@saasicat/cli 1.0.0-rc.0 → 1.0.0-rc.1

package/bin/saasicat.js

@@ -27,7 +27,7 @@
 
 import { readFile, writeFile, readdir, mkdir } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { createRequire } from 'node:module';
 import { fileURLToPath } from 'node:url';
 import { spawn } from 'node:child_process';
@@ -50,6 +50,7 @@ import {
     buildImportMap,
     migrationCreatedBy,
     rewriteImports,
+    rewriteManifest,
     rewriteNames,
     reportConstraints,
     patchAppModule,
@@ -548,6 +549,7 @@ async function cmdCodemodV1Imports(args) {
     let rewritten = 0;
     let touched = 0;
     await walkSources(root, async (full, source) => {
+        if (basename(full) === CODEMOD_MANIFEST) return;
         const result = rewriteImports(source, map);
         for (const [subpath, n] of result.unmapped) {
             unmapped.set(subpath, (unmapped.get(subpath) ?? 0) + n);
@@ -592,8 +594,15 @@ async function cmdCodemodV1Rename(args) {
     const ambiguous = new Map();
     let rewritten = 0;
     let touched = 0;
+    let manifestsTouched = 0;
     await walkSources(root, async (full, source) => {
-        const result = rewriteNames(source, table);
+        // A manifest takes the package renames in its dependency fields; a
+        // source file takes everything. Under pnpm an import a manifest does
+        // not declare fails to resolve, so the two travel together.
+        const result =
+            basename(full) === CODEMOD_MANIFEST
+                ? rewriteManifest(source, table, { targetRange: `^${OWN_VERSION}` })
+                : rewriteNames(source, table);
         for (const name of result.ambiguous) {
             ambiguous.set(name, (ambiguous.get(name) ?? 0) + 1);
         }
@@ -601,11 +610,26 @@ async function cmdCodemodV1Rename(args) {
         if (!dryRun) await writeFile(full, result.text);
         rewritten += result.rewritten;
         touched += 1;
+        if (basename(full) === CODEMOD_MANIFEST) manifestsTouched += 1;
     });
 
     console.log(
         `${dryRun ? 'Would rewrite' : 'Rewrote'} ${rewritten} name(s) in ${touched} file(s).`,
     );
+    if (manifestsTouched > 0) {
+        // The lockfile is not rewritten: its shape is the package manager's,
+        // and a wrong guess at it is worse than an honest instruction. A CI
+        // that installs with a frozen lockfile refuses the migrated checkout
+        // until it is regenerated.
+        console.log('');
+        console.log(
+            `${manifestsTouched} package.json ${manifestsTouched === 1 ? 'file' : 'files'} changed — ` +
+                'regenerate the lockfile before committing:',
+        );
+        console.log(
+            '  pnpm install   (or npm install / yarn install, whichever owns your lockfile)',
+        );
+    }
     if (ambiguous.size === 0) return;
 
     console.log('');
@@ -617,8 +641,20 @@ async function cmdCodemodV1Rename(args) {
     console.log('  FEATURE_UI_REGISTRY_TOKEN meant one registry in `@saasicat/nest/billing`');
     console.log('  and another in `@saasicat/nest/catalog`. Import it from the entry you');
     console.log('  mean — BILLING_FEATURE_UI_REGISTRY_TOKEN or CATALOG_FEATURE_UI_REGISTRY_TOKEN.');
+    console.log('  A dependency listed "in <field> (<range>)" points at a workspace or a path;');
+    console.log('  rename it by hand to @saasicat/core at the location you keep it.');
 }
 
