shakapacker 8.0.2 → 9.2.0

data/lib/install/config/webpack/webpack.config.ts

@@ -0,0 +1,7 @@
+// See the shakacode/shakapacker README and docs directory for advice on customizing your webpackConfig.
+import { generateWebpackConfig } from 'shakapacker'
+import type { Configuration } from 'webpack'
+
+const webpackConfig: Configuration = generateWebpackConfig()
+
+export default webpackConfig

data/lib/install/package.json

@@ -0,0 +1,38 @@
+{
+  "rspack": {
+    "@rspack/cli": "^1.0.0",
+    "@rspack/core": "^1.0.0",
+    "rspack-manifest-plugin": "^5.0.0"
+  },
+  "webpack": {
+    "mini-css-extract-plugin": "^2.0.0",
+    "terser-webpack-plugin": "^5.3.1",
+    "webpack": "^5.76.0",
+    "webpack-assets-manifest": "^5.0.6 || ^6.0.0",
+    "webpack-cli": "^4.9.2 || ^5.0.0 || ^6.0.0",
+    "webpack-dev-server": "^4.15.2 || ^5.2.2",
+    "webpack-merge": "^5.8.0 || ^6.0.0",
+    "webpack-subresource-integrity": "^5.1.0"
+  },
+  "common": {
+    "compression-webpack-plugin": "^9.0.0 || ^10.0.0|| ^11.0.0",
+    "css-loader": "^6.0.0 || ^7.0.0",
+    "sass-loader": "^13.0.0 || ^14.0.0 || ^15.0.0 || ^16.0.0",
+    "style-loader": "^3.0.0 || ^4.0.0"
+  },
+  "babel": {
+    "@babel/core": "^7.17.9",
+    "@babel/plugin-transform-runtime": "^7.17.0",
+    "@babel/preset-env": "^7.16.11",
+    "@babel/runtime": "^7.17.9",
+    "babel-loader": "^8.2.4 || ^9.0.0 || ^10.0.0"
+  },
+  "swc": {
+    "@swc/core": "^1.3.0",
+    "swc-loader": "^0.2.0"
+  },
+  "esbuild": {
+    "esbuild": "^0.24.0",
+    "esbuild-loader": "^4.0.0"
+  }
+}

data/lib/install/template.rb

@@ -2,26 +2,72 @@ require "shakapacker/utils/misc"
 require "shakapacker/utils/manager"
 require "shakapacker/utils/version_syntax_converter"
 require "package_json"
+require "yaml"
+require "json"
 
 # Install Shakapacker
 
 force_option = ENV["FORCE"] ? { force: true } : {}
 
-copy_file "#{__dir__}/config/shakapacker.yml", "config/shakapacker.yml", force_option
-remove_file "#{__dir__}/package.json" if force_option[:force]
+# Initialize variables for use throughout the template
+# Using instance variable to avoid method definition issues in Rails templates
+@package_json ||= PackageJson.new
+install_dir = File.expand_path(File.dirname(__FILE__))
 
