@openrewrite/recipes-nodejs 0.51.0-20260922-170911 → 0.51.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openrewrite/recipes-nodejs",
-  "version": "0.51.0-20260922-170911",
+  "version": "0.51.1",
   "license": "Moderne Proprietary",
   "description": "OpenRewrite recipes for Node.js library migrations.",
   "homepage": "https://github.com/moderneinc/rewrite-node",
@@ -25,7 +25,7 @@
     "ci:test": "jest"
   },
   "dependencies": {
-    "@openrewrite/rewrite": "^8.93.0-20260922-140546",
+    "@openrewrite/rewrite": "^8.93.0-20261008-033144",
     "mutative": "^1.1.0",
     "semver": "^7.7.3"
   },

package/src/index.ts

@@ -53,6 +53,7 @@ import {FindHpagentManualMigrations} from "./migrate/hpagent/find-hpagent-manual
 import {SwapHpagentDependency} from "./migrate/hpagent/swap-hpagent-dependency";
 import {MigrateSourceMapSupportToNative} from "./migrate/source-map-support/migrate-source-map-support-to-native";
 import {FindSourceMapSupportManualMigrations} from "./migrate/source-map-support/find-source-map-support-manual-migrations";
+import {EnableSourceMapsAtLaunch} from "./migrate/source-map-support/enable-source-maps-at-launch";
 import {ReplaceSourceMapSupportInstall} from "./migrate/source-map-support/replace-source-map-support-install";
 import {ReplaceSourceMapSupportRegisterInPackageJson} from "./migrate/source-map-support/replace-source-map-support-register-in-package-json";
 import {ReplaceSourceMapSupportRegisterInMochaConfig} from "./migrate/source-map-support/replace-source-map-support-register-in-mocha-config";
@@ -128,6 +129,7 @@ export async function activate(marketplace: RecipeMarketplace): Promise<void> {
     await marketplace.install(SwapHpagentDependency, Hpagent);
     await marketplace.install(MigrateSourceMapSupportToNative, SourceMapSupport);
     await marketplace.install(ReplaceSourceMapSupportInstall, SourceMapSupport);
+    await marketplace.install(EnableSourceMapsAtLaunch, SourceMapSupport);
     await marketplace.install(ReplaceSourceMapSupportRegisterInPackageJson, SourceMapSupport);
     await marketplace.install(ReplaceSourceMapSupportRegisterInMochaConfig, SourceMapSupport);
     await marketplace.install(FindSourceMapSupportManualMigrations, SourceMapSupport);

package/src/migrate/angular-animations/remove-angular-animations-providers.ts

@@ -11,7 +11,7 @@ import {JavaScriptVisitor, JS, maybeUnbind, walk} from "@openrewrite/rewrite/jav
 import {PlainText} from "@openrewrite/rewrite/text";
 import * as semver from "semver";
 import {bindingsOf, importModule, ModuleBindings} from "../module-bindings";
-import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../remove-unused-dependency";
+import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../package-json-support";
 
 const PROVIDER_MODULES = new Set(['@angular/platform-browser/animations', '@angular/platform-browser/animations/async']);
 const ANIMATIONS = '@angular/animations';

package/src/migrate/express-request-id/migrate-express-request-id-to-native.ts

@@ -12,13 +12,14 @@ export class MigrateExpressRequestIdToNative extends Recipe {
     readonly name = "org.openrewrite.node.migrate.express-request-id.migrate-express-request-id-to-native";
     readonly displayName = "Migrate `express-request-id` to an inline middleware";
     readonly description = "Replaces the `express-request-id` middleware with an equivalent inline middleware built on " +
-        "`randomUUID()` from `node:crypto`, then removes the dependency from each `package.json` that no longer needs it.";
+        "`randomUUID()` from `node:crypto`, then removes the dependency from each `package.json` that declares it, " +
+        "updating the lock file to match.";
     readonly tags = ["express-request-id"];
 
     async recipeList(): Promise<Recipe[]> {
         return [
             new ReplaceExpressRequestId(),
-            new RemoveUnusedExpressRequestIdDependency({accountForMigration: true}),
+            new RemoveUnusedExpressRequestIdDependency(),
         ];
     }
 }

package/src/migrate/express-request-id/remove-unused-express-request-id-dependency.ts