+/**
+ * The version this CLI was released as — and therefore the line a consumer
+ * running its codemod is migrating to. The manifest rewrite sets the renamed
+ * dependency to `^<this>`, because the old range (`^0.27.0`) names a line
+ * the renamed package was never published on.
+ */
+const OWN_VERSION = JSON.parse(
+    await readFile(join(dirname(require_.resolve('@saasicat/cli')), '..', 'package.json'), 'utf8'),
+).version;
+
 /** Where a shipped codemod table lives, resolved through the package itself. */
 function codemodTable(name) {
     return join(dirname(require_.resolve('@saasicat/cli')), '..', 'codemods', name);
@@ -630,6 +666,8 @@ function codemodTable(name) {
 const CODEMOD_SKIP = new Set(['node_modules', '.git', '.output', 'coverage']);
 const isBuildOutput = (name) => name === 'dist' || name.startsWith('dist-');
 const CODEMOD_EXTENSIONS = /\.(ts|tsx|mts|cts|js|jsx|mjs|cjs|vue|md)$/;
+/** Walked for the package renames alone; see `rewriteManifest`. */
+const CODEMOD_MANIFEST = 'package.json';
 
 /** Every source file under `root` a codemod may touch, with its text. */
 async function walkSources(root, visit) {
@@ -641,7 +679,7 @@ async function walkSources(root, visit) {
                 await walk(full);
                 continue;
             }
-            if (!CODEMOD_EXTENSIONS.test(entry.name)) continue;
+            if (!CODEMOD_EXTENSIONS.test(entry.name) && entry.name !== CODEMOD_MANIFEST) continue;
             await visit(full, await readFile(full, 'utf8'));
         }
     };

package/codemods/v1-rename.map.json

@@ -15,6 +15,8 @@
         "consumer that spelled a key themselves gets the same symbol the platform",
         "now registers; without this their injection would resolve to nothing.",
         "",
+        "`packages` renames a whole package — in specifiers and in package.json.",
+        "",
         "`entryTokens` is keyed by the import specifier, because the old name",
         "meant different registries in different entries. An import of it from",
         "anywhere else is reported, not guessed."
@@ -41,5 +43,9 @@
     },
     "subpaths": {
         "@saasicat/ui-vue/testing-e2e/": "@saasicat/ui-vue/testing/"
+    },
+    "packages": {
+        "_": "A package that was renamed. Applied to import specifiers AND to the dependency fields of every package.json the walk meets: an import rewritten without its manifest does not resolve under pnpm.",
+        "@saasicat/types": "@saasicat/core"
     }
 }

package/dist/.build-stamp

@@ -1 +1 @@
-87fdb737df2d686fe3d296add0d87c2a3765371380b486e2ff20fda896b3db65
+97f66acb8ca26c7c9470c1991febbb2f68518f1b3cd364af6d3566249550482a

package/dist/index.cjs

@@ -111,6 +111,7 @@ __export(index_exports, {
   relationNameOf: () => relationNameOf,
   reportConstraints: () => reportConstraints,
   rewriteImports: () => rewriteImports,
+  rewriteManifest: () => rewriteManifest,
   rewriteNames: () => rewriteNames,
   rewriteSubpath: () => rewriteSubpath,
   stripLineComment: () => stripLineComment,
@@ -1999,6 +2000,13 @@ function rewriteNames(text, table) {
       return `${quote}${to}`;
     });
   }
+  for (const [from, to] of Object.entries(table.packages ?? {})) {
+    if (from === "_") continue;
+    next = next.replace(new RegExp(`${escape(from)}(?=['"\`/])`, "g"), () => {
+      rewritten += 1;
+      return to;
+    });
+  }
   for (const [from, to] of Object.entries(table.subpaths)) {
     next = next.replace(new RegExp(escape(from), "g"), () => {
       rewritten += 1;
@@ -2014,6 +2022,81 @@ function rewriteNames(text, table) {
   };
 }
 __name(rewriteNames, "rewriteNames");
+var DEPENDENCY_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "peerDependencies",
+  "optionalDependencies"
+];
+var UNTRANSLATABLE_RANGE = /^(workspace:|file:|link:|npm:|git\+|https?:)/;
+function rewriteManifest(text, table, options) {
+  const renames = Object.entries(table.packages ?? {}).filter(([from]) => from !== "_");
+  const ambiguous = [];
+  let manifest;
+  try {
+    manifest = JSON.parse(text);
+  } catch {
+    return {
+      text,
+      rewritten: 0,
+      ambiguous
+    };
+  }
+  let rewritten = 0;
+  for (const field of DEPENDENCY_FIELDS) {
+    const deps = manifest[field];
+    if (!deps || typeof deps !== "object") continue;
+    const entries = Object.entries(deps);
+    const renamed = entries.map(([name, range]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        range
+      ];
+      if (UNTRANSLATABLE_RANGE.test(range)) {
+        ambiguous.push(`${name} in ${field} (${range})`);
+        return [
+          name,
+          range
+        ];
+      }
+      rewritten += 1;
+      return [
+        to,
+        options.targetRange
+      ];
+    });
+    manifest[field] = Object.fromEntries(renamed);
+  }
+  const meta = manifest.peerDependenciesMeta;
+  if (meta && typeof meta === "object") {
+    manifest.peerDependenciesMeta = Object.fromEntries(Object.entries(meta).map(([name, flags]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        flags
+      ];
+      rewritten += 1;
+      return [
+        to,
+        flags
+      ];
+    }));
+  }
+  if (rewritten === 0) return {
+    text,
+    rewritten: 0,
+    ambiguous
+  };
+  const indent = /^[ \t]+/m.exec(text)?.[0] ?? "    ";
+  const trailing = text.endsWith("\n") ? "\n" : "";
+  return {
+    text: JSON.stringify(manifest, null, indent) + trailing,
+    rewritten,
+    ambiguous
+  };
+}
+__name(rewriteManifest, "rewriteManifest");
 