-say "Copying webpack core config"
-directory "#{__dir__}/config/webpack", "config/webpack", force_option
+# Installation strategy:
+# - USE_BABEL_PACKAGES installs both babel AND swc for compatibility
+# - Otherwise install only the specified transpiler
+if ENV["USE_BABEL_PACKAGES"] == "true" || ENV["USE_BABEL_PACKAGES"] == "1"
+  @transpiler_to_install = "babel"
+  say "📦 Installing Babel packages (USE_BABEL_PACKAGES is set)", :yellow
+  say "✨ Also installing SWC packages for default config compatibility", :green
+elsif ENV["JAVASCRIPT_TRANSPILER"]
+  @transpiler_to_install = ENV["JAVASCRIPT_TRANSPILER"]
+  say "📦 Installing #{@transpiler_to_install} packages", :blue
+else
+  # Default to swc (matches the default in shakapacker.yml)
+  @transpiler_to_install = "swc"
+  say "✨ Installing SWC packages (20x faster than Babel)", :green
+end
+
+# Copy config file
+copy_file "#{install_dir}/config/shakapacker.yml", "config/shakapacker.yml", force_option
+
+# Update config if USE_BABEL_PACKAGES is set to ensure babel is used at runtime
+if @transpiler_to_install == "babel" && !ENV["JAVASCRIPT_TRANSPILER"]
+  # When USE_BABEL_PACKAGES is set, update the config to use babel
+  gsub_file "config/shakapacker.yml", "javascript_transpiler: 'swc'", "javascript_transpiler: 'babel'"
+  say "   📝 Updated config/shakapacker.yml to use Babel transpiler", :green
+end
+
+# Detect TypeScript usage
+# Auto-detect from tsconfig.json or explicit via SHAKAPACKER_USE_TYPESCRIPT env var
+@use_typescript = File.exist?(Rails.root.join("tsconfig.json")) ||
+  ENV["SHAKAPACKER_USE_TYPESCRIPT"] == "true"
+assets_bundler = ENV["SHAKAPACKER_ASSETS_BUNDLER"] || "webpack"
+config_extension = @use_typescript ? "ts" : "js"
+
+say "Copying #{assets_bundler} core config (#{config_extension.upcase})"
+config_file = "#{assets_bundler}.config.#{config_extension}"
+source_config = "#{install_dir}/config/#{assets_bundler}/#{config_file}"
+dest_config = "config/#{assets_bundler}/#{config_file}"
+
+empty_directory "config/#{assets_bundler}"
+copy_file source_config, dest_config, force_option
+
+if @use_typescript
+  say "   ✨ Using TypeScript config for enhanced type safety", :green
+end
 
 if Dir.exist?(Shakapacker.config.source_path)
   say "The packs app source directory already exists"
 else
   say "Creating packs app source directory"
   empty_directory "app/javascript/packs"
-  copy_file "#{__dir__}/application.js", "app/javascript/packs/application.js"
+  copy_file "#{install_dir}/application.js", "app/javascript/packs/application.js"
 end
 
-apply "#{__dir__}/binstubs.rb"
+apply "#{install_dir}/binstubs.rb"
 
 git_ignore_path = Rails.root.join(".gitignore")
 if File.exist?(git_ignore_path)
@@ -44,17 +90,8 @@ else
   say %(        Add <%= javascript_pack_tag "application" %> within the <head> tag in your custom layout.)
 end
 
-def package_json
-  @package_json ||= PackageJson.new
-end
-
 # setup the package manager with default values
-package_json.merge! do |pj|
-  babel = pj.fetch("babel", {})
-
-  babel["presets"] ||= []
-  babel["presets"].push("./node_modules/shakapacker/package/babel/preset.js")
-
+@package_json.merge! do |pj|
   package_manager = pj.fetch("packageManager") do
     "#{Shakapacker::Utils::Manager.guess_binary}@#{Shakapacker::Utils::Manager.guess_version}"
   end
@@ -63,7 +100,6 @@ package_json.merge! do |pj|
     "name" => "app",
     "private" => true,
     "version" => "0.1.0",
-    "babel" => babel,
     "browserslist" => [
       "defaults"
     ],
@@ -75,7 +111,7 @@ Shakapacker::Utils::Manager.error_unless_package_manager_is_obvious!
 
 # Ensure there is `system!("bin/yarn")` command in `./bin/setup` file
 if (setup_path = Rails.root.join("bin/setup")).exist?
-  native_install_command = package_json.manager.native_install_command.join(" ")
+  native_install_command = @package_json.manager.native_install_command.join(" ")
 
   say "Run #{native_install_command} during bin/setup"
 
@@ -104,40 +140,126 @@ if (setup_path = Rails.root.join("bin/setup")).exist?
   end
 end
 
-def add_dependencies(dependencies, type)
-  package_json.manager.add!(dependencies, type: type)
-rescue PackageJson::Error
-  say "Shakapacker installation failed 😭 See above for details.", :red
-  exit 1
-end
+Dir.chdir(Rails.root) do
+  # In CI, use the pre-packed tarball if available
+  if ENV["SHAKAPACKER_NPM_PACKAGE"]
+    package_path = ENV["SHAKAPACKER_NPM_PACKAGE"]
 