@@ -4,22 +4,14 @@
  * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
  */
 
-import {Recipe} from "@openrewrite/rewrite";
-import {RemoveUnusedDependency} from "../remove-unused-dependency";
-import {ReplaceExpressRequestId} from "./replace-express-request-id";
+import {RemoveDependencies} from "../remove-dependencies";
 
-export class RemoveUnusedExpressRequestIdDependency extends RemoveUnusedDependency {
+export class RemoveUnusedExpressRequestIdDependency extends RemoveDependencies {
     readonly name = "org.openrewrite.node.migrate.express-request-id.remove-unused-express-request-id-dependency";
-    readonly displayName = "Remove unused `express-request-id` dependency";
-    readonly description = "Removes `express-request-id` and `@types/express-request-id` from each `package.json` whose " +
-        "package no longer references it from any JavaScript or TypeScript source or tool configuration. `uuid` is kept, " +
-        "since the application may use it directly. Lock files are not regenerated; run the package manager's install afterwards.";
+    readonly displayName = "Remove the `express-request-id` dependency";
+    readonly description = "Removes `express-request-id` and `@types/express-request-id` from each `package.json` " +
+        "that declares them, and updates the lock file to match. `uuid` is kept, since the application may use it directly.";
     readonly tags = ["express-request-id"];
 
-    protected readonly module = 'express-request-id';
     protected readonly packages = ['express-request-id', '@types/express-request-id'];
-
-    protected migrationRecipes(): Recipe[] {
-        return [new ReplaceExpressRequestId()];
-    }
 }

package/src/migrate/find-process-assert.ts

@@ -14,7 +14,7 @@ export class FindProcessAssert extends Recipe {
     readonly tags: string[] = ["DEP0100"];
 
     async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
-        return check(usesType("global.NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
+        return check(usesType("NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
             protected async visitMethodInvocation(m: J.MethodInvocation, p: ExecutionContext): Promise<J | undefined> {
                 const method = await super.visitMethodInvocation(m, p) as J.MethodInvocation;
                 if (method.name.simpleName !== "assert" || !method.select) {
@@ -25,7 +25,7 @@ export class FindProcessAssert extends Recipe {
                 if (select.kind === J.Kind.Identifier) {
                     const id = select as J.Identifier;
                     if (id.simpleName === "process" && id.type?.kind === Type.Kind.Class &&
-                        (id.type as Type.Class).fullyQualifiedName === "global.NodeJS.Process") {
+                        (id.type as Type.Class).fullyQualifiedName === "NodeJS.Process") {
                         return foundSearchResult(method,
                             "process.assert() is deprecated (DEP0100). Use the assert module instead.");
                     }

package/src/migrate/fs-extra/migrate-fs-extra-to-node-fs.ts

@@ -20,7 +20,9 @@ export class MigrateFsExtraToNodeFs extends Recipe {
         "existing destination, or work across devices. Calls without a faithful native equivalent " +
         "(`ensureSymlink`, `ensureLink`, ...) are left in place and listed in the `FsExtraManualMigrationSteps` " +
         "data table. " +
-        "`fs-extra` and `@types/fs-extra` are removed from each `package.json` whose sources no longer use it. " +
+        "`fs-extra` and `@types/fs-extra` are removed from each `package.json` that declares them, with the lock file " +
+        "updated to match. They are removed even where a call listed in the data table still uses fs-extra, so " +
+        "migrate those before building. " +
         "Tests that mock or spy on fs-extra itself (`vi.mock('fs-extra')`, `vi.spyOn(fs, 'outputFile')`, ...) keep " +
         "watching a module the migrated code no longer calls, so they fail until they mock `node:fs` / " +
         "`node:fs/promises` instead. Every such site is listed in the data table; migrate them together with the " +
@@ -31,7 +33,7 @@ export class MigrateFsExtraToNodeFs extends Recipe {
         return [
             ...fsExtraRewriteRecipes(),
             new FindFsExtraManualMigrations(),
-            new RemoveUnusedFsExtraDependency({accountForMigration: true}),
+            new RemoveUnusedFsExtraDependency(),
         ];
     }
 }