 // src/init/patch-app-module.ts
 var MARKER = "SaaSiCatModule.forRoot";
@@ -3272,6 +3355,7 @@ UserCommands = _ts_decorate14([
   relationNameOf,
   reportConstraints,
   rewriteImports,
+  rewriteManifest,
   rewriteNames,
   rewriteSubpath,
   stripLineComment,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
 import { MfaService, AdminAuditService, AdminManifestService, DiscoverySnapshot, ProviderSpec, DiscoveryScanner } from '@saasicat/nest';
-import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/types';
+import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/core';
 import { Type, DynamicModule } from '@nestjs/common';
 import { CommandRunner } from 'nest-commander';
 
@@ -878,6 +878,13 @@ interface RenameTable {
     readonly entryTokens: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** A module specifier prefix and its replacement. */
     readonly subpaths: Readonly<Record<string, string>>;
+    /**
+     * A package that was renamed. Rewritten in specifiers by `rewriteNames`
+     * and in `package.json` dependency fields by `rewriteManifest` — both,
+     * because an import a manifest does not declare fails to resolve under
+     * pnpm's isolated `node_modules`.
+     */
+    readonly packages?: Readonly<Record<string, string>>;
 }
 interface RenameResult {
     readonly text: string;
@@ -903,6 +910,26 @@ declare function namedImports(text: string): Array<{
 }>;
 /** Applies the table to one file's text. Idempotent: a second run changes nothing. */
 declare function rewriteNames(text: string, table: RenameTable): RenameResult;
+/**
+ * Applies the package renames to a `package.json` text.
+ *
+ * Parsed and re-serialised rather than string-replaced, so a rename lands in a
+ * dependency field and nowhere else — not in `name`, not in a description.
+ * The file's indentation is kept; a consumer's formatter must not see a diff
+ * it did not cause. Returns the text unchanged when nothing applied.
+ */
+interface ManifestRewriteOptions {
+    /**
+     * The range the renamed dependency gets — `^<the version this CLI was
+     * released as>`. The old range cannot be carried over: a 0.x consumer
+     * declares `"@saasicat/types": "^0.27.0"`, and `@saasicat/core` has no
+     * 0.27 — the rename starts on the 1.0 line. The caller passes the CLI's
+     * own version because that IS the line the consumer is migrating to;
+     * the codemod ships with it.
+     */
+    readonly targetRange: string;
+}
+declare function rewriteManifest(text: string, table: RenameTable, options: ManifestRewriteOptions): RenameResult;
 
 interface PatchAppModuleOptions {
     /** Import specifier for the persistence bundle, or null when not generated. */
@@ -1147,4 +1174,4 @@ declare class UserCommands extends CommandRunner {
     parsePassword(val: string): string;
 }
 