-def fetch_peer_dependencies
-  PackageJson.read("#{__dir__}/../../").fetch("peerDependencies")
-end
+    # Validate package path to prevent directory traversal and invalid file types
+    begin
+      # Resolve to absolute path
+      absolute_path = File.expand_path(package_path)
 
-Dir.chdir(Rails.root) do
-  npm_version = Shakapacker::Utils::VersionSyntaxConverter.new.rubygem_to_npm(Shakapacker::VERSION)
-  say "Installing shakapacker@#{npm_version}"
-  add_dependencies(["shakapacker@#{npm_version}"], :production)
-
-  package_json.merge! do |pj|
-    {
-      "dependencies" => pj["dependencies"].merge({
-        # TODO: workaround for test suite - long-run need to actually account for diff pkg manager behaviour
-        "shakapacker" => pj["dependencies"]["shakapacker"].delete_prefix("^")
-      })
-    }
+      # Reject paths containing directory traversal
+      if package_path.include?("..") || absolute_path.include?("..")
+        say "❌ Security Error: Package path contains directory traversal: #{package_path}", :red
+        exit 1
+      end
+
+      # Ensure filename ends with .tgz or .tar.gz
+      unless absolute_path.end_with?(".tgz", ".tar.gz")
+        say "❌ Security Error: Package must be a .tgz or .tar.gz file: #{package_path}", :red
+        exit 1
+      end
+
+      # Check existence only after validation
+      if File.exist?(absolute_path)
+        say "📦 Installing shakapacker from local package: #{absolute_path}", :cyan
+        begin
+          @package_json.manager.add!([absolute_path], type: :production)
+        rescue PackageJson::Error
+          say "Shakapacker installation failed 😭 See above for details.", :red
+          exit 1
+        end
+      else
+        say "⚠️  SHAKAPACKER_NPM_PACKAGE set but file not found: #{absolute_path}", :yellow
+        say "Falling back to npm registry...", :yellow
+        npm_version = Shakapacker::Utils::VersionSyntaxConverter.new.rubygem_to_npm(Shakapacker::VERSION)
+        begin
+          @package_json.manager.add!(["shakapacker@#{npm_version}"], type: :production)
+        rescue PackageJson::Error
+          say "Shakapacker installation failed 😭 See above for details.", :red
+          exit 1
+        end
+      end
+    rescue => e
+      say "❌ Error validating package path: #{e.message}", :red
+      exit 1
+    end
+  else
+    npm_version = Shakapacker::Utils::VersionSyntaxConverter.new.rubygem_to_npm(Shakapacker::VERSION)
+    say "Installing shakapacker@#{npm_version}"
+    begin
+      @package_json.manager.add!(["shakapacker@#{npm_version}"], type: :production)
+    rescue PackageJson::Error
+      say "Shakapacker installation failed 😭 See above for details.", :red
+      exit 1
+    end
+  end
+
+  @package_json.merge! do |pj|
+    if pj["dependencies"] && pj["dependencies"]["shakapacker"]
+      {
+        "dependencies" => pj["dependencies"].merge({
+          # TODO: workaround for test suite - long-run need to actually account for diff pkg manager behaviour
+          "shakapacker" => pj["dependencies"]["shakapacker"].delete_prefix("^")
+        })
+      }
+    else
+      pj
+    end
+  end
+
+  # Inline fetch_peer_dependencies and fetch_common_dependencies
+  peers = PackageJson.read(install_dir).fetch(ENV["SHAKAPACKER_ASSETS_BUNDLER"] || "webpack")
+  common_deps = ENV["SKIP_COMMON_LOADERS"] ? {} : PackageJson.read(install_dir).fetch("common")
+  peers = peers.merge(common_deps)
+
+  # Add transpiler-specific dependencies based on detected/configured transpiler
+  # Inline the logic here since methods can't be called before they're defined in Rails templates
+
+  # Install transpiler-specific dependencies
+  # When USE_BABEL_PACKAGES is set, install both babel AND swc
+  # This ensures backward compatibility while supporting the default config
+  if @transpiler_to_install == "babel"
+    # Install babel packages
+    babel_deps = PackageJson.read(install_dir).fetch("babel")
+    peers = peers.merge(babel_deps)
+
+    # Also install SWC since that's what the default config uses
+    # This ensures the runtime works regardless of config
+    swc_deps = PackageJson.read(install_dir).fetch("swc")
+    peers = peers.merge(swc_deps)
+
+    say "ℹ️  Installing both Babel and SWC packages for compatibility:", :blue
+    say "   - Babel packages are installed as requested via USE_BABEL_PACKAGES", :blue
+    say "   - SWC packages are also installed to ensure the default config works", :blue
+    say "   - Your actual transpiler will be determined by your shakapacker.yml configuration", :blue
+  elsif @transpiler_to_install == "swc"
+    swc_deps = PackageJson.read(install_dir).fetch("swc")
+    peers = peers.merge(swc_deps)
+  elsif @transpiler_to_install == "esbuild"
+    esbuild_deps = PackageJson.read(install_dir).fetch("esbuild")
+    peers = peers.merge(esbuild_deps)
   end
 