package/src/migrate/fs-extra/remove-unused-fs-extra-dependency.ts

@@ -4,24 +4,14 @@
  * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
  */
 
-import {Recipe} from "@openrewrite/rewrite";
-import {fsExtraRewriteRecipes} from "./fs-extra-rewrites";
-import {RemoveUnusedDependency} from "../remove-unused-dependency";
+import {RemoveDependencies} from "../remove-dependencies";
 
-export class RemoveUnusedFsExtraDependency extends RemoveUnusedDependency {
+export class RemoveUnusedFsExtraDependency extends RemoveDependencies {
     readonly name = "org.openrewrite.node.migrate.fs-extra.remove-unused-fs-extra-dependency";
-    readonly displayName = "Remove unused `fs-extra` dependency";
-    readonly description = "Removes `fs-extra` and `@types/fs-extra` from each `package.json` whose package no longer " +
-        "references fs-extra from any JavaScript or TypeScript source, including `vi.mock`/`jest.mock` calls, " +
-        "`__mocks__/fs-extra` files, and `/// <reference types=\"fs-extra\" />`. A reference anywhere beneath a " +
-        "`package.json`'s directory keeps its dependencies, since a monorepo root hoists them for its workspaces. " +
-        "A package is left alone when any source beneath it failed to parse, or none was parsed at all. " +
-        "Lock files are not regenerated; run the package manager's install afterwards.";
+    readonly displayName = "Remove the `fs-extra` dependency";
+    readonly description = "Removes `fs-extra` and `@types/fs-extra` from each `package.json` that declares them, " +
+        "and updates the lock file to match.";
+    readonly tags = ["fs-extra"];
 
-    protected readonly module = 'fs-extra';
     protected readonly packages = ['fs-extra', '@types/fs-extra'];
-
-    protected migrationRecipes(): Recipe[] {
-        return fsExtraRewriteRecipes();
-    }
 }

package/src/migrate/fs-extra/replace-fs-extra-native-methods.ts

@@ -59,7 +59,7 @@ function uniformTarget(cu: JS.CompilationUnit, local: string, member: string): N
     const body = cu.statements.filter(s => s.element?.kind !== JS.Kind.Import && !declarationsOf(s.element).some(d =>
         d.variables.some(v => v.element.initializer?.element?.kind === J.Kind.MethodInvocation &&
             (v.element.initializer.element as J.MethodInvocation).name.simpleName === 'require')));
-    walk(body, node => {
+    walk(body, (node: any) => {
         if (node.kind === J.Kind.Identifier && node.simpleName === local) {
             occurrences++;
         } else if (node.kind === J.Kind.MethodInvocation && !node.select && node.name.simpleName === local) {