-export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };
+export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, type ManifestRewriteOptions, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteManifest, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import { MfaService, AdminAuditService, AdminManifestService, DiscoverySnapshot, ProviderSpec, DiscoveryScanner } from '@saasicat/nest';
-import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/types';
+import { UserPort, PlatformUserDto, AuditQueryPort, AuditEntry, AdminManifest, ManifestAccessPort, PlanCatalog, UserManagementPort } from '@saasicat/core';
 import { Type, DynamicModule } from '@nestjs/common';
 import { CommandRunner } from 'nest-commander';
 
@@ -878,6 +878,13 @@ interface RenameTable {
     readonly entryTokens: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** A module specifier prefix and its replacement. */
     readonly subpaths: Readonly<Record<string, string>>;
+    /**
+     * A package that was renamed. Rewritten in specifiers by `rewriteNames`
+     * and in `package.json` dependency fields by `rewriteManifest` — both,
+     * because an import a manifest does not declare fails to resolve under
+     * pnpm's isolated `node_modules`.
+     */
+    readonly packages?: Readonly<Record<string, string>>;
 }
 interface RenameResult {
     readonly text: string;
@@ -903,6 +910,26 @@ declare function namedImports(text: string): Array<{
 }>;
 /** Applies the table to one file's text. Idempotent: a second run changes nothing. */
 declare function rewriteNames(text: string, table: RenameTable): RenameResult;
+/**
+ * Applies the package renames to a `package.json` text.
+ *
+ * Parsed and re-serialised rather than string-replaced, so a rename lands in a
+ * dependency field and nowhere else — not in `name`, not in a description.
+ * The file's indentation is kept; a consumer's formatter must not see a diff
+ * it did not cause. Returns the text unchanged when nothing applied.
+ */
+interface ManifestRewriteOptions {
+    /**
+     * The range the renamed dependency gets — `^<the version this CLI was
+     * released as>`. The old range cannot be carried over: a 0.x consumer
+     * declares `"@saasicat/types": "^0.27.0"`, and `@saasicat/core` has no
+     * 0.27 — the rename starts on the 1.0 line. The caller passes the CLI's
+     * own version because that IS the line the consumer is migrating to;
+     * the codemod ships with it.
+     */
+    readonly targetRange: string;
+}
+declare function rewriteManifest(text: string, table: RenameTable, options: ManifestRewriteOptions): RenameResult;
 
 interface PatchAppModuleOptions {
     /** Import specifier for the persistence bundle, or null when not generated. */
@@ -1147,4 +1174,4 @@ declare class UserCommands extends CommandRunner {
     parsePassword(val: string): string;
 }
 