-  peers = fetch_peer_dependencies
   dev_dependency_packages = ["webpack-dev-server"]
 
   dependencies_to_add = []
   dev_dependencies_to_add = []
 
   peers.each do |(package, version)|
-    major_version = version.match(/(\d+)/)[1]
-    entry = "#{package}@#{major_version}"
+    # Handle versions like "^1.3.0" or ">= 4 || 5"
+    if version.start_with?("^", "~") || version.match?(/^\d+\.\d+/)
+      # Already has proper version format, use as-is
+      entry = "#{package}@#{version}"
+    else
+      # Extract major version from complex version strings like ">= 4 || 5"
+      # Fallback to "latest" if no version number found
+      version_match = version.split("||").last.match(/(\d+)/)
+      major_version = version_match ? version_match[1] : "latest"
+      entry = "#{package}@#{major_version}"
+    end
 
     if dev_dependency_packages.include? package
       dev_dependencies_to_add << entry
@@ -147,8 +269,36 @@ Dir.chdir(Rails.root) do
   end
 
   say "Adding shakapacker peerDependencies"
-  add_dependencies(dependencies_to_add, :production)
+  begin
+    @package_json.manager.add!(dependencies_to_add, type: :production)
+  rescue PackageJson::Error
+    say "Shakapacker installation failed 😭 See above for details.", :red
+    exit 1
+  end
 
   say "Installing webpack-dev-server for live reloading as a development dependency"
-  add_dependencies(dev_dependencies_to_add, :dev)
+  begin
+    @package_json.manager.add!(dev_dependencies_to_add, type: :dev)
+  rescue PackageJson::Error
+    say "Shakapacker installation failed 😭 See above for details.", :red
+    exit 1
+  end
+
+  # Configure babel preset in package.json if babel is being used
+  if @transpiler_to_install == "babel"
+    @package_json.merge! do |pj|
+      babel = pj.fetch("babel", {})
+      babel["presets"] ||= []
+      unless babel["presets"].include?("./node_modules/shakapacker/package/babel/preset.js")
+        babel["presets"].push("./node_modules/shakapacker/package/babel/preset.js")
+      end
+      { "babel" => babel }
+    end
+  end
+end
+
+# Helper methods defined at the end (Rails template convention)
+
+def package_json
+  @package_json
 end

