@grest-ts/cli 0.0.27

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Grest Games OÜ
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,35 @@
+<!-- GREST-TS-BANNER-START -->
+> Part of the [grest-ts](https://github.com/grest-ts/grest-ts) framework.
+> [Documentation](https://github.com/grest-ts/grest-ts#readme) | [All packages](https://github.com/grest-ts/grest-ts#package-reference)
+<!-- GREST-TS-BANNER-END -->
+
+# @grest-ts/cli
+
+CLI for managing grest-ts in a project.
+
+## Why
+
+grest-ts is single-version: every `@grest-ts/*` package in a project must be at the same version. Inter-package peer dependencies are pinned exactly, so bumping one package forces bumping all of them — and once a `package-lock.json` is in play, npm's resolver can't reconcile the cross-package pins through a partial update.
+
+This CLI does the bump atomically.
+
+## Usage
+
+Run from your project root (single-package or npm workspaces monorepo):
+
+```bash
+npx @grest-ts/cli upgrade            # bumps to "latest" dist-tag
+npx @grest-ts/cli upgrade 0.0.27     # bumps to a specific version
+npx @grest-ts/cli upgrade next       # bumps to the "next" dist-tag
+npx @grest-ts/cli upgrade --dry-run  # preview without writing
+```
+
+## What it does
+
+1. Discovers every `package.json` (root + workspaces).
+2. Collects every distinct `@grest-ts/*` dep referenced in `dependencies` and `devDependencies`.
+3. Resolves the target version (concrete version or dist-tag).
+4. Pre-flight: verifies every collected package is published at the target version. Fails fast if any are missing.
+5. Rewrites every `@grest-ts/*` entry to `^<target-version>` (canonical form — overwrites any pre-existing range).
+6. Deletes `package-lock.json`.
+7. Runs `npm install`.