package/src/migrate/hpagent/migrate-hpagent-to-https-proxy-agent.ts

@@ -17,14 +17,14 @@ export class MigrateHpagentToHttpsProxyAgent extends Recipe {
         "tunnel to TLS only for an `https:` target — so `HttpProxyAgent` and `HttpsProxyAgent` both become " +
         "`https-proxy-agent`'s `HttpsProxyAgent`. The proxy URL moves from the `proxy` option to the constructor's " +
         "first argument, `proxyRequestOptions` members move up into the options object, and the dependency is swapped " +
-        "in each `package.json` that declares it.\n\n" +
+        "in each `package.json` that declares it, with the lock file updated to match.\n\n" +
         "Two things do not carry over, and both are reported in the `HpagentManualMigrationSteps` data table rather " +
         "than rewritten. A TLS option set at the top level of hpagent's `HttpsProxyAgent` (`ca`, `rejectUnauthorized`, " +
         "`cert`, ...) configured the handshake with the **destination**, because that class extends `https.Agent`; " +
         "`https-proxy-agent` spends its constructor options on the connection to the **proxy** and takes the " +
         "destination's TLS options from each request, so such an option has to move to the request or the client " +
         "library. Agent options that aren't written as an object literal can't be split into the new two-argument " +
-        "form either.";
+        "form either. The dependency is swapped regardless, so migrate every reported site before building.";
     readonly tags = ["hpagent", "https-proxy-agent"];
 
     @Option({
@@ -53,11 +53,7 @@ export class MigrateHpagentToHttpsProxyAgent extends Recipe {
         return [
             new ReplaceHpagent({migrateSpreadOptions: this.migrateSpreadOptions}),
             new FindHpagentManualMigrations(),
-            new SwapHpagentDependency({
-                version: this.version,
-                migrateSpreadOptions: this.migrateSpreadOptions,
-                accountForMigration: true
-            }),
+            new SwapHpagentDependency({version: this.version}),
         ];
     }
 }

package/src/migrate/hpagent/replace-hpagent.ts

@@ -4,7 +4,7 @@
  * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
  */
 
-import {ExecutionContext, Option, Recipe, TreeVisitor} from "@openrewrite/rewrite";
+import {emptyMarkers, ExecutionContext, Option, randomId, Recipe, TreeVisitor} from "@openrewrite/rewrite";
 import {isIdentifier, J, rightPadded, space} from "@openrewrite/rewrite/java";
 import {compilationUnitOf, declarationsOf, JavaScriptVisitor, JS, maybeRebind, maybeUnbind, namesDeclaredIn} from "@openrewrite/rewrite/javascript";
 import {requiredModule} from "../module-bindings";
@@ -107,6 +107,76 @@ function typeKey(type: J): string | undefined {
     return isIdentifier(clazz) ? `${clazz.simpleName}<>` : undefined;
 }
 