data/lib/shakapacker/bundler_switcher.rb

@@ -0,0 +1,329 @@
+# frozen_string_literal: true
+
+require "yaml"
+require "fileutils"
+
+module Shakapacker
+  # Provides functionality to switch between webpack and rspack bundlers
+  class BundlerSwitcher
+    SHAKAPACKER_CONFIG = "config/shakapacker.yml"
+    CUSTOM_DEPS_CONFIG = ".shakapacker-switch-bundler-dependencies.yml"
+
+    # Default dependencies for each bundler (package names only, no versions)
+    DEFAULT_RSPACK_DEPS = {
+      dev: %w[@rspack/cli @rspack/plugin-react-refresh],
+      prod: %w[@rspack/core rspack-manifest-plugin]
+    }.freeze
+
+    DEFAULT_WEBPACK_DEPS = {
+      dev: %w[webpack webpack-cli webpack-dev-server @pmmmwh/react-refresh-webpack-plugin @swc/core swc-loader],
+      prod: %w[webpack-assets-manifest webpack-merge]
+    }.freeze
+
+    attr_reader :root_path
+
+    def initialize(root_path = nil)
+      @root_path = root_path || (defined?(Rails) ? Rails.root : Pathname.new(Dir.pwd))
+    end
+
+    def current_bundler
+      config = load_yaml_config(config_path)
+      config.dig("default", "assets_bundler") || "webpack"
+    end
+
+    def switch_to(bundler, install_deps: false, no_uninstall: false)
+      unless %w[webpack rspack].include?(bundler)
+        raise ArgumentError, "Invalid bundler: #{bundler}. Must be 'webpack' or 'rspack'"
+      end
+
+      current = current_bundler
+      if current == bundler && !install_deps
+        puts "✅ Already using #{bundler}"
+        return
+      end
+
+      if current == bundler && install_deps
+        puts "✅ Already using #{bundler} - reinstalling dependencies as requested"
+        manage_dependencies(bundler, install_deps, switching: false, no_uninstall: no_uninstall)
+        return
+      end
+
+      update_config(bundler)
+
+      puts "✅ Switched from #{current} to #{bundler}"
+      puts ""
+      puts "📝 Configuration updated in #{SHAKAPACKER_CONFIG}"
+
+      manage_dependencies(bundler, install_deps, no_uninstall: no_uninstall)
+
+      puts ""
+      puts "🎯 Next steps:"
+      puts "   1. Restart your dev server: bin/dev"
+      puts "   2. Verify build works: bin/shakapacker"
+      puts ""
+      puts "💡 Tip: Both webpack and rspack can coexist in package.json during migration"
+      puts "        Use --install-deps to automatically manage dependencies, or manage manually"
+      puts "        Use --no-uninstall to skip removing old bundler packages (faster switching)"
+    end
+
+    def init_config
+      if File.exist?(custom_config_path)
+        puts "⚠️  #{CUSTOM_DEPS_CONFIG} already exists"
+        return
+      end
+
+      config = {
+        "rspack" => {
+          "devDependencies" => DEFAULT_RSPACK_DEPS[:dev],
+          "dependencies" => DEFAULT_RSPACK_DEPS[:prod]
+        },
+        "webpack" => {
+          "devDependencies" => DEFAULT_WEBPACK_DEPS[:dev],
+          "dependencies" => DEFAULT_WEBPACK_DEPS[:prod]
+        }
+      }
+
+      File.write(custom_config_path, YAML.dump(config))
+      puts "✅ Created #{CUSTOM_DEPS_CONFIG}"
+      puts ""
+      puts "You can now customize the dependencies for each bundler in this file."
+      puts "The script will automatically use these custom dependencies when switching bundlers."
+    end
+
+    def show_usage
+      current = current_bundler
+      puts "Current bundler: #{current}"
+      puts ""
+      puts "Usage:"
+      puts "  rails shakapacker:switch_bundler [webpack|rspack] [OPTIONS]"
+      puts "  rake shakapacker:switch_bundler [webpack|rspack] -- [OPTIONS]"
+      puts ""
+      puts "Options:"
+      puts "  --install-deps    Automatically install/uninstall dependencies"
+      puts "  --no-uninstall    Skip uninstalling old bundler packages (faster, keeps both bundlers)"
+      puts "  --init-config     Create #{CUSTOM_DEPS_CONFIG} with default dependencies"
+      puts "  --help, -h        Show this help message"
+      puts ""
+      puts "Examples:"
+      puts "  # Using rails command"
+      puts "  rails shakapacker:switch_bundler rspack --install-deps"
+      puts "  rails shakapacker:switch_bundler webpack --install-deps --no-uninstall"
+      puts "  rails shakapacker:switch_bundler --init-config"
+      puts ""
+      puts "  # Using rake command (note the -- separator)"
+      puts "  rake shakapacker:switch_bundler rspack -- --install-deps"