package/index.mjs

@@ -0,0 +1,262 @@
+#!/usr/bin/env node
+
+import { readFileSync, writeFileSync, existsSync, unlinkSync, readdirSync, rmSync } from "fs"
+import { join, resolve, dirname } from "path"
+import { spawnSync } from "child_process"
+
+const GREST_PREFIX = "@grest-ts/"
+
+const COMMANDS = {
+  upgrade: runUpgrade,
+  help: runHelp,
+}
+
+async function main() {
+  const [, , cmd, ...args] = process.argv
+
+  if (!cmd || cmd === "--help" || cmd === "-h") {
+    runHelp()
+    process.exit(0)
+  }
+
+  const handler = COMMANDS[cmd]
+  if (!handler) {
+    console.error(`Unknown command: ${cmd}\n`)
+    runHelp()
+    process.exit(1)
+  }
+
+  await handler(args)
+}
+
+function runHelp() {
+  console.log(`grest-ts CLI
+
+Usage:
+  grest-ts <command> [options]
+
+Commands:
+  upgrade [version]   Atomically update all @grest-ts/* deps to a single version.
+                      Version can be a semver (e.g. 0.0.27) or a dist-tag
+                      (latest, next). Defaults to "latest".
+                      Flags:
+                        --dry-run   Show what would change without writing.
+  help                Show this message.
+`)
+}
+
+async function runUpgrade(args) {
+  const dryRun = args.includes("--dry-run") || args.includes("--dry")
+  const positional = args.filter(a => !a.startsWith("--"))
+  const versionArg = positional[0] || "latest"
+
+  const cwd = process.cwd()
+  const rootPkgPath = join(cwd, "package.json")
+  if (!existsSync(rootPkgPath)) {
+    throw new Error(`No package.json found in ${cwd}`)
+  }
+  const rootPkg = readJson(rootPkgPath)
+
+  // 1. Discover all package.json files in the project
+  const allPkgPaths = [rootPkgPath, ...findWorkspacePackages(cwd, rootPkg)]
+  console.log(`Scanning ${allPkgPaths.length} package.json file(s)...`)
+
+  // 2. Collect every @grest-ts/* dep referenced anywhere
+  const grestDeps = new Set()
+  for (const p of allPkgPaths) {
+    const pkg = readJson(p)
+    for (const block of ["dependencies", "devDependencies"]) {
+      if (!pkg[block]) continue
+      for (const key of Object.keys(pkg[block])) {
+        if (key.startsWith(GREST_PREFIX)) grestDeps.add(key)
+      }
+    }
+  }
+
+  if (grestDeps.size === 0) {
+    console.log("No @grest-ts/* dependencies found. Nothing to do.")
+    return
+  }
+  console.log(`Found ${grestDeps.size} unique @grest-ts/* dependency name(s).`)
+
+  // 3. Resolve target version (handle dist-tags)
+  const targetVersion = await resolveTargetVersion(versionArg)
+  const canonicalRange = `^${targetVersion}`
+  console.log(`Target version: ${targetVersion} (writing as "${canonicalRange}")`)
+
+  // 4. Pre-flight: every grest-ts package must be published at target version.
+  //    grest-ts is single-version across all packages — partial publishes would
+  //    leave the project wedged with peer-dep mismatches.
+  console.log("Verifying all packages are published at target version...")
+  const missing = []
+  await Promise.all([...grestDeps].map(async name => {
+    if (!(await packageVersionExists(name, targetVersion))) {
+      missing.push(name)
+    }
+  }))
+  if (missing.length > 0) {
+    throw new Error(
+      `Not published at ${targetVersion}:\n  ` + missing.join("\n  ") +
+      `\n\ngrest-ts requires all @grest-ts/* packages at the same version. Wait for the publish to complete and retry.`
+    )
+  }
+
+  // 5. Rewrite every package.json — normalize every @grest-ts/* range to canonical form.
+  let totalChanged = 0
+  let filesChanged = 0
+  for (const p of allPkgPaths) {
+    const raw = readFileSync(p, "utf-8")
+    const pkg = JSON.parse(raw)
+    let fileChanged = false
+    for (const block of ["dependencies", "devDependencies"]) {
+      if (!pkg[block]) continue
+      for (const key of Object.keys(pkg[block])) {
+        if (!key.startsWith(GREST_PREFIX)) continue
+        if (pkg[block][key] !== canonicalRange) {
+          pkg[block][key] = canonicalRange
+          fileChanged = true
+          totalChanged++
+        }
+      }
+    }
+    if (fileChanged) {
+      filesChanged++
+      const trailingNewline = raw.endsWith("\n") ? "\n" : ""
+      const out = JSON.stringify(pkg, null, 2) + trailingNewline
+      if (dryRun) {
+        console.log(`  [dry] would update ${relativeTo(cwd, p)}`)
+      } else {
+        writeFileSync(p, out)
+        console.log(`  updated ${relativeTo(cwd, p)}`)
+      }
+    }
+  }
+  console.log(`${dryRun ? "[dry] " : ""}Updated ${totalChanged} dep entries across ${filesChanged} file(s).`)
+
+  if (dryRun) {
+    console.log("\nDry run complete. Re-run without --dry-run to apply.")
+    return
+  }
+
+  // 6. Clear lockfile + installed @grest-ts/* state.
+  //    Three things hold npm to old grest-ts versions:
+  //    - package-lock.json (the visible lockfile)
+  //    - node_modules/.package-lock.json (npm's hidden install-state lockfile)