+/**
+ * Whether `proxy` is a URL however the program got here. hpagent keeps a missing proxy until a request
+ * needs it, but `https-proxy-agent` reads it in the constructor, so anything else may now throw there.
+ */
+function alwaysDefined(proxy: J): boolean {
+    switch (proxy.kind) {
+        case J.Kind.Literal:
+            return typeof (proxy as J.Literal).value === 'string';
+        case JS.Kind.TemplateExpression:
+        case J.Kind.NewClass:
+            return true;
+        case J.Kind.Parentheses:
+            return alwaysDefined((proxy as J.Parentheses<J>).tree.element);
+        case J.Kind.Binary:
+            return (proxy as J.Binary).operator.element === J.Binary.Type.Or && alwaysDefined((proxy as J.Binary).right);
+        case JS.Kind.Binary:
+            return (proxy as JS.Binary).operator.element === JS.Binary.Type.QuestionQuestion && alwaysDefined((proxy as JS.Binary).right);
+        default:
+            return false;
+    }
+}
+
+/** Whether evaluating `e` twice is the same as evaluating it once: names, member reads and fallbacks among them. */
+function readsOnly(e: J): boolean {
+    switch (e.kind) {
+        case J.Kind.Identifier:
+        case J.Kind.Literal:
+            return true;
+        case J.Kind.FieldAccess:
+            return readsOnly((e as J.FieldAccess).target);
+        case J.Kind.ArrayAccess: {
+            const access = e as J.ArrayAccess;
+            return readsOnly(access.indexed) && access.dimension.index.element.kind === J.Kind.Literal;
+        }
+        case J.Kind.Parentheses:
+            return readsOnly((e as J.Parentheses<J>).tree.element);
+        case J.Kind.Binary:
+            return (e as J.Binary).operator.element === J.Binary.Type.Or &&
+                readsOnly((e as J.Binary).left) && readsOnly((e as J.Binary).right);
+        case JS.Kind.Binary:
+            return (e as JS.Binary).operator.element === JS.Binary.Type.QuestionQuestion &&
+                readsOnly((e as JS.Binary).left) && readsOnly((e as JS.Binary).right);
+        default:
+            return false;
+    }
+}
+
+/** A JavaScript file, where nothing checked that the proxy is defined; TypeScript required hpagent's `proxy` to be. */
+function isJavaScript(sourcePath: string): boolean {
+    return /\.[cm]?jsx?$/.test(sourcePath);
+}
+
+/** `proxy ? construction : undefined`, built directly so the construction keeps its layout. */
+function whenDefined(proxy: J, construction: J.NewClass): J.Ternary {
+    const padded = <T extends J>(element: T): J.LeftPadded<T> =>
+        ({kind: J.Kind.LeftPadded, before: space(' '), element, markers: emptyMarkers});
+    const undefinedValue: J.Identifier = {
+        kind: J.Kind.Identifier, id: randomId(), prefix: space(' '), markers: emptyMarkers, annotations: [], simpleName: 'undefined'
+    };
+    return {
+        kind: J.Kind.Ternary,
+        id: randomId(),
+        prefix: construction.prefix,
+        markers: emptyMarkers,
+        condition: {...proxy, id: randomId(), prefix: space('')} as J,
+        truePart: padded({...construction, prefix: space(' ')} as J.NewClass),
+        falsePart: padded(undefinedValue),
+    } as J.Ternary;
+}
+
 /** The members of an object literal, still padded, with the placeholder of an empty literal dropped. */
 function paddedMembers(literal: J.NewClass): J.RightPadded<J>[] {
     return (literal.body?.statements ?? []).filter(padded => padded.element.kind !== J.Kind.Empty) as J.RightPadded<J>[];
@@ -120,7 +190,10 @@ export class ReplaceHpagent extends Recipe {
         "option: `new HttpsProxyAgent({proxy: url, keepAlive: true})` becomes `new HttpsProxyAgent(url, {keepAlive: true})`. " +
         "Both hpagent classes tunnel with `CONNECT`, and `https-proxy-agent` upgrades the tunnel to TLS only for an " +
         "`https:` target, so one class serves both. `proxyRequestOptions` members move up into the options object, " +
-        "where `https-proxy-agent` applies them to the connection to the proxy. Calls whose options aren't an object " +
+        "where `https-proxy-agent` applies them to the connection to the proxy. hpagent accepted a missing proxy until " +
+        "a request needed it, but `https-proxy-agent` reads it in the constructor, so in JavaScript a proxy that may be " +
+        "missing, such as `process.env.HTTP_PROXY`, guards the construction: `proxy ? new HttpsProxyAgent(proxy) : undefined`. " +
+        "Calls whose options aren't an object " +
         "literal, or that set a TLS option for the destination handshake (`ca`, `rejectUnauthorized`, `cert`, ...), " +
         "are left alone: `https-proxy-agent` would apply those to the proxy hop instead. " +
         "`FindHpagentManualMigrations` reports every usage left behind.";
@@ -275,7 +348,13 @@ export class ReplaceHpagent extends Recipe {
                     (rewrite ? this.migrated : this.stranded).add(site.local);
                     return n;
                 }
-                return rewrite && !this.stranded.has(site.local) ? this.applyRewrite(n, site, rewrite) : n;
+                if (!rewrite || this.stranded.has(site.local)) return n;
+                const migrated = this.applyRewrite(n, site, rewrite);
+                // Constructing with a missing proxy used to succeed and now throws, as when a module builds its
+                // agent from an environment variable a test run doesn't set, so the construction is skipped then.
+                return isJavaScript(compilationUnitOf(this)!.sourcePath) && !alwaysDefined(rewrite.proxy) && readsOnly(rewrite.proxy)
+                    ? whenDefined(rewrite.proxy, migrated)
+                    : migrated;
             }
 