+      puts "  rake shakapacker:switch_bundler webpack -- --install-deps --no-uninstall"
+      puts "  rake shakapacker:switch_bundler -- --init-config"
+    end
+
+    private
+
+      def config_path
+        root_path.join(SHAKAPACKER_CONFIG)
+      end
+
+      def custom_config_path
+        root_path.join(CUSTOM_DEPS_CONFIG)
+      end
+
+      def load_dependencies
+        if File.exist?(custom_config_path)
+          puts "📝 Using custom dependencies from #{CUSTOM_DEPS_CONFIG}"
+          begin
+            custom = load_yaml_config(custom_config_path)
+          rescue Psych::SyntaxError => e
+            puts "❌ Error parsing #{CUSTOM_DEPS_CONFIG}: #{e.message}"
+            puts "   Please fix the YAML syntax or delete the file to use defaults"
+            raise
+          end
+          rspack_deps = {
+            dev: custom.dig("rspack", "devDependencies") || DEFAULT_RSPACK_DEPS[:dev],
+            prod: custom.dig("rspack", "dependencies") || DEFAULT_RSPACK_DEPS[:prod]
+          }
+          webpack_deps = {
+            dev: custom.dig("webpack", "devDependencies") || DEFAULT_WEBPACK_DEPS[:dev],
+            prod: custom.dig("webpack", "dependencies") || DEFAULT_WEBPACK_DEPS[:prod]
+          }
+          [rspack_deps, webpack_deps]
+        else
+          [DEFAULT_RSPACK_DEPS, DEFAULT_WEBPACK_DEPS]
+        end
+      end
+
+      def update_config(bundler)
+        content = File.read(config_path)
+
+        # Replace assets_bundler value (handles spaces, tabs, and various quote styles)
+        # Only matches uncommented lines
+        content.gsub!(/^([ \t]*assets_bundler:[ \t]*['"]?)(webpack|rspack)(['"]?)/, "\\1#{bundler}\\3")
+
+        # Update javascript_transpiler recommendation for rspack
+        # Only update if not already set to swc and only on uncommented lines
+        if bundler == "rspack" && content !~ /^[ \t]*javascript_transpiler:[ \t]*['"]?swc['"]?/
+          content.gsub!(/^([ \t]*javascript_transpiler:[ \t]*['"]?)\w+(['"]?)/, "\\1swc\\2")
+        end
+
+        File.write(config_path, content)
+      end
+
+      def manage_dependencies(bundler, install_deps, switching: true, no_uninstall: false)
+        rspack_deps, webpack_deps = load_dependencies
+        deps_to_install = bundler == "rspack" ? rspack_deps : webpack_deps
+        deps_to_remove = bundler == "rspack" ? webpack_deps : rspack_deps
+
+        if install_deps
+          puts ""
+          puts "📦 Managing dependencies..."
+          puts ""
+
+          # Show what will be removed (only when switching and not no_uninstall)
+          if switching && !no_uninstall && (!deps_to_remove[:dev].empty? || !deps_to_remove[:prod].empty?)
+            puts "   🗑️  Removing:"
+            deps_to_remove[:dev].each { |dep| puts "      - #{dep} (dev)" }
+            deps_to_remove[:prod].each { |dep| puts "      - #{dep} (prod)" }
+            puts ""
+          elsif switching && no_uninstall
+            puts "   ⏭️  Skipping uninstall (--no-uninstall)"
+            puts ""
+          end
+
+          # Show what will be installed
+          if !deps_to_install[:dev].empty? || !deps_to_install[:prod].empty?
+            puts "   📦 Installing:"
+            deps_to_install[:dev].each { |dep| puts "      - #{dep} (dev)" }
+            deps_to_install[:prod].each { |dep| puts "      - #{dep} (prod)" }
+            puts ""
+          end
+
+          # Remove old bundler dependencies (only when switching and not no_uninstall)
+          if switching && !no_uninstall
+            remove_dependencies(deps_to_remove)
+          end
+
+          # Install new bundler dependencies
+          install_dependencies(deps_to_install)
+
+          puts "   ✅ Dependencies updated"
+        else
+          print_manual_dependency_instructions(bundler, deps_to_install, deps_to_remove)
+        end
+      end
+
+      def remove_dependencies(deps)
+        package_json = get_package_json
+
+        unless deps[:dev].empty?
+          unless package_json.manager.remove(deps[:dev])
+            puts "   ⚠️  Warning: Failed to uninstall some dev dependencies"
+          end
+        end
+
+        unless deps[:prod].empty?
+          unless package_json.manager.remove(deps[:prod])
+            puts "   ⚠️  Warning: Failed to uninstall some prod dependencies"
+          end
+        end
