deepEqual(kinds, ["duplicate", "unused", "vcs"]);
+        assert.ok(plan.skipped.every((item) => item.reason.length > 0));
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("planning does not touch package.json", () => {
+    const dir = makeRepo({
+        "package.json": manifest({ dependencies: { zod: "^3.23.0" } }),
+        "src/app.test.ts": 'import { z } from "zod";\n',
+    });
+    try {
+        const before = readFileSync(join(dir, "package.json"), "utf8");
+        const plan = planDependencyFixes(dir, auditDependencies(dir));
+        assert.equal(plan.fixes.length, 1);
+        assert.equal(readFileSync(join(dir, "package.json"), "utf8"), before);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+//# sourceMappingURL=deps-fix.test.js.map

package/dist/core/deps-fix.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-fix.test.js","sourceRoot":"","sources":["../../src/core/deps-fix.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACtF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,SAAS,QAAQ,CAAC,KAA6B;IAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC9D,SAAS,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,KAA8B;IAC9C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;AAChG,CAAC;AAED,IAAI,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,iBAAiB,EAAE,4BAA4B;KAChD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC9B,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,aAAa;YACrB,IAAI,EAAE,sBAAsB;YAC5B,EAAE,EAAE,yBAAyB;YAC7B,MAAM,EAAE,8BAA8B;SACvC,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5B,QAAQ,EAAE,8BAA8B;QACxC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,eAAe,EAAE,CAAC;YAClB,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;SACjE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;YAC3B;gBACE,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,UAAU;gBAClB,EAAE,EAAE,qBAAqB;gBACzB,MAAM,EAAE,4CAA4C;aACrD;SACF,CAAC,CAAC;QAEH,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5B,iBAAiB,EAAE,oDAAoD;QACvE,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,eAAe,EAAE,CAAC;YAClB,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,qCAAqC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;SACnF,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC/C,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/F,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5B,QAAQ,EAAE,8BAA8B;KACzC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IACzD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;QAC3D,QAAQ,EAAE,gCAAgC;QAC1C,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC;YAClC,eAAe,EAAE,CAAC;YAClB,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;SACpE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE;YAC3B;gBACE,IAAI,EAAE,QAAQ;gBACd,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,GAAG;gBACT,EAAE,EAAE,UAAU;gBACd,MAAM,EAAE,0BAA0B;aACnC;SACF,CAAC,CAAC;QACH,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,uDAAuD,EAAE,GAAG,EAAE;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC;YACvB,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;YAC3E,eAAe,EAAE,EAAE,WAAW,EAAE,eAAe,EAAE;SAClD,CAAC;QACF,QAAQ,EAAE,0FAA0F;KACrG,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;IAChD,MAAM,GAAG,GAAG,QAAQ,CAAC;QACnB,cAAc,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC;QAC9D,iBAAiB,EAAE,4BAA4B;KAChD,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC"}