             /**

package/src/migrate/hpagent/swap-hpagent-dependency.ts

@@ -4,35 +4,23 @@
  * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
  */
 
-import {ExecutionContext, Option, Recipe, TreeVisitor} from "@openrewrite/rewrite";
-import {getMemberKeyName, isMember, isObject, Json, JsonVisitor} from "@openrewrite/rewrite/json";
-import {anyBeneath, dirOf, isPackageJson, RemoveUnusedDependency} from "../remove-unused-dependency";
-import {insertPaddedAfter, literal, member, memberIndex} from "../json-edits";
-import {ReplaceHpagent} from "./replace-hpagent";
+import {Option, Recipe} from "@openrewrite/rewrite";
+import {changeDependency} from "@openrewrite/rewrite/javascript";
 import {TARGET_MODULE} from "./hpagent-support";
 
-const SECTIONS = ['dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies'];
-
 /**
  * `https-proxy-agent` 7 is the last major to keep hpagent's Node floor: hpagent supports Node 14 and
  * up, as do `https-proxy-agent` 7 and 8, while 9 requires Node 20.
  */
 const DEFAULT_VERSION = "^7.0.6";
 
-export class SwapHpagentDependency extends RemoveUnusedDependency {
+export class SwapHpagentDependency extends Recipe {
     readonly name = "org.openrewrite.node.migrate.hpagent.swap-hpagent-dependency";
     readonly displayName = "Swap the `hpagent` dependency for `https-proxy-agent`";
-    readonly description = "Replaces `hpagent` with `https-proxy-agent` in each `package.json` that declares it, in the " +
-        "same section and position, so the declaration order is left as it was. Where a source beneath the " +
-        "`package.json` still references hpagent — a usage the migration left in place, a mock, or a bundler " +
-        "configuration naming it — `https-proxy-agent` is added alongside and hpagent kept, since both are then " +
-        "needed. A `package.json` whose sources the migration didn't reach is left alone entirely, rather than " +
-        "gaining a dependency nothing uses. Lock files are not regenerated; run the package manager's install afterwards.";
+    readonly description = "Replaces `hpagent` with `https-proxy-agent` in each `package.json` that declares it, in " +
+        "whichever dependency section declares it, and updates the lock file to match.";
     readonly tags = ["hpagent", "https-proxy-agent"];
 
-    protected readonly module = 'hpagent';
-    protected readonly packages = ['hpagent'];
-
     @Option({
         displayName: "`https-proxy-agent` version",
         description: "The version range to declare for `https-proxy-agent`. The default keeps hpagent's Node 14 " +
@@ -42,58 +30,15 @@ export class SwapHpagentDependency extends RemoveUnusedDependency {
     })
     version?: string;
 
-    /** Mirrors `ReplaceHpagent`'s option, so the scan judges usage by the migration that will actually run. */
-    private readonly migrateSpreadOptions?: boolean;
-
-    constructor(options?: { version?: string; accountForMigration?: boolean; migrateSpreadOptions?: boolean }) {
-        super({accountForMigration: options?.accountForMigration});
-        this.version = options?.version;
-        this.migrateSpreadOptions = options?.migrateSpreadOptions;
-    }
-
-    protected migrationRecipes(): Recipe[] {
-        return [new ReplaceHpagent({migrateSpreadOptions: this.migrateSpreadOptions})];
-    }
-
-    protected override replacementModules(): string[] {
-        return [TARGET_MODULE];
+    constructor(options?: { version?: string }) {
+        super(options);
     }
 