+      end
+
+      def install_dependencies(deps)
+        package_json = get_package_json
+
+        unless deps[:dev].empty?
+          unless package_json.manager.add(deps[:dev], type: :dev)
+            puts "❌ Failed to install dev dependencies"
+            raise "Failed to install dev dependencies"
+          end
+        end
+
+        unless deps[:prod].empty?
+          unless package_json.manager.add(deps[:prod], type: :production)
+            puts "❌ Failed to install prod dependencies"
+            raise "Failed to install prod dependencies"
+          end
+        end
+
+        # Run a full install to ensure optional dependencies (like native bindings) are properly resolved
+        # This is especially important for packages like @rspack/core that use platform-specific native modules
+        unless package_json.manager.install
+          puts "❌ Failed to run full install to resolve optional dependencies"
+          raise "Failed to run full install"
+        end
+      end
+
+      def get_package_json
+        require "package_json"
+        PackageJson.read(root_path)
+      end
+
+      def print_manual_dependency_instructions(bundler, deps_to_install, deps_to_remove)
+        puts ""
+        puts "⚠️  Dependencies not automatically installed (use --install-deps to auto-install)"
+        puts ""
+
+        package_manager = detect_package_manager
+        target_name = bundler == "rspack" ? "rspack" : "webpack"
+        old_name = bundler == "rspack" ? "webpack" : "rspack"
+
+        puts "📦 To install #{target_name} dependencies, run:"
+        print_install_commands(package_manager, deps_to_install)
+        puts ""
+        puts "🗑️  To remove #{old_name} dependencies, run:"
+        print_uninstall_commands(package_manager, deps_to_remove)
+      end
+
+      def detect_package_manager
+        get_package_json.manager.binary
+      rescue StandardError
+        "npm" # Fallback to npm if detection fails
+      end
+
+      def print_install_commands(package_manager, deps)
+        case package_manager
+        when "yarn"
+          puts "   yarn add --dev #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   yarn add #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        when "pnpm"
+          puts "   pnpm add -D #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   pnpm add #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        when "bun"
+          puts "   bun add --dev #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   bun add #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        else # npm
+          puts "   npm install --save-dev #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   npm install --save #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        end
+      end
+
+      def print_uninstall_commands(package_manager, deps)
+        case package_manager
+        when "yarn"
+          puts "   yarn remove #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   yarn remove #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        when "pnpm"
+          puts "   pnpm remove #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   pnpm remove #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        when "bun"
+          puts "   bun remove #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   bun remove #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        else # npm
+          puts "   npm uninstall #{deps[:dev].join(' ')}" unless deps[:dev].empty?
+          puts "   npm uninstall #{deps[:prod].join(' ')}" unless deps[:prod].empty?
+        end
+      end
+
+      # Load YAML config file with Ruby version compatibility
+      # Ruby 3.1+ supports aliases: keyword, older versions need YAML.safe_load
+      def load_yaml_config(path)
+        if YAML.respond_to?(:unsafe_load_file)
+          # Ruby 3.1+: Use unsafe_load_file to support aliases/anchors
+          YAML.unsafe_load_file(path)
+        else
+          # Ruby 2.7-3.0: Use safe_load with aliases enabled
+          YAML.safe_load(File.read(path), permitted_classes: [], permitted_symbols: [], aliases: true)
+        end
+      rescue ArgumentError
+        # Ruby 2.7 doesn't support aliases keyword - fall back to YAML.load
+        YAML.load(File.read(path)) # rubocop:disable Security/YAMLLoad
+      end
+  end
+end