-export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };
+export { AUDIT_QUERY_PORT_TOKEN, AdminCommands, AdminManifestDoctorCheck, AdminMfaSetupCommand, AdminWhoamiCommand, type ApplyResult, AuditCommands, AuditTailCommand, AuditTailFlow, type AuditTailOptions, type BlockAttributeKind, type BlockAttributes, CLI_CONTEXT_CONFIG_TOKEN, CONSTRAINTS_MARKER, type CheckSeverity, type CliContextConfig, CliContextModule, type CliContextModuleOptions, CliContextService, CliError, type CliIdentity, type ConstraintsOutcome, type ConstraintsReport, DEFAULT_MANIFEST_CHECKS, DOCTOR_CHECKS_TOKEN, DiscoveryCommands, DiscoveryScanCommand, DiscoverySnapshotDoctorCheck, type DoctorCheck, type DoctorCheckResult, DoctorCommands, DoctorFlow, type DoctorReport, type EnableFkResult, type FieldMismatch, type FieldMismatchReason, type FieldSignature, type FkModelNames, type FkPointer, type InitOptions, type InitPlan, LIMIT_FILTER_IMPORTS, LIMIT_FILTER_PROVIDER, MANIFEST_ACCESS_PORT_TOKEN, MANIFEST_CHECKS_TOKEN, type ManifestCheck, ManifestCheckCommand, type ManifestCheckReport, type ManifestCheckResult, ManifestCliFlow, ManifestCommands, type ManifestDiff, ManifestDumpCommand, ManifestHashCommand, type ManifestRewriteOptions, ManifestValidateCommand, MfaSetupFlow, type MfaSetupOptions, type MfaSetupResult, type MissingBlockAttribute, type MissingEnumValue, type MissingField, type MoveTable, PLATFORM_DOCTOR_CHECK_PROVIDERS, type ParsedSchema, type PatchAppModuleOptions, type PatchOptionsFromPlan, type PatchResult, PlanCatalogDoctorCheck, type PlannedFile, type QuotaProviderFile, type QuotaSpec, type RenameResult, type RenameTable, type RewriteResult, type SchemaCheckReport, UI_VUE_SPECIFIER, USER_MANAGEMENT_PORT_TOKEN, USER_PORT_TOKEN, UserCommands, UserPortDoctorCheck, WhoAmIFlow, type WhoAmIResult, appendConstraints, applyFragmentBlocks, applyTokens, assertModelsExist, assertValidProjectKey, assertValidQuotaKey, blankStringLiterals, blockBodyLines, breaksContract, buildImportMap, checkSchema, constraintsFor, enableFkPointers, extractBlockNames, extractBlocks, extractModelBlocks, extractModelNames, findFkPointers, foreignKeyOf, hasBackRelation, hasConstraints, isNoLongerPublic, isOneToOne, kebabCase, migrationCreatedBy, minimumQuotasPerPlan, namedImports, parseBlockAttributes, parseEnumValues, parseFields, parseQuota, parseSchema, pascalCase, patchAppModule, patchOptionsFor, planInit, projectKeyPattern, quotaKeyPattern, relationNameOf, reportConstraints, rewriteImports, rewriteManifest, rewriteNames, rewriteSubpath, stripLineComment, structuralOnly, tablesAddressedBy };

package/dist/index.js

@@ -1881,6 +1881,13 @@ function rewriteNames(text, table) {
       return `${quote}${to}`;
     });
   }
+  for (const [from, to] of Object.entries(table.packages ?? {})) {
+    if (from === "_") continue;
+    next = next.replace(new RegExp(`${escape(from)}(?=['"\`/])`, "g"), () => {
+      rewritten += 1;
+      return to;
+    });
+  }
   for (const [from, to] of Object.entries(table.subpaths)) {
     next = next.replace(new RegExp(escape(from), "g"), () => {
       rewritten += 1;
@@ -1896,6 +1903,81 @@ function rewriteNames(text, table) {
   };
 }
 __name(rewriteNames, "rewriteNames");
+var DEPENDENCY_FIELDS = [
+  "dependencies",
+  "devDependencies",
+  "peerDependencies",
+  "optionalDependencies"
+];
+var UNTRANSLATABLE_RANGE = /^(workspace:|file:|link:|npm:|git\+|https?:)/;
+function rewriteManifest(text, table, options) {
+  const renames = Object.entries(table.packages ?? {}).filter(([from]) => from !== "_");
+  const ambiguous = [];
+  let manifest;
+  try {
+    manifest = JSON.parse(text);
+  } catch {
+    return {
+      text,
+      rewritten: 0,
+      ambiguous
+    };
+  }
+  let rewritten = 0;
+  for (const field of DEPENDENCY_FIELDS) {
+    const deps = manifest[field];
+    if (!deps || typeof deps !== "object") continue;
+    const entries = Object.entries(deps);
+    const renamed = entries.map(([name, range]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        range
+      ];
+      if (UNTRANSLATABLE_RANGE.test(range)) {
+        ambiguous.push(`${name} in ${field} (${range})`);
+        return [
+          name,
+          range
+        ];
+      }
+      rewritten += 1;
+      return [
+        to,
+        options.targetRange
+      ];
+    });
+    manifest[field] = Object.fromEntries(renamed);
+  }
+  const meta = manifest.peerDependenciesMeta;
+  if (meta && typeof meta === "object") {
+    manifest.peerDependenciesMeta = Object.fromEntries(Object.entries(meta).map(([name, flags]) => {
+      const to = renames.find(([from]) => from === name)?.[1];
+      if (!to) return [
+        name,
+        flags
+      ];
+      rewritten += 1;
+      return [
+        to,
+        flags
+      ];
+    }));
+  }
+  if (rewritten === 0) return {
+    text,
+    rewritten: 0,
+    ambiguous
+  };
+  const indent = /^[ \t]+/m.exec(text)?.[0] ?? "    ";
+  const trailing = text.endsWith("\n") ? "\n" : "";
+  return {
+    text: JSON.stringify(manifest, null, indent) + trailing,
+    rewritten,
+    ambiguous
+  };
+}
+__name(rewriteManifest, "rewriteManifest");
 