-    async editorWithData(acc: {referencingFiles: string[]; parsedFiles: string[]; replacementFiles: string[]}): Promise<TreeVisitor<any, ExecutionContext>> {
-        const version = this.version ?? DEFAULT_VERSION;
-        return new class extends JsonVisitor<ExecutionContext> {
-            protected async visitDocument(doc: Json.Document, _ctx: ExecutionContext): Promise<Json | undefined> {
-                if (!isPackageJson(doc.sourcePath) || !isObject(doc.value)) return doc;
-                const dir = dirOf(doc.sourcePath);
-                // Nothing beneath was parsed, so there is no telling whether the migration reached it.
-                if (!anyBeneath(dir, acc.parsedFiles)) return doc;
-                const stillUsed = anyBeneath(dir, acc.referencingFiles);
-                // Nothing beneath came to use the replacement, so declaring it would add an unused dependency.
-                if (!anyBeneath(dir, acc.replacementFiles)) return doc;
-
-                const root = doc.value as Json.Object;
-                let changed = false;
-                const members = root.members.map(padded => {
-                    if (!isMember(padded.element)) return padded;
-                    const section = padded.element as Json.Member;
-                    if (!SECTIONS.includes(getMemberKeyName(section) ?? '') || !isObject(section.value)) return padded;
-                    const obj = section.value as Json.Object;
-                    const hpagent = memberIndex(obj, 'hpagent');
-                    // Only a section declaring hpagent needs the replacement, and only where it isn't already there.
-                    if (hpagent < 0 || memberIndex(obj, TARGET_MODULE) >= 0) return padded;
-                    changed = true;
-                    const replacement = member(TARGET_MODULE, literal(version));
-                    const declaration = obj.members[hpagent];
-                    const updated = stillUsed
-                        ? insertPaddedAfter(obj.members, hpagent, replacement as Json)
-                        // Replacing it in place keeps the section's formatting and its declaration order.
-                        : obj.members.map((m, i) => i === hpagent
-                            ? {...m, element: {...replacement, prefix: declaration.element.prefix} as Json}
-                            : m);
-                    return {...padded, element: {...section, value: {...obj, members: updated}} as Json.Member};
-                });
-                return changed ? {...doc, value: {...root, members}} as Json.Document : doc;
-            }
-        };
+    async recipeList(): Promise<Recipe[]> {
+        return [await changeDependency({
+            oldPackageName: 'hpagent',
+            newPackageName: TARGET_MODULE,
+            newVersion: this.version ?? DEFAULT_VERSION
+        })];
     }
 }

package/src/migrate/package-json-support.ts

@@ -0,0 +1,34 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+
+import {emptyMarkers, randomId} from "@openrewrite/rewrite";
+import {getMemberKeyName, isMember, Json, rightPadded, space} from "@openrewrite/rewrite/json";
+
+export function dirOf(path: string): string {
+    const i = path.lastIndexOf('/');
+    return i < 0 ? '' : path.substring(0, i);
+}
+
+export function isPackageJson(path: string): boolean {
+    return (path === 'package.json' || path.endsWith('/package.json')) && !path.includes('node_modules/');
+}
+
+export function anyBeneath(dir: string, files: string[]): boolean {
+    return files.some(file => dir === '' || file.startsWith(dir + '/'));
+}
+
+/** Removes members named in `keys`, handing the removed last member's trailing space to the one before it. */
+export function removeMembers(obj: Json.Object, keys: Set<string>): Json.Object {
+    const kept = obj.members.filter(rp => !(isMember(rp.element) && keys.has(getMemberKeyName(rp.element as Json.Member) ?? '')));
+    if (kept.length === obj.members.length) return obj;
+    if (kept.length === 0) {
+        const empty: Json.Empty = {kind: Json.Kind.Empty, id: randomId(), prefix: space(''), markers: emptyMarkers};
+        return {...obj, members: [rightPadded(empty, space(''))]};
+    }
+    const closing = obj.members[obj.members.length - 1].after;
+    kept[kept.length - 1] = {...kept[kept.length - 1], after: closing};
+    return {...obj, members: kept};
+}