+  //    - node_modules/@grest-ts/* (whose package.json files declare exact-pinned
+  //      peer deps that conflict with the new versions)
+  //    All three must go for npm to re-resolve grest-ts cleanly.
+  const lockPath = join(cwd, "package-lock.json")
+  if (existsSync(lockPath)) {
+    console.log("Deleting package-lock.json...")
+    unlinkSync(lockPath)
+  }
+  const hiddenLockPath = join(cwd, "node_modules", ".package-lock.json")
+  if (existsSync(hiddenLockPath)) {
+    console.log("Deleting node_modules/.package-lock.json...")
+    unlinkSync(hiddenLockPath)
+  }
+  const grestNodeModulesPath = join(cwd, "node_modules", "@grest-ts")
+  if (existsSync(grestNodeModulesPath)) {
+    console.log("Removing node_modules/@grest-ts/ ...")
+    rmSync(grestNodeModulesPath, { recursive: true, force: true })
+  }
+
+  // 7. Reinstall. Pass as a single shell command string — Node refuses to spawn
+  //    .cmd files directly on Windows (CVE-2024-27980), and passing arg arrays
+  //    with shell:true triggers DEP0190.
+  console.log("Running npm install...")
+  const result = spawnSync("npm install", { stdio: "inherit", shell: true, cwd })
+  if (result.status !== 0) {
+    throw new Error(`npm install exited with code ${result.status}`)
+  }
+
+  console.log(`\n✓ Upgraded all @grest-ts/* to ${canonicalRange}`)
+}
+
+// ---- helpers ----
+
+function readJson(path) {
+  return JSON.parse(readFileSync(path, "utf-8"))
+}
+
+function relativeTo(base, path) {
+  if (path.startsWith(base)) {
+    const rel = path.slice(base.length).replace(/^[\\/]+/, "")
+    return rel || "."
+  }
+  return path
+}
+
+function findWorkspacePackages(rootDir, rootPkg) {
+  const ws = rootPkg.workspaces
+  if (!ws) return []
+  const patterns = Array.isArray(ws) ? ws : (ws.packages || [])
+
+  const pkgPaths = []
+  for (const pattern of patterns) {
+    if (pattern.includes("**")) {
+      throw new Error(`Recursive workspace globs are not supported: "${pattern}"`)
+    }
+    if (pattern.includes("*")) {
+      // Only support the common "dir/*" trailing-star form.
+      const idx = pattern.indexOf("*")
+      const remainder = pattern.slice(idx)
+      if (remainder !== "*") {
+        throw new Error(`Workspace glob form not supported: "${pattern}" (only "dir/*" is supported)`)
+      }
+      const baseRel = pattern.slice(0, idx).replace(/[\\/]$/, "")
+      const baseAbs = resolve(rootDir, baseRel)
+      if (!existsSync(baseAbs)) continue
+      for (const entry of readdirSync(baseAbs, { withFileTypes: true })) {
+        if (!entry.isDirectory()) continue
+        const candidate = join(baseAbs, entry.name, "package.json")
+        if (existsSync(candidate)) pkgPaths.push(candidate)
+      }
+    } else {
+      const candidate = resolve(rootDir, pattern, "package.json")
+      if (existsSync(candidate)) pkgPaths.push(candidate)
+    }
+  }
+  return pkgPaths
+}
+
+async function resolveTargetVersion(versionArg) {
+  // If versionArg looks like a concrete version, return it as-is.
+  if (/^\d+\.\d+\.\d+(?:[-+].+)?$/.test(versionArg)) {
+    return versionArg
+  }
+  // Otherwise treat as a dist-tag and look it up against @grest-ts/http.
+  const probe = `${GREST_PREFIX}http`
+  const data = await fetchJson(`https://registry.npmjs.org/${probe}`)
+  const tags = data["dist-tags"] || {}
+  const v = tags[versionArg]
+  if (!v) {
+    const known = Object.keys(tags).join(", ") || "(none)"
+    throw new Error(`No dist-tag "${versionArg}" on ${probe}. Known tags: ${known}`)
+  }
+  return v
+}
+
+async function packageVersionExists(pkgName, version) {
+  const url = `https://registry.npmjs.org/${pkgName}/${version}`
+  try {
+    const res = await fetch(url)
+    return res.ok
+  } catch {
+    return false
+  }
+}
+
+async function fetchJson(url) {
+  const res = await fetch(url)
+  if (!res.ok) {
+    throw new Error(`GET ${url} failed: ${res.status} ${res.statusText}`)
+  }
+  return res.json()
+}
+
+main().catch(err => {
+  console.error(`\nError: ${err.message}`)
+  if (process.env.DEBUG) console.error(err.stack)
+  process.exit(1)
+})

package/package.json

@@ -0,0 +1,39 @@
+{
+  "//": "THIS FILE IS GENERATED - DO NOT EDIT",
+  "name": "@grest-ts/cli",
+  "version": "0.0.27",
+  "type": "module",
+  "license": "MIT",
+  "description": "CLI for managing grest-ts in a project (atomic version upgrades, etc.)",
+  "files": [
+    "index.mjs"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/grest-ts/grest-ts.git",
+    "directory": "packages-tooling/cli"
+  },
+  "homepage": "https://grest-ts.com/packages/cli",
+  "bugs": {
+    "url": "https://github.com/grest-ts/grest-ts/issues"
+  },
+  "keywords": [
+    "typescript",
+    "framework",
+    "contract",
+    "api",
+    "microservices",
+    "testing",
+    "grest-ts",
+    "cli",
+    "upgrade",
+    "tooling"
+  ],
+  "engines": {
+    "node": ">=25"
+  },
+  "bin": "./index.mjs"
+}