 // src/init/patch-app-module.ts
 var MARKER = "SaaSiCatModule.forRoot";
@@ -3153,6 +3235,7 @@ export {
   relationNameOf,
   reportConstraints,
   rewriteImports,
+  rewriteManifest,
   rewriteNames,
   rewriteSubpath,
   stripLineComment,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saasicat/cli",
-  "version": "1.0.0-rc.0",
+  "version": "1.0.0-rc.1",
   "description": "CLI helpers for SaaS platform consumers. Provides CliContextService (identity, MFA, production confirm, audit tag).",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -29,9 +29,9 @@
   },
   "dependencies": {
     "qrcode-terminal": "^0.12.0",
-    "@saasicat/nest": "^1.0.0-rc.0",
-    "@saasicat/spec": "^1.0.0-rc.0",
-    "@saasicat/types": "^1.0.0-rc.0"
+    "@saasicat/nest": "^1.0.0-rc.1",
+    "@saasicat/spec": "^1.0.0-rc.1",
+    "@saasicat/core": "^1.0.0-rc.1"
   },
   "peerDependencies": {
     "@nestjs/common": "^11.0.0",
@@ -59,7 +59,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "node ../../scripts/build-and-prune.mjs \"tsup src/index.ts --format esm,cjs --dts --external @saasicat/types --external @saasicat/nest --external @nestjs/common --external nest-commander --external qrcode-terminal\"",
+    "build": "node ../../scripts/build-and-prune.mjs \"tsup src/index.ts --format esm,cjs --dts --external @saasicat/core --external @saasicat/nest --external @nestjs/common --external nest-commander --external qrcode-terminal\"",
     "pretest": "pnpm run build",
     "test": "node --test 'tests/*.test.js'"
   }

package/templates/init/src/auth/password.hasher.ts.tpl

@@ -1,6 +1,6 @@
 import { randomBytes, scryptSync, timingSafeEqual } from 'node:crypto';
 import { Injectable } from '@nestjs/common';
-import type { PasswordHasher } from '@saasicat/types';
+import type { PasswordHasher } from '@saasicat/core';
 
 const KEY_LENGTH = 64;
 

package/templates/init/src/saas/admin-manifest.contribution.ts.tpl

@@ -1,4 +1,4 @@
-import type { ManifestContribution } from '@saasicat/types';
+import type { ManifestContribution } from '@saasicat/core';
 
 /**
  * What this app adds to the SuperAdmin UI.

package/templates/init/src/saas/feature-ui-registry.ts.tpl

@@ -1,4 +1,4 @@
-import type { FeatureUiRegistry } from '@saasicat/types';
+import type { FeatureUiRegistry } from '@saasicat/core';
 
 /**
  * Labels and icons for the feature and quota keys discovery finds in your code.

package/templates/init/src/saas/quota.provider.ts.tpl

@@ -1,6 +1,6 @@
 import { Injectable } from '@nestjs/common';
 import { DefinesQuota } from '@saasicat/nest/discovery';
-import type { QuotaProvider } from '@saasicat/types';
+import type { QuotaProvider } from '@saasicat/core';
 
 import { PrismaService } from '../prisma/prisma.service';