package/src/migrate/path/remove-path-dependency.ts

@@ -9,7 +9,7 @@ import {getMemberKeyName, isObject, Json, JsonVisitor} from "@openrewrite/rewrit
 import {JS, walk} from "@openrewrite/rewrite/javascript";
 import {J} from "@openrewrite/rewrite/java";
 import {PlainText} from "@openrewrite/rewrite/text";
-import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../remove-unused-dependency";
+import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../package-json-support";
 import {requiredModule, stringLiteral} from "../module-bindings";
 
 const SECTIONS = new Set(['dependencies', 'devDependencies', 'optionalDependencies', 'peerDependencies']);

package/src/migrate/process-exit-code.ts

@@ -19,8 +19,8 @@ export class AvoidImplicitCoercionOfExitCode extends Recipe {
     readonly tags: string[] = ["DEP0164"];
 
     async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
-        return check(usesType("global.NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
-            exitMatcher = new MethodMatcher("Process exit(..)");
+        return check(usesType("NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
+            exitMatcher = new MethodMatcher("NodeJS.Process exit(..)");
 
             private isProcessExitCodeAccess(fieldAccess: J.FieldAccess): boolean {
                 if (fieldAccess.name.element.simpleName !== "exitCode") {
@@ -33,7 +33,7 @@ export class AvoidImplicitCoercionOfExitCode extends Recipe {
 
                     if (idType?.kind === Type.Kind.Class) {
                         const classType = idType as Type.Class;
-                        return classType.fullyQualifiedName === "global.NodeJS.Process";
+                        return classType.fullyQualifiedName === "NodeJS.Process";
                     }
                 }
 

package/src/migrate/process-features-tls.ts

@@ -17,7 +17,7 @@ export class RemoveUsageOfProcessFeaturesTlsConstants extends Recipe {
     readonly tags: string[] = ["DEP0189"];
 
     async editor(): Promise<TreeVisitor<any, ExecutionContext>> {
-        return check(usesType("global.NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
+        return check(usesType("NodeJS.Process"), new class extends JavaScriptVisitor<ExecutionContext> {
             protected async visitExpression(expression: Expression, p: ExecutionContext): Promise<J | undefined> {
                 const ret = await super.visitExpression(expression, p) as Expression;
                 if (await pattern`process.features.tls_alpn`.match(ret, this.cursor)

package/src/migrate/prop-types/remove-prop-types.ts

@@ -11,7 +11,7 @@ import {declarationsOf, JavaScriptVisitor, JS, maybeUnbind, walk as walkTree} fr
 import {PlainText} from "@openrewrite/rewrite/text";
 import * as semver from "semver";
 import {bindingsOf, importModule, requiredModule, stringLiteral} from "../module-bindings";
-import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../remove-unused-dependency";
+import {anyBeneath, dirOf, isPackageJson, removeMembers} from "../package-json-support";
 
 const MODULE = 'prop-types';
 const JSX_RUNTIMES = new Set(['react', 'preact', 'preact/compat']);

package/src/migrate/remove-dependencies.ts

@@ -0,0 +1,21 @@
+/*
+ * Copyright 2026 the original author or authors.
+ *
+ * Moderne Proprietary. Only for use by Moderne customers under the terms of a commercial contract.
+ */
+
+import {Recipe} from "@openrewrite/rewrite";
+import {removeDependency} from "@openrewrite/rewrite/javascript";
+
+/**
+ * Removes a library's packages from every `package.json` that declares them, updating the lock file
+ * to match, through the native dependency recipe.
+ */
+export abstract class RemoveDependencies extends Recipe {
+    /** The packages removed together, e.g. the library and its `@types`. */
+    protected abstract readonly packages: string[];
+
+    async recipeList(): Promise<Recipe[]> {
+        return Promise.all(this.packages.map(packageName => removeDependency({packageName})));
+    }
+}